Function at 0x1000b990
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006a0f5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x40
mov eax, dword [0x100aa040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x100abe68]
test esi, esi
je 0x1000ba7f
mov edi, dword [sym.imp.KERNEL32.dll_K32QueryWorkingSetEx]
lea eax, [ebp - 0x2c]
push 8
push eax
push dword [0x100abc70]
mov dword [ebp - 0x2c], esi
call edi
test eax, eax
je 0x1000ba7f
test byte [ebp - 0x28], 1
je 0x1000ba7f
mov esi, dword [esi]
sub esi, 0xffffff80
cmp esi, dword [0x100ad688]
je 0x1000ba7f
push 8
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], esi
push eax
push dword [0x100abc70]
call edi
test eax, eax
je 0x1000ba79
test byte [ebp - 0x34], 1
je 0x1000ba79
mov edi, dword [esi]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], 0
lea edx, [edi + 4]
call fcn.10002fc0
add esp, 4
test eax, eax
je 0x1000ba79
push 0
push 0
push 0xff
push str.Freedom_v0.94__55523ea__is_Loading_
push dword [ebp - 0x24]
add edi, 8
push edi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 0x100
jae 0x1000dd1d
mov byte [eax + str.Freedom_v0.94__55523ea__is_Loading_], 0
mov dword [0x100ad688], esi
mov ecx, dword [0x100ac044]
mov edi, ecx
mov esi, dword [0x100ad250]
mov dword [ebp - 0x24], ecx
test ecx, ecx
jne 0x1000baa8
mov ecx, dword [esi + 0x38]
test ecx, ecx
jne 0x1000baa3
mov eax, dword [esi + 0x2c]
mov eax, dword [eax + 0x44]
mov ecx, dword [eax]
mov edi, ecx
mov dword [ebp - 0x24], ecx
call fcn.1001e580
lea eax, [ebp - 0x24]
lea ecx, [esi + 0x478c]
push eax
call fcn.100285a0
mov eax, dword [esi + 0x3e60]
mov ecx, dword [eax + 0x264]
mov eax, dword [edi + 0x30]
lea esi, [ecx + 0x48]
mov edi, dword [esi + 4]
mov dword [ebp - 0x34], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x24], eax
mov eax, dword [esi]
cmp eax, edi
jne 0x1000bb07
lea ecx, [eax + 1]
test edi, edi
je 0x1000baf2
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x1000baf7
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.100284b0
mov ecx, dword [ebp - 0x34]
mov edx, dword [esi]
mov eax, dword [esi + 8]
mov edi, dword [ebp - 0x24]
mov dword [eax + edx*4], edi
inc dword [esi]
mov dword [ecx + 0x70], edi
call fcn.10031230
mov eax, dword [0x100ad250]
xor edx, edx
push 0x41
mov ecx, str.Freedom
or dword [eax + 0x4714], 1
mov dword [eax + 0x4724], 0
mov dword [eax + 0x4728], 0
mov dword [eax + 0x472c], 0
mov dword [eax + 0x4730], 0
mov dword [eax + 0x4718], 2
call fcn.1001b930
add esp, 4
push str.Freedom_v0.94__55523ea__is_Loading_
push 0x1009d3e4
call fcn.1003a2c0
movss xmm0, dword [0x1009fb88]
add esp, 8
movss xmm1, dword [0x100abeec]
comiss xmm0, xmm1
jbe 0x1000bbdf
mulss xmm1, dword [0x1009fc64]
sub esp, 8
addss xmm1, dword [0x1009fb24]
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
push str.Memory_Scan:__.0f__
push 0x20
push 0x100ad68c
call fcn.10013450
movss xmm0, dword [0x100abeec]
lea ecx, [ebp - 0x2c]
add esp, 0x14
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call fcn.1003c4b0
mov ecx, dword [0x100ad250]
mov eax, dword [ecx + 0x3e60]
movss xmm1, dword [eax + 0x18]
addss xmm1, dword [eax + 0x20]
movss xmm0, dword [eax + 0x14]
or dword [ecx + 0x4714], 1
movss dword [ecx + 0x4724], xmm0
mov dword [ecx + 0x472c], 0
movss dword [ecx + 0x4728], xmm1
mov dword [ecx + 0x4730], 0
mov dword [ecx + 0x4718], 8
mov ecx, eax
cmp byte [ecx + 0xaf], 0
jne 0x1000dcf5
push ecx
push str.settings
call fcn.10015ba0
mov ecx, dword [0x100ad250]
mov esi, eax
cmp byte [ecx + 0x371f], 0
je 0x1000bc7d
cmp byte [ecx + 0x4508], 0
jne 0x1000bc7d
mov ecx, 0x20
call fcn.10015f20
test al, al
je 0x1000bc7d
mov edx, 1
mov ecx, esi
call fcn.10022100
mov ecx, esi
call fcn.10022470
test al, al
je 0x1000dcf5
cmp dword [0x100ad684], 0
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Difficulty
mov dword [ebp - 0x28], 0
call fcn.10043af0
add esp, 8
test al, al
je 0x1000bcd1
mov eax, dword [0x100ad250]
xor ecx, ecx
mov dword [0x100ad684], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000bcd7
mov ecx, dword [0x100ad684]
cmp dword [0x100abf0c], 0
je 0x1000bd23
cmp ecx, 1
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Relax
push 1
call fcn.10043af0
add esp, 8
test al, al
je 0x1000bd2d
mov eax, dword [0x100ad250]
mov dword [0x100ad684], 1
or dword [eax + 0x4714], 0x20
jmp 0x1000bd2d
push str.Relax
call fcn.1000dda0
cmp dword [0x100abf0c], 0
je 0x1000bd7d
cmp dword [0x100ad684], 2
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Aimbot
mov dword [ebp - 0x28], 0
call fcn.10043af0
add esp, 8
test al, al
je 0x1000bd87
mov eax, dword [0x100ad250]
mov dword [0x100ad684], 2
or dword [eax + 0x4714], 0x20
jmp 0x1000bd87
push str.Aimbot
call fcn.1000dda0
cmp dword [0x100ac014], 0
je 0x1000bdd7
cmp dword [0x100ad684], 3
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Timewarp
mov dword [ebp - 0x28], 0
call fcn.10043af0
add esp, 8
test al, al
je 0x1000bde1
mov eax, dword [0x100ad250]
mov dword [0x100ad684], 3
or dword [eax + 0x4714], 0x20
jmp 0x1000bde1
push str.Timewarp
call fcn.1000dda0
cmp dword [0x100abff4], 0
je 0x1000be31
cmp dword [0x100ad684], 4
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Replay
mov dword [ebp - 0x28], 0
call fcn.10043af0
add esp, 8
test al, al
je 0x1000be3b
mov eax, dword [0x100ad250]
mov dword [0x100ad684], 4
or dword [eax + 0x4714], 0x20
jmp 0x1000be3b
push str.Replay
call fcn.1000dda0
cmp dword [0x100ad684], 5
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, 0x1009c5fc
mov dword [ebp - 0x28], 0
call fcn.10043af0
add esp, 8
test al, al
je 0x1000be83
mov eax, dword [0x100ad250]
mov ecx, 5
mov dword [0x100ad684], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000be89
mov ecx, dword [0x100ad684]
cmp ecx, 6
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Misc
push 1
call fcn.10043af0
add esp, 8
test al, al
je 0x1000becd
mov eax, dword [0x100ad250]
mov ecx, 6
mov dword [0x100ad684], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000bed3
mov ecx, dword [0x100ad684]
cmp ecx, 7
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.About
push 1
call fcn.10043af0
add esp, 8
test al, al
je 0x1000bf17
mov eax, dword [0x100ad250]
mov ecx, 7
mov dword [0x100ad684], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000bf1d
mov ecx, dword [0x100ad684]
cmp ecx, 8
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Debug
push 1
call fcn.10043af0
add esp, 8
test al, al
je 0x1000bf5e
mov eax, dword [0x100ad250]
mov dword [0x100ad684], 8
or dword [eax + 0x4714], 0x20
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x44070000
mov ecx, 5
mov dword [ebp - 0x28], 0
call fcn.100141e0
mov eax, dword [0x100ad684]
cmp eax, 8
je 0x1000bfa8
cmp eax, 6
je 0x1000bfa8
cmp eax, 1
je 0x1000bfa8
mov edx, dword [0x100ad250]
mov eax, dword [edx + 0x3e60]
movss xmm0, dword [eax + 0x20]
movss dword [edx + 0x4738], xmm0
jmp 0x1000bfb8
mov edx, dword [0x100ad250]
mov dword [edx + 0x4738], 0
mov ecx, dword [edx + 0x3e60]
mov esi, edx
or dword [edx + 0x4714], 2
mov eax, ecx
mov dword [edx + 0x471c], 1
mov dword [edx + 0x4734], 0
xor edx, edx
movss xmm0, dword [ecx + 0x14]
addss xmm0, dword [eax + 0x1c]
movss xmm1, dword [ecx + 0x18]
mov ecx, str.tab_content
or dword [esi + 0x4714], 1
push 0x45
movss dword [esi + 0x4728], xmm1
movss dword [esi + 0x4724], xmm0
mov dword [esi + 0x472c], 0
mov dword [esi + 0x4730], 0
mov dword [esi + 0x4718], 1
call fcn.1001b930
add esp, 4
mov ecx, 1
call fcn.10014260
cmp dword [0x100ad684], 0
jne 0x1000c088
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x40f00000
mov ecx, 0xe
mov dword [ebp - 0x28], 0x40f00000
call fcn.100141e0
mov edx, 0x100aa990
call fcn.1000dee0
mov edx, 0x100aa970
call fcn.1000dee0
mov edx, 0x100aa950
call fcn.1000dee0
mov ecx, 1
call fcn.10014260
cmp dword [0x100ad684], 1
jne 0x1000c46c
mov edx, 0x100abe9f
mov ecx, str.Enable
call fcn.1003bb80
test al, al
je 0x1000c112
cmp byte [0x100abe9f], 0
je 0x1000c0b8
call fcn.100081d0
jmp 0x1000c0bd
call fcn.10008230
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c112
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c112
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
mov eax, dword [0x100ad250]
movss xmm3, dword [0x1009fcc0]
push ecx
push 0
movss xmm2, dword [eax + 0x3bcc]
push 0x1009d4f4
push ecx
lea ecx, [ebp - 0x20]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc8]
call fcn.10037360
movss xmm0, dword [ebp - 0x20]
addss xmm0, dword [0x1009fb8c]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1009fbd0]
call fcn.10021480
push 0
push 0
push 0x14
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 2
push 0x100aa948
xor edx, edx
mov dword [ebp - 0x28], 0
mov ecx, str.Left_Click
call fcn.100402e0
push 0
push 0
push 0x14
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 2
push 0x100aa944
xor edx, edx
mov dword [ebp - 0x28], 0
mov ecx, str.Right_Click
call fcn.100402e0
mov ecx, dword [0x100ad250]
add esp, 0x30
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
lea ecx, [ebp - 0x2c]
mov dword [edx + 0x1a8], eax
call fcn.1003c780
cmp dword [0x100aa9d8], 0x73
mov ecx, str.SingleTap
sete dl
call fcn.1003bfe0
test al, al
je 0x1000c2b6
push str.SingleTap_Mode
push 0x10071d64
push 0x100aac70
mov dword [0x100aa9d8], 0x73
call fcn.1000af10
mov eax, dword [0x100ad250]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c2b6
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c2b6
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
movss xmm1, dword [0x1009fcd0]
xorps xmm0, xmm0
call fcn.100213d0
cmp dword [0x100aa9d8], 0x61
mov ecx, str.Alternate
sete dl
call fcn.1003bfe0
test al, al
je 0x1000c354
push str.Alternate_Mode
push 0x10071d64
push 0x100aac70
mov dword [0x100aa9d8], 0x61
call fcn.1000af10
mov eax, dword [0x100ad250]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c354
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c354
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
mov edx, 0x100aa9c5
mov ecx, str.Variable_Unstable_Rate
call fcn.1003bb80
test al, al
je 0x1000c3d2
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c3d2
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c3d2
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
mov al, byte [0x100aa9c5]
mov byte [ebp - 0x2d], al
test al, al
jne 0x1000c3f9
call fcn.1001e790
mov edx, 0x100ac042
mov ecx, str.Jumping_Unstable_Rate_Window
call fcn.1003bb80
test al, al
je 0x1000c461
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c461
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c461
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
cmp byte [ebp - 0x2d], 0
jne 0x1000c46c
call fcn.1001e820
cmp dword [0x100ad684], 2
jne 0x1000c6a0
mov edx, 0x100abe9e
mov ecx, str.Enable
call fcn.1003bb80
test al, al
je 0x1000c4f6
cmp byte [0x100abe9e], 0
je 0x1000c49c
call fcn.100081d0
jmp 0x1000c4a1
call fcn.10008230
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c4f6
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c4f6
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
push ecx
push str.Cursor_Delay:__.2f
lea eax, [ebp - 0x34]
mov dword [ebp - 0x24], 0x3c23d70a
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x34], 0x40a00000
push eax
push 0x100aa9cc
mov edx, 8
mov ecx, str.fraction_modifier
call fcn.1003d730
add esp, 0x14
call fcn.10018f30
test al, al
je 0x1000c59d
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c59d
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c59d
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x3f000000
call fcn.1003c780
push ecx
push str.Spins_Per_Minute:__d
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x258
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0
push eax
push 0x100aa9c8
mov edx, 4
mov ecx, str.spins_per_minute
call fcn.1003d730
add esp, 0x14
call fcn.10018f30
test al, al
je 0x1000c645
mov edx, dword [0x100ad250]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x1000c64b
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c645
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
mov edx, dword [0x100ad250]
movss xmm0, dword [edx + 0x37c8]
mov eax, dword [edx + 0x3e60]
addss xmm0, xmm0
movss xmm1, dword [eax + 0x20]
addss xmm0, dword [edx + 0x3bcc]
addss xmm0, dword [edx + 0x37d8]
mov byte [eax + 0xac], 1
mov eax, dword [edx + 0x3e60]
subss xmm1, xmm0
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
mov byte [eax + 0x131], 1
addss xmm0, xmm1
movss dword [eax + 0xf4], xmm0
cmp dword [0x100ad684], 3
jne 0x1000c801
mov edx, 0x100ac040
mov ecx, str.Enable
call fcn.1003bb80
test al, al
je 0x1000c72a
cmp byte [0x100ac040], 0
je 0x1000c6d0
call fcn.1000a260
jmp 0x1000c6d5
call fcn.1000a330
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c72a
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c72a
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100ab594]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x100adf90]
cmp eax, dword [ecx + 4]
jg 0x1000dd22
push ecx
push str.Timewarp_Scale:__.2lf
push 0x100aada8
push 0x100aada0
push 0x100adf88
mov edx, 9
mov ecx, str.timewarp_scale
call fcn.1003d730
add esp, 0x14
test al, al
je 0x1000c7a3
movsd xmm0, qword [0x100adf88]
mulsd xmm0, qword [0x1009fc08]
movsd qword [0x100aa9d0], xmm0
call fcn.10018f30
test al, al
je 0x1000c801
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c801
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c801
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
cmp dword [0x100ad684], 4
jne 0x1000cbd1
push str.Open_Replay_Preview_in_game_to_Select_a_Replay
push 0x1009d3e4
call fcn.1003a2c0
add esp, 8
mov ecx, 0x400
call fcn.10015f20
test al, al
je 0x1000c83b
push str.Selected_Replay
call fcn.10022010
add esp, 4
movss xmm0, dword [0x100aac5c]
push str.Mods
push dword [0x100aac60]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str.Replay_Author
push str._s____.2f______ux____s
call fcn.1003a2c0
add esp, 0x18
mov ecx, 0x400
call fcn.10015f20
test al, al
je 0x1000c886
push str.Player__Accuracy__Mods
call fcn.10022010
add esp, 4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40000000
call fcn.1003c780
mov edx, 0x100ac03c
mov ecx, str.Enable
call fcn.1003bb80
test al, al
je 0x1000c964
cmp byte [0x100ac03c], 0
je 0x1000c90a
call fcn.100081d0
cmp byte [0x100ad56c], 0
jne 0x1000c90f
mov eax, dword [0x100ad558]
test eax, eax
je 0x1000c90f
push eax
push dword [0x100ad54c]
push 0x100ad55c
call fcn.1004d2f0
mov edx, dword [0x100ad550]
add esp, 0xc
mov ecx, dword [0x100ad54c]
push dword [0x100ad558]
call fcn.10003090
add esp, 4
mov byte [0x100ad56c], 1
jmp 0x1000c90f
call fcn.1000a120
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000c964
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000c964
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
mov ecx, 0x400
call fcn.10015f20
test al, al
je 0x1000c97f
push str.Usage:_Open_Replay_Preview_in_game_to_Select_a_Replay
call fcn.10022010
add esp, 4
movss xmm1, dword [0x1009fcd0]
movss xmm0, dword [0x1009fc70]
call fcn.100213d0
cmp byte [0x100ac03c], 0
jne 0x1000c9b7
call fcn.1001e730
movaps xmm0, xmmword [0x1009fdd0]
lea edx, [ebp - 0x48]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
call fcn.100140e0
mov edx, 0x100ac03d
mov ecx, str.Hardrock
call fcn.1003bb80
test al, al
je 0x1000ca55
cmp byte [0x100aaaf8], 0
je 0x1000ca55
mov ecx, dword [0x100aaae4]
mov eax, dword [0x100aaae0]
cmp eax, ecx
je 0x1000ca55
movss xmm5, dword [0x100abf68]
movss xmm6, dword [0x1009fdf0]
movss xmm7, dword [0x1009fc80]
nop
movss xmm0, dword [eax + 0xc]
movaps xmm1, xmm7
subss xmm0, dword [0x100abf5c]
movss xmm4, dword [eax + 8]
subss xmm4, dword [0x100abf58]
divss xmm0, xmm5
divss xmm4, xmm5
subss xmm1, xmm0
mulss xmm4, xmm5
addss xmm4, dword [0x100abf58]
andps xmm1, xmm6
mulss xmm1, xmm5
addss xmm1, dword [0x100abf5c]
movss dword [eax + 8], xmm4
movss dword [eax + 0xc], xmm1
add eax, 0x18
cmp eax, ecx
jne 0x1000ca00
mov ecx, 0x400
call fcn.10015f20
test al, al
je 0x1000ca70
push str.Convert_Replay_to_from_Hardrock
call fcn.10022010
add esp, 4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40000000
call fcn.1003c780
mov edx, 0x100aa94b
mov ecx, str.Replay_Aim
call fcn.1003bb80
test al, al
je 0x1000caee
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000caee
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000caee
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
mov ecx, 0x400
call fcn.10015f20
test al, al
je 0x1000cb09
push str.Aim_According_to_Replay_Data
call fcn.10022010
add esp, 4
movss xmm1, dword [0x1009fcd0]
movss xmm0, dword [0x1009fc70]
call fcn.100213d0
mov edx, 0x100aa94a
mov ecx, str.Replay_Keys
call fcn.1003bb80
test al, al
je 0x1000cb86
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000cb86
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000cb86
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
mov ecx, 0x400
call fcn.10015f20
test al, al
je 0x1000cba1
push str.Press_Keys_According_to_Replay_Data
call fcn.10022010
add esp, 4
cmp byte [0x100ac03c], 0
jne 0x1000cbd1
call fcn.10014130
mov edx, dword [0x100ad250]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x100ad684], 5
jne 0x1000cf34
mov edi, dword [0x100ac038]
test edi, edi
jne 0x1000cbed
call fcn.1001e790
mov edx, 0x100ac03e
mov ecx, str.Unmod_Flashlight
call fcn.1003bb80
test al, al
je 0x1000cc6d
cmp byte [0x100ac03e], 0
je 0x1000cc10
call fcn.1000a460
jmp 0x1000cc15
call fcn.1000a4c0
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000cc6d
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov dword [ebp - 0x34], eax
mov ecx, esi
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000cc6d
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x34]
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
test edi, edi
jne 0x1000cc76
call fcn.1001e820
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
mov edi, dword [0x100abfcc]
test edi, edi
jne 0x1000cc9b
call fcn.1001e790
mov edx, 0x100ac03f
mov ecx, str.Unmod_Hidden
call fcn.1003bb80
test al, al
je 0x1000cd25
cmp byte [0x100ac03f], 0
je 0x1000ccc8
call fcn.100081d0
mov ecx, 0x100ad524
call fcn.100010c0
jmp 0x1000cccd
call fcn.10009c90
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000cd25
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov dword [ebp - 0x34], eax
mov ecx, esi
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000cd25
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x34]
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
test edi, edi
jne 0x1000cd2e
call fcn.1001e820
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
mov eax, dword [0x100abffc]
mov dword [ebp - 0x28], eax
test eax, eax
jne 0x1000cd55
call fcn.1001e790
push str.Score_Multiplier
call fcn.1003a2c0
add esp, 4
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x34], 0x40a00000
call fcn.1003c780
mov ecx, 0x46
call fcn.1001ecb0
mov edx, 0x100abc77
mov ecx, str.Enable
call fcn.1003bb80
test al, al
je 0x1000cdff
cmp byte [0x100abc77], 0
je 0x1000cda5
call fcn.1000a1a0
jmp 0x1000cdaa
call fcn.1000a1f0
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000ce04
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000cdff
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
mov eax, dword [0x100ad250]
mov eax, dword [eax + 0x3e60]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0x40a00000
dec dword [eax + 0xe4]
call fcn.1003c780
cmp byte [0x100abc77], 0
jne 0x1000ce49
call fcn.1001e730
movaps xmm0, xmmword [0x1009fdd0]
lea edx, [ebp - 0x48]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
call fcn.100140e0
push ecx
push str.Score_Multiplier:__.0f
lea eax, [ebp - 0x34]
mov dword [ebp - 0x24], 0
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x34], 0x42c80000
push eax
push 0x100aa9bc
mov edx, 8
mov ecx, str.score_multiplier
call fcn.1003d730
add esp, 0x14
mov ecx, 0x400
call fcn.10015f20
test al, al
je 0x1000ce97
push str.Hold_Ctrl_To_Set_a_Custom_Value
call fcn.10022010
add esp, 4
call fcn.10018f30
test al, al
je 0x1000cef9
mov esi, dword [0x100ad250]
mov edi, dword [esi + 0x20]
mov dword [esi + 0x5a7c], 0
test edi, edi
je 0x1000ceff
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov dword [ebp - 0x34], eax
mov ecx, edi
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000cef9
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x34]
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
mov esi, dword [0x100ad250]
cmp byte [0x100abc77], 0
jne 0x1000cf29
call fcn.10014130
dec dword [esi + 0x47a4]
mov eax, dword [esi + 0x47ac]
mov ecx, dword [esi + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46b8], eax
cmp dword [ebp - 0x28], 0
jne 0x1000cf34
call fcn.1001e820
cmp dword [0x100ad684], 6
jne 0x1000d617
push str.Discord_RPC_Settings
call fcn.1003a2c0
add esp, 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
mov edx, 0x100ac041
mov ecx, str.Enable
call fcn.1003bb80
test al, al
je 0x1000cfe1
cmp byte [0x100ac041], 0
je 0x1000cf87
call fcn.10009bb0
jmp 0x1000cf8c
call fcn.10009c00
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000cfe1
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000cfe1
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c780
cmp byte [0x100ac041], 0
jne 0x1000d01a
call fcn.1001e730
movaps xmm0, xmmword [0x1009fdd0]
lea edx, [ebp - 0x48]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
call fcn.100140e0
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100acc48
mov edx, str.State
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_state
call fcn.100402e0
add esp, 0x18
test al, al
je 0x1000d0be
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000d0a7
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000d0a7
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
push 0x100abfb8
mov edx, 0x100acc48
mov ecx, 0x100ac848
call fcn.10009b30
add esp, 4
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100ac248
mov edx, str.Large_Text
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_large_text
call fcn.100402e0
add esp, 0x18
test al, al
je 0x1000d162
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000d14b
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000d14b
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
push 0x100abfc4
mov edx, 0x100ac248
mov ecx, 0x100ace48
call fcn.10009b30
add esp, 4
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100ac048
mov edx, str.Small_Text
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_small_text
call fcn.100402e0
add esp, 0x18
test al, al
je 0x1000d206
mov eax, dword [0x100ad250]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000d1ef
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000d1ef
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
push 0x100abfbc
mov edx, 0x100ac048
mov ecx, 0x100ac448
call fcn.10009b30
add esp, 4
cmp byte [0x100ac041], 0
jne 0x1000d236
call fcn.10014130
mov edx, dword [0x100ad250]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x41200000
call fcn.1003c780
mov eax, dword [0x100ac044]
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push str.Font_Size:__dpx
push 0x10
push 0x100ad6ac
call fcn.10012990
add esp, 0xc
call fcn.1003c800
add esp, 4
test al, al
je 0x1000d382
mov eax, dword [0x100ad250]
mov eax, dword [eax + 0x2c]
mov esi, dword [eax + 0x44]
mov eax, dword [eax + 0x3c]
lea edi, [esi + eax*4]
mov dword [ebp - 0x24], edi
cmp esi, edi
je 0x1000d37d
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
nop dword [eax + eax]
mov eax, dword [esi]
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push 0x1009d80c
lea eax, [ebp - 0x20]
push 4
push eax
call fcn.10012990
mov eax, dword [esi]
lea ecx, [ebp - 0x50]
cmp eax, dword [0x100ac044]
push ecx
sete al
lea ecx, [ebp - 0x20]
push 0
mov dl, al
mov byte [ebp - 0x2d], al
call fcn.10043af0
add esp, 0x18
test al, al
je 0x1000d367
mov eax, dword [esi]
mov dword [0x100ac044], eax
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
mov dword [0x100aa9c0], eax
mov eax, dword [0x100ad250]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x1000d364
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov dword [ebp - 0x28], eax
mov ecx, edi
call fcn.100135d0
mov edi, eax
test edi, edi
je 0x1000d364
push edi
push dword [ebp - 0x34]
mov dword [ebp - 0x3c], 0
push 1
push dword [ebp - 0x28]
call fcn.10057bd9
push edi
call fcn.1005542c
add esp, 0x14
mov edi, dword [ebp - 0x24]
cmp byte [ebp - 0x2d], 0
je 0x1000d372
call fcn.1001eb60
add esi, 4
cmp esi, edi
jne 0x1000d2b0
call fcn.10022510
mov ecx, dword [0x100ad250]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x41200000
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e60]
cmp byte [eax + 0xaf], 0
jne 0x1000d40c
movss xmm2, dword [eax + 0xf0]
lea ecx, [ebp - 0x20]
xorps xmm0, xmm0
movss dword [ebp - 0x48], xmm2
movaps xmm3, xmm2
addss xmm3, xmm0
movss xmm0, dword [eax + 0xf4]
movaps xmm1, xmm0
movss dword [ebp - 0x44], xmm0
addss xmm1, dword [0x1009fc40]
movss dword [ebp - 0x40], xmm3
movss dword [ebp - 0x3c], xmm1
movss xmm1, dword [0x1009fcd0]
call fcn.10021030
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x48]
call fcn.10021190
add esp, 8
call fcn.10006aa0
mov byte [ebp - 0x2d], al
test al, al
je 0x1000d41d
call fcn.1001e730
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Rescan_Memory
mov dword [ebp - 0x1c], 0
call fcn.1003abe0
add esp, 4
test al, al
je 0x1000d461
call fcn.100083d0
push 0
push 0
push 0
push 0x10008120
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 0x2d], 0
je 0x1000d489
mov edx, dword [0x100ad250]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
movss xmm1, dword [0x1009fc4c]
xorps xmm0, xmm0
call fcn.100213d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Unload_DLL
mov dword [ebp - 0x1c], 0
call fcn.1003abe0
add esp, 4
test al, al
je 0x1000d58d
push dword [0x100ad248]
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
cmp byte [0x100ad394], 0
je 0x1000d518
mov edi, dword [0x100ad380]
lea ecx, [ebp - 0x34]
mov eax, dword [0x100ad374]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push ecx
push 0x40
push edi
push eax
mov dword [ebp - 0x24], eax
call esi
push edi
push 0x100ad384
push dword [ebp - 0x24]
call fcn.1004d2f0
add esp, 0xc
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x34]
push edi
push dword [ebp - 0x24]
call esi
mov byte [0x100ad394], 0
call fcn.100083d0
push 4
call fcn.1004b60c
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [eax], 0x100011e0
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0
push ecx
push 0
push eax
push 0x10001810
push 0
push 0
call fcn.1004f0b2
add esp, 0x18
mov dword [ebp - 0x38], eax
test eax, eax
je 0x1000dd6d
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x1000dd66
push ecx
push eax
call fcn.1004b40c
add esp, 8
test eax, eax
jne 0x1000dd66
xorps xmm0, xmm0
mov dword [ebp - 4], 0xffffffff
movlpd qword [ebp - 0x38], xmm0
mov ecx, dword [0x100ad250]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40a00000
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e60]
cmp byte [eax + 0xaf], 0
jne 0x1000d617
movss xmm3, dword [eax + 0xf0]
lea ecx, [ebp - 0x20]
movss xmm1, dword [0x1009fcd0]
xorps xmm0, xmm0
movaps xmm4, xmm3
movss dword [ebp - 0x48], xmm3
addss xmm4, xmm0
movss xmm0, dword [eax + 0xf4]
movaps xmm2, xmm0
movss dword [ebp - 0x44], xmm0
addss xmm2, dword [0x1009fc28]
movss dword [ebp - 0x40], xmm4
movss dword [ebp - 0x3c], xmm2
call fcn.10021030
push 0
push 0
xor edx, edx
lea ecx, [ebp - 0x48]
call fcn.10021190
add esp, 8
cmp dword [0x100ad684], 7
jne 0x1000d65d
push str.Ciremuns_Freedom_v0.94__55523ea_
call fcn.1003a2c0
add esp, 4
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003c780
push str.Special_Thanks_to_Maple_Syrup
call fcn.1003a2c0
add esp, 4
push str._mrflashstudio
call fcn.1003a2c0
add esp, 4
cmp dword [0x100ad684], 8
jne 0x1000dceb
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Debug_Log
mov dword [ebp - 0x1c], 0
call fcn.1003abe0
add esp, 4
test al, al
je 0x1000d6f0
mov eax, dword [0x100ad250]
mov byte [0x100abe9d], 1
mov byte [0x100abe9c], 1
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000d6f0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
call fcn.10027040
mov edx, 0x1009e9c8
mov ecx, esi
mov edi, eax
call fcn.100135d0
mov esi, eax
test esi, esi
je 0x1000d6f0
push esi
push dword [ebp - 0x34]
mov dword [ebp - 0x3c], 0
push 1
push edi
call fcn.10057bd9
push esi
call fcn.1005542c
add esp, 0x14
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40000000
call fcn.1003c780
mov ecx, str.Game
call fcn.10043a70
mov esi, 0x1009d8c4
mov edi, 0x1009d8c8
test al, al
je 0x1000d80c
mov eax, dword [0x100abe78]
test eax, eax
je 0x1000d72f
mov eax, dword [eax]
jmp 0x1000d731
xor eax, eax
push eax
push str.Audio_Time:__d
call fcn.1003a2c0
mov eax, dword [0x100abe70]
add esp, 8
test eax, eax
je case.default.0x1000d74f
mov eax, dword [eax]
cmp eax, 7
ja case.default.0x1000d74f
jmp dword [eax*4 + 0x1000dd7c]
mov eax, str.Main_Menu
jmp 0x1000d793
mov eax, str.Editor
jmp 0x1000d793
mov eax, str.Game
jmp 0x1000d793
mov eax, str.Exit
jmp 0x1000d793
mov eax, str.Editor_Beatmap_Select
jmp 0x1000d793
mov eax, str.Beatmap_Select
jmp 0x1000d793
mov eax, str.Beatmap_Select_Drawings
jmp 0x1000d793
mov eax, str.Replay_Preview
jmp 0x1000d793
mov eax, 0x1009c604
push eax
push str.Current_Scene:__s
call fcn.1003a2c0
mov ecx, dword [0x100abe6c]
add esp, 8
test ecx, ecx
je 0x1000d7b7
mov edx, 0x100aadb0
call fcn.10005910
jmp 0x1000d7bc
mov eax, 0x1009c604
push eax
push str.Selected_Mods:__s
call fcn.1003a2c0
mov eax, dword [0x100abe74]
add esp, 8
test eax, eax
jne 0x1000d7d7
xor cl, cl
jmp 0x1000d7e7
mov ecx, dword [eax]
test ecx, ecx
jne 0x1000d7e1
xor cl, cl
jmp 0x1000d7e7
mov cl, byte [ecx + 0x17f]
test cl, cl
mov eax, esi
cmove eax, edi
push eax
push str.Replay_Mode:__s
call fcn.1003a2c0
push dword [0x100aa940]
push str.Prepared_Methods:__d
call fcn.1003a2c0
add esp, 0x10
mov ecx, str.Account_Info
call fcn.10043a70
test al, al
je 0x1000d83b
push 0x100abea0
push str.Client_ID:__n_s
call fcn.1003a2c0
push 0x100abe7c
push str.Username:__s
call fcn.1003a2c0
add esp, 0x10
mov ecx, str.Playfield
call fcn.10043a70
test al, al
je 0x1000d8da
movss xmm0, dword [0x100abf64]
sub esp, 0x10
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100abf60]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Window_Size:__f__f
call fcn.1003a2c0
movss xmm0, dword [0x100abf80]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100abf7c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Playfield_Size:__f__f
call fcn.1003a2c0
movss xmm0, dword [0x100abf5c]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100abf58]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Playfield_Position:__f__f
call fcn.1003a2c0
add esp, 0x14
mov ecx, str.Pointers
call fcn.10043a70
test al, al
je 0x1000d9b4
push dword [0x100abe60]
push str.Binding_Manager:__08X
call fcn.1000de20
push dword [0x100abe74]
push str.Osu_Manager:__08X
call fcn.1000de20
push dword [0x100abfe8]
push str.Selected_Replay:__08X
call fcn.1000de20
push dword [0x100abe68]
push str.Selected_Song:__08X
call fcn.1000de20
push dword [0x100abe6c]
push str.Selected_Mods:__08X
call fcn.1000de20
push dword [0x100ac004]
push str.Update_Timing_1:__08X
call fcn.1000de20
push dword [0x100ac00c]
push str.Update_Timing_2:__08X
call fcn.1000de20
push dword [0x100ac000]
push str.Update_Timing_3:__08X
call fcn.1000de20
push dword [0x100ac008]
push str.Update_Timing_4:__08X
call fcn.1000de20
push dword [0x100abf70]
push str.Window_Manager:__08X
call fcn.1000de20
push dword [0x100aa94c]
push str.Dispatch_Table_ID:__08X
call fcn.1000de20
cmp dword [0x100abf08], 0
cmove esi, edi
push esi
push str.Dispatch_Table_ID_Found:__s
call fcn.1003a2c0
add esp, 8
mov ecx, str.Methods
call fcn.10043a70
test al, al
je 0x1000db06
push dword [0x100abf8c]
push str.Parse_Beatmap:__08X
call fcn.1000de20
push dword [0x100abf04]
push str.Beatmap_Onload:__08X
call fcn.1000de20
push dword [0x100abf40]
push str.Current_Scene:__08X
call fcn.1000de20
push dword [0x100abf3c]
push str.Selected_Song:__08X
call fcn.1000de20
push dword [0x100abf18]
push str.Audio_Time:__08X
call fcn.1000de20
push dword [0x100abef8]
push str.Osu_Manager:__08X
call fcn.1000de20
push dword [0x100abe5c]
push str.Binding_Manager:__08X
call fcn.1000de20
push dword [0x100abff0]
push str.Selected_Replay:__08X
call fcn.1000de20
push dword [0x100abefc]
push str.Osu_Client_ID:__08X
call fcn.1000de20
push dword [0x100abee8]
push str.Osu_Username:__08X
call fcn.1000de20
push dword [0x100abf74]
push str.Window_Manager:__08X
call fcn.1000de20
push dword [0x100abffc]
push str.Score_Multiplier:__08X
call fcn.1000de20
push dword [0x100abfc8]
push str.Discord_Rich_Presence:__08X
call fcn.1000de20
push dword [0x100ac034]
push str.Check_Flashlight:__08X
call fcn.1000de20
push dword [0x100ac038]
push str.Update_Flashlight:__08X
call fcn.1000de20
push dword [0x100ac020]
push str.Update_Timing:__08X
call fcn.1000de20
push dword [0x100ac014]
push str.Set_Playback_Rate:__08X
call fcn.1000de20
push dword [0x100ac024]
push str.Check_Timewarp:__08X
call fcn.1000de20
push dword [0x100abef0]
push str.Selected_Mods:__08X
call fcn.1000de20
push dword [0x100abf20]
push str.Update_Mods:__08X
call fcn.1000de20
mov ecx, str.Offsets
call fcn.10043a70
test al, al
je 0x1000dc39
push dword [0x100abfcc]
push str.Hitobject_Manager_Update_Variables:__08X
call fcn.1000de20
push dword [0x100abfb4]
push dword [0x100abfb0]
push dword [0x100abfac]
push str.AR:__08X__08X__08X
call fcn.1003a2c0
push dword [0x100abfa4]
push dword [0x100abfa0]
push dword [0x100abf9c]
push str.CS:__08X__08X__08X
call fcn.1003a2c0
push dword [0x100abf98]
push dword [0x100abf94]
push str.OD:__08X__08X
call fcn.1003a2c0
add esp, 0x2c
push dword [0x100abf0c]
push str.Beatmap_Onload:__08X
call fcn.1000de20
push dword [0x100abf34]
push str.Current_Scene:__08X
call fcn.1000de20
push dword [0x100abff4]
push str.Selected_Replay:__08X
call fcn.1000de20
push dword [0x100abf6c]
push str.Window_Manager:__08X
call fcn.1000de20
push dword [0x100abf00]
push str.Selected_Song:__08X
call fcn.1000de20
push dword [0x100abf1c]
push str.Audio_Time:__08X
call fcn.1000de20
push dword [0x100abee0]
push str.Osu_Manager:__08X
call fcn.1000de20
push dword [0x100abef4]
push str.Binding_Manager:__08X
call fcn.1000de20
push dword [0x100abf44]
push str.Client_ID:__08X
call fcn.1000de20
push dword [0x100abf10]
push str.Username:__08X
call fcn.1000de20
push dword [0x100abf24]
push str.Check_Timewarp:__08X
call fcn.1000de20
push dword [0x100abf14]
push str.Update_Mods:__08X
call fcn.1000de20
mov ecx, str.Hook_Jumps
call fcn.10043a70
test al, al
je 0x1000dceb
push dword [0x100abfa8]
push str.AR_Hook:__08X
call fcn.1000de20
push dword [0x100abf88]
push str.CS_Hook:__08X
call fcn.1000de20
push dword [0x100abf90]
push str.OD_Hook:__08X
call fcn.1000de20
push dword [0x100abfc0]
push str.Discord_Rich_Presence:__08X
call fcn.1000de20
push dword [0x100abf30]
push str.Beatmap_Onload:__08X
call fcn.1000de20
push dword [0x100ac030]
push str.Check_Timewarp_1:__08X
call fcn.1000de20
push dword [0x100ac010]
push str.Check_Timewarp_2:__08X
call fcn.1000de20
push dword [0x100abff8]
push str.Score_Multiplier:__08X
call fcn.1000de20
push dword [0x100abfec]
push str.Selected_Replay:__08X
call fcn.1000de20
push dword [0x100ac02c]
push str.Set_Playback_Rate:__08X
call fcn.1000de20
call fcn.1001de70
call fcn.10022510
call fcn.1001de70
call fcn.1001e6c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1004b5fe
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.1004bb68
push 0x100adf90
call fcn.1004b9e2
add esp, 4
cmp dword [0x100adf90], 0xffffffff
jne 0x1000c760
movsd xmm0, qword [0x100aa9d0]
divsd xmm0, qword [0x1009fc08]
push 0x100adf90
movsd qword [0x100adf88], xmm0
call fcn.1004b991
add esp, 4
jmp 0x1000c760
push 1
call fcn.1004b233
invalid
push 6
mov dword [ebp - 0x34], 0
call fcn.1004b233
nop
push esi
xlatb
add byte [eax], dl
pop ebp
xlatb
add byte [eax], dl
xlatb
add byte [eax], dl
imul edx, edi, 0
adc byte [edx - 41], dh
add byte [eax], dl
jns 0x1000dd69
add byte [eax], dl
adc bh, 0
adc byte [edi - 871366441], al
int3