Function at 0x180083320
Capabilities:
Create process on windows
Create thread
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x798]
sub rsp, 0x870
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1800d7040]
xor rax, rsp
mov qword [rbp + 0x750], rax
xor r13d, r13d
mov dword [rsp + 0x40], r13d
cmp byte [0x18020599e], r13b
je 0x180086acb
cmp byte [0x1802055c9], r13b
je 0x180083719
movabs rax, 0x63d73f97b5ba59d4
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x170], rax
movabs rax, 0x37a80c558ab89973
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x178], rax
movabs r14, 0x17b24df4d0c97af7
mov qword [rsp + 0x48], r14
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x6b0], rax
movabs r15, 0x37a80c558ad6f024
mov qword [rsp + 0x48], r15
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x6b8], rax
movdqa xmm0, xmmword [rbp + 0x6b0]
xorps xmm0, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x170], xmm0
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x170]
call fcn.18002fe00
movabs rax, 0x37c1289daabe1580
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x70], rax
movabs rax, 0x59dd6333aaa39f5d
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x78], rax
movabs rax, 0xa3c90277bcfae515
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x80], rax
movabs rax, 0x4f6f610b49eb4af4
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x78], rax
movabs rax, 0xb93faf6cb526d84b
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x70], rax
movabs rax, 0xf11a9da9c981793b
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x68], rax
movabs rax, 0x8c9fb722e8c40f53
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x60], rax
movabs rcx, 0xa6f3e4cf7275917a
mov qword [rsp + 0x48], rcx
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x48], r14
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x710], rax
mov qword [rsp + 0x48], r15
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x718], rax
movabs r12, 0xcaaf2212d48ec571
mov qword [rsp + 0x48], r12
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x720], rax
movabs rsi, 0x3b1d007b699f3986
mov qword [rsp + 0x48], rsi
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x728], rax
movabs rdi, 0x995ac7189540b76b
mov qword [rsp + 0x48], rdi
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x730], rax
movabs rbx, 0xb33ae189ace51658
mov qword [rsp + 0x48], rbx
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x738], rax
movabs rax, 0x8cd4d076b98f3c65
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x740], rax
mov qword [rsp + 0x48], rcx
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x748], rax
movdqa xmm0, xmmword [rbp + 0x710]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x720]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0x730]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x60]
xorps xmm1, xmmword [rbp + 0x740]
movdqa xmmword [rbp - 0x60], xmm1
lea rcx, [rsp + 0x70]
call fcn.18005c3f0
movabs rax, 0x7ed46d9ab1aa5a82
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x70], rax
movabs rax, 0x5988693dfef6944a
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x78], rax
movabs rax, 0xeaca4c7df4fabd14
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x80], rax
movabs rax, 0x593d65131dbf57ef
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x78], rax
movabs rax, 0xea3be761e721d902
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x70], rax
movabs rax, 0xb33ae189c089732f
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x48], r14
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x6e0], rax
mov qword [rsp + 0x48], r15
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x6e8], rax
mov qword [rsp + 0x48], r12
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x6f0], rax
mov qword [rsp + 0x48], rsi
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x6f8], rax
mov qword [rsp + 0x48], rdi
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x700], rax
mov qword [rsp + 0x48], rbx
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x708], rax
movdqa xmm0, xmmword [rbp + 0x6e0]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x6f0]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0x700]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.18005c3f0
jmp 0x180086ac6
cmp byte [0x180205993], r13b
je 0x180083729
xor ecx, ecx
call fcn.180041830
mov rcx, qword [0x180205888]
call fcn.180032be0
mov rax, qword [0x1802054e0]
or dword [rax + 0x4a50], 2
mov dword [rax + 0x4a70], 0x44480000
mov dword [rax + 0x4a74], 0x43e10000
mov dword [rax + 0x4a58], 4
movabs rax, 0x79d3259a95e92da0
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x150], rax
movabs rax, 0x37a80c558aa49547
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x158], rax
movabs r14, 0x17b24df4d0c97af7
mov qword [rsp + 0x50], r14
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x6d0], rax
movabs r15, 0x37a80c558ad6f024
mov qword [rsp + 0x50], r15
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x6d8], rax
movdqa xmm0, xmmword [rbp + 0x150]
xorps xmm0, xmmword [rbp + 0x6d0]
movdqa xmmword [rbp + 0x150], xmm0
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0x150]
call fcn.18002fe00
mov rbx, qword [0x1802054e0]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r13
jne 0x18008381d
cmp qword [rbx + 0x4e50], r13
lea rcx, [rdx + 0x26c]
je 0x180083824
lea rcx, [rdx + 0x23c]
movss xmm1, dword [rcx]
subss xmm1, dword [rdx + 0x11c]
mov dword [rbp + 0x10], 0x43160000
movss dword [rbp + 0x14], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Sidebar
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18008388b
lea r8, str.Sidebar
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r13d
mov r9d, 1
lea r8, [rbp + 0x10]
mov edx, edi
lea rcx, str.Sidebar
call fcn.18002ca20
test al, al
je 0x180083987
mov ebx, r13d
mov rax, qword [0x180205568]
mov rdx, qword [0x180205560]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x180083982
mov qword [rbp + 0x18], rbx
mov rsi, r13
lea rdi, [0x1800be0e0]
lea r12, [0x1800be0e8]
nop word [rax + rax]
cmp ebx, dword [0x180205738]
sete al
lea rcx, [rdx + rsi]
cmp qword [rcx + 0x18], 0xf
jbe 0x180083907
mov rcx, qword [rcx]
lea r9, [rbp + 0x18]
movzx edx, al
call fcn.18006f9d0
test al, al
je 0x180083957
mov dword [0x180205738], ebx
mov edx, r13d
mov rcx, r12
mov rax, qword [rcx - 8]
mov byte [rax], r13b
mov rax, qword [rcx]
mov byte [rax], r13b
mov rax, qword [rcx + 8]
mov byte [rax], r13b
mov rax, qword [rcx + 0x10]
mov byte [rax], r13b
mov rax, qword [rcx + 0x18]
mov byte [rax], r13b
add edx, 5
lea rcx, [rcx + 0x28]
cmp edx, 5
jb 0x180083923
mov rax, qword [rdi]
mov byte [rax], 1
inc ebx
add rsi, 0x20
add rdi, 8
mov rcx, qword [0x180205568]
mov rdx, qword [0x180205560]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x1800838f0
call fcn.18002cdf0
movss xmm7, dword [0x1800c5e78]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov esi, 0x10
mov r12d, dword [0x18020548c]
mov rax, qword [0x1800be0e0]
cmp byte [rax], r13b
je 0x180083d50
mov qword [rbp + 0x20], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Player
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180083a17
lea r8, str.Player
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r15d, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [rbp + 0x20]
mov edx, edi
lea rcx, str.Player
call fcn.18002ca20
mov qword [rbp + 0x28], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.PlayerChild
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180083a94
lea r8, str.PlayerChild
lea edx, [r15 + 0xb]
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, [rbp + 0x28]
mov edx, edi
lea rcx, str.PlayerChild
call fcn.18002ca20
test al, al
je 0x180083d46
lea rdx, [0x180205999]
lea rcx, str.Godmode
call fcn.18005ed30
lea rdx, [0x18020599c]
lea rcx, str.Multihit
call fcn.18005ed30
mov dword [rbp + 0x588], 0x64
mov dword [rbp + 0x590], 1
lea rbx, [0x1800b91b0]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x588]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x590]
lea r8, [0x180204590]
mov edx, 4
lea rcx, str.Hits
call fcn.180062e30
lea rdx, [0x180205998]
lea rcx, str.No_cooldown
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x18020599d]
lea rcx, str.Instant_special_energy
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x18020458c]
lea rcx, str.Infinite_stamina
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x18020599b]
lea rcx, str.Force_critical
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x180205995]
lea rcx, str.No_fall
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x180205997]
lea rcx, str.Max_resonance_chain
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x180205994]
lea rcx, str.Spider
call fcn.18005ed30
lea rdx, [0x18020599a]
lea rcx, str.Noclip
call fcn.18005ed30
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp + 0x30], r13
lea rdx, [rbp + 0x30]
lea rcx, [0x1802059b8]
call fcn.1800a60a0
mov dword [rbp + 0x598], 0x3e8
mov dword [rbp + 0x5a0], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x598]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x5a0]
lea r8, [0x180204598]
mov edx, 4
lea rcx, str.Fly_speed
call fcn.180062e30
lea rdx, [0x180205996]
lea rcx, str.Player_speed
call fcn.18005ed30
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp + 0x38], r13
lea rdx, [rbp + 0x38]
lea rcx, [0x1802059bc]
call fcn.1800a60a0
mov dword [rbp + 0x5a8], 0x3e8
mov dword [rbp + 0x5b0], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x5a8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x5b0]
lea r8, [0x180204588]
mov edx, 4
lea rcx, str.Speed
call fcn.180062e30
lea rdx, [0x180204584]
lea rcx, str.Player_scale
call fcn.18005ed30
mov dword [rbp + 0x5b8], 0x41a00000
mov dword [rbp + 0x540], 0x3dcccccd
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x5b8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x540]
lea r8, [0x180204594]
mov edx, 8
lea rcx, str.Scale
call fcn.180062e30
call fcn.18002cdf0
call fcn.18002cdf0
jmp 0x180084f0f
mov rax, qword [0x1800be0e8]
cmp byte [rax], r13b
je 0x180083f21
mov qword [rbp + 0x40], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.World
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180083dc1
lea r8, str.World
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r15d, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [rbp + 0x40]
mov edx, edi
lea rcx, str.World
call fcn.18002ca20
mov qword [rbp + 0x48], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.WorldChild
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180083e3e
lea r8, str.WorldChild
lea edx, [r15 + 0xb]
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, [rbp + 0x48]
mov edx, edi
lea rcx, str.WorldChild
call fcn.18002ca20
test al, al
je 0x180083f17
lea rdx, [0x180205991]
lea rcx, str.Dumb_enemies
call fcn.18005ed30
lea rdx, [0x180205992]
lea rcx, str.Speedhack
call fcn.18005ed30
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp + 0x50], r13
lea rdx, [rbp + 0x50]
lea rcx, [0x1802059b0]
call fcn.1800a60a0
mov dword [rbp + 0x548], 0x41200000
mov dword [rbp + 0x580], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x548]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x580]
lea r8, [0x180204580]
mov edx, 8
lea rcx, str.Speed
call fcn.180062e30
lea rdx, [0x180205990]
lea rcx, str.Skip_cooking_animation
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
call fcn.18002cdf0
call fcn.18002cdf0
jmp 0x180084f0f
mov rax, qword [0x1800be0f0]
cmp byte [rax], r13b
je 0x1800849ce
mov qword [rbp + 0x58], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Visuals
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180083f92
lea r8, str.Visuals
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r15d, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [rbp + 0x58]
mov edx, edi
lea rcx, str.Visuals
call fcn.18002ca20
mov qword [rbp + 0x60], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.VisualsChild
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18008400f
lea r8, str.VisualsChild
lea edx, [r15 + 0xb]
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, [rbp + 0x60]
mov edx, edi
lea rcx, str.VisualsChild
call fcn.18002ca20
test al, al
je 0x1800849c4
lea rdx, [0x18020599f]
lea rcx, [0x1800c21c0]
call fcn.18005ed30
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp + 0x68], r13
lea rdx, [rbp + 0x68]
lea rcx, [0x1802059b4]
call fcn.1800a60a0
lea rdx, [0x1802045a1]
lea rcx, [0x1800be9e8]
call fcn.18005ed30
lea rdx, [0x1802059a0]
lea rcx, str.Tracers
call fcn.18005ed30
lea rdx, [0x1802059a9]
lea rcx, str.Distance
call fcn.18005ed30
mov dword [rbp + 0x550], 0x453b8000
mov dword [rbp + 0x558], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x550]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x558]
lea r8, [0x18020459c]
mov edx, 8
lea rcx, str.Distance_limit
call fcn.180062e30
mov dword [rsp + 0x20], 2
lea r9, str.Threaded
lea r8, [0x180061800]
lea rdx, [0x1802059a4]
lea rcx, str.Render_method
call fcn.180061850
mov qword [rbp + 0x70], r13
lea rcx, [rbp + 0x70]
call fcn.18005fc00
mov rax, qword [0x1802054e0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r13b
jne 0x180084164
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r13
je 0x180084157
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800c5d4c]
call fcn.18005fd90
mov qword [rbp], r13
lea rcx, [rbp]
call fcn.18005fc00
lea rdx, [0x1802045a0]
lea rcx, str.Filter_Names
call fcn.18005ed30
mov qword [rbp + 0x78], r13
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x180205890]
xor edx, edx
lea rcx, str.search
call fcn.180066420
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x1800846ae
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Monsters
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x180084225
lea r8, str.Monsters
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Monsters
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x1800846ae
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
lea rdx, [0x1802059a8]
lea rcx, str.Monster
call fcn.18005ed30
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x1800842fb
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Aero
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x1800842c4
lea r8, str.Aero
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Aero
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x1800842fb
lea rdx, [0x1802060b8]
lea rcx, [rbp + 0x390]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x180084398
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Electro
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x180084361
lea r8, str.Electro
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Electro
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x180084398
lea rdx, [0x1802060f8]
lea rcx, [rbp + 0x3a0]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x180084435
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Fusion
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x1800843fe
lea r8, str.Fusion
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Fusion
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x180084435
lea rdx, [0x180206108]
lea rcx, [rbp + 0x3b0]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x1800844d2
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Glacio
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18008449b
lea r8, str.Glacio
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Glacio
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x1800844d2
lea rdx, [0x180206098]
lea rcx, [rbp + 0x3c0]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x18008456f
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Havoc
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x180084538
lea r8, str.Havoc
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Havoc
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x18008456f
lea rdx, [0x1802060a8]
lea rcx, [rbp + 0x3d0]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x18008460c
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Spectro
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x1800845d5
lea r8, str.Spectro
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Spectro
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x18008460c
lea rdx, [0x180206088]
lea rcx, [rbp + 0x380]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x1800846a9
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x180084672
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x1800846a9
lea rdx, [0x1802060e8]
lea rcx, [rbp + 0x3e0]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x18008474b
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ascension_Materials
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x180084714
lea r8, str.Ascension_Materials
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Ascension_Materials
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x18008474b
lea rdx, [0x1802060d8]
lea rcx, [rbp + 0x3f0]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x1800847e8
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ores
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x1800847b1
lea r8, str.Ores
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Ores
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x1800847e8
lea rdx, [0x180206078]
lea rcx, [rbp + 0x2e0]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x180084885
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Cooking__Synthesis
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18008484e
lea r8, str.Cooking__Synthesis
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Cooking__Synthesis
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x180084885
lea rdx, [0x180206058]
lea rcx, [rbp + 0x300]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x180084922
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Puzzles
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x1800848eb
lea r8, str.Puzzles
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Puzzles
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x180084922
lea rdx, [0x1802060c8]
lea rcx, [rbp + 0x310]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r13b
jne 0x1800849bf
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.180024710
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x180084988
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.18006f070
test al, al
je 0x1800849bf
lea rdx, [0x180206048]
lea rcx, [rbp + 0x320]
call fcn.180086c50
mov rcx, rax
call fcn.180082a60
call fcn.18006f850
call fcn.18002cdf0
call fcn.18002cdf0
jmp 0x180084f0f
mov rax, qword [0x1800be0f8]
cmp byte [rax], r13b
je 0x180084f0c
mov qword [rbp + 0x80], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Misc
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180084a42
lea r8, str.Misc
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [rbp + 0x80]
mov edx, edi
lea rcx, str.Misc
call fcn.18002ca20
mov qword [rbp + 0x88], r13
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.MiscChild
call fcn.180024710
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180084ac3
lea r8, str.MiscChild
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r13d
mov r9d, 1
lea r8, [rbp + 0x88]
mov edx, edi
lea rcx, str.MiscChild
call fcn.18002ca20
test al, al
je 0x180084efe
lea rdx, [0x1802045b0]
lea rcx, str.Show_FPS
call fcn.18005ed30
lea rdx, [0x1802059ab]
lea rcx, str.FPS_Unlocker
call fcn.18005ed30
mov dword [rbp + 0x560], 0x168
mov dword [rbp + 0x568], 1
lea rbx, [0x1800b91b0]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x560]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x568]
lea r8, [0x1802045ac]
mov edx, 4
lea rcx, str.set_fps
call fcn.180062e30
lea rdx, [0x1802059aa]
lea rcx, str.FOV_Changer
call fcn.18005ed30
mov dword [rbp + 0x578], 0x43340000
mov dword [rbp + 0x570], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x578]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x570]
lea r8, [0x1802045a4]
mov edx, 8
lea rcx, str.fov_Slider
call fcn.180062e30
lea rdx, [0x1802045a8]
lea rcx, str.UID_Hider
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x1802059ac]
lea rcx, str.Peeking
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
lea rdx, [0x1802045b1]
lea rcx, str.Disable_ACE
call fcn.18005ed30
lea rdx, [0x1802059ad]
lea rcx, str.Disable_TpSafe
call fcn.18005ed30
lea rdx, str.Requires_game_reload
call fcn.1800a5f30
mov rax, qword [0x1802054e0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r13b
jne 0x180084c7a
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r13
je 0x180084c6d
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800c5d4c]
call fcn.18005fd90
lea rdx, [0x18020599e]
lea rcx, str.Menu
call fcn.18005ed30
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp + 0x90], r13
lea rdx, [rbp + 0x90]
lea rcx, [0x1802045b4]
call fcn.1800a60a0
lea rdx, [0x180205993]
lea rcx, str.Style_window
call fcn.18005ed30
mov rax, qword [0x1802054e0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r13b
jne 0x180084d09
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r13
je 0x180084cfc
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800c5d4c]
call fcn.18005fd90
mov qword [rbp + 0x98], r13
xor r8d, r8d
lea rdx, [rbp + 0x98]
lea rcx, str.Discord
call fcn.18005d250
test al, al
je 0x180084d50
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, str.https:__discord.gg_PKbutPa4wQ
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov qword [rbp + 0xa0], r13
movabs rax, 0x72923f91a4ba1b92
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x160], rax
movabs rax, 0x37a80c558ad69743
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x50], r14
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x6c0], rax
mov qword [rsp + 0x50], r15
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x6c8], rax
movdqa xmm0, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x6c0]
movdqa xmmword [rbp + 0x160], xmm0
xor r8d, r8d
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x160]
call fcn.18005d250
test al, al
je 0x180084edf
mov rax, qword gs:[0x58]
mov rax, qword [rax + r12*8]
mov ecx, dword [rsi + rax]
cmp dword [0x180206118], ecx
jle 0x180084e94
lea rcx, [0x180206118]
call fcn.1800ae92c
cmp dword [0x180206118], 0xffffffff
jne 0x180084e94
mov ecx, 8
call fcn.1800aed7c
lea rcx, [0x180082e60]
mov qword [rax], rcx
mov qword [rbp + 0x640], rax
mov edi, 0x8000000
lea rcx, [0x180206128]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x1800879f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [0x180206120], rax
test rax, rax
je 0x180084e81
lea rcx, [0x1800b6160]
call fcn.1800aecfc
nop
lea rcx, [0x180206118]
call fcn.1800ae8c0
jmp 0x180084e98
mov dword [0x180206128], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov edi, dword [rsp + 0x40]
cmp dword [0x180206128], 0
je 0x180084ee3
movups xmm0, xmmword [0x180206120]
movaps xmmword [rbp + 0x330], xmm0
lea rcx, [rbp + 0x330]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x180084ecc
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movups xmmword [rbp + 0x490], xmm0
movups xmmword [0x180206120], xmm0
jmp 0x180084ee3
mov edi, dword [rsp + 0x40]
lea rdx, str.Enables_the_easter_egg__which_may_or_may_not_get_u_a_key_
call fcn.1800a5f30
call fcn.18002cdf0
call fcn.18002cdf0
xor r15d, r15d
jmp 0x180084f13
mov edi, dword [rsp + 0x40]
call fcn.18002cdf0
xor r15d, r15d
jmp 0x180084f13
xor r15d, r15d
mov edi, dword [rsp + 0x40]
mov rax, qword [0x1800be100]
cmp byte [rax], 0
je 0x180086ac1
mov qword [rbp + 0xa8], 0
mov rcx, qword [0x1802054e0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Cfg
call fcn.180024710
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180084f8b
lea r8, str.Cfg
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, [rbp + 0xa8]
mov edx, esi
lea rcx, str.Cfg
call fcn.18002ca20
test al, al
je 0x180086ac1
mov rbx, qword [0x1802054e0]
mov rdx, qword [rbx + 0x4040]
mov r8, qword [rdx + 0x1c0]
test r8, r8
jne 0x180084ff1
cmp qword [rbx + 0x4e50], r8
jne 0x180084ff1
movss xmm3, dword [rdx + 0x26c]
subss xmm3, dword [rdx + 0x11c]
mov rax, rdx
add rax, 0x268
jmp 0x180085020
movss xmm3, dword [rdx + 0x23c]
subss xmm3, dword [rdx + 0x11c]
mov rax, rdx
test r8, r8
jne 0x18008501a
cmp qword [rbx + 0x4e50], r8
jne 0x18008501a
add rax, 0x268
jmp 0x180085020
add rax, 0x238
movss xmm2, dword [rax]
subss xmm2, dword [rdx + 0x118]
mulss xmm2, dword [0x1800c5d04]
movss xmm1, dword [rbx + 0x3934]
mulss xmm1, dword [0x1800c5d04]
subss xmm2, xmm1
movss dword [rbp + 0xb0], xmm2
movss dword [rbp + 0xb4], xmm3
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.CfgChild
call fcn.180024710
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x1800850a7
lea r8, str.CfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rbp + 0xb0]
mov edx, esi
lea rcx, str.CfgChild
call fcn.18002ca20
mov r13, 0xffffffffffffffff
test al, al
je 0x180085c73
mov rax, qword gs:[0x58]
mov r14d, 0x10
mov rax, qword [rax + r12*8]
mov ecx, dword [r14 + rax]
cmp dword [0x180206154], ecx
jle 0x180085122
lea rcx, [0x180206154]
call fcn.1800ae92c
cmp dword [0x180206154], r13d
jne 0x180085122
lea rcx, [0x1800b60f0]
call fcn.1800aecfc
lea rcx, [0x180206154]
call fcn.1800ae8c0
mov qword [rbp + 0xb8], 0
xor r8d, r8d
lea rdx, [rbp + 0xb8]
lea rcx, str.Import_config
call fcn.18005d250
test al, al
je 0x180085162
lea rdx, [0x180204340]
lea rcx, [rbp + 0x4a0]
call fcn.18007f520
mov rcx, rax
call fcn.18008d830
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp + 0xc0], 0
xor r8d, r8d
lea rdx, [rbp + 0xc0]
lea rcx, str.Export_config
call fcn.18005d250
lea rbx, str.config
test al, al
je 0x1800851d9
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], r15
mov r8, r13
inc r8
cmp byte [rbx + r8], 0
jne 0x1800851b4
mov rdx, rbx
lea rcx, [rbp + 0x240]
call fcn.18007de40
lea rcx, [rbp + 0x240]
call fcn.18008ad10
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp + 0xc8], 0
xor r8d, r8d
lea rdx, [rbp + 0xc8]
lea rcx, str.Delete
call fcn.18005d250
test al, al
je 0x180085245
lea rdx, [0x180204340]
lea rcx, [rbp + 0x4c0]
call fcn.18007f520
mov rcx, rax
call fcn.18008f3b0
lea rax, [0x180204340]
cmp qword [0x180204358], 0xf
cmova rax, qword [0x180204340]
mov qword [0x180204350], r15
mov byte [rax], 0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp - 0x10], 0
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, str.Show_dir
call fcn.18005d250
test al, al
je 0x180085377
movzx r8d, byte [0x180204328]
mov edx, 1
lea rcx, [rbp + 0x668]
call fcn.180086db0
nop
lea r8, str.hellokittyfan48_
lea rcx, [rbp + 0x620]
call fcn.18007f760
lea r8, [rbp + 0x620]
cmp qword [rbp + 0x638], 0xf
cmova r8, qword [rbp + 0x620]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x638]
cmp rdx, 0xf
jbe 0x18008531a
inc rdx
mov rcx, qword [rbp + 0x620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180085315
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180085315
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
mov qword [rbp + 0x630], r15
mov qword [rbp + 0x638], 0xf
mov byte [rbp + 0x620], 0
mov rdx, qword [rbp + 0x680]
cmp rdx, 0xf
jbe 0x180085377
inc rdx
mov rcx, qword [rbp + 0x668]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180085372
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180085372
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
mov qword [rbp - 8], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov r8, rbx
xor edx, edx
lea rcx, str.configsave
call fcn.180066420
mov rbx, qword [0x1802054e0]
mov rdx, qword [rbx + 0x4040]
mov r8, qword [rdx + 0x1c0]
test r8, r8
jne 0x1800853ec
cmp qword [rbx + 0x4e50], r8
jne 0x1800853ec
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
add rax, 0x268
jmp 0x18008541b
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
test r8, r8
jne 0x180085415
cmp qword [rbx + 0x4e50], r8
jne 0x180085415
add rax, 0x268
jmp 0x18008541b
add rax, 0x238
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp + 8], xmm0
movss dword [rbp + 0xc], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.180024710
mov esi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x180085480
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, [rbp + 8]
mov edx, esi
lea rcx, str.cfgChild
call fcn.18002ca20
test al, al
je 0x180085c6e
mov rax, qword gs:[0x58]
mov rax, qword [rax + r12*8]
mov ecx, dword [r14 + rax]
cmp dword [0x18020611c], ecx
jle 0x180085505
lea rcx, [0x18020611c]
call fcn.1800ae92c
cmp dword [0x18020611c], 0xffffffff
jne 0x180085505
movzx r8d, byte [0x180204328]
mov edx, 1
lea rcx, [0x180206160]
call fcn.180086db0
lea rcx, [0x1800b6080]
call fcn.1800aecfc
nop
lea rcx, [0x18020611c]
call fcn.1800ae8c0
lea r8, str.hellokittyfan48
lea rcx, [rbp + 0x430]
call fcn.18007f760
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180085527
mov rax, qword [rax]
mov qword [rbp + 0x500], rax
mov qword [rbp + 0x508], rcx
call fcn.1800af998
movaps xmm0, xmmword [rbp + 0x500]
movdqa xmmword [rbp + 0x340], xmm0
lea r8, [rbp + 0x340]
mov edx, eax
lea rcx, [rbp + 0x180]
call fcn.18007cfb0
or edi, 0x6000000
mov dword [rsp + 0x40], edi
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x520]
call fcn.1800827b0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 7
jbe 0x1800855c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800855c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800855c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], 7
mov word [rbp + 0x180], r15w
mov rdx, qword [rbp + 0x448]
cmp rdx, 0xf
jbe 0x180085623
inc rdx
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008561e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008561e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
xorps xmm0, xmm0
movups xmmword [rbp + 0x500], xmm0
mov rbx, qword [rbp + 0x528]
test rbx, rbx
je 0x180085648
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x528]
mov edi, dword [rsp + 0x40]
mov rsi, qword [rbp + 0x520]
mov qword [rbp + 0x500], rsi
mov r14, rsi
mov qword [rbp + 0x508], rbx
test rbx, rbx
je 0x18008567b
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x528]
mov rsi, qword [rbp + 0x500]
mov edi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x648], xmm1
test rbx, rbx
je 0x1800856c8
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1800856b6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1800856b6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov rsi, qword [rbp + 0x500]
mov rbx, qword [rbp + 0x528]
test r14, r14
je 0x180085be8
lea rdx, [rbp + 0x210]
mov rcx, rsi
call fcn.1800821d0
mov rax, qword [rbp + 0x210]
mov edx, dword [rbp + 0x218]
test edx, edx
je 0x180085700
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x180086b3a
cmp eax, 2
jne 0x180085864
lea rax, str..json
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 5
call fcn.1800af998
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x2f0], xmm0
lea r8, [rbp + 0x2f0]
mov edx, eax
lea rcx, [rbp + 0x1d0]
call fcn.18007cfb0
or edi, 0x60000
or edi, 1
mov dword [rsp + 0x40], edi
lea rcx, [rsi + 0x20]
cmp qword [rsi + 0x38], 7
jbe 0x180085761
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18007d100
cmp rax, r11
je 0x1800857bb
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18008578f
cmp cx, 0x2f
jne 0x180085798
add rax, 2
cmp rax, r11
jne 0x180085780
cmp rax, r11
je 0x1800857bb
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x1800857bb
cmp cx, 0x2f
je 0x1800857bb
mov r10, rdx
cmp rax, rdx
jne 0x1800857a0
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x148], r15
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0x130]
call fcn.180080700
or edi, 0x380000
or edi, 2
mov dword [rsp + 0x40], edi
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x130]
call fcn.180081e70
or edi, 4
mov dword [rsp + 0x40], edi
lea rcx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 7
cmova rcx, qword [rbp + 0x1d0]
mov qword [rbp + 0x220], rcx
mov rcx, qword [rbp + 0x1e0]
mov qword [rbp + 0x228], rcx
movaps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x350], xmm0
lea rdx, [rbp + 0x350]
mov rcx, rax
call fcn.180081c60
test eax, eax
jne 0x180085864
mov bl, 1
jmp 0x180085866
xor bl, bl
test dil, 4
je 0x1800858d3
and edi, 0xfffffffb
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x278]
cmp rdx, 7
jbe 0x1800858b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800858b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180085cbc
call fcn.1800ae87c
mov qword [rbp + 0x270], r15
mov qword [rbp + 0x278], 7
mov word [rbp + 0x260], r15w
test dil, 2
je 0x180085940
and edi, 0xfffffffd
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x180085926
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180085921
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180085cc3
call fcn.1800ae87c
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r15w
test dil, 1
je 0x180085993
and edi, 0xfffffffe
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 7
jbe 0x180085993
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008598e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180085cca
call fcn.1800ae87c
test bl, bl
je 0x180085bc5
lea rcx, [rsi + 0x20]
cmp qword [rsi + 0x38], 7
jbe 0x1800859aa
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x30]
lea rdx, [rcx + rax*2]
mov r10, rdx
call fcn.18007d100
cmp rax, rdx
je 0x1800859fc
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1800859cf
cmp cx, 0x2f
jne 0x1800859d8
add rax, 2
cmp rax, rdx
jne 0x1800859c0
cmp rax, rdx
je 0x1800859fc
nop dword [rax]
lea r8, [r10 - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x1800859fc
cmp cx, 0x2f
je 0x1800859fc
mov r10, r8
cmp rax, r8
jne 0x1800859e0
sub rdx, r10
sar rdx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], r15
mov r8, rdx
mov rdx, r10
lea rcx, [rbp + 0x110]
call fcn.180080700
or edi, 0x1c000
mov dword [rsp + 0x40], edi
lea rdx, [rbp + 0x5e0]
lea rcx, [rbp + 0x110]
call fcn.18007d200
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 7
jbe 0x180085a90
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180085a8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180085cd1
call fcn.1800ae87c
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], 7
mov word [rbp + 0x110], r15w
lea r14, [0x180204340]
mov rdx, r14
cmp qword [0x180204358], 0xf
cmova rdx, qword [0x180204340]
lea rcx, [rbp + 0x5e0]
cmp qword [rbp + 0x5f8], 0xf
seta sil
mov rbx, qword [rbp + 0x5e0]
cmova rcx, rbx
mov r8, qword [rbp + 0x5f0]
cmp r8, qword [0x180204350]
jne 0x180085aff
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180085aff
mov dl, 1
jmp 0x180085b01
xor dl, dl
mov qword [rbp - 0x50], 0
lea rcx, [rbp + 0x5e0]
test sil, sil
cmovne rcx, rbx
lea r9, [rbp - 0x50]
call fcn.18006f9d0
test al, al
je 0x180085b84
mov rsi, qword [rbp + 0x5f0]
lea r9, [rbp + 0x5e0]
cmp qword [rbp + 0x5f8], 0xf
cmova r9, qword [rbp + 0x5e0]
mov rax, qword [0x180204358]
cmp rsi, rax
ja 0x180085b78
mov rbx, r14
cmp rax, 0xf
cmova rbx, qword [0x180204340]
mov qword [0x180204350], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x180085b84
mov rdx, rsi
mov rcx, r14
call fcn.180087450
nop
mov rdx, qword [rbp + 0x5f8]
cmp rdx, 0xf
jbe 0x180085bc5
inc rdx
mov rcx, qword [rbp + 0x5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180085bc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180085cd8
call fcn.1800ae87c
lea rcx, [rbp + 0x500]
call fcn.180082910
mov rsi, qword [rbp + 0x500]
test rsi, rsi
jne 0x1800856d1
mov rbx, qword [rbp + 0x528]
mov rcx, qword [rbp + 0x508]
test rcx, rcx
je 0x180085c35
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x180085c2a
mov rbx, qword [rbp + 0x508]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180085c2a
mov rcx, qword [rbp + 0x508]
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x528]
test rbx, rbx
je 0x180085c69
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180085c65
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180085c65
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
call fcn.18002cdf0
call fcn.18002cdf0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov rbx, qword [0x1802054e0]
mov rdx, qword [rbx + 0x4040]
mov r8, qword [rdx + 0x1c0]
test r8, r8
jne 0x180085cdf
cmp qword [rbx + 0x4e50], r8
jne 0x180085cdf
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
add rax, 0x268
jmp 0x180085d0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
test r8, r8
jne 0x180085d08
cmp qword [rbx + 0x4e50], r8
jne 0x180085d08
add rax, 0x268
jmp 0x180085d0e
add rax, 0x238
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x48], xmm0
movss dword [rbp - 0x44], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.styleChild
call fcn.180024710
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x180085d73
lea r8, str.styleChild
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rbp - 0x48]
mov edx, esi
lea rcx, str.styleChild
call fcn.18002ca20
test al, al
je 0x180086abc
mov rax, qword gs:[0x58]
mov ecx, 0x10
mov rax, qword [rax + r12*8]
mov ecx, dword [rcx + rax]
cmp dword [0x180206150], ecx
jle 0x180085de2
lea rcx, [0x180206150]
call fcn.1800ae92c
cmp dword [0x180206150], 0xffffffff
jne 0x180085de2
lea rcx, [0x1800b6010]
call fcn.1800aecfc
lea rcx, [0x180206150]
call fcn.1800ae8c0
mov qword [rbp - 0x40], 0
xor r8d, r8d
lea rdx, [rbp - 0x40]
lea rcx, str.Import_theme
call fcn.18005d250
lea r14, [0x180204460]
test al, al
je 0x180085e83
mov rdx, r14
lea rcx, [rbp + 0x4e0]
call fcn.18007f520
mov rcx, rax
call fcn.180092d90
lea rbx, [0x1802045e0]
cmp rbx, r14
je 0x180085e83
mov rsi, qword [0x180204470]
mov r9, r14
cmp qword [0x180204478], 0xf
cmova r9, qword [0x180204460]
mov rax, qword [0x1802045f8]
cmp rsi, rax
ja 0x180085e78
cmp rax, 0xf
cmova rbx, qword [0x1802045e0]
mov qword [0x1802045f0], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x180085e83
mov rdx, rsi
mov rcx, rbx
call fcn.180087450
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp - 0x38], 0
xor r8d, r8d
lea rdx, [rbp - 0x38]
lea rcx, str.Export_theme
call fcn.18005d250
lea rbx, str.theme
test al, al
je 0x180085ef5
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], r15
mov qword [rbp + 0x298], r15
mov r8, r13
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x180085ed0
mov rdx, rbx
lea rcx, [rbp + 0x280]
call fcn.18007de40
lea rcx, [rbp + 0x280]
call fcn.18008f690
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp - 0x18], 0
xor r8d, r8d
lea rdx, [rbp - 0x18]
lea rcx, str.Delete_theme
call fcn.18005d250
test al, al
je 0x180085f65
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov qword [rbp + 0x2b0], r15
mov qword [rbp + 0x2b8], r15
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x180085f40
mov rdx, rbx
lea rcx, [rbp + 0x2a0]
call fcn.18007de40
lea rcx, [rbp + 0x2a0]
call fcn.18008f690
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180036a30
mov qword [rbp - 0x30], 0
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, str.Show_dir
call fcn.18005d250
test al, al
je 0x1800861cb
movzx r8d, byte [0x180204328]
mov edx, 1
lea rcx, [rbp + 0x688]
call fcn.180086db0
nop
mov r14, qword [0x180204630]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x17
jb 0x180086b4b
lea r12, [0x180204620]
cmp qword [0x180204638], 0xf
cmova r12, qword [0x180204620]
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
mov qword [rbp + 0x5d0], r15
mov qword [rbp + 0x5d8], r15
lea r15, [r14 + 0x17]
mov esi, 0xf
lea rbx, [rbp + 0x5c0]
cmp r15, rsi
jbe 0x18008608e
mov rsi, r15
or rsi, 0xf
cmp rsi, rcx
jbe 0x18008604e
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800aed7c
test rax, rax
je 0x180086154
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180086087
mov eax, 0x16
cmp rsi, rax
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x180086076
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180086b34
jmp 0x18008602f
test rcx, rcx
je 0x180086085
call fcn.1800aed7c
mov rbx, rax
jmp 0x180086087
xor ebx, ebx
mov qword [rbp + 0x5c0], rbx
mov qword [rbp + 0x5d0], r15
mov qword [rbp + 0x5d8], rsi
mov r8, r14
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.hellokittyfan48_themes]
movups xmmword [r14 + rbx], xmm0
mov eax, dword [0x1800c1e00]
mov dword [r14 + rbx + 0x10], eax
movzx eax, word [0x1800c1e04]
mov word [r14 + rbx + 0x14], ax
movzx eax, byte [0x1800c1e06]
mov byte [r14 + rbx + 0x16], al
mov byte [rbx + r15], 0
bts edi, 0x18
lea r8, [rbp + 0x5c0]
cmp qword [rbp + 0x5d8], 0xf
cmova r8, qword [rbp + 0x5c0]
mov dword [rsp + 0x28], 1
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x5d8]
cmp rdx, 0xf
jbe 0x180086160
inc rdx
mov rcx, qword [rbp + 0x5c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008615b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008615b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
mov qword [rbp + 0x5d0], r15
mov qword [rbp + 0x5d8], 0xf
mov byte [rbp + 0x5c0], r15b
mov rdx, qword [rbp + 0x6a0]
cmp rdx, 0xf
jbe 0x1800861bd
inc rdx
mov rcx, qword [rbp + 0x688]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800861b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800861b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
lea rbx, str.theme
mov r12d, dword [0x18020548c]
mov qword [rbp - 0x28], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov r8, rbx
xor edx, edx
lea rcx, str.configsave
call fcn.180066420
mov rbx, qword [0x1802054e0]
mov rdx, qword [rbx + 0x4040]
mov r8, qword [rdx + 0x1c0]
test r8, r8
jne 0x180086240
cmp qword [rbx + 0x4e50], r8
jne 0x180086240
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
add rax, 0x268
jmp 0x18008626f
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov rax, rdx
test r8, r8
jne 0x180086269
cmp qword [rbx + 0x4e50], r8
jne 0x180086269
add rax, 0x268
jmp 0x18008626f
add rax, 0x238
movss xmm0, dword [rax]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.180024710
mov esi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4094], eax
jne 0x1800862d5
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003fbd0
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, [rbp - 0x20]
mov edx, esi
lea rcx, str.cfgChild
call fcn.18002ca20
test al, al
je 0x180086ab7
mov edx, r12d
mov rax, qword gs:[0x58]
mov ecx, 0x10
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x180206158], ecx
jle 0x180086361
lea rcx, [0x180206158]
call fcn.1800ae92c
cmp dword [0x180206158], 0xffffffff
jne 0x180086361
movzx r8d, byte [0x180204328]
mov edx, 1
lea rcx, [0x180206130]
call fcn.180086db0
lea rcx, [0x1800b5fa0]
call fcn.1800aecfc
nop
lea rcx, [0x180206158]
call fcn.1800ae8c0
lea r8, str.hellokittyfan48_themes
lea rcx, [rbp + 0x410]
call fcn.18007f760
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x180086383
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
call fcn.1800af998
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x370], xmm0
lea r8, [rbp + 0x370]
mov edx, eax
lea rcx, [rbp + 0x1f0]
call fcn.18007cfb0
or edi, 0xc00000
mov dword [rsp + 0x40], edi
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x530]
call fcn.1800827b0
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 7
jbe 0x18008641b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180086416
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180086416
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r15w
mov rdx, qword [rbp + 0x428]
cmp rdx, 0xf
jbe 0x180086479
inc rdx
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180086474
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180086474
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ae87c
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
mov rbx, qword [rbp + 0x538]
test rbx, rbx
je 0x18008649e
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x538]
mov edi, dword [rsp + 0x40]
mov rsi, qword [rbp + 0x530]
mov qword [rbp + 0x510], rsi
mov r14, rsi
mov qword [rbp + 0x518], rbx
test rbx, rbx
je 0x1800864d1
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x538]
mov rsi, qword [rbp + 0x510]
mov edi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x658], xmm1
test rbx, rbx
je 0x18008651e
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18008650c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18008650c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov edi, dword [rsp + 0x40]
mov rsi, qword [rbp + 0x510]
mov rbx, qword [rbp + 0x538]
test r14, r14
je 0x180086a3a
nop word [rax + rax]
lea rdx, [rbp + 0x1c0]
mov rcx, rsi
call fcn.1800821d0
mov rax, qword [rbp + 0x1c0]
mov edx, dword [rbp + 0x1c8]
test edx, edx
je 0x18008655f
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x180086b23
cmp eax, 2
jne 0x1800866b7
lea rax, str..json
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 5
call fcn.1800af998
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x400], xmm0
lea r8, [rbp + 0x400]
mov edx, eax
lea rcx, [rbp + 0x1a0]
call fcn.18007cfb0
or edi, 0x3000
or edi, 8
mov dword [rsp + 0x40], edi
lea rcx, [rsi + 0x20]
cmp qword [rsi + 0x38], 7
jbe 0x1800865c0
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x30]
lea rdx, [rcx + rax*2]
mov r10, rdx
call fcn.18007d100
cmp rax, rdx
je 0x18008660e
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1800865e4
cmp cx, 0x2f
jne 0x1800865ed
add rax, 2
cmp rax, rdx
jne 0x1800865d5
cmp rax, rdx
je 0x18008660e
lea r8, [r10 - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008660e
cmp cx, 0x2f
je 0x18008660e
mov r10, r8
cmp rax, r8
jne 0x1800865f2
sub rdx, r10
sar rdx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], r15
mov r8, rdx
mov rdx, r10
lea rcx, [rbp + 0xf0]
call fcn.180080700
or edi, 0xe00
or edi, 0x10
mov dword [rsp + 0x40], edi
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0xf0]
call fcn.180081e70
or edi, 0x20
mov dword [rsp + 0x40], edi
lea rcx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 7
cmova rcx, qword [rbp + 0x1a0]
mov qword [rbp + 0x230], rcx
mov rcx, qword [rbp + 0x1b0]
mov qword [rbp + 0x238], rcx
movaps xmm0, xmmword [rbp + 0x230]
movdqa xmmword [rbp + 0x360], xmm0
lea rdx, [rbp + 0x360]
mov rcx, rax
call fcn.180081c60
test eax, eax
jne 0x1800866b7
mov bl, 1
jmp 0x1800866b9
xor bl, bl
test dil, 0x20
je 0x180086726
and edi, 0xffffffdf
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 7
jbe 0x18008670c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180086707
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180086b00
call fcn.1800ae87c
mov qword [rbp + 0x2d0], r15
mov qword [rbp + 0x2d8], 7
mov word [rbp + 0x2c0], r15w
test dil, 0x10
je 0x180086793
and edi, 0xffffffef
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x108]
cmp rdx, 7
jbe 0x180086779
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180086774
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180086b07
call fcn.1800ae87c
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], 7
mov word [rbp + 0xf0], r15w
test dil, 8
je 0x1800867e6
and edi, 0xfffffff7
mov dword [rsp + 0x40], edi
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 7
jbe 0x1800867e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800867e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180086b0e
call fcn.1800ae87c
test bl, bl
je 0x180086a17
lea rcx, [rsi + 0x20]
cmp qword [rsi + 0x38], 7
jbe 0x1800867fd
mov rcx, qword [rsi + 0x20]
mov rax, qword [rsi + 0x30]
lea rdx, [rcx + rax*2]
mov r10, rdx
call fcn.18007d100
cmp rax, rdx
je 0x18008684c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180086821
cmp cx, 0x2f
jne 0x18008682a
add rax, 2
cmp rax, rdx
jne 0x180086812
cmp rax, rdx
je 0x18008684c
nop
lea r8, [r10 - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x18008684c
cmp cx, 0x2f
je 0x18008684c
mov r10, r8
cmp rax, r8
jne 0x180086830
sub rdx, r10
sar rdx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], r15
mov r8, rdx
mov rdx, r10
lea rcx, [rbp + 0xd0]
call fcn.180080700
or edi, 0x1c0
mov dword [rsp + 0x40], edi
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0xd0]
call fcn.18007d200
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x1800868e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800868db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180086b15
call fcn.1800ae87c
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r15w
lea r14, [0x180204460]
mov rdx, r14
cmp qword [0x180204478], 0xf
cmova rdx, qword [0x180204460]
lea rcx, [rbp + 0x600]
cmp qword [rbp + 0x618], 0xf
seta sil
mov rbx, qword [rbp + 0x600]
cmova rcx, rbx
mov r8, qword [rbp + 0x610]
cmp r8, qword [0x180204470]
jne 0x18008694f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18008694f
mov dl, 1
jmp 0x180086951
xor dl, dl
mov qword [rsp + 0x48], 0
lea rcx, [rbp + 0x600]
test sil, sil
cmovne rcx, rbx
lea r9, [rsp + 0x48]
call fcn.18006f9d0
test al, al
je 0x1800869d6
mov rsi, qword [rbp + 0x610]
lea r9, [rbp + 0x600]
cmp qword [rbp + 0x618], 0xf
cmova r9, qword [rbp + 0x600]
mov rax, qword [0x180204478]
cmp rsi, rax
ja 0x1800869ca
mov rbx, r14
cmp rax, 0xf
cmova rbx, qword [0x180204460]
mov qword [0x180204470], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x1800869d6
mov rdx, rsi
mov rcx, r14
call fcn.180087450
nop
mov rdx, qword [rbp + 0x618]
cmp rdx, 0xf
jbe 0x180086a17
inc rdx
mov rcx, qword [rbp + 0x600]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180086a12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180086b1c
call fcn.1800ae87c
lea rcx, [rbp + 0x510]
call fcn.180082910
mov rsi, qword [rbp + 0x510]
test rsi, rsi
jne 0x180086530
mov rbx, qword [rbp + 0x538]
mov rcx, qword [rbp + 0x518]
test rcx, rcx
je 0x180086a83
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x180086a7c
mov rbx, qword [rbp + 0x518]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180086a7c
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x538]
test rbx, rbx
je 0x180086ab2
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180086ab2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r13d
cmp r13d, 1
jne 0x180086ab2
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
call fcn.18002cdf0
call fcn.18002cdf0
call fcn.18002cdf0
call fcn.180032c80
call fcn.1800323a0
mov rcx, qword [rbp + 0x750]
xor rcx, rsp
call fcn.1800ae6e0
lea r11, [rsp + 0x870]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rsi + 0x20]
lea rcx, str.directory_entry::status
call fcn.18007dc10
nop
call fcn.18007c770
nop
lea r8, [rsi + 0x20]
lea rcx, str.directory_entry::status
call fcn.18007dc10
nop
call fcn.18007c830
int3