Function at 0x43af60
Capabilities:
Create thread
Hide graphical window
Log keystrokes via polling
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443c28
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x458
push esi
push edi
push 0x7f00
push 0
mov dword [ebp - 0x2ec], 0x30
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [ebp - 0x2d0], eax
call esi
push 0x7f00
push 0
mov dword [ebp - 0x2d4], eax
call esi
push 0
mov dword [ebp - 0x2c0], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x2cc], eax
lea eax, [ebp - 0x2ec]
push eax
mov dword [ebp - 0x2e4], 0x439ce0
mov dword [ebp - 0x2c4], 0x44f1cc
mov dword [ebp - 0x2c8], 0x44f1cc
mov dword [ebp - 0x2e8], 3
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push 0
push 0
push 0
push dword [0x44f24c]
push dword [0x44f20c]
push 0
push 0
push Ordinal_2
push 0x44f1cc
push 0x44f1cc
push 0x28
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 2
push 0xff
push 0
push eax
mov dword [0x44fd38], eax
call esi
push 1
push 0
push 0
push dword [0x44fd38]
call esi
push 0x44fd04
push dword [0x44fd38]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov esi, dword [0x44fd38]
push 0x20
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x44fd30], ecx
test ecx, ecx
je 0x43dbb8
mov eax, dword [0x44f24c]
xorps xmm0, xmm0
push 0x44fd4c
push 0x44fd80
push 0x40
push esi
mov dword [0x44fd84], eax
mov eax, dword [0x44f20c]
push 1
movlpd qword [0x44fd8c], xmm0
mov dword [0x44fd9c], 0
movlpd qword [0x44fdac], xmm0
mov dword [0x44fda0], 1
mov dword [0x44fd98], 1
mov dword [0x44fd88], 0x15
mov dword [0x44fd80], eax
mov dword [0x44fd94], 0
mov dword [0x44fda4], 1
mov dword [0x44fda8], 0x50
mov dword [0x44fdb4], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
test eax, eax
js 0x43dbb2
push 0xa
push dword [0x44fd38]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x44fd38]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [0x44fd38]
call dword [sym.imp.USER32.dll_SetWindowPos]
call fcn.004054c0
mov esi, dword [0x44f978]
movss xmm2, dword [0x44ad14]
push 0x449a0c
push ecx
mov ecx, dword [esi + 0x94]
push str.C:WindowsFonts_segoeui.ttf
call fcn.0041ef00
movss xmm2, dword [0x44ad10]
push 0x449a0c
push ecx
mov ecx, dword [esi + 0x94]
push str.C:WindowsFonts_segoeuib.ttf
call fcn.0041ef00
mov esi, dword [0x44fd38]
push 0x44fcc8
mov dword [ebp - 0x6c], eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x43b294
push 0x44fcc0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x43b294
mov ecx, dword [0x44f978]
mov dword [0x44fcbc], esi
or dword [ecx + 0xc], 6
mov dword [ecx + 0xb4], str.imgui_impl_win32
mov dword [ecx + 0xd8], esi
mov dword [ecx + 0x34], 9
mov dword [ecx + 0x38], 0x25
mov dword [ecx + 0x3c], 0x27
mov dword [ecx + 0x40], 0x26
mov dword [ecx + 0x44], 0x28
mov dword [ecx + 0x48], 0x21
mov dword [ecx + 0x4c], 0x22
mov dword [ecx + 0x50], 0x24
mov dword [ecx + 0x54], 0x23
mov dword [ecx + 0x58], 0x2d
mov dword [ecx + 0x5c], 0x2e
mov dword [ecx + 0x60], 8
mov dword [ecx + 0x64], 0x20
mov dword [ecx + 0x68], 0xd
mov dword [ecx + 0x6c], 0x1b
mov dword [ecx + 0x70], 0x41
mov dword [ecx + 0x74], 0x43
mov dword [ecx + 0x78], 0x56
mov dword [ecx + 0x7c], 0x58
mov dword [ecx + 0x80], 0x59
mov dword [ecx + 0x84], 0x5a
jmp 0x43b29a
mov ecx, dword [0x44f978]
mov eax, dword [0x44fd4c]
xorps xmm0, xmm0
mov dword [ecx + 0xb8], str.imgui_impl_dx9
push 0
mov dword [0x44fcb4], eax
mov eax, dword [sym.imp.USER32.dll_FindWindowA]
push str.SDL_app
movups xmmword [ebp - 0x32c], xmm0
mov dword [ebp - 0x314], 0
movq qword [ebp - 0x31c], xmm0
mov dword [ebp - 0xdc], eax
call eax
test eax, eax
jne 0x43b2f8
push eax
push eax
push str.START_CS_1.6_BEFORE_STARTING_THE_CHEAT
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.00439a40
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x43a970
push 0
push 0
call esi
push 0
push 0
push 0
push 0x439ec0
push 0
push 0
call esi
cmp dword [ebp - 0x328], 0x12
je 0x43da8d
mov eax, dword [sym.imp.USER32.dll_DispatchMessageA]
mov ecx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov dword [ebp - 0xc0], eax
mov eax, dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp - 0x2c], eax
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x50], eax
mov eax, dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov dword [ebp - 0x68], eax
mov eax, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov dword [ebp - 0xcc], eax
mov eax, dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 0xd0], eax
mov eax, dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [ebp - 0xec], eax
mov eax, dword [sym.imp.USER32.dll_mouse_event]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0xc4], eax
nop
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x32c]
push eax
call ecx
test eax, eax
je 0x43b3d0
lea eax, [ebp - 0x32c]
push eax
call esi
lea eax, [ebp - 0x32c]
push eax
call dword [ebp - 0xc0]
jmp 0x43da76
cmp byte [0x44f09e], 0
je 0x43b2f0
lea ecx, [ebp - 0x284]
mov dword [ebp - 0x284], 5
mov dword [ebp - 0x280], 0
call fcn.0043ffb0
mov eax, dword [0x44fd4c]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0
push 3
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x44fd4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x43da40
cmp dword [0x44fcac], 0
jne 0x43b449
cmp dword [0x44fcb4], 0
je 0x43b449
call fcn.00433ca0
call fcn.00434220
call fcn.00406300
cmp byte [0x44f09d], 0
mov eax, dword [0x44f978]
movss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x14]
mulss xmm1, dword [0x44ac20]
mov dword [eax + 0x1a64], 0x3f000000
mulss xmm0, dword [0x44ac20]
mov dword [eax + 0x1a68], 0x3f000000
movss dword [eax + 0x1a5c], xmm1
mov dword [eax + 0x1a40], 1
movss dword [eax + 0x1a60], xmm0
je 0x43c8a2
movss xmm3, dword [0x44ac54]
lea eax, [ebp - 0x28c]
push ecx
push eax
mov dword [ebp - 0x28c], 0x44160000
mov dword [ebp - 0x288], 0x43f00000
call fcn.0040cd50
lea edx, [ebp - 0x294]
mov dword [ebp - 0x294], 0
mov ecx, 1
mov dword [ebp - 0x290], 0
call fcn.0040d4b0
lea edx, [ebp - 0x29c]
mov dword [ebp - 0x29c], 0
mov ecx, 0xd
mov dword [ebp - 0x298], 0
call fcn.0040d4b0
xorps xmm1, xmm1
mov ecx, 0xb
call fcn.0040d440
push 0
mov ecx, 2
call fcn.004127b0
movss xmm1, dword [0x44ad30]
add esp, 0xc
call fcn.00411bc0
lea edx, [ebp - 0x2a4]
mov dword [ebp - 0x2a4], 0x42c80000
mov ecx, str.AIMBOT
mov dword [ebp - 0x2a0], 0x41c80000
call fcn.004236f0
test al, al
je 0x43b579
mov dword [0x44f9ac], 0
lea edx, [ebp - 0x2ac]
mov dword [ebp - 0x2ac], 0x42c80000
mov ecx, 0x44a570
mov dword [ebp - 0x2a8], 0x41c80000
call fcn.004236f0
test al, al
je 0x43b5ab
mov dword [0x44f9ac], 1
lea edx, [ebp - 0x2b4]
mov dword [ebp - 0x2b4], 0x42c80000
mov ecx, str.MISC
mov dword [ebp - 0x2b0], 0x41c80000
call fcn.004236f0
test al, al
je 0x43b5dd
mov dword [0x44f9ac], 2
lea edx, [ebp - 0x2bc]
mov dword [ebp - 0x2bc], 0x42c80000
mov ecx, str.KEYS
mov dword [ebp - 0x2b8], 0x41c80000
call fcn.004236f0
test al, al
je 0x43b60f
mov dword [0x44f9ac], 4
lea edx, [ebp - 0x114]
mov dword [ebp - 0x114], 0x42c80000
mov ecx, 0x44a7a4
mov dword [ebp - 0x110], 0x41c80000
call fcn.004236f0
test al, al
je 0x43b641
mov dword [0x44f9ac], 3
push str.This_cheat_was_made_by_KleskBY_in_2019
call fcn.00422cc0
add esp, 4
mov ecx, 3
call fcn.0040d530
call fcn.00411830
mov eax, dword [0x44f9ac]
test eax, eax
jne 0x43ba00
call fcn.00424cc0
mov edx, 0x44f216
mov ecx, str.Aimbot
call fcn.00424440
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
mov edx, 0x44f215
mov ecx, str.Deathmatch
call fcn.00424440
push ecx
push str.Pistols
mov edx, 0x44f99c
mov ecx, str.Group
call fcn.00425af0
mov eax, dword [0x44f99c]
add esp, 8
test eax, eax
jne 0x43b6c6
push ecx
push str.Glock
jmp 0x43b6eb
cmp eax, 1
jne 0x43b6d3
push ecx
push str.MAC_10
jmp 0x43b6eb
cmp eax, 2
jne 0x43b6e0
push ecx
push str.Galil
jmp 0x43b6eb
cmp eax, 3
jne 0x43b702
push ecx
push str.NOVA
mov edx, 0x44f980
mov ecx, str.Weapon
call fcn.00425af0
mov eax, dword [0x44f99c]
add esp, 8
test eax, eax
jne 0x43b790
mov eax, dword [0x44f980]
test eax, eax
jne 0x43b723
mov edx, 0x11
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 1
jne 0x43b738
mov edx, 0x10
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 2
jne 0x43b74d
mov edx, 1
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 3
jne 0x43b762
mov edx, 0x1a
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 4
jne 0x43b777
mov edx, 0xa
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 5
jne 0x43b918
mov edx, 0xb
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 1
jne 0x43b806
mov eax, dword [0x44f980]
test eax, eax
jne 0x43b7ae
mov edx, 7
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 1
jne 0x43b7c3
mov edx, 0x17
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 2
jne 0x43b7d8
mov edx, 0x13
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 3
jne 0x43b7ed
mov edx, 0xc
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 4
jne 0x43b918
mov edx, 0x1e
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 2
jne 0x43b8d9
mov eax, dword [0x44f980]
test eax, eax
jne 0x43b828
mov edx, 0xe
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 1
jne 0x43b83d
mov edx, 0xf
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 2
jne 0x43b852
mov edx, 0x1c
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 3
jne 0x43b867
mov edx, 0x16
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 4
jne 0x43b87c
mov edx, 3
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 5
jne 0x43b891
mov edx, 0x1b
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 6
jne 0x43b8a3
mov edx, 8
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 7
jne 0x43b8b5
mov edx, 0x12
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 8
jne 0x43b8c7
mov edx, 0x18
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 9
jne 0x43b918
mov edx, 0xd
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 3
jne 0x43b918
mov eax, dword [0x44f980]
test eax, eax
jne 0x43b8f4
mov edx, 0x15
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 1
jne 0x43b906
mov edx, 5
mov dword [0x44f994], edx
jmp 0x43b91e
cmp eax, 2
jne 0x43b918
mov edx, 0x14
mov dword [0x44f994], edx
jmp 0x43b91e
mov edx, dword [0x44f994]
movss xmm3, dword [0x44ad00]
sub esp, 8
shl edx, 4
xorps xmm2, xmm2
add edx, 0x44fa14
mov ecx, 0x44a560
mov dword [esp + 4], 0x3f800000
call fcn.00426fc0
mov edx, dword [0x44f994]
mov ecx, str.Smooth
movss xmm3, dword [0x44ad00]
movss xmm2, dword [0x44ac54]
shl edx, 4
add edx, 0x44fa18
mov dword [esp + 4], 0x3f800000
call fcn.00426fc0
mov edx, dword [0x44f994]
xorps xmm2, xmm2
movss xmm3, dword [0x44ad00]
mov ecx, 0x44a56c
shl edx, 4
add edx, 0x44fa1c
mov dword [esp + 4], 0x3f800000
call fcn.00426fc0
mov edx, 0x44f09f
mov ecx, str.Square_FOV
call fcn.00424440
mov edx, 0x44f214
mov ecx, str.Draw_FOV
call fcn.00424440
push 0x20
mov edx, 0x44f218
mov ecx, str.FOV_color
call fcn.0042bda0
movss xmm3, dword [0x44acfc]
add esp, 4
xorps xmm2, xmm2
mov edx, 0x44f230
mov ecx, str.FOV_thickness
mov dword [esp + 4], 0x3f800000
call fcn.00426fc0
add esp, 8
jmp 0x43c886
cmp eax, 1
jne 0x43bba1
call fcn.00424cc0
mov edx, 0x44f2a4
mov ecx, 0x449954
call fcn.00424440
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x41a00000
mov dword [ebp - 0x118], 0
call fcn.00424d00
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
movss xmm0, dword [0x44ad34]
call fcn.0040d0d0
push ecx
push str.Classic
mov edx, 0x44fdb8
mov ecx, str.Type
call fcn.00425af0
call fcn.0040d150
push 0x20
mov edx, 0x44f284
mov ecx, str.Box_color
call fcn.0042bda0
movss xmm3, dword [0x44acfc]
add esp, 4
movss xmm2, dword [0x44ac54]
mov edx, 0x44f280
mov ecx, str.Box_thickness
mov dword [esp + 4], 0x3f800000
call fcn.00426fc0
add esp, 8
cmp dword [0x44fdb8], 0
jne 0x43baf2
movss xmm3, dword [0x44acfc]
sub esp, 8
xorps xmm2, xmm2
mov edx, 0x44fdbc
mov ecx, str.Box_rounding
mov dword [esp + 4], 0x3f800000
call fcn.00426fc0
add esp, 8
mov edx, 0x44f2a6
mov ecx, str.Draw_distance
call fcn.00424440
push 0x20
mov edx, 0x44f294
mov ecx, str.Dist_color
call fcn.0042bda0
mov edx, 0x44f2a6
mov ecx, str.Draw_names
call fcn.00424440
push 0x20
mov edx, 0x44f2a8
mov ecx, str.Names_color
call fcn.0042bda0
mov edx, 0x44f217
mov ecx, str.Crosshair
call fcn.00424440
push 0x20
mov edx, 0x44f2c0
mov ecx, str.Crosshair_color
call fcn.0042bda0
movss xmm3, dword [0x44acfc]
add esp, 4
xorps xmm2, xmm2
mov edx, 0x44f2b8
mov ecx, str.Crosshair_thickness
mov dword [esp + 4], 0x3f800000
call fcn.00426fc0
movss xmm3, dword [0x44acfc]
xorps xmm2, xmm2
mov edx, 0x44f2bc
mov dword [esp + 4], 0x3f800000
mov ecx, str.Crosshair_size
call fcn.00426fc0
add esp, 8
jmp 0x43c886
cmp eax, 2
jne 0x43bbec
call fcn.00424cc0
mov edx, 0x44f97c
mov ecx, str.BunnyHop
call fcn.00424440
mov edx, 0x44f975
mov ecx, str.DDRun
call fcn.00424440
mov edx, 0x44f977
mov ecx, str.AutoPistol
call fcn.00424440
mov edx, 0x44f976
mov ecx, str.FPS_Unlock
call fcn.00424440
jmp 0x43c886
cmp eax, 3
jne 0x43c248
call fcn.00424cc0
sub esp, 8
mov dword [ebp - 0x124], 0x43e48000
lea edx, [ebp - 0x124]
mov dword [ebp - 0x120], 0x43960000
call fcn.00408020
add esp, 8
call fcn.00436550
xor esi, esi
call fcn.0043ee20
test eax, eax
je 0x43bd24
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x128], esi
nop
push esi
mov ecx, 0x44f9f4
call fcn.0043ee00
push eax
lea ecx, [ebp - 0x4c]
call fcn.0043f290
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x3c]
add eax, 0xfffffffc
push eax
push ecx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0043f000
push eax
lea ecx, [ebp - 0x4c]
call fcn.0043f1d0
lea ecx, [ebp - 0x8c]
call fcn.0043f180
sub esp, 8
lea ecx, [ebp - 0x4c]
call fcn.0043f040
push eax
push ecx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0043f000
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x94]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0043f070
push eax
lea ecx, [ebp - 0x4c]
call fcn.0043f150
lea eax, [ebp - 0x12c]
push eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0043f060
lea edx, [esi + 0x44fcd0]
mov ecx, eax
call fcn.00430b10
add esp, 8
test al, al
je 0x43bcfc
push 0x32
push 0
push 0x44fcd0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [esi + 0x44fcd0], 1
lea ecx, [ebp - 0xa4]
call fcn.0043f180
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
call fcn.0043f180
inc esi
call fcn.0043ee20
cmp esi, eax
jb 0x43bc40
call fcn.00408090
call fcn.00424cc0
lea edx, [ebp - 0x134]
mov dword [ebp - 0x134], 0x43610000
mov ecx, str.SAVE
mov dword [ebp - 0x130], 0x41c80000
call fcn.004236f0
test al, al
je 0x43bda9
xor edi, edi
nop dword [eax + eax]
cmp byte [edi + 0x44fcd0], 0
je 0x43bd89
sub esp, 0x18
mov ecx, 0x44f9f4
mov esi, esp
push edi
call fcn.0043ee00
push eax
mov ecx, esi
call fcn.0043f290
call fcn.004368a0
add esp, 0x18
inc edi
cmp edi, 0x32
jl 0x43bd60
mov esi, dword [ebp - 0x2c]
push 0x64
push 0x12c
call esi
push 0x1e
call dword [ebp - 0x50]
push 0x64
push 0x12c
call esi
movss xmm0, dword [0x44ad3c]
call fcn.0040d0d0
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
sub esp, 8
mov edx, 0x44fd14
mov ecx, str.cfgname
push 0
push 0x19
call fcn.004272a0
add esp, 0x10
call fcn.0040d150
lea edx, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0x43610000
mov ecx, str.LOAD
mov dword [ebp - 0x138], 0x41c80000
call fcn.004236f0
test al, al
je 0x43bf09
xor edi, edi
cmp byte [edi + 0x44fcd0], 0
je 0x43bee5
sub esp, 0x18
mov ecx, 0x44f9f4
mov esi, esp
push edi
call fcn.0043ee00
push eax
mov ecx, esi
call fcn.0043f290
call fcn.00437570
mov eax, dword [0x44f098]
add esp, 0x18
mov ecx, str.unknown
mov eax, dword [eax*4 + 0x449600]
test eax, eax
cmovne ecx, eax
push ecx
mov ecx, 0x44f234
call fcn.0043f120
mov eax, dword [0x44f088]
mov ecx, str.unknown
mov eax, dword [eax*4 + 0x449600]
test eax, eax
cmovne ecx, eax
push ecx
mov ecx, 0x44f1dc
call fcn.0043f120
mov eax, dword [0x44f094]
mov ecx, str.unknown
mov eax, dword [eax*4 + 0x449600]
test eax, eax
cmovne ecx, eax
push ecx
mov ecx, 0x44f250
call fcn.0043f120
mov eax, dword [0x44f08c]
mov ecx, str.unknown
mov eax, dword [eax*4 + 0x449600]
test eax, eax
cmovne ecx, eax
push ecx
mov ecx, 0x44f1f4
call fcn.0043f120
mov eax, dword [0x44f090]
mov ecx, 0x44f268
mov eax, dword [eax*4 + 0x449600]
test eax, eax
je 0x43bedb
push eax
jmp 0x43bee0
push str.unknown
call fcn.0043f120
inc edi
cmp edi, 0x32
jl 0x43be12
mov esi, dword [ebp - 0x2c]
push 0x64
push 0x12c
call esi
push 0x1e
call dword [ebp - 0x50]
push 0x64
push 0x12c
call esi
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
push ecx
lea edx, [ebp - 0x144]
mov dword [ebp - 0x144], 0x43610000
mov ecx, str.CREATE_AND_SAVE
mov dword [ebp - 0x140], 0x41c80000
call fcn.004232f0
add esp, 4
test al, al
je 0x43c00c
mov ecx, 0x44fd14
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43bf51
sub ecx, edx
je 0x43c00c
push str.INTERIUMCS16Ext_
lea ecx, [ebp - 0x4c]
call fcn.0043f250
mov esi, eax
push str.appdata
mov dword [ebp - 4], 2
call dword [ebp - 0x68]
add esp, 4
lea ecx, [ebp - 0x8c]
push eax
call fcn.0043f250
push esi
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa4]
call fcn.0043fc20
add esp, 4
lea ecx, [ebp - 0x8c]
call fcn.0043f180
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 6
call fcn.0043f180
push 0x44fd14
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x10c]
call fcn.0043fbc0
sub esp, 0x14
mov byte [ebp - 4], 7
mov ecx, esp
mov edx, eax
push str..ini
call fcn.0043fb10
add esp, 4
call fcn.004368a0
add esp, 0x18
lea ecx, [ebp - 0x10c]
call fcn.0043f180
lea ecx, [ebp - 0xa4]
mov dword [ebp - 4], 0xffffffff
call fcn.0043f180
push ecx
lea edx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x43610000
mov ecx, str.DELETE
mov dword [ebp - 0x148], 0x41c80000
call fcn.004232f0
add esp, 4
test al, al
je 0x43c08b
xor edi, edi
xor esi, esi
nop dword [eax]
cmp byte [edi + 0x44fcd0], 0
je 0x43c07f
mov eax, dword [0x44f9f4]
add eax, esi
cmp dword [eax + 0x14], 0xf
jbe 0x43c058
mov eax, dword [eax]
push eax
call dword [ebp - 0xcc]
add esp, 4
test eax, eax
je 0x43c07f
push 0x64
push 0x12c
call dword [ebp - 0x2c]
push 0x1e
call dword [ebp - 0x50]
push 0x64
push 0x12c
call dword [ebp - 0x2c]
add esi, 0x18
inc edi
cmp esi, 0x4b0
jl 0x43c040
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
push ecx
lea edx, [ebp - 0x154]
mov dword [ebp - 0x154], 0x43610000
mov ecx, str.OPEN_FOLDER
mov dword [ebp - 0x150], 0x41c80000
call fcn.004232f0
add esp, 4
test al, al
je 0x43c886
xorps xmm0, xmm0
push 0x20
movups xmmword [ebp - 0x8c], xmm0
call fcn.0044250f
movups xmm0, xmmword [str.INTERIUMCS16Ext_]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x7c], 0x12
movups xmmword [eax], xmm0
mov cx, word [0x44a1d8]
mov word [eax + 0x10], cx
mov dword [ebp - 0x78], 0x1f
mov byte [eax + 0x12], 0
push str.appdata
mov dword [ebp - 4], 8
call dword [ebp - 0x68]
mov edx, eax
mov dword [ebp - 0x3c], 0
mov ecx, edx
mov dword [ebp - 0x38], 0
xorps xmm0, xmm0
add esp, 8
movups xmmword [ebp - 0x4c], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c137
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x4c]
call fcn.00440310
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa4]
call fcn.00440940
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x43c19f
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c195
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43da87
push ecx
push edx
call fcn.0044248d
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x78]
cmp ecx, 0xf
jbe 0x43c1dd
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c1d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43da87
push ecx
push edx
call fcn.0044248d
add esp, 8
cmp dword [ebp - 0x90], 0xf
lea eax, [ebp - 0xa4]
push 1
cmova eax, dword [ebp - 0xa4]
push 0
push 0
push eax
push str.open
push 0
call dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x90]
cmp ecx, 0xf
jbe 0x43c886
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c239
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43da87
push ecx
push edx
call fcn.0044248d
add esp, 8
jmp 0x43c886
cmp eax, 4
jne 0x43c886
call fcn.00424cc0
push str.MenuKeyLabel
mov edx, 0x44f234
lea ecx, [ebp - 0x10c]
call fcn.0043fbc0
add esp, 4
mov dword [ebp - 4], 0xa
mov ecx, eax
mov dword [ebp - 0x15c], 0x43480000
mov dword [ebp - 0x158], 0x41c80000
call fcn.0043f060
lea edx, [ebp - 0x15c]
mov ecx, eax
call fcn.004236f0
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0xd], al
mov dword [ebp - 4], 0xffffffff
call fcn.0043f180
cmp byte [ebp - 0xd], 0
je 0x43c2c1
mov byte [0x44f9a4], 1
jmp 0x43c2d0
cmp byte [0x44f9a4], 0
je 0x43c329
nop word [eax + eax]
xor esi, esi
push esi
call edi
test ax, ax
jns 0x43c317
push dword [esi*4 + 0x449600]
mov ecx, 0x44f234
mov dword [0x44f098], esi
call fcn.0043f120
lea ecx, [ebp - 0x164]
mov byte [0x44f9a4], 0
mov dword [ebp - 0x164], 0x12c
mov dword [ebp - 0x160], 0
call fcn.0043ffb0
inc esi
cmp esi, 0x100
jl 0x43c2d2
cmp byte [0x44f9a4], 0
jne 0x43c2d0
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
push str.Menu_key
call fcn.00422bd0
call fcn.00424cc0
push str.AimbotKeyLabel
mov edx, 0x44f1dc
lea ecx, [ebp - 0x10c]
call fcn.0043fbc0
add esp, 8
mov dword [ebp - 4], 0xb
mov ecx, eax
mov dword [ebp - 0x16c], 0x43480000
mov dword [ebp - 0x168], 0x41c80000
call fcn.0043f060
lea edx, [ebp - 0x16c]
mov ecx, eax
call fcn.004236f0
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0xd], al
mov dword [ebp - 4], 0xffffffff
call fcn.0043f180
cmp byte [ebp - 0xd], 0
je 0x43c3b3
mov byte [0x44f9a5], 1
jmp 0x43c3c0
cmp byte [0x44f9a5], 0
je 0x43c411
nop dword [eax]
xor esi, esi
push esi
call edi
test ax, ax
jns 0x43c3ff
mov edx, dword [esi*4 + 0x449600]
mov ecx, edx
mov dword [0x44f088], esi
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c3e0
sub ecx, edi
push ecx
push edx
mov ecx, 0x44f1dc
call fcn.0043f8d0
mov edi, dword [ebp - 0x18]
mov byte [0x44f9a5], 0
inc esi
cmp esi, 0x100
jl 0x43c3c2
cmp byte [0x44f9a5], 0
jne 0x43c3c0
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
push str.Aimbot_key
call fcn.00422bd0
call fcn.00424cc0
push str.Aimbot2KeyLabel
mov edx, 0x44f250
lea ecx, [ebp - 0x10c]
call fcn.0043fbc0
add esp, 8
mov dword [ebp - 4], 0xc
mov ecx, eax
mov dword [ebp - 0x174], 0x43480000
mov dword [ebp - 0x170], 0x41c80000
call fcn.0043f060
lea edx, [ebp - 0x174]
mov ecx, eax
call fcn.004236f0
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0xd], al
mov dword [ebp - 4], 0xffffffff
call fcn.0043f180
cmp byte [ebp - 0xd], 0
je 0x43c49b
mov byte [0x44f97f], 1
jmp 0x43c4a4
cmp byte [0x44f97f], 0
je 0x43c4f1
xor esi, esi
push esi
call edi
test ax, ax
jns 0x43c4df
mov edx, dword [esi*4 + 0x449600]
mov ecx, edx
mov dword [0x44f094], esi
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c4c0
sub ecx, edi
push ecx
push edx
mov ecx, 0x44f250
call fcn.0043f8d0
mov edi, dword [ebp - 0x18]
mov byte [0x44f97f], 0
inc esi
cmp esi, 0x100
jl 0x43c4a6
cmp byte [0x44f97f], 0
jne 0x43c4a4
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
push str.Aimbot2_key
call fcn.00422bd0
mov ecx, dword [0x44f978]
add esp, 4
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x199c]
cmp byte [eax + 0x7f], 0
jne 0x43c54c
xorps xmm1, xmm1
mov dword [ebp - 0x17c], 0
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x178], 0x40a00000
call fcn.00404fc0
mov ecx, dword [0x44f204]
mov eax, Ordinal_2
sub eax, ecx
cmp eax, 0xe
jb 0x43dc13
cmp dword [0x44f208], 0xf
mov eax, 0x44f1f4
push 0xe
cmova eax, dword [0x44f1f4]
push str.BhopKeyLabel
push ecx
push eax
push ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa4]
call fcn.00440b30
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0xa4]
cmp dword [ebp - 0x90], 0xf
lea edx, [ebp - 0x184]
mov dword [ebp - 0x184], 0x43480000
cmova ecx, dword [ebp - 0xa4]
push ecx
mov dword [ebp - 0x180], 0x41c80000
call fcn.004232f0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x90]
mov byte [ebp - 0xd], al
cmp ecx, 0xf
jbe 0x43c612
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c605
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43da87
push ecx
push edx
call fcn.0044248d
mov al, byte [ebp - 0xd]
add esp, 8
test al, al
je 0x43c61f
mov byte [0x44f97d], 1
jmp 0x43c628
cmp byte [0x44f97d], 0
je 0x43c681
xor esi, esi
nop word [eax + eax]
push esi
call edi
test ax, ax
jns 0x43c66f
mov edx, dword [esi*4 + 0x449600]
mov ecx, edx
mov dword [0x44f08c], esi
lea edi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c650
sub ecx, edi
push ecx
push edx
mov ecx, 0x44f1f4
call fcn.0043f8d0
mov edi, dword [ebp - 0x18]
mov byte [0x44f97d], 0
inc esi
cmp esi, 0x100
jl 0x43c630
cmp byte [0x44f97d], 0
jne 0x43c628
movss xmm1, dword [0x44ad9c]
xorps xmm0, xmm0
call fcn.0040dc40
push str.Bhop_key
call fcn.00422bd0
mov ecx, dword [0x44f978]
add esp, 4
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x199c]
cmp byte [eax + 0x7f], 0
jne 0x43c6dc
xorps xmm1, xmm1
mov dword [ebp - 0x18c], 0
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x188], 0x40a00000
call fcn.00404fc0
mov ecx, dword [0x44f278]
mov eax, Ordinal_2
sub eax, ecx
cmp eax, 0xf
jb 0x43dc13
cmp dword [0x44f27c], 0xf
mov eax, 0x44f268
push 0xf
cmova eax, dword [0x44f268]
push str.DDrunKeyLabel
push ecx
push eax
push ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x4c]
call fcn.00440b30
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
lea edx, [ebp - 0x194]
mov dword [ebp - 0x194], 0x43480000
cmova ecx, dword [ebp - 0x4c]
push ecx
mov dword [ebp - 0x190], 0x41c80000
call fcn.004232f0
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 0xd], al
cmp ecx, 0xf
jbe 0x43c790
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c783
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43da87
push ecx
push edx
call fcn.0044248d
mov al, byte [ebp - 0xd]
add esp, 8
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
test al, al
je 0x43c7af
mov byte [0x44f97e], 1
jmp 0x43c7b8
cmp byte [0x44f97e], 0
je 0x43c811
xor esi, esi
nop word [eax + eax]
push esi
call edi
test ax, ax
jns 0x43c7ff
mov edx, dword [esi*4 + 0x449600]
mov ecx, edx
mov dword [0x44f090], esi
lea edi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c7e0
sub ecx, edi
push ecx
push edx
mov ecx, 0x44f268
call fcn.0043f8d0
mov edi, dword [ebp - 0x18]
mov byte [0x44f97e], 0
inc esi
cmp esi, 0x100
jl 0x43c7c0
cmp byte [0x44f97e], 0
jne 0x43c7b8
mov ecx, dword [0x44f978]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov edx, dword [ecx + 0x199c]
cmp byte [edx + 0x7f], 0
jne 0x43c879
movss xmm1, dword [ecx + 0x1554]
addss xmm1, dword [edx + 0xd0]
movss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xc8], xmm1
movss dword [edx + 0xcc], xmm0
mov eax, dword [edx + 0xf4]
mov ecx, dword [edx + 0xf8]
mov dword [edx + 0xe8], eax
mov eax, dword [edx + 0xfc]
mov dword [edx + 0xec], ecx
mov dword [edx + 0xf0], eax
push str.DDrun_key
call fcn.00422bd0
add esp, 4
push 1
mov ecx, 1
call fcn.004127b0
add esp, 4
call fcn.0040cdd0
mov edi, dword [ebp - 0x18]
jmp 0x43da0c
push 0
push str.SDL_app
call dword [ebp - 0xdc]
mov esi, eax
call dword [ebp - 0xec]
cmp eax, esi
jne 0x43da0c
cmp dword [0x44f98c], 0
jne 0x43da0c
mov edi, dword [0x44f978]
xorps xmm1, xmm1
mov ecx, 3
call fcn.0040d440
lea edx, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0
mov ecx, 1
mov dword [ebp - 0x198], 0
call fcn.0040d4b0
push ecx
xorps xmm3, xmm3
mov dword [esp], 0
xorps xmm2, xmm2
lea ecx, [ebp - 0x384]
xorps xmm1, xmm1
call fcn.004011a0
mov edx, ecx
mov ecx, 2
call fcn.0040d3f0
push 0xc0201
xor edx, edx
mov ecx, str.ESP
call fcn.004099a0
mov esi, dword [0x44f978]
lea edx, [ebp - 0x1a4]
push 2
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov ecx, dword [esi + 0x199c]
call fcn.0040d5b0
movss xmm1, dword [edi + 0x14]
lea edx, [ebp - 0x1ac]
movss xmm0, dword [edi + 0x10]
mov ecx, dword [esi + 0x199c]
push 2
movss dword [ebp - 0x1ac], xmm0
movss dword [ebp - 0x1a8], xmm1
call fcn.0040d670
push str.__INTERIUM.OOO
call fcn.00422bd0
mov edx, dword [0x44f990]
lea ecx, [ebp - 0x10c]
add esp, 0x10
call fcn.00434ad0
mov ecx, eax
call fcn.0043f060
push eax
call fcn.00422bd0
add esp, 4
lea ecx, [ebp - 0x10c]
call fcn.0043f180
mov eax, dword [0x44f20c]
cdq
sub eax, edx
movsd xmm0, qword [0x44ad08]
sar eax, 1
mov dword [ebp - 0x74], 0xffffffff
movsd qword [ebp - 0xb8], xmm0
movd xmm3, eax
mov eax, dword [0x44f24c]
cdq
sub eax, edx
sar eax, 1
cmp byte [0x44f09f], 0
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movaps xmm4, xmm3
movss dword [ebp - 0x30], xmm3
divss xmm4, dword [0x44ad28]
movaps xmm1, xmm2
movss dword [ebp - 0x34], xmm2
divss xmm1, dword [0x44ad28]
mulss xmm4, dword [0x44f210]
mulss xmm1, dword [0x44f210]
movss dword [ebp - 0x70], xmm4
movss dword [ebp - 0x5c], xmm1
je 0x43ca50
movss dword [ebp - 0x5c], xmm4
cmp byte [0x44f217], 0
je 0x43cba6
movss xmm1, dword [0x44f2c0]
movaps xmm0, xmm3
subss xmm0, dword [0x44f2bc]
push ecx
movss dword [ebp - 0x1b8], xmm2
lea ecx, [ebp - 0x394]
movss dword [ebp - 0x1b0], xmm2
movss xmm2, dword [0x44f2c4]
movss dword [ebp - 0x1bc], xmm0
movaps xmm0, xmm3
addss xmm0, dword [0x44f2bc]
movss xmm3, dword [0x44f2c8]
movss dword [ebp - 0x1b4], xmm0
movss xmm0, dword [0x44f2cc]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f2b8]
lea edx, [ebp - 0x1b4]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x1bc]
call fcn.00438b70
mov eax, dword [0x44f24c]
lea ecx, [ebp - 0x3a4]
cdq
add esp, 0xc
sub eax, edx
movss xmm2, dword [0x44f2c4]
sar eax, 1
movd xmm3, eax
mov eax, dword [0x44f20c]
cdq
sub eax, edx
cvtdq2ps xmm3, xmm3
sar eax, 1
movd xmm0, eax
movaps xmm1, xmm3
addss xmm1, dword [0x44f2bc]
subss xmm3, dword [0x44f2bc]
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x1c0], xmm1
movss xmm1, dword [0x44f2c0]
movss dword [ebp - 0x1c4], xmm0
movss dword [ebp - 0x1cc], xmm0
movss xmm0, dword [0x44f2cc]
movss dword [ebp - 0x1c8], xmm3
movss xmm3, dword [0x44f2c8]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f2b8]
lea edx, [ebp - 0x1c4]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x1cc]
call fcn.00438b70
movss xmm2, dword [ebp - 0x34]
add esp, 0x10
movss xmm3, dword [ebp - 0x30]
movss xmm4, dword [ebp - 0x70]
cmp byte [0x44f214], 0
je 0x43cc58
movaps xmm0, xmm4
movss xmm1, dword [0x44f218]
addss xmm0, xmm3
push ecx
lea ecx, [ebp - 0x3b4]
movss dword [ebp - 0x1d4], xmm0
movss xmm0, dword [ebp - 0x5c]
addss xmm0, xmm2
movss dword [ebp - 0x1d0], xmm0
movaps xmm0, xmm3
movss xmm3, dword [0x44f220]
subss xmm0, xmm4
movss dword [ebp - 0x1dc], xmm0
movaps xmm0, xmm2
subss xmm0, dword [ebp - 0x5c]
movss xmm2, dword [0x44f21c]
movss dword [ebp - 0x1d8], xmm0
movss xmm0, dword [0x44f224]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm0, dword [0x44f230]
lea edx, [ebp - 0x1d4]
movss xmm3, dword [0x44aca4]
sub esp, 0x18
mov ecx, esp
movss dword [esp + 0x14], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x1dc]
call fcn.00438c70
add esp, 0x18
mov ecx, dword [0x44fc94]
mov eax, 0x2aaaaaab
sub ecx, dword [0x44fc90]
xor edi, edi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x43cd2d
nop dword [eax]
mov ecx, dword [0x44fc94]
mov eax, 0x2aaaaaab
sub ecx, dword [0x44fc90]
mov esi, dword [0x44f9ec]
sub esi, dword [0x44f9e8]
imul ecx
sar esi, 2
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jae 0x43ccc4
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
mov ecx, 0x44f9e8
call fcn.0043dcb0
mov ecx, dword [0x44fc94]
mov eax, 0x2aaaaaab
sub ecx, dword [0x44fc90]
mov esi, dword [0x44f9c8]
sub esi, dword [0x44f9c4]
imul ecx
sar esi, 2
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jae 0x43cd08
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
mov ecx, 0x44f9c4
call fcn.0043dcb0
mov ecx, dword [0x44fc94]
mov eax, 0x2aaaaaab
sub ecx, dword [0x44fc90]
inc edi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x43cc80
mov esi, dword [0x44f9b8]
cmp esi, dword [0x44f9bc]
je 0x43cd41
mov dword [0x44f9bc], esi
mov ecx, dword [0x44fc94]
mov eax, 0x2aaaaaab
sub ecx, dword [0x44fc90]
xor edi, edi
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x43d90b
xor edx, edx
mov dword [ebp - 0x1c], edx
nop word [eax + eax]
mov eax, dword [0x44f9e8]
movss xmm0, dword [eax + edi*4]
mov eax, dword [0x44f9c4]
ucomiss xmm0, dword [eax + edi*4]
lahf
test ah, 0x44
jp 0x43cdf5
mov eax, dword [0x44f9dc]
ucomiss xmm0, dword [eax + edi*4]
lahf
test ah, 0x44
jp 0x43cdf5
mov eax, dword [0x44f9bc]
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 0
cmp eax, dword [0x44f9c0]
je 0x43cde3
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
add dword [0x44f9bc], 0xc
jmp 0x43d8d9
lea ecx, [ebp - 0x2f8]
push ecx
push eax
call fcn.00441080
jmp 0x43d8d9
mov ecx, dword [0x44fc90]
movss xmm2, dword [edx + ecx]
ucomiss xmm2, dword [0x44abb8]
lahf
test ah, 0x44
jnp 0x43d8d9
movss xmm0, dword [edx + ecx + 8]
sub esp, 0xc
movss xmm1, dword [edx + ecx + 4]
mov ecx, esp
unpcklps xmm2, xmm1
movss dword [ebp - 0x348], xmm0
mov eax, dword [ebp - 0x348]
movq qword [ecx], xmm2
mov dword [ecx + 8], eax
lea ecx, [ebp - 0xb0]
call fcn.00439d80
movss xmm0, dword [0x44f984]
add esp, 0xc
call fcn.00401560
mulss xmm0, dword [0x44f22c]
mov ecx, dword [0x44f9bc]
movss xmm1, dword [ebp - 0xb0]
movss dword [ebp - 0xe8], xmm1
addss xmm0, dword [ebp - 0xac]
mov dword [ebp - 0xe0], 0
movss dword [ebp - 0xe4], xmm0
cmp ecx, dword [0x44f9c0]
je 0x43ceb3
movq xmm0, qword [ebp - 0xe8]
mov eax, dword [ebp - 0xe0]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
add dword [0x44f9bc], 0xc
jmp 0x43cec0
lea eax, [ebp - 0xe8]
push eax
push ecx
call fcn.00441080
movss xmm0, dword [0x44ace8]
comiss xmm0, dword [ebp - 0xb0]
ja 0x43d8d9
cmp byte [0x44f215], 0
jne 0x43cf70
push edi
mov ecx, 0x44f9d0
mov esi, 2
call fcn.0043ee00
push eax
lea ecx, [ebp - 0x8c]
call fcn.0043f290
mov edx, 0x44aab8
lea ecx, [ebp - 0x8c]
call fcn.0043fa80
test al, al
jne 0x43cf4e
mov edx, 0x44aabc
lea ecx, [ebp - 0x8c]
call fcn.0043fa80
test al, al
jne 0x43cf4e
mov edx, 0x44aac0
lea ecx, [ebp - 0x8c]
call fcn.0043fa80
test al, al
jne 0x43cf4e
mov edx, 0x44aac4
lea ecx, [ebp - 0x8c]
call fcn.0043fa80
test al, al
je 0x43cf53
mov esi, 1
lea ecx, [ebp - 0x8c]
cmp esi, dword [0x44f9b0]
jne 0x43cf6b
call fcn.0043f180
jmp 0x43d8d9
call fcn.0043f180
push edi
mov ecx, 0x44fc90
call fcn.0043dc20
push edi
movss xmm2, dword [eax + 8]
subss xmm2, dword [0x44ad20]
call fcn.0043dc20
push edi
movss xmm1, dword [eax + 4]
call fcn.0043dc20
sub esp, 0xc
movss dword [ebp - 0x354], xmm2
mov ecx, esp
movss xmm0, dword [eax]
mov eax, dword [ebp - 0x354]
unpcklps xmm0, xmm1
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x304]
call fcn.00439d80
movss xmm0, dword [ebp - 0x300]
add esp, 0xc
cmp byte [0x44f2a4], 0
movss xmm7, dword [ebp - 0xac]
subss xmm0, xmm7
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x44ac98]
cvttsd2si ecx, xmm0
je 0x43d5ee
mov eax, ecx
movd xmm4, ecx
cdq
and edx, 3
cvtdq2pd xmm4, xmm4
add eax, edx
sar eax, 2
cmp dword [0x44fdb8], 0
movd xmm1, eax
movaps xmm5, xmm4
movsd qword [ebp - 0x64], xmm4
divsd xmm5, qword [0x44aca8]
movaps xmm6, xmm4
mulsd xmm6, qword [0x44ac70]
cvtdq2ps xmm1, xmm1
jne 0x43d104
movss xmm2, dword [ebp - 0x304]
cvtps2pd xmm3, xmm7
push ecx
lea ecx, [ebp - 0x3c4]
mulsd xmm4, qword [0x44ac80]
movaps xmm0, xmm3
subsd xmm0, xmm6
movd xmm6, eax
cvtdq2ps xmm6, xmm6
addsd xmm4, xmm3
movss xmm3, dword [0x44f28c]
cvtpd2ps xmm1, xmm0
movaps xmm0, xmm2
subss xmm0, xmm6
movss dword [ebp - 0x1e8], xmm1
cvtpd2ps xmm1, xmm4
movss dword [ebp - 0x1ec], xmm0
cvtps2pd xmm0, xmm2
movss xmm2, dword [0x44f288]
addsd xmm0, xmm5
movss dword [ebp - 0x1e0], xmm1
movss xmm1, dword [0x44f284]
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x1e4], xmm0
movss xmm0, dword [0x44f290]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm0, dword [0x44f280]
lea edx, [ebp - 0x1e4]
movss xmm3, dword [0x44fdbc]
sub esp, 0x18
mov ecx, esp
movss dword [esp + 0x14], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x1ec]
call fcn.00438c70
add esp, 0x18
jmp 0x43d5ee
movss xmm0, dword [ebp - 0x304]
mov eax, 0x2aaaaaab
movaps xmm3, xmm0
subss xmm3, xmm1
cvtps2pd xmm0, xmm0
push ecx
cvtps2pd xmm1, xmm3
addsd xmm0, xmm5
movss dword [ebp - 0x14], xmm3
imul ecx
movss dword [ebp - 0x1fc], xmm3
subsd xmm1, xmm0
lea ecx, [ebp - 0x3d4]
mov esi, edx
shr esi, 0x1f
add esi, edx
cvtpd2ps xmm0, xmm1
movaps xmm2, xmm0
movss dword [ebp - 0xf4], xmm0
divss xmm2, dword [0x44acec]
cvtps2pd xmm0, xmm7
movss dword [ebp - 0x58], xmm2
subsd xmm0, xmm6
cvtpd2ps xmm1, xmm0
movsd qword [ebp - 0x24], xmm0
movaps xmm0, xmm3
movss xmm3, dword [0x44f28c]
subss xmm0, xmm2
movss xmm2, dword [0x44f288]
movss dword [ebp - 0x54], xmm1
movss dword [ebp - 0x1f0], xmm1
movss dword [ebp - 0x1f8], xmm1
movss xmm1, dword [0x44f284]
movss dword [ebp - 0xf0], xmm0
movss dword [ebp - 0x1f4], xmm0
movss xmm0, dword [0x44f290]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x1f4]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x1fc]
call fcn.00438b70
movd xmm0, esi
lea ecx, [ebp - 0x464]
cvtdq2ps xmm0, xmm0
add esp, 0xc
movss xmm3, dword [0x44f28c]
cvtps2pd xmm1, xmm0
movsd xmm0, qword [ebp - 0x24]
movss xmm2, dword [0x44f288]
addsd xmm0, xmm1
movsd qword [ebp - 0xd8], xmm1
movss xmm1, dword [ebp - 0x14]
movss dword [ebp - 0x204], xmm1
movss dword [ebp - 0x20c], xmm1
movss xmm1, dword [0x44f284]
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0xbc], xmm0
movss dword [ebp - 0x200], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebp - 0x208], xmm0
movss xmm0, dword [0x44f290]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x204]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x20c]
call fcn.00438b70
movsd xmm0, qword [ebp - 0x24]
addsd xmm0, qword [ebp - 0x64]
movss xmm2, dword [ebp - 0x14]
cvtpd2ps xmm1, xmm0
movss dword [ebp - 0x60], xmm1
subsd xmm0, qword [ebp - 0xd8]
movss xmm3, dword [0x44f28c]
lea ecx, [ebp - 0x3e4]
add esp, 0xc
movss dword [ebp - 0x214], xmm2
movss dword [ebp - 0x210], xmm1
movss xmm1, dword [0x44f284]
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x21c], xmm2
movss xmm2, dword [0x44f288]
movss dword [ebp - 0x20], xmm0
movss dword [ebp - 0x218], xmm0
movss xmm0, dword [0x44f290]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x214]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x21c]
call fcn.00438b70
movss xmm0, dword [ebp - 0xf0]
lea ecx, [ebp - 0x3f4]
movss xmm1, dword [ebp - 0x14]
add esp, 0xc
movss xmm3, dword [0x44f28c]
movss xmm2, dword [0x44f288]
movss dword [ebp - 0x224], xmm0
movss xmm0, dword [ebp - 0x60]
movss dword [ebp - 0x220], xmm0
movss dword [ebp - 0x228], xmm0
movss xmm0, dword [0x44f290]
movss dword [ebp - 0x22c], xmm1
movss xmm1, dword [0x44f284]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x224]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x22c]
call fcn.00438b70
movss xmm2, dword [ebp - 0x14]
lea ecx, [ebp - 0x404]
subss xmm2, dword [ebp - 0xf4]
movss xmm1, dword [ebp - 0x58]
add esp, 0xc
movss xmm0, dword [ebp - 0x54]
movss xmm3, dword [0x44f28c]
movss dword [ebp - 0x230], xmm0
addss xmm1, xmm2
movss dword [ebp - 0x238], xmm0
movss xmm0, dword [0x44f290]
movss dword [ebp - 0x14], xmm2
movss dword [ebp - 0x234], xmm2
movss xmm2, dword [0x44f288]
movss dword [ebp - 0x58], xmm1
movss dword [ebp - 0x23c], xmm1
movss xmm1, dword [0x44f284]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x234]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x23c]
call fcn.00438b70
movss xmm0, dword [ebp - 0xbc]
add esp, 0xc
movss xmm1, dword [ebp - 0x14]
movss dword [ebp - 0x240], xmm0
movss xmm0, dword [ebp - 0x54]
movss dword [ebp - 0x244], xmm1
movss dword [ebp - 0x24c], xmm1
movss dword [ebp - 0x248], xmm0
movss xmm0, dword [0x44f290]
lea ecx, [ebp - 0x414]
movss xmm3, dword [0x44f28c]
movss xmm2, dword [0x44f288]
movss xmm1, dword [0x44f284]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x244]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x24c]
call fcn.00438b70
movss xmm0, dword [ebp - 0x60]
lea ecx, [ebp - 0x424]
movss xmm1, dword [ebp - 0x14]
add esp, 0xc
movss xmm3, dword [0x44f28c]
movss xmm2, dword [0x44f288]
movss dword [ebp - 0x250], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [ebp - 0x258], xmm0
movss xmm0, dword [0x44f290]
movss dword [ebp - 0x254], xmm1
movss dword [ebp - 0x25c], xmm1
movss xmm1, dword [0x44f284]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x254]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x25c]
call fcn.00438b70
movss xmm0, dword [ebp - 0x58]
lea ecx, [ebp - 0x434]
movss xmm1, dword [ebp - 0x14]
add esp, 0xc
movss xmm3, dword [0x44f28c]
movss xmm2, dword [0x44f288]
movss dword [ebp - 0x264], xmm0
movss xmm0, dword [ebp - 0x60]
movss dword [ebp - 0x260], xmm0
movss dword [ebp - 0x268], xmm0
movss xmm0, dword [0x44f290]
movss dword [ebp - 0x26c], xmm1
movss xmm1, dword [0x44f284]
movss dword [esp], xmm0
call fcn.004011a0
movss xmm3, dword [0x44f280]
lea edx, [ebp - 0x264]
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
lea ecx, [ebp - 0x26c]
call fcn.00438b70
add esp, 0x10
push 0x44fd74
push edi
mov ecx, 0x44fc90
call fcn.0043dc20
mov ecx, eax
call fcn.00439a00
cmp byte [0x44f2a6], 0
xorps xmm7, xmm7
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x44ac78]
cvtsd2ss xmm7, xmm0
je 0x43d70a
push edi
mov ecx, 0x44fc90
call fcn.0043dc20
push edi
movss xmm2, dword [eax + 8]
subss xmm2, dword [0x44ad24]
call fcn.0043dc20
push edi
movss xmm1, dword [eax + 4]
call fcn.0043dc20
sub esp, 0xc
movss dword [ebp - 0x360], xmm2
mov ecx, esp
movss xmm0, dword [eax]
mov eax, dword [ebp - 0x360]
unpcklps xmm0, xmm1
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x344]
call fcn.00439d80
mov esi, dword [ebp - 0x6c]
add esp, 0xc
movss xmm0, dword [0x44f2a0]
movss xmm3, dword [0x44f29c]
movss xmm2, dword [0x44f298]
movss xmm1, dword [0x44f294]
push esi
push ecx
lea ecx, [ebp - 0x444]
mov byte [ebp - 0xd], 1
movss dword [esp], xmm0
call fcn.004011a0
sub esp, 0x10
mov ecx, esp
sub esp, 0x18
cvttss2si edx, xmm7
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
mov ecx, esp
movss xmm0, dword [ebp - 0x344]
movss dword [ebp - 0x274], xmm0
movss xmm0, dword [ebp - 0x340]
movss dword [ebp - 0x270], xmm0
call fcn.00434ad0
mov dl, byte [ebp - 0xd]
lea ecx, [ebp - 0x274]
movss xmm2, dword [0x44ad10]
call fcn.00438d80
add esp, 0x2c
jmp 0x43d70d
mov esi, dword [ebp - 0x6c]
cmp byte [0x44f2a5], 0
je 0x43d80c
push edi
mov ecx, 0x44fc90
call fcn.0043dc20
push edi
movss xmm2, dword [eax + 8]
addss xmm2, dword [0x44ad1c]
call fcn.0043dc20
push edi
movss xmm1, dword [eax + 4]
call fcn.0043dc20
sub esp, 0xc
movss dword [ebp - 0x36c], xmm2
mov ecx, esp
movss xmm0, dword [eax]
mov eax, dword [ebp - 0x36c]
unpcklps xmm0, xmm1
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x338]
call fcn.00439d80
movss xmm0, dword [0x44f2b4]
add esp, 0xc
movss xmm3, dword [0x44f2b0]
movss xmm2, dword [0x44f2ac]
movss xmm1, dword [0x44f2a8]
push esi
push ecx
lea ecx, [ebp - 0x454]
mov byte [ebp - 0xd], 1
movss dword [esp], xmm0
call fcn.004011a0
movss xmm1, dword [ebp - 0x334]
sub esp, 0x10
subss xmm1, dword [0x44acf8]
mov ecx, esp
sub esp, 0x18
movups xmm0, xmmword [eax]
mov esi, esp
movups xmmword [ecx], xmm0
mov ecx, 0x44fa00
movss xmm0, dword [ebp - 0x338]
push edi
movss dword [ebp - 0x27c], xmm0
movss dword [ebp - 0x278], xmm1
call fcn.0043ee00
push eax
mov ecx, esi
call fcn.0043f290
mov dl, byte [ebp - 0xd]
lea ecx, [ebp - 0x27c]
movss xmm2, dword [0x44ad10]
call fcn.00438d80
add esp, 0x2c
cmp byte [0x44f216], 0
je 0x43d8d9
cmp dword [0x44f98c], 0
jne 0x43d8d9
movss xmm0, dword [ebp - 0x30]
lea eax, [ebp - 0x310]
movss dword [ebp - 0x310], xmm0
lea ecx, [ebp - 0xb0]
movss xmm0, dword [ebp - 0x34]
push eax
movss dword [ebp - 0x30c], xmm0
mov dword [ebp - 0x308], 0
call fcn.00439a00
movaps xmm3, xmm0
comiss xmm3, dword [0x44ad38]
ja 0x43d8d9
movss xmm4, dword [ebp - 0x30]
movss xmm0, dword [ebp - 0x70]
movaps xmm1, xmm4
movss xmm2, dword [ebp - 0xb0]
subss xmm1, xmm0
comiss xmm2, xmm1
jb 0x43d8d9
addss xmm0, xmm4
comiss xmm0, xmm2
jb 0x43d8d9
movss xmm2, dword [ebp - 0x34]
movss xmm4, dword [ebp - 0x5c]
movaps xmm0, xmm2
movss xmm1, dword [ebp - 0xac]
subss xmm0, xmm4
comiss xmm1, xmm0
jb 0x43d8d9
movaps xmm0, xmm4
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x43d8d9
movsd xmm1, qword [ebp - 0xb8]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm3
comisd xmm1, xmm0
jbe 0x43d8d9
movsd qword [ebp - 0xb8], xmm0
mov dword [ebp - 0x74], edi
mov ecx, dword [0x44fc94]
mov eax, 0x2aaaaaab
sub ecx, dword [0x44fc90]
inc edi
add dword [ebp - 0x1c], 0xc
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x1c]
cmp edi, eax
jb 0x43cd70
mov esi, dword [0x44f9b8]
cmp byte [0x44f216], 0
mov edi, dword [ebp - 0x18]
je 0x43d9ae
mov eax, dword [ebp - 0x74]
cmp eax, 0xffffffff
je 0x43d9ae
movss xmm0, dword [ebp - 0x30]
lea eax, [eax + eax*2]
movss xmm2, dword [esi + eax*4]
movss xmm1, dword [0x44f228]
cvtps2pd xmm2, xmm2
cvtps2pd xmm0, xmm0
cvtps2pd xmm1, xmm1
subsd xmm2, xmm0
movss xmm0, dword [ebp - 0x34]
cvtps2pd xmm0, xmm0
divsd xmm2, xmm1
push dword [0x44f088]
movsd qword [ebp - 0xb8], xmm2
movss xmm2, dword [esi + eax*4 + 4]
cvtps2pd xmm2, xmm2
subsd xmm2, xmm0
divsd xmm2, xmm1
movsd qword [ebp - 0xd8], xmm2
call edi
test ax, ax
js 0x43d990
push dword [0x44f094]
call edi
test ax, ax
jns 0x43d9ae
cvttsd2si eax, qword [ebp - 0xd8]
push 0
push 0
push eax
cvttsd2si eax, qword [ebp - 0xb8]
push eax
push 1
call dword [ebp - 0xc4]
mov ecx, dword [0x44f978]
mov eax, dword [ecx + 0x199c]
mov byte [eax + 0x7c], 1
mov ecx, dword [ecx + 0x199c]
mov ecx, dword [ecx + 0x278]
call fcn.0041c710
call fcn.0040cdd0
mov esi, dword [0x44f978]
mov eax, dword [esi + 0x1a04]
mov ecx, dword [esi + 0x1a0c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
mov ecx, 2
movups xmmword [esi + eax*8 + 0x15b8], xmm0
dec dword [esi + 0x1a04]
call fcn.0040d530
call fcn.004075d0
call fcn.00407880
mov eax, dword [0x44f978]
xor ecx, ecx
add eax, 0x1bd4
cmp byte [eax], cl
cmovne ecx, eax
call fcn.004334f0
mov eax, dword [0x44fd4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov esi, dword [ebp - 0xc8]
mov eax, dword [0x44fd4c]
push 0
push 0
push 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
cmp eax, 0x88760868
jne 0x43da76
mov eax, dword [0x44fd4c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x43da76
call fcn.00434b90
call fcn.00439a40
cmp dword [ebp - 0x328], 0x12
je 0x43da8d
mov ecx, dword [ebp - 0x28]
jmp 0x43b3a0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp dword [0x44fcb4], 0
je 0x43daf7
mov ecx, dword [0x44fcb8]
test ecx, ecx
je 0x43dab0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fcb8], 0
mov ecx, dword [0x44fcb0]
test ecx, ecx
je 0x43daca
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fcb0], 0
mov ecx, dword [0x44fcac]
mov esi, dword [0x44f978]
test ecx, ecx
je 0x43dae0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fcac], 0
mov eax, dword [esi + 0x94]
mov dword [eax + 8], 0
mov esi, dword [0x44f978]
mov ecx, esi
mov dword [0x44fcb4], 0
mov dword [0x44fcbc], 0
call fcn.00406d10
cmp dword [0x44f978], esi
jne 0x43db2a
mov dword [0x44f978], 0
test esi, esi
je 0x43db4e
mov ecx, esi
call fcn.00414600
mov eax, dword [0x44f978]
test eax, eax
je 0x43db44
dec dword [eax + 0x370]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov ecx, dword [0x44fd4c]
test ecx, ecx
je 0x43db68
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fd4c], 0
mov ecx, dword [0x44fd30]
test ecx, ecx
je 0x43db82
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fd30], 0
push dword [0x44fd38]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [ebp - 0x2d8]
push dword [ebp - 0x2c4]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x44fd30]
mov edx, dword [0x44fd4c]
test edx, edx
je 0x43dbd8
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x44fd30]
mov dword [0x44fd4c], 0
test ecx, ecx
je 0x43dbec
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fd30], 0
push dword [ebp - 0x2d8]
push dword [ebp - 0x2c4]
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov ecx, dword [ebp - 0xc]
mov eax, 1
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00434ac0
int3