Function at 0x18007da60
Capabilities:
Create process on windows
Self delete

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x668]
sub rsp, 0x740
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1800cf040]
xor rax, rsp
mov qword [rbp + 0x620], rax
xor r12d, r12d
mov dword [rsp + 0x40], r12d
cmp byte [0x1801fd90d], r12b
je 0x180080f39
cmp byte [0x1801fd903], r12b
je 0x18007dac0
xor ecx, ecx
call fcn.18003cb40
mov rcx, qword [0x1801fd7f8]
call fcn.18002def0
mov rax, qword [0x1801fd4c0]
or dword [rax + 0x4a50], 2
mov dword [rax + 0x4a70], 0x44480000
mov dword [rax + 0x4a74], 0x43e10000
mov dword [rax + 0x4a58], 4
movabs rax, 0x8ef04e132982e6d2
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x140], rax
movabs rax, 0xe6284d40c4c25e7d
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x148], rax
movabs rax, 0xe091267d6ca2b185
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x610], rax
movabs rax, 0xe6284d40c4b03b1e
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rbp + 0x618], rax
movdqa xmm0, xmmword [rbp + 0x610]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x140], xmm0
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0x140]
call fcn.18002b110
mov rbx, qword [0x1801fd4c0]
mov rdx, qword [rbx + 0x4040]
cmp qword [rdx + 0x1c0], r12
jne 0x18007dbb4
cmp qword [rbx + 0x4e50], r12
lea rcx, [rdx + 0x26c]
je 0x18007dbbb
lea rcx, [rdx + 0x23c]
movss xmm1, dword [rcx]
subss xmm1, dword [rdx + 0x11c]
mov dword [rbp], 0x43160000
movss dword [rbp + 4], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Sidebar
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007dc22
lea r8, str.Sidebar
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp]
mov edx, edi
lea rcx, str.Sidebar
call fcn.180027d30
test al, al
je 0x18007dd17
mov ebx, r12d
mov rax, qword [0x1801fd530]
mov rdx, qword [0x1801fd528]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18007dd12
mov qword [rbp + 8], rbx
mov rsi, r12
lea rdi, [0x1800b70a0]
lea r14, [0x1800b70a8]
nop dword [rax]
cmp ebx, dword [0x1801fd6dc]
sete al
lea rcx, [rdx + rsi]
cmp qword [rcx + 0x18], 0xf
jbe 0x18007dc97
mov rcx, qword [rcx]
lea r9, [rbp + 8]
movzx edx, al
call fcn.18006ace0
test al, al
je 0x18007dce7
mov dword [0x1801fd6dc], ebx
mov edx, r12d
mov rcx, r14
mov rax, qword [rcx - 8]
mov byte [rax], r12b
mov rax, qword [rcx]
mov byte [rax], r12b
mov rax, qword [rcx + 8]
mov byte [rax], r12b
mov rax, qword [rcx + 0x10]
mov byte [rax], r12b
mov rax, qword [rcx + 0x18]
mov byte [rax], r12b
add edx, 5
lea rcx, [rcx + 0x28]
cmp edx, 5
jb 0x18007dcb3
mov rax, qword [rdi]
mov byte [rax], 1
inc ebx
add rsi, 0x20
add rdi, 8
mov rcx, qword [0x1801fd530]
mov rdx, qword [0x1801fd528]
sub rcx, rdx
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x18007dc80
call fcn.180028100
movss xmm7, dword [0x1800be358]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov r13, 0xffffffffffffffff
mov rax, qword [0x1800b70a0]
cmp byte [rax], r12b
je 0x18007e074
mov qword [rbp + 0x10], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Player
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007dda1
lea r8, str.Player
lea edx, [r13 + 0xc]
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x10]
mov edx, edi
lea rcx, str.Player
call fcn.180027d30
mov qword [rbp + 0x18], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.PlayerChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007de1c
lea r8, str.PlayerChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x18]
mov edx, edi
lea rcx, str.PlayerChild
call fcn.180027d30
test al, al
je 0x18007f07c
lea rdx, [0x1801fd909]
lea rcx, str.Godmode
call fcn.18005a040
lea rdx, [0x1801fd90c]
lea rcx, str.Multihit
call fcn.18005a040
mov dword [rbp + 0x500], 0x64
mov dword [rbp + 0x4c8], 1
lea rbx, [0x1800b2170]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x500]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4c8]
lea r8, [0x1801fc48c]
mov edx, 4
lea rcx, str.Hits
call fcn.18005e140
lea rdx, [0x1801fd908]
lea rcx, str.No_cooldown
call fcn.18005a040
call fcn.1800a00b0
lea rdx, [0x1801fd90b]
lea rcx, str.Force_critical
call fcn.18005a040
call fcn.1800a00b0
lea rdx, [0x1801fd905]
lea rcx, str.No_fall
call fcn.18005a040
call fcn.1800a00b0
lea rdx, [0x1801fd907]
lea rcx, str.Max_resonance_chain
call fcn.18005a040
call fcn.1800a00b0
lea rdx, [0x1801fd904]
lea rcx, str.Spider
call fcn.18005a040
lea rdx, [0x1801fd90a]
lea rcx, str.Noclip
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x20], r12
lea rdx, [rbp + 0x20]
lea rcx, [0x1801fd924]
call fcn.1800a0220
mov dword [rbp + 0x480], 0x3e8
mov dword [rbp + 0x488], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x480]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x488]
lea r8, [0x1801fc494]
mov edx, 4
lea rcx, str.Fly_speed
call fcn.18005e140
lea rdx, [0x1801fd906]
lea rcx, str.Player_speed
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x28], r12
lea rdx, [rbp + 0x28]
lea rcx, [0x1801fd928]
call fcn.1800a0220
mov dword [rbp + 0x490], 0x3e8
mov dword [rbp + 0x498], 1
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x498]
lea r8, [0x1801fc488]
mov edx, 4
lea rcx, str.Speed
call fcn.18005e140
lea rdx, [0x1801fc484]
lea rcx, str.Player_scale
call fcn.18005a040
mov dword [rbp + 0x4a0], 0x41a00000
mov dword [rbp + 0x4e0], 0x3dcccccd
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4e0]
lea r8, [0x1801fc490]
mov edx, 8
lea rcx, str.Scale
call fcn.18005e140
jmp 0x18007f077
mov rax, qword [0x1800b70a8]
cmp byte [rax], r12b
je 0x18007e232
mov qword [rbp + 0x30], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.World
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e0e5
lea r8, str.World
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x30]
mov edx, edi
lea rcx, str.World
call fcn.180027d30
mov qword [rbp + 0x38], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.WorldChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e160
lea r8, str.WorldChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x38]
mov edx, edi
lea rcx, str.WorldChild
call fcn.180027d30
test al, al
je 0x18007f07c
lea rdx, [0x1801fd901]
lea rcx, str.Dumb_enemies
call fcn.18005a040
lea rdx, [0x1801fd902]
lea rcx, str.Speedhack
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x40], r12
lea rdx, [rbp + 0x40]
lea rcx, [0x1801fd91c]
call fcn.1800a0220
mov dword [rbp + 0x520], 0x41200000
mov dword [rbp + 0x4d8], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x520]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4d8]
lea r8, [0x1801fc480]
mov edx, 8
lea rcx, str.Speed
call fcn.18005e140
lea rdx, [0x1801fd900]
lea rcx, str.Skip_cooking_animation
call fcn.18005a040
call fcn.1800a00b0
jmp 0x18007f077
mov rax, qword [0x1800b70b0]
cmp byte [rax], r12b
je 0x18007ec66
mov qword [rbp + 0x48], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Visuals
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e2a3
lea r8, str.Visuals
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x48]
mov edx, edi
lea rcx, str.Visuals
call fcn.180027d30
mov qword [rbp - 0x30], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.VisualsChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007e31e
lea r8, str.VisualsChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x30]
mov edx, edi
lea rcx, str.VisualsChild
call fcn.180027d30
test al, al
je 0x18007f07c
lea rdx, [0x1801fd90e]
lea rcx, [0x1800babe0]
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x50], r12
lea rdx, [rbp + 0x50]
lea rcx, [0x1801fd920]
call fcn.1800a0220
lea rdx, [0x1801fc49d]
lea rcx, [0x1800b79a8]
call fcn.18005a040
lea rdx, [0x1801fd90f]
lea rcx, str.Tracers
call fcn.18005a040
lea rdx, [0x1801fd915]
lea rcx, str.Distance
call fcn.18005a040
mov dword [rbp + 0x4d0], 0x453b8000
mov dword [rbp + 0x4a8], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4d0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4a8]
lea r8, [0x1801fc498]
mov edx, 8
lea rcx, str.Distance_limit
call fcn.18005e140
mov dword [rsp + 0x20], 2
lea r9, str.Threaded
lea r8, [0x18005cb10]
lea rdx, [0x1801fd910]
lea rcx, str.Render_method
call fcn.18005cb60
mov qword [rbp + 0x58], r12
lea rcx, [rbp + 0x58]
call fcn.18005af10
mov rax, qword [0x1801fd4c0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007e473
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007e466
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800be22c]
call fcn.18005b0a0
mov qword [rbp + 0x60], r12
lea rcx, [rbp + 0x60]
call fcn.18005af10
lea rdx, [0x1801fc49c]
lea rcx, str.Filter_Names
call fcn.18005a040
mov qword [rbp + 0x68], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x1801fd800]
xor edx, edx
lea rcx, str.search
call fcn.180061730
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e9d9
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Monsters
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e534
lea r8, str.Monsters
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Monsters
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e9d9
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
lea rdx, [0x1801fd914]
lea rcx, str.Monster
call fcn.18005a040
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e60e
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Aero
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e5d7
lea r8, str.Aero
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Aero
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e60e
lea rdx, [0x1801fe018]
lea rcx, [rbp + 0x360]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e6af
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Electro
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e678
lea r8, str.Electro
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Electro
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e6af
lea rdx, [0x1801fe058]
lea rcx, [rbp + 0x370]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e750
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Fusion
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e719
lea r8, str.Fusion
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Fusion
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e750
lea rdx, [0x1801fe068]
lea rcx, [rbp + 0x380]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e7f1
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Glacio
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e7ba
lea r8, str.Glacio
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Glacio
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e7f1
lea rdx, [0x1801fdff8]
lea rcx, [rbp + 0x390]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e892
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Havoc
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e85b
lea r8, str.Havoc
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Havoc
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e892
lea rdx, [0x1801fe008]
lea rcx, [rbp + 0x3a0]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e933
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Spectro
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e8fc
lea r8, str.Spectro
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Spectro
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e933
lea rdx, [0x1801fdfe8]
lea rcx, [rbp + 0x3b0]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007e9d4
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007e99d
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007e9d4
lea rdx, [0x1801fe048]
lea rcx, [rbp + 0x2f0]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007ea7a
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ascension_Materials
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007ea43
lea r8, str.Ascension_Materials
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Ascension_Materials
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007ea7a
lea rdx, [0x1801fe038]
lea rcx, [rbp + 0x300]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007eb1b
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Ores
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007eae4
lea r8, str.Ores
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Ores
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007eb1b
lea rdx, [0x1801fdfd8]
lea rcx, [rbp + 0x310]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007ebbc
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Puzzles
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007eb85
lea r8, str.Puzzles
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Puzzles
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007ebbc
lea rdx, [0x1801fe028]
lea rcx, [rbp + 0x320]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
cmp byte [rbx + 0xcf], r12b
jne 0x18007f077
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Other
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007ec26
lea r8, str.Other
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
xor r9d, r9d
lea r8, str.Other
xor edx, edx
mov ecx, edi
call fcn.18006a380
test al, al
je 0x18007f077
lea rdx, [0x1801fdfb8]
lea rcx, [rbp + 0x330]
call fcn.180081060
mov rcx, rax
call fcn.18007d5e0
call fcn.18006ab60
jmp 0x18007f077
mov rax, qword [0x1800b70b8]
cmp byte [rax], r12b
je 0x18007f081
mov qword [rbp + 0x70], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Misc
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007ecd7
lea r8, str.Misc
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x70]
mov edx, edi
lea rcx, str.Misc
call fcn.180027d30
mov qword [rbp + 0x78], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.MiscChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007ed52
lea r8, str.MiscChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x78]
mov edx, edi
lea rcx, str.MiscChild
call fcn.180027d30
test al, al
je 0x18007f07c
lea rdx, [0x1801fc4a8]
lea rcx, str.Show_FPS
call fcn.18005a040
lea rdx, [0x1801fd917]
lea rcx, str.FPS_Unlocker
call fcn.18005a040
mov dword [rbp + 0x4c0], 0x168
mov dword [rbp + 0x4e8], 1
lea rbx, [0x1800b2170]
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4e8]
lea r8, [0x1801fc4a4]
mov edx, 4
lea rcx, str.set_fps
call fcn.18005e140
lea rdx, [0x1801fd916]
lea rcx, str.FOV_Changer
call fcn.18005a040
mov dword [rbp + 0x4b8], 0x43340000
mov dword [rbp + 0x4b0], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4b8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b0]
lea r8, [0x1801fc4a0]
mov edx, 8
lea rcx, str.fov_Slider
call fcn.18005e140
lea rdx, [0x1801fc4a9]
lea rcx, str.UID_Changer
call fcn.18005a040
call fcn.1800a00b0
lea rsi, [0x1801fc5b8]
mov rdi, rsi
cmp qword [0x1801fc5d0], 0xf
cmova rdi, qword [0x1801fc5b8]
mov qword [rbp + 0x80], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov r8, rdi
xor edx, edx
lea rcx, str.setUid
call fcn.180061730
mov rbx, r13
inc rbx
cmp byte [rdi + rbx], r12b
jne 0x18007eeb4
mov r14, qword [0x1801fc5d0]
mov rcx, rsi
mov r15, qword [0x1801fc5b8]
cmp r14, 0xf
cmova rcx, r15
mov r8, qword [0x1801fc5c8]
cmp r8, rbx
jne 0x18007eeee
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18007ef24
cmp rbx, r14
ja 0x18007ef16
cmp r14, 0xf
cmova rsi, r15
mov qword [0x1801fc5c8], rbx
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], r12b
jmp 0x18007ef24
mov r9, rdi
mov rdx, rbx
mov rcx, rsi
call fcn.180081890
lea rdx, [0x1801fd918]
lea rcx, str.Peeking
call fcn.18005a040
lea rdx, [0x1801fc4aa]
lea rcx, str.Disable_ACE
call fcn.18005a040
lea rdx, [0x1801fd919]
lea rcx, str.Disable_TpSafe
call fcn.18005a040
mov rax, qword [0x1801fd4c0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007efa1
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007ef94
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800be22c]
call fcn.18005b0a0
lea rdx, [0x1801fd90d]
lea rcx, str.Menu
call fcn.18005a040
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0x88], r12
lea rdx, [rbp + 0x88]
lea rcx, [0x1801fc4ac]
call fcn.1800a0220
lea rdx, [0x1801fd903]
lea rcx, str.Style_window
call fcn.18005a040
mov rax, qword [0x1801fd4c0]
mov r8, qword [rax + 0x4040]
cmp byte [r8 + 0xcf], r12b
jne 0x18007f030
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], r12
je 0x18007f023
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1800be22c]
call fcn.18005b0a0
mov qword [rbp + 0x90], r12
xor r8d, r8d
lea rdx, [rbp + 0x90]
lea rcx, str.Discord
call fcn.180058560
test al, al
je 0x18007f077
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__discord.gg_PKbutPa4wQ
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.180028100
call fcn.180028100
mov rax, qword [0x1800b70c0]
cmp byte [rax], r12b
je 0x180080f2f
mov qword [rbp + 0x98], r12
mov rcx, qword [0x1801fd4c0]
mov rax, qword [rcx + 0x4040]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Cfg
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007f0f5
lea r8, str.Cfg
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp + 0x98]
mov edx, edi
lea rcx, str.Cfg
call fcn.180027d30
test al, al
je 0x180080f2f
mov rbx, qword [0x1801fd4c0]
mov rcx, qword [rbx + 0x4040]
mov r9, qword [rcx + 0x1c0]
test r9, r9
jne 0x18007f15c
cmp qword [rbx + 0x4e50], r12
jne 0x18007f15c
movss xmm3, dword [rcx + 0x26c]
subss xmm3, dword [rcx + 0x11c]
mov r8, rcx
add r8, 0x268
jmp 0x18007f18d
movss xmm3, dword [rcx + 0x23c]
subss xmm3, dword [rcx + 0x11c]
mov r8, rcx
test r9, r9
jne 0x18007f186
cmp qword [rbx + 0x4e50], r12
jne 0x18007f186
add r8, 0x268
jmp 0x18007f18d
add r8, 0x238
movss xmm2, dword [r8]
subss xmm2, dword [rcx + 0x118]
mulss xmm2, dword [0x1800be1e4]
movss xmm1, dword [rbx + 0x3934]
mulss xmm1, dword [0x1800be1e4]
subss xmm2, xmm1
movss dword [rbp + 0xa0], xmm2
movss dword [rbp + 0xa4], xmm3
mov byte [rcx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.CfgChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x18007f215
lea r8, str.CfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rbp + 0xa0]
mov edx, edi
lea rcx, str.CfgChild
call fcn.180027d30
mov r15d, 0x10
mov ebx, 0xf
mov qword [rsp + 0x48], rbx
mov r14d, dword [0x1801fd46c]
test al, al
je 0x180080014
mov rax, qword gs:[0x58]
mov rax, qword [rax + r14*8]
mov ecx, dword [r15 + rax]
cmp dword [0x1801fe07c], ecx
jle 0x18007f29a
lea rcx, [0x1801fe07c]
call fcn.1800a89dc
cmp dword [0x1801fe07c], r13d
jne 0x18007f29a
lea rcx, [0x1800af900]
call fcn.1800a8dac
lea rcx, [0x1801fe07c]
call fcn.1800a8970
mov qword [rbp + 0xa8], r12
xor r8d, r8d
lea rdx, [rbp + 0xa8]
lea rcx, str.Import_config
call fcn.180058560
test al, al
je 0x18007f2d6
lea rdx, [0x1801fc460]
lea rcx, [rbp + 0x430]
call fcn.18007a4f0
mov rcx, rax
call fcn.1800877b0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0xb0], r12
xor r8d, r8d
lea rdx, [rbp + 0xb0]
lea rcx, str.Export_config
call fcn.180058560
lea rcx, str.config
test al, al
je 0x18007f348
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2e8], r12
mov r8, r13
inc r8
cmp byte [rcx + r8], r12b
jne 0x18007f324
mov rdx, rcx
lea rcx, [rbp + 0x2d0]
call fcn.180078f40
lea rcx, [rbp + 0x2d0]
call fcn.180084e60
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp + 0xb8], r12
xor r8d, r8d
lea rdx, [rbp + 0xb8]
lea rcx, str.Delete
call fcn.180058560
test al, al
je 0x18007f3af
lea rdx, [0x1801fc460]
lea rcx, [rbp + 0x410]
call fcn.18007a4f0
mov rcx, rax
call fcn.180089290
lea rax, [0x1801fc460]
cmp qword [0x1801fc478], rbx
cmova rax, qword [0x1801fc460]
mov qword [0x1801fc470], r12
mov byte [rax], r12b
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rbp - 0x68], r12
xor r8d, r8d
lea rdx, [rbp - 0x68]
lea rcx, str.Show_dir
call fcn.180058560
test al, al
je 0x18007f673
movzx r8d, byte [0x1801fc328]
mov edx, 1
lea rcx, [rbp + 0x5a8]
call fcn.18007a3e0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp + 0x5b8]
sub rax, rsi
cmp rax, 0x12
jb 0x180080fba
lea r12, [rbp + 0x5a8]
mov r14, qword [rbp + 0x5a8]
mov r13, qword [rbp + 0x5c0]
cmp r13, 0xf
cmova r12, r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x548], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x558], xmm1
lea r15, [rsi + 0x12]
mov rdi, rbx
lea rbx, [rbp + 0x548]
cmp r15, rdi
jbe 0x18007f4da
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x18007f499
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a8e2c
test rax, rax
je 0x18007f588
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18007f4d3
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18007f4c2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fa2
jmp 0x18007f47a
test rcx, rcx
je 0x18007f4d1
call fcn.1800a8e2c
mov rbx, rax
jmp 0x18007f4d3
xor ebx, ebx
mov qword [rbp + 0x548], rbx
mov qword [rbp + 0x558], r15
mov qword [rbp + 0x560], rdi
mov r8, rsi
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_]
movups xmmword [rbx + rsi], xmm0
movzx eax, word [0x1800bae00]
mov word [rbx + rsi + 0x10], ax
mov byte [rbx + r15], 0
mov esi, 0x20000000
lea r8, [rbp + 0x548]
cmp qword [rbp + 0x560], 0xf
cmova r8, qword [rbp + 0x548]
mov dword [rsp + 0x28], 1
xor r12d, r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x560]
cmp rdx, 0xf
jbe 0x18007f594
inc rdx
mov rcx, qword [rbp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007f58f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f58f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a892c
movdqa xmm0, xmmword [0x1800be3c0]
movdqu xmmword [rbp + 0x558], xmm0
mov byte [rbp + 0x548], r12b
cmp r13, 0xf
jbe 0x18007f5e5
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18007f5dd
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f5dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800a892c
mov r15d, 0x10
mov r13, 0xffffffffffffffff
mov r14d, dword [0x1801fd46c]
mov qword [rbp - 0x60], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, str.config
xor edx, edx
lea rcx, str.configsave
call fcn.180061730
mov rbx, qword [0x1801fd4c0]
mov rdx, qword [rbx + 0x4040]
mov r9, qword [rdx + 0x1c0]
test r9, r9
jne 0x18007f679
cmp qword [rbx + 0x4e50], r9
jne 0x18007f679
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
add r8, 0x268
jmp 0x18007f6aa
mov esi, dword [rsp + 0x40]
jmp 0x18007f5f9
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
test r9, r9
jne 0x18007f6a3
cmp qword [rbx + 0x4e50], r9
jne 0x18007f6a3
add r8, 0x268
jmp 0x18007f6aa
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rdx + 0x118]
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x54], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.18001fa20
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4094], eax
jne 0x18007f710
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x58]
mov edx, edi
lea rcx, str.cfgChild
call fcn.180027d30
test al, al
je 0x18007ffdd
mov ecx, r14d
mov rax, qword gs:[0x58]
mov edx, r15d
mov rax, qword [rax + rcx*8]
lea r15, [0x1801fe080]
mov eax, dword [rdx + rax]
cmp dword [0x1801fe0c4], eax
jle 0x18007f79d
lea rcx, [0x1801fe0c4]
call fcn.1800a89dc
cmp dword [0x1801fe0c4], 0xffffffff
jne 0x18007f79d
movzx r8d, byte [0x1801fc328]
mov edx, 1
mov rcx, r15
call fcn.18007a3e0
lea rcx, [0x1800af890]
call fcn.1800a8dac
nop
lea rcx, [0x1801fe0c4]
call fcn.1800a8970
mov r14, qword [0x1801fe090]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x11
jb 0x180080fc0
cmp qword [0x1801fe098], 0xf
cmova r15, qword [0x1801fe080]
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea r12, [r14 + 0x11]
mov edi, 0xf
lea rbx, [rbp - 0x28]
cmp r12, rdi
jbe 0x18007f870
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x18007f82b
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a8e2c
test rax, rax
je 0x18007f854
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x18007f86c
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18007f85b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fa8
jmp 0x18007f810
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x18007f86a
call fcn.1800a8e2c
mov rbx, rax
jmp 0x18007f86c
xor ebx, ebx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], rdi
mov r8, r14
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48]
movups xmmword [rbx + r14], xmm0
movzx eax, byte [0x1800ba818]
mov byte [rbx + r14 + 0x10], al
mov byte [rbx + r12], 0
bts esi, 0x1a
mov rdi, qword [rbp - 0x18]
lea rbx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rbx, qword [rbp - 0x28]
call fcn.1800a9a48
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], rdi
lea r8, [rbp + 0x200]
mov edx, eax
lea rcx, [rbp + 0x1b0]
call fcn.1800782c0
or esi, 0x18000000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x460]
call fcn.18007d330
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 7
jbe 0x18007f948
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007f943
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f943
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a892c
movdqa xmm0, xmmword [0x1800be3a0]
movdqu xmmword [rbp + 0x1c0], xmm0
xor r12d, r12d
mov word [rbp + 0x1b0], r12w
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18007f9a1
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007f99c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18007f99c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a892c
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
mov rbx, qword [rbp + 0x468]
test rbx, rbx
je 0x18007f9c6
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x468]
mov esi, dword [rsp + 0x40]
movaps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0x510], xmm0
test rbx, rbx
je 0x18007f9e9
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x468]
mov esi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5f8], xmm1
test rbx, rbx
je 0x18007fa2f
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007fa24
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007fa24
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x468]
mov rdi, qword [rbp + 0x510]
test rdi, rdi
je 0x18007ff57
lea r15, str..json
nop word [rax + rax]
lea rdx, [rbp + 0x170]
mov rcx, rdi
call fcn.18007cd50
mov rax, qword [rbp + 0x170]
mov edx, dword [rbp + 0x178]
test edx, edx
je 0x18007fa7f
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x180080fc6
cmp eax, 2
jne 0x18007fbd4
call fcn.1800a9a48
mov qword [rbp + 0x1f0], r15
mov qword [rbp + 0x1f8], 5
lea r8, [rbp + 0x1f0]
mov edx, eax
lea rcx, [rbp + 0x190]
call fcn.1800782c0
or esi, 0x60000
or esi, 1
mov dword [rsp + 0x40], esi
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007fad0
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18007c350
cmp rax, r11
je 0x18007fb2b
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007faff
cmp cx, 0x2f
jne 0x18007fb08
add rax, 2
cmp rax, r11
jne 0x18007faf0
cmp rax, r11
je 0x18007fb2b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18007fb2b
cmp cx, 0x2f
je 0x18007fb2b
mov r10, rdx
cmp rax, rdx
jne 0x18007fb10
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0x100]
call fcn.180081750
or esi, 0x1c000
or esi, 2
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x100]
call fcn.18007c9f0
or esi, 4
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rcx, qword [rbp + 0x190]
mov qword [rbp + 0x210], rcx
mov rcx, qword [rbp + 0x1a0]
mov qword [rbp + 0x218], rcx
movaps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x350], xmm0
lea rdx, [rbp + 0x350]
mov rcx, rax
call fcn.18007c7e0
test eax, eax
jne 0x18007fbd4
mov bl, 1
jmp 0x18007fbd6
xor bl, bl
test sil, 4
je 0x18007fc43
and esi, 0xfffffffb
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 7
jbe 0x18007fc29
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fc24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007fff1
call fcn.1800a892c
mov qword [rbp + 0x2c0], r12
mov qword [rbp + 0x2c8], 7
mov word [rbp + 0x2b0], r12w
test sil, 2
je 0x18007fcb0
and esi, 0xfffffffd
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x118]
cmp rdx, 7
jbe 0x18007fc96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fc91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007fff8
call fcn.1800a892c
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], 7
mov word [rbp + 0x100], r12w
test sil, 1
je 0x18007fd03
and esi, 0xfffffffe
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 7
jbe 0x18007fd03
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fcfe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007ffff
call fcn.1800a892c
test bl, bl
je 0x18007ff34
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18007fd1a
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18007c350
cmp rax, r11
je 0x18007fd6b
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x18007fd41
cmp cx, 0x2f
jne 0x18007fd4a
add rax, 2
cmp rax, r11
jne 0x18007fd32
cmp rax, r11
je 0x18007fd6b
nop
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x18007fd6b
cmp cx, 0x2f
je 0x18007fd6b
mov r10, rdx
cmp rax, rdx
jne 0x18007fd50
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0xe0]
call fcn.180081750
or esi, 0x380000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0xe0]
call fcn.18007c6f0
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 7
jbe 0x18007fdff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007fdfa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080006
call fcn.1800a892c
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], r12w
lea r14, [0x1801fc460]
mov rdx, r14
cmp qword [0x1801fc478], 0xf
cmova rdx, qword [0x1801fc460]
lea rcx, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0xf
seta dil
mov rbx, qword [rbp + 0x588]
cmova rcx, rbx
mov r8, qword [rbp + 0x598]
cmp r8, qword [0x1801fc470]
jne 0x18007fe6e
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x18007fe6e
mov dl, 1
jmp 0x18007fe70
xor dl, dl
mov qword [rbp - 8], 0
lea rcx, [rbp + 0x588]
test dil, dil
cmovne rcx, rbx
lea r9, [rbp - 8]
call fcn.18006ace0
test al, al
je 0x18007fef3
mov rdi, qword [rbp + 0x598]
lea r9, [rbp + 0x588]
cmp qword [rbp + 0x5a0], 0xf
cmova r9, qword [rbp + 0x588]
mov rax, qword [0x1801fc478]
cmp rdi, rax
ja 0x18007fee7
mov rbx, r14
cmp rax, 0xf
cmova rbx, qword [0x1801fc460]
mov qword [0x1801fc470], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x18007fef3
mov rdx, rdi
mov rcx, r14
call fcn.180081890
nop
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 0xf
jbe 0x18007ff34
inc rdx
mov rcx, qword [rbp + 0x588]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007ff2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008000d
call fcn.1800a892c
lea rcx, [rbp + 0x510]
call fcn.18007d490
mov rdi, qword [rbp + 0x510]
test rdi, rdi
jne 0x18007fa50
mov rbx, qword [rbp + 0x468]
mov rcx, qword [rbp + 0x518]
test rcx, rcx
je 0x18007ffa4
mov eax, r13d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x18007ff99
mov rbx, qword [rbp + 0x518]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007ff99
mov rcx, qword [rbp + 0x518]
mov rax, qword [rcx]
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x468]
test rbx, rbx
je 0x18007ffd8
mov eax, r13d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x18007ffd4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r13d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x18007ffd4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
call fcn.180028100
call fcn.180028100
mov r14d, dword [0x1801fd46c]
mov r15d, 0x10
jmp 0x180080018
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov esi, dword [rsp + 0x40]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov rbx, qword [0x1801fd4c0]
mov rdx, qword [rbx + 0x4040]
mov r9, qword [rdx + 0x1c0]
test r9, r9
jne 0x180080062
cmp qword [rbx + 0x4e50], r9
jne 0x180080062
movss xmm1, dword [rdx + 0x26c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
add r8, 0x268
jmp 0x180080093
movss xmm1, dword [rdx + 0x23c]
subss xmm1, dword [rdx + 0x11c]
mov r8, rdx
test r9, r9
jne 0x18008008c
cmp qword [rbx + 0x4e50], r9
jne 0x18008008c
add r8, 0x268
jmp 0x180080093
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rdx + 0x118]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
mov byte [rdx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.styleChild
call fcn.18001fa20
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x4094], eax
jne 0x1800800fb
lea r8, str.styleChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], 1
xor r9d, r9d
lea r8, [rsp + 0x58]
mov edx, edi
lea rcx, str.styleChild
call fcn.180027d30
test al, al
je 0x180080f2a
mov edx, r14d
mov rax, qword gs:[0x58]
mov ecx, r15d
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1801fe078], ecx
jle 0x18008016c
lea rcx, [0x1801fe078]
call fcn.1800a89dc
cmp dword [0x1801fe078], 0xffffffff
jne 0x18008016c
lea rcx, [0x1800af820]
call fcn.1800a8dac
lea rcx, [0x1801fe078]
call fcn.1800a8970
mov qword [rsp + 0x60], 0
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, str.Import_theme
call fcn.180058560
lea r15, [0x1801fc340]
test al, al
je 0x18008020f
mov rdx, r15
lea rcx, [rbp + 0x3c0]
call fcn.18007a4f0
mov rcx, rax
call fcn.18008cdb0
lea rbx, [0x1801fc5d8]
cmp rbx, r15
je 0x18008020f
mov rdi, qword [0x1801fc350]
mov r9, r15
cmp qword [0x1801fc358], 0xf
cmova r9, qword [0x1801fc340]
mov rax, qword [0x1801fc5f0]
cmp rdi, rax
ja 0x180080204
cmp rax, 0xf
cmova rbx, qword [0x1801fc5d8]
mov qword [0x1801fc5e8], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18008020f
mov rdx, rdi
mov rcx, rbx
call fcn.180081890
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rsp + 0x68], 0
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea rcx, str.Export_theme
call fcn.180058560
lea rbx, str.theme
test al, al
je 0x180080285
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r12
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x180080260
mov rdx, rbx
lea rcx, [rbp + 0x250]
call fcn.180078f40
lea rcx, [rbp + 0x250]
call fcn.1800896b0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rsp + 0x70], 0
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, str.Delete_theme
call fcn.180058560
test al, al
je 0x1800802f5
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2a8], r12
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1800802d0
mov rdx, rbx
lea rcx, [rbp + 0x290]
call fcn.180078f40
lea rcx, [rbp + 0x290]
call fcn.1800896b0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.180031d40
mov qword [rsp + 0x78], 0
xor r8d, r8d
lea rdx, [rsp + 0x78]
lea rcx, str.Show_dir
call fcn.180058560
test al, al
je 0x180080553
movzx r8d, byte [0x1801fc328]
mov edx, 1
lea rcx, [rbp + 0x5c8]
call fcn.18007a3e0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0x5d8]
sub rax, r15
cmp rax, 0x18
jb 0x180080fd7
lea rax, [rbp + 0x5c8]
mov r14, qword [rbp + 0x5c8]
mov r13, qword [rbp + 0x5e0]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x528], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x538], xmm1
lea r12, [r15 + 0x18]
mov edi, 0xf
lea rbx, [rbp + 0x528]
cmp r12, rdi
jbe 0x180080437
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x1800803f1
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a8e2c
test rax, rax
je 0x1800804e8
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0x40]
jmp 0x180080430
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x18008041a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fae
jmp 0x1800803cd
test rcx, rcx
je 0x18008042e
call fcn.1800a8e2c
mov rbx, rax
mov rax, qword [rsp + 0x40]
jmp 0x180080430
xor ebx, ebx
mov qword [rbp + 0x528], rbx
mov qword [rbp + 0x538], r12
mov qword [rbp + 0x540], rdi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_themes]
movups xmmword [rbx + r15], xmm0
movsd xmm0, qword [0x1800ba830]
movsd qword [rbx + r15 + 0x10], xmm0
mov byte [rbx + r12], 0
bts esi, 0x19
lea r8, [rbp + 0x528]
cmp qword [rbp + 0x540], 0xf
cmova r8, qword [rbp + 0x528]
mov dword [rsp + 0x28], 1
xor r12d, r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x540]
cmp rdx, 0xf
jbe 0x1800804f4
inc rdx
mov rcx, qword [rbp + 0x528]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800804ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800804ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a892c
movdqa xmm0, xmmword [0x1800be3c0]
movdqu xmmword [rbp + 0x538], xmm0
mov byte [rbp + 0x528], r12b
cmp r13, 0xf
jbe 0x180080545
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18008053d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18008053d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800a892c
lea rbx, str.theme
mov r14d, dword [0x1801fd46c]
mov qword [rbp - 0x80], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov r8, rbx
xor edx, edx
lea rcx, str.configsave
call fcn.180061730
mov rbx, qword [0x1801fd4c0]
mov rcx, qword [rbx + 0x4040]
mov r9, qword [rcx + 0x1c0]
test r9, r9
jne 0x1800805c9
cmp qword [rbx + 0x4e50], r9
jne 0x1800805c9
movss xmm1, dword [rcx + 0x26c]
subss xmm1, dword [rcx + 0x11c]
mov r8, rcx
add r8, 0x268
jmp 0x1800805fa
movss xmm1, dword [rcx + 0x23c]
subss xmm1, dword [rcx + 0x11c]
mov r8, rcx
test r9, r9
jne 0x1800805f3
cmp qword [rbx + 0x4e50], r9
jne 0x1800805f3
add r8, 0x268
jmp 0x1800805fa
add r8, 0x238
movss xmm0, dword [r8]
subss xmm0, dword [rcx + 0x118]
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x74], xmm1
mov byte [rcx + 0xcc], 1
mov rbx, qword [rbx + 0x4040]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.cfgChild
call fcn.18001fa20
mov edi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x4094], eax
jne 0x180080661
lea r8, str.cfgChild
mov edx, 0xb
mov ecx, eax
call fcn.18003aee0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rbp - 0x78]
mov edx, edi
lea rcx, str.cfgChild
call fcn.180027d30
test al, al
je 0x180080f25
mov ecx, r14d
mov rax, qword gs:[0x58]
mov edx, 0x10
mov rax, qword [rax + rcx*8]
lea r14, [0x1801fe0a0]
mov eax, dword [rdx + rax]
cmp dword [0x1801fe0c0], eax
jle 0x1800806f0
lea rcx, [0x1801fe0c0]
call fcn.1800a89dc
cmp dword [0x1801fe0c0], 0xffffffff
jne 0x1800806f0
movzx r8d, byte [0x1801fc328]
mov edx, 1
mov rcx, r14
call fcn.18007a3e0
lea rcx, [0x1800af7b0]
call fcn.1800a8dac
nop
lea rcx, [0x1801fe0c0]
call fcn.1800a8970
mov rdi, qword [0x1801fe0b0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, 0x18
jb 0x180080fdd
cmp qword [0x1801fe0b8], 0xf
cmova r14, qword [0x1801fe0a0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea r15, [rdi + 0x18]
lea rbx, [rbp - 0x50]
cmp r15, 0xf
jbe 0x1800807c7
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x18008077c
mov qword [rsp + 0x48], rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800a8e2c
test rax, rax
je 0x1800807aa
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800807c3
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov qword [rsp + 0x48], rbx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800807b1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180080fb4
jmp 0x180080761
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1800807c0
call fcn.1800a8e2c
mov rbx, rax
jmp 0x1800807c3
mov rbx, r12
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x40], r15
mov rax, qword [rsp + 0x48]
mov qword [rbp - 0x38], rax
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.:hellokittyfan48_themes]
movups xmmword [rbx + rdi], xmm0
movsd xmm0, qword [0x1800ba830]
movsd qword [rbx + rdi + 0x10], xmm0
mov byte [rbx + r15], 0
bts esi, 0x18
mov rdi, qword [rbp - 0x40]
lea rbx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rbx, qword [rbp - 0x50]
call fcn.1800a9a48
mov qword [rbp + 0x220], rbx
mov qword [rbp + 0x228], rdi
lea r8, [rbp + 0x220]
mov edx, eax
lea rcx, [rbp + 0x1d0]
call fcn.1800782c0
or esi, 0xc00000
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x470]
call fcn.18007d330
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 7
jbe 0x1800808a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800808a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800808a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a892c
movdqa xmm0, xmmword [0x1800be3a0]
movdqu xmmword [rbp + 0x1e0], xmm0
mov word [rbp + 0x1d0], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1800808fb
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800808f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800808f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a892c
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f0], xmm0
mov rbx, qword [rbp + 0x478]
test rbx, rbx
je 0x180080920
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x478]
mov esi, dword [rsp + 0x40]
movaps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0x4f0], xmm0
test rbx, rbx
je 0x180080943
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x478]
mov esi, dword [rsp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5e8], xmm1
mov r14, 0xffffffffffffffff
test rbx, rbx
je 0x180080990
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180080985
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180080985
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, dword [rsp + 0x40]
mov rbx, qword [rbp + 0x478]
mov rdi, qword [rbp + 0x4f0]
test rdi, rdi
je 0x180080ea8
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.18007cd50
mov rax, qword [rbp + 0x180]
mov edx, dword [rbp + 0x188]
test edx, edx
je 0x1800809cf
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x180080f91
cmp eax, 2
jne 0x180080b24
call fcn.1800a9a48
lea rcx, str..json
mov qword [rbp + 0x230], rcx
mov qword [rbp + 0x238], 5
lea r8, [rbp + 0x230]
mov edx, eax
lea rcx, [rbp + 0x150]
call fcn.1800782c0
or esi, 0x3000
or esi, 8
mov dword [rsp + 0x40], esi
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x180080a27
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.18007c350
cmp rax, r11
je 0x180080a7b
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180080a4f
cmp cx, 0x2f
jne 0x180080a58
add rax, 2
cmp rax, r11
jne 0x180080a40
cmp rax, r11
je 0x180080a7b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x180080a7b
cmp cx, 0x2f
je 0x180080a7b
mov r10, rdx
cmp rax, rdx
jne 0x180080a60
sub r11, r10
sar r11, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], r12
mov r8, r11
mov rdx, r10
lea rcx, [rbp + 0xc0]
call fcn.180081750
or esi, 0xe00
or esi, 0x10
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0xc0]
call fcn.18007c9f0
or esi, 0x20
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0x150]
cmp qword [rbp + 0x168], 7
cmova rcx, qword [rbp + 0x150]
mov qword [rbp + 0x240], rcx
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x248], rcx
movaps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x340], xmm0
lea rdx, [rbp + 0x340]
mov rcx, rax
call fcn.18007c7e0
test eax, eax
jne 0x180080b24
mov bl, 1
jmp 0x180080b26
xor bl, bl
test sil, 0x20
je 0x180080b93
and esi, 0xffffffdf
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x288]
cmp rdx, 7
jbe 0x180080b79
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080b74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f6e
call fcn.1800a892c
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], 7
mov word [rbp + 0x270], r12w
test sil, 0x10
je 0x180080c00
and esi, 0xffffffef
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x180080be6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080be1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f75
call fcn.1800a892c
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r12w
test sil, 8
je 0x180080c53
and esi, 0xfffffff7
mov dword [rsp + 0x40], esi
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x180080c53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080c4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f7c
call fcn.1800a892c
test bl, bl
je 0x180080e85
lea rcx, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x180080c6a
mov rcx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
lea rdx, [rcx + rax*2]
mov r10, rdx
call fcn.18007c350
cmp rax, rdx
je 0x180080cbc
nop
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x180080c8f
cmp cx, 0x2f
jne 0x180080c98
add rax, 2
cmp rax, rdx
jne 0x180080c80
cmp rax, rdx
je 0x180080cbc
nop dword [rax]
lea r8, [r10 - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x180080cbc
cmp cx, 0x2f
je 0x180080cbc
mov r10, r8
cmp rax, r8
jne 0x180080ca0
sub rdx, r10
sar rdx, 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], r12
mov r8, rdx
mov rdx, r10
lea rcx, [rbp + 0x120]
call fcn.180081750
or esi, 0x1c0
mov dword [rsp + 0x40], esi
lea rdx, [rbp + 0x568]
lea rcx, [rbp + 0x120]
call fcn.18007c6f0
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 7
jbe 0x180080d50
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080d4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f83
call fcn.1800a892c
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r12w
lea r15, [0x1801fc340]
mov rdx, r15
cmp qword [0x1801fc358], 0xf
cmova rdx, qword [0x1801fc340]
lea rcx, [rbp + 0x568]
cmp qword [rbp + 0x580], 0xf
seta dil
mov rbx, qword [rbp + 0x568]
cmova rcx, rbx
mov r8, qword [rbp + 0x578]
cmp r8, qword [0x1801fc350]
jne 0x180080dbf
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180080dbf
mov dl, 1
jmp 0x180080dc1
xor dl, dl
mov qword [rbp - 0x70], 0
lea rcx, [rbp + 0x568]
test dil, dil
cmovne rcx, rbx
lea r9, [rbp - 0x70]
call fcn.18006ace0
test al, al
je 0x180080e44
mov rdi, qword [rbp + 0x578]
lea r9, [rbp + 0x568]
cmp qword [rbp + 0x580], 0xf
cmova r9, qword [rbp + 0x568]
mov rax, qword [0x1801fc358]
cmp rdi, rax
ja 0x180080e38
mov rbx, r15
cmp rax, 0xf
cmova rbx, qword [0x1801fc340]
mov qword [0x1801fc350], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x180080e44
mov rdx, rdi
mov rcx, r15
call fcn.180081890
nop
mov rdx, qword [rbp + 0x580]
cmp rdx, 0xf
jbe 0x180080e85
inc rdx
mov rcx, qword [rbp + 0x568]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180080e80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180080f8a
call fcn.1800a892c
lea rcx, [rbp + 0x4f0]
call fcn.18007d490
mov rdi, qword [rbp + 0x4f0]
test rdi, rdi
jne 0x1800809a0
mov rbx, qword [rbp + 0x478]
mov rcx, qword [rbp + 0x4f8]
test rcx, rcx
je 0x180080ef1
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x180080eea
mov rbx, qword [rbp + 0x4f8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180080eea
mov rcx, qword [rbp + 0x4f8]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rbp + 0x478]
test rbx, rbx
je 0x180080f20
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180080f20
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r14d
cmp r14d, 1
jne 0x180080f20
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
call fcn.180028100
call fcn.180028100
call fcn.180028100
call fcn.18002df90
call fcn.18002d6b0
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.1800a8790
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.180078d30
nop
call fcn.180077a80
nop
call fcn.180077a80
nop
call fcn.180077a80
nop
call fcn.180077a80
nop
call fcn.180077b40
nop
call fcn.180077b40
nop
lea r8, [rdi + 0x20]
lea rcx, str.directory_entry::status
call fcn.180078d30
nop
call fcn.180077b40
nop
call fcn.180077b40
int3