Function at 0x40f0b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x304
push ebx
push esi
push edi
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0xb15720]
mov ecx, 0xb157ac
push 0x80e2
mov dword [eax + 0x20], 0
cmp dword [0xb157c0], 0xf
cmova ecx, dword [0xb157ac]
xor edx, edx
call fcn.004305f0
add esp, 4
mov ecx, str.Nickelodeon_All_Star_Brawl_2.exe
call fcn.0041a4a0
test al, al
je 0x40ffeb
mov ecx, dword [0xb15720]
xor edx, edx
push str.Background
mov eax, dword [ecx + 0x3e48]
movss xmm0, dword [eax + 0x14]
movss dword [esp + 0x30], xmm0
movss xmm0, dword [eax + 0x18]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
mov ecx, dword [ecx + 0x47c4]
movss dword [esp + 0x34], xmm0
mov esi, dword [eax + 0x264]
mov ecx, dword [ecx]
call fcn.0042ac30
mov eax, dword [0xb15720]
add esp, 4
mov edx, 1
mov ecx, dword [eax + 0x47c4]
push str.Foreground
mov ecx, dword [ecx]
call fcn.0042ac30
movss xmm2, dword [esp + 0x30]
lea eax, [esp + 0x34]
movss xmm1, dword [esp + 0x34]
movaps xmm0, xmm2
xorps xmm3, xmm3
add esp, 4
addss xmm0, xmm3
mov ecx, esi
push 0xff000000
push 0xff190037
movss dword [esp + 0x18], xmm0
movaps xmm0, xmm1
addss xmm0, xmm3
push 0xff1a1888
push 0xff000000
push eax
lea eax, [esp + 0x24]
movss dword [esp + 0x28], xmm0
movss xmm0, dword [0xa8c5a4]
addss xmm2, xmm0
addss xmm1, xmm0
push eax
movss dword [esp + 0x48], xmm2
movss dword [esp + 0x4c], xmm1
call fcn.00449820
call fcn.00402710
mov esi, dword [0xb15720]
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x14], 0
movss xmm0, dword [esi + 0x3788]
lea ecx, [esi + 0x4764]
movss dword [esp + 0x18], xmm0
call fcn.0043da60
push 0
push ecx
lea eax, [esp + 0x18]
mov dword [esi + 0x3788], 0x3f4ccccd
push eax
mov edx, 1
mov dword [esp + 0x1c], 0x43eb0000
xor ecx, ecx
mov dword [esp + 0x20], 0x43c80000
call fcn.0042d9d0
add esp, 0xc
test al, al
je 0x40f3b0
mov ecx, dword [0xb15720]
lea edx, [esp + 0x10]
push ecx
mov dword [esp + 0x14], 0x428c0000
mov dword [esp + 0x18], 0x420c0000
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
mov ecx, 0x470a4c
movss xmm0, dword [eax + 0x14]
subss xmm0, dword [eax + 0x78]
mov byte [eax + 0x131], 1
addss xmm0, dword [0xa8c548]
movss dword [eax + 0xf0], xmm0
call fcn.00454240
add esp, 4
test al, al
je 0x40f2b0
mov dword [0xa936d0], 1
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x428c0000
mov ecx, 0x470a50
mov dword [esp + 0x18], 0x420c0000
call fcn.00454240
add esp, 4
test al, al
je 0x40f2f0
mov dword [0xa936d0], 2
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x428c0000
mov ecx, 0x471574
mov dword [esp + 0x18], 0x420c0000
call fcn.00454240
add esp, 4
test al, al
je 0x40f330
mov dword [0xa936d0], 3
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x428c0000
mov ecx, 0x470a5c
mov dword [esp + 0x18], 0x420c0000
call fcn.00454240
add esp, 4
test al, al
je 0x40f370
mov dword [0xa936d0], 4
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x428c0000
mov ecx, 0x470a60
mov dword [esp + 0x18], 0x420c0000
call fcn.00454240
add esp, 4
test al, al
je 0x40f3b0
mov dword [0xa936d0], 5
call fcn.0042dc60
push 0
push ecx
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x43eb0000
push eax
mov edx, 1
mov dword [esp + 0x20], 0x43c80000
xor ecx, ecx
call fcn.0042d9d0
add esp, 0xc
test al, al
je 0x40fc75
mov ecx, dword [0xb15720]
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
movss xmm0, dword [ecx + 0x37f4]
addss xmm0, dword [eax + 0x134]
movss dword [eax + 0x134], xmm0
addss xmm0, dword [eax + 0x14]
addss xmm0, dword [eax + 0x138]
movss dword [eax + 0xf0], xmm0
mov eax, dword [0xa936d0]
cmp eax, 1
jne 0x40f43e
call fcn.00418130
jmp 0x40fc75
cmp eax, 2
jne 0x40f8bc
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40f494
mov ecx, 0x470e40
mov esi, ecx
cmp esi, 0xffffffff
jae 0x40f486
nop
mov dl, byte [ecx]
test dl, dl
je 0x40f486
cmp dl, 0x23
jne 0x40f480
cmp byte [ecx + 1], dl
je 0x40f486
inc ecx
cmp ecx, 0xffffffff
jb 0x40f470
push ecx
xorps xmm3, xmm3
mov edx, esi
call fcn.00456050
add esp, 4
push 0xa932f8
push str.Bot_Script
call fcn.00468030
cmp byte [0xa932f8], 0
je 0x40f4cb
push ecx
push 0x19
push 0xa93588
push 0x456e10
mov edx, 0xb15888
mov ecx, 0x470a70
call fcn.00456e90
add esp, 0x10
sub esp, 8
mov dword [esp + 0x38], 0x50
lea eax, [esp + 0x38]
mov dword [esp + 0x34], 0xa
mov ecx, str.Delay
push eax
lea eax, [esp + 0x38]
push eax
push 0xa930a0
call fcn.004580b0
mov ecx, dword [0xb15720]
add esp, 0x14
mov edi, 0x46f77a
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40f54c
mov ecx, edi
cmp edi, 0xffffffff
jae 0x40f53e
mov dl, byte [ecx]
test dl, dl
je 0x40f53e
cmp dl, 0x23
jne 0x40f538
cmp byte [ecx + 1], dl
je 0x40f53e
inc ecx
cmp ecx, 0xffffffff
jb 0x40f528
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456050
add esp, 4
movss xmm3, dword [0xa8c478]
lea eax, [esp + 0x30]
push ecx
push 0x470a74
push eax
lea eax, [esp + 0x38]
mov dword [esp + 0x3c], 0xc
push eax
push 0xb156ac
mov edx, 4
mov dword [esp + 0x40], 0
mov ecx, str.Hours
call fcn.00457430
movss xmm3, dword [0xa8c478]
lea eax, [esp + 0x44]
add esp, 0x10
mov dword [esp + 0x34], 0x37
mov edx, 4
mov dword [esp + 0x30], 0
mov ecx, str.Minutes
push 0x470a74
push eax
lea eax, [esp + 0x38]
push eax
push 0xb15658
call fcn.00457430
mov eax, dword [0xb156ac]
add esp, 0x14
test eax, eax
jns 0x40f5d6
xor eax, eax
jmp 0x40f5e0
mov ecx, 0xc
cmp eax, ecx
cmovg eax, ecx
mov dword [0xb156ac], eax
mov eax, dword [0xb15658]
test eax, eax
jns 0x40f5f2
xor eax, eax
jmp 0x40f5fc
mov ecx, 0x37
cmp eax, ecx
cmovg eax, ecx
push ecx
lea edx, [esp + 0x14]
mov dword [0xb15658], eax
mov ecx, str.Run_Time
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00454240
add esp, 4
test al, al
je 0x40f66c
mov ecx, dword [0xb156ac]
mov eax, dword [0xb15658]
shl ecx, 4
sub ecx, dword [0xb156ac]
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
shl ecx, 2
test ecx, ecx
jle 0x40f66c
lea ecx, [esp + 0x10]
mov byte [0xb1565c], 1
call fcn.00402540
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0xb156b0], ecx
mov dword [0xb156b4], eax
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
cmp byte [0xb1565c], 0
je 0x40f78c
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0
mov ecx, str.Cancel_Time
mov dword [esp + 0x18], 0
call fcn.00454240
add esp, 4
test al, al
je 0x40f6bb
mov byte [0xb1565c], 0
jmp 0x40f78c
cmp byte [0xb1565c], 0
je 0x40f78c
lea ecx, [esp + 0x10]
call fcn.00402540
mov ecx, dword [0xb156ac]
mov eax, dword [0xb15658]
mov edx, dword [esp + 0x10]
shl ecx, 4
sub ecx, dword [0xb156ac]
push 0
push 0x3b9aca00
lea eax, [eax + ecx*4]
mov ebx, eax
shl ebx, 4
sub ebx, eax
mov eax, dword [esp + 0x1c]
shl ebx, 2
sub edx, dword [0xb156b0]
sbb eax, dword [0xb156b4]
push eax
push edx
call fcn.0046c350
sub ebx, eax
test ebx, ebx
jg 0x40f72d
mov ecx, str.Nickelodeon_All_Star_Brawl_2.exe
mov byte [0xb1565c], 0
call fcn.00408580
jmp 0x40f78c
mov eax, 0x91a2b3c5
imul ebx
mov eax, 0x88888889
add edx, ebx
sar edx, 0xb
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ebx
mov eax, 0x88888889
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, ecx
shl edx, 4
sub edx, ecx
mov ecx, ebx
shl edx, 2
sub ecx, edx
push ecx
imul ecx, esi, 0xe10
sub ebx, ecx
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
push str.Remaining_Time_To_Close:__02d:_02d:_02d
call fcn.004537f0
add esp, 0x10
call fcn.004332f0
mov ecx, dword [0xb15720]
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40f7e4
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x40f7d6
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x40f7d6
cmp dl, 0x23
jne 0x40f7d0
cmp byte [ecx + 1], dl
je 0x40f7d6
inc ecx
cmp ecx, 0xffffffff
jb 0x40f7c0
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456050
add esp, 4
push 0xb15865
push str.Run_Script
call fcn.00468030
cmp byte [0xb15865], 0
je 0x40f803
mov byte [0xb15866], 0
push 0xb15866
push str.Run_Bot
call fcn.00468030
cmp byte [0xb15866], 0
je 0x40f822
mov byte [0xb15865], 0
mov esi, dword [0xb15720]
mov edx, dword [esi + 0x46a0]
dec dword [esi + 0x4788]
dec word [esi + 0x5a04]
mov ecx, dword [esi + 0x4788]
mov eax, dword [esi + 0x4790]
shr edx, 2
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46a0], eax
test dl, 1
je 0x40f869
test al, 4
jne 0x40f869
mov eax, dword [esi + 0x5a00]
mov dword [esi + 0x3788], eax
mov eax, dword [esi + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40fc75
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x40f8a9
mov dl, byte [ecx]
test dl, dl
je 0x40f8a9
cmp dl, 0x23
jne 0x40f8a3
cmp byte [ecx + 1], dl
je 0x40f8a9
inc ecx
cmp ecx, 0xffffffff
jb 0x40f893
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456050
add esp, 4
jmp 0x40fc75
cmp eax, 3
jne 0x40f9d9
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40f914
mov ecx, str.CAMPAING
mov esi, ecx
cmp esi, 0xffffffff
jae 0x40f906
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x40f906
cmp dl, 0x23
jne 0x40f900
cmp byte [ecx + 1], dl
je 0x40f906
inc ecx
cmp ecx, 0xffffffff
jb 0x40f8f0
push ecx
xorps xmm3, xmm3
mov edx, esi
call fcn.00456050
add esp, 4
call fcn.004332f0
push 0xb15890
push str.Godmode
call fcn.00468030
push 0xb15890
push str.Super_Damage
call fcn.00468030
mov esi, dword [0xb15720]
mov edx, dword [esi + 0x46a0]
dec dword [esi + 0x4788]
dec word [esi + 0x5a04]
mov ecx, dword [esi + 0x4788]
mov eax, dword [esi + 0x4790]
shr edx, 2
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46a0], eax
test dl, 1
je 0x40f97e
test al, 4
jne 0x40f97e
mov eax, dword [esi + 0x5a00]
mov dword [esi + 0x3788], eax
mov eax, dword [esi + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40fc75
mov ecx, 0x46f77a
mov edi, ecx
cmp edi, 0xffffffff
jae 0x40f9c6
nop word [eax + eax]
mov dl, byte [ecx]
test dl, dl
je 0x40f9c6
cmp dl, 0x23
jne 0x40f9c0
cmp byte [ecx + 1], dl
je 0x40f9c6
inc ecx
cmp ecx, 0xffffffff
jb 0x40f9b0
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456050
add esp, 4
jmp 0x40fc75
cmp eax, 4
jne 0x40fc6b
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40fa34
mov ecx, str.Controls
mov esi, ecx
cmp esi, 0xffffffff
jae 0x40fa26
nop word [eax + eax]
mov dl, byte [ecx]
test dl, dl
je 0x40fa26
cmp dl, 0x23
jne 0x40fa20
cmp byte [ecx + 1], dl
je 0x40fa26
inc ecx
cmp ecx, 0xffffffff
jb 0x40fa10
push ecx
xorps xmm3, xmm3
mov edx, esi
call fcn.00456050
add esp, 4
call dword [sym.imp.WINMM.dll_joyGetNumDevs]
mov ebx, eax
xor esi, esi
mov edi, 0x46f77a
test ebx, ebx
je 0x40fb13
nop dword [eax + eax]
push 0x2d8
lea eax, [esp + 0x3c]
push eax
push esi
call dword [sym.imp.WINMM.dll_joyGetDevCapsW]
test eax, eax
jne 0x40fb0a
push esi
push str.Game_Device__d:
call fcn.004537f0
lea eax, [esp + 0x44]
push eax
push str.Name:__s
call fcn.004537f0
lea eax, [esp + 0x118]
push eax
push str.Manufacturer:__s
call fcn.004537f0
push dword [esp + 0xac]
push str.Number_of_Buttons:__d
call fcn.004537f0
push dword [esp + 0xe0]
push str.Number_of_Axes:__d
call fcn.004537f0
mov ecx, dword [0xb15720]
add esp, 0x28
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40fb0a
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x40fafc
mov dl, byte [ecx]
test dl, dl
je 0x40fafc
cmp dl, 0x23
jne 0x40faf6
cmp byte [ecx + 1], dl
je 0x40fafc
inc ecx
cmp ecx, 0xffffffff
jb 0x40fae6
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456050
add esp, 4
inc esi
cmp esi, ebx
jb 0x40fa50
mov ebx, dword [sym.imp.XINPUT1_3.dll_Ordinal_2]
xor esi, esi
nop dword [eax + eax]
lea eax, [esp + 0x10]
xorps xmm0, xmm0
push eax
push esi
movaps xmmword [esp + 0x18], xmm0
call ebx
test eax, eax
jne 0x40fb9c
push esi
push str.Device__d:
call fcn.004537f0
push str.Is_Connected:_Yes
call fcn.004537f0
mov ecx, dword [0xb15720]
add esp, 0xc
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40fb9c
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x40fb8e
mov dl, byte [ecx]
test dl, dl
je 0x40fb8e
cmp dl, 0x23
jne 0x40fb88
cmp byte [ecx + 1], dl
je 0x40fb8e
inc ecx
cmp ecx, 0xffffffff
jb 0x40fb78
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456050
add esp, 4
inc esi
cmp esi, 4
jb 0x40fb20
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x42be0000
mov ecx, 0xb148a8
mov dword [esp + 0x14], 0x41e00000
call fcn.00406b50
call fcn.004332f0
push 0xb15890
push str.Record_keys
call fcn.00468030
mov esi, dword [0xb15720]
mov edx, dword [esi + 0x46a0]
dec dword [esi + 0x4788]
dec word [esi + 0x5a04]
mov ecx, dword [esi + 0x4788]
mov eax, dword [esi + 0x4790]
shr edx, 2
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46a0], eax
test dl, 1
je 0x40fc1f
test al, 4
jne 0x40fc1f
mov eax, dword [esi + 0x5a00]
mov dword [esi + 0x3788], eax
mov eax, dword [esi + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40fc75
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x40fc5b
mov dl, byte [ecx]
test dl, dl
je 0x40fc5b
cmp dl, 0x23
jne 0x40fc55
cmp byte [ecx + 1], dl
je 0x40fc5b
inc ecx
cmp ecx, 0xffffffff
jb 0x40fc45
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456050
add esp, 4
jmp 0x40fc75
cmp eax, 5
jne 0x40fc75
call fcn.00416cd0
call fcn.0042dc60
push 0
push ecx
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x43eb0000
push eax
mov edx, 3
mov dword [esp + 0x20], 0x42a00000
xor ecx, ecx
call fcn.0042d9d0
add esp, 0xc
test al, al
je 0x40ffda
mov esi, dword [0xb15720]
movss xmm3, dword [0xa8c5c8]
push 0
push 0
mov eax, dword [esi + 0x3e48]
push str.License:N_A_____.f_MS_____.f_FPS_____HideMenu______PGDN___
push ecx
mov dword [esp], 0xbf800000
movss xmm0, dword [eax + 0xf4]
movss xmm1, dword [eax + 0x22c]
movaps xmm2, xmm0
subss xmm2, dword [eax + 0x18]
subss xmm1, xmm0
addss xmm2, dword [eax + 0x7c]
subss xmm1, dword [0xa8c54c]
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
mulss xmm1, dword [0xa8c438]
mov byte [eax + 0x131], 1
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
addss xmm2, xmm1
addss xmm0, xmm2
movss dword [eax + 0xf4], xmm0
lea eax, [esp + 0x20]
movss xmm0, dword [esi + 0xa0]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
push eax
movss dword [esp + 0x44], xmm0
call fcn.0044d630
movss xmm0, dword [esp + 0x10]
addss xmm0, dword [0xa8c470]
mov ecx, dword [esi + 0x3e48]
push str.License:
movss xmm1, dword [ecx + 0x1c]
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, ecx
cvtdq2ps xmm0, xmm0
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
subss xmm1, xmm0
movss xmm0, dword [eax + 0x14]
subss xmm0, dword [eax + 0x78]
mov byte [eax + 0x131], 1
mulss xmm1, dword [0xa8c438]
addss xmm0, xmm1
movss dword [eax + 0xf0], xmm0
lea eax, [esp + 0x14]
movaps xmm0, xmmword [0xa8c780]
push eax
movups xmmword [esp + 0x18], xmm0
call fcn.004538b0
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push 0x470dc4
call fcn.004537f0
movss xmm1, dword [0xa8c5f0]
add esp, 0xc
xorps xmm0, xmm0
call fcn.00435db0
movaps xmm0, xmmword [0xa8c780]
lea eax, [esp + 0x10]
movups xmmword [esp + 0x10], xmm0
sub esp, 8
movss xmm0, dword [0xa8c540]
divss xmm0, dword [esp + 0x38]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.____.0f
push eax
call fcn.004538b0
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push 0x470dd0
call fcn.004537f0
movss xmm1, dword [0xa8c5f0]
add esp, 0x14
xorps xmm0, xmm0
call fcn.00435db0
movaps xmm0, xmmword [0xa8c780]
lea eax, [esp + 0x10]
sub esp, 8
movups xmmword [esp + 0x18], xmm0
movsd xmm0, qword [0xa8c4d8]
movsd qword [esp], xmm0
push str.____.f
push eax
call fcn.004538b0
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push 0x470ddc
call fcn.004537f0
movss xmm1, dword [0xa8c5f0]
add esp, 0x14
xorps xmm0, xmm0
call fcn.00435db0
push 0x470de0
call fcn.004537f0
movss xmm1, dword [0xa8c5f0]
add esp, 4
xorps xmm0, xmm0
call fcn.00435db0
movaps xmm0, xmmword [0xa8c780]
lea eax, [esp + 0x10]
push str.HideMenu
push eax
movups xmmword [esp + 0x18], xmm0
call fcn.004538b0
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
push 0x470df4
call fcn.004537f0
movss xmm1, dword [0xa8c5f0]
add esp, 0xc
xorps xmm0, xmm0
call fcn.00435db0
push 0x470df8
call fcn.004537f0
movss xmm1, dword [0xa8c5f0]
add esp, 4
xorps xmm0, xmm0
call fcn.00435db0
push str.PGDN
call fcn.004537f0
movss xmm1, dword [0xa8c5f0]
add esp, 4
xorps xmm0, xmm0
call fcn.00435db0
push 0x470e04
call fcn.004537f0
mov ecx, dword [0xb15720]
add esp, 4
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x40ff9f
movss xmm1, dword [0xa8c5f0]
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.00435a20
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x42200000
mov ecx, 0x470e08
mov dword [esp + 0x18], 0x41f00000
call fcn.00454240
add esp, 4
test al, al
jne 0x40ffeb
movss xmm1, dword [0xa8c5f0]
xorps xmm0, xmm0
call fcn.00435db0
call fcn.00406ce0
call fcn.0042dc60
call fcn.00432b20
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00408550
int3