Function at 0x1800065b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x338]
sub rsp, 0x3f8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
movabs rbx, 0x142373288
mov rax, qword [rbx]
mov rcx, qword [rax + 0xd0]
mov rcx, qword [rcx + 0x48]
xor r12d, r12d
mov qword [rbp + 0x340], r12
mov rax, qword [rcx]
mov r8, qword [rax + 0x470]
lea rdx, [rbp + 0x340]
call r8
test al, al
jne 0x180006658
mov ecx, r12d
mov qword [rbp + 0x340], rcx
jmp 0x18000665f
mov rcx, qword [rbp + 0x340]
test rcx, rcx
je 0x18000bb24
mov rax, qword [rcx]
mov r8, qword [rax + 0x1d8]
xor edx, edx
call r8
test rax, rax
je 0x18000bb24
mov rax, qword [rbx]
mov qword [rbp + 0x1d8], rax
test rax, rax
je 0x18000bb24
mov rcx, qword [rax + 0xe0]
mov qword [rbp + 0x1d0], rcx
mov rdi, qword [rax + 0xc0]
mov rsi, qword [rax + 0x48]
mov qword [rbp + 0x1e0], rsi
mov rax, qword [rcx]
mov rdx, qword [rax + 0xa8]
call rdx
mov qword [rbp - 0x50], rax
test rax, rax
je 0x18000bb24
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0xd0]
mov rbx, qword [rdx + 0x48]
mov qword [rbp + 0x40], rbx
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x448]
mov rcx, rbx
call rdx
mov r13, rax
mov qword [rbp + 0x48], rax
test rax, rax
je 0x18000bb24
mov rcx, rbx
call fcn.180005920
mov r14, rax
mov qword [rbp - 0x48], rax
test rax, rax
je 0x18000bb24
mov rcx, qword [rax]
mov r8, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, rax
call r8
mov r15, rax
mov qword [rbp + 0x200], rax
test rax, rax
je 0x18000bb24
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x280]
mov rcx, rax
call rdx
test rax, rax
je 0x18000bb24
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x18000bb24
mov rbx, qword [rdx + 0xd0]
test rbx, rbx
je 0x18000bb24
mov rax, qword [rdi]
mov r8, qword [rax + 0x38]
xor edx, edx
mov rcx, rdi
call r8
movss xmm1, dword [0x1800164bc]
addss xmm1, xmm0
movss dword [0x1800164bc], xmm1
mov dword [0x1800164b8], 0x3e000000
mov rax, qword [r13]
mov r8, qword [rax + 0x3a8]
lea rdx, str.mat_head
mov rcx, r13
call r8
mov dword [rbp + 0x348], eax
mov rcx, qword [0x1800164b0]
call fcn.18000ea50
movsd xmm12, qword [rsi + 0x17c0]
mov eax, dword [rsi + 0x17c8]
mov dword [rbp + 8], eax
movsd qword [rbp + 0x30], xmm12
movss dword [0x180016510], xmm12
movss xmm13, dword [rbp + 0x34]
movss dword [0x180016514], xmm13
movd xmm14, eax
movss dword [0x180016518], xmm14
movzx eax, byte [r14 + 0xce4]
mov byte [0x18001652c], al
mov dword [0x180016568], 1
xorps xmm10, xmm10
mov qword [0x180016570], r12
movss xmm6, dword [0x180012f18]
mov dword [0x180016578], 0x3f800000
mov qword [0x180016520], r12
mov dword [0x180016528], 0x3f800000
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov r13, r12
mov qword [rbp - 0x58], r12
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov esi, eax
mov dword [rbp + 0xc], eax
mov ecx, dword [0x180016344]
mov dword [rbp + 0x350], ecx
lea rax, [rbp + 0x350]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x354]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x340]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x238]
call fcn.180001ac0
nop
mov ecx, dword [0x180016348]
mov dword [rbp + 0x358], ecx
lea rax, [rbp + 0x358]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x35c]
mov qword [rsp + 0x58], rax
lea r8, [rbp + 0x340]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x220]
call fcn.180001ac0
nop
mov rcx, qword [r15 + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
mov qword [rbp + 0x50], rax
mov rbx, qword [rbp - 0x50]
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x30]
mov rcx, rbx
call rdx
mov r15, rax
mov qword [rbp - 0x18], rax
movabs r14, 0xe38e38e38e38e39
mov rdi, qword [rbp - 0x60]
test rax, rax
je 0x18000b88e
movss xmm15, dword [0x180012fcc]
movss xmm9, dword [0x180012f14]
movss xmm11, dword [0x180012f58]
nop dword [rax + rax]
mov rax, qword [r15]
mov rdx, qword [rax + 0x178]
mov rcx, r15
call rdx
test al, al
jne 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
mov rsi, rax
mov qword [rbp + 0x350], rax
mov rcx, qword [r15]
mov rdx, qword [rcx + 0x18]
mov rcx, r15
call rdx
test rax, rax
je 0x18000b859
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
mov r14, rax
mov qword [rbp + 0x340], rax
mov rcx, qword [r15]
mov r8, qword [rcx + 0xc8]
lea rdx, [rbp - 0x80]
mov rcx, r15
call r8
lea rdx, [0x180011354]
mov rcx, qword [rbp + 0x50]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000b182
cmp dword [0x180016090], eax
je 0x1800069fe
lea ecx, [rax + 0x42]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800069fe
lea rdx, str.Boss_Eye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800069fe
lea rdx, str.Boss_Dron_Body_Field_Proxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
cmp dword [0x180016068], 0
je 0x1800076b2
lea rdx, str.DestroyableObject
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180006c77
cmp dword [0x180016058], 0
je 0x180006c77
lea rdx, str.explosive_barrels
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180006afd
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006b16
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 0x18], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180006bb9
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006bc1
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x180006bdd
test bl, bl
je 0x180006bdd
cmp dword [0x180016354], 0
je 0x180006bdd
mov bl, 1
jmp 0x180006bdf
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180006c4f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006c68
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180006b20
jmp 0x18000b855
lea rdx, str.ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800076b2
cmp dword [0x180016054], 0
je 0x180006f07
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006f07
lea rdx, str.ShootingTarget185
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006cdc
lea rdx, str.ShootingTarget201
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180006d91
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006daa
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0xfa
nop
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 0x18], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180006e49
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006e51
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x180006e6d
test bl, bl
je 0x180006e6d
cmp dword [0x180016354], 0
je 0x180006e6d
mov bl, 1
jmp 0x180006e6f
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180006edf
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180006ef8
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180006db0
jmp 0x18000b855
cmp dword [0x18001604c], 0
je 0x1800071c7
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800071c7
lea rdx, str.Level1_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006f90
lea rdx, str.CenterCapsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006f90
lea rdx, str.Stage3_Core
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006f90
lea rdx, str.Level2_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006f90
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007045
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000705e
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop dword [rax]
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 0x18], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180007109
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007111
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x18000712d
test bl, bl
je 0x18000712d
cmp dword [0x180016354], 0
je 0x18000712d
mov bl, 1
jmp 0x18000712f
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000719f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800071b8
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007070
jmp 0x18000b855
cmp dword [0x180016050], 0
je 0x180007457
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007457
lea rdx, str.Laser
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007228
lea rdx, str.ShootingTarget_base
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007228
lea rdx, str.Platform
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800072dd
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800072f6
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 0x18], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180007399
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1800073a1
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x1800073bd
test bl, bl
je 0x1800073bd
cmp dword [0x180016354], 0
je 0x1800073bd
mov bl, 1
jmp 0x1800073bf
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000742f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007448
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007300
jmp 0x18000b855
cmp dword [0x18001605c], 0
je 0x1800076b2
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800076b2
lea rdx, str.Bottom
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800074a4
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007559
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007572
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x90], xmm0
movss dword [rbp + 0x94], xmm1
movss dword [rbp + 0x98], xmm2
lea rdx, [rbp + 0x90]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x1800075e9
cmp dword [0x180016354], 0
je 0x1800075e9
mov bl, 1
jmp 0x1800075eb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000768a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800076a3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007580
jmp 0x18000b855
cmp dword [0x180016070], 0
je 0x180007df2
lea rdx, str.ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007df2
cmp dword [0x180016040], 0
je 0x180007967
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007967
lea rdx, str.BossEye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007738
lea rdx, str.Eye_CoverProxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180007738
lea rdx, str.BossThroat
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800077ed
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007806
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 0x18], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1800078a9
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1800078b1
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x1800078cd
test bl, bl
je 0x1800078cd
cmp dword [0x180016354], 0
je 0x1800078cd
mov bl, 1
jmp 0x1800078cf
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000793f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007958
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007810
jmp 0x18000b855
cmp dword [0x180016044], 0
je 0x180007bb2
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007bb2
lea rdx, str.Hive
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007a55
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007a6e
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xa0], xmm0
movss dword [rbp + 0xa4], xmm1
movss dword [rbp + 0xa8], xmm2
lea rdx, [rbp + 0xa0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180007ae9
cmp dword [0x180016354], 0
je 0x180007ae9
mov bl, 1
jmp 0x180007aeb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180007b8a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007ba3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007a80
jmp 0x18000b855
cmp dword [0x180016048], 0
je 0x180007df2
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007df2
lea rdx, str.Corridor_Pipe
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007ca0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007cb9
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xb0], xmm0
movss dword [rbp + 0xb4], xmm1
movss dword [rbp + 0xb8], xmm2
lea rdx, [rbp + 0xb0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180007d29
cmp dword [0x180016354], 0
je 0x180007d29
mov bl, 1
jmp 0x180007d2b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180007dca
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007de3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007cc0
jmp 0x18000b855
cmp dword [0x18001606c], 0
je 0x180008062
lea rdx, str.ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008062
cmp dword [0x18001603c], 0
je 0x180008062
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008062
lea rdx, str.Heli
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180007f05
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180007f1e
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xc0], xmm0
movss dword [rbp + 0xc4], xmm1
movss dword [rbp + 0xc8], xmm2
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180007f99
cmp dword [0x180016354], 0
je 0x180007f99
mov bl, 1
jmp 0x180007f9b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000803a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008053
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180007f30
jmp 0x18000b855
lea rdx, str.DestroyableObject
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800082d7
cmp dword [0x1800161b4], 0
je 0x1800082d7
lea rdx, str.explosive_barrels
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180008154
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000816d
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax]
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp - 0x18], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180008219
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180008221
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x18000823d
test bl, bl
je 0x18000823d
cmp dword [0x180016354], 0
je 0x18000823d
mov bl, 1
jmp 0x18000823f
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x1800082af
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800082c8
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008180
jmp 0x18000b855
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
test rax, rax
je 0x18000b859
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
cmp dword [0x180016190], 0
je 0x18000857b
lea rdx, str.heavydroid_rocket
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000857b
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000857b
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov rax, qword [rbp - 0x48]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov eax, 6
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800083e2
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800083fb
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 6
lea r14d, [rsi - 1]
nop dword [rax]
nop dword [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rbp + 0x10], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1800084a9
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1800084b1
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x1800084cd
test bl, bl
je 0x1800084cd
cmp dword [0x180016354], 0
je 0x1800084cd
mov bl, 1
jmp 0x1800084cf
xor bl, bl
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, esi
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm7
movss dword [rsp + 0x68], xmm6
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000853e
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008557
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub r14, 1
jne 0x180008410
movss xmm6, dword [0x180012f18]
mov rsi, qword [rbp + 0x350]
mov r14, qword [rbp + 0x340]
mov rbx, qword [rbp - 0x50]
lea rdx, str.ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800087d2
cmp dword [0x180016180], 0
je 0x1800087d2
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800087d2
lea rdx, str.S00_ShootingTarget1
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov r14, qword [rbp - 0x48]
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180008645
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000865e
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov esi, 5
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xd0], xmm0
movss dword [rbp + 0xd4], xmm1
movss dword [rbp + 0xd8], xmm2
lea rdx, [rbp + 0xd0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180008709
cmp dword [0x180016354], 0
je 0x180008709
mov bl, 1
jmp 0x18000870b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x1800087aa
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800087c3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800086a0
jmp 0x18000b855
lea rdx, str.ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008a26
cmp dword [0x180016184], 0
je 0x180008a26
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008a26
lea rdx, str.S01_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov r14, qword [rbp - 0x48]
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000889c
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800088b5
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov esi, 5
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x70], xmm0
movss dword [rbp + 0x74], xmm1
movss dword [rbp + 0x78], xmm2
lea rdx, [rbp + 0x70]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000895d
cmp dword [0x180016354], 0
je 0x18000895d
mov bl, 1
jmp 0x18000895f
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x1800089fe
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008a17
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008900
jmp 0x18000b855
lea rdx, str.ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180008c76
cmp dword [0x180016188], 0
je 0x180008c76
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008c76
lea rdx, str.S02_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180008af0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008b09
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov esi, 5
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x60], xmm0
movss dword [rbp + 0x64], xmm1
movss dword [rbp + 0x68], xmm2
lea rdx, [rbp + 0x60]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180008bad
cmp dword [0x180016354], 0
je 0x180008bad
mov bl, 1
jmp 0x180008baf
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180008c4e
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008c67
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008b50
jmp 0x18000b855
lea rdx, str.ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b182
cmp dword [0x1800161b0], 0
je 0x180008ee2
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008ee2
lea rdx, str.ShootingTarget185
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008cdb
lea rdx, str.ShootingTarget201
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180008d54
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008d6d
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov esi, 0xfa
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x1a0], xmm0
movss dword [rbp + 0x1a4], xmm1
movss dword [rbp + 0x1a8], xmm2
lea rdx, [rbp + 0x1a0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180008e19
cmp dword [0x180016354], 0
je 0x180008e19
mov bl, 1
jmp 0x180008e1b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180008eba
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180008ed3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180008db0
jmp 0x18000b855
cmp dword [0x1800161a4], 0
je 0x180009172
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009172
lea rdx, str.Level1_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008f6b
lea rdx, str.CenterCapsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008f6b
lea rdx, str.Stage3_Core
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008f6b
lea rdx, str.Level2_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008f6b
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009020
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009039
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x1c0], xmm0
movss dword [rbp + 0x1c4], xmm1
movss dword [rbp + 0x1c8], xmm2
lea rdx, [rbp + 0x1c0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x1800090a9
cmp dword [0x180016354], 0
je 0x1800090a9
mov bl, 1
jmp 0x1800090ab
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000914a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009163
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009040
jmp 0x18000b855
cmp dword [0x18001617c], 0
je 0x1800093d2
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800093d2
lea rdx, str.Bottom
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800091bf
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009274
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000928d
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xe0], xmm0
movss dword [rbp + 0xe4], xmm1
movss dword [rbp + 0xe8], xmm2
lea rdx, [rbp + 0xe0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180009309
cmp dword [0x180016354], 0
je 0x180009309
mov bl, 1
jmp 0x18000930b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x1800093aa
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800093c3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800092a0
jmp 0x18000b855
cmp dword [0x18001618c], 0
je 0x180009642
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009642
lea rdx, str.S00_ShootingTarget
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009433
lea rdx, str.laymore
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180009433
lea rdx, str.shootT_mine2
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x1800094e8
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009501
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0xf0], xmm0
movss dword [rbp + 0xf4], xmm1
movss dword [rbp + 0xf8], xmm2
lea rdx, [rbp + 0xf0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180009579
cmp dword [0x180016354], 0
je 0x180009579
mov bl, 1
jmp 0x18000957b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000961a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009633
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009510
jmp 0x18000b855
cmp dword [0x1800161a4], 0
je 0x180009882
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009882
lea rdx, str.ShootingTarget_Capsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009730
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009749
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x100], xmm0
movss dword [rbp + 0x104], xmm1
movss dword [rbp + 0x108], xmm2
lea rdx, [rbp + 0x100]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x1800097b9
cmp dword [0x180016354], 0
je 0x1800097b9
mov bl, 1
jmp 0x1800097bb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000985a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009873
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009750
jmp 0x18000b855
cmp dword [0x1800161bc], 0
je 0x180009af2
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009af2
lea rdx, str.BossEye
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800098e3
lea rdx, str.Eye_CoverProxy
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800098e3
lea rdx, str.BossThroat
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009998
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x1800099b1
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x110], xmm0
movss dword [rbp + 0x114], xmm1
movss dword [rbp + 0x118], xmm2
lea rdx, [rbp + 0x110]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180009a29
cmp dword [0x180016354], 0
je 0x180009a29
mov bl, 1
jmp 0x180009a2b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180009aca
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009ae3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x1800099c0
jmp 0x18000b855
cmp dword [0x180016198], 0
je 0x180009d32
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009d32
lea rdx, str.Heli
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009be0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009bf9
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x120], xmm0
movss dword [rbp + 0x124], xmm1
movss dword [rbp + 0x128], xmm2
lea rdx, [rbp + 0x120]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180009c69
cmp dword [0x180016354], 0
je 0x180009c69
mov bl, 1
jmp 0x180009c6b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180009d0a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009d23
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009c00
jmp 0x18000b855
cmp dword [0x180016178], 0
je 0x180009f72
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009f72
lea rdx, str.apsule
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x180009e20
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009e39
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x130], xmm0
movss dword [rbp + 0x134], xmm1
movss dword [rbp + 0x138], xmm2
lea rdx, [rbp + 0x130]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x180009ea9
cmp dword [0x180016354], 0
je 0x180009ea9
mov bl, 1
jmp 0x180009eab
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x180009f4a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x180009f63
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x180009e40
jmp 0x18000b855
cmp dword [0x180016194], 0
je 0x18000a1b2
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a1b2
lea rdx, str.Hive
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a060
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a079
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x140], xmm0
movss dword [rbp + 0x144], xmm1
movss dword [rbp + 0x148], xmm2
lea rdx, [rbp + 0x140]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000a0e9
cmp dword [0x180016354], 0
je 0x18000a0e9
mov bl, 1
jmp 0x18000a0eb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000a18a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a1a3
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a080
jmp 0x18000b855
cmp dword [0x1800161a8], 0
je 0x18000a422
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a422
lea rdx, str.Laser
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000a213
lea rdx, str.ShootingTarget_base
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000a213
lea rdx, str.Platform
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a2c8
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a2e1
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x150], xmm0
movss dword [rbp + 0x154], xmm1
movss dword [rbp + 0x158], xmm2
lea rdx, [rbp + 0x150]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000a359
cmp dword [0x180016354], 0
je 0x18000a359
mov bl, 1
jmp 0x18000a35b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000a3fa
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a413
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a2f0
jmp 0x18000b855
cmp dword [0x1800161d0], 0
je 0x18000a662
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a662
lea rdx, str.Corridor_Pipe
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a510
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a529
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x160], xmm0
movss dword [rbp + 0x164], xmm1
movss dword [rbp + 0x168], xmm2
lea rdx, [rbp + 0x160]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000a599
cmp dword [0x180016354], 0
je 0x18000a599
mov bl, 1
jmp 0x18000a59b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000a63a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a653
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a530
jmp 0x18000b855
cmp dword [0x1800161d4], 0
je 0x18000a8a2
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a8a2
lea rdx, str.Ursula
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
movaps xmm0, xmmword [0x180013000]
movaps xmmword [rsp + 0x50], xmm0
movss dword [rsp + 0x28], xmm15
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x141707400
call rax
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a750
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a769
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x19
nop
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x170], xmm0
movss dword [rbp + 0x174], xmm1
movss dword [rbp + 0x178], xmm2
lea rdx, [rbp + 0x170]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000a7d9
cmp dword [0x180016354], 0
je 0x18000a7d9
mov bl, 1
jmp 0x18000a7db
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000a87a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a893
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a770
jmp 0x18000b855
cmp dword [0x18001619c], 0
je 0x18000aad3
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000aad3
lea rdx, str.ShootingTarget_duck
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm15
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm10
movaps xmm2, xmm6
movaps xmm1, xmm10
call fcn.180005f90
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000a983
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000a99c
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 5
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x180], xmm0
movss dword [rbp + 0x184], xmm1
movss dword [rbp + 0x188], xmm2
lea rdx, [rbp + 0x180]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000aa0a
cmp dword [0x180016354], 0
je 0x18000aa0a
mov bl, 1
jmp 0x18000aa0c
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000aaab
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000aac4
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000a9a1
jmp 0x18000b855
cmp dword [0x1800161c0], 0
je 0x18000ad12
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000ad12
lea rdx, str.Smart_mine
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm15
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm10
movaps xmm2, xmm6
movaps xmm1, xmm10
call fcn.180005f90
mov r14, qword [rbp - 0x48]
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000abb4
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000abcd
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0xf
nop dword [rax]
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x190], xmm0
movss dword [rbp + 0x194], xmm1
movss dword [rbp + 0x198], xmm2
lea rdx, [rbp + 0x190]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000ac49
cmp dword [0x180016354], 0
je 0x18000ac49
mov bl, 1
jmp 0x18000ac4b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000acea
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000ad03
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000abe0
jmp 0x18000b855
cmp dword [0x1800161b8], 0
je 0x18000af62
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000af62
lea rdx, str.weakpoint
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000ad5f
lea rdx, str._Generator
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm15
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm10
movaps xmm2, xmm6
movaps xmm1, xmm10
call fcn.180005f90
mov r14, qword [rbp - 0x48]
movzx ecx, byte [r14 + 0xce4]
mov eax, dword [r14 + 0x20]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000ae07
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000ae20
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x32
nop word [rax + rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x80], xmm0
movss dword [rbp + 0x84], xmm1
movss dword [rbp + 0x88], xmm2
lea rdx, [rbp + 0x80]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000ae99
cmp dword [0x180016354], 0
je 0x18000ae99
mov bl, 1
jmp 0x18000ae9b
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000af3a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000af53
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000ae30
jmp 0x18000b855
cmp dword [0x180016168], 0
je 0x18000b182
lea rdx, [0x180012ef4]
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b859
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm15
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm10
movaps xmm2, xmm6
movaps xmm1, xmm10
call fcn.180005f90
mov r14, qword [rbp - 0x48]
mov eax, dword [r14 + 0x20]
movzx ecx, byte [r14 + 0xce4]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp + 0x348]
mov dword [rsp + 0x54], eax
mov r14d, 6
mov dword [rsp + 0x58], r14d
mov dword [rsp + 0x5c], 0xc
movss dword [rsp + 0x60], xmm12
movss dword [rsp + 0x64], xmm13
movss dword [rsp + 0x68], xmm14
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], cl
cmp rdi, r13
je 0x18000b02f
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b048
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
mov esi, 0x64
nop dword [rax]
movss xmm2, dword [rbp - 0x6c]
addss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x70]
addss xmm1, dword [rbp - 0x7c]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x80]
mulss xmm0, xmm9
movss dword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b4], xmm1
movss dword [rbp + 0x1b8], xmm2
lea rdx, [rbp + 0x1b0]
mov rcx, qword [0x1800164b0]
call fcn.1800063b0
test al, al
je 0x18000b0b9
cmp dword [0x180016354], 0
je 0x18000b0b9
mov bl, 1
jmp 0x18000b0bb
xor bl, bl
movss xmm8, dword [rbp - 0x6c]
addss xmm8, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
movss xmm6, dword [rbp - 0x74]
addss xmm6, dword [rbp - 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x54], r12d
mov eax, 1
test bl, bl
cmovne eax, r14d
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], r12d
mulss xmm6, xmm9
movss dword [rsp + 0x60], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x64], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x68], xmm8
mov dword [rsp + 0x6c], 0
mov byte [rsp + 0x70], 0
cmp rdi, r13
je 0x18000b15a
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x70]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b173
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
sub rsi, 1
jne 0x18000b050
jmp 0x18000b855
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ebx, eax
mov rax, qword [rbp + 0x40]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xc8]
mov rcx, rax
call rdx
mov rcx, qword [rax]
mov r8, qword [rcx + 0x78]
mov edx, ebx
mov rcx, rax
call r8
mov r12, rax
test rax, rax
je 0x18000b852
mov r15, qword [rax + 0x10]
mov qword [rbp + 0x10], r15
test r15, r15
je 0x18000b852
cmp dword [0x180016064], 0
je 0x18000b5cc
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b5cc
lea rdx, str.Suicide
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000b390
xor r14d, r14d
movsxd rax, dword [0x1800164a8]
mov rcx, qword [rbp + 0x220]
cmp dword [rcx + rax*4], r14d
jle 0x18000b389
mov r15, rcx
lea esi, [r14 + 6]
nop word [rax + rax]
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x70]
addss xmm7, dword [rbp - 0x7c]
mulss xmm6, xmm9
mulss xmm7, xmm9
movss xmm8, dword [rbp - 0x74]
addss xmm8, dword [rbp - 0x80]
mulss xmm8, xmm9
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rsp + 0x50], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000b2ca
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18000b2d2
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x18000b2ee
test bl, bl
je 0x18000b2ee
cmp dword [0x180016354], 0
je 0x18000b2ee
mov cl, 1
jmp 0x18000b2f0
xor cl, cl
mov eax, dword [r12 + 0x20]
mov dword [rbp - 0x40], eax
mov dword [rbp - 0x3c], 0
mov eax, 1
test cl, cl
cmovne eax, esi
mov dword [rbp - 0x38], eax
mov dword [rbp - 0x34], 0
movss dword [rbp - 0x30], xmm8
movss dword [rbp - 0x2c], xmm7
movss dword [rbp - 0x28], xmm6
mov dword [rbp - 0x24], 0
mov byte [rbp - 0x20], 0
cmp rdi, r13
je 0x18000b352
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp - 0x20]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b36a
lea r8, [rbp - 0x40]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
inc r14d
movsxd rax, dword [0x1800164a8]
cmp r14d, dword [r15 + rax*4]
jl 0x18000b230
mov rsi, qword [rbp + 0x350]
mov r15, qword [rbp + 0x10]
mov r14, qword [rbp + 0x340]
mov qword [rbp + 0x20], 0
mov dword [rbp + 0x28], 0
mov qword [rbp - 8], 0
mov dword [rbp], 0
xor eax, eax
mov dword [rbp + 0x340], eax
mov dword [rbp + 0x350], eax
mov rax, qword [r12]
mov rdx, qword [rax + 0x130]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov rbx, rax
mov qword [rbp + 0x10], 0
mov rax, qword [rbp + 0x40]
mov rcx, qword [rax]
mov r8, qword [rcx + 0x470]
lea rdx, [rbp + 0x10]
mov rcx, rax
call r8
test al, al
je 0x18000ba26
cmp qword [rbp + 0x10], 0
je 0x18000ba26
mov r8, qword [rbp - 0x48]
mov rcx, qword [r8]
mov rax, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, r8
call rax
test rax, rax
je 0x18000ba26
lea rax, [rbp + 0x350]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x340]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov r9, rsi
mov r8, rbx
mov rdx, qword [rbp + 0x48]
mov rcx, qword [0x1800164b0]
call fcn.180005ff0
test al, al
je 0x18000b852
mov rax, qword [r12]
mov rdx, qword [rax + 0x130]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov ebx, dword [rbp]
movsd xmm6, qword [rbp - 8]
xor esi, esi
cmp dword [0x180016120], esi
jne 0x18000b513
movsd qword [rbp + 0x210], xmm6
mov dword [rbp + 0x218], ebx
movsd qword [rbp + 0x1f0], xmm12
mov eax, dword [rbp + 8]
mov dword [rbp + 0x1f8], eax
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x210]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1f0]
mov r8, r15
mov rdx, qword [rbp + 0x1d0]
mov rax, qword [rbp + 0x1d8]
mov rcx, qword [rax + 0x70]
call fcn.18000ec10
test al, al
je 0x18000b852
cmp dword [0x180016338], 0
je 0x18000b64c
movsd qword [rbp + 0x30], xmm6
mov dword [rbp + 0x38], ebx
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x30]
mov rbx, qword [rbp + 0x1e0]
mov rcx, rbx
call fcn.18000dd30
test al, al
je 0x18000b852
cmp dword [0x180016338], 0
je 0x18000b64c
movss xmm8, dword [rbp + 0x20]
movss xmm7, dword [rbp + 0x24]
xorps xmm10, xmm10
cvtsi2ss xmm10, dword [0x18001633c]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x338]
mov rcx, rbx
call rdx
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm9
mov rax, qword [rbx]
mov rdx, qword [rax + 0x340]
mov rcx, rbx
call rdx
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm0, xmm9
subss xmm7, xmm0
subss xmm8, xmm6
mulss xmm8, xmm8
mulss xmm7, xmm7
addss xmm8, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm8
ja 0x18000b635
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x18000b63e
cmp dword [0x180016100], 0
je 0x18000b60c
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b60c
cmp r12, qword [rbp - 0x48]
je 0x18000b852
mov rax, qword [r12]
mov rdx, qword [rax + 0xe0]
mov rcx, r12
call rdx
test eax, eax
jle 0x18000b852
jmp 0x18000b390
mov r8d, dword [r12 + 0x20]
mov rax, qword [rbp - 0x48]
mov edx, dword [rax + 0x20]
mov rcx, qword [rbp + 0x48]
movabs rax, 0x1411d20f0
call rax
test eax, eax
jne 0x18000b852
jmp 0x18000b390
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm10, xmm0
jb 0x18000b852
xorps xmm10, xmm10
lea rdx, [0x180011354]
mov rcx, qword [rbp + 0x50]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000b6e6
mov rcx, qword [rbp - 0x48]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rbp - 0x40], eax
mov eax, dword [rbp + 0x348]
mov dword [rbp - 0x3c], eax
mov eax, 6
mov dword [rbp - 0x38], eax
mov dword [rbp - 0x34], 0xc
movss dword [rbp - 0x30], xmm12
movss dword [rbp - 0x2c], xmm13
movss dword [rbp - 0x28], xmm14
mov dword [rbp - 0x24], 0
mov byte [rbp - 0x20], cl
cmp rdi, r13
je 0x18000b6ce
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp - 0x20]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b6e6
lea r8, [rbp - 0x40]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
movsxd rax, dword [0x1800164a8]
mov rcx, qword [rbp + 0x238]
cmp dword [rcx + rax*4], 0
jle 0x18000b852
movss xmm6, dword [rbp]
movss xmm7, dword [rbp - 4]
movss xmm8, dword [rbp - 8]
mov r14d, dword [rbp + 0x340]
mov r15d, dword [rbp + 0x350]
nop dword [rax]
movabs rax, 0x142373288
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm6
andps xmm0, xmmword [0x180013010]
comiss xmm11, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm7
movsd qword [rsp + 0x50], xmm2
subss xmm2, xmm8
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm10
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000b78b
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18000b793
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm11, xmm0
setae al
test al, al
je 0x18000b7b6
test bl, bl
je 0x18000b7b6
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b7b6
mov dl, 1
jmp 0x18000b7b8
xor dl, dl
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp - 0x40], eax
mov dword [rbp - 0x3c], r15d
mov eax, 1
test dl, dl
mov edx, 6
cmovne eax, edx
mov dword [rbp - 0x38], eax
mov dword [rbp - 0x34], r14d
movss dword [rbp - 0x30], xmm8
movss dword [rbp - 0x2c], xmm7
movss dword [rbp - 0x28], xmm6
mov dword [rbp - 0x24], 0
mov byte [rbp - 0x20], cl
cmp rdi, r13
je 0x18000b821
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp - 0x20]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp - 0x60], rdi
jmp 0x18000b839
lea r8, [rbp - 0x40]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.180001590
mov r13, qword [rbp - 0x58]
mov rdi, qword [rbp - 0x60]
inc esi
movsxd rax, dword [0x1800164a8]
mov rcx, qword [rbp + 0x238]
cmp esi, dword [rcx + rax*4]
jl 0x18000b720
xor r12d, r12d
mov rbx, qword [rbp - 0x50]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x30]
mov rcx, rbx
call rdx
mov r15, rax
mov qword [rbp - 0x18], rax
test rax, rax
xorps xmm10, xmm10
movss xmm6, dword [0x180012f18]
jne 0x180006940
mov esi, dword [rbp + 0xc]
movabs r14, 0xe38e38e38e38e39
mov rax, qword [rbx]
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call rdx
cmp dword [0x1800160fc], 0
je 0x18000ba26
movss xmm0, dword [0x1800164bc]
comiss xmm0, dword [0x1800164b8]
jb 0x18000ba26
mov rbx, qword [rbp - 0x68]
cmp rbx, rdi
je 0x18000ba1a
mov rdi, qword [rbp + 0x200]
mov rcx, rdi
call fcn.180006450
test al, al
je 0x18000ba1a
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x80]
call fcn.180001d90
mov rbx, rax
mov qword [rbp + 0x340], rax
mov dword [0x18001656c], esi
mov dword [rsp + 0x50], esi
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.180001d90
nop
mov rdx, qword [0x180016538]
cmp rdx, qword [0x180016540]
je 0x18000b94d
mov eax, dword [rsp + 0x50]
mov dword [rdx], eax
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
mov r8, r12
mov qword [rdx + 8], rax
mov rax, qword [rsp + 0x60]
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rcx
add qword [0x180016538], 0x20
jmp 0x18000b968
lea r8, [rsp + 0x50]
lea rcx, [0x180016530]
call fcn.180001360
mov r12, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
test r8, r8
je 0x18000b9bc
sub r12, r8
mov rax, r14
imul r12
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, r8
cmp rdx, 0x1000
jb 0x18000b9b3
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b9b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18000f38c
nop
mov rcx, rbx
call fcn.18000e920
mov rax, qword [0x180016538]
cmp qword [0x180016530], rax
je 0x18000ba06
movabs rdx, 0x14260c2c8
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 0x100
lea r8, [0x180016510]
mov rdx, qword [rdx]
mov rcx, qword [rdi + 0x18]
movabs rax, 0x1414844d0
call rax
mov rcx, qword [0x1800164b0]
call fcn.18000ea50
mov r13, qword [rbp - 0x58]
mov rbx, qword [rbp - 0x68]
mov dword [0x1800164bc], 0
jmp 0x18000ba2a
mov rbx, qword [rbp - 0x68]
mov rcx, qword [rbp + 0x220]
test rcx, rcx
je 0x18000ba7a
mov rax, qword [rbp + 0x230]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ba74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ba74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000f38c
nop
mov rcx, qword [rbp + 0x238]
test rcx, rcx
je 0x18000baca
mov rax, qword [rbp + 0x248]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000bac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bac4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000f38c
nop
test rbx, rbx
je 0x18000bb24
sub r13, rbx
movabs rax, 0xe38e38e38e38e39
imul r13
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000bb1c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000bb1c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18000f38c
lea r11, [rsp + 0x3f8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret