Function at 0x18007da60
Capabilities:
Create process on windows
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x668]
sub rsp, 0x740
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1800d0040]
xor rax, rsp
mov qword [rbp + 0x620], rax
xor r12d, r12d
mov dword [rsp + 0x40], r12d
cmp byte [0x1801fe90d], r12b
je 0x180080f49
cmp byte [0x1801fe903], r12b
je 0x18007dac0
xor ecx, ecx
call fcn.18003cb40
mov rcx, qword [0x1801fe7f8]
call fcn.18002def0
mov rax, qword [0x1801fe4c0]
or dword [rax + 0x4a50], 2
mov dword [rax + 0x4a70], 0x44480000
mov dword [rax + 0x4a74], 0x43e10000
mov dword [rax + 0x4a58], 4
movabs rax, 0x97cc4d2c2607ff3c
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x140], rax
movabs rax, 0x8158f77f46db0233
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x148], rax
movabs rax, 0xf9ad25426327a86b
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x610], rax
movabs rax, 0x8158f77f46a96750
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x618], rax
movdqa xmm0, xmmword [rbp + 0x610]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x140], xmm0
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0x140]
call fcn.18002b110
mov rbx, qword [0x1801fe4c0]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r12
jne 0x18007dbb4
cmp qword [rbx + 0x4e50], r12
lea rcx, [rdx + 0x26c]
je 0x18007dbbb
lea rcx, [rdx + 0x23c]
movss xmm1, dword [rcx]
subss xmm1, dword [rdx + 0x11c]
mov dword [rbp], 0x43160000
movss dword [rbp + 4], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Sidebar
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007dc22
lea r8, str.Sidebar
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp]
mov edx, edi
lea rcx, str.Sidebar
call fcn.180027d30
test al, al
je 0x18007dd17
mov ebx, r12d
mov rax, qword [0x1801fe530]
mov rdx, qword [0x1801fe528]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18007dd12
mov qword [rbp + 8], rbx
mov rsi, r12
lea rdi, [0x1800b80c0]
lea r14, [0x1800b80c8]
nop dword [rax]
cmp ebx, dword [0x1801fe6dc]
sete al
lea rcx, [rsi + rdx]
cmp qword [rcx + 0x18], 0xf
jbe 0x18007dc97
mov rcx, qword [rcx]
lea r9, [rbp + 8]
movzx edx, al
call fcn.18006ace0
test al, al
je 0x18007dce7
mov dword [0x1801fe6dc], ebx
mov edx, r12d
mov rcx, r14
mov rax, qword [rcx - 8]
mov byte [rax], r12b
mov rax, qword [rcx]
mov byte [rax], r12b
mov rax, qword [rcx + 8]
mov byte [rax], r12b
mov rax, qword [rcx + 0x10]
mov byte [rax], r12b
mov rax, qword [rcx + 0x18]
mov byte [rax], r12b
add edx, 5
lea rcx, [rcx + 0x28]
cmp edx, 5
jb 0x18007dcb3
mov rax, qword [rdi]
mov byte [rax], 1
inc ebx
add rsi, 0x20
add rdi, 8
mov rcx, qword [0x1801fe530]
mov rdx, qword [0x1801fe528]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x18007dc80
call fcn.180028100
movss xmm7, dword [0x1800bf588]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov r13, 0xffffffffffffffff
mov rax, qword [0x1800b80c0]
cmp byte [rax], r12b
je 0x18007e08c
mov qword [rbp + 0x10], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Player
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007dda1
lea r8, str.Player
lea edx, [r13 + 0xc]
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x10]
mov edx, edi
lea rcx, str.Player
call fcn.180027d30
mov qword [rbp + 0x18], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.PlayerChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007de1c
lea r8, str.PlayerChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x18]
mov edx, edi
lea rcx, str.PlayerChild
call fcn.180027d30
test al, al
je 0x18007f098
lea rdx, [0x1801fe909]
lea rcx, str.Godmode
call fcn.18005a040
lea rdx, [0x1801fe90c]
lea rcx, str.Multihit
call fcn.18005a040
mov dword [rbp + 0x500], 0x64
mov dword [rbp + 0x4c8], 1
lea rbx, [0x1800b3190]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x500]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4c8]
lea r8, [0x1801fd4a0]
mov edx, 4
lea rcx, str.Hits
call fcn.18005e140
lea rdx, [0x1801fe908]
lea rcx, str.No_cooldown
call fcn.18005a040
call fcn.1800a0060
lea rdx, [0x1801fd49c]
lea rcx, str.Infinite_stamina
call fcn.18005a040
call fcn.1800a0060
lea rdx, [0x1801fe90b]
lea rcx, str.Force_critical
call fcn.18005a040
call fcn.1800a0060
lea rdx, [0x1801fe905]
lea rcx, str.No_fall
call fcn.18005a040
call fcn.1800a0060
lea rdx, [0x1801fe907]
lea rcx, str.Max_resonance_chain
call fcn.18005a040
call fcn.1800a0060
lea rdx, [0x1801fe904]
lea rcx, str.Spider
call fcn.18005a040
lea rdx, [0x1801fe90a]
lea rcx, str.Noclip
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x20], r12
lea rdx, [rbp + 0x20]
lea rcx, [0x1801fe924]
call fcn.1800a01d0
mov dword [rbp + 0x480], 0x3e8
mov dword [rbp + 0x488], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x480]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x488]
lea r8, [0x1801fd4a8]
mov edx, 4
lea rcx, str.Fly_speed
call fcn.18005e140
lea rdx, [0x1801fe906]
lea rcx, str.Player_speed
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x28], r12
lea rdx, [rbp + 0x28]
lea rcx, [0x1801fe928]
call fcn.1800a01d0
mov dword [rbp + 0x490], 0x3e8
mov dword [rbp + 0x498], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x498]
lea r8, [0x1801fd498]
mov edx, 4
lea rcx, str.Speed
call fcn.18005e140
lea rdx, [0x1801fd494]
lea rcx, str.Player_scale
call fcn.18005a040
mov dword [rbp + 0x4a0], 0x41a00000
mov dword [rbp + 0x4e0], 0x3dcccccd
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4e0]
lea r8, [0x1801fd4a4]
mov edx, 8
lea rcx, str.Scale
call fcn.18005e140
jmp 0x18007f093
mov rax, qword [0x1800b80c8]
cmp byte [rax], r12b
je 0x18007e24a
mov qword [rbp + 0x30], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.World
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e0fd
lea r8, str.World
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x30]
mov edx, edi
lea rcx, str.World
call fcn.180027d30
mov qword [rbp + 0x38], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.WorldChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e178
lea r8, str.WorldChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x38]
mov edx, edi
lea rcx, str.WorldChild
call fcn.180027d30
test al, al
je 0x18007f098
lea rdx, [0x1801fe901]
lea rcx, str.Dumb_enemies
call fcn.18005a040
lea rdx, [0x1801fe902]
lea rcx, str.Speedhack
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x40], r12
lea rdx, [rbp + 0x40]
lea rcx, [0x1801fe91c]
call fcn.1800a01d0
mov dword [rbp + 0x520], 0x41200000
mov dword [rbp + 0x4d8], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x520]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4d8]
lea r8, [0x1801fd490]
mov edx, 8
lea rcx, str.Speed
call fcn.18005e140
lea rdx, [0x1801fe900]
lea rcx, str.Skip_cooking_animation
call fcn.18005a040
call fcn.1800a0060
jmp 0x18007f093
mov rax, qword [0x1800b80d0]
cmp byte [rax], r12b
je 0x18007ec7e
mov qword [rbp + 0x48], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Visuals
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e2bb
lea r8, str.Visuals
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x48]
mov edx, edi
lea rcx, str.Visuals
call fcn.180027d30
mov qword [rbp - 0x30], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.VisualsChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e336
lea r8, str.VisualsChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x30]
mov edx, edi
lea rcx, str.VisualsChild
call fcn.180027d30
test al, al
je 0x18007f098
lea rdx, [0x1801fe90e]
lea rcx, [0x1800bbc18]
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x50], r12
lea rdx, [rbp + 0x50]
lea rcx, [0x1801fe920]
call fcn.1800a01d0
lea rdx, [0x1801fd4b1]
lea rcx, [0x1800b89c8]
call fcn.18005a040
lea rdx, [0x1801fe90f]
lea rcx, str.Tracers
call fcn.18005a040
lea rdx, [0x1801fe915]
lea rcx, str.Distance
call fcn.18005a040
mov dword [rbp + 0x4d0], 0x453b8000
mov dword [rbp + 0x4a8], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4d0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4a8]
lea r8, [0x1801fd4ac]
mov edx, 8
lea rcx, str.Distance_limit
call fcn.18005e140
mov dword [rsp + 0x20], 2
lea r9, str.Threaded
lea r8, [0x18005cb10]
lea rdx, [0x1801fe910]
lea rcx, str.Render_method
call fcn.18005cb60
mov qword [rbp + 0x58], r12
lea rcx, [rbp + 0x58]
call fcn.18005af10
mov rax, qword [0x1801fe4c0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007e48b
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007e47e
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800bf454]
call fcn.18005b0a0
mov qword [rbp + 0x60], r12
lea rcx, [rbp + 0x60]
call fcn.18005af10
lea rdx, [0x1801fd4b0]
lea rcx, str.Filter_Names
call fcn.18005a040
mov qword [rbp + 0x68], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x1801fe800]
xor edx, edx
lea rcx, str.search
call fcn.180061730
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e9f1
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Monsters
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e54c
lea r8, str.Monsters
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Monsters
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e9f1
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
lea rdx, [0x1801fe914]
lea rcx, str.Monster
call fcn.18005a040
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e626
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Aero
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e5ef
lea r8, str.Aero
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Aero
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e626
lea rdx, [0x1801ff028]
lea rcx, [rbp + 0x360]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e6c7
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Electro
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e690
lea r8, str.Electro
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Electro
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e6c7
lea rdx, [0x1801ff068]
lea rcx, [rbp + 0x370]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e768
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Fusion
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e731
lea r8, str.Fusion
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Fusion
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e768
lea rdx, [0x1801ff078]
lea rcx, [rbp + 0x380]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e809
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Glacio
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e7d2
lea r8, str.Glacio
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Glacio
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e809
lea rdx, [0x1801ff008]
lea rcx, [rbp + 0x390]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e8aa
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Havoc
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e873
lea r8, str.Havoc
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Havoc
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e8aa
lea rdx, [0x1801ff018]
lea rcx, [rbp + 0x3a0]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e94b
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Spectro
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e914
lea r8, str.Spectro
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Spectro
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e94b
lea rdx, [0x1801feff8]
lea rcx, [rbp + 0x3b0]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e9ec
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e9b5
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e9ec
lea rdx, [0x1801ff058]
lea rcx, [rbp + 0x2f0]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007ea92
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ascension_Materials
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007ea5b
lea r8, str.Ascension_Materials
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Ascension_Materials
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007ea92
lea rdx, [0x1801ff048]
lea rcx, [rbp + 0x300]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007eb33
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ores
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007eafc
lea r8, str.Ores
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Ores
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007eb33
lea rdx, [0x1801fefe8]
lea rcx, [rbp + 0x310]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007ebd4
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Puzzles
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007eb9d
lea r8, str.Puzzles
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Puzzles
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007ebd4
lea rdx, [0x1801ff038]
lea rcx, [rbp + 0x320]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007f093
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007ec3e
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007f093
lea rdx, [0x1801fefc8]
lea rcx, [rbp + 0x330]
call fcn.180081070
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
jmp 0x18007f093
mov rax, qword [0x1800b80d8]
cmp byte [rax], r12b
je 0x18007f09d
mov qword [rbp + 0x70], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Misc
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007ecef
lea r8, str.Misc
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x70]
mov edx, edi
lea rcx, str.Misc
call fcn.180027d30
mov qword [rbp + 0x78], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.MiscChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007ed6a
lea r8, str.MiscChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x78]
mov edx, edi
lea rcx, str.MiscChild
call fcn.180027d30
test al, al
je 0x18007f098
lea rdx, [0x1801fd4bc]
lea rcx, str.Show_FPS
call fcn.18005a040
lea rdx, [0x1801fe917]
lea rcx, str.FPS_Unlocker
call fcn.18005a040
mov dword [rbp + 0x4c0], 0x168
mov dword [rbp + 0x4e8], 1
lea rbx, [0x1800b3190]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4e8]
lea r8, [0x1801fd4b8]
mov edx, 4
lea rcx, str.set_fps
call fcn.18005e140
lea rdx, [0x1801fe916]
lea rcx, str.FOV_Changer
call fcn.18005a040
mov dword [rbp + 0x4b8], 0x43340000
mov dword [rbp + 0x4b0], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4b8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b0]
lea r8, [0x1801fd4b4]
mov edx, 8
lea rcx, str.fov_Slider
call fcn.18005e140
lea rdx, [0x1801fd4bd]
lea rcx, str.UID_Changer
call fcn.18005a040
call fcn.1800a0060
lea rsi, [0x1801fd5d8]
mov rdi, rsi
cmp qword [0x1801fd5f0], 0xf
cmova rdi, qword [0x1801fd5d8]
mov qword [rbp + 0x80], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, rdi
xor edx, edx
lea rcx, str.setUid
call fcn.180061730
mov rbx, r13
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], r12b
jne 0x18007eed0
mov r14, qword [0x1801fd5f0]
mov rcx, rsi
mov r15, qword [0x1801fd5d8]
cmp r14, 0xf
cmova rcx, r15
mov r8, qword [0x1801fd5e8]
cmp r8, rbx
jne 0x18007ef0a
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18007ef40
cmp rbx, r14
ja 0x18007ef32
cmp r14, 0xf
cmova rsi, r15
mov qword [0x1801fd5e8], rbx
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], r12b
jmp 0x18007ef40
mov r9, rdi
mov rdx, rbx
mov rcx, rsi
call fcn.1800818a0
lea rdx, [0x1801fe918]
lea rcx, str.Peeking
call fcn.18005a040
lea rdx, [0x1801fd4be]
lea rcx, str.Disable_ACE
call fcn.18005a040
lea rdx, [0x1801fe919]
lea rcx, str.Disable_TpSafe
call fcn.18005a040
mov rax, qword [0x1801fe4c0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007efbd
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007efb0
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800bf454]
call fcn.18005b0a0
lea rdx, [0x1801fe90d]
lea rcx, str.Menu
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x88], r12
lea rdx, [rbp + 0x88]
lea rcx, [0x1801fd4c0]
call fcn.1800a01d0
lea rdx, [0x1801fe903]
lea rcx, str.Style_window
call fcn.18005a040
mov rax, qword [0x1801fe4c0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007f04c
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007f03f
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800bf454]
call fcn.18005b0a0
mov qword [rbp + 0x90], r12
xor r8d, r8d
lea rdx, [rbp + 0x90]
lea rcx, str.Discord
call fcn.180058560
test al, al
je 0x18007f093
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__discord.gg_PKbutPa4wQ
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.180028100
call fcn.180028100
mov rax, qword [0x1800b80e0]
cmp byte [rax], r12b
je 0x180080f3f
mov qword [rbp + 0x98], r12
mov rcx, qword [0x1801fe4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Cfg
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007f111
lea r8, str.Cfg
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x98]
mov edx, edi
lea rcx, str.Cfg
call fcn.180027d30
test al, al
je 0x180080f3f
mov rbx, qword [0x1801fe4c0]
mov rcx, qword [rbx + 0x4040]
mov r9, qword [rcx + 0x1c0]
test r9, r9
jne 0x18007f178
cmp qword [rbx + 0x4e50], r12
jne 0x18007f178
movss xmm3, dword [rcx + 0x26c]
subss xmm3, dword [rcx + 0x11c]
mov r8, rcx
add r8, 0x268
jmp 0x18007f1a9
movss xmm3, dword [rcx + 0x23c]
subss xmm3, dword [rcx + 0x11c]
mov r8, rcx
test r9, r9
jne 0x18007f1a2
cmp qword [rbx + 0x4e50], r12
jne 0x18007f1a2
add r8, 0x268
jmp 0x18007f1a9
add r8, 0x238
movss xmm2, dword [r8]
subss xmm2, dword [rcx + 0x118]
mulss xmm2, dword [0x1800bf40c]
movss xmm1, dword [rbx + 0x3934]
mulss xmm1, dword [0x1800bf40c]
subss xmm2, xmm1
movss dword [rbp + 0xa0], xmm2
movss dword [rbp + 0xa4], xmm3
mov byte [rcx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.CfgChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007f231
lea r8, str.CfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rbp + 0xa0]
mov edx, edi
lea rcx, str.CfgChild
call fcn.180027d30
mov r15d, 0x10
mov ebx, 0xf
mov qword [rsp + 0x48], rbx
mov r14d, dword [0x1801fe46c]
test al, al
je 0x180080024
mov rax, qword gs:[0x58]
mov rax, qword [rax + r14*8]
mov ecx, dword [r15 + rax]
cmp dword [0x1801ff08c], ecx
jle 0x18007f2b6
lea rcx, [0x1801ff08c]
call fcn.1800a965c
cmp dword [0x1801ff08c], r13d
jne 0x18007f2b6
lea rcx, [0x1800b0660]
call fcn.1800a9a2c
lea rcx, [0x1801ff08c]
call fcn.1800a95f0
mov qword [rbp + 0xa8], r12
xor r8d, r8d
lea rdx, [rbp + 0xa8]
lea rcx, str.Import_config
call fcn.180058560
test al, al
je 0x18007f2f2
lea rdx, [0x1801fd470]
lea rcx, [rbp + 0x430]
call fcn.18007a4f0
mov rcx, rax
call fcn.180087760
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0xb0], r12
xor r8d, r8d
lea rdx, [rbp + 0xb0]
lea rcx, str.Export_config
call fcn.180058560
lea rcx, str.config
test al, al
je 0x18007f364
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2e8], r12
mov r8, r13
inc r8
cmp byte [rcx + r8], r12b
jne 0x18007f340
mov rdx, rcx
lea rcx, [rbp + 0x2d0]
call fcn.180078f40
lea rcx, [rbp + 0x2d0]
call fcn.180084e10
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0xb8], r12
xor r8d, r8d
lea rdx, [rbp + 0xb8]
lea rcx, str.Delete
call fcn.180058560
test al, al
je 0x18007f3cb
lea rdx, [0x1801fd470]
lea rcx, [rbp + 0x410]
call fcn.18007a4f0
mov rcx, rax
call fcn.180089240
lea rax, [0x1801fd470]
cmp qword [0x1801fd488], rbx
cmova rax, qword [0x1801fd470]
mov qword [0x1801fd480], r12
mov byte [rax], r12b
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp - 0x68], r12
xor r8d, r8d
lea rdx, [rbp - 0x68]
lea rcx, str.Show_dir
call fcn.180058560
test al, al
je 0x18007f68b
movzx r8d, byte [0x1801fd330]
mov edx, 1
lea rcx, [rbp + 0x5a8]
call fcn.18007a3e0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp + 0x5b8]
sub rax, rsi
cmp rax, 0x12
jb 0x180080fca
lea r12, [rbp + 0x5a8]
mov r14, qword [rbp + 0x5a8]
mov r13, qword [rbp + 0x5c0]
cmp r13, 0xf
cmova r12, r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x548], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x558], xmm1
lea r15, [rsi + 0x12]
mov rdi, rbx
lea rbx, [rbp + 0x548]
cmp r15, rdi
jbe 0x18007f4f2
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x18007f4b1
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a9aac
test rax, rax
je 0x18007f5a0
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18007f4eb
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18007f4da
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fb2
jmp 0x18007f492
test rcx, rcx
je 0x18007f4e9
call fcn.1800a9aac
mov rbx, rax
jmp 0x18007f4eb
xor ebx, ebx
mov qword [rbp + 0x548], rbx
mov qword [rbp + 0x558], r15
mov qword [rbp + 0x560], rdi
mov r8, rsi
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_]
movups xmmword [rbx + rsi], xmm0
movzx eax, word [0x1800bbe38]
mov word [rbx + rsi + 0x10], ax
mov byte [rbx + r15], 0
mov esi, 0x4000000
lea r8, [rbp + 0x548]
cmp qword [rbp + 0x560], 0xf
cmova r8, qword [rbp + 0x548]
mov dword [rsp + 0x28], 1
xor r12d, r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x560]
cmp rdx, 0xf
jbe 0x18007f5ac
inc rdx
mov rcx, qword [rbp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007f5a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f5a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a95ac
movdqa xmm0, xmmword [0x1800bf5f0]
movdqu xmmword [rbp + 0x558], xmm0
mov byte [rbp + 0x548], r12b
cmp r13, 0xf
jbe 0x18007f5fd
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18007f5f5
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f5f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800a95ac
mov r15d, 0x10
mov r13, 0xffffffffffffffff
mov r14d, dword [0x1801fe46c]
mov qword [rbp - 0x60], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, str.config
xor edx, edx
lea rcx, str.configsave
call fcn.180061730
mov rbx, qword [0x1801fe4c0]
mov rdx, qword [rbx + 0x4040]
mov r9, qword [rdx + 0x1c0]
test r9, r9
jne 0x18007f691
cmp qword [rbx + 0x4e50], r9
jne 0x18007f691
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
add r8, 0x268
jmp 0x18007f6c2
mov esi, dword [rsp + 0x40]
jmp 0x18007f611
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
test r9, r9
jne 0x18007f6bb
cmp qword [rbx + 0x4e50], r9
jne 0x18007f6bb
add r8, 0x268
jmp 0x18007f6c2
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x54], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007f728
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x58]
mov edx, edi
lea rcx, str.cfgChild
call fcn.180027d30
test al, al
je 0x18007ffed
mov ecx, r14d
mov rax, qword gs:[0x58]
mov edx, r15d
mov rax, qword [rax + rcx*8]
lea r15, [0x1801ff090]
mov eax, dword [rdx + rax]
cmp dword [0x1801ff0d4], eax
jle 0x18007f7b5
lea rcx, [0x1801ff0d4]
call fcn.1800a965c
cmp dword [0x1801ff0d4], 0xffffffff
jne 0x18007f7b5
movzx r8d, byte [0x1801fd330]
mov edx, 1
mov rcx, r15
call fcn.18007a3e0
lea rcx, [0x1800b05f0]
call fcn.1800a9a2c
nop
lea rcx, [0x1801ff0d4]
call fcn.1800a95f0
mov r14, qword [0x1801ff0a0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x11
jb 0x180080fd0
cmp qword [0x1801ff0a8], 0xf
cmova r15, qword [0x1801ff090]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea r12, [r14 + 0x11]
mov edi, 0xf
lea rbx, [rbp - 0x28]
cmp r12, rdi
jbe 0x18007f888
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x18007f843
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a9aac
test rax, rax
je 0x18007f86c
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18007f884
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18007f873
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fb8
jmp 0x18007f828
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18007f882
call fcn.1800a9aac
mov rbx, rax
jmp 0x18007f884
xor ebx, ebx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], rdi
mov r8, r14
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48]
movups xmmword [rbx + r14], xmm0
movzx eax, byte [0x1800bb838]
mov byte [rbx + r14 + 0x10], al
mov byte [rbx + r12], 0
bts esi, 0x1b
mov rdi, qword [rbp - 0x18]
lea rbx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rbx, qword [rbp - 0x28]
call fcn.1800aa6c8
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], rdi
lea r8, [rbp + 0x200]
mov edx, eax
lea rcx, [rbp + 0x1b0]
call fcn.1800782c0
or esi, 0x30000000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x460]
call fcn.18007d330
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 7
jbe 0x18007f960
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007f95b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f95b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a95ac
movdqa xmm0, xmmword [0x1800bf5d0]
movdqu xmmword [rbp + 0x1c0], xmm0
xor r12d, r12d
mov word [rbp + 0x1b0], r12w
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18007f9b9
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007f9b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f9b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a95ac
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
mov rbx, qword [rbp + 0x468]
test rbx, rbx
je 0x18007f9de
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x468]
mov esi, dword [rsp + 0x40]
movaps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x510], xmm0
test rbx, rbx
je 0x18007fa01
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x468]
mov esi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5f8], xmm1
test rbx, rbx
je 0x18007fa47
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007fa3c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007fa3c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x468]
mov rdi, qword [rbp + 0x510]
test rdi, rdi
je 0x18007ff67
lea r15, str..json
nop
lea rdx, [rbp + 0x170]
mov rcx, rdi
call fcn.18007cd50
mov rax, qword [rbp + 0x170]
mov edx, dword [rbp + 0x178]
test edx, edx
je 0x18007fa8f
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x180080fd6
cmp eax, 2
jne 0x18007fbe4
call fcn.1800aa6c8
mov qword [rbp + 0x1f0], r15
mov qword [rbp + 0x1f8], 5
lea r8, [rbp + 0x1f0]
mov edx, eax
lea rcx, [rbp + 0x190]
call fcn.1800782c0
or esi, 0x60000
or esi, 1
mov dword [rsp + 0x40], esi
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007fae0
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18007c350
cmp rax, r11
je 0x18007fb3b
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007fb0f
cmp cx, 0x2f
jne 0x18007fb18
add rax, 2
cmp rax, r11
jne 0x18007fb00
cmp rax, r11
je 0x18007fb3b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18007fb3b
cmp cx, 0x2f
je 0x18007fb3b
mov r10, rdx
cmp rax, rdx
jne 0x18007fb20
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0x100]
call fcn.180081760
or esi, 0x1c000
or esi, 2
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x100]
call fcn.18007c9f0
or esi, 4
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rcx, qword [rbp + 0x190]
mov qword [rbp + 0x210], rcx
mov rcx, qword [rbp + 0x1a0]
mov qword [rbp + 0x218], rcx
movaps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x350], xmm0
lea rdx, [rbp + 0x350]
mov rcx, rax
call fcn.18007c7e0
test eax, eax
jne 0x18007fbe4
mov bl, 1
jmp 0x18007fbe6
xor bl, bl
test sil, 4
je 0x18007fc53
and esi, 0xfffffffb
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 7
jbe 0x18007fc39
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fc34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080001
call fcn.1800a95ac
mov qword [rbp + 0x2c0], r12
mov qword [rbp + 0x2c8], 7
mov word [rbp + 0x2b0], r12w
test sil, 2
je 0x18007fcc0
and esi, 0xfffffffd
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x18007fca6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fca1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080008
call fcn.1800a95ac
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], 7
mov word [rbp + 0x100], r12w
test sil, 1
je 0x18007fd13
and esi, 0xfffffffe
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x18007fd13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fd0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008000f
call fcn.1800a95ac
test bl, bl
je 0x18007ff44
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007fd2a
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18007c350
cmp rax, r11
je 0x18007fd7b
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007fd51
cmp cx, 0x2f
jne 0x18007fd5a
add rax, 2
cmp rax, r11
jne 0x18007fd42
cmp rax, r11
je 0x18007fd7b
nop
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18007fd7b
cmp cx, 0x2f
je 0x18007fd7b
mov r10, rdx
cmp rax, rdx
jne 0x18007fd60
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0xe0]
call fcn.180081760
or esi, 0x380000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0xe0]
call fcn.18007c6f0
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x18007fe0f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fe0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080016
call fcn.1800a95ac
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], r12w
lea r14, [0x1801fd470]
mov rdx, r14
cmp qword [0x1801fd488], 0xf
cmova rdx, qword [0x1801fd470]
lea rcx, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0xf
seta dil
mov rbx, qword [rbp + 0x588]
cmova rcx, rbx
mov r8, qword [rbp + 0x598]
cmp r8, qword [0x1801fd480]
jne 0x18007fe7e
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18007fe7e
mov dl, 1
jmp 0x18007fe80
xor dl, dl
mov qword [rbp - 8], 0
lea rcx, [rbp + 0x588]
test dil, dil
cmovne rcx, rbx
lea r9, [rbp - 8]
call fcn.18006ace0
test al, al
je 0x18007ff03
mov rdi, qword [rbp + 0x598]
lea r9, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0xf
cmova r9, qword [rbp + 0x588]
mov rax, qword [0x1801fd488]
cmp rdi, rax
ja 0x18007fef7
mov rbx, r14
cmp rax, 0xf
cmova rbx, qword [0x1801fd470]
mov qword [0x1801fd480], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x18007ff03
mov rdx, rdi
mov rcx, r14
call fcn.1800818a0
nop
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 0xf
jbe 0x18007ff44
inc rdx
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007ff3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008001d
call fcn.1800a95ac
lea rcx, [rbp + 0x510]
call fcn.18007d490
mov rdi, qword [rbp + 0x510]
test rdi, rdi
jne 0x18007fa60
mov rbx, qword [rbp + 0x468]
mov rcx, qword [rbp + 0x518]
test rcx, rcx
je 0x18007ffb4
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18007ffa9
mov rbx, qword [rbp + 0x518]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007ffa9
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x468]
test rbx, rbx
je 0x18007ffe8
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007ffe4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007ffe4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
call fcn.180028100
call fcn.180028100
mov r14d, dword [0x1801fe46c]
mov r15d, 0x10
jmp 0x180080028
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov esi, dword [rsp + 0x40]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov rbx, qword [0x1801fe4c0]
mov rdx, qword [rbx + 0x4040]
mov r9, qword [rdx + 0x1c0]
test r9, r9
jne 0x180080072
cmp qword [rbx + 0x4e50], r9
jne 0x180080072
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
add r8, 0x268
jmp 0x1800800a3
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
test r9, r9
jne 0x18008009c
cmp qword [rbx + 0x4e50], r9
jne 0x18008009c
add r8, 0x268
jmp 0x1800800a3
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rdx + 0x118]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.styleChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18008010b
lea r8, str.styleChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rsp + 0x58]
mov edx, edi
lea rcx, str.styleChild
call fcn.180027d30
test al, al
je 0x180080f3a
mov edx, r14d
mov rax, qword gs:[0x58]
mov ecx, r15d
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1801ff088], ecx
jle 0x18008017c
lea rcx, [0x1801ff088]
call fcn.1800a965c
cmp dword [0x1801ff088], 0xffffffff
jne 0x18008017c
lea rcx, [0x1800b0580]
call fcn.1800a9a2c
lea rcx, [0x1801ff088]
call fcn.1800a95f0
mov qword [rsp + 0x60], 0
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, str.Import_theme
call fcn.180058560
lea r15, [0x1801fd348]
test al, al
je 0x18008021f
mov rdx, r15
lea rcx, [rbp + 0x3c0]
call fcn.18007a4f0
mov rcx, rax
call fcn.18008cd60
lea rbx, [0x1801fd5f8]
cmp rbx, r15
je 0x18008021f
mov rdi, qword [0x1801fd358]
mov r9, r15
cmp qword [0x1801fd360], 0xf
cmova r9, qword [0x1801fd348]
mov rax, qword [0x1801fd610]
cmp rdi, rax
ja 0x180080214
cmp rax, 0xf
cmova rbx, qword [0x1801fd5f8]
mov qword [0x1801fd608], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18008021f
mov rdx, rdi
mov rcx, rbx
call fcn.1800818a0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rsp + 0x68], 0
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, str.Export_theme
call fcn.180058560
lea rbx, str.theme
test al, al
je 0x180080295
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r12
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x180080270
mov rdx, rbx
lea rcx, [rbp + 0x250]
call fcn.180078f40
lea rcx, [rbp + 0x250]
call fcn.180089660
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rsp + 0x70], 0
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, str.Delete_theme
call fcn.180058560
test al, al
je 0x180080305
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2a8], r12
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1800802e0
mov rdx, rbx
lea rcx, [rbp + 0x290]
call fcn.180078f40
lea rcx, [rbp + 0x290]
call fcn.180089660
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rsp + 0x78], 0
xor r8d, r8d
lea rdx, [rsp + 0x78]
lea rcx, str.Show_dir
call fcn.180058560
test al, al
je 0x180080563
movzx r8d, byte [0x1801fd330]
mov edx, 1
lea rcx, [rbp + 0x5c8]
call fcn.18007a3e0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0x5d8]
sub rax, r15
cmp rax, 0x18
jb 0x180080fe7
lea rax, [rbp + 0x5c8]
mov r14, qword [rbp + 0x5c8]
mov r13, qword [rbp + 0x5e0]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x528], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x538], xmm1
lea r12, [r15 + 0x18]
mov edi, 0xf
lea rbx, [rbp + 0x528]
cmp r12, rdi
jbe 0x180080447
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x180080401
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a9aac
test rax, rax
je 0x1800804f8
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0x40]
jmp 0x180080440
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18008042a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fbe
jmp 0x1800803dd
test rcx, rcx
je 0x18008043e
call fcn.1800a9aac
mov rbx, rax
mov rax, qword [rsp + 0x40]
jmp 0x180080440
xor ebx, ebx
mov qword [rbp + 0x528], rbx
mov qword [rbp + 0x538], r12
mov qword [rbp + 0x540], rdi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_themes]
movups xmmword [rbx + r15], xmm0
movsd xmm0, qword [0x1800bb850]
movsd qword [rbx + r15 + 0x10], xmm0
mov byte [rbx + r12], 0
bts esi, 0x19
lea r8, [rbp + 0x528]
cmp qword [rbp + 0x540], 0xf
cmova r8, qword [rbp + 0x528]
mov dword [rsp + 0x28], 1
xor r12d, r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x540]
cmp rdx, 0xf
jbe 0x180080504
inc rdx
mov rcx, qword [rbp + 0x528]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800804ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800804ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a95ac
movdqa xmm0, xmmword [0x1800bf5f0]
movdqu xmmword [rbp + 0x538], xmm0
mov byte [rbp + 0x528], r12b
cmp r13, 0xf
jbe 0x180080555
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18008054d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008054d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800a95ac
lea rbx, str.theme
mov r14d, dword [0x1801fe46c]
mov qword [rbp - 0x80], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov r8, rbx
xor edx, edx
lea rcx, str.configsave
call fcn.180061730
mov rbx, qword [0x1801fe4c0]
mov rcx, qword [rbx + 0x4040]
mov r9, qword [rcx + 0x1c0]
test r9, r9
jne 0x1800805d9
cmp qword [rbx + 0x4e50], r9
jne 0x1800805d9
movss xmm1, dword [rcx + 0x26c]
subss xmm1, dword [rcx + 0x11c]
mov r8, rcx
add r8, 0x268
jmp 0x18008060a
movss xmm1, dword [rcx + 0x23c]
subss xmm1, dword [rcx + 0x11c]
mov r8, rcx
test r9, r9
jne 0x180080603
cmp qword [rbx + 0x4e50], r9
jne 0x180080603
add r8, 0x268
jmp 0x18008060a
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rcx + 0x118]
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x74], xmm1
mov byte [rcx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.18001fa20
mov edi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4094], eax
jne 0x180080671
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x78]
mov edx, edi
lea rcx, str.cfgChild
call fcn.180027d30
test al, al
je 0x180080f35
mov ecx, r14d
mov rax, qword gs:[0x58]
mov edx, 0x10
mov rax, qword [rax + rcx*8]
lea r14, [0x1801ff0b0]
mov eax, dword [rdx + rax]
cmp dword [0x1801ff0d0], eax
jle 0x180080700
lea rcx, [0x1801ff0d0]
call fcn.1800a965c
cmp dword [0x1801ff0d0], 0xffffffff
jne 0x180080700
movzx r8d, byte [0x1801fd330]
mov edx, 1
mov rcx, r14
call fcn.18007a3e0
lea rcx, [0x1800b0510]
call fcn.1800a9a2c
nop
lea rcx, [0x1801ff0d0]
call fcn.1800a95f0
mov rdi, qword [0x1801ff0c0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, 0x18
jb 0x180080fed
cmp qword [0x1801ff0c8], 0xf
cmova r14, qword [0x1801ff0b0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea r15, [rdi + 0x18]
lea rbx, [rbp - 0x50]
cmp r15, 0xf
jbe 0x1800807d7
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x18008078c
mov qword [rsp + 0x48], rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a9aac
test rax, rax
je 0x1800807ba
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800807d3
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov qword [rsp + 0x48], rbx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800807c1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fc4
jmp 0x180080771
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1800807d0
call fcn.1800a9aac
mov rbx, rax
jmp 0x1800807d3
mov rbx, r12
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x40], r15
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x38], rax
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_themes]
movups xmmword [rbx + rdi], xmm0
movsd xmm0, qword [0x1800bb850]
movsd qword [rbx + rdi + 0x10], xmm0
mov byte [rbx + r15], 0
bts esi, 0x18
mov rdi, qword [rbp - 0x40]
lea rbx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rbx, qword [rbp - 0x50]
call fcn.1800aa6c8
mov qword [rbp + 0x220], rbx
mov qword [rbp + 0x228], rdi
lea r8, [rbp + 0x220]
mov edx, eax
lea rcx, [rbp + 0x1d0]
call fcn.1800782c0
or esi, 0xc00000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x470]
call fcn.18007d330
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 7
jbe 0x1800808b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800808b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800808b0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a95ac
movdqa xmm0, xmmword [0x1800bf5d0]
movdqu xmmword [rbp + 0x1e0], xmm0
mov word [rbp + 0x1d0], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18008090b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080906
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180080906
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a95ac
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov rbx, qword [rbp + 0x478]
test rbx, rbx
je 0x180080930
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x478]
mov esi, dword [rsp + 0x40]
movaps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x4f0], xmm0
test rbx, rbx
je 0x180080953
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x478]
mov esi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5e8], xmm1
mov r14, 0xffffffffffffffff
test rbx, rbx
je 0x1800809a0
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180080995
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180080995
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x478]
mov rdi, qword [rbp + 0x4f0]
test rdi, rdi
je 0x180080eb8
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.18007cd50
mov rax, qword [rbp + 0x180]
mov edx, dword [rbp + 0x188]
test edx, edx
je 0x1800809df
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x180080fa1
cmp eax, 2
jne 0x180080b34
call fcn.1800aa6c8
lea rcx, str..json
mov qword [rbp + 0x230], rcx
mov qword [rbp + 0x238], 5
lea r8, [rbp + 0x230]
mov edx, eax
lea rcx, [rbp + 0x150]
call fcn.1800782c0
or esi, 0x3000
or esi, 8
mov dword [rsp + 0x40], esi
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x180080a37
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18007c350
cmp rax, r11
je 0x180080a8b
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180080a5f
cmp cx, 0x2f
jne 0x180080a68
add rax, 2
cmp rax, r11
jne 0x180080a50
cmp rax, r11
je 0x180080a8b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x180080a8b
cmp cx, 0x2f
je 0x180080a8b
mov r10, rdx
cmp rax, rdx
jne 0x180080a70
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0xc0]
call fcn.180081760
or esi, 0x1c0
or esi, 0x10
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0xc0]
call fcn.18007c9f0
or esi, 0x20
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0x150]
cmp qword [rbp + 0x168], 7
cmova rcx, qword [rbp + 0x150]
mov qword [rbp + 0x240], rcx
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x248], rcx
movaps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x340], xmm0
lea rdx, [rbp + 0x340]
mov rcx, rax
call fcn.18007c7e0
test eax, eax
jne 0x180080b34
mov bl, 1
jmp 0x180080b36
xor bl, bl
test sil, 0x20
je 0x180080ba3
and esi, 0xffffffdf
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x288]
cmp rdx, 7
jbe 0x180080b89
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080b84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f7e
call fcn.1800a95ac
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], 7
mov word [rbp + 0x270], r12w
test sil, 0x10
je 0x180080c10
and esi, 0xffffffef
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x180080bf6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080bf1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f85
call fcn.1800a95ac
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r12w
test sil, 8
je 0x180080c63
and esi, 0xfffffff7
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x180080c63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080c5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f8c
call fcn.1800a95ac
test bl, bl
je 0x180080e95
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x180080c7a
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea rdx, [rcx + rax*2]
mov r10, rdx
call fcn.18007c350
cmp rax, rdx
je 0x180080ccc
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180080c9f
cmp cx, 0x2f
jne 0x180080ca8
add rax, 2
cmp rax, rdx
jne 0x180080c90
cmp rax, rdx
je 0x180080ccc
nop dword [rax]
lea r8, [r10 - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x180080ccc
cmp cx, 0x2f
je 0x180080ccc
mov r10, r8
cmp rax, r8
jne 0x180080cb0
sub rdx, r10
sar rdx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], r12
mov r8, rdx
mov rdx, r10
lea rcx, [rbp + 0x120]
call fcn.180081760
or esi, 0xe00
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x568]
lea rcx, [rbp + 0x120]
call fcn.18007c6f0
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 7
jbe 0x180080d60
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080d5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f93
call fcn.1800a95ac
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r12w
lea r15, [0x1801fd348]
mov rdx, r15
cmp qword [0x1801fd360], 0xf
cmova rdx, qword [0x1801fd348]
lea rcx, [rbp + 0x568]
cmp qword [rbp + 0x580], 0xf
seta dil
mov rbx, qword [rbp + 0x568]
cmova rcx, rbx
mov r8, qword [rbp + 0x578]
cmp r8, qword [0x1801fd358]
jne 0x180080dcf
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180080dcf
mov dl, 1
jmp 0x180080dd1
xor dl, dl
mov qword [rbp - 0x70], 0
lea rcx, [rbp + 0x568]
test dil, dil
cmovne rcx, rbx
lea r9, [rbp - 0x70]
call fcn.18006ace0
test al, al
je 0x180080e54
mov rdi, qword [rbp + 0x578]
lea r9, [rbp + 0x568]
cmp qword [rbp + 0x580], 0xf
cmova r9, qword [rbp + 0x568]
mov rax, qword [0x1801fd360]
cmp rdi, rax
ja 0x180080e48
mov rbx, r15
cmp rax, 0xf
cmova rbx, qword [0x1801fd348]
mov qword [0x1801fd358], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x180080e54
mov rdx, rdi
mov rcx, r15
call fcn.1800818a0
nop
mov rdx, qword [rbp + 0x580]
cmp rdx, 0xf
jbe 0x180080e95
inc rdx
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080e90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f9a
call fcn.1800a95ac
lea rcx, [rbp + 0x4f0]
call fcn.18007d490
mov rdi, qword [rbp + 0x4f0]
test rdi, rdi
jne 0x1800809b0
mov rbx, qword [rbp + 0x478]
mov rcx, qword [rbp + 0x4f8]
test rcx, rcx
je 0x180080f01
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x180080efa
mov rbx, qword [rbp + 0x4f8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180080efa
mov rcx, qword [rbp + 0x4f8]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x478]
test rbx, rbx
je 0x180080f30
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180080f30
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x180080f30
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
call fcn.180028100
call fcn.180028100
call fcn.180028100
call fcn.18002df90
call fcn.18002d6b0
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.1800a9410
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.180078d30
nop
call fcn.180077a80
nop
call fcn.180077a80
nop
call fcn.180077a80
nop
call fcn.180077a80
nop
call fcn.180077b40
nop
call fcn.180077b40
nop
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.180078d30
nop
call fcn.180077b40
nop
call fcn.180077b40
int3