Function at 0x180002ae8
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x200
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
mov rax, qword [0x18003b010]
xor rax, rsp
mov qword [rbp + 0x78], rax
movabs rax, 0x1423a1b90
mov r15, qword [rax]
mov qword [rbp - 0x58], r15
xor r13d, r13d
test r15, r15
je 0x18000494e
mov rbx, qword [r15 + 0xd0]
test rbx, rbx
je 0x18000494e
mov rax, qword [rbx]
mov rdx, qword [rax + 0x78]
mov rcx, rbx
call rdx
mov rdi, rax
mov qword [rbp - 0x18], rax
test rax, rax
je 0x18000494e
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xc8]
mov rcx, rax
call rdx
mov qword [rbp - 0x38], rax
test rax, rax
je 0x18000494e
mov rcx, qword [r15 + 0xe0]
test rcx, rcx
je 0x18000494e
mov rdx, qword [rcx]
mov r8, qword [rdx + 0xa8]
call r8
mov qword [rbp - 0x60], rax
test rax, rax
je 0x18000494e
mov qword [rbp + 0x18], r13
mov rcx, qword [rdi]
mov r8, qword [rcx + 0x470]
lea rdx, [rbp + 0x18]
mov rcx, rdi
call r8
test al, al
jne 0x180002bff
mov r14d, r13d
mov qword [rbp + 0x18], r13
jmp 0x180002c03
mov r14, qword [rbp + 0x18]
mov qword [rsp + 0x58], r14
test r14, r14
je 0x18000494e
mov rax, qword [r14]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, r14
call r8
mov qword [rbp - 0x28], rax
test rax, rax
je 0x18000494e
lea rsi, [rax + 0x28]
mov qword [rbp - 0x20], rsi
test rsi, rsi
je 0x18000494e
mov rsi, qword [rsi + 8]
test rsi, rsi
je 0x18000494e
mov r12, qword [rsi + 0xc8]
test r12, r12
je 0x18000494e
mov rax, qword [rdi]
mov rdx, qword [rax + 0x448]
mov rcx, rdi
call rdx
mov r9, rax
mov qword [rbp - 0x68], rax
test rax, rax
je 0x18000494e
mov r13, qword [rbx + 0x320]
xor edx, edx
test r13, r13
je 0x18000494e
mov rdi, qword [r14 + 0xd80]
test rdi, rdi
je 0x18000494e
mov r15, qword [r15 + 0xc0]
test r15, r15
je 0x18000494e
mov rax, qword [rbp - 0x58]
mov rbx, qword [rax + 0x40]
test rbx, rbx
je 0x18000494e
mov rcx, qword [rax + 0x48]
mov qword [rbp - 0x30], rcx
xorps xmm13, xmm13
and dword [rbp + 0x68], edx
and dword [rbp + 0x6c], edx
and dword [rbp + 0x70], edx
and dword [rbp + 0x58], edx
and dword [rbp + 0x5c], edx
and dword [rbp + 0x60], edx
cmp qword [r14 + 0x18], rdx
je 0x18000494e
mov rax, qword [rsi + 0xb8]
cmp rax, 0x31
ja 0x180002d10
movabs rcx, 0x300000001f048
bt rcx, rax
jae 0x180002d10
xor esi, esi
mov byte [0x18003b077], sil
jmp 0x180002d19
mov byte [0x18003b077], 1
xor esi, esi
mov cl, 0x49
mov dword [rsp + 0x40], 0x3d282449
mov dword [rsp + 0x44], 0x282c2116
mov word [rsp + 0x48], 0x2d
mov rax, rsi
xor byte [rsp + rax + 0x41], cl
inc rax
cmp rax, 8
jae 0x180002d48
mov cl, byte [rsp + 0x40]
jmp 0x180002d35
mov byte [rsp + 0x49], sil
mov rax, qword [r9]
mov r8, qword [rax + 0x3a0]
lea rdx, [rsp + 0x41]
mov rcx, r9
call r8
mov dword [rsp + 0x70], eax
cmp byte [0x18003b05d], sil
je 0x180002d73
mov dword [r13 + 0x10], esi
cmp byte [0x18003b0d2], sil
je 0x180002d9e
mov byte [rdi + 0xb4], sil
movss dword [rdi + 0xb8], xmm13
movss dword [rdi + 0xbc], xmm13
movss dword [rdi + 0xc0], xmm13
cmp byte [0x18003b0d1], sil
je 0x180002dbc
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
mov r8, qword [rax + 0x58]
lea rdx, str.Error404
call r8
mov edi, 0x5a
cmp byte [0x18003b0a8], sil
je 0x180002df8
mov ecx, edi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002df8
mov rax, qword [rbx]
mov qword [rsp + 0x20], rsi
lea r9, [0x1800284fc]
mov r8d, 0x2a8
lea rdx, str.function_GetPlayerLook__local_aSystem.GetViewCameraPos__local_bSystem.GetViewCameraDir__local_cScaleVector_b_100_local_dDifferenceVectors_a_c_local_elocal_fPhysics.RayWorldIntersection_a_c_1_ent_terrainent_staticent_rigident_sleeping_rigident_living_g_localActor.id_NULL_ENTITY_e_return_e_1_end_function_SpawnHelper3_g_local_hGetPlayerLook__if_h_then_if_LastHelpers_then_LastHelpers:DeleteThis__end_local_ih.pos_local_jclass_RigidBodyEx__positioni_scalex1_y1_z1_name_HuliNado__propertiesobject_Model_objects_helpers_special_moves_vault_50_20cm.cgf_local_kSystem.SpawnEntity_j_k:SetAngles_g_localActor:GetAngles___LastHelpersk_end_end_SpawnHelper3__
mov rcx, rbx
call qword [rax + 0x30]
cmp byte [0x18003b0a9], sil
je 0x180002e32
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180002e32
mov rax, qword [rbx]
mov qword [rsp + 0x20], rsi
lea r9, [0x1800284fd]
mov r8d, 0x2aa
lea rdx, str.function_GetPlayerLook__local_aSystem.GetViewCameraPos__local_bSystem.GetViewCameraDir__local_cScaleVector_b_100_local_dDifferenceVectors_a_c_local_elocal_fPhysics.RayWorldIntersection_a_c_1_ent_terrainent_staticent_rigident_sleeping_rigident_living_g_localActor.id_NULL_ENTITY_e_return_e_1_end_function_SpawnHelper3_g_local_hGetPlayerLook__if_h_then_if_LastHelpers_then_LastHelpers:DeleteThis__end_local_ih.pos_local_jclass_RigidBodyEx__positioni_scalex1_y1_z1_name_HuliNado__propertiesobject_Model_objects_helpers_special_moves_climb_380_200cm.cgf_local_kSystem.SpawnEntity_j_k:SetAngles_g_localActor:GetAngles___LastHelpersk_end_end_SpawnHelper3__
mov rcx, rbx
call qword [rax + 0x30]
cmp byte [0x18003b05e], sil
je 0x180002e6a
mov ecx, edi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea rcx, [rbp + 0x38]
test ax, ax
lea rdx, str.g_localActor:SetColliderMode_1__
jne 0x180002e5a
lea rdx, str.g_localActor:SetColliderMode_0__
call fcn.1800066b4
mov rdx, rax
mov rcx, rbx
call fcn.1800015fc
cmp byte [0x18003b0ab], sil
je 0x180002e9b
mov ecx, edi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180002e9b
lea rdx, str.local_l_pos__g_localActor:GetPos___l_pos.z__l_pos.z5_g_localActor:SetPos_l_pos__
lea rcx, [rbp + 0x38]
call fcn.1800066b4
mov rdx, rax
mov rcx, rbx
call fcn.1800015fc
cmp byte [0x18003b0af], sil
je 0x180002ecc
mov ecx, edi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180002ecc
lea rdx, str.g_localActor:SetPos_x77.0004_y103.8653_z50__
lea rcx, [rbp + 0x38]
call fcn.1800066b4
mov rdx, rax
mov rcx, rbx
call fcn.1800015fc
cmp byte [r15 + 0x70], sil
je 0x180002ee3
cmp byte [r15 + 0x27c], sil
jne 0x180002ee3
movss xmm1, dword [r15 + 0x60]
jmp 0x180002ee7
movaps xmm1, xmm13
movss xmm0, dword [0x18003b930]
addss xmm0, xmm1
movss dword [0x18003b930], xmm0
movss xmm9, dword [0x180037f3c]
mov dword [0x18003b8d0], 0x3f000000
call fcn.180002058
lea rdx, [rsp + 0x60]
mov rcx, qword [r14 + 0x10]
call fcn.180001224
movss xmm10, dword [rsp + 0x60]
movss dword [0x18003b950], xmm10
movss xmm11, dword [rsp + 0x64]
movss dword [0x18003b954], xmm11
movss xmm12, dword [rsp + 0x68]
movss dword [0x18003b958], xmm12
mov al, byte [r14 + 0xce4]
mov byte [0x18003b96c], al
mov dword [0x18003b9a8], 1
movss dword [0x18003b9b0], xmm10
movss dword [0x18003b9b4], xmm11
movss dword [0x18003b9b8], xmm12
movss dword [0x18003b960], xmm10
movss dword [0x18003b964], xmm11
movss dword [0x18003b968], xmm12
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 8]
mov dword [0x18003b920], eax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov qword [rbp + 0x30], rsi
mov cl, 0x62
mov dword [rsp + 0x40], 0x16030f62
mov dword [rsp + 0x44], 0x3070a3d
mov word [rsp + 0x48], 6
mov rax, rsi
xor byte [rsp + rax + 0x41], cl
inc rax
cmp rax, 8
jae 0x180002fe9
mov cl, byte [rsp + 0x40]
jmp 0x180002fd6
mov byte [rsp + 0x49], sil
mov rcx, qword [rbp - 0x68]
mov rax, qword [rcx]
mov r8, qword [rax + 0x3a0]
lea rdx, [rsp + 0x41]
call r8
mov ebx, eax
mov dword [rsp + 0x50], eax
cmp byte [0x18003b06a], sil
je 0x1800030f1
mov ecx, 0x74
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800030f1
mov dl, byte [r14 + 0xce4]
mov ecx, dword [r14 + 0x20]
mov dword [rbp - 0x10], ecx
mov dword [rbp - 0xc], ebx
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], 0
mov byte [rbp + 0x10], dl
lea r8, [rbp - 0x10]
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.18000686c
lea rdx, [rbp - 0x80]
mov rcx, qword [r14 + 0x10]
call fcn.180001224
mov dl, byte [r14 + 0xce4]
mov ecx, dword [r14 + 0x20]
mov dword [rbp - 0x10], ecx
mov dword [rbp - 0xc], 1
mov qword [rbp - 8], 1
xor ebx, ebx
movsd xmm0, qword [rax]
movsd qword [rbp], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 8], eax
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], dl
mov rsi, qword [rbp + 0x28]
cmp rsi, qword [rbp + 0x30]
je 0x1800030df
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x18000450e
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
jmp 0x1800030f3
xor ebx, ebx
mov rsi, qword [rbp + 0x28]
jmp 0x18000450e
mov rcx, qword [r13]
mov rdx, qword [rcx + 0x178]
mov rcx, r13
call rdx
test al, al
jne 0x18000450e
mov rax, qword [r13]
mov rdx, qword [rax + 0x18]
mov rcx, r13
call rdx
mov rbx, rax
test rax, rax
je 0x18000450c
mov rcx, qword [r13]
mov rdx, qword [rcx + 0x60]
mov rcx, r13
call rdx
mov r15, rax
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x10]
mov rcx, rbx
call rdx
mov rdi, rax
mov qword [rsp + 0x40], rax
mov rcx, qword [r13]
mov rdx, qword [rcx + 8]
mov rcx, r13
call rdx
mov r12d, eax
mov dword [rbp - 0x70], eax
mov rcx, qword [r13]
mov r8, qword [rcx + 0xc8]
lea rdx, [rbp + 0x38]
mov rcx, r13
call r8
and dword [rsp + 0x60], 0
and dword [rsp + 0x64], 0
and dword [rsp + 0x68], 0
lea rdx, str.ShootingTarget
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
xor ebx, ebx
test rax, rax
je 0x180003f5d
cmp byte [0x18003b0c3], bl
je 0x18000331c
lea ecx, [rbx + 0x56]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000331c
lea rdx, str.BossEye
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003204
lea rdx, str.Eye_CoverProxy
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003204
lea rdx, str.BossThroat
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000331c
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x180003264
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003278
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x1800032f9
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x18000330d
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003280
jmp 0x180004507
cmp byte [0x18003b0c5], bl
je 0x180003483
lea rdx, [0x180028f04]
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000336b
lea rdx, str.Platform
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x18000336b
lea rdx, str.Laser
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003483
mov eax, dword [r14 + 0x20]
mov cl, byte [r14 + 0xce4]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x1800033cb
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x1800033df
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 5
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x180003460
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003474
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x1800033e7
jmp 0x180004507
cmp byte [0x18003b0c6], bl
je 0x1800035d4
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800035d4
lea rdx, str.Hive
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800035d4
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x18000351c
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003530
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x1800035b1
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x1800035c5
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003538
jmp 0x180004507
cmp byte [0x18003b0c7], bl
je 0x180003725
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180003725
lea rdx, [0x180028f2c]
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003725
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x18000366d
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003681
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x180003702
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003716
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003689
jmp 0x180004507
cmp byte [0x18003b0c8], bl
je 0x18000388b
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000388b
lea rdx, str.weakpoint
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003773
lea rdx, str._Generator
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000388b
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x1800037d3
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x1800037e7
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x180003868
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x18000387c
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x1800037ef
jmp 0x180004507
cmp byte [0x18003b0ce], bl
je 0x1800039dc
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800039dc
lea rdx, str.ShootingTarget_duck
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800039dc
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x180003924
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003938
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x1800039b9
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x1800039cd
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003940
jmp 0x180004507
cmp byte [0x18003b0cf], bl
je 0x180003b2d
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180003b2d
lea rdx, str.Smart_mine
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003b2d
mov eax, dword [r14 + 0x20]
mov cl, byte [r14 + 0xce4]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x180003a75
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003a89
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x180003b0a
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003b1e
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003a91
jmp 0x180004507
cmp byte [0x18003b057], bl
je 0x180003c93
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180003c93
lea rdx, str.ShootingTarget185
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003b7b
lea rdx, str.ShootingTarget201
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003c93
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x180003bdb
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003bef
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x32
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x180003c70
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003c84
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003bf7
jmp 0x180004507
cmp byte [0x18003b059], bl
je 0x180003de1
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180003de1
lea rdx, str.S00_ShootingTarget_Heli
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003de1
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x180003d2c
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003d40
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 3
xor edi, edi
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], edi
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], edi
mov byte [rbp + 0x10], dil
cmp rsi, qword [rbp + 0x30]
je 0x180003dbe
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003dd2
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003d47
mov rdi, qword [rsp + 0x40]
cmp byte [0x18003b05a], bl
je 0x180003f5d
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180003f5d
lea rdx, str.Boss_ShootingTarget
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003e44
lea rdx, str.Core
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003e44
lea rdx, str.apsule
mov rcx, r15
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003f5d
mov eax, dword [r14 + 0x20]
mov cl, byte [r14 + 0xce4]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], 0
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x180003ea5
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003eb9
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x180003f3a
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180003f4e
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180003ec1
jmp 0x180004507
cmp byte [0x18003b0cd], bl
je 0x1800040af
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800040af
lea rdx, str.heavydroid_rocket
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800040af
mov eax, dword [r14 + 0x20]
mov cl, byte [r14 + 0xce4]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x50]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], 0
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x180003ff7
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x18000400b
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov ebx, 0x19
xor r14d, r14d
movss xmm2, dword [rbp + 0x4c]
addss xmm2, dword [rbp + 0x40]
movss xmm1, dword [rbp + 0x48]
addss xmm1, dword [rbp + 0x3c]
mov dword [rbp - 0x10], r12d
mov dword [rbp - 0xc], r14d
mov qword [rbp - 8], 1
movss xmm0, dword [rbp + 0x44]
addss xmm0, dword [rbp + 0x38]
mulss xmm0, xmm9
movss dword [rbp], xmm0
mulss xmm1, xmm9
movss dword [rbp + 4], xmm1
mulss xmm2, xmm9
movss dword [rbp + 8], xmm2
and dword [rbp + 0xc], r14d
mov byte [rbp + 0x10], r14b
cmp rsi, qword [rbp + 0x30]
je 0x18000408c
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x1800040a0
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rbx, 1
jne 0x180004013
jmp 0x180004507
mov rax, qword [r13]
mov rdx, qword [rax + 8]
mov rcx, r13
call rdx
mov r9, qword [rbp - 0x38]
mov rcx, qword [r9]
mov r8, qword [rcx + 0x78]
mov edx, eax
mov rcx, r9
call r8
mov r12, rax
mov qword [rbp - 0x40], rax
test rax, rax
je 0x18000450e
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xe0]
mov rcx, rax
call rdx
test eax, eax
jle 0x18000450e
mov rcx, qword [r14 + 0x10]
mov rdx, qword [rcx]
mov r8, qword [rdx + 0x60]
call r8
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
mov r8, r13
mov rdx, rdi
mov rcx, r15
call fcn.1800027c8
test eax, eax
je 0x18000450e
movss xmm6, dword [rsp + 0x68]
movss xmm7, dword [rsp + 0x64]
movss xmm8, dword [rsp + 0x60]
cmp byte [0x18003b053], bl
je 0x18000427c
cmp byte [0x18003b054], bl
je 0x18000427c
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000427c
mov eax, dword [r14 + 0x20]
mov cl, byte [r14 + 0xce4]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x70]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], 0
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x1800041c4
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x1800041d8
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov r12d, 5
mov r14, qword [rbp - 0x40]
mov dil, byte [r14 + 0xce4]
mov rdx, r15
mov rcx, qword [rbp - 0x68]
call fcn.180002404
mov ebx, eax
mov rcx, qword [r13]
mov rdx, qword [rcx + 8]
mov rcx, r13
call rdx
mov dword [rbp - 0x10], eax
mov dword [rbp - 0xc], ebx
mov qword [rbp - 8], 1
xor ebx, ebx
movss dword [rbp], xmm8
movss dword [rbp + 4], xmm7
movss dword [rbp + 8], xmm6
and dword [rbp + 0xc], ebx
mov byte [rbp + 0x10], dil
cmp rsi, qword [rbp + 0x30]
je 0x180004250
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180004264
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub r12, 1
jne 0x1800041e2
mov r14, qword [rsp + 0x58]
mov r12, qword [rbp - 0x40]
mov rdi, qword [rsp + 0x40]
mov eax, dword [r14 + 0x3e0]
cmp dword [r12 + 0x3e0], eax
jne 0x180004295
test eax, eax
jne 0x18000450e
cmp r14, r12
je 0x18000450e
cmp byte [0x18003b0bc], bl
je 0x1800042fe
mov rax, qword [r13]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, r13
call r8
mov rbx, rax
mov rcx, qword [r13]
mov rdx, qword [rcx + 8]
mov rcx, r13
call rdx
mov ecx, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x160]
movss dword [rsp + 0x20], xmm13
movaps xmm3, xmm13
movss xmm2, dword [0x180037f68]
mov rcx, rbx
call rdx
or dword [rbx + 0x24], 0x80018
xor ebx, ebx
cmp byte [0x18003b0ba], bl
je 0x180004385
lea rdx, str.InventoryPickup
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x18000432d
mov rax, qword [r13]
mov rdx, qword [rax + 0x30]
mov rcx, r13
call rdx
cmp eax, 0x480012
jne 0x180004385
mov rax, qword [r13]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, r13
call r8
mov rbx, rax
mov rcx, qword [r13]
mov rdx, qword [rcx + 8]
mov rcx, r13
call rdx
mov ecx, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rcx
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x160]
movss dword [rsp + 0x20], xmm13
movaps xmm3, xmm13
movss xmm2, dword [0x180037f68]
mov rcx, rbx
call rdx
or dword [rbx + 0x24], 0x80018
xor ebx, ebx
cmp byte [0x18003b077], bl
je 0x180004395
cmp byte [0x18003b051], bl
jne 0x180004401
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
movsd qword [rbp - 0x50], xmm0
movss dword [rbp - 0x48], xmm6
mov rax, qword [rbp - 0x30]
movsd xmm0, qword [rax + 0x17c0]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [rax + 0x17c8]
mov dword [rbp - 0x78], eax
movabs rax, 0x1423a1b90
mov rax, qword [rax]
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x80]
mov r8, qword [r12 + 0x10]
mov rdx, qword [rax + 0xe0]
mov rax, qword [rbp - 0x58]
mov rcx, qword [rax + 0x70]
call fcn.1800014ec
test al, al
je 0x18000450e
cmp byte [0x18003b053], bl
je 0x18000450e
mov cl, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rbp - 0x10], eax
mov eax, dword [rsp + 0x70]
mov dword [rbp - 0xc], eax
mov dword [rbp - 8], 6
mov dword [rbp - 4], 0xc
movss dword [rbp], xmm10
movss dword [rbp + 4], xmm11
movss dword [rbp + 8], xmm12
and dword [rbp + 0xc], 0
mov byte [rbp + 0x10], cl
cmp rsi, qword [rbp + 0x30]
je 0x18000446e
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180004482
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
mov edi, 0xa
mov r13d, dword [rbp - 0x70]
mov r14, qword [rbp - 0x68]
mov bl, byte [r12 + 0xce4]
mov rdx, r15
mov rcx, r14
call fcn.180002404
mov dword [rbp - 0x10], r13d
mov dword [rbp - 0xc], eax
mov qword [rbp - 8], 1
movss dword [rbp], xmm8
movss dword [rbp + 4], xmm7
movss dword [rbp + 8], xmm6
and dword [rbp + 0xc], 0
mov byte [rbp + 0x10], bl
cmp rsi, qword [rbp + 0x30]
je 0x1800044ed
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [rbp + 0x10]
mov dword [rsi + 0x20], eax
add rsi, 0x24
mov qword [rbp + 0x28], rsi
jmp 0x180004501
lea r8, [rbp - 0x10]
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000686c
mov rsi, qword [rbp + 0x28]
sub rdi, 1
jne 0x18000448f
mov r14, qword [rsp + 0x58]
xor ebx, ebx
mov rcx, qword [rbp - 0x60]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x30]
call rdx
test rax, rax
mov r13, rax
jne 0x1800030fc
mov r13, qword [rbp - 0x60]
mov rax, qword [r13]
mov rdx, qword [rax + 0x30]
mov rcx, r13
call rdx
mov rbx, rax
xor edi, edi
test rax, rax
je 0x1800048a4
movss xmm6, dword [0x180037fe4]
mov rsi, qword [rbp - 0x20]
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x18]
mov rcx, rbx
call rdx
mov rdi, rax
test rax, rax
je 0x180004885
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x60]
mov rcx, rbx
call rdx
mov r15, rax
mov rcx, qword [rdi]
mov rdx, qword [rcx + 0x10]
mov rcx, rdi
call rdx
mov r12, rax
mov rcx, qword [rbx]
mov rdx, qword [rcx + 8]
mov rcx, rbx
call rdx
mov r9, qword [rbp - 0x38]
mov rcx, qword [r9]
mov r8, qword [rcx + 0x78]
mov edx, eax
mov rcx, r9
call r8
mov rdi, rax
test rax, rax
je 0x180004885
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xe0]
mov rcx, rax
call rdx
test eax, eax
jle 0x180004885
mov eax, dword [r14 + 0x3e0]
cmp dword [rdi + 0x3e0], eax
jne 0x1800045e1
test eax, eax
jne 0x180004885
cmp r14, rdi
je 0x180004885
lea rdx, [rbp - 0x80]
mov rcx, qword [r14 + 0x10]
call fcn.180001224
mov rcx, qword [r14 + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x68]
mov r8, rbx
mov rdx, r12
mov rcx, r15
call fcn.1800027c8
test eax, eax
je 0x180004885
movsd xmm0, qword [rbp - 0x80]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [rbp - 0x78]
mov dword [rbp - 0x48], eax
mov rax, qword [rbp - 0x30]
movsd xmm0, qword [rax + 0x17c0]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rax + 0x17c8]
mov dword [rsp + 0x68], eax
movabs rax, 0x1423a1b90
mov rax, qword [rax]
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x60]
mov r8, qword [rdi + 0x10]
mov rdx, qword [rax + 0xe0]
mov rdi, qword [rbp - 0x58]
mov rcx, qword [rdi + 0x70]
call fcn.1800014ec
test al, al
je 0x180004885
mov rbx, qword [rdi + 0x48]
movss xmm0, dword [rbp + 0x68]
movss dword [rbp - 0x10], xmm0
movss xmm1, dword [rbp + 0x6c]
movss dword [rbp - 0xc], xmm1
movss xmm0, dword [rbp + 0x70]
movss dword [rbp - 8], xmm0
lea rax, [rbp + 0x58]
mov qword [rbp], rax
lea rax, [rbp + 0x5c]
mov qword [rbp + 8], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x10], rax
mov rax, qword [rbx]
mov r8, qword [rax + 0x380]
lea rdx, [rbp - 0x10]
mov rcx, rbx
call r8
movss xmm0, dword [rbp + 0x60]
comiss xmm13, xmm0
ja 0x180004885
comiss xmm0, dword [0x180037f68]
ja 0x180004885
movd xmm0, dword [rbx + 0x330]
cvtdq2ps xmm0, xmm0
divss xmm0, xmm6
movss xmm1, dword [rbp + 0x58]
mulss xmm1, xmm0
movss dword [rbp + 0x58], xmm1
movd xmm0, dword [rbx + 0x338]
cvtdq2ps xmm0, xmm0
divss xmm0, xmm6
movss xmm1, dword [rbp + 0x5c]
mulss xmm1, xmm0
movss dword [rbp + 0x5c], xmm1
xor eax, eax
cmp byte [0x18003b0bd], al
je 0x180004885
mov rax, qword [r14]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, r14
call r8
xor edx, edx
test rax, rax
je 0x180004885
mov rax, qword [r14 + 0x18]
test rax, rax
jne 0x180004766
mov ebx, edx
jmp 0x18000477e
mov rcx, qword [rax + 0x68]
test rcx, rcx
je 0x180004762
mov rbx, qword [rcx + 0x20]
test rbx, rbx
je 0x180004762
mov ebx, dword [rbx + 0x170]
cmp byte [0x18003b074], dl
je 0x1800047f3
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800047f3
test ebx, ebx
je 0x1800047f3
mov rcx, qword [rbp - 0x18]
mov rax, qword [rcx]
mov r8, qword [rax + 0xc8]
call r8
mov rcx, qword [rax]
mov r8, qword [rcx + 0x78]
mov edx, ebx
mov rcx, rax
call r8
xor ebx, ebx
test rax, rax
je 0x1800047f5
cmp r14, rax
je 0x1800047f5
mov ecx, dword [rax + 0x3e0]
cmp dword [r14 + 0x3e0], ecx
jne 0x1800047d9
test ecx, ecx
jne 0x1800047f5
mov rax, qword [rsi]
mov rdx, qword [rax + 0x58]
mov rcx, rsi
call rdx
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
jmp 0x1800047f5
xor ebx, ebx
mov rax, qword [rdi + 0x48]
xorps xmm3, xmm3
cvtsi2ss xmm3, dword [rax + 0x330]
mulss xmm3, xmm9
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rax + 0x338]
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x5c]
subss xmm0, xmm1
movss xmm2, dword [rbp + 0x58]
subss xmm2, xmm3
mulss xmm0, xmm0
mulss xmm2, xmm2
addss xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [0x18003b0d8]
comiss xmm1, xmm0
jb 0x180004885
cmp byte [0x18003b0d5], bl
je 0x180004865
mov rax, qword [rsi]
mov r8, qword [rax + 0x2f0]
lea rdx, [rbp + 0x68]
mov rcx, rsi
call r8
cmp byte [0x18003b0d7], bl
je 0x180004885
mov rax, qword [rsi]
mov rdx, qword [rax + 0x58]
mov rcx, rsi
call rdx
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
mov rax, qword [r13]
mov rdx, qword [rax + 0x30]
mov rcx, r13
call rdx
mov rbx, rax
xor edi, edi
test rax, rax
jne 0x180004552
mov rsi, qword [rbp + 0x28]
mov rax, qword [r13]
mov rdx, qword [rax + 0x10]
mov rcx, r13
call rdx
cmp byte [0x18003b053], dil
je 0x180004945
movss xmm0, dword [0x18003b930]
comiss xmm0, dword [0x18003b8d0]
jb 0x180004945
cmp qword [rbp + 0x20], rsi
je 0x18000493e
mov rbx, qword [rbp - 0x28]
mov rcx, rbx
call fcn.180001368
test al, al
je 0x18000493e
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x38]
call fcn.180006224
mov rdx, rax
call fcn.180001f8c
mov rax, qword [0x18003b978]
cmp qword [0x18003b970], rax
je 0x180004939
movabs rdx, 0x14262aa08
or dword [rsp + 0x20], 0xffffffff
mov r9d, 0x100
lea r8, [0x18003b950]
mov rdx, qword [rdx]
mov rcx, qword [rbx + 0x18]
movabs rax, 0x1414a8c40
call rax
call fcn.180002058
and dword [0x18003b930], 0
lea rcx, [rbp + 0x20]
call fcn.1800061a8
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.1800266a0
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret