Function at 0x10007bf0
Capabilities:
Create thread
Load windows common language runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x34
mov eax, dword [0x100a9570]
xor eax, esp
mov dword [esp + 0x30], eax
push ebx
push esi
mov esi, dword [0x100aacd0]
push edi
test esi, esi
je 0x10007ccd
push 8
lea eax, [esp + 0x10]
mov dword [esp + 0x10], esi
push eax
push dword [0x100ac078]
call sub.KERNEL32.dll_K32QueryWorkingSetEx
test eax, eax
je 0x10007ccd
test byte [esp + 0x10], 1
je 0x10007ccd
mov esi, dword [esi]
sub esi, 0xffffff80
cmp esi, dword [0x100aadf4]
je 0x10007cc7
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push esi
push dword [0x100ac078]
call fcn.10001980
add esp, 0xc
test eax, eax
je 0x10007cc7
mov edi, dword [esp + 0xc]
lea eax, [esp + 0xc]
push eax
add edi, 4
mov dword [esp + 0x10], 0
push edi
push dword [0x100ac078]
call fcn.10001980
add esp, 0xc
test eax, eax
je 0x10007cc7
push 0
push 0
push 0xff
push str.Freedom_v0.93.1_is_Loading_
push dword [esp + 0x1c]
lea eax, [edi + 4]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 0x100
jae 0x10009a2f
mov byte [eax + str.Freedom_v0.93.1_is_Loading_], 0
mov dword [0x100aadf4], esi
push dword [0x100aadec]
call fcn.1001d660
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], 0
push 2
push eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
call fcn.10020fb0
push 0x41
push 0
push str.Freedom
call fcn.1000eea0
push str.Freedom_v0.93.1_is_Loading_
push 0x1006d634
call fcn.100469d0
movss xmm0, dword [0x1009247c]
add esp, 0x24
movss xmm1, dword [0x100aad6c]
comiss xmm0, xmm1
jbe 0x10007d9d
mulss xmm1, dword [0x1006d8e0]
sub esp, 8
addss xmm1, dword [0x10092478]
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
push str.Memory_Scan:__.0f__
push 0x20
push 0x100aadf8
call fcn.10015fd0
movss xmm0, dword [0x100aad6c]
lea eax, [esp + 0x20]
add esp, 0x14
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
push 0x100aadf8
push eax
push ecx
movss dword [esp], xmm0
call fcn.100444e0
add esp, 0xc
lea eax, [esp + 0x2c]
mov dword [esp + 0x14], 0
push eax
mov dword [esp + 0x1c], 0
call fcn.10015e80
mov esi, eax
call fcn.10015e70
fadd dword [esi + 4]
lea eax, [esp + 0x20]
push eax
fstp dword [esp + 0x14]
call fcn.10015e80
movss xmm0, dword [eax]
lea eax, [esp + 0x1c]
push eax
movss dword [esp + 0x40], xmm0
lea eax, [esp + 0x40]
movss xmm0, dword [esp + 0x18]
push 8
push eax
movss dword [esp + 0x4c], xmm0
call fcn.10020fb0
push 1
push str.settings
call fcn.10011710
add esp, 0x1c
test al, al
je 0x100099cf
cmp dword [0x100aae18], 0
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.Difficulty
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x10007e4f
mov dword [0x100aae18], 0
call fcn.10020fa0
cmp dword [0x100aacb8], 0
je 0x10007e9c
cmp dword [0x100aae18], 1
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.Relax
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x10007ee1
mov dword [0x100aae18], 1
call fcn.10020fa0
jmp 0x10007ee1
movaps xmm0, xmmword [0x100924b0]
lea eax, [esp + 0x1c]
push eax
push 0
movups xmmword [esp + 0x24], xmm0
call fcn.1001d9d0
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push 1
push 0
push str.Relax
mov dword [esp + 0x28], 0
call fcn.100457b0
push 1
call fcn.1001d4b0
add esp, 0x1c
cmp dword [0x100aacb8], 0
je 0x10007f2e
cmp dword [0x100aae18], 2
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.Aimbot
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x10007f73
mov dword [0x100aae18], 2
call fcn.10020fa0
jmp 0x10007f73
movaps xmm0, xmmword [0x100924b0]
lea eax, [esp + 0x1c]
push eax
push 0
movups xmmword [esp + 0x24], xmm0
call fcn.1001d9d0
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push 1
push 0
push str.Aimbot
mov dword [esp + 0x28], 0
call fcn.100457b0
push 1
call fcn.1001d4b0
add esp, 0x1c
cmp dword [0x100ac4d4], 0
je 0x10007fc0
cmp dword [0x100aae18], 3
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.Timewarp
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x10008005
mov dword [0x100aae18], 3
call fcn.10020fa0
jmp 0x10008005
movaps xmm0, xmmword [0x100924b0]
lea eax, [esp + 0x1c]
push eax
push 0
movups xmmword [esp + 0x24], xmm0
call fcn.1001d9d0
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push 1
push 0
push str.Timewarp
mov dword [esp + 0x28], 0
call fcn.100457b0
push 1
call fcn.1001d4b0
add esp, 0x1c
cmp dword [0x100ac474], 0
je 0x10008052
cmp dword [0x100aae18], 4
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.Replay
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x10008097
mov dword [0x100aae18], 4
call fcn.10020fa0
jmp 0x10008097
movaps xmm0, xmmword [0x100924b0]
lea eax, [esp + 0x1c]
push eax
push 0
movups xmmword [esp + 0x24], xmm0
call fcn.1001d9d0
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push 1
push 0
push str.Replay
mov dword [esp + 0x28], 0
call fcn.100457b0
push 1
call fcn.1001d4b0
add esp, 0x1c
cmp dword [0x100aae18], 5
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push 0x1006d5f8
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x100080d9
mov dword [0x100aae18], 5
call fcn.10020fa0
cmp dword [0x100aae18], 6
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.Misc
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x1000811b
mov dword [0x100aae18], 6
call fcn.10020fa0
cmp dword [0x100aae18], 7
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.About
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x1000815d
mov dword [0x100aae18], 7
call fcn.10020fa0
cmp dword [0x100aae18], 8
lea ecx, [esp + 0xc]
push ecx
sete al
mov dword [esp + 0x10], 0
push 1
push eax
push str.Debug
mov dword [esp + 0x20], 0
call fcn.100457b0
add esp, 0x10
test al, al
je 0x1000819f
mov dword [0x100aae18], 8
call fcn.10020fa0
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0x44070000
push eax
push 5
mov dword [esp + 0x18], 0
call fcn.1001da20
mov eax, dword [0x100aae18]
add esp, 8
cmp eax, 8
je 0x100081f5
cmp eax, 6
je 0x100081f5
cmp eax, 1
je 0x100081f5
call fcn.10015e70
fstp dword [esp + 0xc]
movss xmm0, dword [esp + 0xc]
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
movss dword [esp + 0x18], xmm0
jmp 0x10008209
mov dword [esp + 0xc], 0
lea eax, [esp + 0xc]
mov dword [esp + 0x10], 0
push 1
push eax
call fcn.10021000
add esp, 8
mov dword [esp + 0x14], 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], 0
push eax
call fcn.10015e80
movss xmm0, dword [eax + 4]
lea eax, [esp + 0x30]
push eax
movss dword [esp + 0x14], xmm0
call fcn.10015e80
mov esi, eax
call fcn.10015ea0
fadd dword [esi]
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x40]
movss xmm0, dword [esp + 0x18]
push 1
push eax
fstp dword [esp + 0x48]
movss dword [esp + 0x4c], xmm0
call fcn.10020fb0
push 0x45
push 0
push str.tab_content
call fcn.1000eea0
push 1
call fcn.1001d510
add esp, 0x24
cmp dword [0x100aae18], 0
jne 0x100082e4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0x40f00000
push eax
push 0xe
mov dword [esp + 0x18], 0x40f00000
call fcn.1001da20
push 0x100a92ec
push dword [0x100aacd0]
call fcn.100079f0
push 0x100a930c
push dword [0x100aacd0]
call fcn.100079f0
push 0x100a932c
push dword [0x100aacd0]
call fcn.100079f0
push 1
call fcn.1001d510
add esp, 0x24
cmp dword [0x100aae18], 1
jne 0x10008499
push 0x100a9f8a
push str.Enable
call fcn.100403a0
add esp, 8
test al, al
je 0x1000832d
cmp byte [0x100a9f8a], 0
je 0x10008317
call fcn.10005ef0
jmp 0x1000831c
call fcn.10005e20
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
mov dword [esp], 0xbf800000
lea eax, [esp + 0x20]
push 0
push 0
push 0x100918e8
push eax
call fcn.10011cf0
add esp, 0x10
movss xmm0, dword [eax]
mulss xmm0, dword [0x10092480]
movss dword [esp], xmm0
call fcn.1001d8d0
push 0
push 0
push 0x14
push 2
push 0x100a91b0
push str.Left_Click
call fcn.10041430
push 0
push 0
push 0x14
push 2
push 0x100a91b4
push str.Right_Click
call fcn.10041430
call fcn.1001d470
lea eax, [esp + 0x40]
mov dword [esp + 0x40], 0
push eax
mov dword [esp + 0x48], 0x40a00000
call fcn.100411a0
push 0x73
push 0x100a9010
push str.SingleTap
call fcn.10044830
add esp, 0x44
test al, al
je 0x10008404
push str.SingleTap_Mode
push 0x1006d6f4
push 0x100a91b8
call fcn.10002120
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 0x10
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.100200c0
push 0x61
push 0x100a9010
push str.Alternate
call fcn.10044830
add esp, 0x14
test al, al
je 0x10008458
push str.Alternate_Mode
push 0x1006d6f4
push 0x100a91b8
call fcn.10002120
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 0x10
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
push 0x100a900b
push str.Variable_Unstable_Rate
call fcn.100403a0
add esp, 0xc
test al, al
je 0x10008499
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
cmp dword [0x100aae18], 2
jne 0x100085b6
push 0x100a9f8b
push str.Enable
call fcn.100403a0
add esp, 8
test al, al
je 0x100084e2
cmp byte [0x100a9f8b], 0
je 0x100084cc
call fcn.10005ef0
jmp 0x100084d1
call fcn.10005e20
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
add esp, 4
push 0
push str.Cursor_Speed:__.3f
sub esp, 8
mov dword [esp + 4], 0x3f000000
mov dword [esp], 0x3a83126f
push 0x100a900c
push str.fraction_modifier
call fcn.10045ff0
add esp, 0x18
call fcn.10016ff0
test al, al
je 0x10008544
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x3f000000
call fcn.100411a0
push 0
push str.Spins_Per_Minute:__d
push 0x1dd
push 0
push 0x100a9004
push str.spins_per_minute
call fcn.10046020
add esp, 0x1c
call fcn.10016ff0
test al, al
je 0x10008598
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
call fcn.10015e70
fstp dword [esp + 0xc]
call fcn.100153b0
fsubr dword [esp + 0xc]
push ecx
fstp dword [esp]
call fcn.100209a0
add esp, 4
cmp dword [0x100aae18], 3
jne 0x10008697
push 0x100a9f8f
push str.Enable
call fcn.100403a0
add esp, 8
test al, al
je 0x100085ff
cmp byte [0x100a9f8f], 0
je 0x100085e9
call fcn.1000bae0
jmp 0x100085ee
call fcn.1000ba60
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
mov eax, dword fs:[0x2c]
add esp, 4
mov ecx, dword [0x100acc80]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x100aae28]
cmp eax, dword [ecx + 4]
jg 0x100099eb
push 0
push str.Timewarp_Scale:__.2lf
push 0x100a92e0
push 0x100a92d8
push 0x100aae20
push 9
push str.timewarp_scale
call fcn.10046050
add esp, 0x1c
test al, al
je 0x1000867d
movsd xmm0, qword [0x100aae20]
mulsd xmm0, qword [0x10092488]
movsd qword [0x100a9020], xmm0
call fcn.10016ff0
test al, al
je 0x10008697
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
cmp dword [0x100aae18], 4
jne 0x100088e8
push str.Open_Replay_Preview_in_game_to_Select_a_Replay
push 0x1006d634
call fcn.100469d0
push 0x400
call fcn.10017050
add esp, 0xc
test al, al
je 0x100086d1
push str.Selected_Replay
call fcn.100213c0
add esp, 4
movss xmm0, dword [0x100a91a4]
push str.Mods
push dword [0x100a91a8]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str.Replay_Author
push str._s____.2f______ux____s
call fcn.100469d0
push 0x400
call fcn.10017050
add esp, 0x1c
test al, al
je 0x1000871c
push str.Player__Accuracy__Mods
call fcn.100213c0
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40000000
call fcn.100411a0
push 0x100a9f88
push str.Enable
call fcn.100403a0
add esp, 0xc
test al, al
je 0x10008772
cmp byte [0x100a9f88], 0
je 0x1000875c
call fcn.1000b5c0
jmp 0x10008761
call fcn.1000b590
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
push 0x400
call fcn.10017050
add esp, 4
test al, al
je 0x10008790
push str.Usage:_Open_Replay_Preview_in_game_to_Select_a_Replay
call fcn.100213c0
add esp, 4
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0x43520000
call fcn.100200c0
add esp, 8
cmp byte [0x100a9f88], 0
jne 0x100087d7
push 1
push 4
call fcn.1001d860
movaps xmm0, xmmword [0x100924d0]
lea eax, [esp + 0x24]
push eax
push 0
movups xmmword [esp + 0x2c], xmm0
call fcn.1001d9d0
add esp, 0x10
push 0x100a9f89
push str.Hardrock
call fcn.100403a0
add esp, 8
test al, al
je 0x100087f7
mov ecx, 0x100a9028
call fcn.10005090
push 0x400
call fcn.10017050
add esp, 4
test al, al
je 0x10008815
push str.Convert_Replay_to_from_Hardrock
call fcn.100213c0
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40000000
call fcn.100411a0
push 0x100a9009
push str.Replay_Aim
call fcn.100403a0
add esp, 0xc
test al, al
je 0x10008856
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
push 0x400
call fcn.10017050
add esp, 4
test al, al
je 0x10008874
push str.Aim_According_to_Replay_Data
call fcn.100213c0
add esp, 4
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0x43520000
call fcn.100200c0
push 0x100a900a
push str.Replay_Keys
call fcn.100403a0
add esp, 0x10
test al, al
je 0x100088b2
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
push 0x400
call fcn.10017050
add esp, 4
test al, al
je 0x100088d0
push str.Press_Keys_According_to_Replay_Data
call fcn.100213c0
add esp, 4
cmp byte [0x100a9f88], 0
jne 0x100088e8
push 1
call fcn.1001d4b0
add esp, 4
call fcn.1001d440
cmp dword [0x100aae18], 5
jne 0x10008acf
push 0x100a9f8e
push str.Unmod_Flashlight
call fcn.100403a0
add esp, 8
test al, al
je 0x10008931
cmp byte [0x100a9f8e], 0
je 0x1000891b
call fcn.1000be00
jmp 0x10008920
call fcn.1000bdb0
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
push 0x100a9f90
push str.Unmod_Hidden
call fcn.100403a0
add esp, 0xc
test al, al
je 0x10008987
cmp byte [0x100a9f90], 0
je 0x10008971
call fcn.1000afb0
jmp 0x10008976
call fcn.1000af80
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
push str.Score_Multiplier
call fcn.100469d0
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
mov dword [esp + 0x1c], 0x40a00000
call fcn.100411a0
push 0x46
call fcn.1001d770
push 0x100a9f8c
push str.Enable
call fcn.100403a0
add esp, 0x18
test al, al
je 0x10008a08
cmp byte [0x100a9f8c], 0
je 0x100089f2
call fcn.1000b970
jmp 0x100089f7
call fcn.1000b940
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
call fcn.1001d420
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
add esp, 4
cmp byte [0x100a9f8c], 0
jne 0x10008a57
push 1
push 4
call fcn.1001d860
movaps xmm0, xmmword [0x100924d0]
lea eax, [esp + 0x24]
push eax
push 0
movups xmmword [esp + 0x2c], xmm0
call fcn.1001d9d0
add esp, 0x10
push 0
push str.Score_Multiplier:__.0f
sub esp, 8
mov dword [esp + 4], 0x42c80000
mov dword [esp], 0
push 0x100a9018
push str.score_multiplier
call fcn.10045ff0
push 0x400
call fcn.10017050
add esp, 0x1c
test al, al
je 0x10008a9d
push str.Hold_Ctrl_To_Set_a_Custom_Value
call fcn.100213c0
add esp, 4
call fcn.10016ff0
test al, al
je 0x10008ab7
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
cmp byte [0x100a9f8c], 0
jne 0x10008acf
push 1
call fcn.1001d4b0
add esp, 4
call fcn.1001d440
cmp dword [0x100aae18], 6
jne 0x1000924c
push str.Discord_RPC_Settings
call fcn.100469d0
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
mov dword [esp + 0x18], 0x40a00000
call fcn.100411a0
push 0x100a9f8d
push str.Enable
call fcn.100403a0
add esp, 0x10
test al, al
je 0x10008b3c
cmp byte [0x100a9f8d], 0
je 0x10008b26
call fcn.1000ae70
jmp 0x10008b2b
call fcn.1000ae40
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
add esp, 4
cmp byte [0x100a9f8d], 0
jne 0x10008b86
push 1
push 4
call fcn.1001d860
movaps xmm0, xmmword [0x100924d0]
lea eax, [esp + 0x24]
push eax
push 0
movups xmmword [esp + 0x2c], xmm0
call fcn.1001d9d0
add esp, 0x10
push 0
push 0
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0
push eax
push 0x200
push 0x100aae30
push str.State
push str.rpc_state
mov dword [esp + 0x30], 0
call fcn.100414e0
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0x20
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test al, al
je 0x10008d20
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
push 0
push 0
push 0xffffffffffffffff
push 0x100aae30
push 0
push 0xfde9
call esi
push eax
push 0x100ab030
push 0xffffffffffffffff
push 0x100aae30
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x10009a2f
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x100ab030], cx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x38], ecx
call ebx
test eax, eax
je 0x10008d20
push str.CLRCreateInstance
push eax
call edi
test eax, eax
je 0x10008d20
lea ecx, [esp + 0xc]
push ecx
push 0x1006d2c0
push 0x1006d2d0
call eax
test eax, eax
jne 0x10008d20
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x14]
push edx
push 0x1006d2e0
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x10008d16
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x34]
push edx
push 0x1006d2b0
push 0x1006d2a0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x10008d0c
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [esp + 0x34]
push 0x100ac3d8
push 0x100ab030
push str.GetCSharpStringPtr
mov eax, dword [ecx]
push str.Freedom.SetPresence
push 0x100aa898
push ecx
call dword [eax + 0x2c]
test eax, eax
je 0x10008cf8
push eax
push 0x17d
push str.auto___thiscall_update_ui::_lambda_3_::operator____struct_ICLRRuntimeHost___const
push str.ERROR:__s:_d:_pClrRuntimeHost__ExecuteInDefaultAppDomain_failed__error_code:_0x_X_n
push 0x100a91b8
call fcn.10002120
add esp, 0x14
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0
push 0
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0
push eax
push 0x200
push 0x100ab430
push str.Large_Text
push str.rpc_large_text
mov dword [esp + 0x30], 0
call fcn.100414e0
add esp, 0x20
test al, al
je 0x10008ea8
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
push 0
push 0
push 0xffffffffffffffff
push 0x100ab430
push 0
push 0xfde9
call esi
push eax
push 0x100ab630
push 0xffffffffffffffff
push 0x100ab430
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x10009a2f
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x100ab630], cx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x38], ecx
call ebx
test eax, eax
je 0x10008ea8
push str.CLRCreateInstance
push eax
call edi
test eax, eax
je 0x10008ea8
lea ecx, [esp + 0x14]
push ecx
push 0x1006d2c0
push 0x1006d2d0
call eax
test eax, eax
jne 0x10008ea8
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xc]
push edx
push 0x1006d2e0
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x10008e9e
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x34]
push edx
push 0x1006d2b0
push 0x1006d2a0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x10008e94
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [esp + 0x34]
push 0x100ac3dc
push 0x100ab630
push str.GetCSharpStringPtr
mov eax, dword [ecx]
push str.Freedom.SetPresence
push 0x100aa898
push ecx
call dword [eax + 0x2c]
test eax, eax
je 0x10008e80
push eax
push 0x18d
push str.auto___thiscall_update_ui::_lambda_4_::operator____struct_ICLRRuntimeHost___const
push str.ERROR:__s:_d:_pClrRuntimeHost__ExecuteInDefaultAppDomain_failed__error_code:_0x_X_n
push 0x100a91b8
call fcn.10002120
add esp, 0x14
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0
push 0
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0
push eax
push 0x200
push 0x100aba30
push str.Small_Text
push str.rpc_small_text
mov dword [esp + 0x30], 0
call fcn.100414e0
add esp, 0x20
test al, al
je 0x10009030
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
push 0
push 0
push 0xffffffffffffffff
push 0x100aba30
push 0
push 0xfde9
call esi
push eax
push 0x100abc30
push 0xffffffffffffffff
push 0x100aba30
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x10009a2f
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x100abc30], cx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x38], ecx
call ebx
test eax, eax
je 0x10009030
push str.CLRCreateInstance
push eax
call edi
test eax, eax
je 0x10009030
lea ecx, [esp + 0x14]
push ecx
push 0x1006d2c0
push 0x1006d2d0
call eax
test eax, eax
jne 0x10009030
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xc]
push edx
push 0x1006d2e0
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x10009026
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x34]
push edx
push 0x1006d2b0
push 0x1006d2a0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x1000901c
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [esp + 0x34]
push 0x100ac3e0
push 0x100abc30
push str.GetCSharpStringPtr
mov eax, dword [ecx]
push str.Freedom.SetPresence
push 0x100aa898
push ecx
call dword [eax + 0x2c]
test eax, eax
je 0x10009008
push eax
push 0x19d
push str.auto___thiscall_update_ui::_lambda_5_::operator____struct_ICLRRuntimeHost___const
push str.ERROR:__s:_d:_pClrRuntimeHost__ExecuteInDefaultAppDomain_failed__error_code:_0x_X_n
push 0x100a91b8
call fcn.10002120
add esp, 0x14
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp byte [0x100a9f8d], 0
jne 0x10009048
push 1
call fcn.1001d4b0
add esp, 4
call fcn.1001d440
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x41200000
call fcn.100411a0
mov eax, dword [0x100aadec]
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push str.Font_Size:__dpx
push 0x10
push 0x100ac030
call fcn.100261d0
push 0x10
push 0x100ac030
push str.font_size
call fcn.1003f1f0
add esp, 0x20
test al, al
je 0x10009160
call fcn.10015540
mov eax, dword [eax + 0x24]
mov esi, dword [eax + 0x44]
mov eax, dword [eax + 0x3c]
lea edi, [esi + eax*4]
cmp esi, edi
je 0x1000915b
nop word [eax + eax]
mov eax, dword [esi]
xorps xmm0, xmm0
movlpd qword [esp + 0x34], xmm0
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push 0x10091be0
lea eax, [esp + 0x3c]
push 4
push eax
call fcn.100261d0
mov eax, dword [esi]
cmp eax, dword [0x100aadec]
lea eax, [esp + 0x24]
push eax
sete bl
mov dword [esp + 0x28], 0
push 0
mov byte [esp + 0x24], bl
lea eax, [esp + 0x4c]
push dword [esp + 0x24]
mov dword [esp + 0x34], 0
push eax
call fcn.100457b0
add esp, 0x20
test al, al
je 0x10009147
mov eax, dword [esi]
mov dword [0x100aadec], eax
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
mov dword [section..data], eax
call fcn.10015540
mov eax, dword [eax + 0x18]
push eax
call fcn.10020180
add esp, 4
test bl, bl
je 0x10009150
call fcn.10020bb0
add esi, 4
cmp esi, edi
jne 0x100090c0
call fcn.10041230
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
push 0x100a92e8
push str.Disable_NtUserSendInput_Check
call fcn.100403a0
add esp, 0xc
test al, al
je 0x100091a5
cmp byte [0x100a92e8], 0
je 0x100091a0
call fcn.10005f90
jmp 0x100091a5
call fcn.10005ea0
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
mov dword [esp + 0x14], 0x40a00000
call fcn.100411a0
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
push str.Unload_DLL
mov dword [esp + 0x1c], 0
call fcn.1003f9e0
add esp, 0xc
test al, al
je 0x100091ea
call fcn.1000a110
call fcn.10005c50
mov bl, al
test bl, bl
je 0x10009201
push 1
push 4
call fcn.1001d860
add esp, 8
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push str.Rescan_Memory
mov dword [esp + 0x18], 0
call fcn.1003f9e0
add esp, 8
test al, al
je 0x10009243
push 0
push 0
push 0
push 0x10005ff0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
je 0x1000924c
call fcn.1001d440
cmp dword [0x100aae18], 7
jne 0x10009372
push str.Ciremuns_Freedom_v0.93.1
call fcn.100469d0
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
mov dword [esp + 0x18], 0x40a00000
call fcn.100411a0
push str.Special_Thanks_to_Maple_Syrup
call fcn.100469d0
push str._mrflashstudio
call fcn.100469d0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
mov dword [esp + 0x24], 0x40a00000
call fcn.100411a0
add esp, 0x10
lea eax, [esp + 0x20]
mov dword [esp], 0xbf800000
push 0
push 0
push str.Ciremun
push eax
call fcn.10011cf0
add esp, 0x10
movss xmm0, dword [eax]
addss xmm0, dword [0x10092490]
movss dword [esp], xmm0
call fcn.1001d8d0
push 0
push 0
push 0x4000
push 8
push str.Ciremun
push str.___Discord
call fcn.10041430
call fcn.1001d470
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0
push eax
mov dword [esp + 0x30], 0x40200000
call fcn.100411a0
add esp, 0x1c
lea eax, [esp + 0x20]
mov dword [esp], 0xbf800000
push 0
push 0
push str.https:__discord.gg_FyCrwed6jv
push eax
call fcn.10011cf0
add esp, 0x10
movss xmm0, dword [eax]
addss xmm0, dword [0x10092490]
movss dword [esp], xmm0
call fcn.1001d8d0
push 0
push 0
push 0x4000
push 0x1d
push str.https:__discord.gg_FyCrwed6jv
push str.___Discord_Server
call fcn.10041430
add esp, 0x1c
call fcn.1001d470
cmp dword [0x100aae18], 8
jne 0x100099c5
lea eax, [esp + 0x1c]
mov dword [esp + 0x14], 0
push eax
mov dword [esp + 0x1c], 0
call fcn.10015e80
movss xmm0, dword [eax + 4]
lea eax, [esp + 0x30]
push eax
movss dword [esp + 0x14], xmm0
call fcn.10015e80
mov esi, eax
call fcn.10015ea0
fadd dword [esi]
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x40]
movss xmm0, dword [esp + 0x18]
push 1
push eax
fstp dword [esp + 0x48]
movss dword [esp + 0x4c], xmm0
call fcn.10020fb0
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x44200000
push 2
push eax
mov dword [esp + 0x2c], 0x43f00000
call fcn.10021000
push 0
push 0
push str.Debug_Log
call fcn.1000eea0
add esp, 0x28
mov ecx, 0x100a91b8
call fcn.10002180
call fcn.10013890
push 0
push str.Game
call fcn.10040c40
add esp, 8
mov esi, 0x10091ce4
mov edi, 0x10091ce8
test al, al
je 0x100094f0
mov eax, dword [0x100aacd8]
test eax, eax
je 0x10009442
mov eax, dword [eax]
jmp 0x10009444
xor eax, eax
push eax
push str.Audio_Time:__d
call fcn.100469d0
mov eax, dword [0x100aacc8]
add esp, 8
test eax, eax
je case.default.0x10009462
mov eax, dword [eax]
cmp eax, 7
ja case.default.0x10009462
jmp dword [eax*4 + 0x10009a34]
mov eax, str.Main_Menu
jmp 0x100094a6
mov eax, str.Editor
jmp 0x100094a6
mov eax, str.Game
jmp 0x100094a6
mov eax, str.Exit
jmp 0x100094a6
mov eax, str.Editor_Beatmap_Select
jmp 0x100094a6
mov eax, str.Beatmap_Select
jmp 0x100094a6
mov eax, str.Beatmap_Select_Drawings
jmp 0x100094a6
mov eax, str.Replay_Preview
jmp 0x100094a6
mov eax, str.Unknown
push eax
push str.Current_Scene:__s
call fcn.100469d0
push dword [0x100aacb0]
call fcn.10001a60
test al, al
mov ecx, esi
cmove ecx, edi
push ecx
push str.Replay_Mode:__s
call fcn.100469d0
cmp byte [0x100aaca8], 0
mov ecx, str.Fast
mov eax, str.All_Methods
cmove eax, ecx
push eax
push str.Pre_Jitting_Mode:__s
call fcn.100469d0
add esp, 0x1c
push 0
push str.Account_Info
call fcn.10040c40
add esp, 8
test al, al
je 0x10009524
push 0x100aace8
push str.Client_ID:__n_s
call fcn.100469d0
push 0x100aad28
push str.Username:__s
call fcn.100469d0
add esp, 0x10
push 0
push str.Playfield
call fcn.10040c40
add esp, 8
test al, al
je 0x100095c8
movss xmm0, dword [0x100ac050]
sub esp, 0x10
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100ac04c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.window_size:__f__f
call fcn.100469d0
movss xmm0, dword [0x100ac058]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100ac054]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.playfield_size:__f__f
call fcn.100469d0
movss xmm0, dword [0x100ac060]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100ac05c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.playfield_position:__f__f
call fcn.100469d0
add esp, 0x14
push 0
push str.Pointers
call fcn.10040c40
add esp, 8
test al, al
je 0x1000969a
push dword [0x100aa5e4]
push str.binding_manager_ptr:__08X
call fcn.100469d0
push dword [0x100aacb0]
push str.osu_manager_ptr:__08X
call fcn.100469d0
push dword [0x100ac47c]
push str.selected_replay_ptr:__08X
call fcn.100469d0
push dword [0x100aacd0]
push str.selected_song_ptr:__08X
call fcn.100469d0
push dword [0x100ac4f8]
push str.update_timing_ptr_1:__08X
call fcn.100469d0
push dword [0x100ac4fc]
push str.update_timing_ptr_2:__08X
call fcn.100469d0
push dword [0x100ac500]
push str.update_timing_ptr_3:__08X
call fcn.100469d0
push dword [0x100ac504]
push str.update_timing_ptr_4:__08X
call fcn.100469d0
add esp, 0x40
push dword [0x100ac048]
push str.window_manager_ptr:__08X
call fcn.100469d0
push dword [0x100a91d4]
push str.dispatch_table_id:__08X
call fcn.100469d0
cmp dword [0x100aad48], 0
cmove esi, edi
push esi
push str.dispatch_table_id_found:__s
call fcn.100469d0
add esp, 0x18
push 0
push str.Methods
call fcn.10040c40
add esp, 8
test al, al
je 0x100097da
push dword [0x100ac280]
push str.parse_beatmap_code_start:__08X
call fcn.100469d0
push dword [0x100aacb4]
push str.beatmap_onload_code_start:__08X
call fcn.100469d0
push dword [0x100aacc0]
push str.current_scene_code_start:__08X
call fcn.100469d0
push dword [0x100aaccc]
push str.selected_song_code_start:__08X
call fcn.100469d0
push dword [0x100aacd4]
push str.audio_time_code_start:__08X
call fcn.100469d0
push dword [0x100aacdc]
push str.osu_manager_code_start:__08X
call fcn.100469d0
push dword [0x100aa5e0]
push str.binding_manager_code_start:__08X
call fcn.100469d0
push dword [0x100ac470]
push str.selected_replay_code_start:__08X
call fcn.100469d0
add esp, 0x40
push dword [0x100aace0]
push str.osu_client_id_code_start:__08X
call fcn.100469d0
push dword [0x100aace4]
push str.osu_username_code_start:__08X
call fcn.100469d0
push dword [0x100ac040]
push str.window_manager_code_start:__08X
call fcn.100469d0
push dword [0x100ac4a8]
push str.score_multiplier_code_start:__08X
call fcn.100469d0
push dword [0x100ac3d0]
push str.discord_rich_presence_code_start:__08X
call fcn.100469d0
push dword [0x100ac578]
push str.check_flashlight_code_start:__08X
call fcn.100469d0
push dword [0x100ac574]
push str.update_flashlight_code_start:__08X
call fcn.100469d0
push dword [0x100ac4f4]
push str.update_timing_code_start:__08X
call fcn.100469d0
add esp, 0x40
push dword [0x100ac4d4]
push str.set_playback_rate_code_start:__08X
call fcn.100469d0
push dword [0x100ac4e0]
push str.check_timewarp_code_start:__08X
call fcn.100469d0
add esp, 0x10
push 0
push str.Offsets
call fcn.10040c40
add esp, 8
test al, al
je 0x10009908
push dword [0x100ac408]
push str.hom_update_vars_hidden_loc:_0x_X
call fcn.100469d0
push dword [0x100ac28c]
push dword [0x100ac288]
push dword [0x100ac284]
push str.approach_rate_offsets:_0x_X_0x_X_0x_X
call fcn.100469d0
push dword [0x100ac29c]
push dword [0x100ac298]
push dword [0x100ac294]
push str.circle_size_offsets:_0x_X_0x_X_0x_X
call fcn.100469d0
push dword [0x100ac2a8]
push dword [0x100ac2a4]
push str.overall_difficulty_offsets:_0x_X_0x_X
call fcn.100469d0
push dword [0x100aacb8]
push str.beatmap_onload_offset:_0x_X
call fcn.100469d0
push dword [0x100aacc4]
push str.current_scene_offset:_0x_X
call fcn.100469d0
add esp, 0x44
push dword [0x100ac474]
push str.selected_replay_offset:_0x_X
call fcn.100469d0
push dword [0x100ac044]
push str.window_manager_offset:_0x_X
call fcn.100469d0
push dword [0x100aad4c]
push str.selected_song_offset:_0x_X
call fcn.100469d0
push dword [0x100aad50]
push str.audio_time_offset:_0x_X
call fcn.100469d0
push dword [0x100aad54]
push str.osu_manager_offset:_0x_X
call fcn.100469d0
push dword [0x100aad58]
push str.binding_manager_offset:_0x_X
call fcn.100469d0
push dword [0x100aad5c]
push str.client_id_offset:_0x_X
call fcn.100469d0
push dword [0x100aad60]
push str.username_offset:_0x_X
call fcn.100469d0
add esp, 0x40
push dword [0x100aad64]
push str.check_timewarp_offset:_0x_X
call fcn.100469d0
add esp, 8
push 0
push str.Hook_Jumps
call fcn.10040c40
add esp, 8
test al, al
je 0x100099c5
push dword [0x100ac3d4]
push str.discord_rich_presence_jump_back:__08X
call fcn.100469d0
push dword [0x100ac290]
push str.ar_hook_jump_back:__08X
call fcn.100469d0
push dword [0x100aacbc]
push str.beatmap_onload_hook_jump_back:__08X
call fcn.100469d0
push dword [0x100ac4e8]
push str.check_timewarp_hook_1_jump_back:__08X
call fcn.100469d0
push dword [0x100ac4f0]
push str.check_timewarp_hook_2_jump_back:__08X
call fcn.100469d0
push dword [0x100ac2a0]
push str.cs_hook_jump_back:__08X
call fcn.100469d0
push dword [0x100ac2ac]
push str.od_hook_jump_back:__08X
call fcn.100469d0
push dword [0x100ac4ac]
push str.score_multiplier_hook_jump_back:__08X
call fcn.100469d0
add esp, 0x40
push dword [0x100ac478]
push str.selected_replay_hook_jump_back:__08X
call fcn.100469d0
push dword [0x100ac4d8]
push str.set_playback_rate_jump_back:__08X
call fcn.100469d0
add esp, 0x10
call fcn.10013890
call fcn.100143d0
call fcn.10013890
call fcn.1001d3c0
mov ecx, dword [esp + 0x3c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1004d4b3
mov esp, ebp
pop ebp
ret
push 0x100aae28
call fcn.1004d5de
add esp, 4
cmp dword [0x100aae28], 0xffffffff
jne 0x1000863c
movsd xmm0, qword [0x100a9020]
divsd xmm0, qword [0x10092488]
push 0x100aae28
movsd qword [0x100aae20], xmm0
call fcn.1004d594
add esp, 4
jmp 0x1000863c
call fcn.1004d080
imul edx, dword [eax + eax + 0x947010], 0x947710
adc byte [esi - 108], bh
add byte [eax], dl
test dword [eax + eax + 0x948c10], edx
adc byte [ebx - 1710227308], dl
xchg esp, eax
add byte [eax], dl
int3