Function at 0x100a9950
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
mov ebx, ecx
mov eax, 0x2710
push edi
mov edi, 1
mov dword [esp + 0x1c], ebx
mov edx, edi
mov dword [esp + 0x10], eax
mov dword [ebx], 0
mov esi, 0x64
nop dword [eax]
mov ecx, esi
imul ecx, edx
imul ecx, edx
mov dword [ebx + edx*4], ecx
cmp edx, 0xff
jle 0x100a99ac
imul eax, edi
imul eax, edi
inc edi
add eax, ecx
mov dword [ebx + edx*4], eax
mov eax, dword [esp + 0x10]
add eax, 0x3e8
mov dword [esp + 0x10], eax
add esi, 0xa
inc edx
cmp esi, 0xffa
jle 0x100a9980
mov dword [ebx + 0x648], 0
mov eax, 1
mov dword [ebx + 0x64c], 0
add ebx, 0x650
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebx
nop
add eax, 0x190
cdq
mov edi, eax
mov dword [esp + 0x10], eax
add edi, 0xffffff01
mov ebx, edx
mov esi, ebx
mov ecx, edi
adc esi, 0xffffffff
add ecx, 9
push esi
mov eax, esi
push edi
adc eax, 0
push eax
push ecx
call fcn.100f3590
push esi
push edi
push edx
push eax
call fcn.100f3590
mov ecx, eax
mov esi, 0x64
mov eax, edx
mul esi
push ebx
mov edi, eax
mov eax, ecx
mul esi
mov ecx, ebx
add edi, edx
mov esi, eax
mov eax, dword [esp + 0x14]
mov edx, eax
add edx, 9
push eax
adc ecx, 0
push ecx
push edx
call fcn.100f3590
push ebx
push dword [esp + 0x14]
push edx
push eax
call fcn.100f3590
add esi, eax
mov eax, esi
adc edi, edx
mov ecx, edi
shld ecx, eax, 2
shl eax, 2
add esi, eax
mov eax, dword [esp + 0x14]
adc edi, ecx
mov ecx, dword [esp + 0x18]
shld edi, esi, 1
add esi, esi
add esi, 0x1800fa70
adc edi, 0xffffffff
inc eax
shrd esi, edi, 1
mov dword [esp + 0x14], eax
shr edi, 1
mov dword [ecx], esi
mov dword [ecx + 4], edi
add ecx, 8
mov dword [esp + 0x18], ecx
cmp eax, 0x3e9
jl 0x100a99e0
mov edi, dword [ebp + 8]
mov esi, dword [esp + 0x1c]
test edi, edi
jne 0x100a9aab
mov ecx, esi
call fcn.100acd80
mov ecx, dword [0x102e1760]
test ecx, ecx
jne 0x100aa0f0
push ecx
push ecx
call fcn.1002c9d0
call fcn.1001a1d0
push 0x100a7710
push 0x80f865
push 0xe8
call fcn.100d0e40
add esp, 0xc
cmp byte [esi + 0x25b8], 0
je 0x100ac682
push 0x100a8180
push 0x80ff28
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8180
push 0x8100bb
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8180
push 0x810389
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8180
push 0x810659
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a81c0
push 0x80ffa7
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a81c0
push 0x81013a
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a81c0
push 0x810408
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a81c0
push 0x8106ea
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8160
push 0x80ff56
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8160
push 0x8100e9
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8160
push 0x8103b7
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8160
push 0x810699
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a81e0
push 0x80feef
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8270
push 0x80fe56
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8300
push 0x810083
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8390
push 0x810354
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8420
push 0x810624
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a8bb0
push 0x8119e6
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a7ee0
push 0x80f92d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a7fb0
push 0x80f968
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a80a0
push 0x80f9a3
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a7fb0
push 0x80fa02
push 0xe8
call fcn.100d0e40
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x28]
add esp, 0xc
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x100a84b0
push 0x895a49
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100a85a0
push 0x895abe
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100a8690
push 0x895b33
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100a8780
push 0x895ba8
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100a8870
push 0x812713
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x100a8900
push 0x812947
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100a8990
push 0x812a76
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100a8a20
push 0x8139a0
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100a8b10
push 0x812d3f
push 0xe9
call fcn.100d0e40
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ecx - 1]
cmp eax, 2
ja 0x100aaa6f
mov eax, dword [0x11479250]
movss xmm3, dword [0x10103ef4]
movss xmm4, dword [0x10103f68]
mov dword [0x102bfc78], 0
movd xmm2, eax
mov word [0x102bfc7c], 0
mov dword [0x102bfc5c], 0x7a98
mov dword [0x102bfc60], 0x41c00000
mov dword [0x102bfc64], 0x41c00000
mov dword [0x102bfc6c], 0x43e20000
mov dword [0x102bfc74], 0x43ee0000
mov byte [0x102bfc7e], 0
mov dword [0x102bfcd8], 0
mov word [0x102bfcdc], 0
mov dword [0x102bfcbc], 0x7a95
mov dword [0x102bfcc0], 0x41c00000
mov dword [0x102bfcc4], 0x41c00000
mov dword [0x102bfccc], 0x43e20000
mov dword [0x102bfcd4], 0x43ee0000
mov byte [0x102bfcde], 0
mov dword [0x102bfd38], 0
mov word [0x102bfd3c], 0
mov dword [0x102bfd1c], 0x7a97
mov dword [0x102bfd20], 0x41c00000
mov dword [0x102bfd24], 0x41c00000
mov dword [0x102bfd2c], 0x43e20000
mov dword [0x102bfd34], 0x43ee0000
mov byte [0x102bfd3e], 0
mov dword [0x102bfe58], 0
mov word [0x102bfe5c], 0
mov dword [0x102bfe3c], 0x7aa2
mov dword [0x102bfe40], 0x42580000
mov dword [0x102bfe44], 0x41a00000
mov dword [0x102bfe4c], 0x43e58000
mov dword [0x102bfe54], 0x43ef8000
mov byte [0x102bfe5e], 0
cvtdq2pd xmm2, xmm2
movaps xmm0, xmm2
addsd xmm0, qword [0x10103d30]
cvtpd2ps xmm1, xmm0
movaps xmm0, xmm2
movss dword [0x102bfc68], xmm1
addss xmm1, xmm3
addsd xmm0, qword [0x10103d48]
movss dword [0x102bfc70], xmm1
cvtpd2ps xmm0, xmm0
movss dword [0x102bfcc8], xmm0
addss xmm0, xmm3
movss dword [0x102bfcd0], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103d70]
cvtpd2ps xmm0, xmm0
movss dword [0x102bfd28], xmm0
addss xmm0, xmm3
movss dword [0x102bfd30], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103e48]
cvtpd2ps xmm1, xmm0
movss dword [0x102bfe48], xmm1
addss xmm1, xmm4
movss dword [0x102bfe50], xmm1
cmp ecx, 2
jb 0x100aa3c1
movaps xmm0, xmm2
mov dword [0x102bfeb8], 0
addsd xmm0, qword [0x10103e40]
add eax, 5
mov word [0x102bfebc], 0
mov dword [0x102bfe9c], 0x7aa2
mov dword [0x102bfea0], 0x42580000
mov dword [0x102bfea4], 0x41a00000
cvtpd2ps xmm1, xmm0
mov dword [0x102bfeac], 0x43d80000
mov dword [0x102bfeb4], 0x43e20000
mov byte [0x102bfebe], 0
mov dword [0x102bfdf8], 0
mov word [0x102bfdfc], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov dword [0x102bfddc], 0x7aa2
mov dword [0x102bfde0], 0x425c0000
mov dword [0x102bfde4], 0x41a80000
mov dword [0x102bfdec], 0x43d80000
movss dword [0x102bfea8], xmm1
addss xmm1, xmm4
movss dword [0x102bfde8], xmm0
addss xmm0, dword [0x10103f6c]
mov dword [0x102bfdf4], 0x43e28000
mov byte [0x102bfdfe], 0
movss dword [0x102bfeb0], xmm1
movss dword [0x102bfdf0], xmm0
cmp ecx, 3
jb 0x100aa432
addsd xmm2, qword [0x10103d98]
mov dword [0x102bfd98], 0
mov word [0x102bfd9c], 0
mov dword [0x102bfd7c], 0x7aa2
mov dword [0x102bfd80], 0x41c00000
cvtpd2ps xmm0, xmm2
mov dword [0x102bfd84], 0x41c00000
mov dword [0x102bfd8c], 0x43e20000
mov dword [0x102bfd94], 0x43ee0000
mov byte [0x102bfd9e], 0
movss dword [0x102bfd88], xmm0
addss xmm0, xmm3
movss dword [0x102bfd90], xmm0
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x1c]
mov byte [0x813c1a], 0x1e
push eax
push dword [esp + 0x20]
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x1c]
mov byte [0x812ad5], 0
push eax
push dword [esp + 0x20]
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x813740
call esi
lea eax, [esp + 0x1c]
mov byte [0x813740], 0xc3
push eax
push dword [esp + 0x20]
push 1
push 0x813740
call esi
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a3e00
push 0x80f7fe
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a4960
push 0x80f833
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a4a10
push 0x80f845
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a4da0
push 0x80f84d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a4f30
push 0x80f855
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a50c0
push 0x80f865
push 0xe8
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100a5550
push 0x812713
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x100a55e0
push 0x812947
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100a5670
push 0x8139a0
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100a5710
push 0x812d3f
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100a07e0
push 0x813cbc
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100a0870
push 0x8130aa
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x100a57b0
push 0x895a49
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100a58a0
push 0x895abe
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100a5990
push 0x895b33
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100a21e0
push 0x895ba8
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd43668
call esi
lea eax, [esp + 0x1c]
mov dword [0xd43668], 0x43d78000
push eax
push dword [esp + 0x20]
push 4
push 0xd43668
call esi
push 0x100a6000
push 0x7db308
push 0xe9
call fcn.100d0e40
add esp, 0xc
push 0x100a6020
push 0x7db5d0
push 0xe8
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x1c]
mov byte [0x4d9749], 0xe0
push eax
push dword [esp + 0x20]
push 1
push 0x4d9749
call esi
push edi
push 1
call fcn.1002c9d0
jmp 0x100ac4d5
cmp ecx, 4
jne 0x100aae4a
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1009c430
push 0x80f7fe
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1009c470
push 0x80f833
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1009e7a0
push 0x80f84d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1009ead0
push 0x80f855
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1009edd0
push 0x80f865
push 0xe8
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100a04f0
push 0x812713
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x100a0580
push 0x812947
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100a0610
push 0x812a76
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100a06a0
push 0x8139a0
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100a0740
push 0x812d3f
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100a07e0
push 0x813cbc
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100a0870
push 0x8130aa
push 0xe9
call fcn.100d0e40
add esp, 0xc
push 0x100a72c0
push 0x89599e
push 0xe8
jmp 0x100ac4a3
cmp ecx, 5
jne 0x100ab69f
movd xmm2, dword [0x11479250]
cvtdq2pd xmm2, xmm2
mov dword [0x102bfd98], 0
mov word [0x102bfd9c], 0
mov dword [0x102bfd7c], 0x7abc
mov dword [0x102bfd80], 0x41a00000
mov dword [0x102bfd84], 0x41a00000
movss xmm3, dword [0x10103ee0]
movaps xmm0, xmm2
mov dword [0x102bfd8c], 0x43e10000
addsd xmm0, qword [0x10103a88]
mov dword [0x102bfd94], 0x43eb0000
mov byte [0x102bfd9e], 0
mov dword [0x102bfcd8], 0
mov word [0x102bfcdc], 0
cvtpd2ps xmm1, xmm0
mov dword [0x102bfcbc], 0x7abf
mov dword [0x102bfcc0], 0x41a00000
mov dword [0x102bfcc4], 0x41a00000
mov dword [0x102bfccc], 0x43e10000
mov dword [0x102bfcd4], 0x43eb0000
movaps xmm0, xmm2
mov byte [0x102bfcde], 0
addsd xmm0, qword [0x10103b08]
movss dword [0x102bfd88], xmm1
addss xmm1, xmm3
mov dword [0x102bfd38], 0
mov word [0x102bfd3c], 0
mov dword [0x102bfd1c], 0x7ac1
cvtpd2ps xmm0, xmm0
mov dword [0x102bfd20], 0x41a00000
mov dword [0x102bfd24], 0x41a00000
mov dword [0x102bfd2c], 0x43e10000
mov dword [0x102bfd34], 0x43eb0000
mov byte [0x102bfd3e], 0
movss dword [0x102bfd90], xmm1
movss dword [0x102bfcc8], xmm0
addss xmm0, xmm3
mov dword [0x102bff18], 0
mov word [0x102bff1c], 0
mov dword [0x102bfefc], 0x7ac2
mov dword [0x102bff00], 0x41a00000
movss dword [0x102bfcd0], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103b48]
mov dword [0x102bff04], 0x41a00000
mov dword [0x102bff0c], 0x43e10000
mov dword [0x102bff14], 0x43eb0000
mov byte [0x102bff1e], 0
cvtpd2ps xmm0, xmm0
mov dword [0x102bfeb8], 0
mov word [0x102bfebc], 0
mov dword [0x102bfe9c], 0x7ac3
mov dword [0x102bfea0], 0x41a00000
mov dword [0x102bfea4], 0x41a00000
mov dword [0x102bfeac], 0x43e10000
movss dword [0x102bfd28], xmm0
addss xmm0, xmm3
mov dword [0x102bfeb4], 0x43eb0000
mov byte [0x102bfebe], 0
mov dword [0x102bfdf8], 0
mov word [0x102bfdfc], 0
movss dword [0x102bfd30], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103e08]
mov dword [0x102bfddc], 0x7aa2
mov dword [0x102bfde0], 0x41a00000
mov dword [0x102bfde4], 0x41a00000
cvtpd2ps xmm0, xmm0
movss dword [0x102bff08], xmm0
addss xmm0, xmm3
movss dword [0x102bff10], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103e18]
addsd xmm2, qword [0x10103e30]
cvtpd2ps xmm0, xmm0
movss dword [0x102bfea8], xmm0
addss xmm0, xmm3
movss dword [0x102bfeb0], xmm0
cvtpd2ps xmm0, xmm2
movss dword [0x102bfde8], xmm0
addss xmm0, xmm3
mov dword [0x102bfdec], 0x43e10000
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
mov dword [0x102bfdf4], 0x43eb0000
movss dword [0x102bfdf0], xmm0
mov byte [0x102bfdfe], 0
call fcn.100d0e40
add esp, 0xc
push 0x1009c430
push 0x80f7fe
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a0900
push 0x80f833
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a13f0
push 0x80f84d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a1580
push 0x80f855
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a1700
push 0x80f865
push 0xe8
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100a1b00
push 0x812713
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x100a1b90
push 0x812947
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100a1c20
push 0x812a76
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100a1cb0
push 0x8139a0
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100a1d50
push 0x812d3f
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100a1df0
push 0x813cbc
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100a1e80
push 0x8130aa
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x100a1f10
push 0x895a49
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100a2000
push 0x895abe
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100a20f0
push 0x895b33
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100a22d0
jmp 0x100ac499
cmp ecx, 6
jne 0x100abef4
movd xmm2, dword [0x11479250]
cvtdq2pd xmm2, xmm2
mov dword [0x102bfd98], 0
mov word [0x102bfd9c], 0
mov dword [0x102bfd7c], 0x7abc
mov dword [0x102bfd80], 0x41a00000
mov dword [0x102bfd84], 0x41a00000
movss xmm3, dword [0x10103ee0]
movaps xmm0, xmm2
mov dword [0x102bfd8c], 0x43e10000
addsd xmm0, qword [0x10103a88]
mov dword [0x102bfd94], 0x43eb0000
mov byte [0x102bfd9e], 0
mov dword [0x102bfcd8], 0
mov word [0x102bfcdc], 0
cvtpd2ps xmm1, xmm0
mov dword [0x102bfcbc], 0x7abf
mov dword [0x102bfcc0], 0x41a00000
mov dword [0x102bfcc4], 0x41a00000
mov dword [0x102bfccc], 0x43e10000
mov dword [0x102bfcd4], 0x43eb0000
movaps xmm0, xmm2
mov byte [0x102bfcde], 0
addsd xmm0, qword [0x10103b08]
movss dword [0x102bfd88], xmm1
addss xmm1, xmm3
mov dword [0x102bfd38], 0
mov word [0x102bfd3c], 0
mov dword [0x102bfd1c], 0x7ac1
cvtpd2ps xmm0, xmm0
mov dword [0x102bfd20], 0x41a00000
mov dword [0x102bfd24], 0x41a00000
mov dword [0x102bfd2c], 0x43e10000
mov dword [0x102bfd34], 0x43eb0000
mov byte [0x102bfd3e], 0
movss dword [0x102bfd90], xmm1
movss dword [0x102bfcc8], xmm0
addss xmm0, xmm3
mov dword [0x102bff18], 0
mov word [0x102bff1c], 0
mov dword [0x102bfefc], 0x7ac2
mov dword [0x102bff00], 0x41a00000
movss dword [0x102bfcd0], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103b48]
mov dword [0x102bff04], 0x41a00000
mov dword [0x102bff0c], 0x43e10000
mov dword [0x102bff14], 0x43eb0000
mov byte [0x102bff1e], 0
cvtpd2ps xmm0, xmm0
mov dword [0x102bfeb8], 0
mov word [0x102bfebc], 0
mov dword [0x102bfe9c], 0x7ac3
mov dword [0x102bfea0], 0x41a00000
mov dword [0x102bfea4], 0x41a00000
mov dword [0x102bfeac], 0x43e10000
movss dword [0x102bfd28], xmm0
addss xmm0, xmm3
mov dword [0x102bfeb4], 0x43eb0000
mov byte [0x102bfebe], 0
mov dword [0x102bfdf8], 0
mov word [0x102bfdfc], 0
movss dword [0x102bfd30], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103e08]
mov dword [0x102bfddc], 0x7aa2
mov dword [0x102bfde0], 0x41a00000
mov dword [0x102bfde4], 0x41a00000
cvtpd2ps xmm0, xmm0
movss dword [0x102bff08], xmm0
addss xmm0, xmm3
movss dword [0x102bff10], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x10103e18]
addsd xmm2, qword [0x10103e30]
cvtpd2ps xmm0, xmm0
movss dword [0x102bfea8], xmm0
addss xmm0, xmm3
movss dword [0x102bfeb0], xmm0
cvtpd2ps xmm0, xmm2
movss dword [0x102bfde8], xmm0
addss xmm0, xmm3
mov dword [0x102bfdec], 0x43e10000
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
mov dword [0x102bfdf4], 0x43eb0000
movss dword [0x102bfdf0], xmm0
mov byte [0x102bfdfe], 0
call fcn.100d0e40
add esp, 0xc
push 0x1009c430
push 0x80f7fe
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a23c0
push 0x80f833
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a2eb0
push 0x80f84d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a3040
push 0x80f855
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a31c0
push 0x80f865
push 0xe8
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100a3630
push 0x812713
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x100a36c0
push 0x812947
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100a3750
push 0x812a76
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100a37e0
push 0x8139a0
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100a3880
push 0x812d3f
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100a3920
push 0x813cbc
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100a39b0
push 0x8130aa
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x100a3a40
push 0x895a49
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100a3b30
push 0x895abe
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100a3c20
push 0x895b33
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100a3d10
jmp 0x100ac499
cmp ecx, 7
jne 0x100ac4b5
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1009c430
push 0x80f7fe
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a65e0
push 0x80f833
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f84d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f855
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100d0e40
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f865
push 0xe8
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100a3630
push 0x812713
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x100a36c0
push 0x812947
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100a3750
push 0x812a76
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100a37e0
push 0x8139a0
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100d4f20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100a3880
push 0x812d3f
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x100a3920
push 0x813cbc
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100a39b0
push 0x8130aa
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x100a6680
push 0x895a49
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100a6770
push 0x895abe
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100a6860
push 0x895b33
push 0xe9
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100a6950
push 0x895ba8
push 0xe9
call fcn.100d0e40
add esp, 0xc
push edi
push 2
call fcn.1002c9d0
jmp 0x100ac4d5
push 0
push 0
call fcn.1002c9d0
push 0x100a7710
push 0x80f865
push 0xe8
call fcn.100d0e40
add esp, 0xc
mov eax, dword [0x102e1760]
add eax, 0xfffffffc
cmp eax, 3
ja 0x100ac67d
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd43848
call esi
lea eax, [esp + 0x1c]
mov dword [0xd43848], 0x42c66666
push eax
push dword [esp + 0x20]
push 4
push 0xd43848
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x1c]
mov byte [0x4d9749], 0xe0
push eax
push dword [esp + 0x20]
push 1
push 0x4d9749
call esi
push 0x1007f240
push 0x40f2e9
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1007f240
push 0x48007c
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1007f240
push 0x4d9756
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1007f240
push 0x5db4d5
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a7280
push 0x81a146
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x100a7280
push 0x81a199
push 0xe8
call fcn.100d0e40
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd46924
call esi
lea eax, [esp + 0x1c]
mov dword [0xd46924], 0x43f00000
push eax
push dword [esp + 0x20]
push 4
push 0xd46924
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 8
push 0xd46910
call esi
movsd xmm0, qword [0x10103dd0]
lea eax, [esp + 0x1c]
push eax
movsd qword [0xd46910], xmm0
push dword [esp + 0x20]
push 8
push 0xd46910
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd2c2a0
call esi
lea eax, [esp + 0x1c]
mov dword [0xd2c2a0], 0x43f00000
push eax
push dword [esp + 0x20]
push 4
push 0xd2c2a0
call esi
push 0x100a6f00
push 0x834700
push 0xe8
call fcn.100d0e40
add esp, 0xc
push 0x1001d900
push 0x4d9cdb
push 0xe8
call fcn.100d0e40
add esp, 0xc
call fcn.1001a1d0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4