Function at 0x10094770
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
mov ebx, ecx
mov eax, 0x2710
push edi
mov edi, 1
mov dword [esp + 0xc], eax
mov edx, edi
mov esi, 0x64
mov dword [ebx], 0
nop dword [eax]
mov ecx, esi
imul ecx, edx
imul ecx, edx
mov dword [ebx + edx*4], ecx
cmp edx, 0xff
jle 0x100947cc
imul eax, edi
imul eax, edi
inc edi
add eax, ecx
mov dword [ebx + edx*4], eax
mov eax, dword [esp + 0xc]
add eax, 0x3e8
mov dword [esp + 0xc], eax
add esi, 0xa
inc edx
cmp esi, 0xffa
jle 0x100947a0
mov dword [ebx + 0x648], 0
mov eax, 1
mov dword [ebx + 0x64c], 0
add ebx, 0x650
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebx
nop
add eax, 0x190
cdq
mov edi, eax
mov dword [esp + 0xc], eax
add edi, 0xffffff01
mov ebx, edx
mov esi, ebx
mov ecx, edi
adc esi, 0xffffffff
add ecx, 9
push esi
mov eax, esi
push edi
adc eax, 0
push eax
push ecx
call fcn.100d5ff0
push esi
push edi
push edx
push eax
call fcn.100d5ff0
mov ecx, eax
mov esi, 0x64
mov eax, edx
mul esi
push ebx
mov edi, eax
mov eax, ecx
mul esi
mov ecx, ebx
add edi, edx
mov esi, eax
mov eax, dword [esp + 0x10]
mov edx, eax
add edx, 9
push eax
adc ecx, 0
push ecx
push edx
call fcn.100d5ff0
push ebx
push dword [esp + 0x10]
push edx
push eax
call fcn.100d5ff0
add esi, eax
mov eax, esi
adc edi, edx
mov ecx, edi
shld ecx, eax, 2
shl eax, 2
add esi, eax
mov eax, dword [esp + 0x10]
adc edi, ecx
mov ecx, dword [esp + 0x14]
shld edi, esi, 1
add esi, esi
add esi, 0x1800fa70
adc edi, 0xffffffff
inc eax
shrd esi, edi, 1
mov dword [esp + 0x10], eax
shr edi, 1
mov dword [ecx], esi
mov dword [ecx + 4], edi
add ecx, 8
mov dword [esp + 0x14], ecx
cmp eax, 0x3e9
jl 0x10094800
mov ecx, dword [0x102bc1bc]
test ecx, ecx
jne 0x100948ef
push ecx
push ecx
call fcn.1002a270
call fcn.10018b30
push 0x10094180
push 0x80f865
push 0xe8
call fcn.100b54d0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ecx - 1]
cmp eax, 2
ja 0x10095138
movaps xmm0, xmmword [0x100e7d30]
mov dword [0x1029a768], 0
mov word [0x1029a76c], 0
mov dword [0x1029a74c], 0x7a98
mov dword [0x1029a760], 0x43ba0000
mov dword [0x1029a764], 0x43ee0000
mov byte [0x1029a76e], 0
mov dword [0x1029a7c8], 0
mov word [0x1029a7cc], 0
mov dword [0x1029a7ac], 0x7a95
mov dword [0x1029a7c0], 0x43c98000
mov dword [0x1029a7c4], 0x43ee0000
mov byte [0x1029a7ce], 0
mov dword [0x1029a828], 0
mov word [0x1029a82c], 0
mov dword [0x1029a80c], 0x7a97
mov dword [0x1029a820], 0x43d90000
mov dword [0x1029a824], 0x43ee0000
mov byte [0x1029a82e], 0
mov dword [0x1029a948], 0
mov word [0x1029a94c], 0
mov dword [0x1029a92c], 0x7aa2
mov dword [0x1029a940], 0x441f0000
mov dword [0x1029a944], 0x43ef8000
mov byte [0x1029a94e], 0
movups xmmword [0x1029a750], xmm0
movaps xmm0, xmmword [0x100e7d40]
movups xmmword [0x1029a7b0], xmm0
movaps xmm0, xmmword [0x100e7d50]
movups xmmword [0x1029a810], xmm0
movaps xmm0, xmmword [0x100e7d70]
movups xmmword [0x1029a930], xmm0
cmp ecx, 2
jb 0x10094aae
movaps xmm0, xmmword [0x100e7cc0]
movups xmmword [0x1029a990], xmm0
mov dword [0x1029a9a8], 0
movaps xmm0, xmmword [0x100e7cb0]
mov word [0x1029a9ac], 0
mov dword [0x1029a98c], 0x7aa2
mov dword [0x1029a9a0], 0x441ec000
mov dword [0x1029a9a4], 0x43e20000
mov byte [0x1029a9ae], 0
mov dword [0x1029a8e8], 0
mov word [0x1029a8ec], 0
mov dword [0x1029a8cc], 0x7aa2
movups xmmword [0x1029a8d0], xmm0
mov dword [0x1029a8e0], 0x42700000
mov dword [0x1029a8e4], 0x43e28000
mov byte [0x1029a8ee], 0
cmp ecx, 3
jb 0x10094af9
movaps xmm0, xmmword [0x100e7d60]
mov dword [0x1029a888], 0
mov word [0x1029a88c], 0
mov dword [0x1029a86c], 0x7aa2
movups xmmword [0x1029a870], xmm0
mov dword [0x1029a880], 0x43e88000
mov dword [0x1029a884], 0x43ee0000
mov byte [0x1029a88e], 0
lea eax, [esp + 0x14]
push eax
push 0x40
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x14]
mov byte [0x813c1a], 0x1e
push eax
push dword [esp + 0x18]
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x14]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x14]
mov byte [0x812ad5], 0
push eax
push dword [esp + 0x18]
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x14]
push eax
push 0x40
push 1
push 0x813740
call esi
lea eax, [esp + 0x14]
mov byte [0x813740], 0xc3
push eax
push dword [esp + 0x18]
push 1
push 0x813740
call esi
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x100914d0
push 0x80f7fe
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10091de0
push 0x80f833
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10091e70
push 0x80f845
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x100921a0
push 0x80f84d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10092300
push 0x80f855
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10092450
push 0x80f865
push 0xe8
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812713
call esi
push 0x10092890
push 0x812713
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812947
call esi
push 0x100928d0
push 0x812947
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x8139a0
call esi
push 0x10092910
push 0x8139a0
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x812d3f
call esi
push 0x10092950
push 0x812d3f
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x813cbc
call esi
push 0x1008ee40
push 0x813cbc
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x8130aa
call esi
push 0x1008ee80
push 0x8130aa
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895a49
call esi
push 0x10092990
push 0x895a49
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895abe
call esi
push 0x100929d0
push 0x895abe
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895b33
call esi
push 0x10092a10
push 0x895b33
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895ba8
call esi
push 0x10090140
push 0x895ba8
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 4
push 0xd43668
call esi
lea eax, [esp + 0x14]
mov dword [0xd43668], 0x43d78000
push eax
push dword [esp + 0x18]
push 4
push 0xd43668
call esi
push 0x10092fd0
push 0x7db308
push 0xe9
call fcn.100b54d0
add esp, 0xc
push 0x10092ff0
push 0x7db5d0
push 0xe8
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x14]
mov byte [0x4d9749], 0xb0
push eax
push dword [esp + 0x18]
push 1
push 0x4d9749
call esi
push dword [ebp + 8]
push 1
call fcn.1002a270
jmp 0x10096992
cmp ecx, 4
jne 0x10095513
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008aca0
push 0x80f7fe
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008ace0
push 0x80f833
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008d020
push 0x80f84d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008d350
push 0x80f855
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008d650
push 0x80f865
push 0xe8
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812713
call esi
push 0x1008ed00
push 0x812713
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812947
call esi
push 0x1008ed40
push 0x812947
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812a76
call esi
push 0x1008ed80
push 0x812a76
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x8139a0
call esi
push 0x1008edc0
push 0x8139a0
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x812d3f
call esi
push 0x1008ee00
push 0x812d3f
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x813cbc
call esi
push 0x1008ee40
push 0x813cbc
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x8130aa
call esi
push 0x1008ee80
push 0x8130aa
push 0xe9
call fcn.100b54d0
add esp, 0xc
push 0x10093d40
push 0x89599e
push 0xe8
jmp 0x1009695e
cmp ecx, 5
jne 0x10095c61
movaps xmm0, xmmword [0x100e7cd0]
movups xmmword [0x1029a870], xmm0
push sym.Main.dll_SetWidePosY
movaps xmm0, xmmword [0x100e7ce0]
movups xmmword [0x1029a7b0], xmm0
push 0x80f258
movaps xmm0, xmmword [0x100e7cf0]
movups xmmword [0x1029a810], xmm0
push 0xe8
movaps xmm0, xmmword [0x100e7d00]
movups xmmword [0x1029a9f0], xmm0
mov dword [0x1029a888], 0
movaps xmm0, xmmword [0x100e7d10]
movups xmmword [0x1029a990], xmm0
mov word [0x1029a88c], 0
movaps xmm0, xmmword [0x100e7d20]
mov dword [0x1029a86c], 0x7abc
mov dword [0x1029a880], 0x42860000
mov dword [0x1029a884], 0x43eb0000
mov byte [0x1029a88e], 0
mov dword [0x1029a7c8], 0
mov word [0x1029a7cc], 0
mov dword [0x1029a7ac], 0x7abf
mov dword [0x1029a7c0], 0x42b80000
mov dword [0x1029a7c4], 0x43eb0000
mov byte [0x1029a7ce], 0
mov dword [0x1029a828], 0
mov word [0x1029a82c], 0
mov dword [0x1029a80c], 0x7ac1
mov dword [0x1029a820], 0x42e60000
mov dword [0x1029a824], 0x43eb0000
mov byte [0x1029a82e], 0
mov dword [0x1029aa08], 0
mov word [0x1029aa0c], 0
mov dword [0x1029a9ec], 0x7ac2
mov dword [0x1029aa00], 0x4408c000
mov dword [0x1029aa04], 0x43eb0000
mov byte [0x1029aa0e], 0
mov dword [0x1029a9a8], 0
mov word [0x1029a9ac], 0
mov dword [0x1029a98c], 0x7ac3
mov dword [0x1029a9a0], 0x440ec000
mov dword [0x1029a9a4], 0x43eb0000
mov byte [0x1029a9ae], 0
mov dword [0x1029a8e8], 0
mov word [0x1029a8ec], 0
mov dword [0x1029a8cc], 0x7aa2
movups xmmword [0x1029a8d0], xmm0
mov dword [0x1029a8e0], 0x44150000
mov dword [0x1029a8e4], 0x43eb0000
mov byte [0x1029a8ee], 0
call fcn.100b54d0
add esp, 0xc
push 0x1008aca0
push 0x80f7fe
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008eec0
push 0x80f833
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008f850
push 0x80f84d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008f9b0
push 0x80f855
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008fb00
push 0x80f865
push 0xe8
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812713
call esi
push 0x1008feb0
push 0x812713
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812947
call esi
push 0x1008fef0
push 0x812947
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812a76
call esi
push 0x1008ff30
push 0x812a76
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x8139a0
call esi
push 0x1008ff70
push 0x8139a0
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x812d3f
call esi
push 0x1008ffb0
push 0x812d3f
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x813cbc
call esi
push 0x10090000
push 0x813cbc
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x8130aa
call esi
push 0x10090040
push 0x8130aa
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895a49
call esi
push 0x10090080
push 0x895a49
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895abe
call esi
push 0x100900c0
push 0x895abe
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895b33
call esi
push 0x10090100
push 0x895b33
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895ba8
call esi
push 0x10090180
jmp 0x10096954
cmp ecx, 6
jne 0x100963af
movaps xmm0, xmmword [0x100e7cd0]
movups xmmword [0x1029a870], xmm0
push sym.Main.dll_SetWidePosY
movaps xmm0, xmmword [0x100e7ce0]
movups xmmword [0x1029a7b0], xmm0
push 0x80f258
movaps xmm0, xmmword [0x100e7cf0]
movups xmmword [0x1029a810], xmm0
push 0xe8
movaps xmm0, xmmword [0x100e7d00]
movups xmmword [0x1029a9f0], xmm0
mov dword [0x1029a888], 0
movaps xmm0, xmmword [0x100e7d10]
movups xmmword [0x1029a990], xmm0
mov word [0x1029a88c], 0
movaps xmm0, xmmword [0x100e7d20]
mov dword [0x1029a86c], 0x7abc
mov dword [0x1029a880], 0x42860000
mov dword [0x1029a884], 0x43eb0000
mov byte [0x1029a88e], 0
mov dword [0x1029a7c8], 0
mov word [0x1029a7cc], 0
mov dword [0x1029a7ac], 0x7abf
mov dword [0x1029a7c0], 0x42b80000
mov dword [0x1029a7c4], 0x43eb0000
mov byte [0x1029a7ce], 0
mov dword [0x1029a828], 0
mov word [0x1029a82c], 0
mov dword [0x1029a80c], 0x7ac1
mov dword [0x1029a820], 0x42e60000
mov dword [0x1029a824], 0x43eb0000
mov byte [0x1029a82e], 0
mov dword [0x1029aa08], 0
mov word [0x1029aa0c], 0
mov dword [0x1029a9ec], 0x7ac2
mov dword [0x1029aa00], 0x4408c000
mov dword [0x1029aa04], 0x43eb0000
mov byte [0x1029aa0e], 0
mov dword [0x1029a9a8], 0
mov word [0x1029a9ac], 0
mov dword [0x1029a98c], 0x7ac3
mov dword [0x1029a9a0], 0x440ec000
mov dword [0x1029a9a4], 0x43eb0000
mov byte [0x1029a9ae], 0
mov dword [0x1029a8e8], 0
mov word [0x1029a8ec], 0
mov dword [0x1029a8cc], 0x7aa2
movups xmmword [0x1029a8d0], xmm0
mov dword [0x1029a8e0], 0x44150000
mov dword [0x1029a8e4], 0x43eb0000
mov byte [0x1029a8ee], 0
call fcn.100b54d0
add esp, 0xc
push 0x1008aca0
push 0x80f7fe
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x100901c0
push 0x80f833
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10090b50
push 0x80f84d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10090cb0
push 0x80f855
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10090e00
push 0x80f865
push 0xe8
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812713
call esi
push 0x10091210
push 0x812713
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812947
call esi
push 0x10091250
push 0x812947
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812a76
call esi
push 0x10091290
push 0x812a76
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x8139a0
call esi
push 0x100912d0
push 0x8139a0
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x812d3f
call esi
push 0x10091310
push 0x812d3f
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x813cbc
call esi
push 0x10091350
push 0x813cbc
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x8130aa
call esi
push 0x10091390
push 0x8130aa
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895a49
call esi
push 0x100913d0
push 0x895a49
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895abe
call esi
push 0x10091410
push 0x895abe
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895b33
call esi
push 0x10091450
push 0x895b33
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895ba8
call esi
push 0x10091490
jmp 0x10096954
cmp ecx, 7
jne 0x10096972
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1008aca0
push 0x80f7fe
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10093360
push 0x80f833
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f84d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f855
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100b54d0
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f865
push 0xe8
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812713
call esi
push 0x10091210
push 0x812713
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812947
call esi
push 0x10091250
push 0x812947
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x812a76
call esi
push 0x10091290
push 0x812a76
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x8139a0
call esi
push 0x100912d0
push 0x8139a0
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100b99d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x2d
push 0x812d3f
call esi
push 0x10091310
push 0x812d3f
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x813cbc
call esi
push 0x10091350
push 0x813cbc
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x8130aa
call esi
push 0x10091390
push 0x8130aa
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895a49
call esi
push 0x100933f0
push 0x895a49
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895abe
call esi
push 0x10093430
push 0x895abe
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895b33
call esi
push 0x10093470
push 0x895b33
push 0xe9
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 0x24
push 0x895ba8
call esi
push 0x100934b0
push 0x895ba8
push 0xe9
call fcn.100b54d0
add esp, 0xc
push dword [ebp + 8]
push 2
call fcn.1002a270
jmp 0x10096992
push 0
push 0
call fcn.1002a270
push 0x10094180
push 0x80f865
push 0xe8
call fcn.100b54d0
add esp, 0xc
mov eax, dword [0x102bc1bc]
add eax, 0xfffffffc
cmp eax, 3
ja 0x10096b3a
lea eax, [esp + 0x14]
push eax
push 0x40
push 4
push 0xd43848
call esi
lea eax, [esp + 0x14]
mov dword [0xd43848], 0x42c66666
push eax
push dword [esp + 0x18]
push 4
push 0xd43848
call esi
lea eax, [esp + 0x14]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x14]
mov byte [0x4d9749], 0xe0
push eax
push dword [esp + 0x18]
push 1
push 0x4d9749
call esi
push 0x1006ef00
push 0x40f2e9
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1006ef00
push 0x48007c
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1006ef00
push 0x4d9756
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1006ef00
push 0x5db4d5
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10093d00
push 0x81a146
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x10093d00
push 0x81a199
push 0xe8
call fcn.100b54d0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
push 0x40
push 4
push 0xd46924
call esi
lea eax, [esp + 0x14]
mov dword [0xd46924], 0x43f00000
push eax
push dword [esp + 0x18]
push 4
push 0xd46924
call esi
lea eax, [esp + 0x14]
push eax
push 0x40
push 8
push 0xd46910
call esi
movsd xmm0, qword [0x100e7360]
lea eax, [esp + 0x14]
push eax
movsd qword [0xd46910], xmm0
push dword [esp + 0x18]
push 8
push 0xd46910
call esi
lea eax, [esp + 0x14]
push eax
push 0x40
push 4
push 0xd2c2a0
call esi
lea eax, [esp + 0x14]
mov dword [0xd2c2a0], 0x43f00000
push eax
push dword [esp + 0x18]
push 4
push 0xd2c2a0
call esi
push 0x100939b0
push 0x834700
push 0xe8
call fcn.100b54d0
add esp, 0xc
push 0x1001c060
push 0x4d9cdb
push 0xe8
call fcn.100b54d0
add esp, 0xc
call fcn.10018b30
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4