Function at 0x1000a000
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Load windows common language runtime
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10069b65
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x40
mov eax, dword [0x100a7018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x100a9030]
test esi, esi
je 0x1000a0ef
mov edi, dword [sym.imp.KERNEL32.dll_K32QueryWorkingSetEx]
lea eax, [ebp - 0x38]
push 8
push eax
push dword [0x100a9130]
mov dword [ebp - 0x38], esi
call edi
test eax, eax
je 0x1000a0ef
test byte [ebp - 0x34], 1
je 0x1000a0ef
mov esi, dword [esi]
sub esi, 0xffffff80
cmp esi, dword [0x100a9ff4]
je 0x1000a0e9
push 8
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], esi
push eax
push dword [0x100a9130]
call edi
test eax, eax
je 0x1000a0e9
test byte [ebp - 0x28], 1
je 0x1000a0e9
mov edi, dword [esi]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], 0
lea edx, [edi + 4]
call fcn.100025e0
add esp, 4
test eax, eax
je 0x1000a0e9
push 0
push 0
push 0xff
push str.Freedom_v0.93.3_is_Loading_
push dword [ebp - 0x24]
add edi, 8
push edi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 0x100
jae 0x1000c78a
mov byte [eax + str.Freedom_v0.93.3_is_Loading_], 0
mov dword [0x100a9ff4], esi
mov ecx, dword [0x100a90fc]
mov edi, ecx
mov esi, dword [0x100a93dc]
mov dword [ebp - 0x30], ecx
test ecx, ecx
jne 0x1000a118
mov ecx, dword [esi + 0x38]
test ecx, ecx
jne 0x1000a113
mov eax, dword [esi + 0x2c]
mov eax, dword [eax + 0x44]
mov ecx, dword [eax]
mov edi, ecx
mov dword [ebp - 0x30], ecx
call fcn.1001ecb0
lea eax, [ebp - 0x30]
lea ecx, [esi + 0x478c]
push eax
call fcn.10029060
mov eax, dword [esi + 0x3e60]
mov ecx, dword [eax + 0x264]
mov eax, dword [edi + 0x30]
lea esi, [ecx + 0x48]
mov edi, dword [esi + 4]
mov dword [ebp - 0x24], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x34], eax
mov eax, dword [esi]
cmp eax, edi
jne 0x1000a177
lea ecx, [eax + 1]
test edi, edi
je 0x1000a162
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x1000a167
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10028f70
mov ecx, dword [ebp - 0x24]
mov edx, dword [esi]
mov eax, dword [esi + 8]
mov edi, dword [ebp - 0x34]
mov dword [eax + edx*4], edi
inc dword [esi]
mov dword [ecx + 0x70], edi
call fcn.100314f0
mov eax, dword [0x100a93dc]
xor edx, edx
push 0x41
mov ecx, str.Freedom
or dword [eax + 0x4714], 1
mov dword [eax + 0x4724], 0
mov dword [eax + 0x4728], 0
mov dword [eax + 0x472c], 0
mov dword [eax + 0x4730], 0
mov dword [eax + 0x4718], 2
call fcn.1001c150
add esp, 4
push str.Freedom_v0.93.3_is_Loading_
push 0x1007208c
call fcn.1003a540
movss xmm0, dword [0x1009d6c4]
add esp, 8
movss xmm1, dword [0x100a90b4]
comiss xmm0, xmm1
jbe 0x1000a24f
mulss xmm1, dword [0x1009d78c]
sub esp, 8
addss xmm1, dword [0x1009d66c]
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
push str.Memory_Scan:__.0f__
push 0x20
push 0x100a9ff8
call fcn.10013d60
movss xmm0, dword [0x100a90b4]
lea ecx, [ebp - 0x2c]
add esp, 0x14
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call fcn.1003c400
mov ecx, dword [0x100a93dc]
mov eax, dword [ecx + 0x3e60]
movss xmm1, dword [eax + 0x20]
addss xmm1, dword [eax + 0x18]
movss xmm0, dword [eax + 0x14]
or dword [ecx + 0x4714], 1
movss dword [ecx + 0x4724], xmm0
mov dword [ecx + 0x472c], 0
movss dword [ecx + 0x4728], xmm1
mov dword [ecx + 0x4730], 0
mov dword [ecx + 0x4718], 8
mov ecx, eax
cmp byte [ecx + 0xaf], 0
jne 0x1000c71e
push ecx
push str.settings
call fcn.100164d0
mov ecx, dword [0x100a93dc]
mov esi, eax
cmp byte [ecx + 0x371f], 0
je 0x1000a2ed
cmp byte [ecx + 0x4508], 0
jne 0x1000a2ed
mov ecx, 0x20
call fcn.10016850
test al, al
je 0x1000a2ed
mov edx, 1
mov ecx, esi
call fcn.100228c0
mov ecx, esi
call fcn.10022cd0
test al, al
je 0x1000c71e
cmp dword [0x100a9ff0], 0
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Difficulty
mov dword [ebp - 0x28], 0
call fcn.10043920
add esp, 8
test al, al
je 0x1000a341
mov eax, dword [0x100a93dc]
xor ecx, ecx
mov dword [0x100a9ff0], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000a347
mov ecx, dword [0x100a9ff0]
cmp dword [0x100a90cc], 0
je 0x1000a393
cmp ecx, 1
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Relax
push 1
call fcn.10043920
add esp, 8
test al, al
je 0x1000a39d
mov eax, dword [0x100a93dc]
mov dword [0x100a9ff0], 1
or dword [eax + 0x4714], 0x20
jmp 0x1000a39d
push str.Relax
call fcn.1000c7d0
cmp dword [0x100a90cc], 0
je 0x1000a3ed
cmp dword [0x100a9ff0], 2
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Aimbot
mov dword [ebp - 0x28], 0
call fcn.10043920
add esp, 8
test al, al
je 0x1000a3f7
mov eax, dword [0x100a93dc]
mov dword [0x100a9ff0], 2
or dword [eax + 0x4714], 0x20
jmp 0x1000a3f7
push str.Aimbot
call fcn.1000c7d0
cmp dword [0x100a93a4], 0
je 0x1000a447
cmp dword [0x100a9ff0], 3
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Timewarp
mov dword [ebp - 0x28], 0
call fcn.10043920
add esp, 8
test al, al
je 0x1000a451
mov eax, dword [0x100a93dc]
mov dword [0x100a9ff0], 3
or dword [eax + 0x4714], 0x20
jmp 0x1000a451
push str.Timewarp
call fcn.1000c7d0
cmp dword [0x100a9390], 0
je 0x1000a4a1
cmp dword [0x100a9ff0], 4
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, str.Replay
mov dword [ebp - 0x28], 0
call fcn.10043920
add esp, 8
test al, al
je 0x1000a4ab
mov eax, dword [0x100a93dc]
mov dword [0x100a9ff0], 4
or dword [eax + 0x4714], 0x20
jmp 0x1000a4ab
push str.Replay
call fcn.1000c7d0
cmp dword [0x100a9ff0], 5
lea eax, [ebp - 0x2c]
push eax
sete dl
mov dword [ebp - 0x2c], 0
push 1
mov ecx, 0x10072060
mov dword [ebp - 0x28], 0
call fcn.10043920
add esp, 8
test al, al
je 0x1000a4f3
mov eax, dword [0x100a93dc]
mov ecx, 5
mov dword [0x100a9ff0], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000a4f9
mov ecx, dword [0x100a9ff0]
cmp ecx, 6
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Misc
push 1
call fcn.10043920
add esp, 8
test al, al
je 0x1000a53d
mov eax, dword [0x100a93dc]
mov ecx, 6
mov dword [0x100a9ff0], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000a543
mov ecx, dword [0x100a9ff0]
cmp ecx, 7
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.About
push 1
call fcn.10043920
add esp, 8
test al, al
je 0x1000a587
mov eax, dword [0x100a93dc]
mov ecx, 7
mov dword [0x100a9ff0], ecx
or dword [eax + 0x4714], 0x20
jmp 0x1000a58d
mov ecx, dword [0x100a9ff0]
cmp ecx, 8
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x28], 0
push eax
sete dl
mov ecx, str.Debug
push 1
call fcn.10043920
add esp, 8
test al, al
je 0x1000a5ce
mov eax, dword [0x100a93dc]
mov dword [0x100a9ff0], 8
or dword [eax + 0x4714], 0x20
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x44070000
mov ecx, 5
mov dword [ebp - 0x28], 0
call fcn.10014b00
mov eax, dword [0x100a9ff0]
cmp eax, 8
je 0x1000a618
cmp eax, 6
je 0x1000a618
cmp eax, 1
je 0x1000a618
mov edx, dword [0x100a93dc]
mov eax, dword [edx + 0x3e60]
movss xmm0, dword [eax + 0x20]
movss dword [edx + 0x4738], xmm0
jmp 0x1000a628
mov edx, dword [0x100a93dc]
mov dword [edx + 0x4738], 0
mov ecx, dword [edx + 0x3e60]
mov esi, edx
or dword [edx + 0x4714], 2
mov eax, ecx
mov dword [edx + 0x471c], 1
mov dword [edx + 0x4734], 0
xor edx, edx
movss xmm0, dword [ecx + 0x14]
addss xmm0, dword [eax + 0x1c]
movss xmm1, dword [ecx + 0x18]
mov ecx, str.tab_content
or dword [esi + 0x4714], 1
push 0x45
movss dword [esi + 0x4728], xmm1
movss dword [esi + 0x4724], xmm0
mov dword [esi + 0x472c], 0
mov dword [esi + 0x4730], 0
mov dword [esi + 0x4718], 1
call fcn.1001c150
add esp, 4
mov ecx, 1
call fcn.10014b80
cmp dword [0x100a9ff0], 0
jne 0x1000a6f8
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x40f00000
mov ecx, 0xe
mov dword [ebp - 0x28], 0x40f00000
call fcn.10014b00
mov edx, 0x100a7a10
call fcn.1000c890
mov edx, 0x100a79f0
call fcn.1000c890
mov edx, 0x100a7a30
call fcn.1000c890
mov ecx, 1
call fcn.10014b80
cmp dword [0x100a9ff0], 1
jne 0x1000aa67
mov edx, 0x100a8c04
mov ecx, str.Enable
call fcn.1003bac0
test al, al
je 0x1000a782
cmp byte [0x100a8c04], 0
je 0x1000a728
call fcn.10009450
jmp 0x1000a72d
call fcn.100094a0
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a782
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000a782
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
mov eax, dword [0x100a93dc]
movss xmm3, dword [0x1009d7e8]
push ecx
push 0
movss xmm2, dword [eax + 0x3bcc]
push 0x1009ab9c
push ecx
lea ecx, [ebp - 0x20]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc8]
call fcn.10037600
movss xmm0, dword [ebp - 0x20]
addss xmm0, dword [0x1009d6c8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1009d708]
call fcn.10021ba0
push 0
push 0
push 0x14
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 2
push 0x100a78e8
xor edx, edx
mov dword [ebp - 0x28], 0
mov ecx, str.Left_Click
call fcn.100400f0
push 0
push 0
push 0x14
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 2
push 0x100a78e4
xor edx, edx
mov dword [ebp - 0x28], 0
mov ecx, str.Right_Click
call fcn.100400f0
mov ecx, dword [0x100a93dc]
add esp, 0x30
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
lea ecx, [ebp - 0x2c]
mov dword [edx + 0x1a8], eax
call fcn.1003c6d0
cmp dword [0x100a78c0], 0x73
mov ecx, str.SingleTap
sete dl
call fcn.1003bf30
test al, al
je 0x1000a926
push str.SingleTap_Mode
push 0x100720a8
push 0x100a7bf0
mov dword [0x100a78c0], 0x73
call fcn.10002a60
mov eax, dword [0x100a93dc]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a926
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000a926
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
movss xmm1, dword [0x1009d7f4]
xorps xmm0, xmm0
call fcn.10021af0
cmp dword [0x100a78c0], 0x61
mov ecx, str.Alternate
sete dl
call fcn.1003bf30
test al, al
je 0x1000a9c4
push str.Alternate_Mode
push 0x100720a8
push 0x100a7bf0
mov dword [0x100a78c0], 0x61
call fcn.10002a60
mov eax, dword [0x100a93dc]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000a9c4
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000a9c4
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
mov edx, 0x100a78c9
mov ecx, str.Variable_Unstable_Rate
call fcn.1003bac0
test al, al
je 0x1000aa42
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000aa42
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000aa42
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
mov edx, 0x100a8c14
mov ecx, str.Debug
call fcn.1003bac0
cmp dword [0x100a9ff0], 2
jne 0x1000ac9b
mov edx, 0x100a8c00
mov ecx, str.Enable
call fcn.1003bac0
test al, al
je 0x1000aaf1
cmp byte [0x100a8c00], 0
je 0x1000aa97
call fcn.10009450
jmp 0x1000aa9c
call fcn.100094a0
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000aaf1
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000aaf1
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
push ecx
push str.Cursor_Speed:__.3f
lea eax, [ebp - 0x24]
mov dword [ebp - 0x34], 0x3a83126f
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x24], 0x3f000000
push eax
push 0x100a78e0
mov edx, 8
mov ecx, str.fraction_modifier
call fcn.1003d670
add esp, 0x14
call fcn.100198d0
test al, al
je 0x1000ab98
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000ab98
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000ab98
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x3f000000
call fcn.1003c6d0
push ecx
push str.Spins_Per_Minute:__d
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0x1dd
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push 0x100a78d0
mov edx, 4
mov ecx, str.spins_per_minute
call fcn.1003d670
add esp, 0x14
call fcn.100198d0
test al, al
je 0x1000ac40
mov edx, dword [0x100a93dc]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x1000ac40
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000ac40
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
mov edx, dword [0x100a93dc]
movss xmm0, dword [edx + 0x37c8]
mov eax, dword [edx + 0x3e60]
addss xmm0, xmm0
movss xmm1, dword [eax + 0x20]
addss xmm0, dword [edx + 0x3bcc]
addss xmm0, dword [edx + 0x37d8]
mov byte [eax + 0xac], 1
mov eax, dword [edx + 0x3e60]
subss xmm1, xmm0
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
mov byte [eax + 0x131], 1
addss xmm0, xmm1
movss dword [eax + 0xf4], xmm0
cmp dword [0x100a9ff0], 3
jne 0x1000adfd
mov edx, 0x100a8c01
mov ecx, str.Enable
call fcn.1003bac0
test al, al
je 0x1000ad25
cmp byte [0x100a8c01], 0
je 0x1000accb
call fcn.1000eaf0
jmp 0x1000acd0
call fcn.1000ebc0
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000ad25
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000ad25
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x100a8518]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x100ab308]
cmp eax, dword [ecx + 4]
jg 0x1000c746
push ecx
push str.Timewarp_Scale:__.2lf
push 0x100a7d80
push 0x100a7d88
push 0x100ab310
mov edx, 9
mov ecx, str.timewarp_scale
call fcn.1003d670
add esp, 0x14
test al, al
je 0x1000ad9e
movsd xmm0, qword [0x100ab310]
mulsd xmm0, qword [0x1009d738]
movsd qword [0x100a78d8], xmm0
call fcn.100198d0
test al, al
je 0x1000adfd
mov edx, dword [0x100a93dc]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x1000adfd
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000adfd
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
cmp dword [0x100a9ff0], 4
jne 0x1000b22c
push str.Open_Replay_Preview_in_game_to_Select_a_Replay
push 0x1007208c
call fcn.1003a540
add esp, 8
mov ecx, 0x400
call fcn.10016850
test al, al
je 0x1000ae37
push str.Selected_Replay
call fcn.100227d0
add esp, 4
movss xmm0, dword [0x100a7bdc]
push str.Mods
push dword [0x100a7be0]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str.Replay_Author
push str._s____.2f______ux____s
call fcn.1003a540
add esp, 0x18
mov ecx, 0x400
call fcn.10016850
test al, al
je 0x1000ae82
push str.Player__Accuracy__Mods
call fcn.100227d0
add esp, 4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40000000
call fcn.1003c6d0
mov edx, 0x100a8c07
mov ecx, str.Enable
call fcn.1003bac0
test al, al
je 0x1000afb0
cmp byte [0x100a8c07], 0
je 0x1000af56
cmp byte [0x100a94fc], 0
jne 0x1000af03
mov eax, dword [0x100a94e8]
test eax, eax
je 0x1000af03
push eax
push dword [0x100a94dc]
push 0x100a94ec
call fcn.1004cf20
mov edx, dword [0x100a94e0]
add esp, 0xc
mov ecx, dword [0x100a94dc]
push dword [0x100a94e8]
call fcn.100026b0
add esp, 4
mov byte [0x100a94fc], 1
mov ecx, 0x100a9524
call fcn.10007790
cmp byte [0x100a96d4], 0
jne 0x1000af5b
mov eax, dword [0x100a96c0]
test eax, eax
je 0x1000af5b
push eax
push dword [0x100a96b4]
push 0x100a96c4
call fcn.1004cf20
mov edx, dword [0x100a96b8]
add esp, 0xc
mov ecx, dword [0x100a96b4]
push dword [0x100a96c0]
call fcn.100026b0
add esp, 4
mov byte [0x100a96d4], 1
jmp 0x1000af5b
call fcn.1000e9b0
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000afb0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000afb0
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
mov ecx, 0x400
call fcn.10016850
test al, al
je 0x1000afcb
push str.Usage:_Open_Replay_Preview_in_game_to_Select_a_Replay
call fcn.100227d0
add esp, 4
movss xmm1, dword [0x1009d7f4]
movss xmm0, dword [0x1009d798]
call fcn.10021af0
cmp byte [0x100a8c07], 0
jne 0x1000b003
call fcn.1001ee60
movaps xmm0, xmmword [0x1009d8f0]
lea edx, [ebp - 0x50]
xor ecx, ecx
movups xmmword [ebp - 0x50], xmm0
call fcn.10014a00
mov edx, 0x100a8c08
mov ecx, str.Hardrock
call fcn.1003bac0
test al, al
je 0x1000b0b0
cmp byte [0x100a7a78], 0
je 0x1000b0b0
mov ecx, dword [0x100a7a64]
mov eax, dword [0x100a7a60]
cmp eax, ecx
je 0x1000b0b0
movss xmm6, dword [0x100a9114]
movss xmm7, dword [0x1009d910]
nop word [eax + eax]
movss xmm1, dword [eax + 0xc]
movaps xmm2, xmm6
subss xmm1, dword [0x100a9110]
movss xmm5, dword [eax + 8]
subss xmm5, dword [0x100a910c]
movss xmm0, dword [0x1009d7a8]
divss xmm1, xmm6
divss xmm5, xmm6
subss xmm0, xmm1
movaps xmm1, xmm6
mulss xmm2, xmm5
addss xmm2, dword [0x100a910c]
andps xmm0, xmm7
mulss xmm1, xmm0
addss xmm1, dword [0x100a9110]
movss dword [eax + 8], xmm2
movss dword [eax + 0xc], xmm1
add eax, 0x18
cmp eax, ecx
jne 0x1000b050
mov ecx, 0x400
call fcn.10016850
test al, al
je 0x1000b0cb
push str.Convert_Replay_to_from_Hardrock
call fcn.100227d0
add esp, 4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40000000
call fcn.1003c6d0
mov edx, 0x100a78ca
mov ecx, str.Replay_Aim
call fcn.1003bac0
test al, al
je 0x1000b149
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000b149
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000b149
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
mov ecx, 0x400
call fcn.10016850
test al, al
je 0x1000b164
push str.Aim_According_to_Replay_Data
call fcn.100227d0
add esp, 4
movss xmm1, dword [0x1009d7f4]
movss xmm0, dword [0x1009d798]
call fcn.10021af0
mov edx, 0x100a78c8
mov ecx, str.Replay_Keys
call fcn.1003bac0
test al, al
je 0x1000b1e1
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000b1e1
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000b1e1
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
mov ecx, 0x400
call fcn.10016850
test al, al
je 0x1000b1fc
push str.Press_Keys_According_to_Replay_Data
call fcn.100227d0
add esp, 4
cmp byte [0x100a8c07], 0
jne 0x1000b22c
call fcn.10014a50
mov edx, dword [0x100a93dc]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x100a9ff0], 5
jne 0x1000b58a
mov edx, 0x100a8c03
mov ecx, str.Unmod_Flashlight
call fcn.1003bac0
test al, al
je 0x1000b2b6
cmp byte [0x100a8c03], 0
je 0x1000b25c
call fcn.1000ecf0
jmp 0x1000b261
call fcn.1000ed90
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000b2b6
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000b2b6
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
mov edx, 0x100a8c06
mov ecx, str.Unmod_Hidden
call fcn.1003bac0
test al, al
je 0x1000b3a3
cmp byte [0x100a8c06], 0
je 0x1000b349
cmp byte [0x100a94fc], 0
jne 0x1000b333
mov eax, dword [0x100a94e8]
test eax, eax
je 0x1000b333
push eax
push dword [0x100a94dc]
push 0x100a94ec
call fcn.1004cf20
mov edx, dword [0x100a94e0]
add esp, 0xc
mov ecx, dword [0x100a94dc]
push dword [0x100a94e8]
call fcn.100026b0
add esp, 4
mov byte [0x100a94fc], 1
mov ecx, 0x100a9524
call fcn.10007790
mov ecx, 0x100a968c
call fcn.10007790
jmp 0x1000b34e
call fcn.1000e180
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000b3a3
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000b3a3
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
push str.Score_Multiplier
call fcn.1003a540
add esp, 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
mov ecx, 0x46
call fcn.1001f400
mov edx, 0x100a8c02
mov ecx, str.Enable
call fcn.1003bac0
test al, al
je 0x1000b463
cmp byte [0x100a8c02], 0
je 0x1000b409
call fcn.1000ea30
jmp 0x1000b40e
call fcn.1000ea80
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000b468
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000b463
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
mov eax, dword [0x100a93dc]
mov eax, dword [eax + 0x3e60]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
dec dword [eax + 0xe4]
call fcn.1003c6d0
cmp byte [0x100a8c02], 0
jne 0x1000b4ad
call fcn.1001ee60
movaps xmm0, xmmword [0x1009d8f0]
lea edx, [ebp - 0x50]
xor ecx, ecx
movups xmmword [ebp - 0x50], xmm0
call fcn.10014a00
push ecx
push str.Score_Multiplier:__.0f
lea eax, [ebp - 0x24]
mov dword [ebp - 0x34], 0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x24], 0x42c80000
push eax
push 0x100a78c4
mov edx, 8
mov ecx, str.score_multiplier
call fcn.1003d670
add esp, 0x14
mov ecx, 0x400
call fcn.10016850
test al, al
je 0x1000b4fb
push str.Hold_Ctrl_To_Set_a_Custom_Value
call fcn.100227d0
add esp, 4
call fcn.100198d0
test al, al
je 0x1000b55a
mov edx, dword [0x100a93dc]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x1000b55a
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000b55a
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
cmp byte [0x100a8c02], 0
jne 0x1000b58a
call fcn.10014a50
mov edx, dword [0x100a93dc]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x100a9ff0], 6
jne 0x1000be22
push str.Discord_RPC_Settings
call fcn.1003a540
add esp, 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
mov edx, 0x100a8c05
mov ecx, str.Enable
call fcn.1003bac0
test al, al
je 0x1000b637
cmp byte [0x100a8c05], 0
je 0x1000b5dd
call fcn.1000e0a0
jmp 0x1000b5e2
call fcn.1000e0f0
mov eax, dword [0x100a93dc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x1000b637
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov edx, 0x1009c500
mov ecx, esi
mov edi, eax
call fcn.10013ee0
mov esi, eax
test esi, esi
je 0x1000b637
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push edi
call fcn.100576c9
push esi
call fcn.10054f1b
add esp, 0x14
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x40a00000
call fcn.1003c6d0
cmp byte [0x100a8c05], 0
jne 0x1000b670
call fcn.1001ee60
movaps xmm0, xmmword [0x1009d8f0]
lea edx, [ebp - 0x50]
xor ecx, ecx
movups xmmword [ebp - 0x50], xmm0
call fcn.10014a00
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100a97e8
mov edx, str.State
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_state
call fcn.100400f0
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0x18
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test al, al
je 0x1000b820
mov eax, dword [0x100a93dc]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x34], ecx
mov dword [eax + 0x5a7c], 0
test ecx, ecx
je 0x1000b71a
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov ecx, dword [ebp - 0x34]
mov edx, 0x1009c500
mov dword [ebp - 0x30], eax
call fcn.10013ee0
mov edi, eax
test edi, edi
je 0x1000b714
push edi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x30]
call fcn.100576c9
push edi
call fcn.10054f1b
add esp, 0x14
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0xffffffffffffffff
push 0x100a97e8
push 0
push 0xfde9
call esi
push eax
push 0x100aa020
push 0xffffffffffffffff
push 0x100a97e8
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x1000c78a
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x100aa020], cx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
call edi
test eax, eax
je 0x1000b820
push str.CLRCreateInstance
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1000b820
lea ecx, [ebp - 0x24]
push ecx
push 0x10072020
push 0x10072030
call eax
test eax, eax
jne 0x1000b820
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x34]
push edx
push 0x10072040
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x1000b817
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
push edx
push 0x10072050
push 0x10072010
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x1000b80e
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [ebp - 0x30]
push 0x100a9358
push 0x100aa020
push str.GetCSharpStringPtr
push str.Freedom.SetPresence
call fcn.10006520
mov eax, dword [ebp - 0x30]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100a99e8
mov edx, str.Large_Text
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_large_text
call fcn.100400f0
add esp, 0x18
test al, al
je 0x1000b9c8
mov eax, dword [0x100a93dc]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x34], ecx
mov dword [eax + 0x5a7c], 0
test ecx, ecx
je 0x1000b8be
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.10027af0
mov ecx, dword [ebp - 0x34]
mov edx, 0x1009c500
mov dword [ebp - 0x30], eax
call fcn.10013ee0
mov edi, eax
test edi, edi
je 0x1000b8b8
push edi
push dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x30]
call fcn.100576c9
push edi
call fcn.10054f1b
add esp, 0x14
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
push 0
push 0xffffffffffffffff
push 0x100a99e8
push 0
push 0xfde9
call esi
push eax
push 0x100aa420
push 0xffffffffffffffff
push 0x100a99e8
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x1000c78a
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x100aa420], cx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x30], ecx
call edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1000b9ce
push str.CLRCreateInstance
push eax
call edi
test eax, eax
je 0x1000b9ce
lea ecx, [ebp - 0x34]
push ecx
push 0x10072020
push 0x10072030
call eax
test eax, eax
jne 0x1000b9ce
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x24]
push edx
push 0x10072040
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x1000b9bd
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x30]
push edx
push 0x10072050
push 0x10072010
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x1000b9b4
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [ebp - 0x30]
push 0x100a9360
push 0x100aa420
push str.GetCSharpStringPtr
push str.Freedom.SetPresence
call fcn.10006520
mov eax, dword [ebp - 0x30]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x1000b9ce
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
push 0x200
push 0x100aa820
mov edx, str.Small_Text
mov dword [ebp - 0x28], 0
mov ecx, str.rpc_small_text
call fcn.100400f0
add esp, 0x18
test al, al
je 0x1000bb1e
mov ecx, dword [0x100a93dc]
mov ecx, dword [ecx + 0x20]
call fcn.10027a80
push 0
push 0
push 0xffffffffffffffff
push 0x100aa820
push 0
push 0xfde9
call esi
push eax
push 0x100a9bf0
push 0xffffffffffffffff
push 0x100aa820
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x1000c78a
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x100a9bf0], cx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x30], ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x1000bb1e
push str.CLRCreateInstance
push eax
call edi
test eax, eax
je 0x1000bb1e
lea ecx, [ebp - 0x34]
push ecx
push 0x10072020
push 0x10072030
call eax
test eax, eax
jne 0x1000bb1e
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x24]
push edx
push 0x10072040
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x1000bb15
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x30]
push edx
push 0x10072050
push 0x10072010
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x1000bb0c
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [ebp - 0x30]
push 0x100a935c
push 0x100a9bf0
push str.GetCSharpStringPtr
push str.Freedom.SetPresence
call fcn.10006520
mov eax, dword [ebp - 0x30]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp byte [0x100a8c05], 0
jne 0x1000bb31
call fcn.10014a50
call fcn.1001eec0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0x41200000
call fcn.1003c6d0
mov eax, dword [0x100a90fc]
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push str.Font_Size:__dpx
push 0x10
push 0x100aaa20
call fcn.100132a0
add esp, 0xc
call fcn.1003c750
add esp, 4
test al, al
je 0x1000bc75
mov eax, dword [0x100a93dc]
mov eax, dword [eax + 0x2c]
mov esi, dword [eax + 0x44]
mov eax, dword [eax + 0x3c]
lea edi, [esi + eax*4]
mov dword [ebp - 0x24], edi
cmp esi, edi
je 0x1000bc70
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov eax, dword [esi]
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push 0x1009ae94
lea eax, [ebp - 0x20]
push 4
push eax
call fcn.100132a0
mov eax, dword [esi]
lea ecx, [ebp - 0x2c]
cmp eax, dword [0x100a90fc]
push ecx
sete al
lea ecx, [ebp - 0x20]
push 0
mov dl, al
mov byte [ebp - 0x39], al
call fcn.10043920
add esp, 0x18
test al, al
je 0x1000bc5a
mov eax, dword [esi]
mov dword [0x100a90fc], eax
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
mov dword [0x100a78cc], eax
mov eax, dword [0x100a93dc]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x1000bc57
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
call fcn.10027af0
mov edx, 0x1009c500
mov dword [ebp - 0x30], eax
mov ecx, edi
call fcn.10013ee0
mov edi, eax
test edi, edi
je 0x1000bc57
push edi
push dword [ebp - 0x34]
mov dword [ebp - 0x44], 0
push 1
push dword [ebp - 0x30]
call fcn.100576c9
push edi
call fcn.10054f1b
add esp, 0x14
mov edi, dword [ebp - 0x24]
cmp byte [ebp - 0x39], 0
je 0x1000bc65
call fcn.1001f2b0
add esi, 4
cmp esi, edi
jne 0x1000bba3
call fcn.10022d70
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003c6d0
mov edx, 0x100a7d90
mov ecx, str.Disable_NtUserSendInput_Check
call fcn.1003bac0
test al, al
je 0x1000bcb3
cmp byte [0x100a7d90], 0
je 0x1000bcae
call fcn.100093b0
jmp 0x1000bcb3
call fcn.10009400
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003c6d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Unload_DLL
mov dword [ebp - 0x1c], 0
call fcn.1003ae70
add esp, 4
test al, al
je 0x1000bdaa
push dword [0x100a9100]
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
cmp byte [0x100a9520], 0
je 0x1000bd48
mov edi, dword [0x100a950c]
lea ecx, [ebp - 0x24]
mov eax, dword [0x100a9500]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push ecx
push 0x40
push edi
push eax
mov dword [ebp - 0x34], eax
call esi
push edi
push 0x100a9510
push dword [ebp - 0x34]
call fcn.1004cf20
add esp, 0xc
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push edi
push dword [ebp - 0x34]
call esi
mov byte [0x100a9520], 0
call fcn.100095d0
push 4
call fcn.1004b56b
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [eax], 0x1000ccb0
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0
push ecx
push 0
push eax
push 0x1000d310
push 0
push 0
call fcn.10053c1d
add esp, 0x18
mov dword [ebp - 0x38], eax
test eax, eax
je 0x1000c794
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 1
call fcn.100021d0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x34], 0
jne 0x1000c78f
call fcn.10007890
mov byte [ebp - 0x39], al
test al, al
je 0x1000bdbb
call fcn.1001ee60
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov ecx, str.Rescan_Memory
mov dword [ebp - 0x1c], 0
call fcn.1003ae70
add esp, 4
test al, al
je 0x1000bdfa
push 0
push 0
push 0
push 0x10008d10
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 0x39], 0
je 0x1000be22
mov edx, dword [0x100a93dc]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x100a9ff0], 7
jne 0x1000c01d
push str.Ciremuns_Freedom_v0.93.3
call fcn.1003a540
add esp, 4
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003c6d0
push str.Special_Thanks_to_Maple_Syrup
call fcn.1003a540
add esp, 4
push str._mrflashstudio
call fcn.1003a540
add esp, 4
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], 0x40a00000
call fcn.1003c6d0
mov ecx, dword [0x100a93dc]
lea eax, [ebp - 0x20]
movss xmm3, dword [0x1009d7e8]
push ecx
push 0
movss xmm2, dword [ecx + 0x3bcc]
push str.Ciremun
push ecx
mov ecx, dword [ecx + 0x3bc8]
mov dword [esp], 0xbf800000
push eax
call fcn.10037600
movss xmm0, dword [ebp - 0x20]
addss xmm0, dword [0x1009d6c8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1009d76c]
call fcn.10021ba0
push 0
push 0
push 0x4000
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 8
push str.Ciremun
xor edx, edx
mov dword [ebp - 0x1c], 0
mov ecx, str.___Discord
call fcn.100400f0
mov ecx, dword [0x100a93dc]
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x40200000
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
lea ecx, [ebp - 0x20]
mov dword [edx + 0x1a8], eax
call fcn.1003c6d0
mov ecx, dword [0x100a93dc]
lea eax, [ebp - 0x20]
movss xmm3, dword [0x1009d7e8]
add esp, 0x14
movss xmm2, dword [ecx + 0x3bcc]
push 0
push str.https:__discord.gg_FyCrwed6jv
push ecx
mov ecx, dword [ecx + 0x3bc8]
mov dword [esp], 0xbf800000
push eax
call fcn.10037600
movss xmm0, dword [ebp - 0x20]
addss xmm0, dword [0x1009d6c8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x1009d76c]
call fcn.10021ba0
push 0
push 0
push 0x4000
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 0x1d
push str.https:__discord.gg_FyCrwed6jv
xor edx, edx
mov dword [ebp - 0x1c], 0
mov ecx, str.___Discord_Server
call fcn.100400f0
mov ecx, dword [0x100a93dc]
add esp, 0x18
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
mov dword [edx + 0x1a8], eax
cmp dword [0x100a9ff0], 8
jne 0x1000c714
mov edx, dword [0x100a93dc]
mov ecx, str.Debug_Log
push 0
mov eax, dword [edx + 0x3e60]
movss xmm0, dword [eax + 0x14]
addss xmm0, dword [eax + 0x1c]
movss xmm1, dword [eax + 0x18]
or dword [edx + 0x4714], 3
movss dword [edx + 0x4728], xmm1
mov dword [edx + 0x472c], 0
movss dword [edx + 0x4724], xmm0
mov dword [edx + 0x4730], 0
mov dword [edx + 0x4718], 1
mov dword [edx + 0x4734], 0x44200000
mov dword [edx + 0x4738], 0x43f00000
mov dword [edx + 0x471c], 2
xor edx, edx
call fcn.1001c150
mov eax, dword [0x100a7bf8]
add esp, 4
test eax, eax
mov ecx, 0x100a8c15
cmovne ecx, eax
push ecx
push 0x1007208c
call fcn.1003a690
add esp, 8
cmp byte [0x100a7bfc], 0
je 0x1000c15c
mov eax, dword [0x100a93dc]
mov ecx, dword [eax + 0x3e60]
movss xmm3, dword [ecx + 0x48]
movss xmm1, dword [ecx + 0xfc]
movaps xmm2, xmm3
maxss xmm2, dword [eax + 0x37d8]
movaps xmm0, xmm1
mov dword [ecx + 0x94], 0x3f800000
addss xmm1, dword [ecx + 0x124]
subss xmm0, xmm2
subss xmm3, xmm2
addss xmm1, xmm2
subss xmm1, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
subss xmm1, dword [ecx + 0x18]
subss xmm1, dword [ecx + 0x58]
subss xmm1, dword [ecx + 0x68]
addss xmm1, dword [ecx + 0x7c]
cvttss2si eax, xmm1
cvtsi2ss xmm0, eax
movss dword [ecx + 0x8c], xmm0
xorps xmm0, xmm0
maxss xmm0, xmm3
movss dword [ecx + 0x9c], xmm0
mov byte [0x100a7bfc], 0
call fcn.1001e690
mov ecx, str.Game
call fcn.100438a0
mov esi, 0x1009af98
mov edi, 0x1009af9c
test al, al
je 0x1000c24d
mov eax, dword [0x100a903c]
test eax, eax
je 0x1000c18a
mov eax, dword [eax]
jmp 0x1000c18c
xor eax, eax
push eax
push str.Audio_Time:__d
call fcn.1003a540
mov eax, dword [0x100a9034]
add esp, 8
test eax, eax
je case.default.0x1000c1aa
mov eax, dword [eax]
cmp eax, 7
ja case.default.0x1000c1aa
jmp dword [eax*4 + 0x1000c7a4]
mov eax, str.Main_Menu
jmp 0x1000c1ee
mov eax, str.Editor
jmp 0x1000c1ee
mov eax, str.Game
jmp 0x1000c1ee
mov eax, str.Exit
jmp 0x1000c1ee
mov eax, str.Editor_Beatmap_Select
jmp 0x1000c1ee
mov eax, str.Beatmap_Select
jmp 0x1000c1ee
mov eax, str.Beatmap_Select_Drawings
jmp 0x1000c1ee
mov eax, str.Replay_Preview
jmp 0x1000c1ee
mov eax, str.Unknown
push eax
push str.Current_Scene:__s
call fcn.1003a540
mov eax, dword [0x100a9038]
add esp, 8
test eax, eax
jne 0x1000c209
xor cl, cl
jmp 0x1000c219
mov ecx, dword [eax]
test ecx, ecx
jne 0x1000c213
xor cl, cl
jmp 0x1000c219
mov cl, byte [ecx + 0x17b]
test cl, cl
mov eax, esi
cmove eax, edi
push eax
push str.Replay_Mode:__s
call fcn.1003a540
cmp byte [0x100a8c0b], 0
mov ecx, str.Fast
mov eax, str.All_Methods
cmove eax, ecx
push eax
push str.Pre_Jitting_Mode:__s
call fcn.1003a540
add esp, 0x10
mov ecx, str.Account_Info
call fcn.100438a0
test al, al
je 0x1000c27c
push 0x100a9060
push str.Client_ID:__n_s
call fcn.1003a540
push 0x100a9040
push str.Username:__s
call fcn.1003a540
add esp, 0x10
mov ecx, str.Playfield
call fcn.100438a0
test al, al
je 0x1000c31b
movss xmm0, dword [0x100a9108]
sub esp, 0x10
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100a9104]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.window_size:__f__f
call fcn.1003a540
movss xmm0, dword [0x100a9128]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100a9124]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.playfield_size:__f__f
call fcn.1003a540
movss xmm0, dword [0x100a9110]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100a910c]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.playfield_position:__f__f
call fcn.1003a540
add esp, 0x14
mov ecx, str.Pointers
call fcn.100438a0
test al, al
je 0x1000c3e8
push dword [0x100a8c10]
push str.binding_manager_ptr:__08X
call fcn.1003a540
push dword [0x100a9038]
push str.osu_manager_ptr:__08X
call fcn.1003a540
push dword [0x100a9384]
push str.selected_replay_ptr:__08X
call fcn.1003a540
push dword [0x100a9030]
push str.selected_song_ptr:__08X
call fcn.1003a540
push dword [0x100a93c4]
push str.update_timing_ptr_1:__08X
call fcn.1003a540
push dword [0x100a93cc]
push str.update_timing_ptr_2:__08X
call fcn.1003a540
push dword [0x100a93c0]
push str.update_timing_ptr_3:__08X
call fcn.1003a540
push dword [0x100a93c8]
push str.update_timing_ptr_4:__08X
call fcn.1003a540
add esp, 0x40
push dword [0x100a9120]
push str.window_manager_ptr:__08X
call fcn.1003a540
push dword [0x100a78ec]
push str.dispatch_table_id:__08X
call fcn.1003a540
cmp dword [0x100a90c8], 0
cmove esi, edi
push esi
push str.dispatch_table_id_found:__s
call fcn.1003a540
add esp, 0x18
mov ecx, str.Methods
call fcn.100438a0
test al, al
je 0x1000c533
push dword [0x100a9364]
push str.hom_update_vars_code_start:__08X
call fcn.1003a540
push dword [0x100a9324]
push str.parse_beatmap_code_start:__08X
call fcn.1003a540
push dword [0x100a90a0]
push str.beatmap_onload_code_start:__08X
call fcn.1003a540
push dword [0x100a90f4]
push str.current_scene_code_start:__08X
call fcn.1003a540
push dword [0x100a90f0]
push str.selected_song_code_start:__08X
call fcn.1003a540
push dword [0x100a90d4]
push str.audio_time_code_start:__08X
call fcn.1003a540
push dword [0x100a90bc]
push str.osu_manager_code_start:__08X
call fcn.1003a540
push dword [0x100a8c0c]
push str.binding_manager_code_start:__08X
call fcn.1003a540
add esp, 0x40
push dword [0x100a9388]
push str.selected_replay_code_start:__08X
call fcn.1003a540
push dword [0x100a90c0]
push str.osu_client_id_code_start:__08X
call fcn.1003a540
push dword [0x100a90b0]
push str.osu_username_code_start:__08X
call fcn.1003a540
push dword [0x100a9118]
push str.window_manager_code_start:__08X
call fcn.1003a540
push dword [0x100a9394]
push str.score_multiplier_code_start:__08X
call fcn.1003a540
push dword [0x100a9354]
push str.discord_rich_presence_code_start:__08X
call fcn.1003a540
push dword [0x100a93d0]
push str.check_flashlight_code_start:__08X
call fcn.1003a540
push dword [0x100a93d4]
push str.update_flashlight_code_start:__08X
call fcn.1003a540
add esp, 0x40
push dword [0x100a93b0]
push str.update_timing_code_start:__08X
call fcn.1003a540
push dword [0x100a93a4]
push str.set_playback_rate_code_start:__08X
call fcn.1003a540
push dword [0x100a939c]
push str.check_timewarp_code_start:__08X
call fcn.1003a540
add esp, 0x18
mov ecx, str.Offsets
call fcn.100438a0
test al, al
je 0x1000c65c
push dword [0x100a9368]
push str.hom_update_vars_hidden_loc:_0x_X
call fcn.1003a540
push dword [0x100a934c]
push dword [0x100a9348]
push dword [0x100a9344]
push str.approach_rate_offsets:_0x_X_0x_X_0x_X
call fcn.1003a540
push dword [0x100a933c]
push dword [0x100a9338]
push dword [0x100a9334]
push str.circle_size_offsets:_0x_X_0x_X_0x_X
call fcn.1003a540
push dword [0x100a9330]
push dword [0x100a932c]
push str.overall_difficulty_offsets:_0x_X_0x_X
call fcn.1003a540
add esp, 0x34
push dword [0x100a90cc]
push str.beatmap_onload_offset:_0x_X
call fcn.1003a540
push dword [0x100a90e8]
push str.current_scene_offset:_0x_X
call fcn.1003a540
push dword [0x100a9390]
push str.selected_replay_offset:_0x_X
call fcn.1003a540
push dword [0x100a911c]
push str.window_manager_offset:_0x_X
call fcn.1003a540
push dword [0x100a90c4]
push str.selected_song_offset:_0x_X
call fcn.1003a540
push dword [0x100a90d8]
push str.audio_time_offset:_0x_X
call fcn.1003a540
push dword [0x100a90a8]
push str.osu_manager_offset:_0x_X
call fcn.1003a540
push dword [0x100a90b8]
push str.binding_manager_offset:_0x_X
call fcn.1003a540
add esp, 0x40
push dword [0x100a90f8]
push str.client_id_offset:_0x_X
call fcn.1003a540
push dword [0x100a90d0]
push str.username_offset:_0x_X
call fcn.1003a540
push dword [0x100a90dc]
push str.check_timewarp_offset:_0x_X
call fcn.1003a540
add esp, 0x18
mov ecx, str.Hook_Jumps
call fcn.100438a0
test al, al
je 0x1000c714
push dword [0x100a9350]
push str.discord_rich_presence_jump_back:__08X
call fcn.1003a540
push dword [0x100a9340]
push str.ar_hook_jump_back:__08X
call fcn.1003a540
push dword [0x100a90e4]
push str.beatmap_onload_hook_jump_back:__08X
call fcn.1003a540
push dword [0x100a93bc]
push str.check_timewarp_hook_1_jump_back:__08X
call fcn.1003a540
push dword [0x100a93a0]
push str.check_timewarp_hook_2_jump_back:__08X
call fcn.1003a540
push dword [0x100a9320]
push str.cs_hook_jump_back:__08X
call fcn.1003a540
push dword [0x100a9328]
push str.od_hook_jump_back:__08X
call fcn.1003a540
push dword [0x100a9398]
push str.score_multiplier_hook_jump_back:__08X
call fcn.1003a540
add esp, 0x40
push dword [0x100a938c]
push str.selected_replay_hook_jump_back:__08X
call fcn.1003a540
push dword [0x100a93b8]
push str.set_playback_rate_jump_back:__08X
call fcn.1003a540
add esp, 0x10
call fcn.1001e690
call fcn.10022d70
call fcn.1001e690
call fcn.1001edf0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1004b360
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x100ab308
call fcn.1004b941
add esp, 4
cmp dword [0x100ab308], 0xffffffff
jne 0x1000ad5b
movsd xmm0, qword [0x100a78d8]
divsd xmm0, qword [0x1009d738]
push 0x100ab308
movsd qword [0x100ab310], xmm0
call fcn.1004b8f0
add esp, 4
jmp 0x1000ad5b
les eax, [ecx + ebp*8]
shl ebp, 1
invalid
call fcn.1004b490
call fcn.10053cae
push 6
mov dword [ebp - 0x34], 0
call fcn.1004b00a
nop
mov cl, 0xc1
add byte [eax], dl
mov eax, 0xbf1000c1
rol dword [eax], 16
mov cl, 0
adc ch, cl
rol dword [eax], 0x10
aam 0xc1
add byte [eax], dl
fcmovnb st(0), st(1)
add byte [eax], dl
loop 0x1000c783
add byte [eax], dl
int3