Function at 0x401ff0
Capabilities:
Authenticate hmac
Execute command
Log keystrokes via polling
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4126b9
mov eax, dword fs:[0]
push eax
mov eax, 0x13d0
call fcn.004120b0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.COLOR_04
call edi
push 0x413284
call edi
add esp, 8
push 0x1b5
call dword [sym.imp.KERNEL32.dll_SetConsoleCP]
push 0x1b5
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_____n_______________________________________________________________________________n___________________________________________________________________________n____________________________________________________________________________n_______________________________________________________________________n________________________________________________________________________n________________________________________________________________________n_________________________________________________________________________n_________________________________________________________________________________________________________________n
call fcn.00410590
mov dl, 0xa
mov ecx, eax
call fcn.004107b0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_n_n_t_t_t_t
call fcn.00410590
push str.Checking_HWID_information...
lea ecx, [ebp - 0xd8c]
call fcn.0040ff60
lea ecx, [ebp - 0xd8c]
mov dword [ebp - 4], 0
call fcn.00401b40
lea ecx, [ebp - 0xd8c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_n_n_t_t_t_t
call fcn.00410590
mov esi, 0x19
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dl, 0xb1
call fcn.004107b0
sub esi, 1
jne 0x4020c0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x413574
call fcn.00410590
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
mov esi, 0x19
nop word [eax + eax]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dl, 0xdb
call fcn.004107b0
push 0x5a
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esi, 1
jne 0x402100
push 0x413270
push esi
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x4021b9
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_n_n_t_t_t_t
call fcn.00410590
push str.couldnt_locate_game_process__please_open_fs2.
lea ecx, [ebp - 0xda4]
call fcn.0040ff60
lea ecx, [ebp - 0xda4]
mov dword [ebp - 4], 1
call fcn.00401b40
lea ecx, [ebp - 0xda4]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x4135e0
call fcn.00410590
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.PAUSE
call edi
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041107d
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x814]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x814]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp dword [ebp - 0x814], 0
mov edi, eax
mov dword [ebp - 0xa40], edi
jne 0x402240
push str.couldnt_find_game_dll
lea ecx, [ebp - 0xdbc]
call fcn.0040ff60
lea ecx, [ebp - 0xdbc]
mov dword [ebp - 4], 2
call fcn.00401b40
lea ecx, [ebp - 0xdbc]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
mov eax, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.PAUSE
call eax
jmp 0x402199
mov eax, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push 0x413284
call eax
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, str._n_____n_______________________________________________________________________________n___________________________________________________________________________n____________________________________________________________________________n_______________________________________________________________________n________________________________________________________________________n________________________________________________________________________n_________________________________________________________________________n_________________________________________________________________________________________________________________n
call fcn.00410590
mov dl, 0xa
mov ecx, eax
call fcn.004107b0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_n_n_t_t_t_t
call fcn.00410590
push str.Infinite_stamina___y_N_:
lea ecx, [ebp - 0xdd4]
call fcn.0040ff60
lea ecx, [ebp - 0xdd4]
mov dword [ebp - 4], 3
call fcn.00401b40
lea ecx, [ebp - 0xdd4]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov esi, dword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9f4], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0xb4], 0
call fcn.00410590
push str.Movement_speed___y_N_:
lea ecx, [ebp - 0xdec]
call fcn.0040ff60
lea ecx, [ebp - 0xdec]
mov dword [ebp - 4], 4
call fcn.00401b40
lea ecx, [ebp - 0xdec]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9d4], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x9d4], 0x79
jne 0x4023f7
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_walking_speed_value:
lea ecx, [ebp - 0xe04]
call fcn.0040ff60
lea ecx, [ebp - 0xe04]
mov dword [ebp - 4], 5
call fcn.00401b40
lea ecx, [ebp - 0xe04]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x2cc]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_running_speed_value:
lea ecx, [ebp - 0xe1c]
call fcn.0040ff60
lea ecx, [ebp - 0xe1c]
mov dword [ebp - 4], 6
call fcn.00401b40
lea ecx, [ebp - 0xe1c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x2d0]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
xorps xmm0, xmm0
mov edx, str._t_t_t_t
mov dword [ebp - 0x1f0], 0
movss dword [ebp - 0x994], xmm0
call fcn.00410590
push str.Infinite_freestyles___y_N_:
lea ecx, [ebp - 0xe34]
call fcn.0040ff60
lea ecx, [ebp - 0xe34]
mov dword [ebp - 4], 7
call fcn.00401b40
lea ecx, [ebp - 0xe34]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9f8], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
mov dword [ebp - 0xad4], 0x110
mov dword [ebp - 0xad0], 0xac
mov dword [ebp - 0xacc], 0x40c
mov dword [ebp - 0xac8], 0x94
mov dword [ebp - 0x128], 4
call fcn.00410590
push str.Tp_LR___y_N_:
lea ecx, [ebp - 0xe4c]
call fcn.0040ff60
lea ecx, [ebp - 0xe4c]
mov dword [ebp - 4], 8
call fcn.00401b40
lea ecx, [ebp - 0xe4c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0xa20], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Auto_backblock___y_N_:
lea ecx, [ebp - 0xe64]
call fcn.0040ff60
lea ecx, [ebp - 0xe64]
mov dword [ebp - 4], 9
call fcn.00401b40
lea ecx, [ebp - 0xe64]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9fc], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Autosteal___y_N_:
lea ecx, [ebp - 0xe7c]
call fcn.0040ff60
lea ecx, [ebp - 0xe7c]
mov dword [ebp - 4], 0xa
call fcn.00401b40
lea ecx, [ebp - 0xe7c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0xa48], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._t_t_t_t
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00410590
push str.Tp_steal___y_N_:
lea ecx, [ebp - 0xe94]
call fcn.0040ff60
lea ecx, [ebp - 0xe94]
mov dword [ebp - 4], 0xb
call fcn.00401b40
lea ecx, [ebp - 0xe94]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9e8], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x9e8], 0x79
jne 0x40266f
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_tp_steal_range:
lea ecx, [ebp - 0xeac]
call fcn.0040ff60
lea ecx, [ebp - 0xeac]
mov dword [ebp - 4], 0xc
call fcn.00401b40
lea ecx, [ebp - 0xeac]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Tracking___y_N_:
lea ecx, [ebp - 0x1044]
call fcn.0040ff60
lea ecx, [ebp - 0x1044]
mov dword [ebp - 4], 0xd
call fcn.00401b40
lea ecx, [ebp - 0x1044]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9f0], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Autoblock___y_N_:
lea ecx, [ebp - 0xecc]
call fcn.0040ff60
lea ecx, [ebp - 0xecc]
mov dword [ebp - 4], 0xe
call fcn.00401b40
lea ecx, [ebp - 0xecc]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0xa4c], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Auto_grab_block___y_N_:
lea ecx, [ebp - 0xee4]
call fcn.0040ff60
lea ecx, [ebp - 0xee4]
mov dword [ebp - 4], 0xf
call fcn.00401b40
lea ecx, [ebp - 0xee4]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0xa50], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Tp_block___y_N_:
lea ecx, [ebp - 0xefc]
call fcn.0040ff60
lea ecx, [ebp - 0xefc]
mov dword [ebp - 4], 0x10
call fcn.00401b40
lea ecx, [ebp - 0xefc]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9b8], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x9b8], 0x79
jne 0x402901
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_tp_range:
lea ecx, [ebp - 0xf14]
call fcn.0040ff60
lea ecx, [ebp - 0xf14]
mov dword [ebp - 4], 0x11
call fcn.00401b40
lea ecx, [ebp - 0xf14]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_tp_distance:
lea ecx, [ebp - 0xf2c]
call fcn.0040ff60
lea ecx, [ebp - 0xf2c]
mov dword [ebp - 4], 0x12
call fcn.00401b40
lea ecx, [ebp - 0xf2c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x2b0]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Scoop_block___y_N_:
lea ecx, [ebp - 0xf44]
call fcn.0040ff60
lea ecx, [ebp - 0xf44]
mov dword [ebp - 4], 0x13
call fcn.00401b40
lea ecx, [ebp - 0xf44]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp eax, 0x79
push 0x4109e0
sete byte [ebp - 0x97f]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
jmp 0x40290d
mov al, byte [ebp - 0x955]
mov byte [ebp - 0x97f], al
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Dunk_block___y_N_:
lea ecx, [ebp - 0xf5c]
call fcn.0040ff60
lea ecx, [ebp - 0xf5c]
mov dword [ebp - 4], 0x14
call fcn.00401b40
lea ecx, [ebp - 0xf5c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9e0], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x9e0], 0x79
jne 0x4029ca
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_tp_range:
lea ecx, [ebp - 0xf74]
call fcn.0040ff60
lea ecx, [ebp - 0xf74]
mov dword [ebp - 4], 0x15
call fcn.00401b40
lea ecx, [ebp - 0xf74]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x2b4]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Tp_grab_block___y_N_:
lea ecx, [ebp - 0xf8c]
call fcn.0040ff60
lea ecx, [ebp - 0xf8c]
mov dword [ebp - 4], 0x16
call fcn.00401b40
lea ecx, [ebp - 0xf8c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9dc], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x9dc], 0x79
jne 0x402a87
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_tp_grab_range:
lea ecx, [ebp - 0xfa4]
call fcn.0040ff60
lea ecx, [ebp - 0xfa4]
mov dword [ebp - 4], 0x17
call fcn.00401b40
lea ecx, [ebp - 0xfa4]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x2ac]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Pass_range___y_N_:
lea ecx, [ebp - 0xccc]
call fcn.0040ff60
lea ecx, [ebp - 0xccc]
mov dword [ebp - 4], 0x18
call fcn.00401b40
lea ecx, [ebp - 0xccc]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0xa64], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Screen_range___y_N_:
lea ecx, [ebp - 0xce4]
call fcn.0040ff60
lea ecx, [ebp - 0xce4]
mov dword [ebp - 4], 0x19
call fcn.00401b40
lea ecx, [ebp - 0xce4]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9d8], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x9d8], 0x79
jne 0x402ba1
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_screen_range:
lea ecx, [ebp - 0xcfc]
call fcn.0040ff60
lea ecx, [ebp - 0xcfc]
mov dword [ebp - 4], 0x1a
call fcn.00401b40
lea ecx, [ebp - 0xcfc]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x334]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.No_contest___y_N_:
lea ecx, [ebp - 0xd14]
call fcn.0040ff60
lea ecx, [ebp - 0xd14]
mov dword [ebp - 4], 0x1b
call fcn.00401b40
lea ecx, [ebp - 0xd14]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9d0], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x9d0], 0x79
jne 0x402c5e
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Enter_no_contest_distance:
lea ecx, [ebp - 0xd2c]
call fcn.0040ff60
lea ecx, [ebp - 0xd2c]
mov dword [ebp - 4], 0x1c
call fcn.00401b40
lea ecx, [ebp - 0xd2c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x34c]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___float__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Shot_positioning___y_N_:
lea ecx, [ebp - 0xd44]
call fcn.0040ff60
lea ecx, [ebp - 0xd44]
mov dword [ebp - 4], 0x1d
call fcn.00401b40
lea ecx, [ebp - 0xd44]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0xa54], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Auto_ankle___y_N_:
lea ecx, [ebp - 0xd5c]
call fcn.0040ff60
lea ecx, [ebp - 0xd5c]
mov dword [ebp - 4], 0x1e
call fcn.00401b40
lea ecx, [ebp - 0xd5c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0x9ec], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
call fcn.00410590
push str.Long_dunk_range___y_N_:
lea ecx, [ebp - 0xd74]
call fcn.0040ff60
lea ecx, [ebp - 0xd74]
mov dword [ebp - 4], 0x1f
call fcn.00401b40
lea ecx, [ebp - 0xd74]
mov dword [ebp - 4], 0xffffffff
call fcn.0040ff00
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4109e0
mov dword [ebp - 0xa44], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [0x416494], 0
jne 0x402dd6
nop
mov edx, dword [ebp - 0x814]
mov ecx, str.GameApp.dll
call fcn.004015d0
mov dword [0x416494], eax
test eax, eax
jne 0x402dd6
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._t_t_t_t
push 0x4109e0
call fcn.00410590
mov edx, str.Waiting_for_GameApp.dll_to_be_loaded...
mov ecx, eax
call fcn.00410590
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x416494]
test eax, eax
je 0x402d80
push 0x413284
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, str._n_____n_______________________________________________________________________________n___________________________________________________________________________n____________________________________________________________________________n_______________________________________________________________________n________________________________________________________________________n________________________________________________________________________n_________________________________________________________________________n_________________________________________________________________________________________________________________n
call fcn.00410590
mov dl, 0xa
mov ecx, eax
call fcn.004107b0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_n_n_t_t_t_t
push 0x4109e0
push dword [0x416494]
call fcn.00410590
mov edx, str.Found_GameApp.dll_address_at:
mov ecx, eax
call fcn.00410590
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 0x97d], 1
mov byte [ebp - 0x97e], 1
mov byte [ebp - 0x9a8], 0
mov byte [ebp - 0x9a0], 0
call fcn.004011d0
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x9e4], 0xa0
nop dword [eax + eax]
cmp dword [ebp - 0x9f4], 0x79
jne 0x402f46
push 0
push 4
lea eax, [ebp - 0x7e4]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7e4]
push eax
mov eax, dword [ebp - 0x7e4]
add eax, 0x110
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7e4]
push eax
mov eax, dword [ebp - 0x7e4]
add eax, 0xac
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7e4]
push eax
mov eax, dword [ebp - 0x7e4]
add eax, 0x38c
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x11c]
push eax
mov eax, dword [ebp - 0x7e4]
add eax, 0x14
push eax
push edi
call esi
movss xmm0, dword [ebp - 0x11c]
comiss xmm0, dword [ebp - 0xb4]
jbe 0x402f15
movss dword [ebp - 0xb4], xmm0
cmp dword [ebp - 0x7e4], 0
je 0x402e70
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 4
lea eax, [ebp - 0xb4]
push eax
mov eax, dword [ebp - 0x7e4]
add eax, 0x14
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp dword [ebp - 0x9f8], 0x79
jne 0x402ffe
push 0
push 4
lea eax, [ebp - 0x810]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x950], eax
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp + eax*4 - 0xad4]
lea ecx, [ebp - 0x810]
add eax, dword [ebp - 0x810]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
inc eax
mov dword [ebp - 0x950], eax
cmp eax, 3
jl 0x402f80
push 0
push 4
lea eax, [ebp - 0x124]
mov dword [ebp - 0x124], 0
push eax
mov eax, dword [ebp - 0x810]
add eax, 0x94
push eax
push edi
call esi
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x128]
je 0x402ffe
push 0
push 4
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0x810]
add eax, 0x94
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp dword [ebp - 0x9fc], 0x79
jne 0x403ae4
mov eax, dword [0x416494]
push 0
push 4
push 0x416588
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
nop dword [eax]
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x403030
push 0
push 4
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x4030a0
push 0
push 4
lea eax, [ebp - 0x138]
mov dword [ebp - 0x138], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dc8
jl 0x403110
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x404]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x20
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413edc
jl 0x403190
push 0
push 4
lea eax, [ebp - 0x844]
mov dword [ebp - 0x844], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f28
jl 0x403200
push 0
push 4
lea eax, [ebp - 0x840]
mov dword [ebp - 0x840], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f04
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c0]
push 0
push 4
push 0x4165c0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f14
jl 0x403270
push 0
push 4
lea eax, [ebp - 0x83c]
mov dword [ebp - 0x83c], 0
push eax
mov eax, dword [0x4165c0]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x4032e0
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x4a4]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x21
mov eax, dword [0x416494]
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ef0
jl 0x403360
push 0
push 4
lea eax, [ebp - 0x850]
mov dword [ebp - 0x850], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413eb4
jl 0x4033d0
push 0
push 4
lea eax, [ebp - 0x84c]
mov dword [ebp - 0x84c], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416468
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d3c
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416468]
push 0
push 4
push 0x416468
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d4c
jl 0x403440
push 0
push 4
lea eax, [ebp - 0x848]
mov dword [ebp - 0x848], 0
push eax
mov eax, dword [0x416468]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x4034b0
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x48c]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x22
mov eax, dword [0x416494]
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d60
jl 0x403530
push 0
push 4
lea eax, [ebp - 0x85c]
mov dword [ebp - 0x85c], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f50
jl 0x4035a0
push 0
push 4
lea eax, [ebp - 0x858]
mov dword [ebp - 0x858], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416584
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ddc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416584]
push 0
push 4
push 0x416584
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dec
jl 0x403610
push 0
push 4
lea eax, [ebp - 0x854]
mov dword [ebp - 0x854], 0
push eax
mov eax, dword [0x416584]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x403680
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x474]
call fcn.00410160
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x290]
movss xmm2, dword [ebp - 0x138]
movss xmm1, dword [ebp - 0x13c]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0xcc]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x4a4]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x83c]
movss xmm2, dword [ebp - 0x840]
lea ecx, [ebp - 0x10d0]
movss xmm1, dword [ebp - 0x844]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x48c]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x848]
movss xmm2, dword [ebp - 0x84c]
lea ecx, [ebp - 0x10ac]
movss xmm1, dword [ebp - 0x850]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x474]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x854]
movss xmm2, dword [ebp - 0x858]
lea ecx, [ebp - 0x1088]
movss xmm1, dword [ebp - 0x85c]
call fcn.004016d0
lea eax, [ebp - 0x1064]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x10d0]
push eax
lea ecx, [ebp - 0xfac]
call fcn.0040f780
lea ecx, [ebp - 0x9b9]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xcc]
push dword [esi]
call fcn.0040fa10
push 0x40f640
push 3
push 0x24
lea eax, [ebp - 0x10d0]
mov byte [ebp - 4], 0x28
push eax
call fcn.004110bb
mov byte [ebp - 0x956], 0
xor esi, esi
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x964], esi
call fcn.0040f970
test eax, eax
je 0x403aa0
sub esp, 0x18
mov ecx, esp
push str.LAYUP
call fcn.00410160
push esi
lea ecx, [ebp - 0xcc]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x955], al
push str.DUNK
call fcn.00410160
push esi
lea ecx, [ebp - 0xcc]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x966], al
push str.DRIBBLE
call fcn.00410160
lea ecx, [ebp - 0x404]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96d], al
push str.DRIBBLE_DASH
call fcn.00410160
lea ecx, [ebp - 0x404]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x968], al
push str.LASTSTAND
call fcn.00410160
lea ecx, [ebp - 0x404]
call fcn.004018e0
sub esp, 0xc
mov byte [ebp - 0x96e], al
mov esi, esp
lea ecx, [ebp - 0xcc]
push dword [ebp - 0x964]
call fcn.0040f950
push eax
mov ecx, esi
call fcn.0040f6b0
push dword [ebp - 0x28c]
push dword [ebp - 0x290]
call fcn.00410a10
movss xmm1, dword [0x41403c]
add esp, 0x2c
comiss xmm1, xmm0
jb 0x4039f9
cmp byte [ebp - 0x955], 0
jne 0x403911
cmp byte [ebp - 0x966], 0
je 0x4039f9
cmp byte [ebp - 0x968], 0
jne 0x4039f9
cmp byte [ebp - 0x96d], 0
jne 0x4039f9
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0xcc]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0xcc]
movss xmm0, dword [eax]
movss dword [ebp - 0x99c], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x99c]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x9c4], xmm0
movss dword [ebp - 0x954], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x950], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm1, dword [ebp - 0x954]
movss xmm2, dword [ebp - 0x950]
divss xmm1, xmm0
mov byte [ebp - 0x956], 1
divss xmm2, xmm0
mulss xmm1, dword [0x413f9c]
mulss xmm2, dword [0x413f9c]
movss xmm3, dword [ebp - 0x99c]
movss xmm0, dword [ebp - 0x9c4]
subss xmm3, xmm1
subss xmm0, xmm2
movss dword [ebp - 0x99c], xmm3
movss dword [ebp - 0x9c4], xmm0
jmp 0x403a02
cmp byte [ebp - 0x956], 0
je 0x403a80
push 0x43
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x403a80
movss xmm0, dword [ebp - 0x290]
mov ecx, edi
movss xmm2, dword [ebp - 0x9c4]
movss xmm1, dword [ebp - 0x99c]
movss dword [ebp - 0x950], xmm0
movss xmm0, dword [ebp - 0x28c]
movss dword [ebp - 0x954], xmm0
call fcn.00401310
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xa
call esi
call fcn.00401b80
push 0x14
call esi
cmp byte [ebp - 0x96e], 0
jne 0x403a80
push 0x1d6
call esi
movss xmm2, dword [ebp - 0x954]
mov ecx, edi
movss xmm1, dword [ebp - 0x950]
call fcn.00401310
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0xcc]
inc esi
mov dword [ebp - 0x964], esi
call fcn.0040f970
cmp esi, eax
jb 0x403812
lea ecx, [ebp - 0xcc]
call fcn.0040f990
lea ecx, [ebp - 0x474]
call fcn.00410090
lea ecx, [ebp - 0x48c]
call fcn.00410090
lea ecx, [ebp - 0x4a4]
call fcn.00410090
lea ecx, [ebp - 0x404]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0x75
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x403b1c
cmp byte [ebp - 0x9a8], 0
jne 0x403b1c
cmp byte [ebp - 0x97d], 0
push 0x12c
sete byte [ebp - 0x97d]
mov byte [ebp - 0x9a8], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x403b3b
push 0x75
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [ebp - 0x9a8]
xor edx, edx
test ax, ax
movzx ecx, cl
cmovns ecx, edx
mov dword [ebp - 0x9a8], ecx
push 0x76
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x403b73
cmp byte [ebp - 0x9a0], 0
jne 0x403b73
cmp byte [ebp - 0x97e], 0
push 0x12c
sete byte [ebp - 0x97e]
mov byte [ebp - 0x9a0], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x403b92
push 0x76
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [ebp - 0x9a0]
xor edx, edx
test ax, ax
movzx ecx, cl
cmovns ecx, edx
mov dword [ebp - 0x9a0], ecx
cmp byte [ebp - 0x97e], 0
je 0x4053d9
cmp dword [ebp - 0xa20], 0x79
jne 0x40467e
mov eax, dword [0x416494]
push 0
push 4
push 0x416588
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x403bd0
push 0
push 4
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x403c40
push 0
push 4
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dc8
jl 0x403cb0
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x41c]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x29
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413edc
jl 0x403d30
push 0
push 4
lea eax, [ebp - 0x868]
mov dword [ebp - 0x868], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f28
jl 0x403da0
push 0
push 4
lea eax, [ebp - 0x864]
mov dword [ebp - 0x864], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f04
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c0]
push 0
push 4
push 0x4165c0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f14
jl 0x403e10
push 0
push 4
lea eax, [ebp - 0x860]
mov dword [ebp - 0x860], 0
push eax
mov eax, dword [0x4165c0]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x403e80
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x4ec]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x2a
mov eax, dword [0x416494]
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ef0
jl 0x403f00
push 0
push 4
lea eax, [ebp - 0x874]
mov dword [ebp - 0x874], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413eb4
jl 0x403f70
push 0
push 4
lea eax, [ebp - 0x870]
mov dword [ebp - 0x870], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416468
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d3c
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416468]
push 0
push 4
push 0x416468
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d4c
jl 0x403fe0
push 0
push 4
lea eax, [ebp - 0x86c]
mov dword [ebp - 0x86c], 0
push eax
mov eax, dword [0x416468]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x404050
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x4d4]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x2b
mov eax, dword [0x416494]
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d60
jl 0x4040d0
push 0
push 4
lea eax, [ebp - 0x880]
mov dword [ebp - 0x880], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f50
jl 0x404140
push 0
push 4
lea eax, [ebp - 0x87c]
mov dword [ebp - 0x87c], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416584
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ddc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416584]
push 0
push 4
push 0x416584
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dec
jl 0x4041b0
push 0
push 4
lea eax, [ebp - 0x878]
mov dword [ebp - 0x878], 0
push eax
mov eax, dword [0x416584]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x404220
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x4bc]
call fcn.00410160
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x298]
movss xmm2, dword [ebp - 0x10c]
movss xmm1, dword [ebp - 0x110]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0xd8]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x4ec]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x860]
movss xmm2, dword [ebp - 0x864]
lea ecx, [ebp - 0x113c]
movss xmm1, dword [ebp - 0x868]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x4d4]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x86c]
movss xmm2, dword [ebp - 0x870]
lea ecx, [ebp - 0x1118]
movss xmm1, dword [ebp - 0x874]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x4bc]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x878]
movss xmm2, dword [ebp - 0x87c]
lea ecx, [ebp - 0x10f4]
movss xmm1, dword [ebp - 0x880]
call fcn.004016d0
lea eax, [ebp - 0x10d0]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x113c]
push eax
lea ecx, [ebp - 0xfb4]
call fcn.0040f780
lea ecx, [ebp - 0x9ac]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xd8]
push dword [esi]
call fcn.0040fa10
push 0x40f640
push 3
push 0x24
lea eax, [ebp - 0x113c]
mov byte [ebp - 4], 0x31
push eax
call fcn.004110bb
mov byte [ebp - 0x956], 0
xor esi, esi
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x964], esi
call fcn.0040f970
test eax, eax
je 0x404640
sub esp, 0x18
mov ecx, esp
push str.LAYUP
call fcn.00410160
push esi
lea ecx, [ebp - 0xd8]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x955], al
push str.DUNK
call fcn.00410160
push esi
lea ecx, [ebp - 0xd8]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x966], al
push str.DRIBBLE
call fcn.00410160
lea ecx, [ebp - 0x41c]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96d], al
push str.DRIBBLE_DASH
call fcn.00410160
lea ecx, [ebp - 0x41c]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x968], al
push str.LASTSTAND
call fcn.00410160
lea ecx, [ebp - 0x41c]
call fcn.004018e0
sub esp, 0xc
mov byte [ebp - 0x96e], al
mov esi, esp
lea ecx, [ebp - 0xd8]
push dword [ebp - 0x964]
call fcn.0040f950
push eax
mov ecx, esi
call fcn.0040f6b0
push dword [ebp - 0x294]
push dword [ebp - 0x298]
call fcn.00410a10
movss xmm1, dword [0x41403c]
add esp, 0x2c
comiss xmm1, xmm0
jb 0x404599
cmp byte [ebp - 0x955], 0
jne 0x4044b1
cmp byte [ebp - 0x966], 0
je 0x404599
cmp byte [ebp - 0x968], 0
jne 0x404599
cmp byte [ebp - 0x96d], 0
jne 0x404599
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0xd8]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0xd8]
movss xmm0, dword [eax]
movss dword [ebp - 0x9a4], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x9a4]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x9c0], xmm0
movss dword [ebp - 0x954], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x950], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm1, dword [ebp - 0x954]
movss xmm2, dword [ebp - 0x950]
divss xmm1, xmm0
mov byte [ebp - 0x956], 1
divss xmm2, xmm0
mulss xmm1, dword [0x413f9c]
mulss xmm2, dword [0x413f9c]
movss xmm3, dword [ebp - 0x9a4]
movss xmm0, dword [ebp - 0x9c0]
subss xmm3, xmm1
subss xmm0, xmm2
movss dword [ebp - 0x9a4], xmm3
movss dword [ebp - 0x9c0], xmm0
jmp 0x4045a2
cmp byte [ebp - 0x956], 0
je 0x404620
push 0x43
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x404620
movss xmm0, dword [ebp - 0x298]
mov ecx, edi
movss xmm2, dword [ebp - 0x9c0]
movss xmm1, dword [ebp - 0x9a4]
movss dword [ebp - 0x950], xmm0
movss xmm0, dword [ebp - 0x294]
movss dword [ebp - 0x954], xmm0
call fcn.00401310
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xa
call esi
call fcn.00401c60
push 0x14
call esi
cmp byte [ebp - 0x96e], 0
jne 0x404620
push 0x1d6
call esi
movss xmm2, dword [ebp - 0x954]
mov ecx, edi
movss xmm1, dword [ebp - 0x950]
call fcn.00401310
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0xd8]
inc esi
mov dword [ebp - 0x964], esi
call fcn.0040f970
cmp esi, eax
jb 0x4043b2
lea ecx, [ebp - 0xd8]
call fcn.0040f990
lea ecx, [ebp - 0x4bc]
call fcn.00410090
lea ecx, [ebp - 0x4d4]
call fcn.00410090
lea ecx, [ebp - 0x4ec]
call fcn.00410090
lea ecx, [ebp - 0x41c]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0xa48], 0x79
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jne 0x404d4b
mov eax, dword [0x416494]
push 0
push 4
push 0x416588
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x4046b3
push 0
push 4
lea eax, [ebp - 0x160]
mov dword [ebp - 0x160], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x404721
push 0
push 4
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x15c], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dc8
jl 0x404790
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x7c8]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x32
mov eax, dword [0x416494]
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x404810
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x7b0]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x33
mov eax, dword [0x416494]
push 0x4165b0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d64
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165b0]
push 0
push 4
push 0x4165b0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d70
jl 0x404890
push 0
push 4
lea eax, [ebp - 0x340]
push eax
mov eax, dword [0x4165b0]
add eax, 0x34c
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x4048f6
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x798]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x34
mov eax, dword [0x416494]
push 0x4165cc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e60
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165cc]
push 0
push 4
push 0x4165cc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e6c
jl 0x404970
push 0
push 4
lea eax, [ebp - 0x344]
push eax
mov eax, dword [0x4165cc]
add eax, 0x34c
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x4049d6
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x780]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x35
mov eax, dword [0x416494]
push 0x41648c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ef4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x41648c]
push 0
push 4
push 0x41648c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f00
jl 0x404a50
push 0
push 4
lea eax, [ebp - 0x2c0]
push eax
mov eax, dword [0x41648c]
add eax, 0x34c
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e50
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165d4]
push 0
push 4
push 0x4165d4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e5c
jl 0x404ab6
push 0
push 4
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x16c], 0
push eax
mov eax, dword [0x4165d4]
add eax, 0x14
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e80
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165a4]
push 0
push 4
push 0x4165a4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e8c
jl 0x404b24
push 0
push 4
lea eax, [ebp - 0x168]
mov dword [ebp - 0x168], 0
push eax
mov eax, dword [0x4165a4]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416598
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413d88
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416598]
push 0
push 4
push 0x416598
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d94
jl 0x404b92
push 0
push 4
lea eax, [ebp - 0x164]
mov dword [ebp - 0x164], 0
push eax
mov eax, dword [0x416598]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x15c]
lea ecx, [ebp - 0x378]
movss xmm1, dword [ebp - 0x160]
call fcn.004016a0
movss xmm3, dword [ebp - 0x164]
lea ecx, [ebp - 0x3cc]
movss xmm2, dword [ebp - 0x168]
movss xmm1, dword [ebp - 0x16c]
call fcn.004016b0
cmp dword [ebp - 0x340], 0
mov byte [ebp - 0x956], 0
jne 0x404c3e
cmp dword [ebp - 0x344], 0
jne 0x404c3e
cmp dword [ebp - 0x2c0], 0
je 0x404c45
mov byte [ebp - 0x956], 1
movq xmm0, qword [ebp - 0x3cc]
sub esp, 0xc
mov eax, dword [ebp - 0x3c4]
mov ecx, esp
push dword [ebp - 0x374]
movq qword [ecx], xmm0
push dword [ebp - 0x378]
mov dword [ecx + 8], eax
call fcn.00410ad0
lea ecx, [ebp - 0x3ec]
movss dword [ebp - 0x954], xmm0
call fcn.004011d0
lea eax, [ebp - 0x2c8]
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0xfbc]
call fcn.00410b50
add esp, 0x18
lea ecx, [ebp - 0xfc4]
mov edx, eax
call fcn.00410b80
mov ecx, eax
call fcn.00401300
movss xmm0, dword [0x413fa4]
comiss xmm0, dword [ebp - 0x954]
jb 0x404d18
movss xmm0, dword [ebp - 0x3cc]
movss xmm1, dword [0x413ff0]
comiss xmm1, xmm0
jb 0x404d18
comiss xmm0, dword [0x413f98]
jb 0x404d18
cmp byte [ebp - 0x956], 0
je 0x404d18
test edx, edx
jl 0x404d18
jg 0x404cf7
cmp eax, 0x2ee
jb 0x404d18
call fcn.00401bf0
lea ecx, [ebp - 0xfcc]
call fcn.004011d0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x2c8], ecx
mov dword [ebp - 0x2c4], eax
lea ecx, [ebp - 0x780]
call fcn.00410090
lea ecx, [ebp - 0x798]
call fcn.00410090
lea ecx, [ebp - 0x7b0]
call fcn.00410090
lea ecx, [ebp - 0x7c8]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9e8], 0x79
jne 0x4053d9
mov eax, dword [0x416494]
push 0
push 4
push 0x416588
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
nop word [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x404d80
push 0
push 4
lea eax, [ebp - 0x174]
mov dword [ebp - 0x174], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x404df0
push 0
push 4
lea eax, [ebp - 0x170]
mov dword [ebp - 0x170], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dc8
jl 0x404e60
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x534]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x36
mov eax, dword [0x416494]
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x404ee0
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x51c]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x37
mov eax, dword [0x416494]
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x404f60
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x504]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x38
mov eax, dword [0x416494]
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x404fe0
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x45c]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x39
mov eax, dword [0x416494]
push 0x4165d4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e50
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165d4]
push 0
push 4
push 0x4165d4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e5c
jl 0x405060
push 0
push 4
lea eax, [ebp - 0x180]
mov dword [ebp - 0x180], 0
push eax
mov eax, dword [0x4165d4]
add eax, 0x14
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e80
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a4]
push 0
push 4
push 0x4165a4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e8c
jl 0x4050d0
push 0
push 4
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x17c], 0
push eax
mov eax, dword [0x4165a4]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416598
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413d88
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416598]
push 0
push 4
push 0x416598
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d94
jl 0x405140
push 0
push 4
lea eax, [ebp - 0x178]
mov dword [ebp - 0x178], 0
push eax
mov eax, dword [0x416598]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x170]
lea ecx, [ebp - 0x2a0]
movss xmm1, dword [ebp - 0x174]
call fcn.004016a0
movss xmm3, dword [ebp - 0x178]
lea ecx, [ebp - 0x358]
movss xmm2, dword [ebp - 0x17c]
movss xmm1, dword [ebp - 0x180]
call fcn.004016b0
lea ecx, [ebp - 0x51c]
call fcn.00401a10
lea ecx, [ebp - 0x504]
mov byte [ebp - 0x955], al
call fcn.00401a10
lea ecx, [ebp - 0x45c]
mov byte [ebp - 0x966], al
call fcn.00401a10
sub esp, 0x18
mov byte [ebp - 0x968], al
mov ecx, esp
push str.STEAL
call fcn.00410160
lea ecx, [ebp - 0x534]
call fcn.004018e0
add esp, 0x18
mov byte [ebp - 0x96d], al
cmp byte [ebp - 0x955], 0
mov byte [ebp - 0x956], 0
jne 0x405242
cmp byte [ebp - 0x966], 0
jne 0x405242
cmp byte [ebp - 0x968], 0
je 0x405249
mov byte [ebp - 0x956], 1
movq xmm0, qword [ebp - 0x358]
sub esp, 0xc
mov eax, dword [ebp - 0x350]
mov ecx, esp
push dword [ebp - 0x29c]
movq qword [ecx], xmm0
push dword [ebp - 0x2a0]
mov dword [ecx + 8], eax
call fcn.00410ad0
movss xmm1, dword [ebp - 0x2e4]
add esp, 0x14
comiss xmm1, xmm0
jb 0x4053a6
cmp byte [ebp - 0x956], 0
je 0x4053a6
movss xmm0, dword [ebp - 0x354]
xorps xmm2, xmm2
movss xmm1, dword [ebp - 0x350]
movss xmm3, dword [0x414064]
subss xmm2, xmm1
subss xmm3, xmm0
movss dword [ebp - 0x954], xmm0
movss dword [ebp - 0x950], xmm1
movaps xmm0, xmm2
movss dword [ebp - 0x964], xmm2
movaps xmm1, xmm3
mulss xmm0, xmm2
mulss xmm1, xmm3
movss dword [ebp - 0x96c], xmm3
addss xmm0, xmm1
call fcn.00401040
movss xmm1, dword [ebp - 0x96c]
movss xmm2, dword [ebp - 0x964]
divss xmm1, xmm0
push 0x53
divss xmm2, xmm0
mulss xmm1, dword [0x413fa0]
mulss xmm2, dword [0x413fa0]
addss xmm1, dword [ebp - 0x954]
addss xmm2, dword [ebp - 0x950]
movss dword [ebp - 0x96c], xmm1
movss dword [ebp - 0x964], xmm2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x4053a6
cmp byte [ebp - 0x96d], 0
je 0x4053a6
movss xmm0, dword [ebp - 0x2a0]
mov ecx, edi
movss xmm2, dword [ebp - 0x964]
movss xmm1, dword [ebp - 0x96c]
movss dword [ebp - 0x950], xmm0
movss xmm0, dword [ebp - 0x29c]
movss dword [ebp - 0x954], xmm0
call fcn.00401310
push 0x190
call dword [sym.imp.KERNEL32.dll_Sleep]
movss xmm2, dword [ebp - 0x954]
mov ecx, edi
movss xmm1, dword [ebp - 0x950]
call fcn.00401310
lea ecx, [ebp - 0x45c]
call fcn.00410090
lea ecx, [ebp - 0x504]
call fcn.00410090
lea ecx, [ebp - 0x51c]
call fcn.00410090
lea ecx, [ebp - 0x534]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp byte [ebp - 0x97d], 0
je 0x40b439
cmp dword [ebp - 0x9b8], 0x79
jne 0x406750
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x405420
push 0
push 4
lea eax, [ebp - 0x188]
mov dword [ebp - 0x188], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x405490
push 0
push 4
lea eax, [ebp - 0x184]
mov dword [ebp - 0x184], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413edc
jl 0x405500
push 0
push 4
lea eax, [ebp - 0x890]
mov dword [ebp - 0x890], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f28
jl 0x405570
push 0
push 4
lea eax, [ebp - 0x88c]
mov dword [ebp - 0x88c], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f04
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c0]
push 0
push 4
push 0x4165c0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f14
jl 0x4055e0
push 0
push 4
lea eax, [ebp - 0x888]
mov dword [ebp - 0x888], 0
push eax
mov eax, dword [0x4165c0]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x405650
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x57c]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x3a
mov eax, dword [0x416494]
push 0x416510
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e30
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416510]
push 0
push 4
push 0x416510
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e3c
jl 0x4056d0
push 0
push 4
lea eax, [ebp - 0x884]
mov dword [ebp - 0x884], 0
push eax
mov eax, dword [0x416510]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ef0
jl 0x405740
push 0
push 4
lea eax, [ebp - 0x8a0]
mov dword [ebp - 0x8a0], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413eb4
jl 0x4057b0
push 0
push 4
lea eax, [ebp - 0x89c]
mov dword [ebp - 0x89c], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416468
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d3c
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416468]
push 0
push 4
push 0x416468
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d4c
jl 0x405820
push 0
push 4
lea eax, [ebp - 0x898]
mov dword [ebp - 0x898], 0
push eax
mov eax, dword [0x416468]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x405890
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x564]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x3b
mov eax, dword [0x416494]
push 0x416530
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e40
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416530]
push 0
push 4
push 0x416530
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e4c
jl 0x405910
push 0
push 4
lea eax, [ebp - 0x894]
mov dword [ebp - 0x894], 0
push eax
mov eax, dword [0x416530]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d60
jl 0x405980
push 0
push 4
lea eax, [ebp - 0x8ac]
mov dword [ebp - 0x8ac], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f50
jl 0x4059f0
push 0
push 4
lea eax, [ebp - 0x8a8]
mov dword [ebp - 0x8a8], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416584
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ddc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416584]
push 0
push 4
push 0x416584
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dec
jl 0x405a60
push 0
push 4
lea eax, [ebp - 0x838]
mov dword [ebp - 0x838], 0
push eax
mov eax, dword [0x416584]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x405ad0
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x54c]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x3c
mov eax, dword [0x416494]
push 0x41659c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e70
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x41659c]
push 0
push 4
push 0x41659c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e7c
jl 0x405b50
push 0
push 4
lea eax, [ebp - 0x8a4]
mov dword [ebp - 0x8a4], 0
push eax
mov eax, dword [0x41659c]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e50
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d4]
push 0
push 4
push 0x4165d4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e5c
jl 0x405bc0
push 0
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0
push eax
mov eax, dword [0x4165d4]
add eax, 0x14
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e80
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a4]
push 0
push 4
push 0x4165a4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e8c
jl 0x405c30
push 0
push 4
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0
push eax
mov eax, dword [0x4165a4]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416598
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413d88
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416598]
push 0
push 4
push 0x416598
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d94
jl 0x405ca0
push 0
push 4
lea eax, [ebp - 0x150]
mov dword [ebp - 0x150], 0
push eax
mov eax, dword [0x416598]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x184]
lea ecx, [ebp - 0x3b8]
movss xmm1, dword [ebp - 0x188]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x4c]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x57c]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm0, dword [ebp - 0x884]
movss xmm2, dword [ebp - 0x88c]
movss xmm1, dword [ebp - 0x890]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x1364]
push dword [ebp - 0x888]
call fcn.00401810
sub esp, 0x18
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x564]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm0, dword [ebp - 0x894]
movss xmm2, dword [ebp - 0x89c]
movss xmm1, dword [ebp - 0x8a0]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x133c]
push dword [ebp - 0x898]
call fcn.00401810
sub esp, 0x18
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x54c]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm0, dword [ebp - 0x8a4]
movss xmm2, dword [ebp - 0x8a8]
movss xmm1, dword [ebp - 0x8ac]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x1314]
push dword [ebp - 0x838]
call fcn.00401810
lea eax, [ebp - 0x12ec]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x1364]
push eax
lea ecx, [ebp - 0xfd4]
call fcn.0040f780
lea ecx, [ebp - 0x9ad]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x4c]
push dword [esi]
call fcn.0040fc40
push 0x40f6f0
mov byte [ebp - 4], 0x41
push 3
push 0x28
lea eax, [ebp - 0x1364]
push eax
call fcn.004110bb
movss xmm3, dword [ebp - 0x150]
lea ecx, [ebp - 0x750]
movss xmm2, dword [ebp - 0x14c]
movss xmm1, dword [ebp - 0x134]
call fcn.004016b0
movss xmm0, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x4c]
movss dword [ebp - 0x954], xmm0
mov byte [ebp - 0x96f], 0
mov dword [ebp - 0x964], 0
call fcn.0040fba0
test eax, eax
je 0x406719
mov ecx, dword [ebp - 0x964]
sub esp, 0x28
mov esi, esp
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
push eax
mov ecx, esi
call fcn.0040f740
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
call fcn.00410ba0
add esp, 0x18
movss dword [ebp - 0x950], xmm0
mov ecx, esp
push str.B_STAND_JUMPSHOT_PULLUP
call fcn.00410160
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
push esi
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x965], al
push str.B_STAND_JUMPSHOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
push str.B_SHOOTPASS
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x971], al
push str.B_STAND_FADEAWAY
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x973], al
push str.B_RUN_JUMPSHOT_DRIFT_R
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x955], al
push str.B_RUN_JUMPSHOT_DRIFT_L
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x966], al
push str.B_RUN_LAYUP
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
push str.B_RUN_DCLUTCH
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x972], al
push str.B_POST_TURN_FADEAWAY_L
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96d], al
push str.B_POST_TURN_FADEAWAY_R
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x968], al
push str.B_POST_JUMPSHOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x967], al
push str.TURN_BACK_SHOOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x956], al
push str.TURN_FRONT_SHOOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96e], al
push str.B_STAND_HOOK
call fcn.00410160
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
add eax, 0x10
mov ecx, eax
call fcn.004018e0
mov dl, byte [ebp - 0x965]
add esp, 0x18
mov byte [ebp - 0x970], al
test dl, dl
je 0x4060b0
mov esi, 0x78
jmp 0x4060fc
test al, al
je 0x4060bb
mov esi, 0x50
jmp 0x4060fc
cmp byte [ebp - 0x973], 0
je 0x4060cb
mov esi, 0x6e
jmp 0x4060fc
cmp byte [ebp - 0x956], 0
jne 0x4060f7
cmp byte [ebp - 0x96e], 0
jne 0x4060f7
cmp byte [ebp - 0x967], 0
je 0x4060ed
mov esi, 0x6e
jmp 0x4060fc
cvttss2si esi, dword [ebp - 0x2b0]
jmp 0x4060fc
mov esi, 0x73
movss xmm0, dword [ebp - 0x954]
comiss xmm0, dword [ebp - 0x950]
jb 0x4061f9
mov ecx, dword [ebp - 0x964]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
cmp dword [eax + 0xc], 1
jne 0x4061f3
push dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
call fcn.0040fb80
push dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040fb80
movss xmm3, dword [0x414064]
xorps xmm2, xmm2
subss xmm3, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm2, xmm0
movss dword [ebp - 0x96c], xmm0
movaps xmm1, xmm3
movss dword [ebp - 0x984], xmm3
mulss xmm1, xmm3
movaps xmm0, xmm2
movss dword [ebp - 0x988], xmm2
mulss xmm0, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm1, dword [ebp - 0x984]
movss xmm2, dword [ebp - 0x988]
divss xmm1, xmm0
mov dl, byte [ebp - 0x965]
mov byte [ebp - 0x96f], 1
divss xmm2, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm1, dword [ebp - 0x950]
addss xmm2, dword [ebp - 0x96c]
movss dword [ebp - 0x984], xmm1
movss dword [ebp - 0x988], xmm2
jmp 0x406209
mov dl, byte [ebp - 0x965]
movss xmm2, dword [ebp - 0x988]
movss xmm1, dword [ebp - 0x984]
mov cl, byte [ebp - 0x973]
mov dh, byte [ebp - 0x972]
mov ch, byte [ebp - 0x967]
test dl, dl
je 0x406226
mov eax, 0x104
jmp 0x40624b
test cl, cl
je 0x406231
mov eax, 0x13b
jmp 0x40624b
test dh, dh
je 0x40623c
mov eax, 0x122
jmp 0x40624b
test ch, ch
mov eax, 0x57
mov esi, 0xa7
cmovne eax, esi
cmp byte [ebp - 0x96f], 0
je 0x4066eb
cmp byte [0x416661], 0
jne 0x4066eb
cmp byte [ebp - 0x955], 0
je 0x40635f
push 0x18b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
push esi
call fcn.0040fb80
push esi
lea ecx, [ebp - 0x4c]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040fb80
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x95c], xmm0
movss dword [ebp - 0x96c], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x960], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm4, dword [ebp - 0x960]
mov ecx, edi
movss xmm1, dword [ebp - 0x96c]
divss xmm4, xmm0
divss xmm1, xmm0
movss xmm5, dword [ebp - 0x950]
movaps xmm3, xmm4
xorps xmm3, xmmword [0x4140b0]
movaps xmm0, xmm1
mulss xmm3, dword [0x413fbc]
mulss xmm0, dword [0x413fbc]
movss xmm2, dword [ebp - 0x95c]
addss xmm5, xmm3
mulss xmm1, dword [0x413fd8]
mulss xmm4, dword [0x413fd8]
addss xmm2, xmm0
addss xmm1, xmm5
addss xmm2, xmm4
call fcn.00401310
push 0x32
jmp 0x4066d9
cmp byte [ebp - 0x966], 0
je 0x406451
push 0x18b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
push esi
call fcn.0040fb80
push esi
lea ecx, [ebp - 0x4c]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040fb80
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x95c], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x960], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm3, dword [ebp - 0x95c]
mov ecx, edi
movss xmm4, dword [ebp - 0x960]
divss xmm3, xmm0
divss xmm4, xmm0
movaps xmm2, xmm3
mulss xmm3, dword [0x413fd8]
xorps xmm2, xmmword [0x4140b0]
movaps xmm1, xmm4
mulss xmm1, dword [0x413fbc]
mulss xmm2, dword [0x413fbc]
addss xmm1, dword [ebp - 0x950]
mulss xmm4, dword [0x413fd8]
addss xmm2, dword [ebp - 0x96c]
addss xmm1, xmm3
addss xmm2, xmm4
call fcn.00401310
push 0x32
jmp 0x4066d9
test dl, dl
je 0x40647e
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call esi
movss xmm2, dword [ebp - 0x988]
mov ecx, edi
movss xmm1, dword [ebp - 0x984]
call fcn.00401310
push 0x64
call esi
jmp 0x4066df
test cl, cl
je 0x4064ab
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call esi
movss xmm2, dword [ebp - 0x988]
mov ecx, edi
movss xmm1, dword [ebp - 0x984]
call fcn.00401310
push 0x23
call esi
jmp 0x4066df
cmp byte [ebp - 0x968], 0
je 0x40659d
push 0x27b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
push esi
call fcn.0040fb80
push esi
lea ecx, [ebp - 0x4c]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040fb80
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x95c], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x960], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm4, dword [ebp - 0x960]
movss xmm3, dword [ebp - 0x95c]
divss xmm4, xmm0
divss xmm3, xmm0
movaps xmm1, xmm4
xorps xmm1, xmmword [0x4140b0]
movaps xmm2, xmm3
mulss xmm1, dword [0x413fac]
mov ecx, edi
mulss xmm2, dword [0x413fac]
addss xmm1, dword [ebp - 0x950]
mulss xmm3, dword [0x41407c]
addss xmm2, dword [ebp - 0x96c]
mulss xmm4, dword [0x41407c]
addss xmm1, xmm3
addss xmm2, xmm4
call fcn.00401310
push 0x28
jmp 0x4066d9
cmp byte [ebp - 0x96d], 0
je 0x40664e
push 0x27b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
push esi
call fcn.0040fb80
push esi
lea ecx, [ebp - 0x4c]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040fb80
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x95c], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x960], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm3, dword [ebp - 0x95c]
movss xmm4, dword [ebp - 0x960]
divss xmm3, xmm0
divss xmm4, xmm0
movaps xmm2, xmm3
xorps xmm2, xmmword [0x4140b0]
movaps xmm1, xmm4
jmp 0x406557
test ch, ch
je 0x40667d
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call esi
movss xmm2, dword [ebp - 0x988]
mov ecx, edi
movss xmm1, dword [ebp - 0x984]
call fcn.00401310
push 0x28
call esi
call fcn.00401cd0
jmp 0x4066e4
test dh, dh
je 0x4066a7
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call esi
movss xmm2, dword [ebp - 0x988]
mov ecx, edi
movss xmm1, dword [ebp - 0x984]
call fcn.00401310
push 0xa
call esi
jmp 0x4066df
cmp byte [ebp - 0x970], 0
jne 0x4066d0
cmp byte [ebp - 0x956], 0
jne 0x4066d0
cmp byte [ebp - 0x96e], 0
jne 0x4066d0
cmp byte [ebp - 0x971], 0
jne 0x4066e4
jmp 0x406482
mov ecx, edi
call fcn.00401310
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401b80
mov byte [0x416661], 1
inc dword [ebp - 0x964]
lea ecx, [ebp - 0x4c]
call fcn.0040fba0
mov ecx, dword [ebp - 0x964]
cmp ecx, eax
jb 0x405e84
cmp byte [ebp - 0x96f], 0
je 0x406719
cmp byte [0x416661], 0
jne 0x406720
mov byte [0x416661], 0
lea ecx, [ebp - 0x4c]
call fcn.0040fbc0
lea ecx, [ebp - 0x54c]
call fcn.00410090
lea ecx, [ebp - 0x564]
call fcn.00410090
lea ecx, [ebp - 0x57c]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp byte [ebp - 0x97f], 0
je 0x4075a9
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x406785
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x4067f3
push 0
push 4
lea eax, [ebp - 0x130]
mov dword [ebp - 0x130], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413edc
jl 0x406861
push 0
push 4
lea eax, [ebp - 0x8bc]
mov dword [ebp - 0x8bc], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f28
jl 0x4068d0
push 0
push 4
lea eax, [ebp - 0x8b8]
mov dword [ebp - 0x8b8], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416534
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d74
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416534]
push 0
push 4
push 0x416534
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d84
jl 0x406940
push 0
push 4
lea eax, [ebp - 0x8b4]
mov dword [ebp - 0x8b4], 0
push eax
mov eax, dword [0x416534]
add eax, 0xa8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x4069b0
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x5c4]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x42
mov eax, dword [0x416494]
push 0x416510
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e30
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416510]
push 0
push 4
push 0x416510
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e3c
jl 0x406a30
push 0
push 4
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x8b0], 0
push eax
mov eax, dword [0x416510]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ef0
jl 0x406aa0
push 0
push 4
lea eax, [ebp - 0x8cc]
mov dword [ebp - 0x8cc], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413eb4
jl 0x406b10
push 0
push 4
lea eax, [ebp - 0x8c8]
mov dword [ebp - 0x8c8], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41658c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f2c
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x41658c]
push 0
push 4
push 0x41658c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f3c
jl 0x406b80
push 0
push 4
lea eax, [ebp - 0x8c4]
mov dword [ebp - 0x8c4], 0
push eax
mov eax, dword [0x41658c]
add eax, 0xa8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x406bf0
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x5ac]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x43
mov eax, dword [0x416494]
push 0x416530
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e40
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416530]
push 0
push 4
push 0x416530
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e4c
jl 0x406c70
push 0
push 4
lea eax, [ebp - 0x8c0]
mov dword [ebp - 0x8c0], 0
push eax
mov eax, dword [0x416530]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d60
jl 0x406ce0
push 0
push 4
lea eax, [ebp - 0x8dc]
mov dword [ebp - 0x8dc], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f50
jl 0x406d50
push 0
push 4
lea eax, [ebp - 0x8d8]
mov dword [ebp - 0x8d8], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e08
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a8]
push 0
push 4
push 0x4165a8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e18
jl 0x406dc0
push 0
push 4
lea eax, [ebp - 0x8d4]
mov dword [ebp - 0x8d4], 0
push eax
mov eax, dword [0x4165a8]
add eax, 0xa8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x406e30
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x594]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x44
mov eax, dword [0x416494]
push 0x41659c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e70
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x41659c]
push 0
push 4
push 0x41659c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e7c
jl 0x406eb0
push 0
push 4
lea eax, [ebp - 0x8d0]
mov dword [ebp - 0x8d0], 0
push eax
mov eax, dword [0x41659c]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e50
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d4]
push 0
push 4
push 0x4165d4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e5c
jl 0x406f20
push 0
push 4
lea eax, [ebp - 0x1d4]
mov dword [ebp - 0x1d4], 0
push eax
mov eax, dword [0x4165d4]
add eax, 0x14
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e80
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a4]
push 0
push 4
push 0x4165a4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e8c
jl 0x406f90
push 0
push 4
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x1d0], 0
push eax
mov eax, dword [0x4165a4]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416598
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413d88
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416598]
push 0
push 4
push 0x416598
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d94
jl 0x407000
push 0
push 4
lea eax, [ebp - 0x1cc]
mov dword [ebp - 0x1cc], 0
push eax
mov eax, dword [0x416598]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x130]
lea ecx, [ebp - 0x3c0]
movss xmm1, dword [ebp - 0x12c]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x68]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x5c4]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm0, dword [ebp - 0x8b0]
movss xmm2, dword [ebp - 0x8b8]
movss xmm1, dword [ebp - 0x8bc]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x13dc]
push dword [ebp - 0x8b4]
call fcn.00401810
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x5ac]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm0, dword [ebp - 0x8c0]
movss xmm2, dword [ebp - 0x8c8]
movss xmm1, dword [ebp - 0x8cc]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x13b4]
push dword [ebp - 0x8c4]
call fcn.00401810
sub esp, 0x18
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x594]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm0, dword [ebp - 0x8d0]
movss xmm2, dword [ebp - 0x8d8]
movss xmm1, dword [ebp - 0x8dc]
push ecx
movss dword [esp], xmm0
lea ecx, [ebp - 0x138c]
push dword [ebp - 0x8d4]
call fcn.00401810
lea eax, [ebp - 0x1364]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x13dc]
push eax
lea ecx, [ebp - 0xfdc]
call fcn.0040f780
lea ecx, [ebp - 0x9ae]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x68]
push dword [esi]
call fcn.0040fc40
push 0x40f6f0
mov byte [ebp - 4], 0x49
push 3
push 0x28
lea eax, [ebp - 0x13dc]
push eax
call fcn.004110bb
movss xmm3, dword [ebp - 0x1cc]
lea ecx, [ebp - 0x75c]
movss xmm2, dword [ebp - 0x1d0]
movss xmm1, dword [ebp - 0x1d4]
call fcn.004016b0
movss xmm0, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x68]
movss dword [ebp - 0x95c], xmm0
mov byte [ebp - 0x96f], 0
mov dword [ebp - 0x96c], 0
call fcn.0040fba0
test eax, eax
je 0x407572
nop
sub esp, 0x28
lea ecx, [ebp - 0x68]
mov esi, esp
push dword [ebp - 0x96c]
call fcn.0040fb80
push eax
mov ecx, esi
call fcn.0040f740
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
call fcn.00410ba0
add esp, 0x18
movss dword [ebp - 0x960], xmm0
mov ecx, esp
push str.B_RUN_SCOOPSHOT
call fcn.00410160
mov esi, dword [ebp - 0x96c]
lea ecx, [ebp - 0x68]
push esi
call fcn.0040fb80
lea ecx, [eax + 0x10]
call fcn.004018e0
movss xmm0, dword [ebp - 0x95c]
add esp, 0x18
comiss xmm0, dword [ebp - 0x960]
mov byte [ebp - 0x955], al
jb 0x407275
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
cmp dword [eax + 0xc], 1
jne 0x407275
cmp byte [ebp - 0x955], 0
je 0x407275
mov byte [ebp - 0x96f], 1
jmp 0x407282
cmp byte [ebp - 0x96f], 0
je 0x407549
cmp byte [0x41665d], 0
jne 0x407549
push 0x12e
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
push esi
lea ecx, [ebp - 0x68]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040fb80
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.00401530
lea ecx, [ebp - 0x68]
push esi
test al, al
je 0x407382
call fcn.0040fb80
movss xmm1, dword [0x413fcc]
movss xmm0, dword [0x413fc0]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40730e
movss xmm2, dword [0x414090]
movss xmm1, dword [0x41405c]
jmp 0x407536
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
movss xmm1, dword [0x413fb0]
movss xmm0, dword [0x413f9c]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40734a
movss xmm2, dword [0x414084]
movss xmm1, dword [0x414058]
jmp 0x407536
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
movss xmm1, dword [0x413f94]
movss xmm0, dword [0x414074]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40753d
movss xmm2, dword [0x414070]
jmp 0x40752e
call fcn.0040fb80
push esi
lea ecx, [ebp - 0x68]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040fb80
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.00401570
lea ecx, [ebp - 0x68]
push esi
test al, al
je 0x407459
call fcn.0040fb80
movss xmm1, dword [0x413fe4]
movss xmm0, dword [0x413fdc]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
jne 0x407444
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
movss xmm1, dword [0x413fb0]
movss xmm0, dword [0x413f9c]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x407419
movss xmm2, dword [0x413fcc]
movss xmm1, dword [0x414050]
jmp 0x407536
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
movss xmm1, dword [0x413fcc]
movss xmm0, dword [0x413fc0]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40753d
movss xmm2, dword [0x414088]
movss xmm1, dword [0x41404c]
jmp 0x407536
call fcn.0040fb80
push esi
lea ecx, [ebp - 0x68]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040fb80
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.00401550
test al, al
je 0x40753d
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
movss xmm1, dword [0x413fcc]
movss xmm0, dword [0x413fc0]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x4074c6
movss xmm2, dword [0x413fd4]
movss xmm1, dword [0x41405c]
jmp 0x407536
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
movss xmm1, dword [0x413fe4]
movss xmm0, dword [0x413fdc]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x4074ff
movss xmm2, dword [0x413fc4]
movss xmm1, dword [0x414058]
jmp 0x407536
push esi
lea ecx, [ebp - 0x68]
call fcn.0040fb80
movss xmm1, dword [0x413ff8]
movss xmm0, dword [0x413fec]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40753d
movss xmm2, dword [0x413f90]
movss xmm1, dword [0x414048]
mov ecx, edi
call fcn.00401310
call fcn.00401b80
mov byte [0x41665d], 1
inc esi
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x96c], esi
call fcn.0040fba0
cmp esi, eax
jb 0x4071e0
cmp byte [ebp - 0x96f], 0
je 0x407572
cmp byte [0x41665d], 0
jne 0x407579
mov byte [0x41665d], 0
lea ecx, [ebp - 0x68]
call fcn.0040fbc0
lea ecx, [ebp - 0x594]
call fcn.00410090
lea ecx, [ebp - 0x5ac]
call fcn.00410090
lea ecx, [ebp - 0x5c4]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9e0], 0x79
jne 0x4084d1
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x4075e0
push 0
push 4
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x407650
push 0
push 4
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413edc
jl 0x4076c0
push 0
push 4
lea eax, [ebp - 0x8e8]
mov dword [ebp - 0x8e8], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f28
jl 0x407730
push 0
push 4
lea eax, [ebp - 0x8e4]
mov dword [ebp - 0x8e4], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f04
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c0]
push 0
push 4
push 0x4165c0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f14
jl 0x4077a0
push 0
push 4
lea eax, [ebp - 0x33c]
mov dword [ebp - 0x33c], 0
push eax
mov eax, dword [0x4165c0]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x407810
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x60c]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x4a
mov eax, dword [0x416494]
push 0x416510
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e30
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416510]
push 0
push 4
push 0x416510
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e3c
jl 0x407890
push 0
push 4
lea eax, [ebp - 0x8e0]
mov dword [ebp - 0x8e0], 0
push eax
mov eax, dword [0x416510]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ef0
jl 0x407900
push 0
push 4
lea eax, [ebp - 0x8f4]
mov dword [ebp - 0x8f4], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413eb4
jl 0x407970
push 0
push 4
lea eax, [ebp - 0x8f0]
mov dword [ebp - 0x8f0], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416468
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d3c
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416468]
push 0
push 4
push 0x416468
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d4c
jl 0x4079e0
push 0
push 4
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e0], 0
push eax
mov eax, dword [0x416468]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x407a50
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x5f4]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x4b
mov eax, dword [0x416494]
push 0x416530
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e40
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416530]
push 0
push 4
push 0x416530
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e4c
jl 0x407ad0
push 0
push 4
lea eax, [ebp - 0x8ec]
mov dword [ebp - 0x8ec], 0
push eax
mov eax, dword [0x416530]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d60
jl 0x407b40
push 0
push 4
lea eax, [ebp - 0x900]
mov dword [ebp - 0x900], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f50
jl 0x407bb0
push 0
push 4
lea eax, [ebp - 0x8fc]
mov dword [ebp - 0x8fc], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416584
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ddc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416584]
push 0
push 4
push 0x416584
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dec
jl 0x407c20
push 0
push 4
lea eax, [ebp - 0x2b8]
mov dword [ebp - 0x2b8], 0
push eax
mov eax, dword [0x416584]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x407c90
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x5dc]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x4c
mov eax, dword [0x416494]
push 0x41659c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e70
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x41659c]
push 0
push 4
push 0x41659c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e7c
jl 0x407d10
push 0
push 4
lea eax, [ebp - 0x8f8]
mov dword [ebp - 0x8f8], 0
push eax
mov eax, dword [0x41659c]
add eax, 0x64
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x380]
movss xmm1, dword [ebp - 0x1e0]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x40]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x60c]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm3, dword [ebp - 0x8e0]
lea ecx, [ebp - 0x11a8]
movss xmm2, dword [ebp - 0x8e4]
movss xmm1, dword [ebp - 0x8e8]
call fcn.00401770
sub esp, 0x18
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x5f4]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm3, dword [ebp - 0x8ec]
lea ecx, [ebp - 0x1184]
movss xmm2, dword [ebp - 0x8f0]
movss xmm1, dword [ebp - 0x8f4]
call fcn.00401770
sub esp, 0x18
mov byte [ebp - 4], 0x4e
lea eax, [ebp - 0x5dc]
mov ecx, esp
push eax
call fcn.004101a0
movss xmm3, dword [ebp - 0x8f8]
lea ecx, [ebp - 0x1160]
movss xmm2, dword [ebp - 0x8fc]
movss xmm1, dword [ebp - 0x900]
call fcn.00401770
lea eax, [ebp - 0x113c]
mov byte [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x11a8]
push eax
lea ecx, [ebp - 0xfe4]
call fcn.0040f780
lea ecx, [ebp - 0x9af]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x40]
push dword [esi]
call fcn.0040fa10
push 0x40f640
push 3
push 0x24
lea eax, [ebp - 0x11a8]
mov byte [ebp - 4], 0x51
push eax
call fcn.004110bb
movss xmm1, dword [0x414064]
lea ecx, [ebp - 0x43c]
xorps xmm2, xmm2
call fcn.004016a0
movss xmm0, dword [ebp - 0x2b4]
lea ecx, [ebp - 0x40]
movss dword [ebp - 0x95c], xmm0
mov byte [ebp - 0x998], 0
mov dword [ebp - 0x96c], 0
call fcn.0040f970
test eax, eax
je 0x40849a
nop dword [eax]
sub esp, 0x24
lea ecx, [ebp - 0x40]
mov esi, esp
push dword [ebp - 0x96c]
call fcn.0040f950
push eax
mov ecx, esi
call fcn.0040f6b0
push dword [ebp - 0x37c]
push dword [ebp - 0x380]
call fcn.00410a10
add esp, 0x14
movss dword [ebp - 0x960], xmm0
mov ecx, esp
push str.DUNK
call fcn.00410160
mov esi, dword [ebp - 0x96c]
lea ecx, [ebp - 0x40]
push esi
call fcn.0040f950
add eax, 0xc
mov ecx, eax
call fcn.004018e0
movss xmm0, dword [ebp - 0x95c]
add esp, 0x18
comiss xmm0, dword [ebp - 0x960]
jb 0x407f49
mov ecx, dword [ebp - 0x998]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x998], ecx
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.004014a0
test al, al
jne 0x408019
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.00401500
test al, al
jne 0x408019
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.004014d0
test al, al
jne 0x408019
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.00401590
cmp byte [ebp - 0x998], 0
je 0x408471
cmp byte [0x416660], 0
jne 0x408471
push 0xaf
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.004014a0
lea ecx, [ebp - 0x40]
push esi
test al, al
je 0x40810c
call fcn.0040f950
movss xmm1, dword [0x413fcc]
movss xmm0, dword [0x413fc0]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x4080b2
movss xmm2, dword [0x41409c]
movss xmm1, dword [0x41405c]
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413fb0]
movss xmm0, dword [0x413f9c]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x4080ee
movss xmm2, dword [0x414084]
movss xmm1, dword [0x414054]
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413f94]
movss xmm0, dword [0x414074]
jmp 0x40843d
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.00401500
lea ecx, [ebp - 0x40]
push esi
test al, al
je 0x4081e8
call fcn.0040f950
movss xmm1, dword [0x413fe4]
movss xmm0, dword [0x413fdc]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x408174
movss xmm2, dword [0x414080]
jmp 0x40844e
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413fb0]
movss xmm0, dword [0x413f9c]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x4081a8
movss xmm2, dword [0x413fb8]
jmp 0x40844e
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413fcc]
movss xmm0, dword [0x413fc0]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40845d
movss xmm2, dword [0x414070]
movss xmm1, dword [0x414048]
jmp 0x408456
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.00401590
lea ecx, [ebp - 0x40]
push esi
test al, al
je 0x40837e
call fcn.0040f950
movss xmm1, dword [0x413fe4]
movss xmm0, dword [0x413fdc]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x408258
movss xmm2, dword [0x414078]
movss xmm1, dword [0x414060]
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413fb0]
movss xmm0, dword [0x413f9c]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x408294
movss xmm2, dword [0x413fac]
movss xmm1, dword [0x414060]
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413fcc]
movss xmm0, dword [0x413fc0]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x4082cb
movss xmm1, dword [0x414060]
xorps xmm2, xmm2
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x414030]
movss xmm0, dword [0x414028]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x408307
movss xmm2, dword [0x414078]
movss xmm1, dword [0x414068]
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x41401c]
movss xmm0, dword [0x414010]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40833e
movss xmm1, dword [0x414068]
xorps xmm2, xmm2
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x41400c]
movss xmm0, dword [0x414004]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40845d
movss xmm2, dword [0x413fac]
movss xmm1, dword [0x414068]
jmp 0x408456
call fcn.0040f950
push esi
lea ecx, [ebp - 0x40]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x960], xmm0
call fcn.0040f950
movss xmm1, dword [ebp - 0x960]
movss xmm0, dword [eax]
call fcn.004014d0
test al, al
je 0x40845d
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413fcc]
movss xmm0, dword [0x413fc0]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x4083eb
movss xmm2, dword [0x413ffc]
movss xmm1, dword [0x41405c]
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413fe4]
movss xmm0, dword [0x413fdc]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x408424
movss xmm2, dword [0x413fc4]
movss xmm1, dword [0x414054]
jmp 0x408456
push esi
lea ecx, [ebp - 0x40]
call fcn.0040f950
movss xmm1, dword [0x413ff8]
movss xmm0, dword [0x413fec]
movss xmm2, dword [eax + 8]
call fcn.004015c0
test al, al
je 0x40845d
xorps xmm2, xmm2
movss xmm1, dword [0x414050]
mov ecx, edi
call fcn.00401310
push 0x19
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401b80
mov byte [0x416660], 1
inc esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x96c], esi
call fcn.0040f970
cmp esi, eax
jb 0x407ec0
cmp byte [ebp - 0x998], 0
je 0x40849a
cmp byte [0x416660], 0
jne 0x4084a1
mov byte [0x416660], 0
lea ecx, [ebp - 0x40]
call fcn.0040f990
lea ecx, [ebp - 0x5dc]
call fcn.00410090
lea ecx, [ebp - 0x5f4]
call fcn.00410090
lea ecx, [ebp - 0x60c]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9b8], 0x79
je 0x40a759
cmp dword [ebp - 0xa4c], 0x79
je 0x409bc3
cmp dword [ebp - 0x9dc], 0x79
jne 0x40a759
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x408520
push 0
push 4
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x20c], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x408590
push 0
push 4
lea eax, [ebp - 0x208]
mov dword [ebp - 0x208], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413edc
jl 0x408600
push 0
push 4
lea eax, [ebp - 0x90c]
mov dword [ebp - 0x90c], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f28
jl 0x408670
push 0
push 4
lea eax, [ebp - 0x908]
mov dword [ebp - 0x908], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f04
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c0]
push 0
push 4
push 0x4165c0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f14
jl 0x4086e0
push 0
push 4
lea eax, [ebp - 0x904]
mov dword [ebp - 0x904], 0
push eax
mov eax, dword [0x4165c0]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x408750
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x654]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x52
mov eax, dword [0x416494]
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ef0
jl 0x4087d0
push 0
push 4
lea eax, [ebp - 0x918]
mov dword [ebp - 0x918], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413eb4
jl 0x408840
push 0
push 4
lea eax, [ebp - 0x914]
mov dword [ebp - 0x914], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416468
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d3c
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416468]
push 0
push 4
push 0x416468
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d4c
jl 0x4088b0
push 0
push 4
lea eax, [ebp - 0x910]
mov dword [ebp - 0x910], 0
push eax
mov eax, dword [0x416468]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x408920
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x63c]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x53
mov eax, dword [0x416494]
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d60
jl 0x4089a0
push 0
push 4
lea eax, [ebp - 0x924]
mov dword [ebp - 0x924], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f50
jl 0x408a10
push 0
push 4
lea eax, [ebp - 0x920]
mov dword [ebp - 0x920], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416584
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ddc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416584]
push 0
push 4
push 0x416584
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dec
jl 0x408a80
push 0
push 4
lea eax, [ebp - 0x91c]
mov dword [ebp - 0x91c], 0
push eax
mov eax, dword [0x416584]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x408af0
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x624]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x54
mov eax, dword [0x416494]
push 0x4165d4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e50
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165d4]
push 0
push 4
push 0x4165d4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e5c
jl 0x408b70
push 0
push 4
lea eax, [ebp - 0x144]
mov dword [ebp - 0x144], 0
push eax
mov eax, dword [0x4165d4]
add eax, 0x14
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a4
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413e80
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a4]
push 0
push 4
push 0x4165a4
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413e8c
jl 0x408be0
push 0
push 4
lea eax, [ebp - 0x140]
mov dword [ebp - 0x140], 0
push eax
mov eax, dword [0x4165a4]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416598
add eax, 0xb550ac
push eax
push edi
call esi
mov eax, 0x413d88
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416598]
push 0
push 4
push 0x416598
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d94
jl 0x408c50
push 0
push 4
lea eax, [ebp - 0x234]
mov dword [ebp - 0x234], 0
push eax
mov eax, dword [0x416598]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x208]
lea ecx, [ebp - 0x388]
movss xmm1, dword [ebp - 0x20c]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x34]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x654]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x904]
movss xmm2, dword [ebp - 0x908]
lea ecx, [ebp - 0x1214]
movss xmm1, dword [ebp - 0x90c]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x63c]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x910]
movss xmm2, dword [ebp - 0x914]
lea ecx, [ebp - 0x11f0]
movss xmm1, dword [ebp - 0x918]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x624]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x91c]
movss xmm2, dword [ebp - 0x920]
lea ecx, [ebp - 0x11cc]
movss xmm1, dword [ebp - 0x924]
call fcn.004016d0
lea eax, [ebp - 0x11a8]
mov byte [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x1214]
push eax
lea ecx, [ebp - 0xfec]
call fcn.0040f780
lea ecx, [ebp - 0x9b0]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x34]
push dword [esi]
call fcn.0040fa10
push 0x40f640
push 3
push 0x24
lea eax, [ebp - 0x1214]
mov byte [ebp - 4], 0x59
push eax
call fcn.004110bb
movss xmm3, dword [ebp - 0x234]
lea ecx, [ebp - 0x768]
movss xmm2, dword [ebp - 0x140]
movss xmm1, dword [ebp - 0x144]
call fcn.004016b0
movss xmm0, dword [ebp - 0x2ac]
lea ecx, [ebp - 0x34]
xor al, al
movss dword [ebp - 0x95c], xmm0
mov byte [ebp - 0x965], al
mov dword [ebp - 0x964], 0
call fcn.0040f970
test eax, eax
je 0x409b93
xor ecx, ecx
call fcn.004011c0
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000003
jns 0x408e25
dec eax
or eax, 0xfffffffc
inc eax
sub esp, 0x20
mov dword [ebp - 0x96c], eax
mov esi, esp
lea ecx, [ebp - 0x34]
push dword [ebp - 0x964]
call fcn.0040f950
push eax
mov ecx, esi
call fcn.0040f6b0
push dword [ebp - 0x384]
push dword [ebp - 0x388]
call fcn.00410a10
add esp, 0x14
movss dword [ebp - 0x960], xmm0
mov ecx, esp
push str.B_STAND_JUMPSHOT_PULLUP
call fcn.00410160
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96f], al
push str.B_STAND_JUMPSHOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
push str.B_SHOOTPASS
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x955], al
push str.B_STAND_FADEAWAY
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x971], al
push str.B_RUN_JUMPSHOT_DRIFT_R
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x972], al
push str.B_RUN_JUMPSHOT_DRIFT_L
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x967], al
push str.B_RUN_LAYUP
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
push str.B_RUN_SCOOPSHOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
push str.B_RUN_DCLUTCH
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x970], al
push str.B_POST_TURN_FADEAWAY_L
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x968], al
push str.B_POST_TURN_FADEAWAY_R
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96d], al
push str.B_POST_JUMPSHOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x973], al
push str.B_STAND_TURN_BACK_SHOOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96e], al
push str.B_STAND_TURN_FRONT_SHOOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x956], al
push str.B_STAND_HOOK
call fcn.00410160
push esi
lea ecx, [ebp - 0x34]
call fcn.0040f950
add eax, 0xc
mov ecx, eax
call fcn.004018e0
mov dh, byte [ebp - 0x96f]
add esp, 0x18
mov byte [ebp - 0x966], al
test dh, dh
je 0x409079
mov esi, 0x7d
jmp 0x4090da
test al, al
je 0x409084
mov esi, 0x50
jmp 0x4090da
cmp byte [ebp - 0x971], 0
je 0x409094
mov esi, 0x69
jmp 0x4090da
cmp byte [ebp - 0x96e], 0
jne 0x4090d5
cmp byte [ebp - 0x956], 0
jne 0x4090d5
cmp byte [ebp - 0x967], 0
jne 0x4090ce
cmp byte [ebp - 0x972], 0
jne 0x4090ce
cmp byte [ebp - 0x973], 0
mov esi, 0x87
mov eax, 0x6e
cmovne esi, eax
jmp 0x4090da
mov esi, 0x87
jmp 0x4090da
mov esi, 0x6e
movss xmm0, dword [ebp - 0x95c]
comiss xmm0, dword [ebp - 0x960]
jb 0x4091d7
push dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
call fcn.0040f950
cmp dword [eax + 8], 1
jne 0x4091d1
push dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
call fcn.0040f950
push dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x960], xmm0
movss dword [ebp - 0x97c], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x978], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm1, dword [ebp - 0x97c]
mov cl, 1
movss xmm2, dword [ebp - 0x978]
divss xmm1, xmm0
mov dh, byte [ebp - 0x96f]
mov byte [ebp - 0x965], cl
divss xmm2, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm1, dword [ebp - 0x950]
addss xmm2, dword [ebp - 0x960]
movss dword [ebp - 0x97c], xmm1
movss dword [ebp - 0x978], xmm2
jmp 0x4091ed
mov dh, byte [ebp - 0x96f]
mov cl, byte [ebp - 0x965]
movss xmm2, dword [ebp - 0x978]
movss xmm1, dword [ebp - 0x97c]
mov ch, byte [ebp - 0x971]
mov dl, byte [ebp - 0x967]
test dh, dh
je 0x409204
mov eax, 0xf5
jmp 0x409245
test ch, ch
je 0x40920f
mov eax, 0x131
jmp 0x409245
test dl, dl
jne 0x409240
cmp byte [ebp - 0x972], dl
jne 0x409240
cmp byte [ebp - 0x970], dl
je 0x40922a
mov eax, 0x11d
jmp 0x409245
cmp byte [ebp - 0x973], 0
mov eax, 0x4b
mov esi, 0x9b
cmovne eax, esi
jmp 0x409245
mov eax, 0x159
test cl, cl
je 0x409b67
mov cl, byte [0x41665e]
mov esi, dword [ebp - 0x96c]
test cl, cl
jne 0x409b67
cmp esi, 1
jl 0x4096e0
cmp byte [ebp - 0x972], cl
je 0x409366
push 0x186
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm4, dword [ebp - 0x954]
movss xmm3, dword [ebp - 0x960]
divss xmm4, xmm0
divss xmm3, xmm0
movaps xmm1, xmm4
xorps xmm1, xmmword [0x4140b0]
movaps xmm2, xmm3
mulss xmm1, dword [0x413fb4]
mov ecx, edi
mulss xmm2, dword [0x413fb4]
addss xmm1, dword [ebp - 0x950]
mulss xmm3, dword [0x413fdc]
addss xmm2, dword [ebp - 0x96c]
mulss xmm4, dword [0x413fdc]
addss xmm1, xmm3
addss xmm2, xmm4
call fcn.00401310
push 0x28
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401cd0
jmp 0x409b60
test dl, dl
je 0x409412
push 0x186
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm3, dword [ebp - 0x960]
movss xmm4, dword [ebp - 0x954]
divss xmm3, xmm0
divss xmm4, xmm0
movaps xmm2, xmm3
xorps xmm2, xmmword [0x4140b0]
movaps xmm1, xmm4
jmp 0x409315
test dh, dh
je 0x409448
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x91
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0x64
call esi
call fcn.00401cd0
jmp 0x409b60
cmp byte [ebp - 0x970], 0
je 0x409483
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x10e
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0xa
call esi
call fcn.00401cd0
jmp 0x409b60
test ch, ch
je 0x4094b5
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0x23
call esi
call fcn.00401cd0
jmp 0x409b60
cmp byte [ebp - 0x96d], 0
je 0x4095b2
push 0x26c
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm4, dword [ebp - 0x954]
movss xmm3, dword [ebp - 0x960]
divss xmm4, xmm0
divss xmm3, xmm0
movaps xmm1, xmm4
xorps xmm1, xmmword [0x4140b0]
movaps xmm2, xmm3
mulss xmm1, dword [0x413fac]
mov ecx, edi
mulss xmm2, dword [0x413fac]
addss xmm1, dword [ebp - 0x950]
mulss xmm3, dword [0x41407c]
addss xmm2, dword [ebp - 0x96c]
mulss xmm4, dword [0x41407c]
addss xmm1, xmm3
addss xmm2, xmm4
call fcn.00401310
push 0x23
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401cd0
jmp 0x409b60
cmp byte [ebp - 0x968], 0
je 0x409663
push 0x26c
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm3, dword [ebp - 0x960]
movss xmm4, dword [ebp - 0x954]
divss xmm3, xmm0
divss xmm4, xmm0
movaps xmm2, xmm3
xorps xmm2, xmmword [0x4140b0]
movaps xmm1, xmm4
jmp 0x409561
cmp byte [ebp - 0x973], 0
jne 0x409487
cmp byte [ebp - 0x96e], 0
jne 0x40968b
cmp byte [ebp - 0x956], 0
jne 0x40968b
cmp byte [ebp - 0x966], 0
je 0x4096a4
mov ecx, edi
call fcn.00401310
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401cd0
jmp 0x409b60
cmp byte [ebp - 0x955], 0
jne 0x409b60
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x14
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0x46
call esi
call fcn.00401cd0
jmp 0x409b60
test cl, cl
jne 0x409b67
cmp esi, 1
jge 0x409b67
cmp byte [ebp - 0x972], cl
je 0x4097e2
push 0x18b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm4, dword [ebp - 0x954]
movss xmm3, dword [ebp - 0x960]
divss xmm4, xmm0
divss xmm3, xmm0
movaps xmm1, xmm4
xorps xmm1, xmmword [0x4140b0]
movaps xmm2, xmm3
mulss xmm1, dword [0x413fbc]
mov ecx, edi
mulss xmm2, dword [0x413fbc]
addss xmm1, dword [ebp - 0x950]
mulss xmm3, dword [0x413fd8]
addss xmm2, dword [ebp - 0x96c]
mulss xmm4, dword [0x413fd8]
addss xmm1, xmm3
addss xmm2, xmm4
call fcn.00401310
push 0x32
jmp 0x409b55
test dl, dl
je 0x40988e
push 0x18b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm3, dword [ebp - 0x960]
movss xmm4, dword [ebp - 0x954]
divss xmm3, xmm0
divss xmm4, xmm0
movaps xmm2, xmm3
xorps xmm2, xmmword [0x4140b0]
movaps xmm1, xmm4
jmp 0x40979c
test dh, dh
je 0x4098bf
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x104
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0x64
call esi
jmp 0x409b5b
test ch, ch
je 0x4098f0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x13b
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0x23
call esi
jmp 0x409b5b
cmp byte [ebp - 0x96d], 0
je 0x4099e2
push 0x27b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm4, dword [ebp - 0x954]
movss xmm3, dword [ebp - 0x960]
divss xmm4, xmm0
divss xmm3, xmm0
movaps xmm1, xmm4
xorps xmm1, xmmword [0x4140b0]
movaps xmm2, xmm3
mulss xmm1, dword [0x413fac]
mov ecx, edi
mulss xmm2, dword [0x413fac]
addss xmm1, dword [ebp - 0x950]
mulss xmm3, dword [0x41407c]
addss xmm2, dword [ebp - 0x96c]
mulss xmm4, dword [0x41407c]
addss xmm1, xmm3
addss xmm2, xmm4
call fcn.00401310
push 0x28
jmp 0x409b55
cmp byte [ebp - 0x968], 0
je 0x409a93
push 0x27b
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
push esi
call fcn.0040f950
push esi
lea ecx, [ebp - 0x34]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f950
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x950]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x96c], xmm0
movss dword [ebp - 0x960], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x954], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm3, dword [ebp - 0x960]
movss xmm4, dword [ebp - 0x954]
divss xmm3, xmm0
divss xmm4, xmm0
movaps xmm2, xmm3
xorps xmm2, xmmword [0x4140b0]
movaps xmm1, xmm4
jmp 0x40999c
cmp byte [ebp - 0x973], 0
je 0x409ace
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xa7
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0x28
call esi
call fcn.00401cd0
jmp 0x409b60
cmp byte [ebp - 0x970], 0
je 0x409b01
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x122
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0xa
call esi
jmp 0x409b5b
cmp byte [ebp - 0x96e], 0
jne 0x409b4c
cmp byte [ebp - 0x956], 0
jne 0x409b4c
cmp byte [ebp - 0x966], 0
jne 0x409b4c
cmp byte [ebp - 0x955], 0
jne 0x409b60
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x57
call esi
movss xmm2, dword [ebp - 0x978]
mov ecx, edi
movss xmm1, dword [ebp - 0x97c]
call fcn.00401310
push 0x23
call esi
jmp 0x409b5b
mov ecx, edi
call fcn.00401310
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401b80
mov byte [0x41665e], 1
inc dword [ebp - 0x964]
lea ecx, [ebp - 0x34]
call fcn.0040f970
cmp dword [ebp - 0x964], eax
jb 0x408e05
cmp byte [ebp - 0x965], 0
je 0x409b93
cmp byte [0x41665e], 0
jne 0x409b9a
mov byte [0x41665e], 0
lea ecx, [ebp - 0x34]
call fcn.0040f990
lea ecx, [ebp - 0x624]
call fcn.00410090
lea ecx, [ebp - 0x63c]
call fcn.00410090
lea ecx, [ebp - 0x654]
jmp 0x40a74d
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
movss xmm0, dword [ebp - 0x97c]
mov eax, 0x413f54
movss dword [ebp - 0x97c], xmm0
movss xmm0, dword [ebp - 0x978]
mov dword [ebp - 0x950], eax
movss dword [ebp - 0x978], xmm0
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f60
jl 0x409c10
push 0
push 4
lea eax, [ebp - 0xec]
mov dword [ebp - 0xec], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ea0
jl 0x409c80
push 0
push 4
lea eax, [ebp - 0x148]
mov dword [ebp - 0x148], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413edc
jl 0x409cf0
push 0
push 4
lea eax, [ebp - 0x930]
mov dword [ebp - 0x930], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f28
jl 0x409d60
push 0
push 4
lea eax, [ebp - 0x92c]
mov dword [ebp - 0x92c], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f04
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c0]
push 0
push 4
push 0x4165c0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f14
jl 0x409dd0
push 0
push 4
lea eax, [ebp - 0x928]
mov dword [ebp - 0x928], 0
push eax
mov eax, dword [0x4165c0]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dd8
jl 0x409e40
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x69c]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x5a
mov eax, dword [0x416494]
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413ef0
jl 0x409ec0
push 0
push 4
lea eax, [ebp - 0x93c]
mov dword [ebp - 0x93c], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413eb4
jl 0x409f30
push 0
push 4
lea eax, [ebp - 0x938]
mov dword [ebp - 0x938], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416468
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d3c
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416468]
push 0
push 4
push 0x416468
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d4c
jl 0x409fa0
push 0
push 4
lea eax, [ebp - 0x934]
mov dword [ebp - 0x934], 0
push eax
mov eax, dword [0x416468]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f7c
jl 0x40a010
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x684]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x5b
mov eax, dword [0x416494]
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x950], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413d60
jl 0x40a090
push 0
push 4
lea eax, [ebp - 0x948]
mov dword [ebp - 0x948], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413f50
jl 0x40a100
push 0
push 4
lea eax, [ebp - 0x944]
mov dword [ebp - 0x944], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416584
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ddc
mov dword [ebp - 0x950], eax
nop
mov eax, dword [eax]
add eax, dword [0x416584]
push 0
push 4
push 0x416584
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dec
jl 0x40a170
push 0
push 4
lea eax, [ebp - 0x940]
mov dword [ebp - 0x940], 0
push eax
mov eax, dword [0x416584]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x950], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x950]
add eax, 4
mov dword [ebp - 0x950], eax
cmp eax, 0x413dfc
jl 0x40a1e0
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x66c]
call fcn.00410160
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x3b0]
movss xmm2, dword [ebp - 0x148]
movss xmm1, dword [ebp - 0xec]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x84]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x69c]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x928]
movss xmm2, dword [ebp - 0x92c]
lea ecx, [ebp - 0x1280]
movss xmm1, dword [ebp - 0x930]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x5d
lea eax, [ebp - 0x684]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x934]
movss xmm2, dword [ebp - 0x938]
lea ecx, [ebp - 0x125c]
movss xmm1, dword [ebp - 0x93c]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x5e
lea eax, [ebp - 0x66c]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x940]
movss xmm2, dword [ebp - 0x944]
lea ecx, [ebp - 0x1238]
movss xmm1, dword [ebp - 0x948]
call fcn.004016d0
lea eax, [ebp - 0x1214]
mov byte [ebp - 4], 0x5f
push eax
lea eax, [ebp - 0x1280]
push eax
lea ecx, [ebp - 0xeb4]
call fcn.0040f780
lea ecx, [ebp - 0x9b1]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x84]
push dword [esi]
call fcn.0040fa10
push 0x40f640
push 3
push 0x24
lea eax, [ebp - 0x1280]
mov byte [ebp - 4], 0x61
push eax
call fcn.004110bb
xor al, al
mov dword [ebp - 0x964], eax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x950], 0
call fcn.0040f970
test eax, eax
je 0x40a71f
sub esp, 0x24
lea ecx, [ebp - 0x84]
mov esi, esp
push dword [ebp - 0x950]
call fcn.0040f950
push eax
mov ecx, esi
call fcn.0040f6b0
push dword [ebp - 0x3ac]
push dword [ebp - 0x3b0]
call fcn.00410a10
add esp, 0x14
movss dword [ebp - 0x95c], xmm0
mov ecx, esp
push str.B_STAND_JUMPSHOT_PULLUP
call fcn.00410160
mov esi, dword [ebp - 0x950]
lea ecx, [ebp - 0x84]
push esi
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x966], al
push str.B_STAND_FADEAWAY
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x968], al
push str.B_SHOOTPASS
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x971], al
push str.B_RUN_JUMPSHOT_DRIFT_R
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x956], al
push str.B_RUN_JUMPSHOT_DRIFT_L
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96d], al
push str.B_RUN_LAYUP
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x970], al
push str.B_RUN_DCLUTCH
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x965], al
push str.B_POST_TURN_FADEAWAY
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96e], al
push str.B_POST_JUMPSHOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
movss xmm0, dword [0x414004]
add esp, 0x18
comiss xmm0, dword [ebp - 0x95c]
mov cl, al
mov byte [ebp - 0x955], cl
jb 0x40a550
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
mov edx, dword [ebp - 0x964]
mov cl, byte [ebp - 0x955]
movzx edx, dl
cmp dword [eax + 8], 1
mov eax, 1
cmove edx, eax
mov dword [ebp - 0x964], edx
jmp 0x40a556
mov edx, dword [ebp - 0x964]
cmp byte [ebp - 0x966], 0
je 0x40a566
mov eax, 0x104
jmp 0x40a5be
cmp byte [ebp - 0x968], 0
je 0x40a576
mov eax, 0x12c
jmp 0x40a5be
cmp byte [ebp - 0x96d], 0
jne 0x40a5b9
cmp byte [ebp - 0x956], 0
jne 0x40a5b9
mov ch, byte [ebp - 0x965]
test ch, ch
je 0x40a599
mov eax, 0x154
jmp 0x40a5c4
cmp byte [ebp - 0x96e], 0
je 0x40a5a9
mov eax, 0x2bc
jmp 0x40a5c4
test cl, cl
mov eax, 0x6e
cmovne eax, dword [ebp - 0x9e4]
jmp 0x40a5c4
mov eax, 0x190
mov ch, byte [ebp - 0x965]
test dl, dl
je 0x40a6f3
cmp byte [0x41665f], 0
jne 0x40a6f3
cmp byte [ebp - 0x970], 0
je 0x40a5f2
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40a6f3
test ch, ch
je 0x40a6d7
push esi
lea ecx, [ebp - 0x84]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x84]
movss xmm0, dword [eax]
movss dword [ebp - 0x954], xmm0
call fcn.0040f950
movss xmm3, dword [0x414064]
xorps xmm2, xmm2
subss xmm3, dword [ebp - 0x954]
movss xmm0, dword [eax + 4]
subss xmm2, xmm0
movss dword [ebp - 0x95c], xmm0
movaps xmm1, xmm3
movss dword [ebp - 0x950], xmm3
mulss xmm1, xmm3
movaps xmm0, xmm2
movss dword [ebp - 0x96c], xmm2
mulss xmm0, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm2, dword [ebp - 0x950]
movss xmm1, dword [ebp - 0x96c]
divss xmm2, xmm0
push 0x10e
divss xmm1, xmm0
mulss xmm2, dword [0x413fe0]
mulss xmm1, dword [0x413fe0]
addss xmm2, dword [ebp - 0x954]
addss xmm1, dword [ebp - 0x95c]
movss dword [ebp - 0x950], xmm2
movss dword [ebp - 0x96c], xmm1
call dword [sym.imp.KERNEL32.dll_Sleep]
movss xmm2, dword [ebp - 0x96c]
mov ecx, edi
movss xmm1, dword [ebp - 0x950]
call fcn.00401310
push 0xa
jmp 0x40a6e1
cmp byte [ebp - 0x971], 0
jne 0x40a6ec
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401b80
mov byte [0x41665f], 1
inc esi
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x950], esi
call fcn.0040f970
cmp esi, eax
jb 0x40a375
cmp byte [ebp - 0x964], 0
je 0x40a71f
cmp byte [0x41665f], 0
jne 0x40a726
mov byte [0x41665f], 0
lea ecx, [ebp - 0x84]
call fcn.0040f990
lea ecx, [ebp - 0x66c]
call fcn.00410090
lea ecx, [ebp - 0x684]
call fcn.00410090
lea ecx, [ebp - 0x69c]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0xa50], 0x79
jne 0x40b439
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40a790
push 0
push 4
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x23c], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40a800
push 0
push 4
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413edc
jl 0x40a870
push 0
push 4
lea eax, [ebp - 0x81c]
mov dword [ebp - 0x81c], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f28
jl 0x40a8e0
push 0
push 4
lea eax, [ebp - 0x818]
mov dword [ebp - 0x818], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f04
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c0]
push 0
push 4
push 0x4165c0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f14
jl 0x40a950
push 0
push 4
lea eax, [ebp - 0x94c]
mov dword [ebp - 0x94c], 0
push eax
mov eax, dword [0x4165c0]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dcc
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x4165c8]
push 0
push 4
push 0x4165c8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dd8
jl 0x40a9c0
mov eax, dword [0x4165c8]
push 0
push 0x40
push 0x416618
add eax, 0x1d4
push eax
push edi
call esi
push 0x416618
lea ecx, [ebp - 0x6e4]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x62
mov eax, dword [0x416494]
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x954], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ef0
jl 0x40aa40
push 0
push 4
lea eax, [ebp - 0x828]
mov dword [ebp - 0x828], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413eb4
jl 0x40aab0
push 0
push 4
lea eax, [ebp - 0x824]
mov dword [ebp - 0x824], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416468
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d3c
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416468]
push 0
push 4
push 0x416468
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d4c
jl 0x40ab20
push 0
push 4
lea eax, [ebp - 0x820]
mov dword [ebp - 0x820], 0
push eax
mov eax, dword [0x416468]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41646c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f70
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x41646c]
push 0
push 4
push 0x41646c
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f7c
jl 0x40ab90
mov eax, dword [0x41646c]
push 0
push 0x40
push 0x416498
add eax, 0x1d4
push eax
push edi
call esi
push 0x416498
lea ecx, [ebp - 0x6cc]
call fcn.00410160
push 0
push 4
mov byte [ebp - 4], 0x63
mov eax, dword [0x416494]
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x954], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d60
jl 0x40ac10
push 0
push 4
lea eax, [ebp - 0x834]
mov dword [ebp - 0x834], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f50
jl 0x40ac80
push 0
push 4
lea eax, [ebp - 0x830]
mov dword [ebp - 0x830], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416584
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ddc
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416584]
push 0
push 4
push 0x416584
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dec
jl 0x40acf0
push 0
push 4
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x82c], 0
push eax
mov eax, dword [0x416584]
add eax, 0xc8
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416490
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413df0
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x416490]
push 0
push 4
push 0x416490
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dfc
jl 0x40ad60
mov eax, dword [0x416490]
push 0
push 0x40
push 0x4165d8
add eax, 0x1d4
push eax
push edi
call esi
push 0x4165d8
lea ecx, [ebp - 0x6b4]
call fcn.00410160
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x390]
movss xmm2, dword [ebp - 0x240]
movss xmm1, dword [ebp - 0x23c]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x74]
call fcn.0040f690
sub esp, 0x18
lea eax, [ebp - 0x6e4]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x94c]
movss xmm2, dword [ebp - 0x818]
lea ecx, [ebp - 0x12ec]
movss xmm1, dword [ebp - 0x81c]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x65
lea eax, [ebp - 0x6cc]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x820]
movss xmm2, dword [ebp - 0x824]
lea ecx, [ebp - 0x12c8]
movss xmm1, dword [ebp - 0x828]
call fcn.004016d0
sub esp, 0x18
mov byte [ebp - 4], 0x66
lea eax, [ebp - 0x6b4]
mov ecx, esp
push eax
call fcn.004101a0
push dword [ebp - 0x82c]
movss xmm2, dword [ebp - 0x830]
lea ecx, [ebp - 0x12a4]
movss xmm1, dword [ebp - 0x834]
call fcn.004016d0
lea eax, [ebp - 0x1280]
mov byte [ebp - 4], 0x67
push eax
lea eax, [ebp - 0x12ec]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0040f780
lea ecx, [ebp - 0x9ba]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x74]
push dword [esi]
call fcn.0040fa10
push 0x40f640
push 3
push 0x24
lea eax, [ebp - 0x12ec]
mov byte [ebp - 4], 0x69
push eax
call fcn.004110bb
xor al, al
mov dword [ebp - 0x964], eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x950], 0
call fcn.0040f970
test eax, eax
je 0x40b402
nop dword [eax]
xor ecx, ecx
call fcn.004011c0
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000003
jns 0x40af10
dec eax
or eax, 0xfffffffc
inc eax
sub esp, 0x20
mov dword [ebp - 0x954], eax
mov esi, esp
lea ecx, [ebp - 0x74]
push dword [ebp - 0x950]
call fcn.0040f950
push eax
mov ecx, esi
call fcn.0040f6b0
push dword [ebp - 0x38c]
push dword [ebp - 0x390]
call fcn.00410a10
add esp, 0x14
movss dword [ebp - 0x95c], xmm0
mov ecx, esp
push str.B_STAND_JUMPSHOT_PULLUP
call fcn.00410160
mov esi, dword [ebp - 0x950]
lea ecx, [ebp - 0x74]
push esi
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96d], al
push str.B_STAND_FADEAWAY
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x956], al
push str.B_SHOOTPASS
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x966], al
push str.B_RUN_JUMPSHOT_DRIFT_R
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x970], al
push str.B_RUN_JUMPSHOT_DRIFT_L
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x96e], al
push str.B_RUN_LAYUP
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x955], al
push str.B_RUN_DCLUTCH
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x965], al
push str.B_POST_TURN_FADEAWAY
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x971], al
push str.B_POST_JUMPSHOT
call fcn.00410160
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
lea ecx, [eax + 0xc]
call fcn.004018e0
movss xmm0, dword [0x414004]
add esp, 0x18
comiss xmm0, dword [ebp - 0x95c]
mov cl, al
mov byte [ebp - 0x968], cl
jb 0x40b0d0
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
mov edx, dword [ebp - 0x964]
mov cl, byte [ebp - 0x968]
movzx edx, dl
cmp dword [eax + 8], 1
mov eax, 1
cmove edx, eax
mov dword [ebp - 0x964], edx
jmp 0x40b0d6
mov edx, dword [ebp - 0x964]
cmp byte [ebp - 0x96d], 0
je 0x40b0e6
mov eax, 0x104
jmp 0x40b13e
cmp byte [ebp - 0x956], 0
je 0x40b0f6
mov eax, 0x12c
jmp 0x40b13e
cmp byte [ebp - 0x96e], 0
jne 0x40b139
cmp byte [ebp - 0x970], 0
jne 0x40b139
mov ch, byte [ebp - 0x965]
test ch, ch
je 0x40b119
mov eax, 0x154
jmp 0x40b144
cmp byte [ebp - 0x971], 0
je 0x40b129
mov eax, 0x2bc
jmp 0x40b144
test cl, cl
mov eax, 0x82
cmovne eax, dword [ebp - 0x9e4]
jmp 0x40b144
mov eax, 0x190
mov ch, byte [ebp - 0x965]
test dl, dl
je 0x40b3d9
mov cl, byte [0x41665c]
mov edx, dword [ebp - 0x954]
test cl, cl
jne 0x40b3d9
cmp edx, 1
jl 0x40b295
cmp byte [ebp - 0x955], cl
je 0x40b17b
push 0x3e8
jmp 0x40b3d3
test ch, ch
je 0x40b26f
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x74]
movss xmm0, dword [eax]
movss dword [ebp - 0x954], xmm0
call fcn.0040f950
movss xmm3, dword [0x414064]
xorps xmm2, xmm2
subss xmm3, dword [ebp - 0x954]
movss xmm0, dword [eax + 4]
subss xmm2, xmm0
movss dword [ebp - 0x95c], xmm0
movaps xmm1, xmm3
movss dword [ebp - 0x96c], xmm3
mulss xmm1, xmm3
movaps xmm0, xmm2
movss dword [ebp - 0x950], xmm2
mulss xmm0, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm2, dword [ebp - 0x96c]
movss xmm1, dword [ebp - 0x950]
divss xmm2, xmm0
push 0x10e
divss xmm1, xmm0
mulss xmm2, dword [0x413fe0]
mulss xmm1, dword [0x413fe0]
addss xmm2, dword [ebp - 0x954]
addss xmm1, dword [ebp - 0x95c]
movss dword [ebp - 0x96c], xmm2
movss dword [ebp - 0x950], xmm1
call dword [sym.imp.KERNEL32.dll_Sleep]
movss xmm2, dword [ebp - 0x950]
mov ecx, edi
movss xmm1, dword [ebp - 0x96c]
call fcn.00401310
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401cd0
mov byte [0x41665c], 1
jmp 0x40b3d9
cmp byte [ebp - 0x966], 0
je 0x40b284
mov byte [0x41665c], 1
jmp 0x40b3d9
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401cd0
jmp 0x40b3c7
test cl, cl
jne 0x40b3d9
cmp edx, 1
jge 0x40b3d9
cmp byte [ebp - 0x955], cl
je 0x40b2b8
push 0x3e8
jmp 0x40b3d3
test ch, ch
je 0x40b3a9
push esi
lea ecx, [ebp - 0x74]
call fcn.0040f950
push esi
lea ecx, [ebp - 0x74]
movss xmm0, dword [eax]
movss dword [ebp - 0x954], xmm0
call fcn.0040f950
movss xmm3, dword [0x414064]
xorps xmm2, xmm2
subss xmm3, dword [ebp - 0x954]
movss xmm0, dword [eax + 4]
subss xmm2, xmm0
movss dword [ebp - 0x95c], xmm0
movaps xmm1, xmm3
movss dword [ebp - 0x96c], xmm3
mulss xmm1, xmm3
movaps xmm0, xmm2
movss dword [ebp - 0x950], xmm2
mulss xmm0, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm2, dword [ebp - 0x96c]
movss xmm1, dword [ebp - 0x950]
divss xmm2, xmm0
push 0x10e
divss xmm1, xmm0
mulss xmm2, dword [0x413fe0]
mulss xmm1, dword [0x413fe0]
addss xmm2, dword [ebp - 0x954]
addss xmm1, dword [ebp - 0x95c]
movss dword [ebp - 0x96c], xmm2
movss dword [ebp - 0x950], xmm1
call dword [sym.imp.KERNEL32.dll_Sleep]
movss xmm2, dword [ebp - 0x950]
mov ecx, edi
movss xmm1, dword [ebp - 0x96c]
call fcn.00401310
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401b80
mov byte [0x41665c], 1
jmp 0x40b3d9
cmp byte [ebp - 0x966], 0
je 0x40b3bb
mov byte [0x41665c], 1
jmp 0x40b3d9
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401b80
push 0x12c
mov byte [0x41665c], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x950], esi
call fcn.0040f970
cmp esi, eax
jb 0x40aef0
cmp byte [ebp - 0x964], 0
je 0x40b402
cmp byte [0x41665c], 0
jne 0x40b409
mov byte [0x41665c], 0
lea ecx, [ebp - 0x74]
call fcn.0040f990
lea ecx, [ebp - 0x6b4]
call fcn.00410090
lea ecx, [ebp - 0x6cc]
call fcn.00410090
lea ecx, [ebp - 0x6e4]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9d0], 0x79
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jne 0x40bc7d
mov eax, dword [0x416494]
push 0
push 4
push 0x416588
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40b470
push 0
push 4
lea eax, [ebp - 0x154]
mov dword [ebp - 0x154], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40b4e0
push 0
push 4
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xe8], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dc8
jl 0x40b550
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x434]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x6a
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x954], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413edc
jl 0x40b5d0
push 0
push 4
lea eax, [ebp - 0x118]
mov dword [ebp - 0x118], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f28
jl 0x40b640
push 0
push 4
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ef0
jl 0x40b6b0
push 0
push 4
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413eb4
jl 0x40b720
push 0
push 4
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x1a4], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d60
jl 0x40b790
push 0
push 4
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x1b0], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f50
jl 0x40b800
push 0
push 4
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1ac], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0xe8]
lea ecx, [ebp - 0x2a8]
movss xmm1, dword [ebp - 0x154]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x258]
call fcn.0040f690
movss xmm2, dword [ebp - 0x120]
lea ecx, [ebp - 0xc24]
movss xmm1, dword [ebp - 0x118]
push 0
call fcn.004018c0
movss xmm2, dword [ebp - 0x1a4]
lea ecx, [ebp - 0xc18]
movss xmm1, dword [ebp - 0x1a8]
push 4
call fcn.004018c0
movss xmm2, dword [ebp - 0x1ac]
lea ecx, [ebp - 0xc0c]
movss xmm1, dword [ebp - 0x1b0]
push 8
call fcn.004018c0
lea eax, [ebp - 0xc00]
push eax
lea eax, [ebp - 0xc24]
push eax
lea ecx, [ebp - 0x100c]
call fcn.0040f780
lea ecx, [ebp - 0x9c6]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x258]
push dword [esi]
call fcn.0040f850
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x6b
mov dword [ebp - 0x964], 0
call fcn.0040f7c0
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x40bc60
mov dword [ebp - 0xb38], 0x12c
mov dword [ebp - 0xb30], 0xac
mov dword [ebp - 0xb2c], 0xc
mov dword [ebp - 0xb28], 0x10
mov dword [ebp - 0xb24], 0x12c
mov dword [ebp - 0xb1c], 0xac
mov dword [ebp - 0xb18], 0xc
mov dword [ebp - 0xb14], 0x18
nop dword [eax]
sub esp, 0x18
mov ecx, esp
push str.SHOT
call fcn.00410160
lea ecx, [ebp - 0x434]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x966], al
push str.FADE
call fcn.00410160
lea ecx, [ebp - 0x434]
call fcn.004018e0
add esp, 0x18
mov byte [ebp - 0x968], al
lea ecx, [ebp - 0x258]
push dword [ebp - 0x964]
call fcn.0040f7a0
sub esp, 0xc
mov edx, esp
movq xmm0, qword [eax]
push dword [ebp - 0x2a4]
mov ecx, dword [eax + 8]
push dword [ebp - 0x2a8]
movq qword [edx], xmm0
mov dword [edx + 8], ecx
call fcn.00410c60
cvttss2si eax, dword [ebp - 0x34c]
add esp, 0x14
mov byte [ebp - 0x955], 0
movss xmm1, dword [0x414034]
comiss xmm1, xmm0
mov dword [ebp - 0x954], eax
jbe 0x40baee
cmp byte [ebp - 0x966], 0
jne 0x40ba34
cmp byte [ebp - 0x968], 0
je 0x40baee
push 0x44
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x40baee
movss xmm3, dword [ebp - 0x2a4]
xorps xmm1, xmm1
movss xmm0, dword [ebp - 0x2a8]
subss xmm1, xmm3
movss xmm2, dword [0x414064]
subss xmm2, xmm0
movss dword [ebp - 0x950], xmm0
movss dword [ebp - 0x96c], xmm3
movaps xmm0, xmm1
movss dword [ebp - 0x960], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
movss dword [ebp - 0x95c], xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm2, dword [ebp - 0x95c]
movss xmm3, dword [ebp - 0x960]
movd xmm1, dword [ebp - 0x954]
divss xmm3, xmm0
mov byte [ebp - 0x955], 1
divss xmm2, xmm0
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm1
mulss xmm1, xmm3
mulss xmm0, xmm2
addss xmm1, dword [ebp - 0x96c]
addss xmm0, dword [ebp - 0x950]
movss dword [ebp - 0x24], xmm1
movss dword [ebp - 0x28], xmm0
push dword [ebp - 0x964]
lea ecx, [ebp - 0x258]
call fcn.0040f7a0
push dword [ebp - 0x964]
lea ecx, [ebp - 0x258]
mov eax, dword [eax + 8]
mov dword [ebp - 0xb34], eax
call fcn.0040f7a0
cmp byte [ebp - 0x955], 0
mov eax, dword [eax + 8]
mov dword [ebp - 0xb20], eax
je 0x40bc43
push 0
push 4
lea eax, [ebp - 0x80c]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
mov eax, dword [ebp + eax*4 - 0xb38]
lea ecx, [ebp - 0x80c]
add eax, dword [ebp - 0x80c]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 4
jl 0x40bb50
push 0
push 4
lea eax, [ebp - 0x348]
mov dword [ebp - 0x348], 0
push eax
mov eax, dword [ebp - 0x80c]
add eax, 0x10
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x808]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
mov eax, dword [ebp + eax*4 - 0xb24]
lea ecx, [ebp - 0x808]
add eax, dword [ebp - 0x808]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 4
jl 0x40bbc1
push 0
push 4
lea eax, [ebp - 0x338]
mov dword [ebp - 0x338], 0
push eax
mov eax, dword [ebp - 0x808]
add eax, 0x18
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x80c]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x808]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
inc dword [ebp - 0x964]
lea ecx, [ebp - 0x258]
call fcn.0040f7c0
cmp dword [ebp - 0x964], eax
jb 0x40b980
lea ecx, [ebp - 0x258]
call fcn.0040f7e0
lea ecx, [ebp - 0x434]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0xa54], 0x79
jne 0x40c20a
mov eax, dword [0x416494]
push 0
push 4
push 0x416588
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
nop dword [eax]
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40bcb0
push 0
push 4
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40bd20
push 0
push 4
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dc8
jl 0x40bd90
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x6fc]
call fcn.00410160
mov dword [ebp - 4], 0x6c
lea ecx, [ebp - 0x278]
movss xmm2, dword [ebp - 0x1b4]
movss xmm1, dword [ebp - 0x1b8]
call fcn.004016a0
sub esp, 0x18
mov ecx, esp
push str.B_STAND_JUMPSHOT
call fcn.00410160
lea ecx, [ebp - 0x6fc]
call fcn.004018e0
add esp, 0x18
mov byte [ebp - 0x955], al
lea ecx, [ebp - 0x364]
push 0xc
call fcn.0040f690
lea eax, [ebp - 0xa58]
mov dword [ebp - 0xa5c], 0x29e
push eax
lea eax, [ebp - 0xa5c]
mov dword [ebp - 0xa58], 0xfffffd62
push eax
lea ecx, [ebp - 0xbdc]
call fcn.00410ce0
lea eax, [ebp - 0xa60]
mov dword [ebp - 0xa68], 0x29e
push eax
lea eax, [ebp - 0xa68]
mov dword [ebp - 0xa60], 0x29e
push eax
lea ecx, [ebp - 0xbd4]
call fcn.00410ce0
lea eax, [ebp - 0xa6c]
mov dword [ebp - 0xa70], 0x208
push eax
lea eax, [ebp - 0xa70]
mov dword [ebp - 0xa6c], 0xfffffdc6
push eax
lea ecx, [ebp - 0xbcc]
call fcn.00410ce0
lea eax, [ebp - 0xa74]
mov dword [ebp - 0xa78], 0x208
push eax
lea eax, [ebp - 0xa78]
mov dword [ebp - 0xa74], 0x23a
push eax
lea ecx, [ebp - 0xbc4]
call fcn.00410ce0
lea eax, [ebp - 0xa7c]
mov dword [ebp - 0xa80], 0x1c2
push eax
lea eax, [ebp - 0xa80]
mov dword [ebp - 0xa7c], 0xfffffe2a
push eax
lea ecx, [ebp - 0xbbc]
call fcn.00410ce0
lea eax, [ebp - 0xa84]
mov dword [ebp - 0xa88], 0x1c2
push eax
lea eax, [ebp - 0xa88]
mov dword [ebp - 0xa84], 0x1d6
push eax
lea ecx, [ebp - 0xbb4]
call fcn.00410ce0
lea eax, [ebp - 0xa8c]
mov dword [ebp - 0xa90], 0x17c
push eax
mov dword [ebp - 0xa8c], 0xfffffe8e
lea eax, [ebp - 0xa90]
push eax
lea ecx, [ebp - 0xbac]
call fcn.00410ce0
lea eax, [ebp - 0xa94]
mov dword [ebp - 0xa00], 0x17c
push eax
lea eax, [ebp - 0xa00]
mov dword [ebp - 0xa94], 0x172
push eax
lea ecx, [ebp - 0xba4]
call fcn.00410ce0
lea eax, [ebp - 0xa04]
mov dword [ebp - 0xa08], 0x140
push eax
lea eax, [ebp - 0xa08]
mov dword [ebp - 0xa04], 0xfffffef2
push eax
lea ecx, [ebp - 0xb9c]
call fcn.00410ce0
lea eax, [ebp - 0xa0c]
mov dword [ebp - 0xa10], 0x140
push eax
lea eax, [ebp - 0xa10]
mov dword [ebp - 0xa0c], 0x10e
push eax
lea ecx, [ebp - 0xb94]
call fcn.00410ce0
lea eax, [ebp - 0xa14]
mov dword [ebp - 0xa18], 0x12c
push eax
lea eax, [ebp - 0xa18]
mov dword [ebp - 0xa14], 0xffffff56
push eax
lea ecx, [ebp - 0xb8c]
call fcn.00410ce0
lea eax, [ebp - 0xa1c]
mov dword [ebp - 0xa24], 0x12c
push eax
lea eax, [ebp - 0xa24]
mov dword [ebp - 0xa1c], 0xaa
push eax
lea ecx, [ebp - 0xb84]
call fcn.00410ce0
lea eax, [ebp - 0xa28]
mov dword [ebp - 0xa2c], 0x122
push eax
lea eax, [ebp - 0xa2c]
mov dword [ebp - 0xa28], 0xffffffba
push eax
lea ecx, [ebp - 0xb7c]
call fcn.00410ce0
lea eax, [ebp - 0xa30]
mov dword [ebp - 0xa34], 0x122
push eax
lea eax, [ebp - 0xa34]
mov dword [ebp - 0xa30], 0x46
push eax
lea ecx, [ebp - 0xb74]
call fcn.00410ce0
lea eax, [ebp - 0xa38]
mov dword [ebp - 0xa3c], 0x11d
push eax
lea eax, [ebp - 0xa3c]
mov dword [ebp - 0xa38], 0
push eax
lea ecx, [ebp - 0xb6c]
call fcn.00410ce0
lea eax, [ebp - 0xb64]
push eax
lea eax, [ebp - 0xbdc]
push eax
lea ecx, [ebp - 0x1014]
call fcn.0040f780
lea ecx, [ebp - 0x9c7]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x364]
push dword [esi]
call fcn.0040fe30
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0x6d
call fcn.0040fdc0
lea ecx, [ebp - 0x364]
mov esi, eax
call fcn.0040fdb0
mov dword [ebp - 0x954], eax
cmp esi, eax
je 0x40c1ed
cmp byte [ebp - 0x955], 0
je 0x40c1b0
movss xmm0, dword [esi]
movss xmm1, dword [esi + 4]
movss dword [ebp - 0x960], xmm0
movss dword [ebp - 0x95c], xmm1
cvtps2pd xmm3, xmm1
movss xmm1, dword [ebp - 0x274]
cvtps2pd xmm2, xmm0
movss xmm0, dword [ebp - 0x278]
cvtps2pd xmm1, xmm1
cvtps2pd xmm0, xmm0
call fcn.00401430
movss xmm1, dword [0x413fcc]
cvtsd2ss xmm0, xmm0
comiss xmm1, xmm0
jb 0x40c1a3
movss xmm2, dword [ebp - 0x95c]
mov ecx, edi
movss xmm1, dword [ebp - 0x960]
call fcn.00401310
add esi, 8
cmp esi, dword [ebp - 0x954]
jne 0x40c141
jmp 0x40c1ed
mov edi, dword [ebp - 0x954]
movss xmm3, dword [esi + 4]
movss xmm2, dword [esi]
movss xmm1, dword [ebp - 0x274]
movss xmm0, dword [ebp - 0x278]
cvtps2pd xmm3, xmm3
cvtps2pd xmm2, xmm2
cvtps2pd xmm1, xmm1
cvtps2pd xmm0, xmm0
call fcn.00401430
add esi, 8
cmp esi, edi
jne 0x40c1b6
mov edi, dword [ebp - 0xa40]
lea ecx, [ebp - 0x364]
call fcn.0040fdd0
lea ecx, [ebp - 0x6fc]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0xa44], 0x79
jne 0x40caa0
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40c240
push 0
push 4
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x1bc], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40c2b0
push 0
push 4
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dc8
jl 0x40c320
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x714]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x6e
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x954], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413edc
jl 0x40c3a0
push 0
push 4
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x1c4], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f28
jl 0x40c410
push 0
push 4
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ef0
jl 0x40c480
push 0
push 4
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0x1e4], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413eb4
jl 0x40c4f0
push 0
push 4
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c8], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d60
jl 0x40c560
push 0
push 4
lea eax, [ebp - 0x1ec]
mov dword [ebp - 0x1ec], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f50
jl 0x40c5d0
push 0
push 4
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x1e8], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x78]
lea ecx, [ebp - 0x398]
movss xmm1, dword [ebp - 0x1bc]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x370]
call fcn.0040f690
movss xmm2, dword [ebp - 0x1c0]
lea ecx, [ebp - 0xc48]
movss xmm1, dword [ebp - 0x1c4]
push 0
call fcn.004018c0
movss xmm2, dword [ebp - 0x1c8]
lea ecx, [ebp - 0xc3c]
movss xmm1, dword [ebp - 0x1e4]
push 4
call fcn.004018c0
movss xmm2, dword [ebp - 0x1e8]
lea ecx, [ebp - 0xc30]
movss xmm1, dword [ebp - 0x1ec]
push 8
call fcn.004018c0
lea eax, [ebp - 0xc24]
push eax
lea eax, [ebp - 0xc48]
push eax
lea ecx, [ebp - 0x101c]
call fcn.0040f780
lea ecx, [ebp - 0x9c5]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x370]
push dword [esi]
call fcn.0040f850
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x6f
xor esi, esi
call fcn.0040f7c0
test eax, eax
je 0x40ca83
nop dword [eax + eax]
lea ecx, [ebp - 0x714]
call fcn.00401a10
movss xmm3, dword [ebp - 0x394]
xorps xmm1, xmm1
movss xmm0, dword [ebp - 0x398]
subss xmm1, xmm3
movss xmm2, dword [0x414064]
subss xmm2, xmm0
movss dword [ebp - 0x954], xmm0
mov byte [ebp - 0x967], al
movss dword [ebp - 0x950], xmm3
movaps xmm0, xmm1
movss dword [ebp - 0x960], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
movss dword [ebp - 0x95c], xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm1, dword [ebp - 0x95c]
movss xmm2, dword [ebp - 0x960]
divss xmm1, xmm0
mov al, byte [ebp - 0x967]
divss xmm2, xmm0
mulss xmm1, dword [0x414034]
mulss xmm2, dword [0x414034]
addss xmm1, dword [ebp - 0x954]
movss xmm0, dword [ebp - 0x78]
addss xmm2, dword [ebp - 0x950]
movss dword [ebp - 0x50], xmm1
movss xmm1, dword [0x413fd0]
comiss xmm1, xmm0
movss dword [ebp - 0x54], xmm2
jb 0x40c89a
comiss xmm0, dword [0x41408c]
jb 0x40c89a
test al, al
je 0x40c89a
push 0x43
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x40c887
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
movss xmm1, dword [0x41403c]
xorps xmm2, xmm2
jmp 0x40ca5b
movss xmm0, dword [ebp - 0x78]
movss xmm1, dword [0x413fd0]
mov al, byte [ebp - 0x967]
comiss xmm0, xmm1
jbe 0x40c977
movss xmm1, dword [0x414018]
comiss xmm1, xmm0
jb 0x40c977
test al, al
je 0x40c977
push 0x43
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x40c972
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
movss xmm2, dword [0x413ff8]
jmp 0x40ca53
movss xmm0, dword [ebp - 0x78]
movss xmm1, dword [0x41408c]
comiss xmm1, xmm0
jbe 0x40ca6f
comiss xmm0, dword [0x4140a8]
jb 0x40ca6f
cmp byte [ebp - 0x967], 0
je 0x40ca6f
push 0x43
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x40ca6f
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
movss xmm2, dword [0x414098]
movss xmm1, dword [0x414040]
mov ecx, edi
call fcn.00401310
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00401c60
lea ecx, [ebp - 0x370]
inc esi
call fcn.0040f7c0
cmp esi, eax
jb 0x40c6f0
lea ecx, [ebp - 0x370]
call fcn.0040f7e0
lea ecx, [ebp - 0x714]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9d8], 0x79
jne 0x40d20f
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40cad5
push 0
push 4
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40cb43
push 0
push 4
lea eax, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dc8
jl 0x40cbb1
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x72c]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x70
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x954], eax
nop dword [eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413edc
jl 0x40cc30
push 0
push 4
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x1f8], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f28
jl 0x40cca0
push 0
push 4
lea eax, [ebp - 0x1f4]
mov dword [ebp - 0x1f4], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ef0
jl 0x40cd10
push 0
push 4
lea eax, [ebp - 0x200]
mov dword [ebp - 0x200], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413eb4
jl 0x40cd80
push 0
push 4
lea eax, [ebp - 0x1fc]
mov dword [ebp - 0x1fc], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d60
jl 0x40cdf0
push 0
push 4
lea eax, [ebp - 0x210]
mov dword [ebp - 0x210], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f50
jl 0x40ce60
push 0
push 4
lea eax, [ebp - 0x204]
mov dword [ebp - 0x204], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0xa8]
lea ecx, [ebp - 0x3a0]
movss xmm1, dword [ebp - 0x90]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x264]
call fcn.0040f690
movss xmm2, dword [ebp - 0x1f4]
lea ecx, [ebp - 0xc6c]
movss xmm1, dword [ebp - 0x1f8]
push 0
call fcn.004018c0
movss xmm2, dword [ebp - 0x1fc]
lea ecx, [ebp - 0xc60]
movss xmm1, dword [ebp - 0x200]
push 4
call fcn.004018c0
movss xmm2, dword [ebp - 0x204]
lea ecx, [ebp - 0xc54]
movss xmm1, dword [ebp - 0x210]
push 8
call fcn.004018c0
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x1024]
call fcn.0040f780
lea ecx, [ebp - 0x9c8]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x264]
push dword [esi]
call fcn.0040f850
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x71
mov dword [ebp - 0x964], 0
call fcn.0040f7c0
test eax, eax
je 0x40d1f2
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [ebp - 0x964]
mov dword [ebp - 0xb10], 0x12c
mov dword [ebp - 0xb08], 0xac
mov dword [ebp - 0xb04], 0xc
mov dword [ebp - 0xb00], 0x10
mov dword [ebp - 0xafc], 0x12c
mov dword [ebp - 0xaf4], 0xac
mov dword [ebp - 0xaf0], 0xc
mov dword [ebp - 0xaec], 0x18
nop
push ecx
lea ecx, [ebp - 0x264]
call fcn.0040f7a0
sub esp, 0xc
mov ecx, esp
movq xmm0, qword [eax]
push dword [ebp - 0x39c]
mov eax, dword [eax + 8]
push dword [ebp - 0x3a0]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.00410c60
push ecx
mov ecx, esp
movss dword [ebp - 0x960], xmm0
push str.N_STAND_SCREEN
call fcn.00410160
lea ecx, [ebp - 0x72c]
call fcn.004018e0
movss xmm0, dword [ebp - 0x334]
lea ecx, [ebp - 0x264]
add esp, 0x18
mov byte [ebp - 0x955], al
movss dword [ebp - 0x95c], xmm0
push dword [ebp - 0x964]
call fcn.0040f7a0
push dword [ebp - 0x964]
mov ecx, dword [eax + 8]
mov dword [ebp - 0xb0c], ecx
lea ecx, [ebp - 0x264]
call fcn.0040f7a0
push 0
push 4
mov eax, dword [eax + 8]
mov dword [ebp - 0xaf8], eax
lea eax, [ebp - 0x804]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
nop
mov eax, dword [ebp + eax*4 - 0xb10]
lea ecx, [ebp - 0x804]
add eax, dword [ebp - 0x804]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 4
jl 0x40d0a0
push 0
push 4
lea eax, [ebp - 0x330]
mov dword [ebp - 0x330], 0
push eax
mov eax, dword [ebp - 0x804]
add eax, 0x10
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x800]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
mov eax, dword [ebp + eax*4 - 0xafc]
lea ecx, [ebp - 0x800]
add eax, dword [ebp - 0x800]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 4
jl 0x40d111
push 0
push 4
lea eax, [ebp - 0x32c]
mov dword [ebp - 0x32c], 0
push eax
mov eax, dword [ebp - 0x800]
add eax, 0x18
push eax
push edi
call esi
movss xmm0, dword [ebp - 0x90]
movss dword [ebp - 0x328], xmm0
movss xmm0, dword [ebp - 0xa8]
movss dword [ebp - 0x320], xmm0
movss xmm0, dword [ebp - 0x95c]
comiss xmm0, dword [ebp - 0x960]
jb 0x40d1d3
cmp byte [ebp - 0x955], 0
je 0x40d1d3
push 0
push 4
lea eax, [ebp - 0x328]
push eax
mov eax, dword [ebp - 0x804]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x320]
push eax
mov eax, dword [ebp - 0x800]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
inc dword [ebp - 0x964]
lea ecx, [ebp - 0x264]
call fcn.0040f7c0
mov ecx, dword [ebp - 0x964]
cmp ecx, eax
jb 0x40cfe0
lea ecx, [ebp - 0x264]
call fcn.0040f7e0
lea ecx, [ebp - 0x72c]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0xa64], 0x79
jne 0x40de07
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40d244
push 0
push 4
lea eax, [ebp - 0x218]
mov dword [ebp - 0x218], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40d2b2
push 0
push 4
lea eax, [ebp - 0x214]
mov dword [ebp - 0x214], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dc8
jl 0x40d320
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x744]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x72
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x954], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413edc
jl 0x40d3a0
push 0
push 4
lea eax, [ebp - 0x230]
mov dword [ebp - 0x230], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f28
jl 0x40d410
push 0
push 4
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x22c], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ef0
jl 0x40d480
push 0
push 4
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413eb4
jl 0x40d4f0
push 0
push 4
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d60
jl 0x40d560
push 0
push 4
lea eax, [ebp - 0x104]
mov dword [ebp - 0x104], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f50
jl 0x40d5d0
push 0
push 4
lea eax, [ebp - 0x100]
mov dword [ebp - 0x100], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165c4
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d98
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165c4]
push 0
push 4
push 0x4165c4
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413da8
jl 0x40d640
push 0
push 4
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0
push eax
mov eax, dword [0x4165c4]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416590
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e1c
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416590]
push 0
push 4
push 0x416590
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413e2c
jl 0x40d6b0
push 0
push 4
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
push eax
mov eax, dword [0x416590]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x41657c
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dac
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x41657c]
push 0
push 4
push 0x41657c
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dbc
jl 0x40d720
push 0
push 4
lea eax, [ebp - 0x228]
mov dword [ebp - 0x228], 0
push eax
mov eax, dword [0x41657c]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b4
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413eb8
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b4]
push 0
push 4
push 0x4165b4
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ec8
jl 0x40d790
push 0
push 4
lea eax, [ebp - 0x224]
mov dword [ebp - 0x224], 0
push eax
mov eax, dword [0x4165b4]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x214]
lea ecx, [ebp - 0x280]
movss xmm1, dword [ebp - 0x218]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0xa0]
call fcn.0040f690
movss xmm2, dword [ebp - 0x21c]
lea ecx, [ebp - 0xb64]
movss xmm1, dword [ebp - 0x220]
push 4
call fcn.004018c0
movss xmm2, dword [ebp - 0x224]
lea ecx, [ebp - 0xb58]
movss xmm1, dword [ebp - 0x228]
push 8
call fcn.004018c0
lea eax, [ebp - 0xb4c]
push eax
lea eax, [ebp - 0xb64]
push eax
lea ecx, [ebp - 0x102c]
call fcn.0040f780
lea ecx, [ebp - 0x9c9]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xa0]
push dword [esi]
call fcn.0040f850
push 0xc
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x73
call fcn.0040f690
movss xmm2, dword [ebp - 0x22c]
lea ecx, [ebp - 0xc90]
movss xmm1, dword [ebp - 0x230]
push 0
call fcn.004018c0
movss xmm2, dword [ebp - 0xf0]
lea ecx, [ebp - 0xc84]
movss xmm1, dword [ebp - 0xf4]
push 4
call fcn.004018c0
movss xmm2, dword [ebp - 0x100]
lea ecx, [ebp - 0xc78]
movss xmm1, dword [ebp - 0x104]
push 8
call fcn.004018c0
lea eax, [ebp - 0xc6c]
push eax
lea eax, [ebp - 0xc90]
push eax
lea ecx, [ebp - 0x104c]
call fcn.0040f780
lea ecx, [ebp - 0x9ab]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x24c]
push dword [esi]
call fcn.0040f850
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x74
xor esi, esi
call fcn.0040f7c0
test eax, eax
je 0x40dddf
nop dword [eax]
push esi
lea ecx, [ebp - 0xa0]
call fcn.0040f7a0
push esi
lea ecx, [ebp - 0xa0]
movss xmm0, dword [eax]
movss dword [ebp - 0x950], xmm0
call fcn.0040f7a0
push esi
lea ecx, [ebp - 0xa0]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x96c], xmm0
call fcn.0040f7a0
sub esp, 0xc
mov ecx, esp
movq xmm0, qword [eax]
push dword [ebp - 0x27c]
mov eax, dword [eax + 8]
push dword [ebp - 0x280]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.00410c60
push ecx
mov ecx, esp
movss dword [ebp - 0x954], xmm0
push str.PASS
call fcn.00410160
lea ecx, [ebp - 0x744]
call fcn.004018e0
movss xmm0, dword [ebp - 0x280]
add esp, 0x18
movss xmm1, dword [ebp - 0x27c]
movss xmm3, dword [ebp - 0x950]
movss xmm2, dword [ebp - 0x96c]
subss xmm3, xmm0
subss xmm2, xmm1
movss dword [ebp - 0x95c], xmm0
movss dword [ebp - 0x960], xmm1
mov byte [ebp - 0x955], al
movaps xmm1, xmm3
movss dword [ebp - 0x950], xmm3
movaps xmm0, xmm2
mulss xmm1, xmm3
mulss xmm0, xmm2
movss dword [ebp - 0x96c], xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm2, dword [ebp - 0x950]
movss xmm1, dword [ebp - 0x96c]
divss xmm2, xmm0
divss xmm1, xmm0
mulss xmm2, dword [0x414034]
mulss xmm1, dword [0x414034]
addss xmm2, dword [ebp - 0x95c]
movss xmm0, dword [0x41406c]
comiss xmm0, dword [ebp - 0x954]
addss xmm1, dword [ebp - 0x960]
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x14], xmm1
jb 0x40ddcb
push 0x51
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x40da9b
push 0x45
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x40da9b
push 0x53
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x40ddcb
cmp byte [ebp - 0x955], 0
je 0x40ddcb
push 1
lea ecx, [ebp - 0xa0]
call fcn.0040f7a0
push 1
lea ecx, [ebp - 0xa0]
movss xmm0, dword [eax]
movss dword [ebp - 0x31c], xmm0
call fcn.0040f7a0
push 2
lea ecx, [ebp - 0xa0]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x318], xmm0
call fcn.0040f7a0
push 2
lea ecx, [ebp - 0xa0]
movss xmm0, dword [eax]
movss dword [ebp - 0x314], xmm0
call fcn.0040f7a0
push 1
lea ecx, [ebp - 0x24c]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x310], xmm0
call fcn.0040f7a0
push 1
lea ecx, [ebp - 0x24c]
movss xmm0, dword [eax]
movss dword [ebp - 0x30c], xmm0
call fcn.0040f7a0
push 2
lea ecx, [ebp - 0x24c]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x308], xmm0
call fcn.0040f7a0
push 2
lea ecx, [ebp - 0x24c]
movss xmm0, dword [eax]
movss dword [ebp - 0x304], xmm0
call fcn.0040f7a0
push 3
lea ecx, [ebp - 0x24c]
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x300], xmm0
call fcn.0040f7a0
push 3
lea ecx, [ebp - 0x24c]
movss xmm0, dword [eax]
movss dword [ebp - 0x2bc], xmm0
call fcn.0040f7a0
push 0
push 4
movss xmm0, dword [eax + 4]
lea eax, [ebp - 0x18]
push eax
mov eax, dword [0x4165c4]
add eax, 0x10
movss dword [ebp - 0x2fc], xmm0
push eax
push edi
mov dword [ebp - 0xa4], 0x41c80000
mov dword [ebp - 0xac], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x14]
push eax
mov eax, dword [0x416590]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x18]
push eax
mov eax, dword [0x41657c]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x14]
push eax
mov eax, dword [0x4165b4]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0xa4]
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0xac]
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0xa4]
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0xac]
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0xa4]
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0xac]
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x31c]
push eax
mov eax, dword [0x4165c4]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x318]
push eax
mov eax, dword [0x416590]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x314]
push eax
mov eax, dword [0x41657c]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x310]
push eax
mov eax, dword [0x4165b4]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x308]
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x304]
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x300]
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x2bc]
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x2fc]
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea ecx, [ebp - 0xa0]
inc esi
call fcn.0040f7c0
cmp esi, eax
jb 0x40d930
lea ecx, [ebp - 0x24c]
call fcn.0040f7e0
lea ecx, [ebp - 0xa0]
call fcn.0040f7e0
lea ecx, [ebp - 0x744]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9ec], 0x79
jne 0x40ec34
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
nop dword [eax]
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40de40
push 0
push 4
lea eax, [ebp - 0xfc]
mov dword [ebp - 0xfc], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40deb0
push 0
push 4
lea eax, [ebp - 0x108]
mov dword [ebp - 0x108], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416658
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f64
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416658]
push 0
push 4
push 0x416658
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f6c
jl 0x40df20
push 0
push 4
lea eax, [ebp - 0x190]
mov dword [ebp - 0x190], 0
push eax
mov eax, dword [0x416658]
add eax, 0x64
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dc8
jl 0x40df90
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x3e4]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x75
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x954], eax
nop dword [eax + eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413edc
jl 0x40e010
push 0
push 4
lea eax, [ebp - 0xe0]
mov dword [ebp - 0xe0], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f28
jl 0x40e080
push 0
push 4
lea eax, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ef0
jl 0x40e0f0
push 0
push 4
lea eax, [ebp - 0x238]
mov dword [ebp - 0x238], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413eb4
jl 0x40e160
push 0
push 4
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d60
jl 0x40e1d0
push 0
push 4
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x18c], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f50
jl 0x40e240
push 0
push 4
lea eax, [ebp - 0x158]
mov dword [ebp - 0x158], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x108]
lea ecx, [ebp - 0x288]
movss xmm1, dword [ebp - 0xfc]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0xc0]
call fcn.0040f690
movss xmm2, dword [ebp - 0xe4]
lea ecx, [ebp - 0xcb4]
movss xmm1, dword [ebp - 0xe0]
push 0
call fcn.004018c0
movss xmm2, dword [ebp - 0xdc]
lea ecx, [ebp - 0xca8]
movss xmm1, dword [ebp - 0x238]
push 4
call fcn.004018c0
movss xmm2, dword [ebp - 0x158]
lea ecx, [ebp - 0xc9c]
movss xmm1, dword [ebp - 0x18c]
push 8
call fcn.004018c0
lea eax, [ebp - 0xc90]
push eax
lea eax, [ebp - 0xcb4]
push eax
lea ecx, [ebp - 0x1004]
call fcn.0040f780
lea ecx, [ebp - 0x9aa]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xc0]
push dword [esi]
call fcn.0040f850
mov byte [ebp - 4], 0x76
xorps xmm1, xmm1
movss xmm3, dword [ebp - 0x284]
xor cl, cl
movss xmm0, dword [ebp - 0x288]
subss xmm1, xmm3
movss xmm2, dword [0x414064]
subss xmm2, xmm0
movss dword [ebp - 0x954], xmm0
mov dword [ebp - 0x950], ecx
mov dword [ebp - 0x58], 0
movaps xmm0, xmm1
movss dword [ebp - 0x960], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
movss dword [ebp - 0x96c], xmm3
mulss xmm1, xmm2
movss dword [ebp - 0x95c], xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm2, dword [ebp - 0x95c]
movss xmm3, dword [ebp - 0x960]
divss xmm2, xmm0
divss xmm3, xmm0
movss xmm0, dword [ebp - 0x190]
ucomiss xmm0, dword [0x413f80]
lahf
test ah, 0x44
jp 0x40e405
movaps xmm0, xmm3
mov dword [ebp - 0x58], 0x43340000
xorps xmm0, xmmword [0x4140b0]
movaps xmm1, xmm2
movss dword [ebp - 0x98c], xmm0
movss dword [ebp - 0x990], xmm1
jmp 0x40e589
ucomiss xmm0, dword [0x413fa8]
lahf
test ah, 0x44
jp 0x40e43b
movaps xmm0, xmm3
mov dword [ebp - 0x58], 0x43610000
xorps xmm0, xmmword [0x4140b0]
movaps xmm1, xmm2
movss dword [ebp - 0x98c], xmm0
movss dword [ebp - 0x990], xmm1
jmp 0x40e589
ucomiss xmm0, dword [0x413fc8]
lahf
test ah, 0x44
jp 0x40e471
movaps xmm0, xmm3
mov dword [ebp - 0x58], 0x43870000
xorps xmm0, xmmword [0x4140b0]
movaps xmm1, xmm2
movss dword [ebp - 0x98c], xmm0
movss dword [ebp - 0x990], xmm1
jmp 0x40e589
ucomiss xmm0, dword [0x413ff4]
lahf
test ah, 0x44
jp 0x40e4a7
movaps xmm1, xmm2
mov dword [ebp - 0x58], 0
xorps xmm1, xmmword [0x4140b0]
movaps xmm0, xmm3
movss dword [ebp - 0x990], xmm1
movss dword [ebp - 0x98c], xmm0
jmp 0x40e589
ucomiss xmm0, dword [0x414008]
lahf
test ah, 0x44
jp 0x40e4dd
movaps xmm1, xmm2
mov dword [ebp - 0x58], 0x42340000
xorps xmm1, xmmword [0x4140b0]
movaps xmm0, xmm3
movss dword [ebp - 0x990], xmm1
movss dword [ebp - 0x98c], xmm0
jmp 0x40e589
ucomiss xmm0, dword [0x413fe0]
lahf
test ah, 0x44
jp 0x40e513
movaps xmm1, xmm2
mov dword [ebp - 0x58], 0x439d8000
xorps xmm1, xmmword [0x4140b0]
movaps xmm0, xmm3
movss dword [ebp - 0x990], xmm1
movss dword [ebp - 0x98c], xmm0
jmp 0x40e589
ucomiss xmm0, dword [0x41402c]
lahf
test ah, 0x44
jp 0x40e546
movaps xmm0, xmm3
mov dword [ebp - 0x58], 0x43070000
xorps xmm0, xmmword [0x4140b0]
movaps xmm1, xmm2
movss dword [ebp - 0x98c], xmm0
movss dword [ebp - 0x990], xmm1
jmp 0x40e589
ucomiss xmm0, dword [0x414014]
lahf
test ah, 0x44
jp 0x40e579
movaps xmm1, xmm2
mov dword [ebp - 0x58], 0x42b40000
xorps xmm1, xmmword [0x4140b0]
movaps xmm0, xmm3
movss dword [ebp - 0x990], xmm1
movss dword [ebp - 0x98c], xmm0
jmp 0x40e589
movss xmm0, dword [ebp - 0x98c]
movss xmm1, dword [ebp - 0x990]
mulss xmm0, dword [0x413fac]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x324], 0x42c80000
mulss xmm1, dword [0x413fac]
mov dword [ebp - 0x2dc], 1
addss xmm0, dword [ebp - 0x954]
mulss xmm2, dword [0x413fe8]
mov dword [ebp - 0x2d8], 0x2a
addss xmm1, dword [ebp - 0x96c]
mulss xmm3, dword [0x413fe8]
mov dword [ebp - 0x2d4], 0
addss xmm0, xmm2
mov dword [ebp - 0x964], 0
addss xmm1, xmm3
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x1c], xmm1
call fcn.0040f7c0
test eax, eax
je 0x40ec17
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [ebp - 0x964]
mov dword [ebp - 0xae8], 0x12c
mov dword [ebp - 0xae0], 0xac
mov dword [ebp - 0xadc], 0xc
mov dword [ebp - 0xad8], 0x10
mov dword [ebp - 0xb4c], 0x12c
mov dword [ebp - 0xb44], 0xac
mov dword [ebp - 0xb40], 0xc
mov dword [ebp - 0xb3c], 0x18
mov dword [ebp - 0xab4], 0x12c
mov dword [ebp - 0xaac], 0xac
mov dword [ebp - 0xaa8], 0x90
mov dword [ebp - 0xaa4], 0x12c
mov dword [ebp - 0xa9c], 0xac
mov dword [ebp - 0xa98], 0x324
mov dword [ebp - 0xac4], 0x12c
mov dword [ebp - 0xabc], 0xac
mov dword [ebp - 0xab8], 0x64
nop word [eax + eax]
push ecx
lea ecx, [ebp - 0xc0]
call fcn.0040f7a0
sub esp, 0xc
mov ecx, esp
movq xmm0, qword [eax]
push dword [ebp - 0x284]
mov eax, dword [eax + 8]
push dword [ebp - 0x288]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.00410c60
add esp, 0x14
movss dword [ebp - 0x95c], xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x964]
call fcn.0040f7a0
push dword [ebp - 0x964]
lea ecx, [ebp - 0xc0]
mov eax, dword [eax + 8]
mov dword [ebp - 0xae4], eax
call fcn.0040f7a0
push dword [ebp - 0x964]
lea ecx, [ebp - 0xc0]
mov eax, dword [eax + 8]
mov dword [ebp - 0xb48], eax
call fcn.0040f7a0
push dword [ebp - 0x964]
lea ecx, [ebp - 0xc0]
mov eax, dword [eax + 8]
mov dword [ebp - 0xab0], eax
call fcn.0040f7a0
push dword [ebp - 0x964]
lea ecx, [ebp - 0xc0]
mov eax, dword [eax + 8]
mov dword [ebp - 0xaa0], eax
call fcn.0040f7a0
movss xmm0, dword [0x414008]
mov ecx, 1
comiss xmm0, dword [ebp - 0x95c]
push 0
mov eax, dword [eax + 8]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0x950]
movzx eax, al
push 4
cmovae eax, ecx
mov dword [ebp - 0x950], eax
lea eax, [ebp - 0x7f8]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp + eax*4 - 0xae8]
lea ecx, [ebp - 0x7f8]
add eax, dword [ebp - 0x7f8]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 4
jl 0x40e7e0
push 0
push 4
lea eax, [ebp - 0x2f8]
mov dword [ebp - 0x2f8], 0
push eax
mov eax, dword [ebp - 0x7f8]
add eax, 0x10
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7f4]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
mov eax, dword [ebp + eax*4 - 0xb4c]
lea ecx, [ebp - 0x7f4]
add eax, dword [ebp - 0x7f4]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 4
jl 0x40e851
push 0
push 4
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x2f4], 0
push eax
mov eax, dword [ebp - 0x7f4]
add eax, 0x18
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7fc]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
mov eax, dword [ebp + eax*4 - 0xac4]
lea ecx, [ebp - 0x7fc]
add eax, dword [ebp - 0x7fc]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 3
jl 0x40e8c2
push 0
push 4
lea eax, [ebp - 0x2f0]
mov dword [ebp - 0x2f0], 0
push eax
mov eax, dword [ebp - 0x7fc]
add eax, 0x64
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7ec]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
mov eax, dword [ebp + eax*4 - 0xab4]
lea ecx, [ebp - 0x7ec]
add eax, dword [ebp - 0x7ec]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 3
jl 0x40e933
push 0
push 4
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x2ec], 0
push eax
mov eax, dword [ebp - 0x7ec]
add eax, 0x90
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7f0]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
xor eax, eax
mov dword [ebp - 0x954], eax
nop word [eax + eax]
mov eax, dword [ebp + eax*4 - 0xaa4]
lea ecx, [ebp - 0x7f0]
add eax, dword [ebp - 0x7f0]
push 0
push 4
push ecx
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp eax, 3
jl 0x40e9b0
push 0
push 4
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x2e8], 0
push eax
mov eax, dword [ebp - 0x7f0]
add eax, 0x324
push eax
push edi
call esi
sub esp, 0x18
mov ecx, esp
push str.CROSS
call fcn.00410160
lea ecx, [ebp - 0x3e4]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x955], al
push str.WINDUP
call fcn.00410160
lea ecx, [ebp - 0x3e4]
call fcn.004018e0
add esp, 0x18
cmp byte [ebp - 0x950], 0
je 0x40ebf8
nop dword [eax]
cmp byte [ebp - 0x955], 0
jne 0x40ea61
test al, al
je 0x40ebf8
push 0
push 4
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x7fc]
add eax, 0x64
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x324]
push eax
mov eax, dword [ebp - 0x7ec]
add eax, 0x90
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x2dc]
push eax
mov eax, dword [ebp - 0x7f0]
add eax, 0x324
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x7f8]
add eax, 0x10
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x7f4]
add eax, 0x18
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0x19
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 4
lea eax, [ebp - 0x2d8]
push eax
mov eax, dword [ebp - 0x7f0]
add eax, 0x324
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x2d4]
push eax
mov eax, dword [ebp - 0x7ec]
add eax, 0x90
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dc8
jl 0x40eb50
mov eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
add eax, 0x1d4
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x1064]
call fcn.00410160
push eax
lea ecx, [ebp - 0x3e4]
call fcn.004100e0
lea ecx, [ebp - 0x1064]
call fcn.00410090
sub esp, 0x18
mov ecx, esp
push str.CROSS
call fcn.00410160
lea ecx, [ebp - 0x3e4]
call fcn.004018e0
mov ecx, esp
mov byte [ebp - 0x955], al
push str.WINDUP
call fcn.00410160
lea ecx, [ebp - 0x3e4]
call fcn.004018e0
add esp, 0x18
jmp 0x40ea50
inc dword [ebp - 0x964]
lea ecx, [ebp - 0xc0]
call fcn.0040f7c0
mov ecx, dword [ebp - 0x964]
cmp ecx, eax
jb 0x40e6d0
lea ecx, [ebp - 0xc0]
call fcn.0040f7e0
lea ecx, [ebp - 0x3e4]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9f0], 0x79
jne 0x40f32f
mov eax, dword [0x416494]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add eax, 0xb4d0bc
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
nop dword [eax]
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40ec70
push 0
push 4
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40ece0
push 0
push 4
lea eax, [ebp - 0x88]
mov dword [ebp - 0x88], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165b8
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413dc0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165b8]
push 0
push 4
push 0x4165b8
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413dcc
jl 0x40ed50
mov eax, dword [0x413dcc]
add eax, dword [0x4165b8]
push 0
push 0x40
push 0x416538
push eax
push edi
call esi
push 0x416538
lea ecx, [ebp - 0x7e0]
call fcn.00410160
push 0
push 4
mov dword [ebp - 4], 0x77
mov eax, dword [0x416494]
push 0x416580
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ecc
mov dword [ebp - 0x954], eax
nop dword [eax]
mov eax, dword [eax]
add eax, dword [0x416580]
push 0
push 4
push 0x416580
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413edc
jl 0x40edd0
push 0
push 4
lea eax, [ebp - 0x198]
mov dword [ebp - 0x198], 0
push eax
mov eax, dword [0x416580]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165d0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f18
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165d0]
push 0
push 4
push 0x4165d0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f28
jl 0x40ee40
push 0
push 4
lea eax, [ebp - 0x194]
mov dword [ebp - 0x194], 0
push eax
mov eax, dword [0x4165d0]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165a0
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ee0
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165a0]
push 0
push 4
push 0x4165a0
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ef0
jl 0x40eeb0
push 0
push 4
lea eax, [ebp - 0x1a0]
mov dword [ebp - 0x1a0], 0
push eax
mov eax, dword [0x4165a0]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416594
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413ea4
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416594]
push 0
push 4
push 0x416594
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413eb4
jl 0x40ef20
push 0
push 4
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0
push eax
mov eax, dword [0x416594]
add eax, 0x18
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x416578
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413d50
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x416578]
push 0
push 4
push 0x416578
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413d60
jl 0x40ef90
push 0
push 4
lea eax, [ebp - 0xf8]
mov dword [ebp - 0xf8], 0
push eax
mov eax, dword [0x416578]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165ac
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f40
mov dword [ebp - 0x954], eax
nop
mov eax, dword [eax]
add eax, dword [0x4165ac]
push 0
push 4
push 0x4165ac
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f50
jl 0x40f000
push 0
push 4
lea eax, [ebp - 0x114]
mov dword [ebp - 0x114], 0
push eax
mov eax, dword [0x4165ac]
add eax, 0x18
push eax
push edi
call esi
movss xmm2, dword [ebp - 0x88]
lea ecx, [ebp - 0x3a8]
movss xmm1, dword [ebp - 0xb0]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x270]
call fcn.0040f690
movss xmm2, dword [ebp - 0x194]
lea ecx, [ebp - 0xc00]
movss xmm1, dword [ebp - 0x198]
push 0
call fcn.004018c0
movss xmm2, dword [ebp - 0x19c]
lea ecx, [ebp - 0xbf4]
movss xmm1, dword [ebp - 0x1a0]
push 4
call fcn.004018c0
movss xmm2, dword [ebp - 0x114]
lea ecx, [ebp - 0xbe8]
movss xmm1, dword [ebp - 0xf8]
push 8
call fcn.004018c0
lea eax, [ebp - 0xbdc]
push eax
lea eax, [ebp - 0xc00]
push eax
lea ecx, [ebp - 0xffc]
call fcn.0040f780
lea ecx, [ebp - 0x9a9]
mov esi, eax
call fcn.0040f940
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x270]
push dword [esi]
call fcn.0040f850
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x78
xor esi, esi
call fcn.0040f7c0
test eax, eax
je 0x40f312
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x270]
call fcn.0040f7a0
sub esp, 0xc
mov ecx, esp
movq xmm0, qword [eax]
push dword [ebp - 0x3a4]
mov eax, dword [eax + 8]
push dword [ebp - 0x3a8]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
call fcn.00410c60
movss xmm1, dword [0x414024]
add esp, 0x14
comiss xmm1, xmm0
jb 0x40f2fe
push esi
lea ecx, [ebp - 0x270]
call fcn.0040f7a0
push esi
lea ecx, [ebp - 0x270]
movss xmm0, dword [eax]
movss dword [ebp - 0x954], xmm0
call fcn.0040f7a0
movss xmm2, dword [0x414064]
xorps xmm1, xmm1
subss xmm2, dword [ebp - 0x954]
movss xmm0, dword [eax + 4]
subss xmm1, xmm0
movss dword [ebp - 0x95c], xmm0
movss dword [ebp - 0x950], xmm2
movaps xmm0, xmm1
movss dword [ebp - 0x96c], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.00401040
movss xmm1, dword [ebp - 0x950]
movss xmm2, dword [ebp - 0x96c]
divss xmm1, xmm0
push 0x20
divss xmm2, xmm0
mulss xmm1, dword [0x413f9c]
mulss xmm2, dword [0x413f9c]
addss xmm1, dword [ebp - 0x954]
addss xmm2, dword [ebp - 0x95c]
movss dword [ebp - 0x950], xmm1
movss dword [ebp - 0x96c], xmm2
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x40f2fe
nop dword [eax]
movss xmm1, dword [ebp - 0x96c]
subss xmm1, dword [ebp - 0x88]
movss xmm0, dword [ebp - 0x950]
subss xmm0, dword [ebp - 0xb0]
movss dword [ebp - 0x964], xmm1
xorps xmm1, xmm1
comiss xmm1, xmm0
movss dword [ebp - 0x954], xmm0
jbe 0x40f26f
call fcn.00401f40
jmp 0x40f279
comiss xmm0, xmm1
jbe 0x40f284
call fcn.00401ec0
movss xmm0, dword [ebp - 0x954]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40f294
call fcn.00401f90
jmp 0x40f299
call fcn.00401f10
movss xmm0, dword [ebp - 0x964]
xorps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x40f2b0
call fcn.00401dc0
jmp 0x40f2ba
comiss xmm0, xmm1
jbe 0x40f2c5
call fcn.00401e40
movss xmm0, dword [ebp - 0x964]
xorps xmm1, xmm1
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40f2d5
call fcn.00401e10
jmp 0x40f2da
call fcn.00401e90
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x20
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x20
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x40f230
lea ecx, [ebp - 0x270]
inc esi
call fcn.0040f7c0
cmp esi, eax
jb 0x40f120
lea ecx, [ebp - 0x270]
call fcn.0040f7e0
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 4], 0xffffffff
call fcn.00410090
cmp dword [ebp - 0x9d4], 0x79
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jne 0x402e70
mov eax, dword [0x416494]
push 0
push 4
push 0x416588
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413f54
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x416588]
push 0
push 4
push 0x416588
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413f60
jl 0x40f364
push 0
push 4
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x8c], 0
push eax
mov eax, dword [0x416588]
add eax, 0x10
push eax
push edi
call esi
mov eax, dword [0x416494]
push 0
push 4
push 0x4165bc
add eax, 0xb4d0bc
push eax
push edi
call esi
mov eax, 0x413e94
mov dword [ebp - 0x954], eax
mov eax, dword [eax]
add eax, dword [0x4165bc]
push 0
push 4
push 0x4165bc
push eax
push edi
call esi
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0x954], eax
cmp eax, 0x413ea0
jl 0x40f3d2
push 0
push 4
lea eax, [ebp - 0x94]
mov dword [ebp - 0x94], 0
push eax
mov eax, dword [0x4165bc]
add eax, 0x18
push eax
push edi
call esi
push 0x25
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x40f456
push 0x27
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x40f456
push 0x26
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x40f456
push 0x28
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x402e70
push 0x25
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x40f48e
push 0x27
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x40f48e
push 0x26
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x40f48e
push 0x28
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x402e70
push 0
push 4
lea eax, [ebp - 0x7e8]
push eax
mov eax, dword [0x416494]
add eax, 0xb4d0bc
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7e8]
push eax
mov eax, dword [ebp - 0x7e8]
add eax, 0x110
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x7e8]
push eax
mov eax, dword [ebp - 0x7e8]
add eax, 0xac
push eax
push edi
call esi
push 0
push 4
lea eax, [ebp - 0x1f0]
push eax
mov eax, dword [ebp - 0x7e8]
add eax, 0x90
push eax
push edi
call esi
movss xmm0, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x444]
movss xmm2, dword [ebp - 0x94]
movss xmm1, dword [ebp - 0x8c]
movss dword [ebp - 0x5c], xmm0
call fcn.004016a0
movss xmm0, dword [ebp - 0x5c]
ucomiss xmm0, dword [0x413f80]
lahf
test ah, 0x44
jnp 0x402e70
movss xmm1, dword [ebp - 0x994]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x402e70
push 0x57
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x402e70
movss xmm0, dword [ebp - 0x8c]
comiss xmm0, dword [0x414038]
jb 0x40f58f
movss xmm0, dword [ebp - 0x94]
comiss xmm0, dword [0x4140a4]
jb 0x40f58f
movss xmm1, dword [0x414004]
comiss xmm1, xmm0
mov byte [ebp - 0x956], 1
jae 0x40f596
mov byte [ebp - 0x956], 0
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm0, dword [ebp - 0x5c]
test ax, ax
je 0x40f5d5
cmp byte [ebp - 0x956], 0
je 0x40f5c3
mulss xmm0, dword [0x413f84]
movss dword [ebp - 0x994], xmm0
jmp 0x40f5f8
addss xmm0, dword [ebp - 0x2d0]
movss dword [ebp - 0x994], xmm0
jmp 0x40f5f8
cmp byte [ebp - 0x956], 0
je 0x40f5e8
mulss xmm0, dword [0x413f84]
jmp 0x40f5f0
addss xmm0, dword [ebp - 0x2cc]
movss dword [ebp - 0x994], xmm0
cmp dword [ebp - 0x7e8], 0
movss dword [ebp - 0x5c], xmm0
je 0x402e70
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 4
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x7e8]
add eax, 0x90
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x402e70