Function at 0x406170
Capabilities:
Create thread
Load windows common language runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x38
mov eax, dword [0x4e1898]
xor eax, esp
mov dword [esp + 0x34], eax
push esi
mov esi, dword [0x4e5e10]
push edi
test esi, esi
je 0x406244
mov edi, dword [sym.imp.KERNEL32.dll_K32QueryWorkingSetEx]
lea eax, [esp + 0x20]
push 8
push eax
push dword [0x4e5f08]
mov dword [esp + 0x2c], esi
call edi
test eax, eax
je 0x406244
test byte [esp + 0x24], 1
je 0x406244
mov esi, dword [esi]
sub esi, 0xffffff80
cmp esi, dword [0x4e6b74]
je 0x40623e
push 8
lea eax, [esp + 0x14]
mov dword [esp + 0x14], esi
push eax
push dword [0x4e5f08]
call edi
test eax, eax
je 0x40623e
test byte [esp + 0x14], 1
je 0x40623e
mov edi, dword [esi]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0x10], 0
lea edx, [edi + 4]
call fcn.00402150
add esp, 4
test eax, eax
je 0x40623e
push 0
push 0
push 0xff
push str.Freedom_v0.93.3_is_Loading_
push dword [esp + 0x1c]
add edi, 8
push edi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 0x100
jae 0x4088e8
mov byte [eax + str.Freedom_v0.93.3_is_Loading_], 0
mov dword [0x4e6b74], esi
mov ecx, dword [0x4e5ed8]
mov edi, ecx
mov esi, dword [0x4e5fbc]
mov dword [esp + 0x18], ecx
test ecx, ecx
jne 0x406271
mov ecx, dword [esi + 0x38]
mov edi, ecx
test ecx, ecx
jne 0x40626d
mov eax, dword [esi + 0x2c]
mov eax, dword [eax + 0x44]
mov ecx, dword [eax]
mov edi, ecx
mov dword [esp + 0x18], ecx
call fcn.0041c300
lea eax, [esp + 0x18]
lea ecx, [esi + 0x478c]
push eax
call fcn.00427c00
mov eax, dword [esi + 0x3e60]
mov ecx, dword [eax + 0x264]
mov eax, dword [edi + 0x30]
lea esi, [ecx + 0x48]
mov edi, dword [esi + 4]
mov dword [esp + 0xc], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x20], eax
mov eax, dword [esi]
cmp eax, edi
jne 0x4062d4
lea ecx, [eax + 1]
test edi, edi
je 0x4062be
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x4062c3
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00427b10
mov ecx, dword [esp + 0xc]
mov edx, dword [esi]
mov eax, dword [esi + 8]
mov edi, dword [esp + 0x20]
mov dword [eax + edx*4], edi
inc dword [esi]
mov dword [ecx + 0x70], edi
call fcn.00433dd0
mov eax, dword [0x4e5fbc]
xor edx, edx
push 0x41
mov ecx, str.Freedom
or dword [eax + 0x4714], 1
mov dword [eax + 0x4724], 0
mov dword [eax + 0x4728], 0
mov dword [eax + 0x472c], 0
mov dword [eax + 0x4730], 0
mov dword [eax + 0x4718], 2
call fcn.004197a0
add esp, 4
push str.Freedom_v0.93.3_is_Loading_
push 0x4ad374
call fcn.0043d900
movss xmm0, dword [0x4da034]
add esp, 8
movss xmm1, dword [0x4e5e90]
comiss xmm0, xmm1
jbe 0x4063b0
mulss xmm1, dword [0x4da124]
sub esp, 8
addss xmm1, dword [0x4d9fa8]
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
push str.Memory_Scan:__.0f__
push 0x20
push 0x4e6b78
call fcn.0040f570
movss xmm0, dword [0x4e5e90]
lea ecx, [esp + 0x24]
add esp, 0x14
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.00440300
mov ecx, dword [0x4e5fbc]
mov eax, dword [ecx + 0x3e60]
movss xmm0, dword [eax + 0x20]
addss xmm0, dword [eax + 0x18]
movss xmm1, dword [eax + 0x14]
or dword [ecx + 0x4714], 1
movss dword [ecx + 0x4724], xmm1
mov dword [ecx + 0x472c], 0
movss dword [ecx + 0x4728], xmm0
mov dword [ecx + 0x4730], 0
mov dword [ecx + 0x4718], 8
mov ecx, eax
cmp byte [ecx + 0xaf], 0
jne 0x408889
push ecx
push str.settings
call fcn.00413a30
mov ecx, dword [0x4e5fbc]
mov esi, eax
cmp byte [ecx + 0x371f], 0
je 0x40644e
cmp byte [ecx + 0x4508], 0
jne 0x40644e
mov ecx, 0x20
call fcn.00413e30
test al, al
je 0x40644e
mov edx, 1
mov ecx, esi
call fcn.004201f0
mov ecx, esi
call fcn.00420600
test al, al
je 0x408889
cmp dword [0x4e6b70], 0
lea eax, [esp + 0x10]
push eax
sete dl
mov dword [esp + 0x14], 0
push 1
mov ecx, str.Difficulty
mov dword [esp + 0x1c], 0
call fcn.0044e290
add esp, 8
test al, al
je 0x4064a5
mov eax, dword [0x4e5fbc]
xor ecx, ecx
mov dword [0x4e6b70], ecx
or dword [eax + 0x4714], 0x20
jmp 0x4064ab
mov ecx, dword [0x4e6b70]
cmp dword [0x4e5ea8], 0
je 0x4064fa
cmp ecx, 1
mov dword [esp + 0x10], 0
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0
push eax
sete dl
mov ecx, str.Relax
push 1
call fcn.0044e290
add esp, 8
test al, al
je 0x406504
mov eax, dword [0x4e5fbc]
mov dword [0x4e6b70], 1
or dword [eax + 0x4714], 0x20
jmp 0x406504
push str.Relax
call fcn.00408910
cmp dword [0x4e5ea8], 0
je 0x406557
cmp dword [0x4e6b70], 2
lea eax, [esp + 0x10]
push eax
sete dl
mov dword [esp + 0x14], 0
push 1
mov ecx, str.Aimbot
mov dword [esp + 0x1c], 0
call fcn.0044e290
add esp, 8
test al, al
je 0x406561
mov eax, dword [0x4e5fbc]
mov dword [0x4e6b70], 2
or dword [eax + 0x4714], 0x20
jmp 0x406561
push str.Aimbot
call fcn.00408910
cmp dword [0x4e5f84], 0
je 0x4065b4
cmp dword [0x4e6b70], 3
lea eax, [esp + 0x10]
push eax
sete dl
mov dword [esp + 0x14], 0
push 1
mov ecx, str.Timewarp
mov dword [esp + 0x1c], 0
call fcn.0044e290
add esp, 8
test al, al
je 0x4065be
mov eax, dword [0x4e5fbc]
mov dword [0x4e6b70], 3
or dword [eax + 0x4714], 0x20
jmp 0x4065be
push str.Timewarp
call fcn.00408910
cmp dword [0x4e5f70], 0
je 0x406611
cmp dword [0x4e6b70], 4
lea eax, [esp + 0x10]
push eax
sete dl
mov dword [esp + 0x14], 0
push 1
mov ecx, str.Replay
mov dword [esp + 0x1c], 0
call fcn.0044e290
add esp, 8
test al, al
je 0x40661b
mov eax, dword [0x4e5fbc]
mov dword [0x4e6b70], 4
or dword [eax + 0x4714], 0x20
jmp 0x40661b
push str.Replay
call fcn.00408910
cmp dword [0x4e6b70], 5
lea eax, [esp + 0x10]
push eax
sete dl
mov dword [esp + 0x14], 0
push 1
mov ecx, 0x4ad348
mov dword [esp + 0x1c], 0
call fcn.0044e290
add esp, 8
test al, al
je 0x406666
mov eax, dword [0x4e5fbc]
mov ecx, 5
mov dword [0x4e6b70], ecx
or dword [eax + 0x4714], 0x20
jmp 0x40666c
mov ecx, dword [0x4e6b70]
cmp ecx, 6
mov dword [esp + 0x10], 0
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0
push eax
sete dl
mov ecx, str.Misc
push 1
call fcn.0044e290
add esp, 8
test al, al
je 0x4066b3
mov eax, dword [0x4e5fbc]
mov ecx, 6
mov dword [0x4e6b70], ecx
or dword [eax + 0x4714], 0x20
jmp 0x4066b9
mov ecx, dword [0x4e6b70]
cmp ecx, 7
mov dword [esp + 0x10], 0
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0
push eax
sete dl
mov ecx, str.About
push 1
call fcn.0044e290
add esp, 8
test al, al
je 0x406700
mov eax, dword [0x4e5fbc]
mov ecx, 7
mov dword [0x4e6b70], ecx
or dword [eax + 0x4714], 0x20
jmp 0x406706
mov ecx, dword [0x4e6b70]
cmp ecx, 8
mov dword [esp + 0x10], 0
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0
push eax
sete dl
mov ecx, str.Debug
push 1
call fcn.0044e290
add esp, 8
test al, al
je 0x40674a
mov eax, dword [0x4e5fbc]
mov dword [0x4e6b70], 8
or dword [eax + 0x4714], 0x20
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x44070000
mov ecx, 5
mov dword [esp + 0x14], 0
call fcn.00410bb0
mov eax, dword [0x4e6b70]
cmp eax, 8
je 0x406797
cmp eax, 6
je 0x406797
cmp eax, 1
je 0x406797
mov ecx, dword [0x4e5fbc]
mov eax, dword [ecx + 0x3e60]
movss xmm0, dword [eax + 0x20]
movss dword [ecx + 0x4738], xmm0
jmp 0x4067a7
mov ecx, dword [0x4e5fbc]
mov dword [ecx + 0x4738], 0
or dword [ecx + 0x4714], 2
mov eax, ecx
mov dword [ecx + 0x471c], 1
xor edx, edx
mov dword [ecx + 0x4734], 0
push 0x45
mov eax, dword [eax + 0x3e60]
movss xmm0, dword [eax + 0x1c]
addss xmm0, dword [eax + 0x14]
movss xmm1, dword [eax + 0x18]
or dword [ecx + 0x4714], 1
movss dword [ecx + 0x4728], xmm1
mov dword [ecx + 0x472c], 0
movss dword [ecx + 0x4724], xmm0
mov dword [ecx + 0x4730], 0
mov dword [ecx + 0x4718], 1
mov ecx, str.tab_content
call fcn.004197a0
add esp, 4
mov ecx, 1
call fcn.00410c30
cmp dword [0x4e6b70], 0
jne 0x406878
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x40f00000
mov ecx, 0xe
mov dword [esp + 0x14], 0x40f00000
call fcn.00410bb0
mov edx, 0x4e2280
call fcn.004089a0
mov edx, 0x4e2260
call fcn.004089a0
mov edx, 0x4e22a0
call fcn.004089a0
mov ecx, 1
call fcn.00410c30
cmp dword [0x4e6b70], 1
jne 0x406c0c
mov edx, 0x4e59e4
mov ecx, str.Enable
call fcn.0043f9d0
test al, al
je 0x406906
cmp byte [0x4e59e4], 0
je 0x4068a8
call fcn.00405b50
jmp 0x4068ad
call fcn.00405ba0
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x406906
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406906
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
mov eax, dword [0x4e5fbc]
movss xmm3, dword [0x4da174]
push 0
push 0
movss xmm2, dword [eax + 0x3bcc]
push 0x4d5c9c
push ecx
lea ecx, [esp + 0x38]
mov dword [esp], 0xbf800000
push ecx
mov ecx, dword [eax + 0x3bc8]
call fcn.0043a410
movss xmm0, dword [esp + 0x28]
addss xmm0, dword [0x4da038]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x4da078]
call fcn.0041f300
push 0
push 0
push 0x14
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
push 2
push 0x4e2158
xor edx, edx
mov dword [esp + 0x2c], 0
mov ecx, str.Left_Click
call fcn.00445860
push 0
push 0
push 0x14
lea eax, [esp + 0x34]
mov dword [esp + 0x34], 0
push eax
push 2
push 0x4e2154
xor edx, edx
mov dword [esp + 0x44], 0
mov ecx, str.Right_Click
call fcn.00445860
mov ecx, dword [0x4e5fbc]
add esp, 0x30
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
lea ecx, [esp + 0x10]
mov dword [edx + 0x1a8], eax
call fcn.00440620
cmp dword [0x4e2130], 0x73
mov ecx, str.SingleTap
sete dl
call fcn.0043fe30
test al, al
je 0x406abd
push str.SingleTap_Mode
push 0x4ad378
push 0x4e2450
mov dword [0x4e2130], 0x73
call fcn.00402250
mov eax, dword [0x4e5fbc]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x406abd
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406abd
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
movss xmm1, dword [0x4da198]
xorps xmm0, xmm0
call fcn.0041f250
cmp dword [0x4e2130], 0x61
mov ecx, str.Alternate
sete dl
call fcn.0043fe30
test al, al
je 0x406b5f
push str.Alternate_Mode
push 0x4ad378
push 0x4e2450
mov dword [0x4e2130], 0x61
call fcn.00402250
mov eax, dword [0x4e5fbc]
add esp, 0xc
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x406b5f
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406b5f
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
mov edx, 0x4e2139
mov ecx, str.Variable_Unstable_Rate
call fcn.0043f9d0
test al, al
je 0x406be4
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x406be4
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406be4
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
mov edx, 0x4e59f4
mov ecx, str.Debug
call fcn.0043f9d0
cmp dword [0x4e6b70], 2
jne 0x406e5a
mov edx, 0x4e59e0
mov ecx, str.Enable
call fcn.0043f9d0
test al, al
je 0x406c9a
cmp byte [0x4e59e0], 0
je 0x406c3c
call fcn.00405b50
jmp 0x406c41
call fcn.00405ba0
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x406c9a
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406c9a
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
push ecx
push str.Cursor_Speed:__.3f
lea eax, [esp + 0x14]
mov dword [esp + 0x28], 0x3a83126f
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x18], 0x3f000000
push eax
push 0x4e2150
mov edx, 8
mov ecx, str.fraction_modifier
call fcn.00442c30
add esp, 0x14
call fcn.00416ec0
test al, al
je 0x406d4c
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x406d4c
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406d4c
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x3f000000
call fcn.00440620
push ecx
push str.Spins_Per_Minute:__d
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x1dd
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x2c], 0
push eax
push 0x4e2140
mov edx, 4
mov ecx, str.spins_per_minute
call fcn.00442c30
add esp, 0x14
call fcn.00416ec0
test al, al
je 0x406dff
mov edx, dword [0x4e5fbc]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x406dff
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406dff
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
mov edx, dword [0x4e5fbc]
movss xmm0, dword [edx + 0x37c8]
mov eax, dword [edx + 0x3e60]
addss xmm0, xmm0
movss xmm1, dword [eax + 0x20]
addss xmm0, dword [edx + 0x3bcc]
addss xmm0, dword [edx + 0x37d8]
mov byte [eax + 0xac], 1
mov eax, dword [edx + 0x3e60]
subss xmm1, xmm0
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
mov byte [eax + 0x131], 1
addss xmm0, xmm1
movss dword [eax + 0xf4], xmm0
cmp dword [0x4e6b70], 3
jne 0x406fb8
mov edx, 0x4e59e1
mov ecx, str.Enable
call fcn.0043f9d0
test al, al
je 0x406ee8
cmp byte [0x4e59e1], 0
je 0x406e8a
call fcn.00409f70
jmp 0x406e8f
call fcn.0040a040
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x406ee8
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406ee8
push esi
push dword [esp + 0x10]
mov dword [esp + 0x34], 0
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x4e75c4]
cmp eax, dword [ecx + 4]
jg 0x4088a4
push ecx
push str.Timewarp_Scale:__.2lf
push 0x4e25e0
push 0x4e25e8
push 0x4e75c8
mov edx, 9
mov ecx, str.timewarp_scale
call fcn.00442c30
add esp, 0x14
test al, al
je 0x406f5d
movsd xmm0, qword [0x4e75c8]
mulsd xmm0, qword [0x4da0b8]
movsd qword [0x4e2148], xmm0
call fcn.00416ec0
test al, al
je 0x406fb8
mov edx, dword [0x4e5fbc]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x406fb8
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x406fb8
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
cmp dword [0x4e6b70], 4
jne 0x4073e1
push str.Open_Replay_Preview_in_game_to_Select_a_Replay
push 0x4ad374
call fcn.0043d900
add esp, 8
mov ecx, 0x400
call fcn.00413e30
test al, al
je 0x406ff2
push str.Selected_Replay
call fcn.00420040
add esp, 4
movss xmm0, dword [0x4e2444]
push str.Mods
push dword [0x4e2448]
cvtps2pd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str.Replay_Author
push str._s____.2f______ux____s
call fcn.0043d900
add esp, 0x18
mov ecx, 0x400
call fcn.00413e30
test al, al
je 0x40703d
push str.Player__Accuracy__Mods
call fcn.00420040
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40000000
call fcn.00440620
mov edx, 0x4e59e7
mov ecx, str.Enable
call fcn.0043f9d0
test al, al
je 0x40716a
cmp byte [0x4e59e7], 0
je 0x407114
cmp byte [0x4e60dc], 0
jne 0x4070c1
mov eax, dword [0x4e60c8]
test eax, eax
je 0x4070c1
push eax
push dword [0x4e60bc]
push 0x4e60cc
call fcn.00468db0
mov edx, dword [0x4e60c0]
add esp, 0xc
mov ecx, dword [0x4e60bc]
push dword [0x4e60c8]
call fcn.00402190
add esp, 4
mov byte [0x4e60dc], 1
mov ecx, 0x4e60e0
call fcn.00403c90
cmp byte [0x4e628c], 0
jne 0x407119
mov eax, dword [0x4e6278]
test eax, eax
je 0x407119
push eax
push dword [0x4e626c]
push 0x4e627c
call fcn.00468db0
mov edx, dword [0x4e6270]
add esp, 0xc
mov ecx, dword [0x4e626c]
push dword [0x4e6278]
call fcn.00402190
add esp, 4
mov byte [0x4e628c], 1
jmp 0x407119
call fcn.00409e30
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x40716a
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x40716a
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
mov ecx, 0x400
call fcn.00413e30
test al, al
je 0x407185
push str.Usage:_Open_Replay_Preview_in_game_to_Select_a_Replay
call fcn.00420040
add esp, 4
movss xmm1, dword [0x4da198]
movss xmm0, dword [0x4da130]
call fcn.0041f250
cmp byte [0x4e59e7], 0
jne 0x4071c4
mov ecx, 4
call fcn.0041c4b0
movaps xmm0, xmmword [0x4da280]
lea edx, [esp + 0x28]
xor ecx, ecx
movups xmmword [esp + 0x28], xmm0
call fcn.00410aa0
mov edx, 0x4e59e8
mov ecx, str.Hardrock
call fcn.0043f9d0
test al, al
je 0x407265
cmp byte [0x4e22e0], 0
je 0x407265
mov ecx, dword [0x4e22cc]
mov eax, dword [0x4e22c8]
cmp eax, ecx
je 0x407265
movss xmm4, dword [0x4e5eec]
movss xmm5, dword [0x4da2c0]
movss xmm6, dword [0x4da138]
nop
movss xmm0, dword [eax + 0xc]
movaps xmm2, xmm6
subss xmm0, dword [0x4e5ee8]
movss xmm3, dword [eax + 8]
subss xmm3, dword [0x4e5ee4]
divss xmm0, xmm4
divss xmm3, xmm4
subss xmm2, xmm0
mulss xmm3, xmm4
addss xmm3, dword [0x4e5ee4]
andps xmm2, xmm5
mulss xmm2, xmm4
addss xmm2, dword [0x4e5ee8]
movss dword [eax + 8], xmm3
movss dword [eax + 0xc], xmm2
add eax, 0x18
cmp eax, ecx
jne 0x407210
mov ecx, 0x400
call fcn.00413e30
test al, al
je 0x407280
push str.Convert_Replay_to_from_Hardrock
call fcn.00420040
add esp, 4
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40000000
call fcn.00440620
mov edx, 0x4e213a
mov ecx, str.Replay_Aim
call fcn.0043f9d0
test al, al
je 0x4072fd
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x4072fd
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x4072fd
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
mov ecx, 0x400
call fcn.00413e30
test al, al
je 0x407318
push str.Aim_According_to_Replay_Data
call fcn.00420040
add esp, 4
movss xmm1, dword [0x4da198]
movss xmm0, dword [0x4da130]
call fcn.0041f250
mov edx, 0x4e2138
mov ecx, str.Replay_Keys
call fcn.0043f9d0
test al, al
je 0x407391
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x407391
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x407391
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
mov ecx, 0x400
call fcn.00413e30
test al, al
je 0x4073ac
push str.Press_Keys_According_to_Replay_Data
call fcn.00420040
add esp, 4
cmp byte [0x4e59e7], 0
jne 0x4073e1
mov ecx, 1
call fcn.00410af0
mov edx, dword [0x4e5fbc]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x4e6b70], 5
jne 0x40774b
mov edx, 0x4e59e3
mov ecx, str.Unmod_Flashlight
call fcn.0043f9d0
test al, al
je 0x407467
cmp byte [0x4e59e3], 0
je 0x407411
call fcn.0040a170
jmp 0x407416
call fcn.0040a210
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x407467
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x407467
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
mov edx, 0x4e59e6
mov ecx, str.Unmod_Hidden
call fcn.0043f9d0
test al, al
je 0x407553
cmp byte [0x4e59e6], 0
je 0x4074fd
cmp byte [0x4e60dc], 0
jne 0x4074e7
mov eax, dword [0x4e60c8]
test eax, eax
je 0x4074e7
push eax
push dword [0x4e60bc]
push 0x4e60cc
call fcn.00468db0
mov edx, dword [0x4e60c0]
add esp, 0xc
mov ecx, dword [0x4e60bc]
push dword [0x4e60c8]
call fcn.00402190
add esp, 4
mov byte [0x4e60dc], 1
mov ecx, 0x4e60e0
call fcn.00403c90
mov ecx, 0x4e6248
call fcn.00403c90
jmp 0x407502
call fcn.00409da0
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x407553
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x407553
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
push str.Score_Multiplier
call fcn.0043d900
add esp, 4
mov dword [esp + 0x10], 0
lea ecx, [esp + 0x10]
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
mov ecx, 0x46
call fcn.0041ca50
mov edx, 0x4e59e2
mov ecx, str.Enable
call fcn.0043f9d0
test al, al
je 0x407615
cmp byte [0x4e59e2], 0
je 0x4075bf
call fcn.00409eb0
jmp 0x4075c4
call fcn.00409f00
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x40761a
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x407615
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
mov eax, dword [0x4e5fbc]
mov eax, dword [eax + 0x3e60]
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
dec dword [eax + 0xe4]
call fcn.00440620
cmp byte [0x4e59e2], 0
jne 0x407669
mov ecx, 4
call fcn.0041c4b0
movaps xmm0, xmmword [0x4da280]
lea edx, [esp + 0x28]
xor ecx, ecx
movups xmmword [esp + 0x28], xmm0
call fcn.00410aa0
push ecx
push str.Score_Multiplier:__.0f
lea eax, [esp + 0x14]
mov dword [esp + 0x28], 0
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x18], 0x42c80000
push eax
push 0x4e2134
mov edx, 8
mov ecx, str.score_multiplier
call fcn.00442c30
add esp, 0x14
mov ecx, 0x400
call fcn.00413e30
test al, al
je 0x4076bb
push str.Hold_Ctrl_To_Set_a_Custom_Value
call fcn.00420040
add esp, 4
call fcn.00416ec0
test al, al
je 0x407716
mov edx, dword [0x4e5fbc]
mov esi, dword [edx + 0x20]
mov dword [edx + 0x5a7c], 0
test esi, esi
je 0x407716
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x407716
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
cmp byte [0x4e59e2], 0
jne 0x40774b
mov ecx, 1
call fcn.00410af0
mov edx, dword [0x4e5fbc]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x4e6b70], 6
jne 0x407f77
push str.Discord_RPC_Settings
call fcn.0043d900
add esp, 4
mov dword [esp + 0x10], 0
lea ecx, [esp + 0x10]
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
mov edx, 0x4e59e5
mov ecx, str.Enable
call fcn.0043f9d0
test al, al
je 0x4077f7
cmp byte [0x4e59e5], 0
je 0x4077a1
call fcn.00409cc0
jmp 0x4077a6
call fcn.00409d10
mov eax, dword [0x4e5fbc]
mov esi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test esi, esi
je 0x4077f7
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov ecx, esi
mov edi, eax
call fcn.0040f6f0
mov esi, eax
test esi, esi
je 0x4077f7
push esi
push dword [esp + 0x10]
push 1
push edi
call fcn.00473b89
push esi
call fcn.00472f54
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x40a00000
call fcn.00440620
cmp byte [0x4e59e5], 0
jne 0x40783a
mov ecx, 4
call fcn.0041c4b0
movaps xmm0, xmmword [0x4da280]
lea edx, [esp + 0x28]
xor ecx, ecx
movups xmmword [esp + 0x28], xmm0
call fcn.00410aa0
push 0
push 0
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
push 0x200
push 0x4e6370
mov edx, str.State
mov dword [esp + 0x2c], 0
mov ecx, str.rpc_state
call fcn.00445860
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0x18
test al, al
je 0x4079ed
mov eax, dword [0x4e5fbc]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x4078d5
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov dword [esp + 0x20], eax
mov ecx, edi
call fcn.0040f6f0
mov edi, eax
test edi, edi
je 0x4078d5
push edi
push dword [esp + 0x10]
push 1
push dword [esp + 0x2c]
call fcn.00473b89
push edi
call fcn.00472f54
add esp, 0x14
push 0
push 0
push 0xffffffffffffffff
push 0x4e6370
push 0
push 0xfde9
call esi
push eax
push 0x4e6ba0
push 0xffffffffffffffff
push 0x4e6370
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x4088e8
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x4e6ba0], cx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x4079ed
push str.CLRCreateInstance
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4079ed
lea ecx, [esp + 0xc]
push ecx
push 0x4ad308
push 0x4ad318
call eax
test eax, eax
jne 0x4079ed
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x20]
push edx
push 0x4ad328
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x4079e3
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
push edx
push 0x4ad338
push 0x4ad2f8
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x4079d9
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [esp + 0x18]
push 0x4e5f48
push 0x4e6ba0
push str.GetCSharpStringPtr
push str.Freedom.SetPresence
call fcn.00402a10
mov eax, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0
push 0
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
push 0x200
push 0x4e6570
mov edx, str.Large_Text
mov dword [esp + 0x2c], 0
mov ecx, str.rpc_large_text
call fcn.00445860
add esp, 0x18
test al, al
je 0x407b9e
mov eax, dword [0x4e5fbc]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x407a82
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
call fcn.00425a70
mov edx, 0x4d7998
mov dword [esp + 0x20], eax
mov ecx, edi
call fcn.0040f6f0
mov edi, eax
test edi, edi
je 0x407a82
push edi
push dword [esp + 0x10]
push 1
push dword [esp + 0x2c]
call fcn.00473b89
push edi
call fcn.00472f54
add esp, 0x14
push 0
push 0
push 0xffffffffffffffff
push 0x4e6570
push 0
push 0xfde9
call esi
push eax
push 0x4e6fa0
push 0xffffffffffffffff
push 0x4e6570
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x4088e8
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x4e6fa0], cx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x407ba4
push str.CLRCreateInstance
push eax
call edi
test eax, eax
je 0x407ba4
lea ecx, [esp + 0x20]
push ecx
push 0x4ad308
push 0x4ad318
call eax
test eax, eax
jne 0x407ba4
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0xc]
push edx
push 0x4ad328
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x407b92
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x18]
push edx
push 0x4ad338
push 0x4ad2f8
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x407b88
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [esp + 0x18]
push 0x4e5f50
push 0x4e6fa0
push str.GetCSharpStringPtr
push str.Freedom.SetPresence
call fcn.00402a10
mov eax, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x407ba4
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
push 0x200
push 0x4e73a0
mov edx, str.Small_Text
mov dword [esp + 0x2c], 0
mov ecx, str.rpc_small_text
call fcn.00445860
add esp, 0x18
test al, al
je 0x407d05
mov ecx, dword [0x4e5fbc]
mov ecx, dword [ecx + 0x20]
call fcn.00425a10
push 0
push 0
push 0xffffffffffffffff
push 0x4e73a0
push 0
push 0xfde9
call esi
push eax
push 0x4e6770
push 0xffffffffffffffff
push 0x4e73a0
push 0
push 0xfde9
call esi
add eax, eax
cmp eax, 0x400
jae 0x4088e8
xor ecx, ecx
push str.mscoree.dll
mov word [eax + 0x4e6770], cx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x407d05
push str.CLRCreateInstance
push eax
call edi
test eax, eax
je 0x407d05
lea ecx, [esp + 0x20]
push ecx
push 0x4ad308
push 0x4ad318
call eax
test eax, eax
jne 0x407d05
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0xc]
push edx
push 0x4ad328
push str.v4.0.30319
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
test eax, eax
jne 0x407cfb
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x18]
push edx
push 0x4ad338
push 0x4ad2f8
mov eax, dword [ecx]
push ecx
call dword [eax + 0x24]
test eax, eax
jne 0x407cf1
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov ecx, dword [esp + 0x18]
push 0x4e5f4c
push 0x4e6770
push str.GetCSharpStringPtr
push str.Freedom.SetPresence
call fcn.00402a10
mov eax, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp byte [0x4e59e5], 0
jne 0x407d1d
mov ecx, 1
call fcn.00410af0
call fcn.0041c510
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x41200000
call fcn.00440620
mov eax, dword [0x4e5ed8]
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push str.Font_Size:__dpx
push 0x10
push 0x4e75a0
call fcn.0040eab0
push 0x10
mov edx, 0x4e75a0
mov ecx, str.font_size
call fcn.00440fc0
add esp, 0x14
test al, al
je 0x407e77
mov eax, dword [0x4e5fbc]
mov eax, dword [eax + 0x2c]
mov esi, dword [eax + 0x44]
mov eax, dword [eax + 0x3c]
lea edi, [esi + eax*4]
mov dword [esp + 0xc], edi
cmp esi, edi
je 0x407e72
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
nop
mov eax, dword [esi]
xorps xmm0, xmm0
movlpd qword [esp + 0x28], xmm0
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
push eax
push 0x4d5f94
lea eax, [esp + 0x30]
push 4
push eax
call fcn.0040eab0
mov eax, dword [esi]
lea ecx, [esp + 0x20]
cmp eax, dword [0x4e5ed8]
push ecx
sete al
lea ecx, [esp + 0x3c]
push 0
mov dl, al
mov byte [esp + 0x37], al
call fcn.0044e290
add esp, 0x18
test al, al
je 0x407e5b
mov eax, dword [esi]
mov dword [0x4e5ed8], eax
mov eax, dword [eax + 0x34]
cvttss2si eax, dword [eax + 0x10]
mov dword [0x4e213c], eax
mov eax, dword [0x4e5fbc]
mov edi, dword [eax + 0x20]
mov dword [eax + 0x5a7c], 0
test edi, edi
je 0x407e57
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], 0
call fcn.00425a70
mov edx, 0x4d7998
mov dword [esp + 0x18], eax
mov ecx, edi
call fcn.0040f6f0
mov edi, eax
test edi, edi
je 0x407e57
push edi
push dword [esp + 0x24]
push 1
push dword [esp + 0x24]
call fcn.00473b89
push edi
call fcn.00472f54
add esp, 0x14
mov edi, dword [esp + 0xc]
cmp byte [esp + 0x1f], 0
je 0x407e67
call fcn.0041c900
add esi, 4
cmp esi, edi
jne 0x407da0
call fcn.00420720
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0x40a00000
call fcn.00440620
mov edx, 0x4e25f0
mov ecx, str.Disable_NtUserSendInput_Check
call fcn.0043f9d0
test al, al
je 0x407eb8
cmp byte [0x4e25f0], 0
je 0x407eb3
call fcn.00405ab0
jmp 0x407eb8
call fcn.00405b00
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0x40a00000
call fcn.00440620
push 0
lea edx, [esp + 0x2c]
mov dword [esp + 0x2c], 0
mov ecx, str.Unload_DLL
mov dword [esp + 0x30], 0
call fcn.0043e4e0
add esp, 4
call fcn.00403d90
mov byte [esp + 0x1f], al
test al, al
je 0x407f0b
mov ecx, 4
call fcn.0041c4b0
push 0
lea edx, [esp + 0x2c]
mov dword [esp + 0x2c], 0
mov ecx, str.Rescan_Memory
mov dword [esp + 0x30], 0
call fcn.0043e4e0
add esp, 4
test al, al
je 0x407f4e
push 0
push 0
push 0
push 0x405210
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [esp + 0x1f], 0
je 0x407f77
mov edx, dword [0x4e5fbc]
dec dword [edx + 0x47a4]
mov eax, dword [edx + 0x47ac]
mov ecx, dword [edx + 0x47a4]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x46b8], eax
cmp dword [0x4e6b70], 7
jne 0x408188
push str.Ciremuns_Freedom_v0.93.3
call fcn.0043d900
add esp, 4
mov dword [esp + 0x28], 0
lea ecx, [esp + 0x28]
mov dword [esp + 0x2c], 0x40a00000
call fcn.00440620
push str.Special_Thanks_to_Maple_Syrup
call fcn.0043d900
add esp, 4
push str._mrflashstudio
call fcn.0043d900
add esp, 4
mov dword [esp + 0x28], 0
lea ecx, [esp + 0x28]
mov dword [esp + 0x2c], 0x40a00000
call fcn.00440620
mov ecx, dword [0x4e5fbc]
lea eax, [esp + 0x28]
movss xmm3, dword [0x4da174]
push 0
push 0
movss xmm2, dword [ecx + 0x3bcc]
push str.Ciremun
push ecx
mov ecx, dword [ecx + 0x3bc8]
mov dword [esp], 0xbf800000
push eax
call fcn.0043a410
movss xmm0, dword [esp + 0x28]
addss xmm0, dword [0x4da038]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x4da0f4]
call fcn.0041f300
push 0
push 0
push 0x4000
lea eax, [esp + 0x34]
mov dword [esp + 0x34], 0
push eax
push 8
push str.Ciremun
xor edx, edx
mov dword [esp + 0x44], 0
mov ecx, str.___Discord
call fcn.00445860
mov ecx, dword [0x4e5fbc]
add esp, 0x18
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0x40200000
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
lea ecx, [esp + 0x28]
mov dword [edx + 0x1a8], eax
call fcn.00440620
mov ecx, dword [0x4e5fbc]
lea eax, [esp + 0x28]
movss xmm3, dword [0x4da174]
push 0
push 0
movss xmm2, dword [ecx + 0x3bcc]
push str.https:__discord.gg_FyCrwed6jv
push ecx
mov ecx, dword [ecx + 0x3bc8]
mov dword [esp], 0xbf800000
push eax
call fcn.0043a410
movss xmm0, dword [esp + 0x28]
addss xmm0, dword [0x4da038]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x4da0f4]
call fcn.0041f300
push 0
push 0
push 0x4000
lea eax, [esp + 0x34]
mov dword [esp + 0x34], 0
push eax
push 0x1d
push str.https:__discord.gg_FyCrwed6jv
xor edx, edx
mov dword [esp + 0x44], 0
mov ecx, str.___Discord_Server
call fcn.00445860
mov ecx, dword [0x4e5fbc]
add esp, 0x18
mov eax, dword [ecx + 0x3e60]
mov byte [eax + 0xac], 1
mov edx, dword [ecx + 0x3e60]
mov ecx, dword [edx + 0x1a8]
mov eax, dword [edx + 0x1b0]
mov eax, dword [eax + ecx*4 - 4]
mov dword [edx + 0x1a0], eax
lea eax, [ecx - 1]
mov dword [edx + 0x1a8], eax
cmp dword [0x4e6b70], 8
jne 0x40887f
mov edx, dword [0x4e5fbc]
mov ecx, str.Debug_Log
push 0
mov eax, dword [edx + 0x3e60]
movss xmm1, dword [eax + 0x14]
addss xmm1, dword [eax + 0x1c]
movss xmm0, dword [eax + 0x18]
or dword [edx + 0x4714], 3
movss dword [edx + 0x4728], xmm0
mov dword [edx + 0x472c], 0
movss dword [edx + 0x4724], xmm1
mov dword [edx + 0x4730], 0
mov dword [edx + 0x4718], 1
mov dword [edx + 0x4734], 0x44200000
mov dword [edx + 0x4738], 0x43f00000
mov dword [edx + 0x471c], 2
xor edx, edx
call fcn.004197a0
mov eax, dword [0x4e2458]
add esp, 4
test eax, eax
mov ecx, 0x4e59f5
cmovne ecx, eax
push ecx
push 0x4ad374
call fcn.0043da80
add esp, 8
cmp byte [0x4e245c], 0
je 0x4082c7
mov eax, dword [0x4e5fbc]
mov ecx, dword [eax + 0x3e60]
movss xmm3, dword [ecx + 0x48]
movss xmm1, dword [ecx + 0xfc]
movaps xmm2, xmm3
maxss xmm2, dword [eax + 0x37d8]
movaps xmm0, xmm1
mov dword [ecx + 0x94], 0x3f800000
addss xmm1, dword [ecx + 0x124]
subss xmm0, xmm2
subss xmm3, xmm2
addss xmm1, xmm2
subss xmm1, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
subss xmm1, dword [ecx + 0x18]
subss xmm1, dword [ecx + 0x58]
subss xmm1, dword [ecx + 0x68]
addss xmm1, dword [ecx + 0x7c]
cvttss2si eax, xmm1
cvtsi2ss xmm0, eax
movss dword [ecx + 0x8c], xmm0
xorps xmm0, xmm0
maxss xmm0, xmm3
movss dword [ecx + 0x9c], xmm0
mov byte [0x4e245c], 0
call fcn.0041bce0
mov ecx, str.Game
call fcn.0044e210
mov esi, 0x4d6098
mov edi, 0x4d609c
test al, al
je 0x4083b8
mov eax, dword [0x4e5e1c]
test eax, eax
je 0x4082f5
mov eax, dword [eax]
jmp 0x4082f7
xor eax, eax
push eax
push str.Audio_Time:__d
call fcn.0043d900
mov eax, dword [0x4e5e14]
add esp, 8
test eax, eax
je case.default.0x408315
mov eax, dword [eax]
cmp eax, 7
ja case.default.0x408315
jmp dword [eax*4 + 0x4088f0]
mov eax, str.Main_Menu
jmp 0x408359
mov eax, str.Editor
jmp 0x408359
mov eax, str.Game
jmp 0x408359
mov eax, str.Exit
jmp 0x408359
mov eax, str.Editor_Beatmap_Select
jmp 0x408359
mov eax, str.Beatmap_Select
jmp 0x408359
mov eax, str.Beatmap_Select_Drawings
jmp 0x408359
mov eax, str.Replay_Preview
jmp 0x408359
mov eax, str.Unknown
push eax
push str.Current_Scene:__s
call fcn.0043d900
mov eax, dword [0x4e5e18]
add esp, 8
test eax, eax
jne 0x408374
xor cl, cl
jmp 0x408384
mov ecx, dword [eax]
test ecx, ecx
jne 0x40837e
xor cl, cl
jmp 0x408384
mov cl, byte [ecx + 0x17b]
test cl, cl
mov eax, esi
cmove eax, edi
push eax
push str.Replay_Mode:__s
call fcn.0043d900
cmp byte [0x4e59eb], 0
mov ecx, str.Fast
mov eax, str.All_Methods
cmove eax, ecx
push eax
push str.Pre_Jitting_Mode:__s
call fcn.0043d900
add esp, 0x10
mov ecx, str.Account_Info
call fcn.0044e210
test al, al
je 0x4083e7
push 0x4e5e40
push str.Client_ID:__n_s
call fcn.0043d900
push 0x4e5e20
push str.Username:__s
call fcn.0043d900
add esp, 0x10
mov ecx, str.Playfield
call fcn.0044e210
test al, al
je 0x408486
movss xmm0, dword [0x4e5ee0]
sub esp, 0x10
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x4e5edc]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.window_size:__f__f
call fcn.0043d900
movss xmm0, dword [0x4e5f00]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x4e5efc]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.playfield_size:__f__f
call fcn.0043d900
movss xmm0, dword [0x4e5ee8]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x4e5ee4]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.playfield_position:__f__f
call fcn.0043d900
add esp, 0x14
mov ecx, str.Pointers
call fcn.0044e210
test al, al
je 0x408553
push dword [0x4e59f0]
push str.binding_manager_ptr:__08X
call fcn.0043d900
push dword [0x4e5e18]
push str.osu_manager_ptr:__08X
call fcn.0043d900
push dword [0x4e5f64]
push str.selected_replay_ptr:__08X
call fcn.0043d900
push dword [0x4e5e10]
push str.selected_song_ptr:__08X
call fcn.0043d900
push dword [0x4e5fa4]
push str.update_timing_ptr_1:__08X
call fcn.0043d900
push dword [0x4e5fac]
push str.update_timing_ptr_2:__08X
call fcn.0043d900
push dword [0x4e5fa0]
push str.update_timing_ptr_3:__08X
call fcn.0043d900
push dword [0x4e5fa8]
push str.update_timing_ptr_4:__08X
call fcn.0043d900
add esp, 0x40
push dword [0x4e5ef8]
push str.window_manager_ptr:__08X
call fcn.0043d900
push dword [0x4e215c]
push str.dispatch_table_id:__08X
call fcn.0043d900
cmp dword [0x4e5ea4], 0
cmove esi, edi
push esi
push str.dispatch_table_id_found:__s
call fcn.0043d900
add esp, 0x18
mov ecx, str.Methods
call fcn.0044e210
test al, al
je 0x40869e
push dword [0x4e5f54]
push str.hom_update_vars_code_start:__08X
call fcn.0043d900
push dword [0x4e5f14]
push str.parse_beatmap_code_start:__08X
call fcn.0043d900
push dword [0x4e5e80]
push str.beatmap_onload_code_start:__08X
call fcn.0043d900
push dword [0x4e5ed0]
push str.current_scene_code_start:__08X
call fcn.0043d900
push dword [0x4e5ecc]
push str.selected_song_code_start:__08X
call fcn.0043d900
push dword [0x4e5eb0]
push str.audio_time_code_start:__08X
call fcn.0043d900
push dword [0x4e5e98]
push str.osu_manager_code_start:__08X
call fcn.0043d900
push dword [0x4e59ec]
push str.binding_manager_code_start:__08X
call fcn.0043d900
add esp, 0x40
push dword [0x4e5f68]
push str.selected_replay_code_start:__08X
call fcn.0043d900
push dword [0x4e5e9c]
push str.osu_client_id_code_start:__08X
call fcn.0043d900
push dword [0x4e5e8c]
push str.osu_username_code_start:__08X
call fcn.0043d900
push dword [0x4e5ef0]
push str.window_manager_code_start:__08X
call fcn.0043d900
push dword [0x4e5f74]
push str.score_multiplier_code_start:__08X
call fcn.0043d900
push dword [0x4e5f44]
push str.discord_rich_presence_code_start:__08X
call fcn.0043d900
push dword [0x4e5fb0]
push str.check_flashlight_code_start:__08X
call fcn.0043d900
push dword [0x4e5fb4]
push str.update_flashlight_code_start:__08X
call fcn.0043d900
add esp, 0x40
push dword [0x4e5f90]
push str.update_timing_code_start:__08X
call fcn.0043d900
push dword [0x4e5f84]
push str.set_playback_rate_code_start:__08X
call fcn.0043d900
push dword [0x4e5f7c]
push str.check_timewarp_code_start:__08X
call fcn.0043d900
add esp, 0x18
mov ecx, str.Offsets
call fcn.0044e210
test al, al
je 0x4087c7
push dword [0x4e5f58]
push str.hom_update_vars_hidden_loc:_0x_X
call fcn.0043d900
push dword [0x4e5f3c]
push dword [0x4e5f38]
push dword [0x4e5f34]
push str.approach_rate_offsets:_0x_X_0x_X_0x_X
call fcn.0043d900
push dword [0x4e5f2c]
push dword [0x4e5f28]
push dword [0x4e5f24]
push str.circle_size_offsets:_0x_X_0x_X_0x_X
call fcn.0043d900
push dword [0x4e5f20]
push dword [0x4e5f1c]
push str.overall_difficulty_offsets:_0x_X_0x_X
call fcn.0043d900
add esp, 0x34
push dword [0x4e5ea8]
push str.beatmap_onload_offset:_0x_X
call fcn.0043d900
push dword [0x4e5ec4]
push str.current_scene_offset:_0x_X
call fcn.0043d900
push dword [0x4e5f70]
push str.selected_replay_offset:_0x_X
call fcn.0043d900
push dword [0x4e5ef4]
push str.window_manager_offset:_0x_X
call fcn.0043d900
push dword [0x4e5ea0]
push str.selected_song_offset:_0x_X
call fcn.0043d900
push dword [0x4e5eb4]
push str.audio_time_offset:_0x_X
call fcn.0043d900
push dword [0x4e5e84]
push str.osu_manager_offset:_0x_X
call fcn.0043d900
push dword [0x4e5e94]
push str.binding_manager_offset:_0x_X
call fcn.0043d900
add esp, 0x40
push dword [0x4e5ed4]
push str.client_id_offset:_0x_X
call fcn.0043d900
push dword [0x4e5eac]
push str.username_offset:_0x_X
call fcn.0043d900
push dword [0x4e5eb8]
push str.check_timewarp_offset:_0x_X
call fcn.0043d900
add esp, 0x18
mov ecx, str.Hook_Jumps
call fcn.0044e210
test al, al
je 0x40887f
push dword [0x4e5f40]
push str.discord_rich_presence_jump_back:__08X
call fcn.0043d900
push dword [0x4e5f30]
push str.ar_hook_jump_back:__08X
call fcn.0043d900
push dword [0x4e5ec0]
push str.beatmap_onload_hook_jump_back:__08X
call fcn.0043d900
push dword [0x4e5f9c]
push str.check_timewarp_hook_1_jump_back:__08X
call fcn.0043d900
push dword [0x4e5f80]
push str.check_timewarp_hook_2_jump_back:__08X
call fcn.0043d900
push dword [0x4e5f10]
push str.cs_hook_jump_back:__08X
call fcn.0043d900
push dword [0x4e5f18]
push str.od_hook_jump_back:__08X
call fcn.0043d900
push dword [0x4e5f78]
push str.score_multiplier_hook_jump_back:__08X
call fcn.0043d900
add esp, 0x40
push dword [0x4e5f6c]
push str.selected_replay_hook_jump_back:__08X
call fcn.0043d900
push dword [0x4e5f98]
push str.set_playback_rate_jump_back:__08X
call fcn.0043d900
add esp, 0x10
call fcn.0041bce0
call fcn.00420720
call fcn.0041bce0
call fcn.0041c440
mov ecx, dword [esp + 0x3c]
pop edi
pop esi
xor ecx, esp
call fcn.004672b4
mov esp, ebp
pop ebp
ret
push 0x4e75c4
call fcn.004677f2
add esp, 4
cmp dword [0x4e75c4], 0xffffffff
jne 0x406f1a
movsd xmm0, qword [0x4e2148]
divsd xmm0, qword [0x4da0b8]
push 0x4e75c4
movsd qword [0x4e75c8], xmm0
call fcn.004677a1
add esp, 4
jmp 0x406f1a
call fcn.004673e4
nop dword [eax]
sbb al, 0x83
inc eax
add byte [ebx], ah
add dword [eax], 0x2a
add dword [eax], 0x31
add dword [eax], 0x38
add dword [eax], 0x3f
add dword [eax], 0x46
add dword [eax], 0x4d
add dword [eax], 0xffffff83
sub esp, 0x1c
push esi