Function at 0x18004b810
Capabilities:
Create process on windows
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xdc8]
sub rsp, 0xea0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18008c040]
xor rax, rsp
mov qword [rbp + 0xcf0], rax
xor r15d, r15d
mov edi, r15d
mov dword [rsp + 0x40], r15d
cmp byte [0x1801ba5cc], r15b
je 0x18004f463
mov r12d, dword [0x1801ba2dc]
mov rax, qword gs:[0x58]
mov edx, 0x10
mov ebx, edx
mov rsi, qword [rax + r12*8]
mov eax, dword [rsi + rdx]
cmp dword [0x1801ba708], eax
jle 0x18004b8f9
lea rcx, [0x1801ba708]
call fcn.18006eecc
cmp dword [0x1801ba708], 0xffffffff
jne 0x18004b8f9
mov rax, qword [0x1801ba330]
add rax, 0x38e8
mov qword [0x1801ba710], rax
lea rcx, [0x1801ba708]
call fcn.18006ee60
mov rax, qword [0x1801ba710]
mov qword [rax + 8], r15
mov dword [rax + 0x4c], 0x41200000
mov dword [rax + 0x50], 0x40400000
mov dword [rax + 0x54], 0x40c00000
mov dword [rax + 0x58], 0x40c00000
mov dword [rax + 0x10], 0x40a00000
mov dword [rax + 0x2c], 0x40a00000
mov dword [rax + 0x44], 0x40a00000
mov eax, dword [rsi + rbx]
cmp dword [0x1801ba70c], eax
jle 0x18004b975
lea rcx, [0x1801ba70c]
call fcn.18006eecc
cmp dword [0x1801ba70c], 0xffffffff
jne 0x18004b975
mov rax, qword [0x1801ba330]
add rax, 0x39d4
mov qword [0x1801ba720], rax
lea rcx, [0x1801ba70c]
call fcn.18006ee60
movaps xmm0, xmmword [0x18007f190]
movups xmmword [rbp + 0x600], xmm0
mov rax, qword [0x1801ba720]
movups xmmword [rax + 0x20], xmm0
movaps xmm0, xmmword [0x18007f130]
movups xmmword [rbp + 0x610], xmm0
movups xmmword [rax + 0x50], xmm0
movaps xmm1, xmmword [0x18007f190]
movups xmmword [rbp + 0x620], xmm1
movups xmmword [rax + 0xa0], xmm1
movaps xmm0, xmm1
movups xmmword [rbp + 0x630], xmm1
movups xmmword [rax + 0xb0], xmm1
movups xmmword [rbp + 0x640], xmm1
movups xmmword [rax + 0xc0], xmm1
movups xmmword [rbp + 0x650], xmm1
movups xmmword [rax + 0x180], xmm1
movups xmmword [rbp + 0x660], xmm1
movups xmmword [rax + 0x1a0], xmm1
movups xmmword [rbp + 0x670], xmm1
movups xmmword [rax + 0x190], xmm1
movaps xmm1, xmmword [0x18007f1d0]
movups xmmword [rbp + 0x680], xmm1
movups xmmword [rax + 0x150], xmm1
movaps xmm0, xmmword [0x18007f200]
movups xmmword [rbp + 0x690], xmm0
movups xmmword [rax + 0x170], xmm0
movaps xmm1, xmmword [0x18007f1e0]
movups xmmword [rbp + 0x6a0], xmm1
movups xmmword [rax + 0x160], xmm1
movaps xmm0, xmmword [0x18007f1d0]
movups xmmword [rbp + 0x450], xmm0
movups xmmword [rax + 0x70], xmm0
movups xmmword [rbp + 0x460], xmm1
movups xmmword [rax + 0x80], xmm1
movaps xmm0, xmmword [0x18007f200]
movups xmmword [rbp + 0x470], xmm0
movups xmmword [rax + 0x90], xmm0
movaps xmm1, xmmword [0x18007f170]
movups xmmword [rbp + 0x480], xmm1
movups xmmword [rax + 0x120], xmm1
mov rax, qword [0x1801ba330]
or dword [rax + 0x4a08], 2
mov dword [rax + 0x4a28], 0x44480000
mov dword [rax + 0x4a2c], 0x43fa0000
mov dword [rax + 0x4a10], 1
xor edx, edx
lea r8d, [rdx + 0x23]
lea rcx, str.github.com_hellokittyfan48
call fcn.180011820
mov rcx, qword [0x1801ba5b8]
call fcn.180014640
xorps xmm6, xmm6
movups xmmword [rbp + 0x490], xmm6
mov rbx, qword [0x1801ba330]
mov r14d, 3
mov dword [rbp + 0x290], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x294], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x290]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], r14d
je 0x18004bb20
movups xmmword [rbx + 0x3a04], xmm6
mov rbx, qword [0x1801ba330]
lea rcx, [rbx + 0x4a90]
movss xmm1, dword [rbx + 0x38f0]
movss xmm0, dword [rbx + 0x38f4]
mov r13d, 2
mov dword [rbp + 0x160], r13d
movss dword [rbp + 0x164], xmm1
movss dword [rbp + 0x168], xmm0
lea rdx, [rbp + 0x160]
call fcn.180020170
mov dword [rbx + 0x38f0], 0x41200000
mov dword [rbx + 0x38f4], 0x41200000
mov rbx, qword [0x1801ba330]
mov rcx, qword [rbx + 0x4008]
cmp qword [rcx + 0x1b8], rdi
jne 0x18004bba2
cmp qword [rbx + 0x4df8], rdi
lea rax, [rcx + 0x264]
je 0x18004bba9
lea rax, [rcx + 0x234]
movss xmm0, dword [rax]
subss xmm0, dword [rcx + 0x2c]
mov rax, qword [0x1801ba710]
subss xmm0, dword [rax + 8]
movss xmm11, dword [0x18007efbc]
mov dword [rbp + 8], 0x431e0000
movss dword [rbp + 0xc], xmm0
mov byte [rcx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Sidebar
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004bc22
lea r8, str.Sidebar
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rbp + 8]
mov edx, esi
lea rcx, str.Sidebar
call fcn.18000e3d0
movss xmm14, dword [0x18007eedc]
movss xmm12, dword [0x18007effc]
xorps xmm15, xmm15
test al, al
je 0x18004c172
mov rbx, qword [0x1801ba330]
mov rax, qword [rbx + 0x4008]
movss xmm8, dword [rax + 0x28]
movss xmm6, dword [rax + 0x2c]
movss xmm7, dword [rax + 0x30]
lea rcx, [rbx + 0x4a90]
movss xmm1, dword [rbx + 0x38f0]
movss xmm0, dword [rbx + 0x38f4]
mov dword [rbp + 0x148], r13d
movss dword [rbp + 0x14c], xmm1
movss dword [rbp + 0x150], xmm0
lea rdx, [rbp + 0x148]
call fcn.180020170
mov dword [rbx + 0x38f0], 0x41200000
mov dword [rbx + 0x38f4], 0x41200000
call fcn.1800183c0
mov dword [rbp + 0x10], 0x431e0000
mov dword [rbp + 0x14], 0x41000000
lea rcx, [rbp + 0x10]
call fcn.180038850
mov rcx, qword [0x1801ba5b0]
call fcn.180014640
lea rcx, str.__WW_Enhancer
call fcn.180036570
call fcn.1800146e0
mov dword [rbp + 0x18], 0x431e0000
mov dword [rbp + 0x1c], 0x41700000
lea rcx, [rbp + 0x18]
call fcn.180038850
call fcn.1800183c0
mov ecx, 1
call fcn.180008650
movaps xmm1, xmm7
mulss xmm1, xmm14
addss xmm1, xmm8
addss xmm6, dword [0x18007ef9c]
movss dword [rbp + 0x28], xmm8
movss dword [rbp + 0x2c], xmm6
movaps xmm0, xmm6
movss xmm13, dword [0x18007ef58]
addss xmm0, xmm13
movss dword [rbp + 0x20], xmm1
movss dword [rbp + 0x24], xmm0
movss dword [rbp + 0x38], xmm1
movss dword [rbp + 0x3c], xmm6
addss xmm7, xmm8
movss dword [rbp + 0x30], xmm7
movss dword [rbp + 0x34], xmm0
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 0xffff73c0
mov dword [rsp + 0x20], 0xffff73c0
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x28]
mov rcx, qword [rax + 0x2a8]
call fcn.18002bfe0
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
mov dword [rsp + 0x30], 0xffff73c0
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, 0xffff73c0
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x38]
mov rcx, qword [rax + 0x2a8]
call fcn.18002bfe0
mov ebx, r15d
mov rax, qword [0x1801ba390]
mov rdx, qword [0x1801ba388]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18004c16d
xor r12d, r12d
mov r14d, r12d
lea r15, [0x18007a610]
movss xmm9, dword [0x18007eff0]
movss xmm10, dword [0x18007ef14]
nop dword [rax]
add rdx, r14
cmp qword [rdx + 0x18], 0xf
jbe 0x18004be5d
mov rdx, qword [rdx]
mov rax, qword [0x1801ba330]
test rdx, rdx
je 0x18004beb0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdx
movss dword [rsp + 0x20], xmm12
movaps xmm3, xmm9
movss xmm2, dword [rax + 0x3d40]
lea rdx, [rbp]
mov rcx, qword [rax + 0x3d38]
call fcn.18002fe50
movss xmm0, dword [rbp]
addss xmm0, xmm10
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp], xmm0
mov rsi, qword [0x1801ba330]
movups xmm0, xmmword [rsi + 0x39d4]
lea rcx, [rsi + 0x4a80]
cmp ebx, dword [0x1801ba520]
jne 0x18004c059
movaps xmm6, xmmword [0x18007f220]
movups xmmword [rbp + 0x5f0], xmm6
mov dword [rbp + 0x260], r12d
movups xmmword [rbp + 0x264], xmm0
lea rdx, [rbp + 0x260]
call fcn.1800202b0
cmp dword [rsi + 0x4a7c], edi
je 0x18004bf08
movups xmmword [rsi + 0x39d4], xmm6
mov qword [rbp + 0x40], rdi
mov rcx, qword [0x1801ba388]
add rcx, r14
cmp qword [rcx + 0x18], 0xf
jbe 0x18004bf20
mov rcx, qword [rcx]
lea rdx, [rbp + 0x40]
call fcn.180036f00
test al, al
je 0x18004bf33
mov dword [0x1801ba520], ebx
mov rcx, qword [0x1801ba330]
movss xmm8, dword [rcx + 0x49c4]
movss xmm6, dword [rcx + 0x49c8]
movss xmm7, dword [rcx + 0x49d0]
movss dword [rbp + 0x50], xmm8
movss dword [rbp + 0x54], xmm7
movaps xmm0, xmm8
addss xmm0, xmm13
movss dword [rbp + 0x48], xmm0
movss dword [rbp + 0x4c], xmm6
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
mov r10, qword [rax + 0x2a8]
movaps xmm0, xmmword [0x18007f210]
movups xmmword [rbp + 0x410], xmm0
lea rcx, [rbp + 0x410]
call fcn.1800080d0
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm15
mov r9d, eax
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x50]
mov rcx, r10
call fcn.18002be30
movss dword [rbp + 0x60], xmm8
movss dword [rbp + 0x64], xmm6
addss xmm8, xmm11
movss dword [rbp + 0x58], xmm8
movss dword [rbp + 0x5c], xmm7
movaps xmm0, xmmword [0x18007f150]
movups xmmword [rbp + 0x810], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x800], xmm1
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
mov r10, qword [rax + 0x2a8]
lea rcx, [rbp + 0x810]
call fcn.1800080d0
mov r9d, eax
lea rcx, [rbp + 0x800]
call fcn.1800080d0
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
mov rcx, r10
call fcn.18002bfe0
jmp 0x18004c0fa
movaps xmm6, xmmword [0x18007f140]
mov dword [rbp + 0x368], r12d
movups xmmword [rbp + 0x36c], xmm0
lea rdx, [rbp + 0x368]
call fcn.1800202b0
cmp dword [rsi + 0x4a7c], edi
je 0x18004c089
movups xmmword [rsi + 0x39d4], xmm6
mov qword [rbp + 0x68], rdi
mov rcx, qword [0x1801ba388]
add rcx, r14
cmp qword [rcx + 0x18], 0xf
jbe 0x18004c0a1
mov rcx, qword [rcx]
lea rdx, [rbp + 0x68]
call fcn.1800371e0
test al, al
je 0x18004c0fa
mov edx, r12d
lea rcx, [0x18007a618]
nop dword [rax + rax]
mov rax, qword [rcx - 8]
mov byte [rax], dil
mov rax, qword [rcx]
mov byte [rax], dil
mov rax, qword [rcx + 8]
mov byte [rax], dil
mov rax, qword [rcx + 0x10]
mov byte [rax], dil
mov rax, qword [rcx + 0x18]
mov byte [rax], dil
add edx, 5
lea rcx, [rcx + 0x28]
cmp edx, 5
jb 0x18004c0c0
mov dword [0x1801ba520], ebx
mov rax, qword [r15]
mov byte [rax], 1
mov r8, qword [0x1801ba330]
movsxd rax, dword [r8 + 0x4a80]
cmp eax, 1
jl 0x18004c135
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
inc ebx
add r14, 0x20
add r15, 8
mov rcx, qword [0x1801ba390]
mov rdx, qword [0x1801ba388]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x18004be50
mov r14d, 3
mov r12d, dword [0x1801ba2dc]
call fcn.18000e790
mov ecx, 1
call fcn.180008650
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
call fcn.1800146e0
mov rcx, qword [0x1801ba5a8]
call fcn.180014640
movaps xmm6, xmmword [0x18007f1b0]
movups xmmword [rbp + 0x4a0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x380], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x384], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x380]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 3
je 0x18004c1e7
movups xmmword [rbx + 0x3a04], xmm6
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
mov r8, qword [rdx + 0x1b8]
test r8, r8
jne 0x18004c225
cmp qword [rbx + 0x4df8], rdi
jne 0x18004c225
movss xmm1, dword [rdx + 0x264]
subss xmm1, dword [rdx + 0x114]
mov rax, rdx
add rax, 0x260
jmp 0x18004c254
movss xmm1, dword [rdx + 0x234]
subss xmm1, dword [rdx + 0x114]
mov rax, rdx
test r8, r8
jne 0x18004c24e
cmp qword [rbx + 0x4df8], rdi
jne 0x18004c24e
add rax, 0x260
jmp 0x18004c254
add rax, 0x230
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x110]
movss dword [rbp + 0x70], xmm0
movss dword [rbp + 0x74], xmm1
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Main
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004c2b9
lea r8, str.Main
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, [rbp + 0x70]
mov edx, esi
lea rcx, str.Main
call fcn.18000e3d0
test al, al
je 0x18004f41e
mov rbx, qword [0x1801ba330]
lea rcx, [rbx + 0x4a90]
movss xmm1, dword [rbx + 0x38f0]
movss xmm0, dword [rbx + 0x38f4]
mov dword [rbp + 0x154], r13d
movss dword [rbp + 0x158], xmm1
movss dword [rbp + 0x15c], xmm0
lea rdx, [rbp + 0x154]
call fcn.180020170
mov dword [rbx + 0x38f0], 0x41a00000
mov dword [rbx + 0x38f4], 0x41a00000
xorps xmm6, xmm6
movups xmmword [rbp + 0x4b0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x398], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x39c], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x398]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 3
je 0x18004c37f
movups xmmword [rbx + 0x3a04], xmm6
movups xmmword [rbp + 0x4c0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x278], 5
movups xmm0, xmmword [rbx + 0x3a24]
movups xmmword [rbp + 0x27c], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x278]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 5
je 0x18004c3c8
movups xmmword [rbx + 0x3a24], xmm6
lea r15, [0x180075b14]
mov rax, qword [0x18007a610]
cmp byte [rax], dil
je 0x18004cc11
mov qword [rbp + 0x78], rdi
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Player
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004c440
lea r8, str.Player
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, [rbp + 0x78]
mov edx, esi
lea rcx, str.Player
call fcn.18000e3d0
test al, al
je 0x18004cc11
movaps xmm6, xmmword [0x18007f190]
movups xmmword [rbp + 0x4d0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x248], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x24c], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x248]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 3
je 0x18004c4b5
movups xmmword [rbx + 0x3a04], xmm6
movaps xmm6, xmmword [0x18007f130]
movups xmmword [rbp + 0x4e0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x230], 5
movups xmm0, xmmword [rbx + 0x3a24]
movups xmmword [rbp + 0x234], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x230]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 5
je 0x18004c505
movups xmmword [rbx + 0x3a24], xmm6
call fcn.1800183c0
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004c531
cmp qword [rbx + 0x4df8], rdi
lea rax, [rdx + 0x260]
je 0x18004c538
lea rax, [rdx + 0x230]
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0x80], xmm1
mov dword [rbp + 0x84], 0x43020000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Multihit
call fcn.180007a60
mov esi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x18004c5bf
lea r8, str.Multihit
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x80]
mov edx, esi
lea rcx, str.Multihit
call fcn.18000e3d0
test al, al
je 0x18004c684
lea rdx, [0x1801ba5ca]
lea rcx, str.Force_critical
call fcn.180038090
lea rdx, str.Requires_game_reload
lea rcx, [0x180075b18]
call fcn.180066910
lea rdx, [0x1801ba5cb]
lea rcx, str.Multihit
call fcn.180038090
mov rax, qword [0x1801ba330]
or dword [rax + 0x4998], 1
mov dword [rax + 0x49a8], 0x437b0000
mov dword [rbp + 0x760], 0x64
mov dword [rbp + 0x758], 1
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x760]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x758]
lea r8, [0x1801b9448]
mov edx, 4
lea rcx, str.Hits
call fcn.18003a4b0
call fcn.18000e790
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004c6ab
cmp qword [rbx + 0x4df8], rdi
lea rax, [rdx + 0x260]
je 0x18004c6b2
lea rax, [rdx + 0x230]
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0x88], xmm1
mov dword [rbp + 0x8c], 0x42dc0000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Godmode
call fcn.180007a60
mov esi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x18004c739
lea r8, str.Godmode
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x88]
mov edx, esi
lea rcx, str.Godmode
call fcn.18000e3d0
test al, al
je 0x18004c7c4
lea rdx, [0x1801ba5c7]
lea rcx, str.Godmode
call fcn.180038090
lea rdx, [0x1801ba5c3]
lea rcx, str.No_fall
call fcn.180038090
lea rdx, str.Requires_game_reload
lea rcx, [0x180075b18]
call fcn.180066910
lea rdx, [0x1801ba5c4]
lea rcx, str.Infinite_stamina
call fcn.180038090
lea rdx, str.Doesnt_work
lea rcx, [0x18007bb40]
call fcn.180066910
call fcn.18000e790
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004c7eb
cmp qword [rbx + 0x4df8], rdi
lea rax, [rdx + 0x260]
je 0x18004c7f2
lea rax, [rdx + 0x230]
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0x90], xmm1
mov dword [rbp + 0x94], 0x42700000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.NoCD
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004c879
lea r8, str.NoCD
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x90]
mov edx, esi
lea rcx, str.NoCD
call fcn.18000e3d0
test al, al
je 0x18004c8cb
lea rdx, [0x1801ba5c6]
lea rcx, str.No_cooldown
call fcn.180038090
lea rdx, str.Requires_game_reload
lea rcx, [0x180075b18]
call fcn.180066910
call fcn.18000e790
call fcn.180018500
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004c904
cmp qword [rbx + 0x4df8], rdi
lea rcx, [rdx + 0x260]
je 0x18004c90b
lea rcx, [rdx + 0x230]
movss xmm0, dword [rcx]
subss xmm0, dword [rdx + 0x110]
movss dword [rbp + 0x98], xmm0
mov dword [rbp + 0x9c], 0x43680000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Movement
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004c978
lea r8, str.Movement
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x98]
mov edx, esi
lea rcx, str.Movement
call fcn.18000e3d0
test al, al
je 0x18004cbb6
lea rdx, [0x1801ba5c9]
lea rcx, [0x18007bb6c]
call fcn.180038090
mov rax, qword [0x1801ba330]
mov rdx, qword [rax + 0x4008]
mov rcx, rdx
cmp qword [rdx + 0x1b8], rdi
jne 0x18004c9e2
cmp qword [rax + 0x4df8], rdi
jne 0x18004c9e2
add rcx, 0x260
jmp 0x18004c9e9
add rcx, 0x230
movss xmm2, dword [rcx]
subss xmm2, dword [rdx + 0x110]
movss xmm0, dword [rax + 0x3928]
addss xmm0, xmm0
addss xmm0, dword [rax + 0x3d40]
subss xmm2, xmm0
movaps xmm1, xmm12
movaps xmm0, xmm2
call fcn.180018180
mov qword [rbp + 0xa0], rdi
lea rdx, [rbp + 0xa0]
lea rcx, [0x1801ba5e0]
call fcn.180066a90
lea rdx, [0x1801ba5c8]
lea rcx, str.Noclip
call fcn.180038090
mov rax, qword [0x1801ba330]
or dword [rax + 0x4998], 1
mov dword [rax + 0x49a8], 0x437b0000
mov dword [rbp + 0x750], 0x3e8
mov dword [rbp + 0x748], 1
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x750]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x748]
lea r8, [0x1801b944c]
mov edx, 4
lea rcx, str.Fly_speed
call fcn.18003a4b0
lea rdx, [0x1801ba5c2]
lea rcx, str.Spider
call fcn.180038090
lea rdx, str.Lets_you_walk_on_walls_inclined_90_degrees_or_more
lea rcx, [0x180075b18]
call fcn.180066910
lea rdx, [0x1801ba5c5]
lea rcx, str.Player_speed
call fcn.180038090
mov rax, qword [0x1801ba330]
movss xmm1, dword [rax + 0x3928]
addss xmm1, xmm1
addss xmm1, dword [rax + 0x3d40]
mov rdx, qword [rax + 0x4008]
mov rcx, rdx
cmp qword [rdx + 0x1b8], rdi
jne 0x18004cb1b
cmp qword [rax + 0x4df8], rdi
jne 0x18004cb1b
add rcx, 0x260
jmp 0x18004cb22
add rcx, 0x230
movss xmm0, dword [rcx]
subss xmm0, dword [rdx + 0x110]
subss xmm0, xmm1
movaps xmm1, xmm12
call fcn.180018180
mov qword [rbp + 0xa8], rdi
lea rdx, [rbp + 0xa8]
lea rcx, [0x1801ba5e4]
call fcn.180066a90
mov rax, qword [0x1801ba330]
or dword [rax + 0x4998], 1
mov dword [rax + 0x49a8], 0x437b0000
mov dword [rbp + 0x740], 0x3e8
mov dword [rbp + 0x7a0], 1
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x740]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x7a0]
lea r8, [0x1801b9444]
mov edx, 4
lea rcx, str.Speed
call fcn.18003a4b0
call fcn.18000e790
mov r9d, r13d
mov r8, qword [0x1801ba330]
mov eax, dword [r8 + 0x4a80]
cmp eax, r13d
jge 0x18004cbd3
mov r9d, eax
test eax, eax
jle 0x18004cc0c
cdqe
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
mov eax, dword [r8 + 0x4a80]
dec r9d
test r9d, r9d
jg 0x18004cbd3
call fcn.18000e790
lea r15, str._.3f
mov rax, qword [0x18007a618]
cmp byte [rax], dil
je 0x18004d05e
mov qword [rbp + 0xb0], rdi
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.World
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004cc8c
lea r8, str.World
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, [rbp + 0xb0]
mov edx, esi
lea rcx, str.World
call fcn.18000e3d0
test al, al
je 0x18004d05e
movaps xmm6, xmmword [0x18007f190]
movups xmmword [rbp + 0x4f0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x218], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x21c], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x218]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 3
je 0x18004cd04
movups xmmword [rbx + 0x3a04], xmm6
movaps xmm6, xmmword [0x18007f130]
movups xmmword [rbp + 0x500], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x200], 5
movups xmm0, xmmword [rbx + 0x3a24]
movups xmmword [rbp + 0x204], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x200]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 5
je 0x18004cd54
movups xmmword [rbx + 0x3a24], xmm6
call fcn.1800183c0
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004cd80
cmp qword [rbx + 0x4df8], rdi
lea rax, [rdx + 0x260]
je 0x18004cd87
lea rax, [rdx + 0x230]
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0xb8], xmm1
mov dword [rbp + 0xbc], 0x42700000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Dumb_Enemies
call fcn.180007a60
mov esi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x18004ce0e
lea r8, str.Dumb_Enemies
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0xb8]
mov edx, esi
lea rcx, str.Dumb_Enemies
call fcn.18000e3d0
test al, al
je 0x18004ce4d
lea rdx, [0x1801ba5c0]
lea rcx, str.Dumb_Enemies
call fcn.180038090
call fcn.18000e790
call fcn.180018500
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004ce86
cmp qword [rbx + 0x4df8], rdi
lea rcx, [rdx + 0x260]
je 0x18004ce8d
lea rcx, [rdx + 0x230]
movss xmm0, dword [rcx]
subss xmm0, dword [rdx + 0x110]
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x42c80000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Speedhack
call fcn.180007a60
mov esi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x18004cefa
lea r8, str.Speedhack
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0xc0]
mov edx, esi
lea rcx, str.Speedhack
call fcn.18000e3d0
test al, al
je 0x18004cffe
lea rdx, [0x1801ba5c1]
lea rcx, str.Speedhack
call fcn.180038090
mov rax, qword [0x1801ba330]
mov rdx, qword [rax + 0x4008]
mov rcx, rdx
cmp qword [rdx + 0x1b8], rdi
jne 0x18004cf64
cmp qword [rax + 0x4df8], rdi
jne 0x18004cf64
add rcx, 0x260
jmp 0x18004cf6b
add rcx, 0x230
movss xmm2, dword [rcx]
subss xmm2, dword [rdx + 0x110]
movss xmm0, dword [rax + 0x3928]
addss xmm0, xmm0
addss xmm0, dword [rax + 0x3d40]
subss xmm2, xmm0
movaps xmm1, xmm12
movaps xmm0, xmm2
call fcn.180018180
mov qword [rbp + 0xc8], rdi
lea rdx, [rbp + 0xc8]
lea rcx, [0x1801ba5d8]
call fcn.180066a90
mov dword [rbp + 0x798], 0x41700000
mov dword [rbp + 0x790], 0x3f800000
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x798]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x790]
lea r8, [0x1801b9440]
mov edx, 8
lea rcx, str.Speed
call fcn.18003a4b0
call fcn.18000e790
mov r9d, r13d
mov r8, qword [0x1801ba330]
mov eax, dword [r8 + 0x4a80]
cmp eax, r13d
jge 0x18004d020
mov r9d, eax
test eax, eax
jle 0x18004d059
nop dword [rax + rax]
cdqe
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
mov eax, dword [r8 + 0x4a80]
dec r9d
test r9d, r9d
jg 0x18004d020
call fcn.18000e790
mov rax, qword [0x18007a620]
cmp byte [rax], dil
je 0x18004d5ee
mov qword [rbp + 0xd0], rdi
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Visuals
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004d0d2
lea r8, str.Visuals
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, [rbp + 0xd0]
mov edx, esi
lea rcx, str.Visuals
call fcn.18000e3d0
test al, al
je 0x18004d5ee
movaps xmm6, xmmword [0x18007f190]
movups xmmword [rbp + 0x510], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x3e0], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x3e4], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x3e0]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 3
je 0x18004d14a
movups xmmword [rbx + 0x3a04], xmm6
movaps xmm6, xmmword [0x18007f130]
movups xmmword [rbp + 0x520], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x3c8], 5
movups xmm0, xmmword [rbx + 0x3a24]
movups xmmword [rbp + 0x3cc], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x3c8]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 5
je 0x18004d19a
movups xmmword [rbx + 0x3a24], xmm6
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
mov r8, qword [rdx + 0x1b8]
test r8, r8
jne 0x18004d1d8
cmp qword [rbx + 0x4df8], rdi
jne 0x18004d1d8
movss xmm2, dword [rdx + 0x264]
subss xmm2, dword [rdx + 0x114]
mov rax, rdx
add rax, 0x260
jmp 0x18004d207
movss xmm2, dword [rdx + 0x234]
subss xmm2, dword [rdx + 0x114]
mov rax, rdx
test r8, r8
jne 0x18004d201
cmp qword [rbx + 0x4df8], rdi
jne 0x18004d201
add rax, 0x260
jmp 0x18004d207
add rax, 0x230
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0xd8], xmm1
movss dword [rbp + 0xdc], xmm2
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.ESPThing
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004d28c
lea r8, str.ESPThing
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0xd8]
mov edx, esi
lea rcx, str.ESPThing
call fcn.18000e3d0
test al, al
je 0x18004d385
lea rdx, [0x1801ba5cd]
lea rcx, [0x18007bc24]
call fcn.180038090
mov rax, qword [0x1801ba330]
mov rdx, qword [rax + 0x4008]
mov rcx, rdx
cmp qword [rdx + 0x1b8], rdi
jne 0x18004d2f6
cmp qword [rax + 0x4df8], rdi
jne 0x18004d2f6
add rcx, 0x260
jmp 0x18004d2fd
add rcx, 0x230
movss xmm2, dword [rcx]
subss xmm2, dword [rdx + 0x110]
movss xmm0, dword [rax + 0x3928]
addss xmm0, xmm0
addss xmm0, dword [rax + 0x3d40]
subss xmm2, xmm0
movaps xmm1, xmm12
movaps xmm0, xmm2
call fcn.180018180
mov qword [rbp + 0xe0], rdi
lea rdx, [rbp + 0xe0]
lea rcx, [0x1801ba5dc]
call fcn.180066a90
lea rdx, [0x1801b9455]
lea rcx, [0x18007ae4c]
call fcn.180038090
lea rdx, [0x1801ba5ce]
lea rcx, str.Tracers
call fcn.180038090
lea rdx, [0x1801ba5d4]
lea rcx, str.Distance
call fcn.180038090
call fcn.18000e790
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
mov r8, qword [rdx + 0x1b8]
test r8, r8
jne 0x18004d3d0
cmp qword [rbx + 0x4df8], rdi
jne 0x18004d3d0
movss xmm1, dword [rdx + 0x264]
subss xmm1, dword [rdx + 0x114]
mov rax, rdx
add rax, 0x260
jmp 0x18004d3ff
movss xmm1, dword [rdx + 0x234]
subss xmm1, dword [rdx + 0x114]
mov rax, rdx
test r8, r8
jne 0x18004d3f9
cmp qword [rbx + 0x4df8], rdi
jne 0x18004d3f9
add rax, 0x260
jmp 0x18004d3ff
add rax, 0x230
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x110]
movss dword [rbp + 0xe8], xmm0
movss dword [rbp + 0xec], xmm1
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Filters
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004d46a
lea r8, str.Filters
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0xe8]
mov edx, esi
lea rcx, str.Filters
call fcn.18000e3d0
test al, al
je 0x18004d58c
lea rdx, [0x1801b9454]
lea rcx, str.Filter_names
call fcn.180038090
mov rax, qword [0x1801ba330]
mov r8, qword [rax + 0x4008]
cmp byte [r8 + 0xc3], dil
jne 0x18004d4ec
mov edx, dword [r8 + 0x1c4]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, r13d
cmp qword [r8 + 0x1b8], rdi
je 0x18004d4df
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x18007ef1c]
call fcn.1800389e0
mov rax, qword [0x1801ba6d0]
mov rax, qword [rax]
mov qword [rbp + 0x7c8], rax
cmp byte [rax + 0x19], dil
jne 0x18004d543
nop dword [rax]
nop word [rax + rax]
lea rdx, [rax + 0x20]
mov rcx, rdx
cmp qword [rdx + 0x18], 0xf
jbe 0x18004d521
mov rcx, qword [rdx]
add rdx, 0x20
call fcn.180038090
lea rcx, [rbp + 0x7c8]
call fcn.18004a480
mov rax, qword [rbp + 0x7c8]
cmp byte [rax + 0x19], dil
je 0x18004d510
mov dword [rbp + 0x788], 0x453b8000
mov dword [rbp + 0x780], 0x3f800000
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x788]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x780]
lea r8, [0x1801b9450]
mov edx, 8
lea rcx, str.Distance_limit
call fcn.18003a4b0
call fcn.180039a10
mov r9d, r13d
mov r8, qword [0x1801ba330]
mov eax, dword [r8 + 0x4a80]
cmp eax, r13d
jge 0x18004d5b0
mov r9d, eax
test eax, eax
jle 0x18004d5e9
nop dword [rax]
cdqe
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
mov eax, dword [r8 + 0x4a80]
dec r9d
test r9d, r9d
jg 0x18004d5b0
call fcn.18000e790
mov r15, 0xffffffffffffffff
mov rax, qword [0x18007a628]
cmp byte [rax], dil
je 0x18004dea0
mov qword [rbp + 0xf0], rdi
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Misc
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004d668
lea r8, str.Misc
lea edx, [r15 + 0xc]
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, [rbp + 0xf0]
mov edx, esi
lea rcx, str.Misc
call fcn.18000e3d0
test al, al
je 0x18004dea0
movaps xmm6, xmmword [0x18007f190]
movups xmmword [rbp + 0x530], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x3b0], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x3b4], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x3b0]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 3
je 0x18004d6e0
movups xmmword [rbx + 0x3a04], xmm6
movaps xmm6, xmmword [0x18007f130]
movups xmmword [rbp + 0x540], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x2f0], 5
movups xmm0, xmmword [rbx + 0x3a24]
movups xmmword [rbp + 0x2f4], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x2f0]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 5
je 0x18004d730
movups xmmword [rbx + 0x3a24], xmm6
call fcn.1800183c0
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004d75c
cmp qword [rbx + 0x4df8], rdi
lea rax, [rdx + 0x260]
je 0x18004d763
lea rax, [rdx + 0x230]
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0xf8], xmm1
mov dword [rbp + 0xfc], 0x43000000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.FPS_Unlocker
call fcn.180007a60
mov esi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x18004d7ea
lea r8, str.FPS_Unlocker
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0xf8]
mov edx, esi
lea rcx, str.FPS_Unlocker
call fcn.18000e3d0
test al, al
je 0x18004d8a3
lea rdx, [0x1801b9460]
lea rcx, str.Show_FPS
call fcn.180038090
lea rdx, [0x1801ba5d6]
lea rcx, str.FPS_Unlocker
call fcn.180038090
mov rax, qword [0x1801ba330]
or dword [rax + 0x4998], 1
mov dword [rax + 0x49a8], 0x437b0000
mov dword [rbp + 0x778], pe_nt_image_headers64
mov dword [rbp + 0x770], 1
lea rax, [0x180075b14]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x778]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x770]
lea r8, [0x1801b945c]
mov edx, 4
lea rcx, [0x18007bca4]
call fcn.18003a4b0
call fcn.18000e790
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004d8ca
cmp qword [rbx + 0x4df8], rdi
lea rax, [rdx + 0x260]
je 0x18004d8d1
lea rax, [rdx + 0x230]
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0x100], xmm1
mov dword [rbp + 0x104], 0x42700000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.ACE_Disabler
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004d958
lea r8, str.ACE_Disabler
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x100]
mov edx, esi
lea rcx, str.ACE_Disabler
call fcn.18000e3d0
test al, al
je 0x18004d9aa
lea rdx, [0x1801b9462]
lea rcx, str.Disable_ACE
call fcn.180038090
lea rdx, str.Requires_full_game_restart
lea rcx, [0x180075b18]
call fcn.180066910
call fcn.18000e790
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004d9d1
cmp qword [rbx + 0x4df8], rdi
lea rax, [rdx + 0x260]
je 0x18004d9d8
lea rax, [rdx + 0x230]
movss xmm1, dword [rax]
subss xmm1, dword [rdx + 0x110]
mulss xmm1, xmm14
mov rax, qword [0x1801ba710]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [rbp + 0x108], xmm1
mov dword [rbp + 0x10c], 0x42700000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.MenuWindowIdk
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004da5f
lea r8, str.MenuWindowIdk
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x108]
mov edx, esi
lea rcx, str.MenuWindowIdk
call fcn.18000e3d0
test al, al
je 0x18004db1f
lea rdx, [0x1801ba5cc]
lea rcx, str.Menu
call fcn.180038090
mov rax, qword [0x1801ba330]
mov rdx, qword [rax + 0x4008]
mov rcx, rdx
cmp qword [rdx + 0x1b8], rdi
jne 0x18004dac9
cmp qword [rax + 0x4df8], rdi
jne 0x18004dac9
add rcx, 0x260
jmp 0x18004dad0
add rcx, 0x230
movss xmm2, dword [rcx]
subss xmm2, dword [rdx + 0x110]
movss xmm0, dword [rax + 0x3928]
addss xmm0, xmm0
addss xmm0, dword [rax + 0x3d40]
subss xmm2, xmm0
movaps xmm1, xmm12
movaps xmm0, xmm2
call fcn.180018180
mov qword [rbp + 0x110], rdi
lea rdx, [rbp + 0x110]
lea rcx, [0x1801b9464]
call fcn.180066a90
call fcn.18000e790
call fcn.180018500
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
call fcn.1800183c0
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004db5d
cmp qword [rbx + 0x4df8], rdi
lea rcx, [rdx + 0x260]
je 0x18004db64
lea rcx, [rdx + 0x230]
movss xmm0, dword [rcx]
subss xmm0, dword [rdx + 0x110]
movss dword [rbp + 0x118], xmm0
mov dword [rbp + 0x11c], 0x42c80000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.FOV_Changer
call fcn.180007a60
mov esi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x18004dbd1
lea r8, str.FOV_Changer
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x118]
mov edx, esi
lea rcx, str.FOV_Changer
call fcn.18000e3d0
test al, al
je 0x18004dc73
lea rdx, [0x1801ba5d5]
lea rcx, str.FOV_Changer
call fcn.180038090
mov rax, qword [0x1801ba330]
or dword [rax + 0x4998], 1
mov dword [rax + 0x49a8], 0x437b0000
mov dword [rbp + 0x768], 0x43340000
mov dword [rbp + 0x6f0], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x768]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x6f0]
lea r8, [0x1801b9458]
mov edx, 8
lea rcx, str.fov_Slider
call fcn.18003a4b0
call fcn.18000e790
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
cmp qword [rdx + 0x1b8], rdi
jne 0x18004dc9a
cmp qword [rbx + 0x4df8], rdi
lea rcx, [rdx + 0x260]
je 0x18004dca1
lea rcx, [rdx + 0x230]
movss xmm0, dword [rcx]
subss xmm0, dword [rdx + 0x110]
movss dword [rbp + 0x120], xmm0
mov dword [rbp + 0x124], 0x42b40000
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.UIDCHANGERR
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004dd0e
lea r8, str.UIDCHANGERR
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 9
mov r9d, 1
lea r8, [rbp + 0x120]
mov edx, esi
lea rcx, str.UIDCHANGERR
call fcn.18000e3d0
test al, al
je 0x18004de40
lea rdx, [0x1801b9461]
lea rcx, str.UID_Changer
call fcn.180038090
lea rdx, str.Requires_game_reload
lea rcx, [0x180075b18]
call fcn.180066910
lea r14, [0x1801b9470]
mov rsi, r14
cmp qword [0x1801b9488], 0xf
cmova rsi, qword [0x1801b9470]
mov qword [rbp - 0x50], rdi
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, rsi
xor edx, edx
lea rcx, str.setUid
call fcn.18003d840
mov rbx, r15
inc rbx
cmp byte [rsi + rbx], dil
jne 0x18004ddb0
mov r15, qword [0x1801b9488]
cmp r15, 0xf
seta r13b
mov rcx, r14
mov r12, qword [0x1801b9470]
cmova rcx, r12
mov r8, qword [0x1801b9480]
cmp r8, rbx
jne 0x18004ddee
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18004de23
cmp rbx, r15
ja 0x18004de15
test r13b, r13b
cmovne r14, r12
mov qword [0x1801b9480], rbx
mov r8, rbx
mov rdx, rsi
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rbx], dil
jmp 0x18004de23
mov r9, rsi
mov rdx, rbx
mov rcx, r14
call fcn.18004fce0
call fcn.18000e790
mov r14d, 3
mov r12d, dword [0x1801ba2dc]
mov r15, 0xffffffffffffffff
lea r13d, [r14 - 1]
call fcn.180018500
mov r9d, r13d
mov r8, qword [0x1801ba330]
mov eax, dword [r8 + 0x4a80]
cmp eax, 2
jge 0x18004de62
mov r9d, eax
test eax, eax
jle 0x18004de9b
cdqe
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
mov eax, dword [r8 + 0x4a80]
dec r9d
test r9d, r9d
jg 0x18004de62
call fcn.18000e790
mov rax, qword [0x18007a630]
cmp byte [rax], dil
je 0x18004f3be
xorps xmm6, xmm6
movups xmmword [rbp + 0x550], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x2d8], 5
movups xmm0, xmmword [rbx + 0x3a24]
movups xmmword [rbp + 0x2dc], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x2d8]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 5
je 0x18004defc
movups xmmword [rbx + 0x3a24], xmm6
mov qword [rbp - 0x48], rdi
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Cfg
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004df5d
lea r8, str.Cfg
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], edi
mov r9d, 1
lea r8, [rbp - 0x48]
mov edx, esi
lea rcx, str.Cfg
call fcn.18000e3d0
test al, al
je 0x18004f3be
movaps xmm6, xmmword [0x18007f190]
movups xmmword [rbp + 0x560], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x2c0], r14d
movups xmm0, xmmword [rbx + 0x3a04]
movups xmmword [rbp + 0x2c4], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x2c0]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 3
je 0x18004dfce
movups xmmword [rbx + 0x3a04], xmm6
movaps xmm6, xmmword [0x18007f130]
movups xmmword [rbp + 0x570], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x2a8], 5
movups xmm0, xmmword [rbx + 0x3a24]
movups xmmword [rbp + 0x2ac], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x2a8]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 5
je 0x18004e01e
movups xmmword [rbx + 0x3a24], xmm6
mov qword [rbp - 0x40], rdi
mov rcx, qword [0x1801ba330]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rbx, qword [rcx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.CfgChild
call fcn.180007a60
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4054], eax
jne 0x18004e07f
lea r8, str.CfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
mov dword [rsp + 0x20], 1
mov r9d, 1
lea r8, [rbp - 0x40]
mov edx, esi
lea rcx, str.CfgChild
call fcn.18000e3d0
test al, al
je 0x18004f35d
mov edx, r12d
mov rax, qword gs:[0x58]
mov ecx, 0x10
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1801ba6e0], ecx
jle 0x18004e0f4
lea rcx, [0x1801ba6e0]
call fcn.18006eecc
cmp dword [0x1801ba6e0], 0xffffffff
jne 0x18004e0f4
lea rcx, [0x180072dc0]
call fcn.18006f29c
lea rcx, [0x1801ba6e0]
call fcn.18006ee60
movaps xmm6, xmmword [0x18007f1a0]
movups xmmword [rbp + 0x580], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x3f8], 7
movups xmm0, xmmword [rbx + 0x3a44]
movups xmmword [rbp + 0x3fc], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x3f8]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 7
je 0x18004e144
movups xmmword [rbx + 0x3a44], xmm6
movaps xmm6, xmmword [0x18007f1f0]
movups xmmword [rbp + 0x590], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x308], 9
movups xmm0, xmmword [rbx + 0x3a64]
movups xmmword [rbp + 0x30c], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x308]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 9
je 0x18004e194
movups xmmword [rbx + 0x3a64], xmm6
movaps xmm6, xmmword [0x18007f1c0]
movups xmmword [rbp + 0x5a0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x320], 8
movups xmm0, xmmword [rbx + 0x3a54]
movups xmmword [rbp + 0x324], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x320]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], 8
je 0x18004e1e4
movups xmmword [rbx + 0x3a54], xmm6
mov qword [rbp - 0x38], rdi
lea rdx, [rbp - 0x38]
lea rcx, str.Import
call fcn.180036f00
test al, al
je 0x18004e217
lea rdx, [0x1801b9420]
lea rcx, [rbp + 0x6b0]
call fcn.180048d80
mov rcx, rax
call fcn.1800555c0
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
mov qword [rbp - 0x30], rdi
lea rdx, [rbp - 0x30]
lea rcx, str.Export
call fcn.180036f00
lea rsi, str.config
xor ebx, ebx
test al, al
je 0x18004e284
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rbx
mov qword [rbp + 0x1f8], rbx
mov r8, r15
inc r8
cmp byte [rsi + r8], bl
jne 0x18004e260
mov rdx, rsi
lea rcx, [rbp + 0x1e0]
call fcn.180047e90
lea rcx, [rbp + 0x1e0]
call fcn.1800531d0
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
mov qword [rbp - 0x28], rdi
lea rdx, [rbp - 0x28]
lea rcx, str.Delete
call fcn.180036f00
test al, al
je 0x18004e2e5
lea rdx, [0x1801b9420]
lea rcx, [rbp + 0x6d0]
call fcn.180048d80
mov rcx, rax
call fcn.180056d60
lea rax, [0x1801b9420]
cmp qword [0x1801b9438], 0xf
cmova rax, qword [0x1801b9420]
mov qword [0x1801b9430], rbx
mov byte [rax], dil
movaps xmm1, xmm12
movaps xmm0, xmm15
call fcn.180018180
mov qword [rbp - 0x20], rdi
lea rdx, [rbp - 0x20]
lea rcx, str.Show_dir
call fcn.180036f00
test al, al
je 0x18004e531
movzx r8d, byte [0x1801b9308]
mov edx, 1
lea rcx, [rbp + 0x7d0]
call fcn.180048c70
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r14, qword [rbp + 0x7e0]
sub rax, r14
cmp rax, 0x12
jb 0x18004f4df
lea r12, [rbp + 0x7d0]
mov rsi, qword [rbp + 0x7d0]
mov r13, qword [rbp + 0x7e8]
cmp r13, 0xf
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x7a8], xmm0
mov qword [rbp + 0x7b8], rbx
mov qword [rbp + 0x7c0], rbx
lea r15, [r14 + 0x12]
mov edi, 0xf
lea rbx, [rbp + 0x7a8]
cmp r15, rdi
jbe 0x18004e410
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x18004e3cf
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18006f31c
test rax, rax
je 0x18004e4bf
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18004e409
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18004e3f8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004f4d3
jmp 0x18004e3b0
test rcx, rcx
je 0x18004e407
call fcn.18006f31c
mov rbx, rax
jmp 0x18004e409
xor ebx, ebx
mov qword [rbp + 0x7a8], rbx
mov qword [rbp + 0x7b8], r15
mov qword [rbp + 0x7c0], rdi
mov r8, r14
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_]
movups xmmword [r14 + rbx], xmm0
movzx eax, word [0x18007bd88]
mov word [r14 + rbx + 0x10], ax
mov byte [rbx + r15], 0
mov edi, 0x400000
lea r8, [rbp + 0x7a8]
cmp qword [rbp + 0x7c0], 0xf
cmova r8, qword [rbp + 0x7a8]
mov dword [rsp + 0x28], 1
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x7c0]
cmp rdx, 0xf
jbe 0x18004e4cb
inc rdx
mov rcx, qword [rbp + 0x7a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e4c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e4c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006ee1c
mov qword [rbp + 0x7b8], rbx
mov qword [rbp + 0x7c0], 0xf
mov byte [rbp + 0x7a8], bl
cmp r13, 0xf
jbe 0x18004e51d
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18004e515
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e515
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.18006ee1c
lea rsi, str.config
mov r12d, dword [0x1801ba2dc]
mov r14d, 3
mov r9, qword [0x1801ba330]
mov eax, dword [r9 + 0x4a80]
cmp eax, 3
jge 0x18004e550
mov r14d, eax
test eax, eax
jle 0x18004e589
nop dword [rax + rax]
cdqe
lea rdx, [rax + rax*4]
mov rcx, qword [r9 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r9 + rax*8 + 0x39d4], xmm0
dec dword [r9 + 0x4a80]
mov eax, dword [r9 + 0x4a80]
dec r14d
test r14d, r14d
jg 0x18004e550
mov qword [rbp - 0x18], 0
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov r8, rsi
xor edx, edx
lea rcx, str.configsave
call fcn.18003d840
mov rbx, qword [0x1801ba330]
mov rdx, qword [rbx + 0x4008]
mov r8, qword [rdx + 0x1b8]
test r8, r8
jne 0x18004e5fd
cmp qword [rbx + 0x4df8], r8
jne 0x18004e5fd
movss xmm1, dword [rdx + 0x264]
subss xmm1, dword [rdx + 0x114]
mov rax, rdx
add rax, 0x260
jmp 0x18004e62c
movss xmm1, dword [rdx + 0x234]
subss xmm1, dword [rdx + 0x114]
mov rax, rdx
test r8, r8
jne 0x18004e626
cmp qword [rbx + 0x4df8], r8
jne 0x18004e626
add rax, 0x260
jmp 0x18004e62c
add rax, 0x230
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x110]
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm1
mov byte [rdx + 0xc0], 1
mov rbx, qword [rbx + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.180007a60
mov esi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4054], eax
jne 0x18004e692
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18001f930
xor r13d, r13d
mov dword [rsp + 0x20], r13d
lea r9d, [r13 + 1]
lea r8, [rbp - 0x10]
mov edx, esi
lea rcx, str.cfgChild
call fcn.18000e3d0
mov ecx, r12d
mov rax, qword gs:[0x58]
mov edx, 0x10
mov rax, qword [rax + rcx*8]
lea r15, [0x1801ba6e8]
mov eax, dword [rdx + rax]
cmp dword [0x1801ba718], eax
jle 0x18004e719
lea rcx, [0x1801ba718]
call fcn.18006eecc
cmp dword [0x1801ba718], 0xffffffff
jne 0x18004e719
movzx r8d, byte [0x1801b9308]
lea edx, [r13 + 1]
mov rcx, r15
call fcn.180048c70
lea rcx, [0x180072d50]
call fcn.18006f29c
nop
lea rcx, [0x1801ba718]
call fcn.18006ee60
mov r14, qword [0x1801ba6f8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x11
jb 0x18004f4e5
cmp qword [0x1801ba700], 0xf
cmova r15, qword [0x1801ba6e8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
lea r12, [r14 + 0x11]
mov esi, 0xf
lea rbx, [rbp - 0x70]
cmp r12, rsi
jbe 0x18004e7e9
mov rsi, r12
or rsi, 0xf
cmp rsi, rcx
jbe 0x18004e7a3
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18006f31c
test rax, rax
je 0x18004e7cc
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18004e7e5
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x18004e7d3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004f4d9
jmp 0x18004e788
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18004e7e2
call fcn.18006f31c
mov rbx, rax
jmp 0x18004e7e5
mov rbx, r13
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], rsi
mov r8, r14
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48]
movups xmmword [rbx + r14], xmm0
movzx eax, byte [0x18007b860]
mov byte [rbx + r14 + 0x10], al
mov byte [rbx + r12], 0
bts edi, 0x12
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rax, qword [rbp - 0x70]
mov qword [rbp + 0x700], rax
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x708], rax
call fcn.18006ff38
movaps xmm0, xmmword [rbp + 0x700]
movdqa xmmword [rbp + 0x440], xmm0
lea r8, [rbp + 0x440]
mov edx, eax
lea rcx, [rbp + 0x170]
call fcn.180047210
or edi, 0x180000
mov dword [rsp + 0x40], edi
xorps xmm6, xmm6
movdqa xmmword [rbp + 0x710], xmm6
xor r8d, r8d
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x820]
call fcn.18004b100
nop
cmp byte [rbp + 0xa98], 0
je 0x18004e902
mov ecx, 0x58
call fcn.18006f31c
mov rsi, rax
mov qword [rsp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_struct_std::filesystem::_Dir_enum_impl_.0
mov qword [rsi], rax
lea rbx, [rsi + 0x10]
lea rdx, [rbp + 0x820]
mov rcx, rbx
call fcn.18004b420
nop
bts edi, 0x15
mov dword [rsp + 0x40], edi
mov qword [rbp + 0x710], rbx
mov qword [rbp + 0x718], rsi
movdqa xmm6, xmmword [rbp + 0x710]
jmp 0x18004e90f
xorps xmm0, xmm0
psrldq xmm0, 8
movq rsi, xmm0
mov ebx, dword [rbp + 0xa9c]
mov rcx, qword [rbp + 0x840]
call fcn.180070230
mov rdx, qword [rbp + 0x838]
cmp rdx, 7
jbe 0x18004e96a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x820]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e965
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e965
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006ee1c
xor r15d, r15d
mov qword [rbp + 0x830], r15
mov qword [rbp + 0x838], 7
mov word [rbp + 0x820], r15w
test ebx, ebx
jne 0x18004f4eb
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x18004e9d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e9d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004e9d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006ee1c
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r15w
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18004ea30
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ea2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004ea2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006ee1c
xorps xmm0, xmm0
movups xmmword [rbp + 0x700], xmm0
test rsi, rsi
je 0x18004ea56
lock inc dword [rsi + 8]
mov rsi, qword [rbp + 0x718]
movdqa xmm6, xmmword [rbp + 0x710]
mov edi, dword [rsp + 0x40]
movdqa xmmword [rbp + 0x700], xmm6
test rsi, rsi
je 0x18004ea72
lock inc dword [rsi + 8]
mov rsi, qword [rbp + 0x718]
mov edi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7f0], xmm1
mov r13, 0xffffffffffffffff
test rsi, rsi
je 0x18004eac3
mov eax, r13d
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x18004eabf
mov rbx, qword [rbp + 0x718]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18004eabf
mov rcx, qword [rbp + 0x718]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov r14, qword [rbp + 0x700]
nop word [rax + rax]
lea rbx, str..json
test r14, r14
je 0x18004f2ce
lea rdx, [rbp + 0x190]
mov rcx, r14
call fcn.18004af90
mov rax, qword [rbp + 0x190]
mov edx, dword [rbp + 0x198]
test edx, edx
je 0x18004eb0f
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x18004f501
cmp eax, 2
jne 0x18004ed2f
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], 5
call fcn.18006ff38
movaps xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x430], xmm0
lea r8, [rbp + 0x430]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.180047210
or edi, 0x18
or edi, 1
mov dword [rsp + 0x40], edi
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x18004eb6c
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18004a790
cmp rax, r11
je 0x18004ebbc
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18004eb93
cmp cx, 0x2f
jne 0x18004eb9c
add rax, 2
cmp rax, r11
jne 0x18004eb84
cmp rax, r11
je 0x18004ebbc
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18004ebbc
cmp cx, 0x2f
je 0x18004ebbc
mov r10, rdx
cmp rax, rdx
jne 0x18004eba1
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
mov r8, r11
mov rdx, r10
lea rcx, [rsp + 0x70]
call fcn.18004fba0
or edi, 0x38000
or edi, 2
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rcx, qword [rsp + 0x70]
mov rax, qword [rbp - 0x80]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.18004a790
cmp rax, rdx
je 0x18004ec4d
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18004ec23
cmp cx, 0x2f
jne 0x18004ec2c
add rax, 2
cmp rax, rdx
jne 0x18004ec14
cmp rax, rdx
je 0x18004ec4d
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18004ec4d
cmp cx, 0x2f
je 0x18004ec4d
mov rbx, r8
cmp rax, r8
jne 0x18004ec31
mov r8d, 0x3a
mov rcx, rbx
call fcn.180070870
cmp rbx, rax
je 0x18004ec9f
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x18004ec9f
cmp word [rdx], 0x2e
jne 0x18004ec80
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x18004eca2
cmp word [rcx], 0x2e
jne 0x18004eca2
jmp 0x18004ec9f
sub rdx, 2
cmp rbx, rdx
je 0x18004ec9f
nop dword [rax]
cmp word [rdx], 0x2e
je 0x18004eca2
sub rdx, 2
cmp rbx, rdx
jne 0x18004ec90
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], r15
mov qword [rbp + 0x140], r15
mov r8, rax
lea rcx, [rbp + 0x128]
call fcn.18004fba0
or edi, 0xe4
mov dword [rsp + 0x40], edi
lea rax, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 7
cmova rax, qword [rbp + 0x1a0]
mov qword [rbp + 0x1d0], rax
mov rax, qword [rbp + 0x1b0]
mov qword [rbp + 0x1d8], rax
movaps xmm0, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x420], xmm0
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x128]
call fcn.18004ab30
test eax, eax
jne 0x18004ed2f
mov bl, 1
jmp 0x18004ed31
xor bl, bl
test dil, 4
je 0x18004ed9e
and edi, 0xfffffffb
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x140]
cmp rdx, 7
jbe 0x18004ed84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ed7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f2ab
call fcn.18006ee1c
mov qword [rbp + 0x138], r15
mov qword [rbp + 0x140], 7
mov word [rbp + 0x128], r15w
test dil, 2
je 0x18004edfe
and edi, 0xfffffffd
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x18004edec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ede7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f2b2
call fcn.18006ee1c
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
test dil, 1
je 0x18004ee51
and edi, 0xfffffffe
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 7
jbe 0x18004ee51
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ee4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f2b9
call fcn.18006ee1c
test bl, bl
je 0x18004f1f0
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x18004ee68
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18004a790
cmp rax, r11
je 0x18004eebb
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18004ee8f
cmp cx, 0x2f
jne 0x18004ee98
add rax, 2
cmp rax, r11
jne 0x18004ee80
cmp rax, r11
je 0x18004eebb
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18004eebb
cmp cx, 0x2f
je 0x18004eebb
mov r10, rdx
cmp rax, rdx
jne 0x18004eea0
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8, r11
mov rdx, r10
lea rcx, [rsp + 0x50]
call fcn.18004fba0
or edi, 0x700
lea r15, [rsp + 0x50]
cmp qword [rsp + 0x68], 7
cmova r15, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
call fcn.18006ff38
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x720], xmm0
xor eax, eax
mov r8d, eax
mov qword [rbp + 0x730], rax
mov qword [rbp + 0x738], 0xf
mov byte [rbp + 0x720], al
bts edi, 0xe
mov dword [rsp + 0x40], edi
test rsi, rsi
je 0x18004efc8
cmp rsi, 0x7fffffff
ja 0x18004f526
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.18006ffa8
mov rbx, rax
mov qword [rsp + 0x48], rax
shr rax, 0x20
test eax, eax
jne 0x18004f51c
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp + 0x720]
call fcn.180048ea0
lea r9, [rbp + 0x720]
cmp qword [rbp + 0x738], 0xf
cmova r9, qword [rbp + 0x720]
mov dword [rsp + 0x20], ebx
mov r8d, esi
mov rdx, r15
mov ecx, r12d
call fcn.18006ffa8
mov qword [rsp + 0x48], rax
shr rax, 0x20
test eax, eax
jne 0x18004f512
mov r8, qword [rbp + 0x730]
btr edi, 0xe
or edi, 0x3800
mov dword [rsp + 0x40], edi
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x18004f01f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f013
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f2c0
call fcn.18006ee1c
mov r8, qword [rbp + 0x730]
xor r15d, r15d
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea r12, [0x1801b9420]
mov rdx, r12
cmp qword [0x1801b9438], 0xf
cmova rdx, qword [0x1801b9420]
lea rcx, [rbp + 0x720]
cmp qword [rbp + 0x738], 0xf
cmova rcx, qword [rbp + 0x720]
cmp r8, qword [0x1801b9430]
jne 0x18004f0ca
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18004f0ca
mov bl, 1
movaps xmm6, xmmword [0x18007f210]
movups xmmword [rbp + 0x5c0], xmm6
mov rsi, qword [0x1801ba330]
mov dword [rbp + 0x338], r15d
movups xmm0, xmmword [rsi + 0x39d4]
movups xmmword [rbp + 0x33c], xmm0
lea rcx, [rsi + 0x4a80]
lea rdx, [rbp + 0x338]
call fcn.1800202b0
cmp dword [rsi + 0x4a7c], r15d
je 0x18004f0cc
movups xmmword [rsi + 0x39d4], xmm6
jmp 0x18004f0cc
xor bl, bl
mov qword [rbp - 8], r15
lea rcx, [rbp + 0x720]
cmp qword [rbp + 0x738], 0xf
cmova rcx, qword [rbp + 0x720]
lea r9, [rbp - 8]
movzx edx, bl
call fcn.180041530
test al, al
je 0x18004f156
mov rsi, qword [rbp + 0x730]
lea r9, [rbp + 0x720]
cmp qword [rbp + 0x738], 0xf
cmova r9, qword [rbp + 0x720]
mov rax, qword [0x1801b9438]
cmp rsi, rax
ja 0x18004f14b
mov rbx, r12
cmp rax, 0xf
cmova rbx, qword [0x1801b9420]
mov qword [0x1801b9430], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], r15b
jmp 0x18004f156
mov rdx, rsi
mov rcx, r12
call fcn.18004fce0
movaps xmm6, xmmword [0x18007f220]
movups xmmword [rbp + 0x5d0], xmm6
mov rbx, qword [0x1801ba330]
mov dword [rbp + 0x350], r15d
movups xmm0, xmmword [rbx + 0x39d4]
movups xmmword [rbp + 0x354], xmm0
lea rcx, [rbx + 0x4a80]
lea rdx, [rbp + 0x350]
call fcn.1800202b0
cmp dword [rbx + 0x4a7c], r15d
je 0x18004f1a3
movups xmmword [rbx + 0x39d4], xmm6
mov rdx, qword [rbp + 0x738]
cmp rdx, 0xf
jbe 0x18004f1f0
inc rdx
mov rcx, qword [rbp + 0x720]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f1df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f2c7
call fcn.18006ee1c
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp + 0xaa0]
mov rcx, qword [r14 + 0x40]
call fcn.180070210
cmp eax, 0x12
je 0x18004f247
test eax, eax
jne 0x18004f4cb
cmp word [rbp + 0xacc], 0x2e
jne 0x18004f233
movzx eax, word [rbp + 0xace]
test ax, ax
je 0x18004f1f0
cmp ax, 0x2e
jne 0x18004f233
cmp word [rbp + 0xad0], 0
je 0x18004f1f0
lea rdx, [rbp + 0xaa0]
mov rcx, r14
call fcn.18004b2a0
jmp 0x18004ead0
mov r14, r15
mov qword [rbp + 0x700], r15
mov rbx, qword [rbp + 0x708]
mov qword [rbp + 0x708], r15
test rbx, rbx
je 0x18004ead0
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18004f290
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
je 0x18004f299
nop word [rax + rax]
mov edi, dword [rsp + 0x40]
jmp 0x18004eac3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
jmp 0x18004eac3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp + 0x708]
test rcx, rcx
je 0x18004f311
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18004f311
mov rbx, qword [rbp + 0x708]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18004f311
mov rcx, qword [rbp + 0x708]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rcx, qword [rbp + 0x718]
test rcx, rcx
je 0x18004f352
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18004f352
mov rbx, qword [rbp + 0x718]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r13d
cmp r13d, 1
jne 0x18004f352
mov rcx, qword [rbp + 0x718]
mov rax, qword [rcx]
call qword [rax + 8]
call fcn.18000e790
mov r13d, 2
mov r9d, r13d
mov r8, qword [0x1801ba330]
mov eax, dword [r8 + 0x4a80]
cmp eax, 2
jge 0x18004f380
mov r9d, eax
test eax, eax
jle 0x18004f3b9
nop word [rax + rax]
cdqe
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
mov eax, dword [r8 + 0x4a80]
dec r9d
test r9d, r9d
jg 0x18004f380
call fcn.18000e790
mov r8, qword [0x1801ba330]
mov eax, dword [r8 + 0x4a80]
cmp eax, 2
jge 0x18004f3e0
mov r13d, eax
test eax, eax
jle 0x18004f419
nop dword [rax + rax]
cdqe
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
mov eax, dword [r8 + 0x4a80]
dec r13d
test r13d, r13d
jg 0x18004f3e0
call fcn.18000e790
mov r8, qword [0x1801ba330]
movsxd rax, dword [r8 + 0x4a80]
cmp eax, 1
jl 0x18004f459
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a88]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a80]
call fcn.1800146e0
call fcn.180013e30
mov rcx, qword [rbp + 0xcf0]
xor rcx, rsp
call fcn.18006ec80
lea r11, [rsp + 0xea0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
call fcn.18004af30
nop
call fcn.180046ab0
nop
call fcn.180046ab0
nop
call fcn.180046b70
nop
call fcn.180046b70
nop
lea r8, [rbp + 0x170]
mov edx, ebx
lea rcx, str.directory_iterator::directory_iterator
call fcn.180047c80
nop
lea r8, [r14 + 0x20]
lea rcx, str.directory_entry::status
call fcn.180047c80
nop
mov ecx, dword [rsp + 0x4c]
call fcn.1800471d0
int3
mov ecx, dword [rsp + 0x4c]
call fcn.1800471d0
int3
call fcn.180046f00
int3