Function at 0x1009a070
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
mov ebx, ecx
mov eax, 0x2710
push edi
mov edi, 1
mov dword [esp + 0x1c], ebx
mov edx, edi
mov dword [esp + 0x10], eax
mov dword [ebx], 0
mov esi, 0x64
nop dword [eax]
mov ecx, esi
imul ecx, edx
imul ecx, edx
mov dword [ebx + edx*4], ecx
cmp edx, 0xff
jle 0x1009a0cc
imul eax, edi
imul eax, edi
inc edi
add eax, ecx
mov dword [ebx + edx*4], eax
mov eax, dword [esp + 0x10]
add eax, 0x3e8
mov dword [esp + 0x10], eax
add esi, 0xa
inc edx
cmp esi, 0xffa
jle 0x1009a0a0
mov dword [ebx + 0x648], 0
mov eax, 1
mov dword [ebx + 0x64c], 0
add ebx, 0x650
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebx
nop
add eax, 0x190
cdq
mov edi, eax
mov dword [esp + 0x10], eax
add edi, 0xffffff01
mov ebx, edx
mov esi, ebx
mov ecx, edi
adc esi, 0xffffffff
add ecx, 9
push esi
mov eax, esi
push edi
adc eax, 0
push eax
push ecx
call fcn.100e1280
push esi
push edi
push edx
push eax
call fcn.100e1280
mov ecx, eax
mov esi, 0x64
mov eax, edx
mul esi
push ebx
mov edi, eax
mov eax, ecx
mul esi
mov ecx, ebx
add edi, edx
mov esi, eax
mov eax, dword [esp + 0x14]
mov edx, eax
add edx, 9
push eax
adc ecx, 0
push ecx
push edx
call fcn.100e1280
push ebx
push dword [esp + 0x14]
push edx
push eax
call fcn.100e1280
add esi, eax
mov eax, esi
adc edi, edx
mov ecx, edi
shld ecx, eax, 2
shl eax, 2
add esi, eax
mov eax, dword [esp + 0x14]
adc edi, ecx
mov ecx, dword [esp + 0x18]
shld edi, esi, 1
add esi, esi
add esi, 0x1800fa70
adc edi, 0xffffffff
inc eax
shrd esi, edi, 1
mov dword [esp + 0x14], eax
shr edi, 1
mov dword [ecx], esi
mov dword [ecx + 4], edi
add ecx, 8
mov dword [esp + 0x18], ecx
cmp eax, 0x3e9
jl 0x1009a100
mov edi, dword [ebp + 8]
mov esi, dword [esp + 0x1c]
test edi, edi
jne 0x1009a1cb
mov ecx, esi
call fcn.1009d4e0
mov ecx, dword [0x102c724c]
test ecx, ecx
jne 0x1009a810
push ecx
push ecx
call fcn.1002bab0
call fcn.10019f80
push 0x100980a0
push 0x80f865
push 0xe8
call fcn.100bec40
add esp, 0xc
cmp byte [esi + 0x25b8], 0
je 0x1009cda2
push 0x10098b10
push 0x80ff28
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b10
push 0x8100bb
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b10
push 0x810389
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b10
push 0x810659
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b50
push 0x80ffa7
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b50
push 0x81013a
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b50
push 0x810408
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b50
push 0x8106ea
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098af0
push 0x80ff56
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098af0
push 0x8100e9
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098af0
push 0x8103b7
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098af0
push 0x810699
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098b70
push 0x80feef
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098c00
push 0x80fe56
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098c90
push 0x810083
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098d20
push 0x810354
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098db0
push 0x810624
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10099540
push 0x8119e6
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098870
push 0x80f92d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098940
push 0x80f968
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098a30
push 0x80f9a3
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10098940
push 0x80fa02
push 0xe8
call fcn.100bec40
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x28]
add esp, 0xc
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10098e40
push 0x895a49
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x10098f30
push 0x895abe
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x10099020
push 0x895b33
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x10099110
push 0x895ba8
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10099200
push 0x812713
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10099290
push 0x812947
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x10099320
push 0x812a76
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100993b0
push 0x8139a0
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100994a0
push 0x812d3f
push 0xe9
call fcn.100bec40
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ecx - 1]
cmp eax, 2
ja 0x1009b18f
mov eax, dword [0x107e7b70]
movss xmm3, dword [0x100f1cfc]
movss xmm4, dword [0x100f1d7c]
mov dword [0x102a57b8], 0
movd xmm2, eax
mov word [0x102a57bc], 0
mov dword [0x102a579c], 0x7a98
mov dword [0x102a57a0], 0x41c00000
mov dword [0x102a57a4], 0x41c00000
mov dword [0x102a57ac], 0x43e20000
mov dword [0x102a57b4], 0x43ee0000
mov byte [0x102a57be], 0
mov dword [0x102a5818], 0
mov word [0x102a581c], 0
mov dword [0x102a57fc], 0x7a95
mov dword [0x102a5800], 0x41c00000
mov dword [0x102a5804], 0x41c00000
mov dword [0x102a580c], 0x43e20000
mov dword [0x102a5814], 0x43ee0000
mov byte [0x102a581e], 0
mov dword [0x102a5878], 0
mov word [0x102a587c], 0
mov dword [0x102a585c], 0x7a97
mov dword [0x102a5860], 0x41c00000
mov dword [0x102a5864], 0x41c00000
mov dword [0x102a586c], 0x43e20000
mov dword [0x102a5874], 0x43ee0000
mov byte [0x102a587e], 0
mov dword [0x102a5998], 0
mov word [0x102a599c], 0
mov dword [0x102a597c], 0x7aa2
mov dword [0x102a5980], 0x42580000
mov dword [0x102a5984], 0x41a00000
mov dword [0x102a598c], 0x43e58000
mov dword [0x102a5994], 0x43ef8000
mov byte [0x102a599e], 0
cvtdq2pd xmm2, xmm2
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1b40]
cvtpd2ps xmm1, xmm0
movaps xmm0, xmm2
movss dword [0x102a57a8], xmm1
addss xmm1, xmm3
addsd xmm0, qword [0x100f1b58]
movss dword [0x102a57b0], xmm1
cvtpd2ps xmm0, xmm0
movss dword [0x102a5808], xmm0
addss xmm0, xmm3
movss dword [0x102a5810], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1b80]
cvtpd2ps xmm0, xmm0
movss dword [0x102a5868], xmm0
addss xmm0, xmm3
movss dword [0x102a5870], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c50]
cvtpd2ps xmm1, xmm0
movss dword [0x102a5988], xmm1
addss xmm1, xmm4
movss dword [0x102a5990], xmm1
cmp ecx, 2
jb 0x1009aae1
movaps xmm0, xmm2
mov dword [0x102a59f8], 0
addsd xmm0, qword [0x100f1c48]
add eax, 5
mov word [0x102a59fc], 0
mov dword [0x102a59dc], 0x7aa2
mov dword [0x102a59e0], 0x42580000
mov dword [0x102a59e4], 0x41a00000
cvtpd2ps xmm1, xmm0
mov dword [0x102a59ec], 0x43d80000
mov dword [0x102a59f4], 0x43e20000
mov byte [0x102a59fe], 0
mov dword [0x102a5938], 0
mov word [0x102a593c], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov dword [0x102a591c], 0x7aa2
mov dword [0x102a5920], 0x425c0000
mov dword [0x102a5924], 0x41a80000
mov dword [0x102a592c], 0x43d80000
movss dword [0x102a59e8], xmm1
addss xmm1, xmm4
movss dword [0x102a5928], xmm0
addss xmm0, dword [0x100f1d80]
mov dword [0x102a5934], 0x43e28000
mov byte [0x102a593e], 0
movss dword [0x102a59f0], xmm1
movss dword [0x102a5930], xmm0
cmp ecx, 3
jb 0x1009ab52
addsd xmm2, qword [0x100f1ba0]
mov dword [0x102a58d8], 0
mov word [0x102a58dc], 0
mov dword [0x102a58bc], 0x7aa2
mov dword [0x102a58c0], 0x41c00000
cvtpd2ps xmm0, xmm2
mov dword [0x102a58c4], 0x41c00000
mov dword [0x102a58cc], 0x43e20000
mov dword [0x102a58d4], 0x43ee0000
mov byte [0x102a58de], 0
movss dword [0x102a58c8], xmm0
addss xmm0, xmm3
movss dword [0x102a58d0], xmm0
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x1c]
mov byte [0x813c1a], 0x1e
push eax
push dword [esp + 0x20]
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x1c]
mov byte [0x812ad5], 0
push eax
push dword [esp + 0x20]
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x813740
call esi
lea eax, [esp + 0x1c]
mov byte [0x813740], 0xc3
push eax
push dword [esp + 0x20]
push 1
push 0x813740
call esi
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x100947d0
push 0x80f7fe
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10095330
push 0x80f833
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x100953e0
push 0x80f845
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10095770
push 0x80f84d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10095900
push 0x80f855
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10095a90
push 0x80f865
push 0xe8
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10095f20
push 0x812713
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10095fb0
push 0x812947
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x10096040
push 0x8139a0
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100960e0
push 0x812d3f
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100911a0
push 0x813cbc
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x10091230
push 0x8130aa
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10096180
push 0x895a49
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x10096270
push 0x895abe
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x10096360
push 0x895b33
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x10092ba0
push 0x895ba8
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd43668
call esi
lea eax, [esp + 0x1c]
mov dword [0xd43668], 0x43d78000
push eax
push dword [esp + 0x20]
push 4
push 0xd43668
call esi
push 0x100969d0
push 0x7db308
push 0xe9
call fcn.100bec40
add esp, 0xc
push 0x100969f0
push 0x7db5d0
push 0xe8
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x1c]
mov byte [0x4d9749], 0xe0
push eax
push dword [esp + 0x20]
push 1
push 0x4d9749
call esi
push edi
push 1
call fcn.1002bab0
jmp 0x1009cbf5
cmp ecx, 4
jne 0x1009b56a
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x1008ce40
push 0x80f7fe
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x1008ce70
push 0x80f833
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x1008f1c0
push 0x80f84d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x1008f500
push 0x80f855
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x1008f800
push 0x80f865
push 0xe8
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10090ea0
push 0x812713
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10090f30
push 0x812947
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x10090fd0
push 0x812a76
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x10091060
push 0x8139a0
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x10091100
push 0x812d3f
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100911a0
push 0x813cbc
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x10091230
push 0x8130aa
push 0xe9
call fcn.100bec40
add esp, 0xc
push 0x10097c50
push 0x89599e
push 0xe8
jmp 0x1009cbc3
cmp ecx, 5
jne 0x1009bdbf
movd xmm2, dword [0x107e7b70]
cvtdq2pd xmm2, xmm2
mov dword [0x102a58d8], 0
mov word [0x102a58dc], 0
mov dword [0x102a58bc], 0x7abc
mov dword [0x102a58c0], 0x41a00000
mov dword [0x102a58c4], 0x41a00000
movss xmm3, dword [0x100f1ce8]
movaps xmm0, xmm2
mov dword [0x102a58cc], 0x43e10000
addsd xmm0, qword [0x100f18c0]
mov dword [0x102a58d4], 0x43eb0000
mov byte [0x102a58de], 0
mov dword [0x102a5818], 0
mov word [0x102a581c], 0
cvtpd2ps xmm1, xmm0
mov dword [0x102a57fc], 0x7abf
mov dword [0x102a5800], 0x41a00000
mov dword [0x102a5804], 0x41a00000
mov dword [0x102a580c], 0x43e10000
mov dword [0x102a5814], 0x43eb0000
movaps xmm0, xmm2
mov byte [0x102a581e], 0
addsd xmm0, qword [0x100f1940]
movss dword [0x102a58c8], xmm1
addss xmm1, xmm3
mov dword [0x102a5878], 0
mov word [0x102a587c], 0
mov dword [0x102a585c], 0x7ac1
cvtpd2ps xmm0, xmm0
mov dword [0x102a5860], 0x41a00000
mov dword [0x102a5864], 0x41a00000
mov dword [0x102a586c], 0x43e10000
mov dword [0x102a5874], 0x43eb0000
mov byte [0x102a587e], 0
movss dword [0x102a58d0], xmm1
movss dword [0x102a5808], xmm0
addss xmm0, xmm3
mov dword [0x102a5a58], 0
mov word [0x102a5a5c], 0
mov dword [0x102a5a3c], 0x7ac2
mov dword [0x102a5a40], 0x41a00000
movss dword [0x102a5810], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1980]
mov dword [0x102a5a44], 0x41a00000
mov dword [0x102a5a4c], 0x43e10000
mov dword [0x102a5a54], 0x43eb0000
mov byte [0x102a5a5e], 0
cvtpd2ps xmm0, xmm0
mov dword [0x102a59f8], 0
mov word [0x102a59fc], 0
mov dword [0x102a59dc], 0x7ac3
mov dword [0x102a59e0], 0x41a00000
mov dword [0x102a59e4], 0x41a00000
mov dword [0x102a59ec], 0x43e10000
movss dword [0x102a5868], xmm0
addss xmm0, xmm3
mov dword [0x102a59f4], 0x43eb0000
mov byte [0x102a59fe], 0
mov dword [0x102a5938], 0
mov word [0x102a593c], 0
movss dword [0x102a5870], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c10]
mov dword [0x102a591c], 0x7aa2
mov dword [0x102a5920], 0x41a00000
mov dword [0x102a5924], 0x41a00000
cvtpd2ps xmm0, xmm0
movss dword [0x102a5a48], xmm0
addss xmm0, xmm3
movss dword [0x102a5a50], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c20]
addsd xmm2, qword [0x100f1c38]
cvtpd2ps xmm0, xmm0
movss dword [0x102a59e8], xmm0
addss xmm0, xmm3
movss dword [0x102a59f0], xmm0
cvtpd2ps xmm0, xmm2
movss dword [0x102a5928], xmm0
addss xmm0, xmm3
mov dword [0x102a592c], 0x43e10000
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
mov dword [0x102a5934], 0x43eb0000
movss dword [0x102a5930], xmm0
mov byte [0x102a593e], 0
call fcn.100bec40
add esp, 0xc
push 0x1008ce40
push 0x80f7fe
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x100912c0
push 0x80f833
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10091db0
push 0x80f84d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10091f40
push 0x80f855
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x100920c0
push 0x80f865
push 0xe8
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100924c0
push 0x812713
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10092550
push 0x812947
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100925e0
push 0x812a76
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x10092670
push 0x8139a0
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x10092710
push 0x812d3f
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100927b0
push 0x813cbc
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x10092840
push 0x8130aa
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x100928d0
push 0x895a49
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100929c0
push 0x895abe
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x10092ab0
push 0x895b33
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x10092c90
jmp 0x1009cbb9
cmp ecx, 6
jne 0x1009c614
movd xmm2, dword [0x107e7b70]
cvtdq2pd xmm2, xmm2
mov dword [0x102a58d8], 0
mov word [0x102a58dc], 0
mov dword [0x102a58bc], 0x7abc
mov dword [0x102a58c0], 0x41a00000
mov dword [0x102a58c4], 0x41a00000
movss xmm3, dword [0x100f1ce8]
movaps xmm0, xmm2
mov dword [0x102a58cc], 0x43e10000
addsd xmm0, qword [0x100f18c0]
mov dword [0x102a58d4], 0x43eb0000
mov byte [0x102a58de], 0
mov dword [0x102a5818], 0
mov word [0x102a581c], 0
cvtpd2ps xmm1, xmm0
mov dword [0x102a57fc], 0x7abf
mov dword [0x102a5800], 0x41a00000
mov dword [0x102a5804], 0x41a00000
mov dword [0x102a580c], 0x43e10000
mov dword [0x102a5814], 0x43eb0000
movaps xmm0, xmm2
mov byte [0x102a581e], 0
addsd xmm0, qword [0x100f1940]
movss dword [0x102a58c8], xmm1
addss xmm1, xmm3
mov dword [0x102a5878], 0
mov word [0x102a587c], 0
mov dword [0x102a585c], 0x7ac1
cvtpd2ps xmm0, xmm0
mov dword [0x102a5860], 0x41a00000
mov dword [0x102a5864], 0x41a00000
mov dword [0x102a586c], 0x43e10000
mov dword [0x102a5874], 0x43eb0000
mov byte [0x102a587e], 0
movss dword [0x102a58d0], xmm1
movss dword [0x102a5808], xmm0
addss xmm0, xmm3
mov dword [0x102a5a58], 0
mov word [0x102a5a5c], 0
mov dword [0x102a5a3c], 0x7ac2
mov dword [0x102a5a40], 0x41a00000
movss dword [0x102a5810], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1980]
mov dword [0x102a5a44], 0x41a00000
mov dword [0x102a5a4c], 0x43e10000
mov dword [0x102a5a54], 0x43eb0000
mov byte [0x102a5a5e], 0
cvtpd2ps xmm0, xmm0
mov dword [0x102a59f8], 0
mov word [0x102a59fc], 0
mov dword [0x102a59dc], 0x7ac3
mov dword [0x102a59e0], 0x41a00000
mov dword [0x102a59e4], 0x41a00000
mov dword [0x102a59ec], 0x43e10000
movss dword [0x102a5868], xmm0
addss xmm0, xmm3
mov dword [0x102a59f4], 0x43eb0000
mov byte [0x102a59fe], 0
mov dword [0x102a5938], 0
mov word [0x102a593c], 0
movss dword [0x102a5870], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c10]
mov dword [0x102a591c], 0x7aa2
mov dword [0x102a5920], 0x41a00000
mov dword [0x102a5924], 0x41a00000
cvtpd2ps xmm0, xmm0
movss dword [0x102a5a48], xmm0
addss xmm0, xmm3
movss dword [0x102a5a50], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c20]
addsd xmm2, qword [0x100f1c38]
cvtpd2ps xmm0, xmm0
movss dword [0x102a59e8], xmm0
addss xmm0, xmm3
movss dword [0x102a59f0], xmm0
cvtpd2ps xmm0, xmm2
movss dword [0x102a5928], xmm0
addss xmm0, xmm3
mov dword [0x102a592c], 0x43e10000
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
mov dword [0x102a5934], 0x43eb0000
movss dword [0x102a5930], xmm0
mov byte [0x102a593e], 0
call fcn.100bec40
add esp, 0xc
push 0x1008ce40
push 0x80f7fe
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10092d80
push 0x80f833
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10093870
push 0x80f84d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10093a00
push 0x80f855
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10093b80
push 0x80f865
push 0xe8
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10093ff0
push 0x812713
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10094080
push 0x812947
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x10094110
push 0x812a76
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100941a0
push 0x8139a0
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x10094240
push 0x812d3f
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100942e0
push 0x813cbc
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x10094370
push 0x8130aa
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10094400
push 0x895a49
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100944f0
push 0x895abe
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100945e0
push 0x895b33
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100946d0
jmp 0x1009cbb9
cmp ecx, 7
jne 0x1009cbd5
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x1008ce40
push 0x80f7fe
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10096fb0
push 0x80f833
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f84d
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f855
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bec40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f865
push 0xe8
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10093ff0
push 0x812713
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10094080
push 0x812947
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x10094110
push 0x812a76
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100941a0
push 0x8139a0
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2c10
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x10094240
push 0x812d3f
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100942e0
push 0x813cbc
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x10094370
push 0x8130aa
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10097050
push 0x895a49
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x10097140
push 0x895abe
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x10097230
push 0x895b33
push 0xe9
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x10097320
push 0x895ba8
push 0xe9
call fcn.100bec40
add esp, 0xc
push edi
push 2
call fcn.1002bab0
jmp 0x1009cbf5
push 0
push 0
call fcn.1002bab0
push 0x100980a0
push 0x80f865
push 0xe8
call fcn.100bec40
add esp, 0xc
mov eax, dword [0x102c724c]
add eax, 0xfffffffc
cmp eax, 3
ja 0x1009cd9d
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd43848
call esi
lea eax, [esp + 0x1c]
mov dword [0xd43848], 0x42c66666
push eax
push dword [esp + 0x20]
push 4
push 0xd43848
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x1c]
mov byte [0x4d9749], 0xe0
push eax
push dword [esp + 0x20]
push 1
push 0x4d9749
call esi
push 0x10071580
push 0x40f2e9
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10071580
push 0x48007c
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10071580
push 0x4d9756
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10071580
push 0x5db4d5
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10097c10
push 0x81a146
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x10097c10
push 0x81a199
push 0xe8
call fcn.100bec40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd46924
call esi
lea eax, [esp + 0x1c]
mov dword [0xd46924], 0x43f00000
push eax
push dword [esp + 0x20]
push 4
push 0xd46924
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 8
push 0xd46910
call esi
movsd xmm0, qword [0x100f1bd8]
lea eax, [esp + 0x1c]
push eax
movsd qword [0xd46910], xmm0
push dword [esp + 0x20]
push 8
push 0xd46910
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd2c2a0
call esi
lea eax, [esp + 0x1c]
mov dword [0xd2c2a0], 0x43f00000
push eax
push dword [esp + 0x20]
push 4
push 0xd2c2a0
call esi
push 0x100978d0
push 0x834700
push 0xe8
call fcn.100bec40
add esp, 0xc
push 0x1001d530
push 0x4d9cdb
push 0xe8
call fcn.100bec40
add esp, 0xc
call fcn.10019f80
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4