Function at 0x180006330
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x568]
sub rsp, 0x628
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
movabs rbx, 0x1423fe210
mov rax, qword [rbx]
mov rcx, qword [rax + 0xd0]
mov rcx, qword [rcx + 0x48]
mov qword [rbp + 0x570], 0
mov rax, qword [rcx]
mov r8, qword [rax + 0x470]
lea rdx, [rbp + 0x570]
call r8
test al, al
je 0x18000bed7
mov rcx, qword [rbp + 0x570]
test rcx, rcx
je 0x18000bed7
mov rax, qword [rcx]
mov r8, qword [rax + 0x1d8]
xor edx, edx
call r8
test rax, rax
je 0x18000bed7
mov rax, qword [rbx]
mov qword [rbp + 0x2a8], rax
test rax, rax
je 0x18000bed7
mov rcx, qword [rax + 0xe0]
mov qword [rbp + 0x2a0], rcx
mov rdi, qword [rax + 0xc0]
mov r15, qword [rax + 0x48]
mov qword [rbp + 0x2b0], r15
mov rax, qword [rcx]
mov rdx, qword [rax + 0xa8]
call rdx
mov qword [rbp - 0x50], rax
test rax, rax
je 0x18000bed7
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0xd0]
mov rbx, qword [rdx + 0x48]
mov qword [rbp + 0x30], rbx
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x448]
mov rcx, rbx
call rdx
mov r12, rax
mov qword [rbp + 0x38], rax
test rax, rax
je 0x18000bed7
mov rcx, rbx
call fcn.180005690
mov r14, rax
mov qword [rbp - 0x30], rax
test rax, rax
je 0x18000bed7
mov rcx, qword [rax]
mov r8, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, rax
call r8
mov rsi, rax
mov qword [rbp + 0x2b8], rax
test rax, rax
je 0x18000bed7
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x280]
mov rcx, rax
call rdx
test rax, rax
je 0x18000bed7
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18000bed7
mov rbx, qword [rdx + 0xd0]
test rbx, rbx
je 0x18000bed7
mov rax, qword [rdi]
mov r8, qword [rax + 0x38]
xor edx, edx
mov rcx, rdi
call r8
movss xmm1, dword [0x18001647c]
addss xmm1, xmm0
movss dword [0x18001647c], xmm1
movss xmm0, dword [0x180013f24]
movss dword [0x180016478], xmm0
mov rax, qword [r12]
mov r8, qword [rax + 0x3a8]
lea rdx, str.mat_head
mov rcx, r12
call r8
mov dword [rbp + 0x580], eax
mov rcx, qword [0x180016470]
call fcn.18000f500
movsd xmm13, qword [r15 + 0x17c0]
mov r15d, dword [r15 + 0x17c8]
mov dword [rbp + 0x578], r15d
mov dword [rbp - 0x18], r15d
movss dword [0x1800164b0], xmm13
movaps xmm0, xmm13
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x20], xmm13
movss dword [0x1800164b4], xmm0
movss xmm0, dword [rbp - 0x18]
movss dword [0x1800164b8], xmm0
movzx eax, byte [r14 + 0xce4]
mov byte [0x1800164cc], al
mov dword [0x180016508], 1
xorps xmm15, xmm15
mov qword [0x180016510], 0
movss xmm6, dword [0x180013f2c]
mov dword [0x180016518], 0x3f800000
mov qword [0x1800164c0], 0
mov dword [0x1800164c8], 0x3f800000
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
xor r13d, r13d
mov qword [rbp - 0x58], r13
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r15d, eax
mov dword [rbp - 0x10], eax
mov ecx, dword [0x180016350]
mov dword [rbp + 0x588], ecx
lea rax, [rbp + 0x588]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x58c]
mov qword [rbp + 0x28], rax
lea r8, [rbp + 0x570]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x468]
call fcn.180001860
nop
mov ecx, dword [0x180016354]
mov dword [rbp - 0x28], ecx
lea rax, [rbp - 0x28]
mov qword [rbp + 0x20], rax
lea rax, [rbp - 0x24]
mov qword [rbp + 0x28], rax
lea r8, [rbp + 0x570]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x450]
call fcn.180001860
nop
mov rcx, qword [rsi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
mov qword [rbp + 0x40], rax
mov rbx, qword [rbp - 0x50]
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x30]
mov rcx, rbx
call rdx
mov r12, rax
mov qword [rbp - 0x40], rax
mov rdi, qword [rbp - 0x60]
test rax, rax
je 0x18000bd0b
movss xmm9, dword [0x180014020]
movss xmm14, dword [0x180013fe4]
movss xmm11, dword [0x180013f28]
movss xmm12, dword [0x180013f70]
nop dword [rax]
mov rax, qword [r12]
mov rdx, qword [rax + 0x178]
mov rcx, r12
call rdx
test al, al
jne 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
mov rsi, rax
mov rcx, qword [r12]
mov rdx, qword [rcx + 0x18]
mov rcx, r12
call rdx
test rax, rax
je 0x18000bccf
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
mov r15, rax
mov qword [rbp + 0x570], rax
mov rcx, qword [r12]
mov r8, qword [rcx + 0xc8]
lea rdx, [rbp - 0x80]
mov rcx, r12
call r8
lea rdx, [0x180012344]
mov rcx, qword [rbp + 0x40]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000b68d
cmp dword [0x180016090], eax
je 0x18000677b
lea ecx, [rax + 0x42]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000677b
lea rdx, str.Boss_Eye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000677b
lea rdx, str.Boss_Dron_Body_Field_Proxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
cmp dword [0x180016068], 0
je 0x180007485
lea rdx, str.DestroyableObject
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180006a05
cmp dword [0x180016058], 0
je 0x180006a05
lea rdx, str.explosive_barrels
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180006871
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000688a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x1d8], eax
movss xmm0, dword [rbp + 0x1d8]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000693d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006945
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180006961
test bl, bl
je 0x180006961
cmp dword [0x180016360], r15d
je 0x180006961
mov bl, 1
jmp 0x180006963
xor bl, bl
movss dword [rbp + 0x424], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x424]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x1800069dd
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800069f6
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800068a0
jmp 0x18000bccb
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007485
cmp dword [0x180016054], 0
je 0x180006ca5
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006ca5
lea rdx, str.ShootingTarget185
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006a6a
lea rdx, str.ShootingTarget201
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180006b16
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006b2f
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0xfa
xor r15d, r15d
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x1e8], eax
movss xmm0, dword [rbp + 0x1e8]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180006bdd
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006be5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180006c01
test bl, bl
je 0x180006c01
cmp dword [0x180016360], r15d
je 0x180006c01
mov bl, 1
jmp 0x180006c03
xor bl, bl
movss dword [rbp + 0x430], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x430]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180006c7d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006c96
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180006b40
jmp 0x18000bccb
cmp dword [0x18001604c], 0
je 0x180006f65
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006f65
lea rdx, str.Level1_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006d2e
lea rdx, str.CenterCapsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006d2e
lea rdx, str.Stage3_Core
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006d2e
lea rdx, str.Level2_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006d2e
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180006dda
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006df3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
xor r15d, r15d
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x1f8], eax
movss xmm0, dword [rbp + 0x1f8]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180006e9d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006ea5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180006ec1
test bl, bl
je 0x180006ec1
cmp dword [0x180016360], r15d
je 0x180006ec1
mov bl, 1
jmp 0x180006ec3
xor bl, bl
movss dword [rbp + 0x43c], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x43c]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180006f3d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006f56
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180006e00
jmp 0x18000bccb
cmp dword [0x180016050], 0
je 0x180007205
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007205
lea rdx, str.Laser
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006fc6
lea rdx, str.ShootingTarget_base
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006fc6
lea rdx, str.Platform
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007072
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000708b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x208], eax
movss xmm0, dword [rbp + 0x208]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000713d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007145
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180007161
test bl, bl
je 0x180007161
cmp dword [0x180016360], r15d
je 0x180007161
mov bl, 1
jmp 0x180007163
xor bl, bl
movss dword [rbp + 0x448], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x448]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x1800071dd
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800071f6
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800070a0
jmp 0x18000bccb
cmp dword [0x18001605c], 0
je 0x180007485
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007485
lea rdx, str.Bottom
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007252
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800072fe
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007317
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x218], eax
movss xmm0, dword [rbp + 0x218]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1800073bd
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1800073c5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x1800073e1
test bl, bl
je 0x1800073e1
cmp dword [0x180016360], r15d
je 0x1800073e1
mov bl, 1
jmp 0x1800073e3
xor bl, bl
movss dword [rbp + 0x2c8], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x2c8]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000745d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007476
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007320
jmp 0x18000bccb
cmp dword [0x180016070], 0
je 0x180007c25
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007c25
cmp dword [0x180016040], 0
je 0x180007745
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007745
lea rdx, str.BossEye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000750b
lea rdx, str.Eye_CoverProxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000750b
lea rdx, str.BossThroat
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800075b7
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800075d0
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
xor r15d, r15d
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x228], eax
movss xmm0, dword [rbp + 0x228]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000767d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007685
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x1800076a1
test bl, bl
je 0x1800076a1
cmp dword [0x180016360], r15d
je 0x1800076a1
mov bl, 1
jmp 0x1800076a3
xor bl, bl
movss dword [rbp + 0x2d4], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x2d4]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000771d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007736
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800075e0
jmp 0x18000bccb
cmp dword [0x180016044], 0
je 0x1800079b5
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800079b5
lea rdx, str.Hive
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000782a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007843
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
xor r15d, r15d
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x238], eax
movss xmm0, dword [rbp + 0x238]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1800078ed
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1800078f5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180007911
test bl, bl
je 0x180007911
cmp dword [0x180016360], r15d
je 0x180007911
mov bl, 1
jmp 0x180007913
xor bl, bl
movss dword [rbp + 0x2e0], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x2e0]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000798d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800079a6
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007850
jmp 0x18000bccb
cmp dword [0x180016048], 0
je 0x180007c25
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007c25
lea rdx, str.Corridor_Pipe
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007a9a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007ab3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x248], eax
movss xmm0, dword [rbp + 0x248]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180007b5d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007b65
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180007b81
test bl, bl
je 0x180007b81
cmp dword [0x180016360], r15d
je 0x180007b81
mov bl, 1
jmp 0x180007b83
xor bl, bl
movss dword [rbp + 0x2ec], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x2ec]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180007bfd
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007c16
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007ac0
jmp 0x18000bccb
cmp dword [0x18001606c], 0
je 0x180007eb5
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007eb5
cmp dword [0x18001603c], 0
je 0x180007eb5
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007eb5
lea rdx, str.Heli
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007d2f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007d48
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
xor r15d, r15d
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm8, dword [rbp - 0x70]
addss xmm8, dword [rbp - 0x7c]
mulss xmm6, xmm11
mulss xmm8, xmm11
movss xmm7, dword [rbp - 0x74]
addss xmm7, dword [rbp - 0x80]
mulss xmm7, xmm11
movabs rax, 0x1423fe210
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
mov eax, dword [rcx + 0x17c8]
mov dword [rbp + 0x258], eax
movss xmm0, dword [rbp + 0x258]
subss xmm0, xmm6
andps xmm0, xmm9
comiss xmm12, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
subss xmm2, xmm7
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm15
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180007ded
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007df5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm12, xmm0
setae al
test al, al
je 0x180007e11
test bl, bl
je 0x180007e11
cmp dword [0x180016360], r15d
je 0x180007e11
mov bl, 1
jmp 0x180007e13
xor bl, bl
movss dword [rbp + 0x2f8], xmm6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm7
unpcklps xmm0, xmm8
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x2f8]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180007e8d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007ea6
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007d50
jmp 0x18000bccb
lea rdx, str.DestroyableObject
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800080f9
cmp dword [0x1800161b4], 0
je 0x1800080f9
lea rdx, str.explosive_barrels
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rbp - 0x40], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp - 0x40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007f9e
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007fb7
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x90], xmm0
movss dword [rbp + 0x94], xmm1
movss dword [rbp + 0x98], xmm2
lea rdx, [rbp + 0x90]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180008029
cmp dword [0x180016360], r15d
je 0x180008029
mov bl, 1
jmp 0x18000802b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x304], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x304]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x1800080d1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800080ea
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007fc0
jmp 0x18000bccb
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
test rax, rax
je 0x18000bccf
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
cmp dword [0x180016190], 0
je 0x180008379
lea rdx, str.heavydroid_rocket
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008379
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008379
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov eax, 6
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180008200
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008219
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov r14d, 5
lea r15d, [r14 + 1]
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0xa0], xmm0
movss dword [rbp + 0xa4], xmm1
movss dword [rbp + 0xa8], xmm2
lea rdx, [rbp + 0xa0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180008299
cmp dword [0x180016360], 0
je 0x180008299
mov bl, 1
jmp 0x18000829b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x310], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
xor ecx, ecx
mov dword [rsp + 0x54], ecx
mov eax, 1
test bl, bl
cmovne eax, r15d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], ecx
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x310]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], ecx
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000833f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008358
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub r14, 1
jne 0x180008230
movss xmm6, dword [0x180013f2c]
mov r15, qword [rbp + 0x570]
mov r14, qword [rbp - 0x30]
mov rbx, qword [rbp - 0x50]
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800085d9
cmp dword [0x180016180], 0
je 0x1800085d9
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800085d9
lea rdx, str.S00_ShootingTarget1
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000843b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008454
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
mov esi, 5
xor r15d, r15d
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0xb0], xmm0
movss dword [rbp + 0xb4], xmm1
movss dword [rbp + 0xb8], xmm2
lea rdx, [rbp + 0xb0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180008509
cmp dword [0x180016360], r15d
je 0x180008509
mov bl, 1
jmp 0x18000850b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x31c], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x31c]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x1800085b1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800085ca
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800084a0
jmp 0x18000bccb
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008839
cmp dword [0x180016184], 0
je 0x180008839
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008839
lea rdx, str.S01_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000869b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800086b4
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
mov esi, 5
xor r15d, r15d
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b4], xmm1
movss dword [rbp + 0x1b8], xmm2
lea rdx, [rbp + 0x1b0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180008769
cmp dword [0x180016360], r15d
je 0x180008769
mov bl, 1
jmp 0x18000876b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x328], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x328]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180008811
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000882a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008700
jmp 0x18000bccb
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008a99
cmp dword [0x180016188], 0
je 0x180008a99
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008a99
lea rdx, str.S02_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800088fb
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008914
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
mov esi, 5
xor r15d, r15d
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x1a0], xmm0
movss dword [rbp + 0x1a4], xmm1
movss dword [rbp + 0x1a8], xmm2
lea rdx, [rbp + 0x1a0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x1800089c9
cmp dword [0x180016360], r15d
je 0x1800089c9
mov bl, 1
jmp 0x1800089cb
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x334], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x334]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180008a71
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008a8a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008960
jmp 0x18000bccb
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b68d
cmp dword [0x1800161b0], 0
je 0x180008d09
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008d09
lea rdx, str.ShootingTarget185
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008afe
lea rdx, str.ShootingTarget201
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180008b6f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008b88
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
mov esi, 0xfa
xor r15d, r15d
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x1c0], xmm0
movss dword [rbp + 0x1c4], xmm1
movss dword [rbp + 0x1c8], xmm2
lea rdx, [rbp + 0x1c0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180008c39
cmp dword [0x180016360], r15d
je 0x180008c39
mov bl, 1
jmp 0x180008c3b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x340], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x340]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180008ce1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008cfa
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008bd0
jmp 0x18000bccb
cmp dword [0x1800161a4], 0
je 0x180008f9a
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008f9a
lea rdx, str.Level1_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008d92
lea rdx, str.CenterCapsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008d92
lea rdx, str.Stage3_Core
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008d92
lea rdx, str.Level2_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008d92
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180008e40
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008e59
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
xor r15d, r15d
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0xc0], xmm0
movss dword [rbp + 0xc4], xmm1
movss dword [rbp + 0xc8], xmm2
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180008eca
cmp dword [0x180016360], r15d
je 0x180008eca
mov bl, 1
jmp 0x180008ecc
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x34c], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x34c]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180008f72
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008f8b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008e61
jmp 0x18000bccb
cmp dword [0x18001617c], 0
je 0x1800091f9
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800091f9
lea rdx, str.Bottom
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008fe7
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009095
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800090ae
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0xd0], xmm0
movss dword [rbp + 0xd4], xmm1
movss dword [rbp + 0xd8], xmm2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180009129
cmp dword [0x180016360], r15d
je 0x180009129
mov bl, 1
jmp 0x18000912b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x358], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x358]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x1800091d1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800091ea
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800090c0
jmp 0x18000bccb
cmp dword [0x18001618c], 0
je 0x180009469
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009469
lea rdx, str.S00_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000925a
lea rdx, str.laymore
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000925a
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009308
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009321
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x80], xmm0
movss dword [rbp + 0x84], xmm1
movss dword [rbp + 0x88], xmm2
lea rdx, [rbp + 0x80]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180009399
cmp dword [0x180016360], r15d
je 0x180009399
mov bl, 1
jmp 0x18000939b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x364], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x364]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180009441
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000945a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009330
jmp 0x18000bccb
cmp dword [0x1800161a4], 0
je 0x1800096aa
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800096aa
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009550
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009569
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0xe0], xmm0
movss dword [rbp + 0xe4], xmm1
movss dword [rbp + 0xe8], xmm2
lea rdx, [rbp + 0xe0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x1800095da
cmp dword [0x180016360], r15d
je 0x1800095da
mov bl, 1
jmp 0x1800095dc
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x370], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x370]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180009682
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000969b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009571
jmp 0x18000bccb
cmp dword [0x1800161bc], 0
je 0x180009919
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009919
lea rdx, str.BossEye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000970b
lea rdx, str.Eye_CoverProxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000970b
lea rdx, str.BossThroat
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800097b9
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800097d2
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
xor r15d, r15d
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0xf0], xmm0
movss dword [rbp + 0xf4], xmm1
movss dword [rbp + 0xf8], xmm2
lea rdx, [rbp + 0xf0]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180009849
cmp dword [0x180016360], r15d
je 0x180009849
mov bl, 1
jmp 0x18000984b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x37c], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x37c]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x1800098f1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000990a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800097e0
jmp 0x18000bccb
cmp dword [0x180016198], 0
je 0x180009b5a
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009b5a
lea rdx, str.Heli
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009a00
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009a19
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
xor r15d, r15d
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x100], xmm0
movss dword [rbp + 0x104], xmm1
movss dword [rbp + 0x108], xmm2
lea rdx, [rbp + 0x100]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180009a8a
cmp dword [0x180016360], r15d
je 0x180009a8a
mov bl, 1
jmp 0x180009a8c
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x388], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x388]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180009b32
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009b4b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009a21
jmp 0x18000bccb
cmp dword [0x180016178], 0
je 0x180009da9
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009da9
lea rdx, str.apsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009c41
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009c5a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x110], xmm0
movss dword [rbp + 0x114], xmm1
movss dword [rbp + 0x118], xmm2
lea rdx, [rbp + 0x110]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180009cd9
cmp dword [0x180016360], r15d
je 0x180009cd9
mov bl, 1
jmp 0x180009cdb
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x394], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x394]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180009d81
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009d9a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009c70
jmp 0x18000bccb
cmp dword [0x1800161ec], 0
je 0x180009fea
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009fea
lea rdx, str.MID_T_ASR
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009e90
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009ea9
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x120], xmm0
movss dword [rbp + 0x124], xmm1
movss dword [rbp + 0x128], xmm2
lea rdx, [rbp + 0x120]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x180009f1a
cmp dword [0x180016360], r15d
je 0x180009f1a
mov bl, 1
jmp 0x180009f1c
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3a0], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3a0]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x180009fc2
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009fdb
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009eb1
jmp 0x18000bccb
cmp dword [0x1800161f0], 0
je 0x18000a239
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a239
lea rdx, str.MID_T_MG
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a0d1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a0ea
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x130], xmm0
movss dword [rbp + 0x134], xmm1
movss dword [rbp + 0x138], xmm2
lea rdx, [rbp + 0x130]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000a169
cmp dword [0x180016360], r15d
je 0x18000a169
mov bl, 1
jmp 0x18000a16b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3ac], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3ac]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000a211
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a22a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a100
jmp 0x18000bccb
cmp dword [0x1800161f4], 0
je 0x18000a47a
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a47a
lea rdx, str.MID_T_Heavy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a320
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a339
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x140], xmm0
movss dword [rbp + 0x144], xmm1
movss dword [rbp + 0x148], xmm2
lea rdx, [rbp + 0x140]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000a3aa
cmp dword [0x180016360], r15d
je 0x18000a3aa
mov bl, 1
jmp 0x18000a3ac
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3b8], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3b8]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000a452
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a46b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a341
jmp 0x18000bccb
cmp dword [0x180016194], 0
je 0x18000a6c9
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a6c9
lea rdx, str.Hive
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a561
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a57a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x150], xmm0
movss dword [rbp + 0x154], xmm1
movss dword [rbp + 0x158], xmm2
lea rdx, [rbp + 0x150]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000a5f9
cmp dword [0x180016360], r15d
je 0x18000a5f9
mov bl, 1
jmp 0x18000a5fb
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3c4], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3c4]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000a6a1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a6ba
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a590
jmp 0x18000bccb
cmp dword [0x1800161a8], 0
je 0x18000a939
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a939
lea rdx, str.Laser
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000a72a
lea rdx, str.ShootingTarget_base
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000a72a
lea rdx, str.Platform
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a7d8
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a7f1
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x160], xmm0
movss dword [rbp + 0x164], xmm1
movss dword [rbp + 0x168], xmm2
lea rdx, [rbp + 0x160]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000a869
cmp dword [0x180016360], r15d
je 0x18000a869
mov bl, 1
jmp 0x18000a86b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3d0], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3d0]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000a911
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a92a
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a800
jmp 0x18000bccb
cmp dword [0x1800161d0], 0
je 0x18000ab7a
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000ab7a
lea rdx, str.Corridor_Pipe
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x180014010]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm14
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171fba0
call rax
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000aa20
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000aa39
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x170], xmm0
movss dword [rbp + 0x174], xmm1
movss dword [rbp + 0x178], xmm2
lea rdx, [rbp + 0x170]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000aaaa
cmp dword [0x180016360], r15d
je 0x18000aaaa
mov bl, 1
jmp 0x18000aaac
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3dc], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3dc]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000ab52
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000ab6b
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000aa41
jmp 0x18000bccb
cmp dword [0x1800161d4], 0
je 0x18000adb9
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000adb9
lea rdx, str.Ursula
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm15
movaps xmm2, xmm6
movaps xmm1, xmm15
call fcn.180005d00
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000ac54
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000ac6d
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
xor r15d, r15d
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x180], xmm0
movss dword [rbp + 0x184], xmm1
movss dword [rbp + 0x188], xmm2
lea rdx, [rbp + 0x180]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000ace9
cmp dword [0x180016360], r15d
je 0x18000ace9
mov bl, 1
jmp 0x18000aceb
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3e8], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3e8]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000ad91
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000adaa
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000ac80
jmp 0x18000bccb
cmp dword [0x18001619c], 0
je 0x18000aff9
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000aff9
lea rdx, str.ShootingTarget_duck
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm15
movaps xmm2, xmm6
movaps xmm1, xmm15
call fcn.180005d00
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000ae93
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000aeac
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
xor r15d, r15d
nop dword [rax]
nop dword [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x190], xmm0
movss dword [rbp + 0x194], xmm1
movss dword [rbp + 0x198], xmm2
lea rdx, [rbp + 0x190]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000af29
cmp dword [0x180016360], r15d
je 0x18000af29
mov bl, 1
jmp 0x18000af2b
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x3f4], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x3f4]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000afd1
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000afea
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000aec0
jmp 0x18000bccb
cmp dword [0x1800161c0], 0
je 0x18000b22d
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b22d
lea rdx, str.Smart_mine
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm15
movaps xmm2, xmm6
movaps xmm1, xmm15
call fcn.180005d00
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000b0d3
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b0ec
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0xf
xor r15d, r15d
nop dword [rax]
nop dword [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x54], xmm1
movss dword [rbp + 0x58], xmm2
lea rdx, [rbp + 0x50]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000b15d
cmp dword [0x180016360], r15d
je 0x18000b15d
mov bl, 1
jmp 0x18000b15f
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x400], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x400]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000b205
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b21e
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000b100
jmp 0x18000bccb
cmp dword [0x1800161b8], 0
je 0x18000b46d
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b46d
lea rdx, str.weakpoint
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000b27a
lea rdx, str._Generator
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm15
movaps xmm2, xmm6
movaps xmm1, xmm15
call fcn.180005d00
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000b31b
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b334
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
xor r15d, r15d
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x60], xmm0
movss dword [rbp + 0x64], xmm1
movss dword [rbp + 0x68], xmm2
lea rdx, [rbp + 0x60]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000b39d
cmp dword [0x180016360], r15d
je 0x18000b39d
mov bl, 1
jmp 0x18000b39f
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x40c], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x40c]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000b445
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b45e
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000b340
jmp 0x18000bccb
cmp dword [0x180016168], 0
je 0x18000b68d
lea rdx, [0x180013f04]
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000bccf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm14
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm15
movaps xmm2, xmm6
movaps xmm1, xmm15
call fcn.180005d00
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov eax, dword [rbp + 0x578]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000b533
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b54c
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x64
xor r15d, r15d
nop dword [rax]
nop dword [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x70], xmm0
movss dword [rbp + 0x74], xmm1
movss dword [rbp + 0x78], xmm2
lea rdx, [rbp + 0x70]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000b5bd
cmp dword [0x180016360], r15d
je 0x18000b5bd
mov bl, 1
jmp 0x18000b5bf
xor bl, bl
movss xmm0, dword [rbp - 0x6c]
addss xmm0, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm0, xmm11
mulss xmm7, xmm11
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mulss xmm6, xmm11
movss dword [rbp + 0x418], xmm0
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r15d
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x418]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], r15d
mov byte [rsp + 0x70], r15b
cmp rdi, r13
je 0x18000b665
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b67e
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000b560
jmp 0x18000bccb
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ebx, eax
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xc8]
mov rcx, rax
call rdx
mov rcx, qword [rax]
mov r8, qword [rcx + 0x78]
mov edx, ebx
mov rcx, rax
call r8
mov r12, rax
test rax, rax
je 0x18000bccb
mov r14, qword [rax + 0x10]
mov qword [rbp + 0x588], r14
test r14, r14
je 0x18000bccb
cmp dword [0x180016064], 0
je 0x18000b879
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b879
lea rdx, str.Suicide
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b8da
xor ebx, ebx
movsxd rax, dword [0x180016468]
mov rcx, qword [rbp + 0x450]
cmp dword [rcx + rax*4], ebx
jle 0x18000b8da
mov r14, rcx
lea r15d, [rbx + 6]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm11
mulss xmm1, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm1
movss dword [rbp - 0x18], xmm2
lea rdx, [rbp - 0x20]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000b79d
cmp dword [0x180016360], 0
je 0x18000b79d
mov cl, 1
jmp 0x18000b79f
xor cl, cl
movss xmm1, dword [rbp - 0x6c]
addss xmm1, dword [rbp - 0x78]
movss xmm2, dword [rbp - 0x70]
addss xmm2, dword [rbp - 0x7c]
mulss xmm1, xmm11
mulss xmm2, xmm11
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm11
movss dword [rbp + 0x28], xmm1
mov eax, dword [r12 + 0x20]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], 0
mov eax, 1
test cl, cl
cmovne eax, r15d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0
unpcklps xmm0, xmm2
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rbp + 0x28]
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000b83d
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b856
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
inc ebx
movsxd rax, dword [0x180016468]
cmp ebx, dword [r14 + rax*4]
jl 0x18000b740
mov r14, qword [rbp + 0x588]
mov r15, qword [rbp + 0x570]
jmp 0x18000b8da
cmp dword [0x180016100], 0
je 0x18000b8b6
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b8b6
cmp r12, qword [rbp - 0x30]
je 0x18000bccb
mov rax, qword [r12]
mov rdx, qword [rax + 0xe0]
mov rcx, r12
call rdx
test eax, eax
jle 0x18000bccb
jmp 0x18000b8da
mov r8d, dword [r12 + 0x20]
mov rax, qword [rbp - 0x30]
mov edx, dword [rax + 0x20]
mov rcx, qword [rbp + 0x38]
movabs rax, 0x1411d91b0
call rax
test eax, eax
jne 0x18000bccb
mov qword [rbp + 8], 0
mov dword [rbp + 0x10], 0
mov qword [rbp - 8], 0
mov dword [rbp], 0
mov dword [rbp + 0x570], 0
mov dword [rbp + 0x588], 0
mov rax, qword [r12]
mov rdx, qword [rax + 0x130]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov rbx, rax
mov rcx, qword [rbp + 0x30]
call fcn.180005690
test rax, rax
je 0x18000be5f
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
mov r8, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, rax
call r8
test rax, rax
je 0x18000be5f
lea rax, [rbp + 0x588]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x570]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9, rsi
mov r8, rbx
mov rdx, qword [rbp + 0x38]
mov rcx, qword [0x180016470]
call fcn.180005d60
test al, al
je 0x18000bccb
mov rax, qword [r12]
mov rdx, qword [rax + 0x130]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov esi, dword [rbp]
movsd xmm10, qword [rbp - 8]
mov r15d, dword [rbp + 0x578]
cmp dword [0x180016120], 0
jne 0x18000ba4b
movsd qword [rbp + 0x260], xmm10
mov dword [rbp + 0x268], esi
movsd qword [rbp + 0x270], xmm13
mov dword [rbp + 0x278], r15d
mov dword [rsp + 0x38], 0xa
xor eax, eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x260]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x270]
mov r8, r14
mov rdx, qword [rbp + 0x2a0]
mov rax, qword [rbp + 0x2a8]
mov rcx, qword [rax + 0x70]
call fcn.18000f680
test al, al
je 0x18000bccb
cmp dword [0x180016344], 0
je 0x18000bb21
movsd qword [rbp + 0x280], xmm10
mov dword [rbp + 0x288], esi
lea r8, [rbp + 8]
lea rdx, [rbp + 0x280]
mov rbx, qword [rbp + 0x2b0]
mov rcx, rbx
call fcn.18000e340
test al, al
je 0x18000bccb
cmp dword [0x180016344], 0
je 0x18000bb21
movss xmm8, dword [rbp + 8]
movss xmm7, dword [rbp + 0xc]
xorps xmm9, xmm9
cvtsi2ss xmm9, dword [0x180016348]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x338]
mov rcx, rbx
call rdx
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm11
mov rax, qword [rbx]
mov rdx, qword [rax + 0x340]
mov rcx, rbx
call rdx
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm0, xmm11
subss xmm7, xmm0
subss xmm8, xmm6
mulss xmm8, xmm8
mulss xmm7, xmm7
addss xmm8, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm8
ja 0x18000bb0e
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x18000bb17
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm9, xmm0
jb 0x18000bccb
lea rdx, [0x180012344]
mov rcx, qword [rbp + 0x40]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000bbbf
mov rax, qword [rbp - 0x30]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x580]
mov dword [rsp + 0x54], eax
mov eax, 6
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0xc
movsd qword [rsp + 0x60], xmm13
mov dword [rsp + 0x68], r15d
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000bba6
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000bbbf
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
xor ebx, ebx
movsxd rax, dword [0x180016468]
mov rcx, qword [rbp + 0x468]
cmp dword [rcx + rax*4], ebx
jle 0x18000bccb
mov r14d, dword [rbp + 0x570]
mov r15d, dword [rbp + 0x588]
nop word [rax + rax]
movsd qword [rbp + 0x290], xmm10
mov dword [rbp + 0x298], esi
lea rdx, [rbp + 0x290]
mov rcx, qword [0x180016470]
call fcn.180006120
test al, al
je 0x18000bc2a
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000bc2a
mov dl, 1
jmp 0x18000bc2c
xor dl, dl
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r15d
mov eax, 1
test dl, dl
mov edx, 6
cmovne eax, edx
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r14d
movsd qword [rsp + 0x60], xmm10
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000bc99
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000bcb2
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001470
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
inc ebx
movsxd rax, dword [0x180016468]
mov rcx, qword [rbp + 0x468]
cmp ebx, dword [rcx + rax*4]
jl 0x18000bbf0
mov rbx, qword [rbp - 0x50]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x30]
mov rcx, rbx
call rdx
mov r12, rax
mov qword [rbp - 0x40], rax
test rax, rax
movss xmm9, dword [0x180014020]
movss xmm6, dword [0x180013f2c]
mov r14, qword [rbp - 0x30]
jne 0x1800066c0
mov rsi, qword [rbp + 0x2b8]
mov r15d, dword [rbp - 0x10]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call rdx
cmp dword [0x1800160fc], 0
je 0x18000be5f
movss xmm0, dword [0x18001647c]
comiss xmm0, dword [0x180016478]
jb 0x18000be5f
mov rbx, qword [rbp - 0x68]
cmp rbx, rdi
je 0x18000be53
mov rcx, rsi
call fcn.1800061d0
test al, al
je 0x18000be53
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x80]
call fcn.180001b60
mov rbx, rax
mov qword [rbp + 0x570], rax
mov dword [0x18001650c], r15d
mov dword [rsp + 0x50], r15d
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.180001b60
nop
mov r9, qword [0x1800164d8]
cmp r9, qword [0x1800164e0]
je 0x18000bdd5
mov eax, dword [rsp + 0x50]
mov dword [r9], eax
mov rdx, qword [rsp + 0x68]
xor r8d, r8d
mov qword [rsp + 0x68], r8
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], r8
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x58], r8
mov qword [r9 + 8], rax
mov qword [r9 + 0x10], rcx
mov qword [r9 + 0x18], rdx
add qword [0x1800164d8], 0x20
jmp 0x18000bdea
lea r8, [rsp + 0x50]
mov rdx, r9
lea rcx, [0x1800164d0]
call fcn.1800011f0
nop
lea rcx, [rsp + 0x58]
call fcn.18000ef70
nop
mov rcx, rbx
call fcn.18000ef70
mov rax, qword [0x1800164d8]
cmp qword [0x1800164d0], rax
je 0x18000be3f
movabs rdx, 0x14269b8c8
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 0x100
lea r8, [0x1800164b0]
mov rdx, qword [rdx]
mov rcx, qword [rsi + 0x18]
movabs rax, 0x141493c50
call rax
mov rcx, qword [0x180016470]
call fcn.18000f500
mov r13, qword [rbp - 0x58]
mov rbx, qword [rbp - 0x68]
mov dword [0x18001647c], 0
jmp 0x18000be63
mov rbx, qword [rbp - 0x68]
lea rcx, [rbp + 0x450]
call fcn.180001fd0
nop
lea rcx, [rbp + 0x468]
call fcn.180001fd0
nop
test rbx, rbx
je 0x18000bed7
sub r13, rbx
movabs rax, 0xe38e38e38e38e39
imul r13
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000becf
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000becf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18000fdfc
lea r11, [rsp + 0x628]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret