Function at 0x180006d40
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x9b8]
sub rsp, 0xa90
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x18007a040]
xor rax, rsp
mov qword [rbp + 0x910], rax
xor r15d, r15d
mov dword [rbp - 0x60], r15d
lea rdx, [rbp - 0x60]
lea rcx, [0x18007ac20]
call fcn.18000fa20
mov r13, rax
mov qword [rbp - 0x58], rax
movabs rsi, 0x142378188
mov rsi, qword [rsi]
mov qword [rsp + 0x70], rsi
test rsi, rsi
je 0x18000bb46
mov rbx, qword [rsi + 0x48]
test rbx, rbx
je 0x18000bb46
cmp qword [rsi + 0x70], r15
je 0x18000bb46
mov rcx, qword [rsi + 0xd0]
test rcx, rcx
je 0x18000bb46
call fcn.180001a00
mov rdi, rax
mov qword [rbp - 0x40], rax
test rax, rax
je 0x18000bb46
mov rcx, rax
call fcn.180001990
mov qword [rbp + 0x670], rax
test rax, rax
je 0x18000bb46
mov rcx, rdi
call fcn.1800019a0
mov r14, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x18000bb46
mov rcx, rax
call fcn.1800015f0
mov qword [rbp - 0x38], rax
test rax, rax
je 0x18000bb46
lea rdi, [rax + 0x28]
test rdi, rdi
je 0x18000bb46
mov rcx, qword [rsi + 0xe0]
test rcx, rcx
je 0x18000bb46
call fcn.180001970
mov r12, rax
mov qword [rbp + 0x50], rax
test rax, rax
je 0x18000bb46
mov rdx, qword [rdi + 8]
test rdx, rdx
je 0x18000bb46
mov rdx, qword [rdx + 0xd0]
test rdx, rdx
je 0x18000bb46
lea rcx, [rbp + 0x8c8]
call fcn.18000bba0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x8c8], xmm1
mov qword [rbp + 0x8d8], r15
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 8]
mov dword [rbp - 0x5c], eax
movsd xmm11, qword [rbx + 0x17c0]
mov r15d, dword [rbx + 0x17c8]
mov dword [rsp + 0x68], r15d
mov rcx, qword [rsi + 0xc0]
xorps xmm10, xmm10
cmp byte [rcx + 0x70], 0
je 0x180006f08
cmp byte [rcx + 0x27c], 0
jne 0x180006f08
movss xmm1, dword [rcx + 0x60]
jmp 0x180006f0b
xorps xmm1, xmm1
movss xmm0, dword [0x18007abb4]
addss xmm0, xmm1
movss dword [0x18007abb4], xmm0
mov dword [0x18007abb0], 0x3d4ccccd
call fcn.180006ba0
movsd qword [rbp - 0x70], xmm11
mov dword [rbp - 0x68], r15d
mov rdx, r14
lea rcx, [rbp - 0x70]
call fcn.180006a30
movabs rcx, 0x1425f4158
mov rax, qword [rcx]
mov dword [rax + 0x98c], 0x98967f
mov dword [rax + 0x990], 0x98967f
mov rax, qword [rcx]
xor ecx, ecx
mov qword [rax + 0xf68], rcx
mov rcx, qword [rbp - 0x40]
call fcn.180001980
mov rbx, rax
lea rdx, str.survival_midgard_midgard_base
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007132
lea rdx, str.survival_midgard_midgard
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007132
lea rdx, str.survival_japan_japan_base
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000712b
lea rdx, str.survival_japan_japan_act1
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000712b
lea rdx, str.survival_japan_japan_act2
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000712b
lea rdx, str.survival_japan_japan_act3
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000712b
lea rdx, str.survival_japan_japan_act4
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000712b
lea rdx, str.survival_arachnid_arachnid_base
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007124
lea rdx, str.survival_arachnid_arachnid_act1
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007124
lea rdx, str.survival_arachnid_arachnid_act2
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007124
lea rdx, str.survival_arachnid_arachnid_act3
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007124
lea rdx, str.survival_arachnid_arachnid_act4
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007124
lea rdx, str.survival_icebreaker_icebreaker_base
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000711d
lea rdx, str.survival_icebreaker_icebreaker_act1
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000711d
lea rdx, str.survival_icebreaker_icebreaker_act2
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000711d
lea rdx, str.survival_icebreaker_icebreaker_act3
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000711d
lea rdx, str.survival_icebreaker_icebreaker_act4_boss
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000711d
mov byte [r13 + 0xf], al
mov byte [r13 + 0x11], al
mov word [r13 + 0xc], ax
jmp 0x180007137
mov byte [r13 + 0xd], 1
jmp 0x180007137
mov byte [r13 + 0xc], 1
jmp 0x180007137
mov byte [r13 + 0x11], 1
jmp 0x180007137
mov byte [r13 + 0xf], 1
mov rax, qword [r12]
mov rdx, qword [rax + 0x30]
mov rcx, r12
call rdx
mov rsi, rax
mov rdi, qword [rbp + 0x8d0]
test rax, rax
je 0x18000bac8
movss xmm12, dword [0x18007335c]
movss xmm9, dword [0x180073254]
nop dword [rax]
mov rcx, rsi
call fcn.180001600
test al, al
jne 0x18000baaf
mov dword [rbp - 0x80], 0
mov dword [rbp - 0x7c], 0
mov rcx, rsi
call fcn.180001610
mov rcx, rsi
call fcn.180001620
test rax, rax
je 0x18000baaf
mov rcx, rax
call fcn.1800015d0
mov rax, qword [rsi]
mov r8, qword [rax + 0xc8]
lea rdx, [rbp + 0x8b0]
mov rcx, rsi
call r8
mov rcx, rsi
call fcn.1800015f0
mov r12, rax
test rax, rax
je 0x18000baaf
mov r9d, 1
lea r8, str.Case
lea rdx, str.GeomEntity
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180007223
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
mov r9d, 1
lea r8, str.case_closed_active
lea rdx, str.BasicEntity
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x18000726c
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
mov r9d, 1
lea r8, str.Lootbox_Closed
lea rdx, str.GeomEntity
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x1800072b5
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
mov r9d, 1
lea r8, str.case
lea rdx, [0x18004261d]
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x1800072fe
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
mov r9d, 1
lea r8, str.K01_Item
lea rdx, [0x18004261d]
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180007347
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
mov r9d, 1
lea r8, str.Laptop
lea rdx, str.GeomEntity
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180007390
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
movzx r9d, byte [r13 + 0x1c]
lea r8, str.Boss_Eye
lea rdx, str.ShootingObject
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x1800075c3
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800075c3
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6a0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6a8], rax
lea rdx, [rbp + 0x6a0]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x60], xmm11
mov dword [rbp + 0x68], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180007500
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7cc]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x70]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x70]
movsd qword [rbp + 0x80], xmm3
mov eax, dword [rbp + 0x78]
mov dword [rbp + 0x88], eax
movsd qword [rbp + 0x90], xmm11
mov dword [rbp + 0x98], r15d
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x90]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x1800075b0
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x1800075b0
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7fc]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0xa0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0xa0]
movsd qword [rbp + 0xb0], xmm3
mov eax, dword [rbp + 0xa8]
mov dword [rbp + 0xb8], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180007511
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x1c]
lea r8, str.Boss_Dron_Body
lea rdx, str.ShootingObject
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180007812
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007812
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x680], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x688], rax
lea rdx, [rbp + 0x680]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0xc0], xmm11
mov dword [rbp + 0xc8], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180007745
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x814]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0xd0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0xd0]
movsd qword [rbp + 0xe0], xmm3
mov eax, dword [rbp + 0xd8]
mov dword [rbp + 0xe8], eax
movsd qword [rbp + 0xf0], xmm11
mov dword [rbp + 0xf8], r15d
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xf0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x1800077ff
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x1800077ff
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x820]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x100]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x100]
movsd qword [rbp + 0x110], xmm3
mov eax, dword [rbp + 0x108]
mov dword [rbp + 0x118], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x110]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180007760
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x14]
lea r8, str.explosive_barrels
lea rdx, str.DestroyableObject
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180007a62
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007a62
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6b0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6b8], rax
lea rdx, [rbp + 0x6b0]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x120], xmm11
mov dword [rbp + 0x128], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x120]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180007994
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x82c]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x130]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x130]
movsd qword [rbp + 0x140], xmm3
mov eax, dword [rbp + 0x138]
mov dword [rbp + 0x148], eax
movsd qword [rbp + 0x150], xmm11
mov dword [rbp + 0x158], r15d
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x150]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180007a4f
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x180007a4f
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x838]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x160]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x160]
movsd qword [rbp + 0x170], xmm3
mov eax, dword [rbp + 0x168]
mov dword [rbp + 0x178], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x170]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x1800079b0
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x16]
lea r8, str.BossEye
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180007cb2
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007cb2
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6c0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6c8], rax
lea rdx, [rbp + 0x6c0]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x180], xmm11
mov dword [rbp + 0x188], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x180]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180007be4
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7e4]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x190]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x190]
movsd qword [rbp + 0x1a0], xmm3
mov eax, dword [rbp + 0x198]
mov dword [rbp + 0x1a8], eax
movsd qword [rbp + 0x1b0], xmm11
mov dword [rbp + 0x1b8], r15d
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0x1b0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180007c9f
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x180007c9f
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x844]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x1c0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x1c0]
movsd qword [rbp + 0x1d0], xmm3
mov eax, dword [rbp + 0x1c8]
mov dword [rbp + 0x1d8], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180007c00
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x16]
lea r8, str.Eye_CoverProxy
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180007f02
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007f02
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6d0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6d8], rax
lea rdx, [rbp + 0x6d0]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x1e0], xmm11
mov dword [rbp + 0x1e8], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180007e34
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x850]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x1f0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x1f0]
movsd qword [rbp + 0x200], xmm3
mov eax, dword [rbp + 0x1f8]
mov dword [rbp + 0x208], eax
movsd qword [rbp + 0x210], xmm11
mov dword [rbp + 0x218], r15d
lea r8, [rbp + 0x200]
lea rdx, [rbp + 0x210]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180007eef
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x180007eef
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x85c]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x220]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x220]
movsd qword [rbp + 0x230], xmm3
mov eax, dword [rbp + 0x228]
mov dword [rbp + 0x238], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x230]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180007e50
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x16]
lea r8, str.BossThroat
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180008152
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008152
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6e0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6e8], rax
lea rdx, [rbp + 0x6e0]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x240], xmm11
mov dword [rbp + 0x248], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180008084
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x868]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x250]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x250]
movsd qword [rbp + 0x260], xmm3
mov eax, dword [rbp + 0x258]
mov dword [rbp + 0x268], eax
movsd qword [rbp + 0x270], xmm11
mov dword [rbp + 0x278], r15d
lea r8, [rbp + 0x260]
lea rdx, [rbp + 0x270]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000813f
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x18000813f
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x874]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x280]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x280]
movsd qword [rbp + 0x290], xmm3
mov eax, dword [rbp + 0x288]
mov dword [rbp + 0x298], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x290]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x1800080a0
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x17]
lea r8, str.Corridor_Pipe
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180008383
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6f0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6f8], rax
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x2a0], xmm11
mov dword [rbp + 0x2a8], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x1800082c0
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x880]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x2b0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x2b0]
movsd qword [rbp + 0x2c0], xmm3
mov eax, dword [rbp + 0x2b8]
mov dword [rbp + 0x2c8], eax
movsd qword [rbp + 0x2d0], xmm11
mov dword [rbp + 0x2d8], r15d
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x2d0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180008370
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x180008370
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x88c]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x2e0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x2e0]
movsd qword [rbp + 0x2f0], xmm3
mov eax, dword [rbp + 0x2e8]
mov dword [rbp + 0x2f8], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x1800082d1
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x18]
lea r8, str.Hive
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x1800085b4
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x700], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x708], rax
lea rdx, [rbp + 0x700]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x300], xmm11
mov dword [rbp + 0x308], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x300]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x1800084f1
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x760]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x310]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x310]
movsd qword [rbp + 0x320], xmm3
mov eax, dword [rbp + 0x318]
mov dword [rbp + 0x328], eax
movsd qword [rbp + 0x330], xmm11
mov dword [rbp + 0x338], r15d
lea r8, [rbp + 0x320]
lea rdx, [rbp + 0x330]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x1800085a1
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x1800085a1
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x76c]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x340]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x340]
movsd qword [rbp + 0x350], xmm3
mov eax, dword [rbp + 0x348]
mov dword [rbp + 0x358], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x350]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008502
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x19]
lea r8, str.Heli
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x1800087f2
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x710], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x718], rax
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x360], xmm11
mov dword [rbp + 0x368], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x360]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180008722
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x778]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x370]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x370]
movsd qword [rbp + 0x380], xmm3
mov eax, dword [rbp + 0x378]
mov dword [rbp + 0x388], eax
movsd qword [rbp + 0x390], xmm11
mov dword [rbp + 0x398], r15d
lea r8, [rbp + 0x380]
lea rdx, [rbp + 0x390]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x1800087df
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x1800087df
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x784]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x3a0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x3a0]
movsd qword [rbp + 0x3b0], xmm3
mov eax, dword [rbp + 0x3a8]
mov dword [rbp + 0x3b8], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008740
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x1a]
lea r8, str.ShootingTarget_duck
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180008a23
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x720], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x728], rax
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x3c0], xmm11
mov dword [rbp + 0x3c8], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x3c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180008960
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x790]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x3d0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x3d0]
movsd qword [rbp + 0x3e0], xmm3
mov eax, dword [rbp + 0x3d8]
mov dword [rbp + 0x3e8], eax
movsd qword [rbp + 0x3f0], xmm11
mov dword [rbp + 0x3f8], r15d
lea r8, [rbp + 0x3e0]
lea rdx, [rbp + 0x3f0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180008a10
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x180008a10
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x898]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x400]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x400]
movsd qword [rbp + 0x410], xmm3
mov eax, dword [rbp + 0x408]
mov dword [rbp + 0x418], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x410]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008971
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x1d]
lea r8, str.Bottom
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180008c72
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008c72
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x730], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x738], rax
lea rdx, [rbp + 0x730]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x420], xmm11
mov dword [rbp + 0x428], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x420]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180008ba5
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x79c]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x430]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x430]
movsd qword [rbp + 0x440], xmm3
mov eax, dword [rbp + 0x438]
mov dword [rbp + 0x448], eax
movsd qword [rbp + 0x450], xmm11
mov dword [rbp + 0x458], r15d
lea r8, [rbp + 0x440]
lea rdx, [rbp + 0x450]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180008c5f
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x180008c5f
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7a8]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x460]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x460]
movsd qword [rbp + 0x470], xmm3
mov eax, dword [rbp + 0x468]
mov dword [rbp + 0x478], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x470]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008bc0
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
movzx r9d, byte [r13 + 0x1d]
lea r8, str.shootT_mine2
lea rdx, str.ShootingTarget
mov rcx, rsi
call fcn.180006ca0
test al, al
je 0x180008ec2
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008ec2
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x740], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x748], rax
lea rdx, [rbp + 0x740]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x480], xmm11
mov dword [rbp + 0x488], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x480]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
cmp byte [r13 + 5], 0
jne 0x180008df4
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7b4]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x490]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x490]
movsd qword [rbp + 0x4a0], xmm3
mov eax, dword [rbp + 0x498]
mov dword [rbp + 0x4a8], eax
movsd qword [rbp + 0x4b0], xmm11
mov dword [rbp + 0x4b8], r15d
lea r8, [rbp + 0x4a0]
lea rdx, [rbp + 0x4b0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180008eaf
xor ebx, ebx
mov rdi, qword [rbp + 0x8e0]
cmp dword [rdi], ebx
jle 0x180008eaf
nop word [rax + rax]
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7c0]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x4c0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x4c0]
movsd qword [rbp + 0x4d0], xmm3
mov eax, dword [rbp + 0x4c8]
mov dword [rbp + 0x4d8], eax
mov rcx, rsi
call fcn.1800015e0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008e10
lea rcx, [rbp + 0x8e0]
call fcn.18000f4e0
mov rdi, qword [rbp + 0x8d0]
cmp byte [r13 + 0x1d], 0
je 0x1800097e1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800091c5
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.laymore
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800091c5
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800091c5
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x750], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x758], rax
lea rdx, [rbp + 0x750]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x4e0], xmm11
mov dword [rbp + 0x4e8], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x4e0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
mov r14, qword [rbp + 0x8e0]
cmp byte [r13 + 5], 0
jne 0x180009087
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x808]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x4f0]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x4f0]
movsd qword [rbp + 0x500], xmm3
mov eax, dword [rbp + 0x4f8]
mov dword [rbp + 0x508], eax
movsd qword [rbp + 0x510], xmm11
mov dword [rbp + 0x518], r15d
lea r8, [rbp + 0x500]
lea rdx, [rbp + 0x510]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180009171
xor ebx, ebx
cmp dword [r14], ebx
jle 0x180009171
mov rdi, qword [rbp + 0x8d0]
nop dword [rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x180009149
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x180009164
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc ebx
cmp ebx, dword [r14]
jl 0x1800090a0
jmp 0x180009178
mov rdi, qword [rbp + 0x8d0]
test r14, r14
je 0x1800091c0
mov rax, qword [rbp + 0x8f0]
sub rax, r14
sar rax, 2
lea rdx, [rax*4]
mov rax, r14
cmp rdx, 0x1000
jb 0x1800091b8
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000bb99
mov rcx, r14
call fcn.18004030c
mov r14, qword [rsp + 0x78]
cmp byte [r13 + 0x1d], 0
je 0x1800097e1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800094c1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.S01_ShootingTarget1
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800094c1
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800094c1
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x690], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x698], rax
lea rdx, [rbp + 0x690]
lea rcx, [rbp + 0x8e0]
call fcn.18000f540
nop
movsd qword [rbp + 0x520], xmm11
mov dword [rbp + 0x528], r15d
movzx eax, byte [r14 + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x520]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [r14 + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001c30
mov rdx, rax
lea rcx, [rbp + 0x8c8]
call fcn.18000fcd0
mov rcx, rsi
call fcn.1800015e0
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call fcn.1800015a0
mov r14, qword [rbp + 0x8e0]
cmp byte [r13 + 5], 0
jne 0x18000938a
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7d8]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x530]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x530]
movsd qword [rbp + 0x540], xmm3
mov eax, dword [rbp + 0x538]
mov dword [rbp + 0x548], eax
movsd qword [rbp + 0x550], xmm11
mov dword [rbp + 0x558], r15d
lea r8, [rbp + 0x540]
lea rdx, [rbp + 0x550]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180009472
xor r15d, r15d
mov ebx, r15d
cmp dword [r14], r15d
jle 0x180009472
mov rdi, qword [rbp + 0x8d0]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], r15d
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], r15d
mov byte [rsp + 0x64], r15b
cmp rdi, qword [rbp + 0x8d8]
je 0x18000944a
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x180009465
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc ebx
cmp ebx, dword [r14]
jl 0x1800093a0
jmp 0x180009479
mov rdi, qword [rbp + 0x8d0]
test r14, r14
je 0x1800094c1
mov rax, qword [rbp + 0x8f0]
sub rax, r14
sar rax, 2
lea rdx, [rax*4]
mov rax, r14
cmp rdx, 0x1000
jb 0x1800094b9
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000bb99
mov rcx, r14
call fcn.18004030c
cmp byte [r13 + 0x1d], 0
je 0x1800097e1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800097e1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.S02_ShootingTarget1
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800097e1
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800097e1
lea rcx, [rbp + 0x8e0]
call fcn.18000bba0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x1800095e2
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x1800095fd
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x1800096bc
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x8a4]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x560]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x560]
movsd qword [rbp + 0x570], xmm3
mov eax, dword [rbp + 0x568]
mov dword [rbp + 0x578], eax
movsd qword [rbp + 0x580], xmm11
mov dword [rbp + 0x588], r14d
lea r8, [rbp + 0x570]
lea rdx, [rbp + 0x580]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x1800097a0
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x1800097a0
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x180009779
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x180009794
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x1800096d0
test rbx, rbx
je 0x1800097e1
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x1800097d9
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x1e], 0
je 0x180009af7
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180009af7
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.apsule
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180009af7
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009af7
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x180009900
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000991b
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x1800099da
lea r8, [rbp + 0x8bc]
lea rdx, [rbp + 0x8b0]
lea rcx, [rbp + 0x7f0]
call fcn.18000fe30
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x590]
call fcn.18000fe70
movsd xmm3, qword [rbp + 0x590]
movsd qword [rbp + 0x5a0], xmm3
mov eax, dword [rbp + 0x598]
mov dword [rbp + 0x5a8], eax
movsd qword [rbp + 0x5b0], xmm11
mov dword [rbp + 0x5b8], r14d
lea r8, [rbp + 0x5a0]
lea rdx, [rbp + 0x5b0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180009ab6
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x180009ab6
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x180009a8f
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x180009aaa
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x1800099e6
test rbx, rbx
je 0x180009af7
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x180009aef
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x13], 0
je 0x18000a451
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180009e11
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.Core
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180009e11
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009e11
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x180009c16
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x180009c31
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x180009cf2
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm1
movss dword [rbp - 0x18], xmm2
movsd qword [rbp + 0x5c0], xmm11
mov dword [rbp + 0x5c8], r14d
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x5c0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x180009dd0
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x180009dd0
nop
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x180009da9
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x180009dc4
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x180009d00
test rbx, rbx
je 0x180009e11
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x180009e09
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x13], 0
je 0x18000a451
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000a131
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.CenterCapsule
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000a131
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a131
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x180009f30
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x180009f4b
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000a00c
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm1
movss dword [rbp - 8], xmm2
movsd qword [rbp + 0x5d0], xmm11
mov dword [rbp + 0x5d8], r14d
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x5d0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000a0f0
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000a0f0
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x18000a0c9
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000a0e4
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000a020
test rbx, rbx
je 0x18000a131
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000a129
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x13], 0
je 0x18000a451
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000a451
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.Capsule
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000a451
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a451
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000a250
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000a26b
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000a32c
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp], xmm0
movss dword [rbp + 4], xmm1
movss dword [rbp + 8], xmm2
movsd qword [rbp + 0x5e0], xmm11
mov dword [rbp + 0x5e8], r14d
lea r8, [rbp]
lea rdx, [rbp + 0x5e0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000a410
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000a410
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x18000a3e9
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000a404
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000a340
test rbx, rbx
je 0x18000a451
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000a449
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x15], 0
je 0x18000adb1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000a771
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.Laser
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000a771
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a771
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000a570
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000a58b
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000a64c
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp + 0x10], xmm0
movss dword [rbp + 0x14], xmm1
movss dword [rbp + 0x18], xmm2
movsd qword [rbp + 0x5f0], xmm11
mov dword [rbp + 0x5f8], r14d
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x5f0]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000a730
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000a730
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x18000a709
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000a724
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000a660
test rbx, rbx
je 0x18000a771
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000a769
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x15], 0
je 0x18000adb1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000aa91
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.ShootingTarget_base
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000aa91
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000aa91
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000a890
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000a8ab
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000a96c
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm1
movss dword [rbp + 0x28], xmm2
movsd qword [rbp + 0x600], xmm11
mov dword [rbp + 0x608], r14d
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x600]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000aa50
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000aa50
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x18000aa29
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000aa44
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000a980
test rbx, rbx
je 0x18000aa91
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000aa89
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x15], 0
je 0x18000adb1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000adb1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.Platform
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000adb1
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000adb1
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000abb0
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000abcb
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000ac8c
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp + 0x30], xmm0
movss dword [rbp + 0x34], xmm1
movss dword [rbp + 0x38], xmm2
movsd qword [rbp + 0x610], xmm11
mov dword [rbp + 0x618], r14d
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x610]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000ad70
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000ad70
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x18000ad49
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000ad64
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000aca0
test rbx, rbx
je 0x18000adb1
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000ada9
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x12], 0
je 0x18000b3f1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000b0d1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.ShootingTarget185
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000b0d1
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b0d1
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rax, qword [rsp + 0x78]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000aed0
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000aeeb
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000afac
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp + 0x40], xmm0
movss dword [rbp + 0x44], xmm1
movss dword [rbp + 0x48], xmm2
movsd qword [rbp + 0x620], xmm11
mov dword [rbp + 0x628], r14d
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x620]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000b090
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000b090
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x18000b069
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000b084
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000afc0
test rbx, rbx
je 0x18000b0d1
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000b0c9
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x12], 0
je 0x18000b3f1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000b3f1
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.ShootingTarget201
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000b3f1
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b3f1
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r15, [rax + 4]
mov qword [rbp + 0x8f0], r15
mov dword [rax], 1
mov qword [rbp + 0x8e8], r15
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000b1f0
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000b20b
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000b2cc
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp - 0x30], xmm0
movss dword [rbp - 0x2c], xmm1
movss dword [rbp - 0x28], xmm2
movsd qword [rbp + 0x630], xmm11
mov dword [rbp + 0x638], r14d
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x630]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000b3b0
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000b3b0
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x8d8]
je 0x18000b389
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000b3a4
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000b2e0
test rbx, rbx
je 0x18000b3f1
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000b3e9
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
cmp byte [r13 + 0x1b], 0
je 0x18000b6f9
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000b6f9
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
lea rdx, str.Smart_mine
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000b6f9
xorps xmm0, xmm0
movups xmmword [rbp + 0x8f8], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8f8], rax
lea r15, [rax + 4]
mov qword [rbp + 0x908], r15
mov dword [rax], 1
mov qword [rbp + 0x900], r15
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000b4fc
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000b517
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm12
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000b5d8
movss xmm2, dword [rbp + 0x8c4]
addss xmm2, dword [rbp + 0x8b8]
movss xmm1, dword [rbp + 0x8c0]
addss xmm1, dword [rbp + 0x8b4]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x8bc]
addss xmm0, dword [rbp + 0x8b0]
mulss xmm0, xmm9
movss dword [rbp - 0x70], xmm0
movss dword [rbp - 0x6c], xmm1
movss dword [rbp - 0x68], xmm2
movsd qword [rbp + 0x640], xmm11
mov dword [rbp + 0x648], r14d
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x640]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000b6b8
xor r12d, r12d
mov r14d, r12d
cmp dword [rbx], r12d
jle 0x18000b6b8
movss xmm8, dword [rbp + 0x8c4]
addss xmm8, dword [rbp + 0x8b8]
movss xmm7, dword [rbp + 0x8c0]
addss xmm7, dword [rbp + 0x8b4]
movss xmm6, dword [rbp + 0x8bc]
addss xmm6, dword [rbp + 0x8b0]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], r12d
mov byte [rsp + 0x64], r12b
cmp rdi, qword [rbp + 0x8d8]
je 0x18000b691
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000b6ac
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000b5e7
test rbx, rbx
je 0x18000b6f9
sub r15, rbx
sar r15, 2
lea rdx, [r15*4]
cmp rdx, 0x1000
jb 0x18000b6f1
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xc8]
call rdx
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, qword [rcx + 8]
mov rcx, rsi
call rdx
mov rcx, qword [rbx]
mov r8, qword [rcx + 0x78]
mov edx, eax
mov rcx, rbx
call r8
mov rsi, rax
test rax, rax
je 0x18000baa5
cmp byte [r13 + 0x1f], 0
je 0x18000b74d
mov ecx, 0x54
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x18000b7d7
cmp byte [r13 + 0x20], 0
je 0x18000b763
mov ecx, 0x55
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x18000b779
movabs rax, 0x1425f4158
mov rax, qword [rax]
cmp dword [rax + 0x708], 6
jne 0x18000b79f
mov r14, qword [rsp + 0x78]
cmp r14, rsi
je 0x18000baaa
mov rax, qword [rsi]
mov rdx, qword [rax + 0xe0]
mov rcx, rsi
call rdx
test eax, eax
jg 0x18000b7d7
jmp 0x18000baaa
mov r14, qword [rsp + 0x78]
mov eax, dword [r14 + 0x3e0]
cmp eax, dword [rsi + 0x3e0]
je 0x18000baaa
cmp r14, rsi
je 0x18000baaa
mov rax, qword [rsi]
mov rdx, qword [rax + 0xe0]
mov rcx, rsi
call rdx
test eax, eax
jle 0x18000baaa
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x18000baa5
mov rax, qword [r14]
mov rdx, qword [rax + 0x60]
mov rcx, r14
call rdx
mov r15, rax
mov rcx, qword [r14]
mov rdx, qword [rcx + 0x18]
mov rcx, r14
call rdx
test rax, rax
je 0x18000baa5
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, qword [rcx + 0x130]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
lea rcx, [rbp - 0x7c]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
mov r9, rbx
mov r8, r15
mov rdx, rax
mov rcx, qword [rbp + 0x670]
call fcn.180006620
test al, al
je 0x18000baa5
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
mov ecx, 4
call fcn.18003ff60
mov rbx, rax
mov qword [rbp + 0x8e0], rax
lea r13, [rax + 4]
mov qword [rbp + 0x8f0], r13
mov dword [rax], 1
mov qword [rbp + 0x8e8], r13
mov r14, qword [rsp + 0x78]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm11
mov r15d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r15d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000b920
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000b93b
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
mov rax, qword [rbp - 0x58]
cmp byte [rax + 5], 0
jne 0x18000b98f
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbp + 0x650], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rbp + 0x658], eax
movsd qword [rbp + 0x660], xmm11
mov dword [rbp + 0x668], r15d
lea r8, [rbp + 0x650]
lea rdx, [rbp + 0x660]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x70]
call fcn.180001ad0
test al, al
je 0x18000ba5e
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000ba59
movss xmm6, dword [rbp - 0x48]
movss xmm7, dword [rbp - 0x4c]
movss xmm8, dword [rbp - 0x50]
mov r15d, dword [rbp - 0x80]
mov r12d, dword [rbp - 0x7c]
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], r15d
movss dword [rsp + 0x54], xmm8
movss dword [rsp + 0x58], xmm7
movss dword [rsp + 0x5c], xmm6
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x8d8]
je 0x18000ba2d
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x8d0], rdi
jmp 0x18000ba48
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x8c8]
call fcn.180010770
mov rdi, qword [rbp + 0x8d0]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000b9c0
mov r15d, dword [rsp + 0x68]
mov r14, qword [rsp + 0x78]
test rbx, rbx
je 0x18000ba9f
sub r13, rbx
sar r13, 2
lea rdx, [r13*4]
cmp rdx, 0x1000
jb 0x18000ba97
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000bb99
mov rbx, rcx
mov rcx, rbx
call fcn.18004030c
mov r13, qword [rbp - 0x58]
jmp 0x18000baaf
mov r14, qword [rsp + 0x78]
mov r15d, dword [rsp + 0x68]
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x30]
call rdx
mov rsi, rax
test rax, rax
jne 0x180007170
cmp byte [r13 + 2], 0
je 0x18000bb3a
movss xmm0, dword [0x18007abb4]
comiss xmm0, dword [0x18007abb0]
jb 0x18000bb3a
cmp qword [rbp + 0x8c8], rdi
je 0x18000bb30
mov rbx, qword [rbp - 0x38]
mov rcx, rbx
call fcn.1800017e0
test al, al
je 0x18000bb30
mov rcx, rbx
call fcn.1800017e0
test al, al
je 0x18000bb30
lea rdx, [rbp + 0x8c8]
lea rcx, [rbp + 0x8f8]
call fcn.18000fd10
mov rdx, rax
mov ecx, dword [rbp - 0x5c]
call fcn.180006a80
mov rcx, rbx
call fcn.180006c30
call fcn.180006ba0
mov dword [0x18007abb4], 0
lea rcx, [rbp + 0x8c8]
call fcn.18000ff00
mov rcx, qword [rbp + 0x910]
xor rcx, rsp
call fcn.18003ff40
lea r11, [rsp + 0xa90]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop