Function at 0x100093f0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100695b5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x40
mov eax, dword [0x100a801c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x100a9b78]
test esi, esi
je 0x100094df
mov edi, dword [sym.imp.KERNEL32.dll_K32QueryWorkingSetEx]
lea eax, [ebp - 0x2c]
push 8
push eax
push dword [0x100a9c88]
mov dword [ebp - 0x2c], esi
call edi
test eax, eax
je 0x100094df
test byte [ebp - 0x28], 1
je 0x100094df
mov esi, dword [esi]
sub esi, 0xffffff80
cmp esi, dword [0x100aa918]
je 0x100094df
push 8
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], esi
push eax
push dword [0x100a9c88]
call edi
test eax, eax
je 0x100094d9
test byte [ebp - 0x34], 1
je 0x100094d9
mov edi, dword [esi]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], 0
lea edx, [edi + 4]
call fcn.10003100
add esp, 4
test eax, eax
je 0x100094d9
push 0
push 0
push 0xff
push str.Freedom_v0.94__9759cd9__is_Loading_
push dword [ebp - 0x24]
add edi, 8
push edi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 0x100
jae 0x1000b9ef
mov byte [eax + str.Freedom_v0.94__9759cd9__is_Loading_], 0
mov dword [0x100aa918], esi
mov ecx, dword [0x100a9c44]
mov edi, ecx
mov esi, dword [0x100a9f28]
mov dword [ebp - 0x24], ecx
test ecx, ecx
jne 0x10009508
mov ecx, dword [esi + 0x38]
test ecx, ecx
jne 0x10009503
mov eax, dword [esi + 0x2c]
mov eax, dword [eax + 0x44]
mov ecx, dword [eax]
mov edi, ecx
mov dword [ebp - 0x24], ecx
call fcn.1001e120
lea eax, [ebp - 0x24]
lea ecx, [esi + 0x478c]
push eax
call fcn.10028330
mov eax, dword [esi + 0x3e60]
mov ecx, dword [eax + 0x264]
mov eax, dword [edi + 0x30]
lea esi, [ecx + 0x48]
mov edi, dword [esi + 4]
mov dword [ebp - 0x34], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x24], eax
mov eax, dword [esi]
cmp eax, edi
jne 0x10009567
lea ecx, [eax + 1]
test edi, edi
je 0x10009552
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10009557
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10028240
mov ecx, dword [ebp - 0x34]
mov edx, dword [esi]
mov eax, dword [esi + 8]
mov edi, dword [ebp - 0x24]
mov dword [eax + edx*4], edi
inc dword [esi]
mov dword [ecx + 0x70], edi
call fcn.100307c0
mov eax, dword [0x100a9f28]
xor edx, edx
push 0x41
mov ecx, str.Freedom
or dword [eax + 0x4714], 1
mov dword [eax + 0x4724], 0
mov dword [eax + 0x4728], 0
mov dword [eax + 0x472c], 0
mov dword [eax + 0x4730], 0
mov dword [eax + 0x4718], 2
call fcn.1001b4b0
add esp, 4
push str.Freedom_v0.94__9759cd9__is_Loading_
push 0x1009b4c0
call fcn.10039840
movss xmm0, dword [0x1009e480]
add esp, 8
movss xmm1, dword [0x100a9bf8]
comiss xmm0, xmm1
jbe 0x1000963f
mulss xmm1, dword [0x1009e564]
sub esp, 8
addss xmm1, dword [0x1009e41c]
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
push str.Memory_Scan:__.0f__
push 0x20
push 0x100ab320
call fcn.10012fd0
movss xmm0, dword [0x100a9bf8]
lea ecx, [ebp - 0x2c]
add esp, 0x14
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call fcn.1003ba40
mov ecx, dword [0x100a9f28]
mov eax, dword [ecx + 0x3e60]
movss xmm1, dword [eax + 0x20]
addss xmm1, dword [eax + 0x18]
movss xmm0, dword [eax + 0x14]
or dword [ecx + 0x4714], 1
movss dword [ecx + 0x4724], xmm0
mov dword [ecx + 0x472c], 0
movss dword [ecx + 0x4728], xmm1
mov dword [ecx + 0x4730], 0
mov dword [ecx + 0x4718], 8
mov ecx, eax
cmp byte [ecx + 0xaf], 0
jne 0x1000b983
push ecx
push str.settings
call fcn.10015720
mov ecx, dword [0x100a9f28]
mov esi, eax
cmp byte [ecx + 0x371f], 0
je 0x100096dd
cmp byte [ecx + 0x4508], 0
jne 0x100096dd
mov ecx, 0x20
call fcn.10015aa0
test al, al
je 0x100096dd
mov edx, 1
mov ecx, esi
call fcn.10021d40
mov ecx, esi
call fcn.100220b0
test al, al
je 0x1000b983
cmp dword [0x100aa314], 0
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Difficulty
mov dword [ebp - 0x28], 0
call fcn.10042f60
add esp, 8
test al, al
je 0x10009731
mov eax, dword [0x100a9f28]
xor ecx, ecx
mov dword [0x100aa314], ecx
or dword [eax + 0x4714], 0x20
jmp 0x10009737
mov ecx, dword [0x100aa314]
cmp dword [0x100a9c14], 0
je 0x10009783
cmp ecx, 1
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Relax
push 1
call fcn.10042f60
add esp, 8
test al, al
je 0x1000978d
mov eax, dword [0x100a9f28]
mov dword [0x100aa314], 1
or dword [eax + 0x4714], 0x20
jmp 0x1000978d
push str.Relax
call fcn.1000ba30
cmp dword [0x100a9c14], 0
je 0x100097dd
cmp dword [0x100aa314], 2
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Aimbot
mov dword [ebp - 0x28], 0
call fcn.10042f60
add esp, 8
test al, al
je 0x100097e7
mov eax, dword [0x100a9f28]
mov dword [0x100aa314], 2
or dword [eax + 0x4714], 0x20
jmp 0x100097e7
push str.Aimbot
call fcn.1000ba30
cmp dword [0x100a9eec], 0
je 0x10009837
cmp dword [0x100aa314], 3
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Timewarp
mov dword [ebp - 0x28], 0
call fcn.10042f60
add esp, 8
test al, al
je 0x10009841
mov eax, dword [0x100a9f28]
mov dword [0x100aa314], 3
or dword [eax + 0x4714], 0x20
jmp 0x10009841
push str.Timewarp
call fcn.1000ba30
cmp dword [0x100a9edc], 0
je 0x10009891
cmp dword [0x100aa314], 4
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Replay
mov dword [ebp - 0x28], 0
call fcn.10042f60
add esp, 8
test al, al
je 0x1000989b
mov eax, dword [0x100a9f28]
mov dword [0x100aa314], 4
or dword [eax + 0x4714], 0x20
jmp 0x1000989b
push str.Replay
call fcn.1000ba30
cmp dword [0x100aa314], 5
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, 0x1009b494
mov dword [ebp - 0x28], 0
call fcn.10042f60
add esp, 8
test al, al
je 0x100098e3
mov eax, dword [0x100a9f28]
mov ecx, 5
mov dword [0x100aa314], ecx
or dword [eax + 0x4714], 0x20
jmp 0x100098e9
mov ecx, dword [0x100aa314]
cmp ecx, 6
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Misc
push 1
call fcn.10042f60
add esp, 8
test al, al
je 0x1000992d
mov eax, dword [0x100a9f28]
mov ecx, 6
mov dword [0x100aa314], ecx
or dword [eax + 0x4714], 0x20
jmp 0x10009933
mov ecx, dword [0x100aa314]
cmp ecx, 7
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.About
push 1
call fcn.10042f60
add esp, 8
test al, al
je 0x10009977
mov eax, dword [0x100a9f28]
mov ecx, 7
mov dword [0x100aa314], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000997d
mov ecx, dword [0x100aa314]
cmp ecx, 8
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Debug
push 1
call fcn.10042f60
add esp, 8
test al, al
je 0x100099be
mov eax, dword [0x100a9f28]
mov dword [0x100aa314], 8
or dword [eax + 0x4714], 0x20
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x44070000
mov ecx, 5
mov dword [ebp - 0x28], 0
call fcn.10013d50
mov eax, dword [0x100aa314]
cmp eax, 8
je 0x10009a08
cmp eax, 6
je 0x10009a08
cmp eax, 1
je 0x10009a08
mov edx, dword [0x100a9f28]
mov eax, dword [edx + 0x3e60]
movss xmm0, dword [eax + 0x20]
movss dword [edx + 0x4738], xmm0
jmp 0x10009a18
mov edx, dword [0x100a9f28]
mov dword [edx + 0x4738], 0
mov ecx, dword [edx + 0x3e60]
mov esi, edx
or dword [edx + 0x4714], 2
mov dword [edx + 0x471c], 1
mov dword [edx + 0x4734], 0
xor edx, edx
movss xmm0, dword [ecx + 0x1c]
addss xmm0, dword [ecx + 0x14]
movss xmm1, dword [ecx + 0x18]
mov ecx, str.tab_content
or dword [esi + 0x4714], 1
push 0x45
movss dword [esi + 0x4728], xmm1
movss dword [esi + 0x4724], xmm0
mov dword [esi + 0x472c], 0
mov dword [esi + 0x4730], 0
mov dword [esi + 0x4718], 1
call fcn.1001b4b0
add esp, 4
mov ecx, 1
call fcn.10013dd0
cmp dword [0x100aa314], 0
jne 0x10009ae6
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x40f00000
mov ecx, 0xe
mov dword [ebp - 0x28], 0x40f00000
call fcn.10013d50
mov edx, 0x100a8a00
call fcn.1000bb70
mov edx, 0x100a89e0
call fcn.1000bb70
mov edx, 0x100a8a20
call fcn.1000bb70
mov ecx, 1
call fcn.10013dd0
cmp dword [0x100aa314], 1
jne 0x10009eca
mov edx, 0x100a9b66
mov ecx, str.Enable
call fcn.1003b110
test al, al
je 0x10009b70
cmp byte [0x100a9b66], 0
je 0x10009b16
call fcn.100084e0
jmp 0x10009b1b
call fcn.10008530
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x10009b70
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x10009b70
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
mov eax, dword [0x100a9f28]
movss xmm3, dword [0x1009e5c0]
push ecx
push 0
movss xmm2, dword [eax + 0x3bcc]
push 0x1009bc6c
push ecx
lea ecx, [ebp - 0x20]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc8]
call fcn.10036900
movss xmm0, dword [ebp - 0x20]
addss xmm0, dword [0x1009e484]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1009e4c8]
call fcn.10021020
push 0
push 0
push 0x14
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 2
push 0x100a88d8
xor edx, edx
mov dword [ebp - 0x28], 0
mov ecx, str.Left_Click
call fcn.1003f730
push 0
push 0
push 0x14
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 2
push 0x100a88d4
xor edx, edx
mov dword [ebp - 0x28], 0
mov ecx, str.Right_Click
call fcn.1003f730
mov ecx, dword [0x100a9f28]
add esp, 0x30
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
lea ecx, [ebp - 0x2c]
mov dword [edx + 0x1a8], eax
call fcn.1003bd10
cmp dword [0x100a88b4], 0x73
mov ecx, str.SingleTap
sete dl
call fcn.1003b570
test al, al
je 0x10009d14
push str.SingleTap_Mode
push 0x10070cd4
push 0x100a8be0
mov dword [0x100a88b4], 0x73
call fcn.10003520
mov eax, dword [0x100a9f28]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x10009d14
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x10009d14
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
movss xmm1, dword [0x1009e5d0]
xorps xmm0, xmm0
call fcn.10020f70
cmp dword [0x100a88b4], 0x61
mov ecx, str.Alternate
sete dl
call fcn.1003b570
test al, al
je 0x10009db2
push str.Alternate_Mode
push 0x10070cd4
push 0x100a8be0
mov dword [0x100a88b4], 0x61
call fcn.10003520
mov eax, dword [0x100a9f28]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x10009db2
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x10009db2
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
mov edx, 0x100a88bd
mov ecx, str.Variable_Unstable_Rate
call fcn.1003b110
test al, al
je 0x10009e30
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x10009e30
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x10009e30
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
mov al, byte [0x100a88bd]
mov byte [ebp - 0x2d], al
test al, al
jne 0x10009e57
call fcn.1001e360
mov edx, 0x100a9b68
mov ecx, str.Jumping_Unstable_Rate_Window
call fcn.1003b110
test al, al
je 0x10009ebf
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x10009ebf
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x10009ebf
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
cmp byte [ebp - 0x2d], 0
jne 0x10009eca
call fcn.1001e3f0
cmp dword [0x100aa314], 2
jne 0x1000a0fe
mov edx, 0x100a9b60
mov ecx, str.Enable
call fcn.1003b110
test al, al
je 0x10009f54
cmp byte [0x100a9b60], 0
je 0x10009efa
call fcn.100084e0
jmp 0x10009eff
call fcn.10008530
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x10009f54
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x10009f54
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
push ecx
push str.Cursor_Speed:__.0f
lea eax, [ebp - 0x34]
mov dword [ebp - 0x24], 0x42480000
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x34], 0x43fa0000
push eax
push 0x100a88d0
mov edx, 8
mov ecx, str.fraction_modifier
call fcn.1003ccb0
add esp, 0x14
call fcn.10018ad0
test al, al
je 0x10009ffb
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x10009ffb
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x10009ffb
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x3f000000
call fcn.1003bd10
push ecx
push str.Spins_Per_Minute:__d
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x258
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0
push eax
push 0x100a88c4
mov edx, 4
mov ecx, str.spins_per_minute
call fcn.1003ccb0
add esp, 0x14
call fcn.10018ad0
test al, al
je 0x1000a0a3
mov edx, dword [0x100a9f28]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x1000a0a9
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a0a3
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
mov edx, dword [0x100a9f28]
movss xmm0, dword [edx + 0x37c8]
mov eax, dword [edx + 0x3e60]
addss xmm0, xmm0
movss xmm1, dword [eax + 0x20]
addss xmm0, dword [edx + 0x3bcc]
addss xmm0, dword [edx + 0x37d8]
mov byte [eax + 0xac], 1
mov eax, dword [edx + 0x3e60]
subss xmm1, xmm0
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
mov byte [eax + 0x131], 1
addss xmm0, xmm1
movss dword [eax + 0xf4], xmm0
cmp dword [0x100aa314], 3
jne 0x1000a25f
mov edx, 0x100a9b61
mov ecx, str.Enable
call fcn.1003b110
test al, al
je 0x1000a188
cmp byte [0x100a9b61], 0
je 0x1000a12e
call fcn.1000dd60
jmp 0x1000a133
call fcn.1000de30
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a188
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a188
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100a9484]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x100abe30]
cmp eax, dword [ecx + 4]
jg 0x1000b9ab
push ecx
push str.Timewarp_Scale:__.2lf
push 0x100a8cd8
push 0x100a8cd0
push 0x100abe28
mov edx, 9
mov ecx, str.timewarp_scale
call fcn.1003ccb0
add esp, 0x14
test al, al
je 0x1000a201
movsd xmm0, qword [0x100abe28]
mulsd xmm0, qword [0x1009e508]
movsd qword [0x100a88c8], xmm0
call fcn.10018ad0
test al, al
je 0x1000a25f
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a25f
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a25f
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
cmp dword [0x100aa314], 4
jne 0x1000a684
push str.Open_Replay_Preview_in_game_to_Select_a_Replay
push 0x1009b4c0
call fcn.10039840
add esp, 8
mov ecx, 0x400
call fcn.10015aa0
test al, al
je 0x1000a299
push str.Selected_Replay
call fcn.10021c50
add esp, 4
movss xmm0, dword [0x100a8bcc]
push str.Mods
push dword [0x100a8bd0]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str.Replay_Author
push str._s____.2f______ux____s
call fcn.10039840
add esp, 0x18
mov ecx, 0x400
call fcn.10015aa0
test al, al
je 0x1000a2e4
push str.Player__Accuracy__Mods
call fcn.10021c50
add esp, 4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40000000
call fcn.1003bd10
mov edx, 0x100a9b6a
mov ecx, str.Enable
call fcn.1003b110
test al, al
je 0x1000a412
cmp byte [0x100a9b6a], 0
je 0x1000a3b8
cmp byte [0x100aa040], 0
jne 0x1000a365
mov eax, dword [0x100aa02c]
test eax, eax
je 0x1000a365
push eax
push dword [0x100aa020]
push 0x100aa030
call fcn.1004c810
mov edx, dword [0x100aa024]
add esp, 0xc
mov ecx, dword [0x100aa020]
push dword [0x100aa02c]
call fcn.100031d0
add esp, 4
mov byte [0x100aa040], 1
mov ecx, 0x100aa068
call fcn.10006eb0
cmp byte [0x100aa218], 0
jne 0x1000a3bd
mov eax, dword [0x100aa204]
test eax, eax
je 0x1000a3bd
push eax
push dword [0x100aa1f8]
push 0x100aa208
call fcn.1004c810
mov edx, dword [0x100aa1fc]
add esp, 0xc
mov ecx, dword [0x100aa1f8]
push dword [0x100aa204]
call fcn.100031d0
add esp, 4
mov byte [0x100aa218], 1
jmp 0x1000a3bd
call fcn.1000dc20
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a412
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a412
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
mov ecx, 0x400
call fcn.10015aa0
test al, al
je 0x1000a42d
push str.Usage:_Open_Replay_Preview_in_game_to_Select_a_Replay
call fcn.10021c50
add esp, 4
movss xmm1, dword [0x1009e5d0]
movss xmm0, dword [0x1009e570]
call fcn.10020f70
cmp byte [0x100a9b6a], 0
jne 0x1000a465
call fcn.1001e2d0
movaps xmm0, xmmword [0x1009e6d0]
lea edx, [ebp - 0x48]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
call fcn.10013c50
mov edx, 0x100a9b6b
mov ecx, str.Hardrock
call fcn.1003b110
test al, al
je 0x1000a508
cmp byte [0x100a8a68], 0
je 0x1000a508
mov ecx, dword [0x100a8a54]
mov eax, dword [0x100a8a50]
cmp eax, ecx
je 0x1000a508
movss xmm5, dword [0x100a9c6c]
movss xmm6, dword [0x1009e6f0]
movss xmm7, dword [0x1009e580]
movss xmm0, dword [eax + 0xc]
movaps xmm1, xmm7
subss xmm0, dword [0x100a9c60]
movss xmm4, dword [eax + 8]
subss xmm4, dword [0x100a9c5c]
divss xmm0, xmm5
divss xmm4, xmm5
subss xmm1, xmm0
movaps xmm0, xmm5
mulss xmm0, xmm4
addss xmm0, dword [0x100a9c5c]
andps xmm1, xmm6
mulss xmm1, xmm5
addss xmm1, dword [0x100a9c60]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
add eax, 0x18
cmp eax, ecx
jne 0x1000a4b0
mov ecx, 0x400
call fcn.10015aa0
test al, al
je 0x1000a523
push str.Convert_Replay_to_from_Hardrock
call fcn.10021c50
add esp, 4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40000000
call fcn.1003bd10
mov edx, 0x100a88be
mov ecx, str.Replay_Aim
call fcn.1003b110
test al, al
je 0x1000a5a1
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a5a1
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a5a1
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
mov ecx, 0x400
call fcn.10015aa0
test al, al
je 0x1000a5bc
push str.Aim_According_to_Replay_Data
call fcn.10021c50
add esp, 4
movss xmm1, dword [0x1009e5d0]
movss xmm0, dword [0x1009e570]
call fcn.10020f70
mov edx, 0x100a88bc
mov ecx, str.Replay_Keys
call fcn.1003b110
test al, al
je 0x1000a639
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a639
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a639
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
mov ecx, 0x400
call fcn.10015aa0
test al, al
je 0x1000a654
push str.Press_Keys_According_to_Replay_Data
call fcn.10021c50
add esp, 4
cmp byte [0x100a9b6a], 0
jne 0x1000a684
call fcn.10013ca0
mov edx, dword [0x100a9f28]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x100aa314], 5
jne 0x1000aa37
mov edi, dword [0x100a9f20]
test edi, edi
jne 0x1000a6a0
call fcn.1001e360
mov edx, 0x100a9b64
mov ecx, str.Unmod_Flashlight
call fcn.1003b110
test al, al
je 0x1000a720
cmp byte [0x100a9b64], 0
je 0x1000a6c3
call fcn.1000df60
jmp 0x1000a6c8
call fcn.1000e000
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a720
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov dword [ebp - 0x34], eax
mov ecx, esi
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a720
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x34]
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
test edi, edi
jne 0x1000a729
call fcn.1001e3f0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
mov edi, dword [0x100a9eb4]
test edi, edi
jne 0x1000a74e
call fcn.1001e360
mov edx, 0x100a9b69
mov ecx, str.Unmod_Hidden
call fcn.1003b110
test al, al
je 0x1000a828
cmp byte [0x100a9b69], 0
je 0x1000a7cb
cmp byte [0x100aa040], 0
jne 0x1000a7b5
mov eax, dword [0x100aa02c]
test eax, eax
je 0x1000a7b5
push eax
push dword [0x100aa020]
push 0x100aa030
call fcn.1004c810
mov edx, dword [0x100aa024]
add esp, 0xc
mov ecx, dword [0x100aa020]
push dword [0x100aa02c]
call fcn.100031d0
add esp, 4
mov byte [0x100aa040], 1
mov ecx, 0x100aa068
call fcn.10006eb0
mov ecx, 0x100aa1d0
call fcn.10006eb0
jmp 0x1000a7d0
call fcn.1000d7c0
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a828
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov dword [ebp - 0x34], eax
mov ecx, esi
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a828
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x34]
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
test edi, edi
jne 0x1000a831
call fcn.1001e3f0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
mov eax, dword [0x100a9ee4]
mov dword [ebp - 0x28], eax
test eax, eax
jne 0x1000a858
call fcn.1001e360
push str.Score_Multiplier
call fcn.10039840
add esp, 4
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x34], 0x40a00000
call fcn.1003bd10
mov ecx, 0x46
call fcn.1001e870
mov edx, 0x100a9b63
mov ecx, str.Enable
call fcn.1003b110
test al, al
je 0x1000a902
cmp byte [0x100a9b63], 0
je 0x1000a8a8
call fcn.1000dca0
jmp 0x1000a8ad
call fcn.1000dcf0
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a907
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a902
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
mov eax, dword [0x100a9f28]
mov eax, dword [eax + 0x3e60]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0x40a00000
dec dword [eax + 0xe4]
call fcn.1003bd10
cmp byte [0x100a9b63], 0
jne 0x1000a94c
call fcn.1001e2d0
movaps xmm0, xmmword [0x1009e6d0]
lea edx, [ebp - 0x48]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
call fcn.10013c50
push ecx
push str.Score_Multiplier:__.0f
lea eax, [ebp - 0x34]
mov dword [ebp - 0x24], 0
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x34], 0x42c80000
push eax
push 0x100a88b8
mov edx, 8
mov ecx, str.score_multiplier
call fcn.1003ccb0
add esp, 0x14
mov ecx, 0x400
call fcn.10015aa0
test al, al
je 0x1000a99a
push str.Hold_Ctrl_To_Set_a_Custom_Value
call fcn.10021c50
add esp, 4
call fcn.10018ad0
test al, al
je 0x1000a9fc
mov esi, dword [0x100a9f28]
mov edi, dword [esi + 0x20]
mov dword [esi + 0x5a7c], 0
test edi, edi
je 0x1000aa02
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov dword [ebp - 0x34], eax
mov ecx, edi
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000a9fc
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x34]
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
mov esi, dword [0x100a9f28]
cmp byte [0x100a9b63], 0
jne 0x1000aa2c
call fcn.10013ca0
dec dword [esi + 0x47a4]
mov eax, dword [esi + 0x47ac]
mov ecx, dword [esi + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46b8], eax
cmp dword [ebp - 0x28], 0
jne 0x1000aa37
call fcn.1001e3f0
cmp dword [0x100aa314], 6
jne 0x1000b15b
push str.Discord_RPC_Settings
call fcn.10039840
add esp, 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
mov edx, 0x100a9b67
mov ecx, str.Enable
call fcn.1003b110
test al, al
je 0x1000aae4
cmp byte [0x100a9b67], 0
je 0x1000aa8a
call fcn.1000d6e0
jmp 0x1000aa8f
call fcn.1000d730
mov eax, dword [0x100a9f28]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000aae4
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000aae4
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003bd10
cmp byte [0x100a9b67], 0
jne 0x1000ab1d
call fcn.1001e2d0
movaps xmm0, xmmword [0x1009e6d0]
lea edx, [ebp - 0x48]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
call fcn.10013c50
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100aad20
mov edx, str.State
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_state
call fcn.1003f730
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0x18
test al, al
je 0x1000ac3b
mov eax, dword [0x100a9f28]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x1000abb7
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov dword [ebp - 0x28], eax
mov ecx, edi
call fcn.10013150
mov edi, eax
test edi, edi
je 0x1000abb7
push edi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x28]
call fcn.100570f9
push edi
call fcn.1005493d
add esp, 0x14
lea eax, [ebp - 0x48]
mov edx, str.FreeCSharpString
push 0x100aaf20
push eax
call fcn.100019d0
add esp, 8
push 0
push 0
push 0xffffffffffffffff
push 0x100aad20
push 0
push 0xfde9
call esi
push eax
push 0x100aaf20
push 0xffffffffffffffff
push 0x100aad20
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x1000b9ef
xor ecx, ecx
mov edx, str.GetCSharpStringPtr
mov word [eax + 0x100aaf20], cx
lea eax, [ebp - 0x48]
push 0x100aaf20
push eax
call fcn.100019d0
add esp, 8
movups xmm0, xmmword [eax]
movd eax, xmm0
movups xmmword [ebp - 0x48], xmm0
test ax, ax
je 0x1000ac3b
mov eax, dword [ebp - 0x40]
mov dword [0x100a9ea0], eax
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100aa318
mov edx, str.Large_Text
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_large_text
call fcn.1003f730
add esp, 0x18
test al, al
je 0x1000ad53
mov eax, dword [0x100a9f28]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x1000accf
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov dword [ebp - 0x28], eax
mov ecx, edi
call fcn.10013150
mov edi, eax
test edi, edi
je 0x1000accf
push edi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x28]
call fcn.100570f9
push edi
call fcn.1005493d
add esp, 0x14
lea eax, [ebp - 0x48]
mov edx, str.FreeCSharpString
push 0x100aa518
push eax
call fcn.100019d0
add esp, 8
push 0
push 0
push 0xffffffffffffffff
push 0x100aa318
push 0
push 0xfde9
call esi
push eax
push 0x100aa518
push 0xffffffffffffffff
push 0x100aa318
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x1000b9ef
xor ecx, ecx
mov edx, str.GetCSharpStringPtr
mov word [eax + 0x100aa518], cx
lea eax, [ebp - 0x48]
push 0x100aa518
push eax
call fcn.100019d0
add esp, 8
movups xmm0, xmmword [eax]
movd eax, xmm0
movups xmmword [ebp - 0x48], xmm0
test ax, ax
je 0x1000ad53
mov eax, dword [ebp - 0x40]
mov dword [0x100a9eac], eax
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100ab350
mov edx, str.Small_Text
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_small_text
call fcn.1003f730
add esp, 0x18
test al, al
je 0x1000ae21
mov ecx, dword [0x100a9f28]
mov ecx, dword [ecx + 0x20]
call fcn.10026d60
lea eax, [ebp - 0x48]
mov edx, str.FreeCSharpString
push 0x100aa920
push eax
call fcn.100019d0
add esp, 8
push 0
push 0
push 0xffffffffffffffff
push 0x100ab350
push 0
push 0xfde9
call esi
push eax
push 0x100aa920
push 0xffffffffffffffff
push 0x100ab350
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x1000b9ef
xor ecx, ecx
mov edx, str.GetCSharpStringPtr
mov word [eax + 0x100aa920], cx
lea eax, [ebp - 0x48]
push 0x100aa920
push eax
call fcn.100019d0
add esp, 8
movups xmm0, xmmword [eax]
movd eax, xmm0
movups xmmword [ebp - 0x48], xmm0
test ax, ax
je 0x1000ae21
mov eax, dword [ebp - 0x40]
mov dword [0x100a9ea4], eax
cmp byte [0x100a9b67], 0
jne 0x1000ae34
call fcn.10013ca0
call fcn.1001e330
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x41200000
call fcn.1003bd10
mov eax, dword [0x100a9c44]
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push str.Font_Size:__dpx
push 0x10
push 0x100ab340
call fcn.10012510
add esp, 0xc
call fcn.1003bd90
add esp, 4
test al, al
je 0x1000af78
mov eax, dword [0x100a9f28]
mov eax, dword [eax + 0x2c]
mov esi, dword [eax + 0x44]
mov eax, dword [eax + 0x3c]
lea edi, [esi + eax*4]
mov dword [ebp - 0x24], edi
cmp esi, edi
je 0x1000af73
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov eax, dword [esi]
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push 0x1009bfe4
lea eax, [ebp - 0x20]
push 4
push eax
call fcn.10012510
mov eax, dword [esi]
lea ecx, [ebp - 0x50]
cmp eax, dword [0x100a9c44]
push ecx
sete al
lea ecx, [ebp - 0x20]
push 0
mov dl, al
mov byte [ebp - 0x2d], al
call fcn.10042f60
add esp, 0x18
test al, al
je 0x1000af5d
mov eax, dword [esi]
mov dword [0x100a9c44], eax
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
mov dword [0x100a88c0], eax
mov eax, dword [0x100a9f28]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x1000af5a
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov dword [ebp - 0x28], eax
mov ecx, edi
call fcn.10013150
mov edi, eax
test edi, edi
je 0x1000af5a
push edi
push dword [ebp - 0x34]
mov dword [ebp - 0x3c], 0
push 1
push dword [ebp - 0x28]
call fcn.100570f9
push edi
call fcn.1005493d
add esp, 0x14
mov edi, dword [ebp - 0x24]
cmp byte [ebp - 0x2d], 0
je 0x1000af68
call fcn.1001e720
add esi, 4
cmp esi, edi
jne 0x1000aea6
call fcn.10022150
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x41200000
call fcn.1003bd10
mov edx, 0x100a8ce0
mov ecx, str.Disable_NtUserSendInput_Check
call fcn.1003b110
test al, al
je 0x1000afb6
cmp byte [0x100a8ce0], 0
je 0x1000afb1
call fcn.10008440
jmp 0x1000afb6
call fcn.10008490
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003bd10
call fcn.10006fb0
mov byte [ebp - 0x2d], al
test al, al
je 0x1000afdd
call fcn.1001e2d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Rescan_Memory
mov dword [ebp - 0x1c], 0
call fcn.1003a170
add esp, 4
test al, al
je 0x1000b021
call fcn.10008660
push 0
push 0
push 0
push 0x10008430
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 0x2d], 0
je 0x1000b049
mov edx, dword [0x100a9f28]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
movss xmm1, dword [0x1009e54c]
xorps xmm0, xmm0
call fcn.10020f70
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Unload_DLL
mov dword [ebp - 0x1c], 0
call fcn.1003a170
add esp, 4
test al, al
je 0x1000b145
push dword [0x100a9c48]
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
cmp byte [0x100aa064], 0
je 0x1000b0d8
mov edi, dword [0x100aa050]
lea ecx, [ebp - 0x34]
mov eax, dword [0x100aa044]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push ecx
push 0x40
push edi
push eax
mov dword [ebp - 0x24], eax
call esi
push edi
push 0x100aa054
push dword [ebp - 0x24]
call fcn.1004c810
add esp, 0xc
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x34]
push edi
push dword [ebp - 0x24]
call esi
mov byte [0x100aa064], 0
call fcn.10008660
push 4
call fcn.1004ad48
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [eax], 0x1000c3a0
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0
push ecx
push 0
push eax
push 0x1000c9d0
push 0
push 0
call fcn.100535c7
add esp, 0x18
mov dword [ebp - 0x38], eax
test eax, eax
je 0x1000b9fb
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x1000b9f4
push ecx
push eax
call fcn.1004a9ab
add esp, 8
test eax, eax
jne 0x1000b9f4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003bd10
cmp dword [0x100aa314], 7
jne 0x1000b354
push str.Ciremuns_Freedom_v0.94__9759cd9_
call fcn.10039840
add esp, 4
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003bd10
push str.Special_Thanks_to_Maple_Syrup
call fcn.10039840
add esp, 4
push str._mrflashstudio
call fcn.10039840
add esp, 4
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003bd10
mov eax, dword [0x100a9f28]
movss xmm3, dword [0x1009e5c0]
push ecx
push 0
movss xmm2, dword [eax + 0x3bcc]
push str.Ciremun
push ecx
lea ecx, [ebp - 0x20]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc8]
call fcn.10036900
movss xmm0, dword [ebp - 0x20]
addss xmm0, dword [0x1009e484]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1009e540]
call fcn.10021020
push 0
push 0
push 0x4000
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 8
push str.Ciremun
xor edx, edx
mov dword [ebp - 0x1c], 0
mov ecx, str.___Discord
call fcn.1003f730
mov ecx, dword [0x100a9f28]
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40200000
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
lea ecx, [ebp - 0x20]
mov dword [edx + 0x1a8], eax
call fcn.1003bd10
mov eax, dword [0x100a9f28]
add esp, 0x14
movss xmm3, dword [0x1009e5c0]
movss xmm2, dword [eax + 0x3bcc]
push 0
push str.https:__discord.gg_FyCrwed6jv
push ecx
lea ecx, [ebp - 0x20]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc8]
call fcn.10036900
movss xmm0, dword [ebp - 0x20]
addss xmm0, dword [0x1009e484]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1009e540]
call fcn.10021020
push 0
push 0
push 0x4000
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 0x1d
push str.https:__discord.gg_FyCrwed6jv
xor edx, edx
mov dword [ebp - 0x1c], 0
mov ecx, str.___Discord_Server
call fcn.1003f730
mov ecx, dword [0x100a9f28]
add esp, 0x18
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
mov dword [edx + 0x1a8], eax
cmp dword [0x100aa314], 8
jne 0x1000b979
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Debug_Log
mov dword [ebp - 0x1c], 0
call fcn.1003a170
add esp, 4
test al, al
je 0x1000b3e7
mov eax, dword [0x100a9f28]
mov byte [0x100a9b65], 1
mov byte [0x100a9b62], 1
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000b3e7
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
call fcn.10026dc0
mov edx, 0x1009d2c0
mov ecx, esi
mov edi, eax
call fcn.10013150
mov esi, eax
test esi, esi
je 0x1000b3e7
push esi
push dword [ebp - 0x34]
mov dword [ebp - 0x3c], 0
push 1
push edi
call fcn.100570f9
push esi
call fcn.1005493d
add esp, 0x14
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40000000
call fcn.1003bd10
mov ecx, str.Game
call fcn.10042ee0
mov esi, 0x1009c0f0
mov edi, 0x1009c0f4
test al, al
je 0x1000b4da
mov eax, dword [0x100a9b84]
test eax, eax
je 0x1000b426
mov eax, dword [eax]
jmp 0x1000b428
xor eax, eax
push eax
push str.Audio_Time:__d
call fcn.10039840
mov eax, dword [0x100a9b7c]
add esp, 8
test eax, eax
je case.default.0x1000b446
mov eax, dword [eax]
cmp eax, 7
ja case.default.0x1000b446
jmp dword [eax*4 + 0x1000ba0c]
mov eax, str.Main_Menu
jmp 0x1000b48a
mov eax, str.Editor
jmp 0x1000b48a
mov eax, str.Game
jmp 0x1000b48a
mov eax, str.Exit
jmp 0x1000b48a
mov eax, str.Editor_Beatmap_Select
jmp 0x1000b48a
mov eax, str.Beatmap_Select
jmp 0x1000b48a
mov eax, str.Beatmap_Select_Drawings
jmp 0x1000b48a
mov eax, str.Replay_Preview
jmp 0x1000b48a
mov eax, str.Unknown
push eax
push str.Current_Scene:__s
call fcn.10039840
mov eax, dword [0x100a9b80]
add esp, 8
test eax, eax
jne 0x1000b4a5
xor cl, cl
jmp 0x1000b4b5
mov ecx, dword [eax]
test ecx, ecx
jne 0x1000b4af
xor cl, cl
jmp 0x1000b4b5
mov cl, byte [ecx + 0x17b]
test cl, cl
mov eax, esi
cmove eax, edi
push eax
push str.Replay_Mode:__s
call fcn.10039840
push dword [0x100a88b0]
push str.Prepared_Methods:__d
call fcn.10039840
add esp, 0x10
mov ecx, str.Account_Info
call fcn.10042ee0
test al, al
je 0x1000b509
push 0x100a9ba8
push str.Client_ID:__n_s
call fcn.10039840
push 0x100a9b88
push str.Username:__s
call fcn.10039840
add esp, 0x10
mov ecx, str.Playfield
call fcn.10042ee0
test al, al
je 0x1000b5a8
movss xmm0, dword [0x100a9c68]
sub esp, 0x10
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100a9c64]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Window_Size:__f__f
call fcn.10039840
movss xmm0, dword [0x100a9c80]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100a9c7c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Playfield_Size:__f__f
call fcn.10039840
movss xmm0, dword [0x100a9c60]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100a9c5c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Playfield_Position:__f__f
call fcn.10039840
add esp, 0x14
mov ecx, str.Pointers
call fcn.10042ee0
test al, al
je 0x1000b672
push dword [0x100a9b74]
push str.Binding_Manager:__08X
call fcn.1000bab0
push dword [0x100a9b80]
push str.Osu_Manager:__08X
call fcn.1000bab0
push dword [0x100a9ed0]
push str.Selected_Replay:__08X
call fcn.1000bab0
push dword [0x100a9b78]
push str.Selected_Song:__08X
call fcn.1000bab0
push dword [0x100a9f10]
push str.Update_Timing_1:__08X
call fcn.1000bab0
push dword [0x100a9f18]
push str.Update_Timing_2:__08X
call fcn.1000bab0
push dword [0x100a9f0c]
push str.Update_Timing_3:__08X
call fcn.1000bab0
push dword [0x100a9f14]
push str.Update_Timing_4:__08X
call fcn.1000bab0
push dword [0x100a9c74]
push str.Window_Manager:__08X
call fcn.1000bab0
push dword [0x100a88dc]
push str.Dispatch_Table_ID:__08X
call fcn.1000bab0
cmp dword [0x100a9c10], 0
cmove esi, edi
push esi
push str.Dispatch_Table_ID_Found:__s
call fcn.10039840
add esp, 8
mov ecx, str.Methods
call fcn.10042ee0
test al, al
je 0x1000b7a4
push dword [0x100a9e74]
push str.Parse_Beatmap:__08X
call fcn.1000bab0
push dword [0x100a9c0c]
push str.Beatmap_Onload:__08X
call fcn.1000bab0
push dword [0x100a9c3c]
push str.Current_Scene:__08X
call fcn.1000bab0
push dword [0x100a9c38]
push str.Selected_Song:__08X
call fcn.1000bab0
push dword [0x100a9c1c]
push str.Audio_Time:__08X
call fcn.1000bab0
push dword [0x100a9c00]
push str.Osu_Manager:__08X
call fcn.1000bab0
push dword [0x100a9b70]
push str.Binding_Manager:__08X
call fcn.1000bab0
push dword [0x100a9ed8]
push str.Selected_Replay:__08X
call fcn.1000bab0
push dword [0x100a9c04]
push str.Osu_Client_ID:__08X
call fcn.1000bab0
push dword [0x100a9bf4]
push str.Osu_Username:__08X
call fcn.1000bab0
push dword [0x100a9c78]
push str.Window_Manager:__08X
call fcn.1000bab0
push dword [0x100a9ee4]
push str.Score_Multiplier:__08X
call fcn.1000bab0
push dword [0x100a9eb0]
push str.Discord_Rich_Presence:__08X
call fcn.1000bab0
push dword [0x100a9f1c]
push str.Check_Flashlight:__08X
call fcn.1000bab0
push dword [0x100a9f20]
push str.Update_Flashlight:__08X
call fcn.1000bab0
push dword [0x100a9ef8]
push str.Update_Timing:__08X
call fcn.1000bab0
push dword [0x100a9eec]
push str.Set_Playback_Rate:__08X
call fcn.1000bab0
push dword [0x100a9efc]
push str.Check_Timewarp:__08X
call fcn.1000bab0
mov ecx, str.Offsets
call fcn.10042ee0
test al, al
je 0x1000b8c7
push dword [0x100a9eb4]
push str.Hitobject_Manager_Update_Variables:__08X
call fcn.1000bab0
push dword [0x100a9e9c]
push dword [0x100a9e98]
push dword [0x100a9e94]
push str.AR:__08X__08X__08X
call fcn.10039840
push dword [0x100a9e8c]
push dword [0x100a9e88]
push dword [0x100a9e84]
push str.CS:__08X__08X__08X
call fcn.10039840
push dword [0x100a9e80]
push dword [0x100a9e7c]
push str.OD:__08X__08X
call fcn.10039840
add esp, 0x2c
push dword [0x100a9c14]
push str.Beatmap_Onload:__08X
call fcn.1000bab0
push dword [0x100a9c30]
push str.Current_Scene:__08X
call fcn.1000bab0
push dword [0x100a9edc]
push str.Selected_Replay:__08X
call fcn.1000bab0
push dword [0x100a9c70]
push str.Window_Manager:__08X
call fcn.1000bab0
push dword [0x100a9c08]
push str.Selected_Song:__08X
call fcn.1000bab0
push dword [0x100a9c20]
push str.Audio_Time:__08X
call fcn.1000bab0
push dword [0x100a9bec]
push str.Osu_Manager:__08X
call fcn.1000bab0
push dword [0x100a9bfc]
push str.Binding_Manager:__08X
call fcn.1000bab0
push dword [0x100a9c40]
push str.Client_ID:__08X
call fcn.1000bab0
push dword [0x100a9c18]
push str.Username:__08X
call fcn.1000bab0
push dword [0x100a9c24]
push str.Check_Timewarp:__08X
call fcn.1000bab0
mov ecx, str.Hook_Jumps
call fcn.10042ee0
test al, al
je 0x1000b979
push dword [0x100a9e90]
push str.AR_Hook:__08X
call fcn.1000bab0
push dword [0x100a9c94]
push str.CS_Hook:__08X
call fcn.1000bab0
push dword [0x100a9e78]
push str.OD_Hook:__08X
call fcn.1000bab0
push dword [0x100a9ea8]
push str.Discord_Rich_Presence:__08X
call fcn.1000bab0
push dword [0x100a9c2c]
push str.Beatmap_Onload:__08X
call fcn.1000bab0
push dword [0x100a9f08]
push str.Check_Timewarp_1:__08X
call fcn.1000bab0
push dword [0x100a9ee8]
push str.Check_Timewarp_2:__08X
call fcn.1000bab0
push dword [0x100a9ee0]
push str.Score_Multiplier:__08X
call fcn.1000bab0
push dword [0x100a9ed4]
push str.Selected_Replay:__08X
call fcn.1000bab0
push dword [0x100a9f04]
push str.Set_Playback_Rate:__08X
call fcn.1000bab0
call fcn.1001da10
call fcn.10022150
call fcn.1001da10
call fcn.1001e260
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1004ad35
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x100abe30
call fcn.1004b316
add esp, 4
cmp dword [0x100abe30], 0xffffffff
jne 0x1000a1be
movsd xmm0, qword [0x100a88c8]
divsd xmm0, qword [0x1009e508]
push 0x100abe30
movsd qword [0x100abe28], xmm0
call fcn.1004b2c5
sub byte [esi - 0x2117eff6], bh
clc
add eax, dword [eax]
add esp, 4
jmp 0x1000a1be
call fcn.1004b1ea
push 1
call fcn.1004a7d2
push 6
mov dword [ebp - 0x34], 0
call fcn.1004a7d2
nop dword [eax]
dec ebp
mov ah, 0
adc byte [esp + esi*4], dl
adc byte [ebx - 0x4c], bl
add byte [eax], dl
bound esi, qword [eax + eax + 0xb46910]
adc byte [eax - 76], dh
add byte [eax], dl
ja 0x1000b9da
add byte [eax], dl
jle 0x1000b9de
add byte [eax], dl
int3