Function at 0x18007b500
Capabilities:
Create process on windows
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x668]
sub rsp, 0x740
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1800cd040]
xor rax, rsp
mov qword [rbp + 0x620], rax
xor r12d, r12d
mov dword [rsp + 0x40], r12d
cmp byte [0x1801fb8ad], r12b
je 0x18007e999
cmp byte [0x1801fb8a3], r12b
je 0x18007b560
xor ecx, ecx
call fcn.18003a5b0
mov rcx, qword [0x1801fb798]
call fcn.18002b960
mov rax, qword [0x1801fb490]
or dword [rax + 0x4a50], 2
mov dword [rax + 0x4a70], 0x44480000
mov dword [rax + 0x4a74], 0x43e10000
mov dword [rax + 0x4a58], 4
movabs rax, 0x3296f7c6e7e27c9c
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x150], rax
movabs rax, 0x1ea976059daa810b
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x158], rax
movabs rax, 0x5cf79fa8a2c22bcb
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x610], rax
movabs rax, 0x1ea976059dd8e468
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x618], rax
movdqa xmm0, xmmword [rbp + 0x610]
xorps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x150], xmm0
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0x150]
call fcn.180028b80
mov rbx, qword [0x1801fb490]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r12
jne 0x18007b654
cmp qword [rbx + 0x4e50], r12
lea rcx, [rdx + 0x26c]
je 0x18007b65b
lea rcx, [rdx + 0x23c]
movss xmm1, dword [rcx]
subss xmm1, dword [rdx + 0x11c]
mov dword [rbp - 0x10], 0x43160000
movss dword [rbp - 0xc], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Sidebar
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007b6c2
lea r8, str.Sidebar
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x10]
mov edx, edi
lea rcx, str.Sidebar
call fcn.1800257a0
test al, al
je 0x18007b7b7
mov ebx, r12d
mov rax, qword [0x1801fb500]
mov rdx, qword [0x1801fb4f8]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18007b7b2
mov qword [rbp - 8], rbx
mov rsi, r12
lea rdi, [0x1800b50c0]
lea r14, [0x1800b50c8]
nop dword [rax]
cmp ebx, dword [0x1801fb69c]
sete al
lea rcx, [rdx + rsi]
cmp qword [rcx + 0x18], 0xf
jbe 0x18007b737
mov rcx, qword [rcx]
lea r9, [rbp - 8]
movzx edx, al
call fcn.180068750
test al, al
je 0x18007b787
mov dword [0x1801fb69c], ebx
mov edx, r12d
mov rcx, r14
mov rax, qword [rcx - 8]
mov byte [rax], r12b
mov rax, qword [rcx]
mov byte [rax], r12b
mov rax, qword [rcx + 8]
mov byte [rax], r12b
mov rax, qword [rcx + 0x10]
mov byte [rax], r12b
mov rax, qword [rcx + 0x18]
mov byte [rax], r12b
add edx, 5
lea rcx, [rcx + 0x28]
cmp edx, 5
jb 0x18007b753
mov rax, qword [rdi]
mov byte [rax], 1
inc ebx
add rsi, 0x20
add rdi, 8
mov rcx, qword [0x1801fb500]
mov rdx, qword [0x1801fb4f8]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x18007b720
call fcn.180025b70
movss xmm7, dword [0x1800bc1e0]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov r13, 0xffffffffffffffff
mov rax, qword [0x1800b50c0]
cmp byte [rax], r12b
je 0x18007bad0
mov qword [rbp], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Player
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007b841
lea r8, str.Player
lea edx, [r13 + 0xc]
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp]
mov edx, edi
lea rcx, str.Player
call fcn.1800257a0
mov qword [rbp + 8], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.PlayerChild
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007b8bc
lea r8, str.PlayerChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 8]
mov edx, edi
lea rcx, str.PlayerChild
call fcn.1800257a0
test al, al
je 0x18007cac5
lea rdx, [0x1801fb8a8]
lea rcx, str.Godmode
call fcn.180057ab0
lea rdx, [0x1801fb8ac]
lea rcx, str.Multihit
call fcn.180057ab0
mov dword [rbp + 0x500], 0x64
mov dword [rbp + 0x510], 1
lea rbx, [0x1800b0190]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x500]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x510]
lea r8, [0x1801fa478]
mov edx, 4
lea rcx, str.Hits
call fcn.18005bbb0
lea rdx, [0x1801fb8a7]
lea rcx, str.No_cooldown
call fcn.180057ab0
call fcn.18009da60
lea rdx, [0x1801fb8ab]
lea rcx, str.Force_critical
call fcn.180057ab0
call fcn.18009da60
lea rdx, [0x1801fb8a5]
lea rcx, str.No_fall
call fcn.180057ab0
call fcn.18009da60
lea rdx, [0x1801fb8a4]
lea rcx, str.Spider
call fcn.180057ab0
lea rdx, [0x1801fb8aa]
lea rcx, [0x1800b89b0]
call fcn.180057ab0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0x10], r12
lea rdx, [rbp + 0x10]
lea rcx, [0x1801fb8c4]
call fcn.18009dbd0
lea rdx, [0x1801fb8a9]
lea rcx, str.Noclip
call fcn.180057ab0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0x18], r12
lea rdx, [rbp + 0x18]
lea rcx, [0x1801fb8c8]
call fcn.18009dbd0
mov dword [rbp + 0x518], 0x3e8
mov dword [rbp + 0x4b0], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x518]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b0]
lea r8, [0x1801fa47c]
mov edx, 4
lea rcx, str.Fly_speed
call fcn.18005bbb0
lea rdx, [0x1801fb8a6]
lea rcx, str.Player_speed
call fcn.180057ab0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0x20], r12
lea rdx, [rbp + 0x20]
lea rcx, [0x1801fb8cc]
call fcn.18009dbd0
mov dword [rbp + 0x4b8], 0x3e8
mov dword [rbp + 0x4c0], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x4b8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4c0]
lea r8, [0x1801fa474]
mov edx, 4
lea rcx, str.Speed
call fcn.18005bbb0
jmp 0x18007cac0
mov rax, qword [0x1800b50c8]
cmp byte [rax], r12b
je 0x18007bc8e
mov qword [rbp + 0x28], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.World
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007bb41
lea r8, str.World
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x28]
mov edx, edi
lea rcx, str.World
call fcn.1800257a0
mov qword [rbp + 0x30], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.WorldChild
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007bbbc
lea r8, str.WorldChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x30]
mov edx, edi
lea rcx, str.WorldChild
call fcn.1800257a0
test al, al
je 0x18007cac5
lea rdx, [0x1801fb8a1]
lea rcx, str.Dumb_enemies
call fcn.180057ab0
lea rdx, [0x1801fb8a2]
lea rcx, str.Speedhack
call fcn.180057ab0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0x38], r12
lea rdx, [rbp + 0x38]
lea rcx, [0x1801fb8bc]
call fcn.18009dbd0
mov dword [rbp + 0x4c8], 0x41200000
mov dword [rbp + 0x4a8], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4c8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4a8]
lea r8, [0x1801fa470]
mov edx, 8
lea rcx, str.Speed
call fcn.18005bbb0
lea rdx, [0x1801fb8a0]
lea rcx, str.Skip_cooking_animation
call fcn.180057ab0
call fcn.18009da60
jmp 0x18007cac0
mov rax, qword [0x1800b50d0]
cmp byte [rax], r12b
je 0x18007c6c2
mov qword [rbp + 0x40], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Visuals
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007bcff
lea r8, str.Visuals
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x40]
mov edx, edi
lea rcx, str.Visuals
call fcn.1800257a0
mov qword [rbp + 0x48], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.VisualsChild
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007bd7a
lea r8, str.VisualsChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x48]
mov edx, edi
lea rcx, str.VisualsChild
call fcn.1800257a0
test al, al
je 0x18007cac5
lea rdx, [0x1801fb8ae]
lea rcx, [0x1800b8a58]
call fcn.180057ab0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp - 0x18], r12
lea rdx, [rbp - 0x18]
lea rcx, [0x1801fb8c0]
call fcn.18009dbd0
lea rdx, [0x1801fa485]
lea rcx, [0x1800b59c8]
call fcn.180057ab0
lea rdx, [0x1801fb8af]
lea rcx, str.Tracers
call fcn.180057ab0
lea rdx, [0x1801fb8b5]
lea rcx, str.Distance
call fcn.180057ab0
mov dword [rbp + 0x4a0], 0x453b8000
mov dword [rbp + 0x498], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x498]
lea r8, [0x1801fa480]
mov edx, 8
lea rcx, str.Distance_limit
call fcn.18005bbb0
mov dword [rsp + 0x20], 2
lea r9, str.Threaded
lea r8, [0x18005a580]
lea rdx, [0x1801fb8b0]
lea rcx, str.Render_method
call fcn.18005a5d0
mov qword [rbp + 0x50], r12
lea rcx, [rbp + 0x50]
call fcn.180058980
mov rax, qword [0x1801fb490]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007becf
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007bec2
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800bc0ac]
call fcn.180058b10
mov qword [rbp + 0x58], r12
lea rcx, [rbp + 0x58]
call fcn.180058980
lea rdx, [0x1801fa484]
lea rcx, str.Filter_Names
call fcn.180057ab0
mov qword [rbp + 0x60], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x1801fb7a0]
xor edx, edx
lea rcx, str.search
call fcn.18005f1a0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c435
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Monsters
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007bf90
lea r8, str.Monsters
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Monsters
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c435
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
lea rdx, [0x1801fb8b4]
lea rcx, str.Monster
call fcn.180057ab0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c06a
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Aero
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c033
lea r8, str.Aero
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Aero
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c06a
lea rdx, [0x1801fbfb8]
lea rcx, [rbp + 0x340]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c10b
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Electro
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c0d4
lea r8, str.Electro
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Electro
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c10b
lea rdx, [0x1801fbff8]
lea rcx, [rbp + 0x350]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c1ac
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Fusion
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c175
lea r8, str.Fusion
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Fusion
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c1ac
lea rdx, [0x1801fc008]
lea rcx, [rbp + 0x360]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c24d
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Glacio
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c216
lea r8, str.Glacio
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Glacio
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c24d
lea rdx, [0x1801fbf98]
lea rcx, [rbp + 0x370]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c2ee
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Havoc
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c2b7
lea r8, str.Havoc
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Havoc
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c2ee
lea rdx, [0x1801fbfa8]
lea rcx, [rbp + 0x380]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c38f
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Spectro
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c358
lea r8, str.Spectro
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Spectro
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c38f
lea rdx, [0x1801fbf88]
lea rcx, [rbp + 0x390]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c430
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c3f9
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c430
lea rdx, [0x1801fbfe8]
lea rcx, [rbp + 0x3a0]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c4d6
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ascension_Materials
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c49f
lea r8, str.Ascension_Materials
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Ascension_Materials
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c4d6
lea rdx, [0x1801fbfd8]
lea rcx, [rbp + 0x3b0]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c577
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ores
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c540
lea r8, str.Ores
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Ores
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c577
lea rdx, [0x1801fbf78]
lea rcx, [rbp + 0x3c0]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007c618
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Puzzles
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c5e1
lea r8, str.Puzzles
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Puzzles
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007c618
lea rdx, [0x1801fbfc8]
lea rcx, [rbp + 0x300]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007cac0
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007c682
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.180038950
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.180067df0
test al, al
je 0x18007cac0
lea rdx, [0x1801fbf68]
lea rcx, [rbp + 0x320]
call fcn.18007eac0
mov rcx, rax
call fcn.18007b080
call fcn.1800685d0
jmp 0x18007cac0
mov rax, qword [0x1800b50d8]
cmp byte [rax], r12b
je 0x18007caca
mov qword [rbp + 0x68], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Misc
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007c733
lea r8, str.Misc
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x68]
mov edx, edi
lea rcx, str.Misc
call fcn.1800257a0
mov qword [rbp + 0x70], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.MiscChild
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007c7ae
lea r8, str.MiscChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x70]
mov edx, edi
lea rcx, str.MiscChild
call fcn.1800257a0
test al, al
je 0x18007cac5
lea rdx, [0x1801fa490]
lea rcx, str.Show_FPS
call fcn.180057ab0
lea rdx, [0x1801fb8b7]
lea rcx, str.FPS_Unlocker
call fcn.180057ab0
mov dword [rbp + 0x490], 0x168
mov dword [rbp + 0x520], 1
lea rbx, [0x1800b0190]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x520]
lea r8, [0x1801fa48c]
mov edx, 4
lea rcx, str.set_fps
call fcn.18005bbb0
lea rdx, [0x1801fb8b6]
lea rcx, str.FOV_Changer
call fcn.180057ab0
mov dword [rbp + 0x508], 0x43340000
mov dword [rbp + 0x4e0], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x508]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4e0]
lea r8, [0x1801fa488]
mov edx, 8
lea rcx, str.fov_Slider
call fcn.18005bbb0
lea rdx, [0x1801fa491]
lea rcx, str.UID_Changer
call fcn.180057ab0
call fcn.18009da60
lea rsi, [0x1801fa5a8]
mov rdi, rsi
cmp qword [0x1801fa5c0], 0xf
cmova rdi, qword [0x1801fa5a8]
mov qword [rbp + 0x78], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, rdi
xor edx, edx
lea rcx, str.setUid
call fcn.18005f1a0
mov rbx, r13
nop word [rax + rax]
inc rbx
cmp byte [rdi + rbx], r12b
jne 0x18007c910
mov r14, qword [0x1801fa5c0]
mov rcx, rsi
mov r15, qword [0x1801fa5a8]
cmp r14, 0xf
cmova rcx, r15
mov r8, qword [0x1801fa5b8]
cmp r8, rbx
jne 0x18007c94a
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18007c980
cmp rbx, r14
ja 0x18007c972
cmp r14, 0xf
cmova rsi, r15
mov qword [0x1801fa5b8], rbx
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], r12b
jmp 0x18007c980
mov r9, rdi
mov rdx, rbx
mov rcx, rsi
call fcn.18007f2f0
lea rdx, [0x1801fb8b8]
lea rcx, str.Peeking
call fcn.180057ab0
lea rdx, [0x1801fa492]
lea rcx, str.Disable_ACE
call fcn.180057ab0
mov rax, qword [0x1801fb490]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007c9ea
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007c9dd
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800bc0ac]
call fcn.180058b10
lea rdx, [0x1801fb8ad]
lea rcx, str.Menu
call fcn.180057ab0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0x80], r12
lea rdx, [rbp + 0x80]
lea rcx, [0x1801fa494]
call fcn.18009dbd0
lea rdx, [0x1801fb8a3]
lea rcx, str.Style_window
call fcn.180057ab0
mov rax, qword [0x1801fb490]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007ca79
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007ca6c
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800bc0ac]
call fcn.180058b10
mov qword [rbp + 0x88], r12
xor r8d, r8d
lea rdx, [rbp + 0x88]
lea rcx, str.Discord
call fcn.180055fd0
test al, al
je 0x18007cac0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__discord.gg_PKbutPa4wQ
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.180025b70
call fcn.180025b70
mov rax, qword [0x1800b50e0]
cmp byte [rax], r12b
je 0x18007e98f
mov qword [rbp + 0x90], r12
mov rcx, qword [0x1801fb490]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Cfg
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007cb3e
lea r8, str.Cfg
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x90]
mov edx, edi
lea rcx, str.Cfg
call fcn.1800257a0
test al, al
je 0x18007e98f
mov rbx, qword [0x1801fb490]
mov rcx, qword [rbx + 0x4040]
mov r9, qword [rcx + 0x1c0]
test r9, r9
jne 0x18007cba5
cmp qword [rbx + 0x4e50], r12
jne 0x18007cba5
movss xmm3, dword [rcx + 0x26c]
subss xmm3, dword [rcx + 0x11c]
mov r8, rcx
add r8, 0x268
jmp 0x18007cbd6
movss xmm3, dword [rcx + 0x23c]
subss xmm3, dword [rcx + 0x11c]
mov r8, rcx
test r9, r9
jne 0x18007cbcf
cmp qword [rbx + 0x4e50], r12
jne 0x18007cbcf
add r8, 0x268
jmp 0x18007cbd6
add r8, 0x238
movss xmm2, dword [r8]
subss xmm2, dword [rcx + 0x118]
mulss xmm2, dword [0x1800bc064]
movss xmm1, dword [rbx + 0x3934]
mulss xmm1, dword [0x1800bc064]
subss xmm2, xmm1
movss dword [rbp + 0x98], xmm2
movss dword [rbp + 0x9c], xmm3
mov byte [rcx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.CfgChild
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007cc5e
lea r8, str.CfgChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rbp + 0x98]
mov edx, edi
lea rcx, str.CfgChild
call fcn.1800257a0
mov r15d, 0x10
mov ebx, 0xf
mov qword [rsp + 0x48], rbx
mov r14d, dword [0x1801fb43c]
test al, al
je 0x18007da64
mov rax, qword gs:[0x58]
mov rax, qword [rax + r14*8]
mov ecx, dword [r15 + rax]
cmp dword [0x1801fc01c], ecx
jle 0x18007cce3
lea rcx, [0x1801fc01c]
call fcn.1800a6cbc
cmp dword [0x1801fc01c], r13d
jne 0x18007cce3
lea rcx, [0x1800ada70]
call fcn.1800a708c
lea rcx, [0x1801fc01c]
call fcn.1800a6c50
mov qword [rbp + 0xa0], r12
xor r8d, r8d
lea rdx, [rbp + 0xa0]
lea rcx, str.Import_config
call fcn.180055fd0
test al, al
je 0x18007cd1f
lea rdx, [0x1801fa450]
lea rcx, [rbp + 0x410]
call fcn.180077f90
mov rcx, rax
call fcn.180085140
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0xa8], r12
xor r8d, r8d
lea rdx, [rbp + 0xa8]
lea rcx, str.Export_config
call fcn.180055fd0
lea rcx, str.config
test al, al
je 0x18007cd94
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], r12
mov qword [rbp + 0x298], r12
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rcx + r8], r12b
jne 0x18007cd70
mov rdx, rcx
lea rcx, [rbp + 0x280]
call fcn.1800769b0
lea rcx, [rbp + 0x280]
call fcn.180082850
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0xb0], r12
xor r8d, r8d
lea rdx, [rbp + 0xb0]
lea rcx, str.Delete
call fcn.180055fd0
test al, al
je 0x18007cdfb
lea rdx, [0x1801fa450]
lea rcx, [rbp + 0x430]
call fcn.180077f90
mov rcx, rax
call fcn.180086b50
lea rax, [0x1801fa450]
cmp qword [0x1801fa468], rbx
cmova rax, qword [0x1801fa450]
mov qword [0x1801fa460], r12
mov byte [rax], r12b
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rbp + 0xb8], r12
xor r8d, r8d
lea rdx, [rbp + 0xb8]
lea rcx, str.Show_dir
call fcn.180055fd0
test al, al
je 0x18007d0c7
movzx r8d, byte [0x1801fa318]
mov edx, 1
lea rcx, [rbp + 0x5a8]
call fcn.180077e80
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp + 0x5b8]
sub rax, rsi
cmp rax, 0x12
jb 0x18007ea1a
lea r12, [rbp + 0x5a8]
mov r14, qword [rbp + 0x5a8]
mov r13, qword [rbp + 0x5c0]
cmp r13, 0xf
cmova r12, r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x548], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x558], xmm1
lea r15, [rsi + 0x12]
mov rdi, rbx
lea rbx, [rbp + 0x548]
cmp r15, rdi
jbe 0x18007cf28
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x18007cee7
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a710c
test rax, rax
je 0x18007cfd6
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18007cf21
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18007cf10
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18007ea02
jmp 0x18007cec8
test rcx, rcx
je 0x18007cf1f
call fcn.1800a710c
mov rbx, rax
jmp 0x18007cf21
xor ebx, ebx
mov qword [rbp + 0x548], rbx
mov qword [rbp + 0x558], r15
mov qword [rbp + 0x560], rdi
mov r8, rsi
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_]
movups xmmword [rsi + rbx], xmm0
movzx eax, word [0x1800b8c68]
mov word [rsi + rbx + 0x10], ax
mov byte [rbx + r15], 0
mov esi, 0x4000000
lea r8, [rbp + 0x548]
cmp qword [rbp + 0x560], 0xf
cmova r8, qword [rbp + 0x548]
mov dword [rsp + 0x28], 1
xor r12d, r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x560]
cmp rdx, 0xf
jbe 0x18007cfe2
inc rdx
mov rcx, qword [rbp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007cfdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007cfdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c0c
movdqa xmm0, xmmword [0x1800bc250]
movdqu xmmword [rbp + 0x558], xmm0
mov byte [rbp + 0x548], r12b
cmp r13, 0xf
jbe 0x18007d033
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18007d02b
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007d02b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800a6c0c
mov r15d, 0x10
mov r13, 0xffffffffffffffff
mov r14d, dword [0x1801fb43c]
mov qword [rbp + 0xc0], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, str.config
xor edx, edx
lea rcx, str.configsave
call fcn.18005f1a0
mov rbx, qword [0x1801fb490]
mov rdx, qword [rbx + 0x4040]
mov r9, qword [rdx + 0x1c0]
test r9, r9
jne 0x18007d0d0
cmp qword [rbx + 0x4e50], r9
jne 0x18007d0d0
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
add r8, 0x268
jmp 0x18007d101
mov esi, dword [rsp + 0x40]
jmp 0x18007d047
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
test r9, r9
jne 0x18007d0fa
cmp qword [rbx + 0x4e50], r9
jne 0x18007d0fa
add r8, 0x268
jmp 0x18007d101
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x74], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.18001d490
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007d167
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x78]
mov edx, edi
lea rcx, str.cfgChild
call fcn.1800257a0
test al, al
je 0x18007da2d
mov ecx, r14d
mov rax, qword gs:[0x58]
mov edx, r15d
mov rax, qword [rax + rcx*8]
lea r15, [0x1801fc020]
mov eax, dword [rdx + rax]
cmp dword [0x1801fc064], eax
jle 0x18007d1f4
lea rcx, [0x1801fc064]
call fcn.1800a6cbc
cmp dword [0x1801fc064], 0xffffffff
jne 0x18007d1f4
movzx r8d, byte [0x1801fa318]
mov edx, 1
mov rcx, r15
call fcn.180077e80
lea rcx, [0x1800ada00]
call fcn.1800a708c
nop
lea rcx, [0x1801fc064]
call fcn.1800a6c50
mov r14, qword [0x1801fc030]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x11
jb 0x18007ea20
cmp qword [0x1801fc038], 0xf
cmova r15, qword [0x1801fc020]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
lea r12, [r14 + 0x11]
mov edi, 0xf
lea rbx, [rbp - 0x40]
cmp r12, rdi
jbe 0x18007d2c3
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x18007d27e
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a710c
test rax, rax
je 0x18007d2a7
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18007d2bf
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18007d2ae
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18007ea08
jmp 0x18007d263
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18007d2bd
call fcn.1800a710c
mov rbx, rax
jmp 0x18007d2bf
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], rdi
mov r8, r14
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48]
movups xmmword [rbx + r14], xmm0
movzx eax, byte [0x1800b86b8]
mov byte [rbx + r14 + 0x10], al
mov byte [rbx + r12], 0
bts esi, 0x1b
mov rdi, qword [rbp - 0x30]
lea rbx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova rbx, qword [rbp - 0x40]
call fcn.1800a7d28
mov qword [rbp + 0x240], rbx
mov qword [rbp + 0x248], rdi
lea r8, [rbp + 0x240]
mov edx, eax
lea rcx, [rbp + 0x1c0]
call fcn.180075d30
or esi, 0x30000000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x470]
call fcn.18007add0
nop
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 7
jbe 0x18007d39b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007d396
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007d396
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c0c
movdqa xmm0, xmmword [0x1800bc230]
movdqu xmmword [rbp + 0x1d0], xmm0
xor r12d, r12d
mov word [rbp + 0x1c0], r12w
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x18007d3f4
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007d3ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007d3ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c0c
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov rbx, qword [rbp + 0x478]
test rbx, rbx
je 0x18007d419
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x478]
mov esi, dword [rsp + 0x40]
movaps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x4f0], xmm0
test rbx, rbx
je 0x18007d43c
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x478]
mov esi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5f8], xmm1
test rbx, rbx
je 0x18007d482
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007d477
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007d477
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x478]
mov rdi, qword [rbp + 0x4f0]
test rdi, rdi
je 0x18007d9a7
lea r15, str..json
nop dword [rax]
lea rdx, [rbp + 0x1b0]
mov rcx, rdi
call fcn.18007a7f0
mov rax, qword [rbp + 0x1b0]
mov edx, dword [rbp + 0x1b8]
test edx, edx
je 0x18007d4cf
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x18007ea26
cmp eax, 2
jne 0x18007d624
call fcn.1800a7d28
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], 5
lea r8, [rbp + 0x250]
mov edx, eax
lea rcx, [rbp + 0x170]
call fcn.180075d30
or esi, 0x60000
or esi, 1
mov dword [rsp + 0x40], esi
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007d520
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.180079df0
cmp rax, r11
je 0x18007d57b
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007d54f
cmp cx, 0x2f
jne 0x18007d558
add rax, 2
cmp rax, r11
jne 0x18007d540
cmp rax, r11
je 0x18007d57b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18007d57b
cmp cx, 0x2f
je 0x18007d57b
mov r10, rdx
cmp rax, rdx
jne 0x18007d560
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0x108]
call fcn.18007f1b0
or esi, 0x1c000
or esi, 2
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x108]
call fcn.18007a490
or esi, 4
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0x170]
cmp qword [rbp + 0x188], 7
cmova rcx, qword [rbp + 0x170]
mov qword [rbp + 0x260], rcx
mov rcx, qword [rbp + 0x180]
mov qword [rbp + 0x268], rcx
movaps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x330], xmm0
lea rdx, [rbp + 0x330]
mov rcx, rax
call fcn.18007a280
test eax, eax
jne 0x18007d624
mov bl, 1
jmp 0x18007d626
xor bl, bl
test sil, 4
je 0x18007d693
and esi, 0xfffffffb
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 7
jbe 0x18007d679
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007d674
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007da41
call fcn.1800a6c0c
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2b8], 7
mov word [rbp + 0x2a0], r12w
test sil, 2
je 0x18007d700
and esi, 0xfffffffd
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x120]
cmp rdx, 7
jbe 0x18007d6e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007d6e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007da48
call fcn.1800a6c0c
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], 7
mov word [rbp + 0x108], r12w
test sil, 1
je 0x18007d753
and esi, 0xfffffffe
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x18007d753
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007d74e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007da4f
call fcn.1800a6c0c
test bl, bl
je 0x18007d984
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007d76a
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.180079df0
cmp rax, r11
je 0x18007d7bb
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007d791
cmp cx, 0x2f
jne 0x18007d79a
add rax, 2
cmp rax, r11
jne 0x18007d782
cmp rax, r11
je 0x18007d7bb
nop
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18007d7bb
cmp cx, 0x2f
je 0x18007d7bb
mov r10, rdx
cmp rax, rdx
jne 0x18007d7a0
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0xe8]
call fcn.18007f1b0
or esi, 0x380000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x568]
lea rcx, [rbp + 0xe8]
call fcn.18007a190
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 7
jbe 0x18007d84f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007d84a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007da56
call fcn.1800a6c0c
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], r12w
lea r14, [0x1801fa450]
mov rdx, r14
cmp qword [0x1801fa468], 0xf
cmova rdx, qword [0x1801fa450]
lea rcx, [rbp + 0x568]
cmp qword [rbp + 0x580], 0xf
seta dil
mov rbx, qword [rbp + 0x568]
cmova rcx, rbx
mov r8, qword [rbp + 0x578]
cmp r8, qword [0x1801fa460]
jne 0x18007d8be
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18007d8be
mov dl, 1
jmp 0x18007d8c0
xor dl, dl
mov qword [rbp - 0x70], 0
lea rcx, [rbp + 0x568]
test dil, dil
cmovne rcx, rbx
lea r9, [rbp - 0x70]
call fcn.180068750
test al, al
je 0x18007d943
mov rdi, qword [rbp + 0x578]
lea r9, [rbp + 0x568]
cmp qword [rbp + 0x580], 0xf
cmova r9, qword [rbp + 0x568]
mov rax, qword [0x1801fa468]
cmp rdi, rax
ja 0x18007d937
mov rbx, r14
cmp rax, 0xf
cmova rbx, qword [0x1801fa450]
mov qword [0x1801fa460], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x18007d943
mov rdx, rdi
mov rcx, r14
call fcn.18007f2f0
nop
mov rdx, qword [rbp + 0x580]
cmp rdx, 0xf
jbe 0x18007d984
inc rdx
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007d97f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007da5d
call fcn.1800a6c0c
lea rcx, [rbp + 0x4f0]
call fcn.18007af30
mov rdi, qword [rbp + 0x4f0]
test rdi, rdi
jne 0x18007d4a0
mov rbx, qword [rbp + 0x478]
mov rcx, qword [rbp + 0x4f8]
test rcx, rcx
je 0x18007d9f4
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18007d9e9
mov rbx, qword [rbp + 0x4f8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007d9e9
mov rcx, qword [rbp + 0x4f8]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x478]
test rbx, rbx
je 0x18007da28
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007da24
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007da24
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
call fcn.180025b70
call fcn.180025b70
mov r14d, dword [0x1801fb43c]
mov r15d, 0x10
jmp 0x18007da68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov esi, dword [rsp + 0x40]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov rbx, qword [0x1801fb490]
mov rdx, qword [rbx + 0x4040]
mov r9, qword [rdx + 0x1c0]
test r9, r9
jne 0x18007dab2
cmp qword [rbx + 0x4e50], r9
jne 0x18007dab2
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
add r8, 0x268
jmp 0x18007dae3
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
test r9, r9
jne 0x18007dadc
cmp qword [rbx + 0x4e50], r9
jne 0x18007dadc
add r8, 0x268
jmp 0x18007dae3
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x68], xmm0
movss dword [rbp - 0x64], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.styleChild
call fcn.18001d490
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007db49
lea r8, str.styleChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rbp - 0x68]
mov edx, edi
lea rcx, str.styleChild
call fcn.1800257a0
test al, al
je 0x18007e98a
mov edx, r14d
mov rax, qword gs:[0x58]
mov ecx, r15d
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1801fc018], ecx
jle 0x18007dbb9
lea rcx, [0x1801fc018]
call fcn.1800a6cbc
cmp dword [0x1801fc018], 0xffffffff
jne 0x18007dbb9
lea rcx, [0x1800ad990]
call fcn.1800a708c
lea rcx, [0x1801fc018]
call fcn.1800a6c50
mov qword [rbp - 0x20], 0
xor r8d, r8d
lea rdx, [rbp - 0x20]
lea rcx, str.Import_theme
call fcn.180055fd0
lea r15, [0x1801fa330]
test al, al
je 0x18007dc5a
mov rdx, r15
lea rcx, [rbp + 0x450]
call fcn.180077f90
mov rcx, rax
call fcn.18008a670
lea rbx, [0x1801fa5c8]
cmp rbx, r15
je 0x18007dc5a
mov rdi, qword [0x1801fa340]
mov r9, r15
cmp qword [0x1801fa348], 0xf
cmova r9, qword [0x1801fa330]
mov rax, qword [0x1801fa5e0]
cmp rdi, rax
ja 0x18007dc4f
cmp rax, 0xf
cmova rbx, qword [0x1801fa5c8]
mov qword [0x1801fa5d8], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18007dc5a
mov rdx, rdi
mov rcx, rbx
call fcn.18007f2f0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rsp + 0x58], 0
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, str.Export_theme
call fcn.180055fd0
lea rbx, str.theme
test al, al
je 0x18007dcd5
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r12
mov qword [rbp + 0x238], r12
mov r8, r13
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x18007dcb0
mov rdx, rbx
lea rcx, [rbp + 0x220]
call fcn.1800769b0
lea rcx, [rbp + 0x220]
call fcn.180086f70
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rsp + 0x60], 0
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, str.Delete_theme
call fcn.180055fd0
test al, al
je 0x18007dd45
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2d8], r12
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x18007dd20
mov rdx, rbx
lea rcx, [rbp + 0x2c0]
call fcn.1800769b0
lea rcx, [rbp + 0x2c0]
call fcn.180086f70
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.18002f7b0
mov qword [rsp + 0x68], 0
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, str.Show_dir
call fcn.180055fd0
test al, al
je 0x18007dfa3
movzx r8d, byte [0x1801fa318]
mov edx, 1
lea rcx, [rbp + 0x5c8]
call fcn.180077e80
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0x5d8]
sub rax, r15
cmp rax, 0x18
jb 0x18007ea37
lea rax, [rbp + 0x5c8]
mov r14, qword [rbp + 0x5c8]
mov r13, qword [rbp + 0x5e0]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x528], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x538], xmm1
lea r12, [r15 + 0x18]
mov edi, 0xf
lea rbx, [rbp + 0x528]
cmp r12, rdi
jbe 0x18007de87
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x18007de41
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a710c
test rax, rax
je 0x18007df38
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0x40]
jmp 0x18007de80
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18007de6a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18007ea0e
jmp 0x18007de1d
test rcx, rcx
je 0x18007de7e
call fcn.1800a710c
mov rbx, rax
mov rax, qword [rsp + 0x40]
jmp 0x18007de80
xor ebx, ebx
mov qword [rbp + 0x528], rbx
mov qword [rbp + 0x538], r12
mov qword [rbp + 0x540], rdi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_themes]
movups xmmword [rbx + r15], xmm0
movsd xmm0, qword [0x1800b86d0]
movsd qword [rbx + r15 + 0x10], xmm0
mov byte [rbx + r12], 0
bts esi, 0x19
lea r8, [rbp + 0x528]
cmp qword [rbp + 0x540], 0xf
cmova r8, qword [rbp + 0x528]
mov dword [rsp + 0x28], 1
xor r12d, r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x540]
cmp rdx, 0xf
jbe 0x18007df44
inc rdx
mov rcx, qword [rbp + 0x528]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007df3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007df3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c0c
movdqa xmm0, xmmword [0x1800bc250]
movdqu xmmword [rbp + 0x538], xmm0
mov byte [rbp + 0x528], r12b
cmp r13, 0xf
jbe 0x18007df95
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18007df8d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007df8d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800a6c0c
lea rbx, str.theme
mov r14d, dword [0x1801fb43c]
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov r8, rbx
xor edx, edx
lea rcx, str.configsave
call fcn.18005f1a0
mov rbx, qword [0x1801fb490]
mov rdx, qword [rbx + 0x4040]
mov r9, qword [rdx + 0x1c0]
test r9, r9
jne 0x18007e01b
cmp qword [rbx + 0x4e50], r9
jne 0x18007e01b
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
add r8, 0x268
jmp 0x18007e04c
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
test r9, r9
jne 0x18007e045
cmp qword [rbx + 0x4e50], r9
jne 0x18007e045
add r8, 0x268
jmp 0x18007e04c
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rdx + 0x118]
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.18001d490
mov edi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4094], eax
jne 0x18007e0b5
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.180038950
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rsp + 0x78]
mov edx, edi
lea rcx, str.cfgChild
call fcn.1800257a0
test al, al
je 0x18007e985
mov ecx, r14d
mov rax, qword gs:[0x58]
mov edx, 0x10
mov rax, qword [rax + rcx*8]
lea r14, [0x1801fc040]
mov eax, dword [rdx + rax]
cmp dword [0x1801fc060], eax
jle 0x18007e145
lea rcx, [0x1801fc060]
call fcn.1800a6cbc
cmp dword [0x1801fc060], 0xffffffff
jne 0x18007e145
movzx r8d, byte [0x1801fa318]
mov edx, 1
mov rcx, r14
call fcn.180077e80
lea rcx, [0x1800ad920]
call fcn.1800a708c
nop
lea rcx, [0x1801fc060]
call fcn.1800a6c50
mov rdi, qword [0x1801fc050]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, 0x18
jb 0x18007ea3d
cmp qword [0x1801fc058], 0xf
cmova r14, qword [0x1801fc040]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
lea r15, [rdi + 0x18]
lea rbx, [rbp - 0x60]
cmp r15, 0xf
jbe 0x18007e21c
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x18007e1d1
mov qword [rsp + 0x48], rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a710c
test rax, rax
je 0x18007e1ff
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18007e218
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov qword [rsp + 0x48], rbx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18007e206
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18007ea14
jmp 0x18007e1b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18007e215
call fcn.1800a710c
mov rbx, rax
jmp 0x18007e218
mov rbx, r12
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x50], r15
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x48], rax
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_themes]
movups xmmword [rbx + rdi], xmm0
movsd xmm0, qword [0x1800b86d0]
movsd qword [rbx + rdi + 0x10], xmm0
mov byte [rbx + r15], 0
bts esi, 0x18
mov rdi, qword [rbp - 0x50]
lea rbx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rbx, qword [rbp - 0x60]
call fcn.1800a7d28
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], rdi
lea r8, [rbp + 0x200]
mov edx, eax
lea rcx, [rbp + 0x1e0]
call fcn.180075d30
or esi, 0xc00000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x480]
call fcn.18007add0
nop
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 7
jbe 0x18007e2fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e2f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007e2f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c0c
movdqa xmm0, xmmword [0x1800bc230]
movdqu xmmword [rbp + 0x1f0], xmm0
mov word [rbp + 0x1e0], r12w
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18007e350
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e34b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007e34b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a6c0c
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d0], xmm0
mov rbx, qword [rbp + 0x488]
test rbx, rbx
je 0x18007e375
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x488]
mov esi, dword [rsp + 0x40]
movaps xmm0, xmmword [rbp + 0x480]
movdqa xmmword [rbp + 0x4d0], xmm0
test rbx, rbx
je 0x18007e398
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x488]
mov esi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5e8], xmm1
mov r14, 0xffffffffffffffff
test rbx, rbx
je 0x18007e3e5
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007e3da
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007e3da
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x488]
mov rdi, qword [rbp + 0x4d0]
test rdi, rdi
je 0x18007e908
nop word [rax + rax]
lea rdx, [rbp + 0x160]
mov rcx, rdi
call fcn.18007a7f0
mov rax, qword [rbp + 0x160]
mov edx, dword [rbp + 0x168]
test edx, edx
je 0x18007e42f
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x18007e9f1
cmp eax, 2
jne 0x18007e584
call fcn.1800a7d28
lea rcx, str..json
mov qword [rbp + 0x210], rcx
mov qword [rbp + 0x218], 5
lea r8, [rbp + 0x210]
mov edx, eax
lea rcx, [rbp + 0x190]
call fcn.180075d30
or esi, 0x3000
or esi, 8
mov dword [rsp + 0x40], esi
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007e487
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.180079df0
cmp rax, r11
je 0x18007e4db
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007e4af
cmp cx, 0x2f
jne 0x18007e4b8
add rax, 2
cmp rax, r11
jne 0x18007e4a0
cmp rax, r11
je 0x18007e4db
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18007e4db
cmp cx, 0x2f
je 0x18007e4db
mov r10, rdx
cmp rax, rdx
jne 0x18007e4c0
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe0], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0xc8]
call fcn.18007f1b0
or esi, 0xe00
or esi, 0x10
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0xc8]
call fcn.18007a490
or esi, 0x20
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rcx, qword [rbp + 0x190]
mov qword [rbp + 0x270], rcx
mov rcx, qword [rbp + 0x1a0]
mov qword [rbp + 0x278], rcx
movaps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x310], xmm0
lea rdx, [rbp + 0x310]
mov rcx, rax
call fcn.18007a280
test eax, eax
jne 0x18007e584
mov bl, 1
jmp 0x18007e586
xor bl, bl
test sil, 0x20
je 0x18007e5f3
and esi, 0xffffffdf
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 7
jbe 0x18007e5d9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e5d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007e9ce
call fcn.1800a6c0c
mov qword [rbp + 0x2f0], r12
mov qword [rbp + 0x2f8], 7
mov word [rbp + 0x2e0], r12w
test sil, 0x10
je 0x18007e660
and esi, 0xffffffef
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0xe0]
cmp rdx, 7
jbe 0x18007e646
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e641
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007e9d5
call fcn.1800a6c0c
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], r12w
test sil, 8
je 0x18007e6b3
and esi, 0xfffffff7
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x18007e6b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e6ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007e9dc
call fcn.1800a6c0c
test bl, bl
je 0x18007e8e5
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007e6ca
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea rdx, [rcx + rax*2]
mov r10, rdx
call fcn.180079df0
cmp rax, rdx
je 0x18007e71c
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007e6ef
cmp cx, 0x2f
jne 0x18007e6f8
add rax, 2
cmp rax, rdx
jne 0x18007e6e0
cmp rax, rdx
je 0x18007e71c
nop dword [rax]
lea r8, [r10 - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18007e71c
cmp cx, 0x2f
je 0x18007e71c
mov r10, r8
cmp rax, r8
jne 0x18007e700
sub rdx, r10
sar rdx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], r12
mov r8, rdx
mov rdx, r10
lea rcx, [rbp + 0x128]
call fcn.18007f1b0
or esi, 0x1c0
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x128]
call fcn.18007a190
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 7
jbe 0x18007e7b0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e7ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007e9e3
call fcn.1800a6c0c
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], 7
mov word [rbp + 0x128], r12w
lea r15, [0x1801fa330]
mov rdx, r15
cmp qword [0x1801fa348], 0xf
cmova rdx, qword [0x1801fa330]
lea rcx, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0xf
seta dil
mov rbx, qword [rbp + 0x588]
cmova rcx, rbx
mov r8, qword [rbp + 0x598]
cmp r8, qword [0x1801fa340]
jne 0x18007e81f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18007e81f
mov dl, 1
jmp 0x18007e821
xor dl, dl
mov qword [rbp - 0x80], 0
lea rcx, [rbp + 0x588]
test dil, dil
cmovne rcx, rbx
lea r9, [rbp - 0x80]
call fcn.180068750
test al, al
je 0x18007e8a4
mov rdi, qword [rbp + 0x598]
lea r9, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0xf
cmova r9, qword [rbp + 0x588]
mov rax, qword [0x1801fa348]
cmp rdi, rax
ja 0x18007e898
mov rbx, r15
cmp rax, 0xf
cmova rbx, qword [0x1801fa330]
mov qword [0x1801fa340], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18007e8a4
mov rdx, rdi
mov rcx, r15
call fcn.18007f2f0
nop
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 0xf
jbe 0x18007e8e5
inc rdx
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007e8e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007e9ea
call fcn.1800a6c0c
lea rcx, [rbp + 0x4d0]
call fcn.18007af30
mov rdi, qword [rbp + 0x4d0]
test rdi, rdi
jne 0x18007e400
mov rbx, qword [rbp + 0x488]
mov rcx, qword [rbp + 0x4d8]
test rcx, rcx
je 0x18007e951
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18007e94a
mov rbx, qword [rbp + 0x4d8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007e94a
mov rcx, qword [rbp + 0x4d8]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x488]
test rbx, rbx
je 0x18007e980
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007e980
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x18007e980
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
call fcn.180025b70
call fcn.180025b70
call fcn.180025b70
call fcn.18002ba00
call fcn.18002b120
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.1800a6a70
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.1800767a0
nop
call fcn.1800754f0
nop
call fcn.1800754f0
nop
call fcn.1800754f0
nop
call fcn.1800754f0
nop
call fcn.1800755b0
nop
call fcn.1800755b0
nop
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.1800767a0
nop
call fcn.1800755b0
nop
call fcn.1800755b0
int3