Function at 0x1800063f0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x428]
sub rsp, 0x4e8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
movabs rbx, 0x142378188
mov rax, qword [rbx]
mov rcx, qword [rax + 0xd0]
mov rcx, qword [rcx + 0x48]
xor r12d, r12d
mov qword [rbp + 0x430], r12
mov rax, qword [rcx]
mov r8, qword [rax + 0x470]
lea rdx, [rbp + 0x430]
call r8
mov rcx, qword [rbp + 0x430]
test al, al
cmove rcx, r12
mov qword [rbp + 0x430], rcx
test rcx, rcx
je 0x18000b578
mov rax, qword [rcx]
mov r8, qword [rax + 0x1d8]
xor edx, edx
call r8
test rax, rax
je 0x18000b578
mov rax, qword [rbx]
mov qword [rbp + 0x2b8], rax
test rax, rax
je 0x18000b578
mov rcx, qword [rax + 0xe0]
mov qword [rbp + 0x2c0], rcx
mov rdi, qword [rax + 0xc0]
mov r13, qword [rax + 0x48]
mov qword [rbp + 0x2b0], r13
mov rax, qword [rcx]
mov rdx, qword [rax + 0xa8]
call rdx
mov qword [rbp - 0x50], rax
test rax, rax
je 0x18000b578
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0xd0]
mov rbx, qword [rdx + 0x48]
mov qword [rbp + 0x38], rbx
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x448]
mov rcx, rbx
call rdx
mov r15, rax
mov qword [rbp + 0x40], rax
test rax, rax
je 0x18000b578
mov rcx, rbx
call fcn.180005750
mov r14, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x18000b578
mov rcx, qword [rax]
mov r8, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, rax
call r8
mov rsi, rax
mov qword [rbp + 0x250], rax
test rax, rax
je 0x18000b578
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x280]
mov rcx, rax
call rdx
test rax, rax
je 0x18000b578
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18000b578
mov rbx, qword [rdx + 0xd0]
test rbx, rbx
je 0x18000b578
mov rax, qword [rdi]
mov r8, qword [rax + 0x38]
xor edx, edx
mov rcx, rdi
call r8
movss xmm1, dword [0x18001645c]
addss xmm1, xmm0
movss dword [0x18001645c], xmm1
movss xmm0, dword [0x180012fec]
movss dword [0x180016458], xmm0
mov rax, qword [r15]
mov r8, qword [rax + 0x3a8]
lea rdx, str.mat_head
mov rcx, r15
call r8
mov dword [rbp + 0x438], eax
mov rcx, qword [0x180016450]
call fcn.18000e9a0
movsd xmm13, qword [r13 + 0x17c0]
mov eax, dword [r13 + 0x17c8]
mov dword [rbp + 0x440], eax
movss dword [0x1800164b0], xmm13
movaps xmm15, xmm13
shufps xmm15, xmm15, 0x55
movsd qword [rbp + 0x1a0], xmm13
movss dword [0x1800164b4], xmm15
movd xmm10, eax
movss dword [rbp - 0x20], xmm10
movss dword [0x1800164b8], xmm10
movzx eax, byte [r14 + 0xce4]
mov byte [0x1800164cc], al
mov dword [0x180016508], 1
xorps xmm11, xmm11
mov qword [0x180016510], r12
movss xmm6, dword [0x180012ff4]
mov dword [0x180016518], 0x3f800000
mov qword [0x1800164c0], r12
mov dword [0x1800164c8], 0x3f800000
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r13d, eax
mov dword [rbp + 0x10], eax
mov ecx, dword [0x180016344]
mov dword [rbp + 0x448], ecx
lea rax, [rbp + 0x448]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x44c]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x430]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1b0]
call fcn.180001860
nop
mov ecx, dword [0x180016348]
mov dword [rbp - 0x24], ecx
lea rax, [rbp - 0x24]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x430]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x2e0]
call fcn.180001860
nop
mov rcx, qword [rsi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
mov qword [rbp + 0x48], rax
mov rbx, qword [rbp - 0x50]
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x30]
mov rcx, rbx
call rdx
mov r15, rax
mov qword [rbp - 8], rax
mov rsi, qword [rbp + 0x1b0]
mov rdi, qword [rbp - 0x60]
test rax, rax
je 0x18000b2ba
movss xmm14, dword [0x1800130ac]
movss xmm9, dword [0x180012ff0]
movss xmm12, dword [0x180013038]
nop
mov rax, qword [r15]
mov rdx, qword [rax + 0x178]
mov rcx, r15
call rdx
test al, al
jne 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
mov rsi, rax
mov qword [rbp + 0x430], rax
mov rcx, qword [r15]
mov rdx, qword [rcx + 0x18]
mov rcx, r15
call rdx
test rax, rax
je 0x18000b281
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
mov r13, rax
mov qword [rbp + 0x448], rax
mov rcx, qword [r15]
mov r8, qword [rcx + 0xc8]
lea rdx, [rbp - 0x80]
mov rcx, r15
call r8
lea rdx, [0x180011354]
mov rcx, qword [rbp + 0x48]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000abb6
cmp dword [0x180016090], eax
je 0x18000683e
lea ecx, [rax + 0x42]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000683e
lea rdx, str.Boss_Eye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000683e
lea rdx, str.Boss_Dron_Body_Field_Proxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
cmp dword [0x180016068], 0
je 0x180007483
lea rdx, str.DestroyableObject
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180006ab4
cmp dword [0x180016058], 0
je 0x180006ab4
lea rdx, str.explosive_barrels
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x18000693a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000694f
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax]
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142378188
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 8], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1800069f9
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006a01
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180006a1d
test bl, bl
je 0x180006a1d
cmp dword [0x180016354], 0
je 0x180006a1d
mov bl, 1
jmp 0x180006a1f
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180006a90
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006aa5
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180006960
jmp 0x18000b27d
lea rdx, str.ShootingTarget
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007483
cmp dword [0x180016054], 0
je 0x180006d44
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006d44
lea rdx, str.ShootingTarget185
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006b19
lea rdx, str.ShootingTarget201
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180006bcb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006be0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0xfa
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142378188
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 8], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180006c89
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006c91
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180006cad
test bl, bl
je 0x180006cad
cmp dword [0x180016354], 0
je 0x180006cad
mov bl, 1
jmp 0x180006caf
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180006d20
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006d35
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180006bf0
jmp 0x18000b27d
cmp dword [0x18001604c], 0
je 0x180006ff4
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006ff4
lea rdx, str.Level1_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006dcd
lea rdx, str.CenterCapsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006dcd
lea rdx, str.Stage3_Core
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006dcd
lea rdx, str.Level2_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006dcd
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180006e7f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006e94
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop dword [rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142378188
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 8], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180006f39
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006f41
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180006f5d
test bl, bl
je 0x180006f5d
cmp dword [0x180016354], 0
je 0x180006f5d
mov bl, 1
jmp 0x180006f5f
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180006fd0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006fe5
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180006ea0
jmp 0x18000b27d
cmp dword [0x180016050], 0
je 0x180007244
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007244
lea rdx, str.Laser
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007055
lea rdx, str.ShootingTarget_base
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007055
lea rdx, str.Platform
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180007107
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000711c
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x54], xmm1
movss dword [rbp + 0x58], xmm2
lea rdx, [rbp + 0x50]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000717e
cmp dword [0x180016354], 0
je 0x18000717e
mov bl, 1
jmp 0x180007180
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180007220
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007235
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007121
jmp 0x18000b27d
cmp dword [0x18001605c], 0
je 0x180007483
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007483
lea rdx, str.Bottom
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007291
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180007343
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007358
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x60], xmm0
movss dword [rbp + 0x64], xmm1
movss dword [rbp + 0x68], xmm2
lea rdx, [rbp + 0x60]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x1800073bd
cmp dword [0x180016354], 0
je 0x1800073bd
mov bl, 1
jmp 0x1800073bf
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000745f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007474
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007360
jmp 0x18000b27d
cmp dword [0x180016070], 0
je 0x180007b9f
lea rdx, str.ShootingTarget
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007b9f
cmp dword [0x180016040], 0
je 0x180007734
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007734
lea rdx, str.BossEye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007509
lea rdx, str.Eye_CoverProxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007509
lea rdx, str.BossThroat
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x1800075bb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800075d0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142378188
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 8], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180007679
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007681
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x18000769d
test bl, bl
je 0x18000769d
cmp dword [0x180016354], 0
je 0x18000769d
mov bl, 1
jmp 0x18000769f
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180007710
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007725
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800075e0
jmp 0x18000b27d
cmp dword [0x180016044], 0
je 0x180007963
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007963
lea rdx, str.Hive
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x18000781f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007834
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x70], xmm0
movss dword [rbp + 0x74], xmm1
movss dword [rbp + 0x78], xmm2
lea rdx, [rbp + 0x70]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000789d
cmp dword [0x180016354], 0
je 0x18000789d
mov bl, 1
jmp 0x18000789f
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000793f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007954
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007840
jmp 0x18000b27d
cmp dword [0x180016048], 0
je 0x180007b9f
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007b9f
lea rdx, str.Corridor_Pipe
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180007a4e
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007a63
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x80], xmm0
movss dword [rbp + 0x84], xmm1
movss dword [rbp + 0x88], xmm2
lea rdx, [rbp + 0x80]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180007ad9
cmp dword [0x180016354], 0
je 0x180007ad9
mov bl, 1
jmp 0x180007adb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180007b7b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007b90
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007a70
jmp 0x18000b27d
cmp dword [0x18001606c], 0
je 0x180007dff
lea rdx, str.ShootingTarget
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007dff
cmp dword [0x18001603c], 0
je 0x180007dff
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007dff
lea rdx, str.Heli
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180007caf
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007cc4
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x90], xmm0
movss dword [rbp + 0x94], xmm1
movss dword [rbp + 0x98], xmm2
lea rdx, [rbp + 0x90]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180007d39
cmp dword [0x180016354], 0
je 0x180007d39
mov bl, 1
jmp 0x180007d3b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180007ddb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007df0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007cd0
jmp 0x18000b27d
lea rdx, str.DestroyableObject
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008064
cmp dword [0x1800161b4], 0
je 0x180008064
lea rdx, str.explosive_barrels
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180007eee
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007f03
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142378188
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 8], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180007fa9
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007fb1
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180007fcd
test bl, bl
je 0x180007fcd
cmp dword [0x180016354], 0
je 0x180007fcd
mov bl, 1
jmp 0x180007fcf
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180008040
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008055
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007f10
jmp 0x18000b27d
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
test rax, rax
je 0x18000b281
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
cmp dword [0x180016190], 0
je 0x180008303
lea rdx, str.heavydroid_rocket
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008303
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008303
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov eax, 6
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x18000816e
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008183
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
movabs rsi, 0x142378188
mov r14d, 5
lea r13d, [r14 + 1]
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
mov rax, qword [rsi]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp + 0x18], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000822f
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180008237
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180008253
test bl, bl
je 0x180008253
cmp dword [0x180016354], 0
je 0x180008253
mov bl, 1
jmp 0x180008255
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x1800082c6
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800082db
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub r14, 1
jne 0x1800081a0
movss xmm6, dword [0x180012ff4]
mov rsi, qword [rbp + 0x430]
mov r13, qword [rbp + 0x448]
mov r14, qword [rbp + 8]
mov rbx, qword [rbp - 0x50]
lea rdx, str.ShootingTarget
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000854f
cmp dword [0x180016180], 0
je 0x18000854f
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000854f
lea rdx, str.S00_ShootingTarget1
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x1800083ca
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800083df
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
mov esi, 5
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xa0], xmm0
movss dword [rbp + 0xa4], xmm1
movss dword [rbp + 0xa8], xmm2
lea rdx, [rbp + 0xa0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180008489
cmp dword [0x180016354], 0
je 0x180008489
mov bl, 1
jmp 0x18000848b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000852b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008540
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008420
jmp 0x18000b27d
lea rdx, str.ShootingTarget
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000879f
cmp dword [0x180016184], 0
je 0x18000879f
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000879f
lea rdx, str.S01_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180008616
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000862b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
mov esi, 5
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xb0], xmm0
movss dword [rbp + 0xb4], xmm1
movss dword [rbp + 0xb8], xmm2
lea rdx, [rbp + 0xb0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x1800086d9
cmp dword [0x180016354], 0
je 0x1800086d9
mov bl, 1
jmp 0x1800086db
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000877b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008790
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008670
jmp 0x18000b27d
lea rdx, str.ShootingTarget
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800089ef
cmp dword [0x180016188], 0
je 0x1800089ef
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800089ef
lea rdx, str.S02_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180008866
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000887b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
mov esi, 5
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xc0], xmm0
movss dword [rbp + 0xc4], xmm1
movss dword [rbp + 0xc8], xmm2
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180008929
cmp dword [0x180016354], 0
je 0x180008929
mov bl, 1
jmp 0x18000892b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x1800089cb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800089e0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800088c0
jmp 0x18000b27d
lea rdx, str.ShootingTarget
mov rcx, r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000abb6
cmp dword [0x1800161b0], 0
je 0x180008c4f
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008c4f
lea rdx, str.ShootingTarget185
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008a54
lea rdx, str.ShootingTarget201
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180008aca
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008adf
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
mov esi, 0xfa
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xd0], xmm0
movss dword [rbp + 0xd4], xmm1
movss dword [rbp + 0xd8], xmm2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180008b89
cmp dword [0x180016354], 0
je 0x180008b89
mov bl, 1
jmp 0x180008b8b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180008c2b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008c40
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008b20
jmp 0x18000b27d
cmp dword [0x1800161a4], 0
je 0x180008edf
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008edf
lea rdx, str.Level1_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008cd8
lea rdx, str.CenterCapsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008cd8
lea rdx, str.Stage3_Core
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008cd8
lea rdx, str.Level2_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008cd8
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180008d8a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008d9f
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop dword [rax]
nop dword [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xe0], xmm0
movss dword [rbp + 0xe4], xmm1
movss dword [rbp + 0xe8], xmm2
lea rdx, [rbp + 0xe0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180008e19
cmp dword [0x180016354], 0
je 0x180008e19
mov bl, 1
jmp 0x180008e1b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180008ebb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008ed0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008db0
jmp 0x18000b27d
cmp dword [0x18001617c], 0
je 0x18000912f
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000912f
lea rdx, str.Bottom
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008f2c
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180008fde
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008ff3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xf0], xmm0
movss dword [rbp + 0xf4], xmm1
movss dword [rbp + 0xf8], xmm2
lea rdx, [rbp + 0xf0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180009069
cmp dword [0x180016354], 0
je 0x180009069
mov bl, 1
jmp 0x18000906b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000910b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009120
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009000
jmp 0x18000b27d
cmp dword [0x18001618c], 0
je 0x18000938f
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000938f
lea rdx, str.S00_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009190
lea rdx, str.laymore
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009190
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x1800130e0]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141712030
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180009242
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009257
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x100], xmm0
movss dword [rbp + 0x104], xmm1
movss dword [rbp + 0x108], xmm2
lea rdx, [rbp + 0x100]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x1800092c9
cmp dword [0x180016354], 0
je 0x1800092c9
mov bl, 1
jmp 0x1800092cb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000936b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009380
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009260
jmp 0x18000b27d
cmp dword [0x1800161a4], 0
je 0x1800095bf
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800095bf
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x18000946d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009482
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x110], xmm0
movss dword [rbp + 0x114], xmm1
movss dword [rbp + 0x118], xmm2
lea rdx, [rbp + 0x110]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x1800094f9
cmp dword [0x180016354], 0
je 0x1800094f9
mov bl, 1
jmp 0x1800094fb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000959b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800095b0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009490
jmp 0x18000b27d
cmp dword [0x1800161bc], 0
je 0x18000980f
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000980f
lea rdx, str.BossEye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009620
lea rdx, str.Eye_CoverProxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009620
lea rdx, str.BossThroat
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x1800096c5
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800096da
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x120], xmm0
movss dword [rbp + 0x124], xmm1
movss dword [rbp + 0x128], xmm2
lea rdx, [rbp + 0x120]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180009749
cmp dword [0x180016354], 0
je 0x180009749
mov bl, 1
jmp 0x18000974b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x1800097eb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009800
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800096e0
jmp 0x18000b27d
cmp dword [0x180016198], 0
je 0x180009a3f
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009a3f
lea rdx, str.Heli
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x1800098ed
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009902
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x130], xmm0
movss dword [rbp + 0x134], xmm1
movss dword [rbp + 0x138], xmm2
lea rdx, [rbp + 0x130]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180009979
cmp dword [0x180016354], 0
je 0x180009979
mov bl, 1
jmp 0x18000997b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180009a1b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009a30
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009910
jmp 0x18000b27d
cmp dword [0x180016178], 0
je 0x180009c6f
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009c6f
lea rdx, str.apsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180009b1d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009b32
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x140], xmm0
movss dword [rbp + 0x144], xmm1
movss dword [rbp + 0x148], xmm2
lea rdx, [rbp + 0x140]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180009ba9
cmp dword [0x180016354], 0
je 0x180009ba9
mov bl, 1
jmp 0x180009bab
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180009c4b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009c60
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009b40
jmp 0x18000b27d
cmp dword [0x180016194], 0
je 0x180009e9f
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009e9f
lea rdx, str.Hive
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180009d4d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009d62
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x150], xmm0
movss dword [rbp + 0x154], xmm1
movss dword [rbp + 0x158], xmm2
lea rdx, [rbp + 0x150]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x180009dd9
cmp dword [0x180016354], 0
je 0x180009dd9
mov bl, 1
jmp 0x180009ddb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x180009e7b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009e90
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009d70
jmp 0x18000b27d
cmp dword [0x1800161a8], 0
je 0x18000a0ef
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a0ef
lea rdx, str.Laser
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009f00
lea rdx, str.ShootingTarget_base
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009f00
lea rdx, str.Platform
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x438]
mov dword [rsp + 0x54], eax
mov r13d, 6
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm13
movss dword [rsp + 0x64], xmm15
movss dword [rsp + 0x68], xmm10
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, qword [rbp - 0x58]
je 0x180009fa5
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009fba
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x160], xmm0
movss dword [rbp + 0x164], xmm1
movss dword [rbp + 0x168], xmm2
lea rdx, [rbp + 0x160]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000a029
cmp dword [0x180016354], 0
je 0x18000a029
mov bl, 1
jmp 0x18000a02b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000a0cb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a0e0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009fc0
jmp 0x18000b27d
cmp dword [0x1800161d0], 0
je 0x18000a2ef
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a2ef
lea rdx, str.Corridor_Pipe
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rcx, r15
call fcn.180005790
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movsd qword [rbp + 0x290], xmm13
mov eax, dword [rbp + 0x440]
mov dword [rbp + 0x298], eax
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x290]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9b, 1
mov r8d, dword [rbp + 0x438]
mov edx, dword [r14 + 0x20]
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
mov esi, 5
mov rdi, qword [rbp - 0x60]
lea r13d, [rsi + 1]
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x170], xmm0
movss dword [rbp + 0x174], xmm1
movss dword [rbp + 0x178], xmm2
lea rdx, [rbp + 0x170]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000a229
cmp dword [0x180016354], 0
je 0x18000a229
mov bl, 1
jmp 0x18000a22b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000a2cb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a2e0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a1c0
jmp 0x18000b27d
cmp dword [0x1800161d4], 0
je 0x18000a4ef
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a4ef
lea rdx, str.Ursula
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rcx, r15
call fcn.180005790
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movsd qword [rbp + 0x2d0], xmm13
mov eax, dword [rbp + 0x440]
mov dword [rbp + 0x2d8], eax
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x2d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9b, 1
mov r8d, dword [rbp + 0x438]
mov edx, dword [r14 + 0x20]
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
mov esi, 0x19
mov rdi, qword [rbp - 0x60]
lea r13d, [rsi - 0x13]
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x180], xmm0
movss dword [rbp + 0x184], xmm1
movss dword [rbp + 0x188], xmm2
lea rdx, [rbp + 0x180]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000a429
cmp dword [0x180016354], 0
je 0x18000a429
mov bl, 1
jmp 0x18000a42b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000a4cb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a4e0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a3c0
jmp 0x18000b27d
cmp dword [0x18001619c], 0
je 0x18000a6ef
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a6ef
lea rdx, str.ShootingTarget_duck
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rcx, r15
call fcn.180005790
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movsd qword [rbp + 0x1d0], xmm13
mov eax, dword [rbp + 0x440]
mov dword [rbp + 0x1d8], eax
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9b, 1
mov r8d, dword [rbp + 0x438]
mov edx, dword [r14 + 0x20]
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
mov esi, 5
mov rdi, qword [rbp - 0x60]
lea r13d, [rsi + 1]
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x190], xmm0
movss dword [rbp + 0x194], xmm1
movss dword [rbp + 0x198], xmm2
lea rdx, [rbp + 0x190]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000a629
cmp dword [0x180016354], 0
je 0x18000a629
mov bl, 1
jmp 0x18000a62b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000a6cb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a6e0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a5c0
jmp 0x18000b27d
cmp dword [0x1800161c0], 0
je 0x18000a886
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a886
lea rdx, str.Smart_mine
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rcx, r15
call fcn.180005790
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movsd qword [rbp + 0x1e0], xmm13
mov eax, dword [rbp + 0x440]
mov dword [rbp + 0x1e8], eax
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9b, 1
mov r8d, dword [rbp + 0x438]
mov edx, dword [r14 + 0x20]
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
mov edi, 0xf
nop word [rax + rax]
lea rdx, [rbp + 0x2f8]
lea rcx, [rbp - 0x80]
call fcn.180005700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x1f0], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x1f8], eax
lea rdx, [rbp + 0x1f0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000a809
cmp dword [0x180016354], 0
je 0x18000a809
mov bl, 1
jmp 0x18000a80b
xor ebx, ebx
lea rdx, [rbp + 0x304]
lea rcx, [rbp - 0x80]
call fcn.180005700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x200], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x208], eax
mov rcx, r15
call fcn.180005790
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x200]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movzx r9d, bl
xor r8d, r8d
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
sub rdi, 1
jne 0x18000a7c0
mov rdi, qword [rbp - 0x60]
jmp 0x18000b27d
cmp dword [0x1800161b8], 0
je 0x18000aa36
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000aa36
lea rdx, str.weakpoint
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000a8d3
lea rdx, str._Generator
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rcx, r15
call fcn.180005790
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movsd qword [rbp + 0x210], xmm13
mov eax, dword [rbp + 0x440]
mov dword [rbp + 0x218], eax
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x210]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9b, 1
mov r8d, dword [rbp + 0x438]
mov edx, dword [r14 + 0x20]
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
mov edi, 0x32
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x310]
lea rcx, [rbp - 0x80]
call fcn.180005700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x220], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x228], eax
lea rdx, [rbp + 0x220]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000a9b9
cmp dword [0x180016354], 0
je 0x18000a9b9
mov bl, 1
jmp 0x18000a9bb
xor ebx, ebx
lea rdx, [rbp + 0x334]
lea rcx, [rbp - 0x80]
call fcn.180005700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x230], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x238], eax
mov rcx, r15
call fcn.180005790
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x230]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movzx r9d, bl
xor r8d, r8d
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
sub rdi, 1
jne 0x18000a970
mov rdi, qword [rbp - 0x60]
jmp 0x18000b27d
cmp dword [0x180016168], 0
je 0x18000abb6
lea rdx, [0x180012fcc]
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b281
mov rcx, r15
call fcn.180005790
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm6
movaps xmm1, xmm11
call fcn.180005dd0
movsd qword [rbp + 0x240], xmm13
mov eax, dword [rbp + 0x440]
mov dword [rbp + 0x248], eax
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9b, 1
mov r8d, dword [rbp + 0x438]
mov edx, dword [r14 + 0x20]
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
mov edi, 0x64
nop word [rax + rax]
lea rdx, [rbp + 0x31c]
lea rcx, [rbp - 0x80]
call fcn.180005700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x2a0], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x2a8], eax
lea rdx, [rbp + 0x2a0]
mov rcx, qword [0x180016450]
call fcn.1800061f0
test al, al
je 0x18000ab39
cmp dword [0x180016354], 0
je 0x18000ab39
mov bl, 1
jmp 0x18000ab3b
xor ebx, ebx
lea rdx, [rbp + 0x328]
lea rcx, [rbp - 0x80]
call fcn.180005700
movsd xmm0, qword [rax]
movsd qword [rbp + 0x260], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x268], eax
mov rcx, r15
call fcn.180005790
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm11
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movzx r9d, bl
xor r8d, r8d
lea rcx, [rbp - 0x48]
call fcn.180001e50
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.18000ec90
sub rdi, 1
jne 0x18000aaf0
mov rdi, qword [rbp - 0x60]
jmp 0x18000b27d
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ebx, eax
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xc8]
mov rcx, rax
call rdx
mov rcx, qword [rax]
mov r8, qword [rcx + 0x78]
mov edx, ebx
mov rcx, rax
call r8
mov r12, rax
test rax, rax
je 0x18000b27a
mov r15, qword [rax + 0x10]
mov qword [rbp + 0x18], r15
test r15, r15
je 0x18000b27a
cmp dword [0x180016064], 0
je 0x18000adc6
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000adc6
lea rdx, str.Suicide
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000ae23
xor r14d, r14d
movsxd rax, dword [0x180016448]
mov rcx, qword [rbp + 0x2e0]
cmp dword [rcx + rax*4], r14d
jle 0x18000ae23
mov r15, rcx
movabs rsi, 0x142378188
lea r13d, [r14 + 6]
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
mov rax, qword [rsi]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rsp + 0x50], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000ad00
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18000ad08
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x18000ad24
test bl, bl
je 0x18000ad24
cmp dword [0x180016354], 0
je 0x18000ad24
mov cl, 1
jmp 0x18000ad26
xor cl, cl
mov eax, dword [r12 + 0x20]
mov dword [rbp - 0x48], eax
mov dword [rbp - 0x44], 0
mov eax, 1
test cl, cl
cmovne eax, r13d
mov dword [rbp - 0x40], eax
mov dword [rbp - 0x3c], 0
movss dword [rbp - 0x38], xmm8
movss dword [rbp - 0x34], xmm7
movss dword [rbp - 0x30], xmm6
mov dword [rbp - 0x2c], 0
mov byte [rbp - 0x28], 0
cmp rdi, qword [rbp - 0x58]
je 0x18000ad8a
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x38]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp - 0x28]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000ad9e
lea r8, [rbp - 0x48]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
inc r14d
movsxd rax, dword [0x180016448]
cmp r14d, dword [r15 + rax*4]
jl 0x18000ac70
mov rsi, qword [rbp + 0x430]
mov r15, qword [rbp + 0x18]
mov r13, qword [rbp + 0x448]
jmp 0x18000ae23
cmp dword [0x180016100], 0
je 0x18000ae02
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000ae02
cmp r12, r14
je 0x18000b27a
mov rax, qword [r12]
mov rdx, qword [rax + 0xe0]
mov rcx, r12
call rdx
test eax, eax
jle 0x18000b27a
jmp 0x18000ae23
mov r8d, dword [r12 + 0x20]
mov edx, dword [r14 + 0x20]
mov rcx, qword [rbp + 0x40]
movabs rax, 0x1411df700
call rax
test eax, eax
jne 0x18000b27a
mov qword [rbp + 0x28], 0
mov dword [rbp + 0x30], 0
mov qword [rbp - 0x18], 0
mov dword [rbp - 0x10], 0
xor r14d, r14d
mov dword [rbp + 0x430], r14d
mov dword [rbp + 0x448], r14d
mov rax, qword [r12]
mov rdx, qword [rax + 0x130]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov rbx, rax
mov qword [rbp + 0x18], r14
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax]
mov r8, qword [rcx + 0x470]
lea rdx, [rbp + 0x18]
mov rcx, rax
call r8
test al, al
je 0x18000b470
cmp qword [rbp + 0x18], r14
je 0x18000b470
mov r8, qword [rbp + 8]
mov rcx, qword [r8]
mov rax, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, r8
call rax
test rax, rax
je 0x18000b470
lea rax, [rbp + 0x448]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x430]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
mov r9, rsi
mov r8, rbx
mov rdx, qword [rbp + 0x40]
mov rcx, qword [0x180016450]
call fcn.180005e30
test al, al
je 0x18000b27a
mov rax, qword [r12]
mov rdx, qword [rax + 0x130]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov ebx, dword [rbp - 0x10]
movsd xmm6, qword [rbp - 0x18]
cmp dword [0x180016120], r14d
jne 0x18000afa7
movsd qword [rbp + 0x270], xmm6
mov dword [rbp + 0x278], ebx
movsd qword [rbp + 0x280], xmm13
mov eax, dword [rbp + 0x440]
mov dword [rbp + 0x288], eax
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r14
lea rax, [rbp + 0x270]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x280]
mov r8, r15
mov rdx, qword [rbp + 0x2c0]
mov rax, qword [rbp + 0x2b8]
mov rcx, qword [rax + 0x70]
call fcn.18000eb60
test al, al
je 0x18000b27a
cmp dword [0x180016338], r14d
je 0x18000b084
movsd qword [rbp + 0x1a0], xmm6
mov dword [rbp + 0x1a8], ebx
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x1a0]
mov r13, qword [rbp + 0x2b0]
mov rcx, r13
call fcn.18000dac0
test al, al
je 0x18000b27a
cmp dword [0x180016338], r14d
je 0x18000b084
movss xmm8, dword [rbp + 0x28]
movss xmm7, dword [rbp + 0x2c]
xorps xmm10, xmm10
cvtsi2ss xmm10, dword [0x18001633c]
mov rax, qword [r13]
mov rdx, qword [rax + 0x338]
mov rcx, r13
call rdx
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm9
mov rax, qword [r13]
mov rdx, qword [rax + 0x340]
mov rcx, r13
call rdx
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm0, xmm9
subss xmm7, xmm0
subss xmm8, xmm6
mulss xmm8, xmm8
mulss xmm7, xmm7
addss xmm8, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm8
ja 0x18000b06b
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x18000b074
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm10, xmm0
jb 0x18000b27a
movss xmm10, dword [rbp - 0x20]
lea rdx, [0x180011354]
mov rcx, qword [rbp + 0x48]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000b114
mov rcx, qword [rbp + 8]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rbp - 0x48], eax
mov eax, dword [rbp + 0x438]
mov dword [rbp - 0x44], eax
mov eax, 6
mov dword [rbp - 0x40], eax
mov dword [rbp - 0x3c], 0xc
movss dword [rbp - 0x38], xmm13
movss dword [rbp - 0x34], xmm15
movss dword [rbp - 0x30], xmm10
mov dword [rbp - 0x2c], r14d
mov byte [rbp - 0x28], cl
cmp rdi, qword [rbp - 0x58]
je 0x18000b100
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x38]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp - 0x28]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b114
lea r8, [rbp - 0x48]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
mov esi, r14d
movsxd rax, dword [0x180016448]
mov r13, qword [rbp + 0x1b0]
cmp dword [r13 + rax*4], r14d
jle 0x18000b27a
movss xmm6, dword [rbp - 0x10]
movss xmm7, dword [rbp - 0x14]
movss xmm8, dword [rbp - 0x18]
mov r14d, dword [rbp + 0x430]
mov r15d, dword [rbp + 0x448]
nop
movabs rax, 0x142378188
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x1800130f0]
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rsp + 0x50], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000b1bb
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18000b1c3
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x18000b1e6
test bl, bl
je 0x18000b1e6
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b1e6
mov dl, 1
jmp 0x18000b1e8
xor dl, dl
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp - 0x48], eax
mov dword [rbp - 0x44], r15d
mov eax, 1
test dl, dl
mov edx, 6
cmovne eax, edx
mov dword [rbp - 0x40], eax
mov dword [rbp - 0x3c], r14d
movss dword [rbp - 0x38], xmm8
movss dword [rbp - 0x34], xmm7
movss dword [rbp - 0x30], xmm6
mov dword [rbp - 0x2c], 0
mov byte [rbp - 0x28], cl
cmp rdi, qword [rbp - 0x58]
je 0x18000b252
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x38]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp - 0x28]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b266
lea r8, [rbp - 0x48]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001530
mov rdi, qword [rbp - 0x60]
inc esi
movsxd rax, dword [0x180016448]
cmp esi, dword [r13 + rax*4]
jl 0x18000b150
xor r12d, r12d
mov rbx, qword [rbp - 0x50]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x30]
mov rcx, rbx
call rdx
mov r15, rax
mov qword [rbp - 8], rax
test rax, rax
movss xmm10, dword [rbp - 0x20]
movss xmm6, dword [0x180012ff4]
mov r14, qword [rbp + 8]
jne 0x180006780
mov rsi, qword [rbp + 0x1b0]
mov r13d, dword [rbp + 0x10]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call rdx
cmp dword [0x1800160fc], 0
je 0x18000b477
movss xmm0, dword [0x18001645c]
comiss xmm0, dword [0x180016458]
jb 0x18000b477
mov rbx, qword [rbp - 0x68]
cmp rbx, rdi
je 0x18000b45a
mov rdi, qword [rbp + 0x250]
mov rcx, rdi
call fcn.180006290
test al, al
je 0x18000b45a
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x80]
call fcn.180001b30
mov rbx, rax
mov qword [rbp + 0x430], rax
mov dword [0x18001650c], r13d
mov dword [rsp + 0x50], r13d
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.180001b30
nop
mov rdx, qword [0x1800164d8]
cmp rdx, qword [0x1800164e0]
je 0x18000b37b
mov eax, dword [rsp + 0x50]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
mov r8, r12
mov qword [rdx + 8], rax
mov rax, qword [rsp + 0x60]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rcx
add qword [0x1800164d8], 0x20
jmp 0x18000b396
lea r8, [rsp + 0x50]
lea rcx, [0x1800164d0]
call fcn.180001300
mov r12, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
movabs r14, 0xe38e38e38e38e39
test r8, r8
je 0x18000b3f4
sub r12, r8
mov rax, r14
imul r12
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, r8
cmp rdx, 0x1000
jb 0x18000b3eb
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b3eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18000f30c
nop
mov rcx, rbx
call fcn.18000e6b0
mov rax, qword [0x1800164d8]
cmp qword [0x1800164d0], rax
je 0x18000b43e
movabs rdx, 0x1426111c8
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 0x100
lea r8, [0x1800164b0]
mov rdx, qword [rdx]
mov rcx, qword [rdi + 0x18]
movabs rax, 0x141491880
call rax
mov rcx, qword [0x180016450]
call fcn.18000e9a0
mov rbx, qword [rbp - 0x68]
mov dword [0x18001645c], 0
jmp 0x18000b485
movabs r14, 0xe38e38e38e38e39
mov dword [0x18001645c], 0
jmp 0x18000b485
mov rsi, qword [rbp + 0x1b0]
mov rbx, qword [rbp - 0x68]
movabs r14, 0xe38e38e38e38e39
mov rcx, qword [rbp + 0x2e0]
test rcx, rcx
je 0x18000b4d5
mov rax, qword [rbp + 0x2f0]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b4cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b4cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000f30c
nop
test rsi, rsi
je 0x18000b521
mov rax, qword [rbp + 0x1c0]
sub rax, rsi
sar rax, 2
lea rdx, [rax*4]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000b518
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b518
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.18000f30c
nop
test rbx, rbx
je 0x18000b578
mov rcx, qword [rbp - 0x58]
sub rcx, rbx
mov rax, r14
imul rcx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000b570
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b570
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18000f30c
lea r11, [rsp + 0x4e8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret