Function at 0x180004930
Capabilities:
Encrypt data using speck
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x228]
sub rsp, 0x300
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x18000d040]
xor rax, rsp
mov qword [rbp + 0x158], rax
movabs rax, 0x142378188
mov r15, qword [rax]
mov qword [rbp - 0x48], r15
test r15, r15
je 0x1800079cd
mov rdi, qword [r15 + 0xd0]
test rdi, rdi
je 0x1800079cd
mov rbx, qword [rdi + 0x48]
test rbx, rbx
je 0x1800079cd
mov rax, qword [rbx]
mov rdx, qword [rax + 0xc8]
mov rcx, rbx
call rdx
mov qword [rbp + 0x18], rax
test rax, rax
je 0x1800079cd
mov r8, qword [r15 + 0xe0]
test r8, r8
je 0x1800079cd
mov rcx, qword [r8]
mov rdx, qword [rcx + 0xa8]
mov rcx, r8
call rdx
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1800079cd
mov rcx, rbx
call fcn.180004050
mov r13, rax
mov qword [rbp - 0x68], rax
test rax, rax
je 0x1800079cd
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xe0]
mov rcx, rax
call rdx
test eax, eax
jle 0x1800079cd
mov rcx, qword [r13]
mov r8, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, r13
call r8
mov qword [rbp - 0x30], rax
test rax, rax
je 0x1800079cd
lea rsi, [rax + 0x28]
mov qword [rbp - 0x38], rsi
test rsi, rsi
je 0x1800079cd
mov rsi, qword [rsi + 8]
test rsi, rsi
je 0x1800079cd
mov r12, qword [rsi + 0xd0]
test r12, r12
je 0x1800079cd
mov rsi, qword [rsi + 0xc8]
test rsi, rsi
je 0x1800079cd
mov rax, qword [rbx]
mov rdx, qword [rax + 0x448]
mov rcx, rbx
call rdx
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1800079cd
mov r14, qword [rdi + 0x140]
test r14, r14
je 0x1800079cd
mov rdi, qword [r13 + 0xd80]
test rdi, rdi
je 0x1800079cd
mov r15, qword [r15 + 0xc0]
mov rcx, rbx
call fcn.180004050
test rax, rax
je 0x1800079cd
movabs rax, 0x142378188
mov rax, qword [rax]
mov rax, qword [rax + 0x70]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x1800079cd
mov rcx, qword [rbp - 0x30]
mov rcx, qword [rcx + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
mov qword [rbp - 0x40], rax
xorps xmm15, xmm15
mov qword [rbp + 0x148], 0
mov dword [rbp + 0x150], 0
mov rbx, qword [rbp - 0x38]
mov rcx, qword [rbx]
mov r8, qword [rcx + 0x2f0]
lea rdx, [rbp + 0x148]
mov rcx, rbx
call r8
mov dword [r14 + 0x98c], 0x4b18967f
mov dword [r14 + 0x990], 0x4b18967f
mov r14, qword [rbp - 0x40]
cmp dword [0x18000d348], 0
je 0x180004bcc
lea rdx, [0x18000af58]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180004bcc
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180004bcc
mov rax, qword [rbx]
mov rdx, qword [rax + 0x58]
mov rcx, rbx
call rdx
mov rax, qword [rbx]
mov rdx, qword [rax + 0x60]
mov rcx, rbx
call rdx
cmp dword [0x18000d384], 0
je 0x180004be8
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetKeyState]
test al, 1
je 0x180004be8
mov dl, 1
jmp 0x180004bea
xor dl, dl
mov rax, qword [r13]
mov r8, qword [rax + 0x220]
mov rcx, r13
call r8
cmp dword [0x18000d408], 0
je 0x180004c9b
mov rdx, qword [rsi + 0x68]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x180004c39
nop dword [rax]
cmp word [rax + 0x1c], 0x61
jae 0x180004c2d
mov rax, qword [rax + 0x10]
jmp 0x180004c33
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180004c20
cmp byte [rcx + 0x19], 0
jne 0x180004c55
mov eax, 0x61
cmp ax, word [rcx + 0x1c]
jb 0x180004c55
cmp rcx, rdx
je 0x180004c55
mov eax, dword [rcx + 0x24]
mov dword [rcx + 0x20], eax
mov rdx, qword [rsi + 0x68]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x180004c7f
cmp word [rax + 0x1c], 0x62
jae 0x180004c73
mov rax, qword [rax + 0x10]
jmp 0x180004c79
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180004c66
cmp byte [rcx + 0x19], 0
jne 0x180004c9b
mov eax, 0x62
cmp ax, word [rcx + 0x1c]
jb 0x180004c9b
cmp rcx, rdx
je 0x180004c9b
mov eax, dword [rcx + 0x24]
mov dword [rcx + 0x20], eax
cmp dword [0x18000d404], 0
je 0x180004cc6
mov byte [rdi + 0xb4], 0
movss dword [rdi + 0xb8], xmm15
movss dword [rdi + 0xbc], xmm15
movss dword [rdi + 0xc0], xmm15
cmp dword [0x18000d41c], 0
je 0x180004ce1
mov edx, 0x1f
lea rcx, [rsi + 0x68]
movaps xmm2, xmm15
call fcn.180007a60
cmp dword [0x18000d40c], 0
je 0x180004cf6
movaps xmm1, xmm15
mov rcx, rsi
call fcn.180003d60
cmp dword [0x18000d258], 0
je 0x180004e9f
mov ecx, dword [0x18000d3dc]
test ecx, ecx
je 0x180004e24
sub ecx, 1
je 0x180004da5
cmp ecx, 1
jne 0x180004e9f
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rsi, r13
test ax, ax
je 0x180004ea2
movss xmm1, dword [0x18000b284]
movss xmm3, dword [0x18000b224]
movss xmm5, dword [0x18000b1ac]
mov rax, qword [r13 + 0x10]
movups xmm0, xmmword [rax + 0x40]
movups xmm2, xmmword [rax + 0x50]
movups xmm4, xmmword [rax + 0x60]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rax + 0x40], xmm0
shufps xmm2, xmm2, 0x93
movss xmm2, xmm3
shufps xmm2, xmm2, 0x39
movups xmmword [rsp + 0x78], xmm2
movups xmmword [rax + 0x50], xmm2
shufps xmm4, xmm4, 0x93
movss xmm4, xmm5
shufps xmm4, xmm4, 0x39
movups xmmword [rbp - 0x78], xmm4
movups xmmword [rax + 0x60], xmm4
jmp 0x180004ea2
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rsi, r13
test ax, ax
je 0x180004ea2
movss xmm1, dword [0x18000b274]
movss xmm3, dword [0x18000b280]
movss xmm5, dword [0x18000b1a8]
mov rax, qword [r13 + 0x10]
movups xmm0, xmmword [rax + 0x40]
movups xmm2, xmmword [rax + 0x50]
movups xmm4, xmmword [rax + 0x60]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rax + 0x40], xmm0
shufps xmm2, xmm2, 0x93
movss xmm2, xmm3
shufps xmm2, xmm2, 0x39
movups xmmword [rsp + 0x78], xmm2
movups xmmword [rax + 0x50], xmm2
shufps xmm4, xmm4, 0x93
movss xmm4, xmm5
shufps xmm4, xmm4, 0x39
movups xmmword [rbp - 0x78], xmm4
movups xmmword [rax + 0x60], xmm4
jmp 0x180004ea2
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rsi, r13
test ax, ax
je 0x180004ea2
movss xmm1, dword [0x18000b24c]
movss xmm3, dword [0x18000b254]
movss xmm5, dword [0x18000b194]
mov rax, qword [r13 + 0x10]
movups xmm0, xmmword [rax + 0x40]
movups xmm2, xmmword [rax + 0x50]
movups xmm4, xmmword [rax + 0x60]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rax + 0x40], xmm0
shufps xmm2, xmm2, 0x93
movss xmm2, xmm3
shufps xmm2, xmm2, 0x39
movups xmmword [rsp + 0x78], xmm2
movups xmmword [rax + 0x50], xmm2
shufps xmm4, xmm4, 0x93
movss xmm4, xmm5
shufps xmm4, xmm4, 0x39
movups xmmword [rbp - 0x78], xmm4
movups xmmword [rax + 0x60], xmm4
jmp 0x180004ea2
mov rsi, r13
movss xmm7, dword [0x18000b118]
cmp dword [0x18000d234], 0
je 0x180004eed
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x180004ecd
movss xmm0, dword [0x18000b124]
jmp 0x180004ed0
movaps xmm0, xmm7
mov rax, qword [rsi + 0x10]
mov dword [rax + 0x7c], 0x3f800000
mov dword [rax + 0x80], 0x3f800000
movss dword [rax + 0x84], xmm0
mov rax, qword [r15]
mov r8, qword [rax + 0x38]
xor edx, edx
mov rcx, r15
call r8
movss xmm1, dword [0x18000d1f8]
addss xmm1, xmm0
movss dword [0x18000d1f8], xmm1
lea rdx, [0x18000af5c]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, str.arl0
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af68]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af6c]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af70]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af74]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af78]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af7c]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af78]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af80]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af84]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
lea rdx, [0x18000af88]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005024
xor r14d, r14d
mov dword [0x18000d268], r14d
jmp 0x180005031
mov dword [0x18000d268], 1
xor r14d, r14d
movsxd rax, dword [0x18000d398]
cmp eax, 3
ja 0x180005054
lea rcx, [0x18000af48]
movaps xmm0, xmm7
divss xmm0, dword [rcx + rax*4]
movss dword [0x18000d1f4], xmm0
mov eax, dword [0x18000d360]
cmp eax, 0x1b
ja 0x18000507a
cmp eax, 0xa
jge 0x18000506e
inc eax
mov dword [0x18000d35c], eax
jmp 0x18000507a
add eax, 0xfffffff9
lea ecx, [rax + rax*4]
mov dword [0x18000d35c], ecx
movss xmm14, dword [0x18000b1b0]
mov eax, dword [0x18000d2c0]
cmp eax, 0x64
ja 0x1800050d1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movaps xmm1, xmm2
mulss xmm1, dword [0x18000b278]
divss xmm1, xmm14
movss xmm0, dword [0x18000b27c]
subss xmm0, xmm1
movss dword [0x18000d33c], xmm0
test eax, eax
jle 0x1800050d1
movss xmm0, dword [0x18000b1b4]
subss xmm0, xmm2
movss dword [0x18000d33c], xmm0
mov qword [0x18000d378], 0
mov dword [0x18000d210], r14d
cmp dword [0x18000d29c], 0
je 0x180005126
mov ecx, dword [0x18000d388]
test ecx, ecx
je 0x1800050fb
cmp ecx, 3
jne 0x180005105
mov dword [0x18000d378], 1
mov eax, r14d
cmp ecx, 1
sete al
mov dword [0x18000d37c], eax
lea eax, [rcx - 2]
cmp eax, 1
ja 0x180005126
mov dword [0x18000d210], 1
mov rcx, qword [rbp - 0x50]
mov rax, qword [rcx]
mov r8, qword [rax + 0x3a8]
lea rdx, str.mat_head
call r8
mov dword [rsp + 0x60], eax
call fcn.180007ff0
cmp dword [0x18000d384], 0
je 0x1800052a1
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x1800052a1
cmp dword [0x18000d378], 0
jne 0x1800052a1
cmp dword [0x18000d37c], 0
jne 0x1800052a1
mov rcx, qword [rsi + 0x10]
movups xmm6, xmmword [rcx + 0x40]
movups xmm8, xmmword [rcx + 0x50]
movups xmm10, xmmword [rcx + 0x60]
mov rax, qword [rcx]
mov r8, qword [rax + 0x2a0]
xor edx, edx
call r8
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x30]
mov rcx, rax
call rdx
mov rcx, qword [rax]
mov r8, qword [rcx + 0x38]
mov edx, 0x12
mov rcx, rax
call r8
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.180001010
movss xmm7, dword [rbp - 0x7c]
movaps xmm9, xmm7
movaps xmm0, xmm6
shufps xmm0, xmm6, 0x55
mulss xmm9, xmm0
movss xmm4, dword [rsp + 0x74]
movaps xmm1, xmm4
mulss xmm1, xmm6
addss xmm9, xmm1
movss xmm5, dword [rbp - 0x6c]
movaps xmm2, xmm5
movaps xmm0, xmm6
shufps xmm0, xmm6, 0xaa
mulss xmm2, xmm0
addss xmm9, xmm2
shufps xmm6, xmm6, 0xff
addss xmm9, xmm6
movaps xmm3, xmm8
shufps xmm3, xmm8, 0x55
mulss xmm3, xmm7
movaps xmm0, xmm8
mulss xmm0, xmm4
addss xmm3, xmm0
movaps xmm1, xmm8
shufps xmm1, xmm8, 0xaa
mulss xmm1, xmm5
addss xmm3, xmm1
shufps xmm8, xmm8, 0xff
addss xmm3, xmm8
movaps xmm2, xmm10
shufps xmm2, xmm10, 0x55
mulss xmm2, xmm7
movaps xmm0, xmm10
mulss xmm0, xmm4
addss xmm2, xmm0
movaps xmm1, xmm10
shufps xmm1, xmm10, 0xaa
mulss xmm1, xmm5
addss xmm2, xmm1
shufps xmm10, xmm10, 0xff
addss xmm2, xmm10
movss dword [rbp + 0x148], xmm9
movss dword [rbp + 0x14c], xmm3
movss dword [rbp + 0x150], xmm2
movss xmm7, dword [0x18000b118]
jmp 0x1800052c5
mov rax, qword [rbp - 0x48]
mov rax, qword [rax + 0x48]
movsd xmm0, qword [rax + 0x17c0]
movsd qword [rbp + 0x148], xmm0
mov eax, dword [rax + 0x17c8]
mov dword [rbp + 0x150], eax
lea rax, [rbp + 0x148]
movsd xmm10, qword [rax]
mov edi, dword [rax + 8]
mov dword [rbp - 0x58], edi
movsd qword [rbp], xmm10
movss dword [0x18000d510], xmm10
movss xmm11, dword [rbp + 4]
movss dword [0x18000d514], xmm11
movd xmm12, edi
movss dword [0x18000d518], xmm12
movzx eax, byte [rsi + 0xce4]
mov byte [0x18000d52c], al
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x108], xmm1
mov r13, r14
mov qword [rbp + 0x118], r14
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 8]
mov dword [0x18000d1f0], eax
mov rbx, qword [rbp + 0x10]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x30]
mov rcx, rbx
call rdx
mov r12, rax
mov r15, qword [rbp + 0x110]
test rax, rax
je 0x1800077f3
movss xmm9, dword [0x18000b110]
movss xmm8, dword [0x18000b120]
movss xmm13, dword [0x18000b18c]
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rbx, rax
test rax, rax
je 0x1800077cf
mov rcx, qword [r12]
mov rdx, qword [rcx + 0x60]
mov rcx, r12
call rdx
mov rdi, rax
mov qword [rbp - 0x20], rax
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x10]
mov rcx, rbx
call rdx
mov r14, rax
mov qword [rbp - 0x60], rax
mov rcx, qword [r12]
mov rdx, qword [rcx + 0x178]
mov rcx, r12
call rdx
test al, al
jne 0x1800077cc
mov rcx, qword [r12]
mov r8, qword [rcx + 0xc8]
lea rdx, [rbp + 0x120]
mov rcx, r12
call r8
cmp dword [0x18000d290], 0
je 0x180005472
lea rdx, str.case
mov rcx, rdi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000542c
lea rdx, str.Lootbox_Closed
mov rcx, rdi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000542c
lea rdx, str.pickup_case_closed_active
mov rcx, rdi
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005472
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x18000b290]
movaps xmmword [rsp + 0x30], xmm0
movss xmm6, dword [0x18000b234]
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x30]
mov edx, eax
xor ecx, ecx
movabs rdi, 0x141712030
call rdi
jmp 0x180005484
movabs rdi, 0x141712030
movss xmm6, dword [0x18000b234]
cmp dword [0x18000d480], 0
je 0x1800054e6
lea rdx, str.InventoryPickup
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1800054b4
mov rax, qword [r12]
mov rdx, qword [rax + 0x30]
mov rcx, r12
call rdx
cmp eax, 0x480012
jne 0x1800054e6
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
movaps xmm0, xmmword [0x18000b290]
movaps xmmword [rsp + 0x30], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x30]
mov edx, eax
xor ecx, ecx
call rdi
movss xmm3, dword [rbp + 0x134]
addss xmm3, dword [rbp + 0x128]
movss xmm1, dword [rbp + 0x130]
addss xmm1, dword [rbp + 0x124]
movss xmm0, dword [rbp + 0x12c]
addss xmm0, dword [rbp + 0x120]
mulss xmm0, xmm9
movaps xmm2, xmm10
subss xmm2, xmm0
mulss xmm1, xmm9
movaps xmm4, xmm11
subss xmm4, xmm1
mulss xmm3, xmm9
movaps xmm0, xmm12
subss xmm0, xmm3
mulss xmm4, xmm4
mulss xmm2, xmm2
addss xmm4, xmm2
mulss xmm0, xmm0
addss xmm4, xmm0
movaps xmm3, xmm4
mulss xmm3, xmm9
movd ecx, xmm4
sar ecx, 1
mov eax, 0x5f3759df
sub eax, ecx
movd xmm1, eax
movaps xmm0, xmm1
mulss xmm0, xmm3
mulss xmm0, xmm1
movaps xmm2, xmm8
subss xmm2, xmm0
mulss xmm2, xmm1
movaps xmm0, xmm3
mulss xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm8
subss xmm1, xmm0
mulss xmm1, xmm2
mulss xmm3, xmm1
mulss xmm3, xmm1
movaps xmm0, xmm8
subss xmm0, xmm3
mulss xmm0, xmm1
movaps xmm6, xmm7
divss xmm6, xmm0
mov eax, dword [0x18000d2b0]
test eax, eax
jne 0x1800055c5
cmp dword [0x18000d2b8], eax
je 0x18000562e
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180005628
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.apsule
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005628
movss xmm0, dword [0x18000b1c8]
comiss xmm0, xmm6
jb 0x1800077cc
jmp 0x1800067c2
mov eax, dword [0x18000d2b0]
test eax, eax
je 0x180005683
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180005683
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.ShootingTarget1
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800067c2
cmp dword [0x18000d2b4], 0
je 0x180005894
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180005894
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Boss_ShootingTarget
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005894
movss xmm0, dword [0x18000b1e0]
comiss xmm0, xmm6
jb 0x1800077cc
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x180005777
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180005799
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor r14d, r14d
cmp dword [0x18000d268], r14d
jne 0x1800077cf
lea ebx, [r14 + 0x32]
nop dword [rax]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x18000585a
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x18000587c
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
sub rbx, 1
jne 0x1800057b0
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
mov eax, dword [0x18000d2ac]
test eax, eax
je 0x1800062dc
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180005aa4
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.BossEye
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005aa4
comiss xmm14, xmm6
jb 0x180005aa4
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x180005982
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800059a4
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor r14d, r14d
cmp dword [0x18000d268], r14d
jne 0x1800077cf
lea ebx, [r14 + 0x1e]
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x180005a6a
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180005a8c
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
sub rbx, 1
jne 0x1800059c0
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
mov eax, dword [0x18000d2ac]
test eax, eax
je 0x1800062dc
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180005cb4
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.BossThroat
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005cb4
comiss xmm14, xmm6
jb 0x180005cb4
cmp dword [0x18000d268], 0
jne 0x1800077cc
mov eax, dword [rsi + 0x20]
movzx ecx, byte [rsi + 0xce4]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x180005b92
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180005bb4
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor r14d, r14d
cmp dword [0x18000d268], r14d
jne 0x1800077cf
lea ebx, [r14 + 0x1e]
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x180005c7a
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180005c9c
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
sub rbx, 1
jne 0x180005bd0
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
mov eax, dword [0x18000d2ac]
test eax, eax
je 0x1800062dc
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180005d13
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Mesh_Eye_CoverProxy
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800067c2
mov eax, dword [0x18000d2ac]
test eax, eax
je 0x1800062dc
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180005f14
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Hive
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005f14
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x180005df7
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180005e19
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor r14d, r14d
cmp dword [0x18000d268], r14d
jne 0x1800077cf
lea ebx, [r14 + 0x1e]
nop dword [rax]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x180005eda
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180005efc
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
sub rbx, 1
jne 0x180005e30
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
mov eax, dword [0x18000d2ac]
test eax, eax
je 0x1800062dc
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800062dc
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Corridor_Pipe
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800062dc
comiss xmm14, xmm6
jb 0x1800062dc
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x180006002
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006024
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
cmp dword [0x18000d268], 0
jne 0x1800077cc
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
xor r14d, r14d
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x1800060de
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006100
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x1800061aa
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800061cc
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x180006276
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006298
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
jmp 0x1800068b4
mov eax, dword [0x18000d2a8]
test eax, eax
je 0x180006af3
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingObject
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800064e4
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Boss_Eye
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800064e4
comiss xmm13, xmm6
jb 0x1800064e4
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x1800063ca
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800063ec
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor r14d, r14d
cmp dword [0x18000d268], r14d
jne 0x1800077cf
lea ebx, [r14 + 0x32]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x1800064aa
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800064cc
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
sub rbx, 1
jne 0x180006400
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
mov eax, dword [0x18000d2a8]
test eax, eax
je 0x180006af3
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingObject
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800066f4
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Boss_Dron
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800066f4
comiss xmm13, xmm6
jb 0x1800066f4
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x1800065d2
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800065f4
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor r14d, r14d
cmp dword [0x18000d268], r14d
jne 0x1800077cf
lea ebx, [r14 + 0x32]
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x1800066ba
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800066dc
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
sub rbx, 1
jne 0x180006610
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
mov eax, dword [0x18000d2a8]
test eax, eax
je 0x180006af3
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180006755
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Corridor
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180006755
comiss xmm13, xmm6
jae 0x1800067c2
mov eax, dword [0x18000d2a8]
test eax, eax
je 0x180006af3
mov rax, qword [r12]
mov rdx, qword [rax + 0x18]
mov rcx, r12
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180006af3
mov rax, qword [r12]
mov rdx, qword [rax + 0x60]
mov rcx, r12
call rdx
lea rdx, str.Barrel_Exploding
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180006af3
comiss xmm13, xmm6
jb 0x180006af3
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x34], eax
mov dword [rsp + 0x38], 6
mov dword [rsp + 0x3c], 0xc
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm12
mov dword [rsp + 0x4c], 0
mov byte [rsp + 0x50], cl
cmp r15, r13
je 0x180006843
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006865
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
cmp dword [0x18000d268], 0
jne 0x1800077cc
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
xor r14d, r14d
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x18000691f
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006941
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x1800069eb
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006a0d
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
movss xmm8, dword [rbp + 0x134]
addss xmm8, dword [rbp + 0x128]
movss xmm7, dword [rbp + 0x130]
addss xmm7, dword [rbp + 0x124]
movss xmm6, dword [rbp + 0x12c]
addss xmm6, dword [rbp + 0x120]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], r14d
mov qword [rsp + 0x38], 1
mulss xmm6, xmm9
movss dword [rsp + 0x40], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x44], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x48], xmm8
mov dword [rsp + 0x4c], r14d
mov byte [rsp + 0x50], r14b
cmp r15, r13
je 0x180006ac3
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rsp + 0x50]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
lea r8, [rsp + 0x30]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
movss xmm8, dword [0x18000b120]
jmp 0x1800077cf
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov r9, qword [rbp + 0x18]
mov rcx, qword [r9]
mov r8, qword [rcx + 0x78]
mov edx, eax
mov rcx, r9
call r8
mov rbx, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1800077cc
mov qword [rbp + 0x138], 0
mov dword [rbp + 0x140], 0
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xe0]
mov rcx, rax
call rdx
test eax, eax
jle 0x1800077cc
mov rcx, qword [rsi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
mov rdi, rax
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x130]
mov rcx, rbx
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov rsi, rax
cmp dword [0x18000d400], 0
je 0x180006d01
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006d01
mov rax, qword [rbp - 0x68]
movzx edx, byte [rax + 0xce4]
mov ecx, dword [rax + 0x20]
mov dword [rsp + 0x68], ecx
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 6
mov dword [rsp + 0x74], 0xc
movss dword [rsp + 0x78], xmm10
movss dword [rsp + 0x7c], xmm11
movss dword [rbp - 0x80], xmm12
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], dl
cmp r15, r13
je 0x180006c16
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006c38
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor ebx, ebx
cmp dword [0x18000d35c], ebx
jle 0x180006d01
mov r14, qword [rbp - 0x68]
nop word [rax + rax]
mov r8d, 0xd
mov rdx, qword [r14 + 0x10]
lea rcx, [rbp + 0xf0]
call fcn.180003eb0
movzx edx, byte [r14 + 0xce4]
mov ecx, dword [r14 + 0x20]
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], 1
mov qword [rsp + 0x70], 1
movsd xmm0, qword [rax]
movsd qword [rsp + 0x78], xmm0
mov eax, dword [rax + 8]
mov dword [rbp - 0x80], eax
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], dl
cmp r15, r13
je 0x180006ccd
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006cef
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
inc ebx
cmp ebx, dword [0x18000d35c]
jl 0x180006c50
mov r14, qword [rbp - 0x60]
cmp dword [0x18000d2d8], 0
je 0x180006e81
lea rdx, [0x18000af88]
mov rcx, qword [rbp - 0x40]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180006e81
mov rcx, qword [rbp - 0x68]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 6
mov dword [rsp + 0x74], 0xc
movss dword [rsp + 0x78], xmm10
movss dword [rsp + 0x7c], xmm11
movss dword [rbp - 0x80], xmm12
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], cl
cmp r15, r13
je 0x180006d9b
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006dbd
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor ebx, ebx
cmp dword [0x18000d35c], ebx
jle 0x180006e81
mov r14, qword [rbp - 0x68]
nop
mov r8d, 0xd
mov rdx, qword [r14 + 0x10]
lea rcx, [rbp + 0xfc]
call fcn.180003eb0
movzx edx, byte [r14 + 0xce4]
mov ecx, dword [r14 + 0x20]
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], 1
mov qword [rsp + 0x70], 1
movsd xmm0, qword [rax]
movsd qword [rsp + 0x78], xmm0
mov eax, dword [rax + 8]
mov dword [rbp - 0x80], eax
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], dl
cmp r15, r13
je 0x180006e4d
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180006e6f
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
inc ebx
cmp ebx, dword [0x18000d35c]
jl 0x180006dd0
mov r14, qword [rbp - 0x60]
mov qword [rsp + 0x28], rdi
lea rax, [rbp + 0x138]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, r14
mov r14, qword [rbp - 0x20]
mov rdx, r14
mov rcx, rsi
call fcn.180004520
mov rsi, qword [rbp - 0x68]
test eax, eax
je 0x1800077cc
mov eax, dword [rsi + 0x3e0]
mov rdi, qword [rsp + 0x30]
cmp dword [rdi + 0x3e0], eax
jne 0x180006ece
test eax, eax
jne 0x180007602
cmp rsi, rdi
je 0x180007602
mov qword [rbp + 0x148], 0
mov dword [rbp + 0x150], 0
mov rax, qword [r12]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, r12
call r8
mov rbx, rax
test rax, rax
je 0x1800077cc
cmp dword [0x18000d284], 0
je 0x180006f55
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xa0]
mov rcx, rax
call rdx
mov qword [rax + 0x1c], 0x10
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x160]
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x18000b1e8]
movaps xmm2, xmm15
movss xmm1, dword [0x18000b1f0]
mov rcx, rbx
call rdx
mov ebx, dword [rbp - 0x58]
cmp dword [0x18000d208], 0
jne 0x180006fa6
movsd xmm0, qword [rbp + 0x138]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [rbp + 0x140]
mov dword [rbp + 0x28], eax
movsd qword [rbp + 0xe0], xmm10
mov dword [rbp + 0xe8], ebx
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xe0]
mov rax, qword [rbp - 0x48]
mov rcx, qword [rax + 0x70]
call fcn.180008110
test al, al
je 0x1800077cc
cmp dword [0x18000d380], 0
je 0x180007020
movsd xmm0, qword [rbp + 0x138]
movsd qword [rbp + 0x30], xmm0
mov eax, dword [rbp + 0x140]
mov dword [rbp + 0x38], eax
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x30]
mov rax, qword [rbp - 0x48]
mov rcx, qword [rax + 0x48]
call fcn.180007e40
test eax, eax
jne 0x180006fe9
cmp dword [0x18000d380], eax
je 0x180007020
movsd xmm0, qword [rbp + 0x148]
movsd qword [rbp + 0x40], xmm0
mov eax, dword [rbp + 0x150]
mov dword [rbp + 0x48], eax
movss xmm2, dword [0x18000d338]
lea rdx, [rbp + 0x40]
mov rax, qword [rbp - 0x48]
mov rcx, qword [rax + 0x48]
call fcn.180004880
test al, al
je 0x1800077cc
cmp dword [0x18000d210], 0
jne 0x18000715b
cmp dword [0x18000d378], 0
jne 0x180007043
cmp dword [0x18000d37c], 0
je 0x1800077cc
movsd xmm0, qword [rbp + 0x138]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [rbp + 0x140]
mov dword [rbp + 0x58], eax
movsd qword [rbp + 0x60], xmm10
mov dword [rbp + 0x68], ebx
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x60]
mov rcx, qword [rbp - 0x10]
call fcn.180008110
test al, al
je 0x1800077cc
cmp dword [0x18000d268], 0
jne 0x1800077cc
movsd xmm6, qword [rbp + 0x138]
movsd qword [rbp + 0x70], xmm6
mov ebx, dword [rbp + 0x140]
mov dword [rbp + 0x78], ebx
movsd qword [rbp + 0x80], xmm10
mov edi, dword [rbp - 0x58]
mov dword [rbp + 0x88], edi
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x80]
call fcn.180008200
movss xmm1, dword [0x18000d33c]
comiss xmm1, xmm0
jb 0x1800077cc
cmp dword [0x18000d378], 0
je 0x18000710d
movsd qword [rbp + 0x90], xmm10
mov dword [rbp + 0x98], edi
movsd qword [rbp + 0xa0], xmm6
mov dword [rbp + 0xa8], ebx
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0xa0]
mov rcx, rsi
call fcn.180007ab0
mov rbx, qword [rbp - 0x38]
cmp dword [0x18000d37c], 0
je 0x180007131
mov rax, qword [rbx]
mov r8, qword [rax + 0x2f0]
lea rdx, [rbp + 0x138]
mov rcx, rbx
call r8
cmp dword [0x18000d20c], 0
je 0x1800077cc
mov rax, qword [rbx]
mov rdx, qword [rax + 0x58]
mov rcx, rbx
call rdx
mov rax, qword [rbx]
mov rdx, qword [rax + 0x60]
mov rcx, rbx
call rdx
jmp 0x1800077cc
cmp dword [0x18000d508], 0
je 0x180007207
cmp dword [0x18000d268], 0
jne 0x180007214
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 6
mov dword [rsp + 0x74], 0xc
movss dword [rsp + 0x78], xmm10
movss dword [rsp + 0x7c], xmm11
movss dword [rbp - 0x80], xmm12
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], cl
cmp r15, r13
je 0x1800071e5
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180007207
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
cmp dword [0x18000d268], 0
je 0x180007362
movsd xmm6, qword [rbp + 0x138]
movsd qword [rbp + 0xb0], xmm6
mov eax, dword [rbp + 0x140]
mov dword [rbp - 0x60], eax
mov dword [rbp + 0xb8], eax
movsd qword [rbp + 0xc0], xmm10
mov dword [rbp + 0xc8], ebx
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0xc0]
call fcn.180008200
movss xmm1, dword [0x18000b11c]
comiss xmm1, xmm0
jb 0x1800077cc
xor r14d, r14d
cmp dword [0x18000d35c], r14d
jle 0x1800077cf
nop word [rax + rax]
movzx esi, byte [rdi + 0xce4]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ebx, eax
mov edi, dword [0x18000d32c]
mov rdx, r12
mov rcx, qword [rbp - 0x50]
call fcn.1800040b0
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 4
mov dword [rsp + 0x74], edi
movss dword [rsp + 0x78], xmm6
movaps xmm0, xmm6
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x20], xmm6
movss dword [rsp + 0x7c], xmm0
movss xmm0, dword [rbp - 0x60]
movss dword [rbp - 0x80], xmm0
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], sil
cmp r15, r13
je 0x180007315
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x180007337
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
inc r14d
cmp r14d, dword [0x18000d35c]
jge 0x1800077c8
mov eax, dword [rbp + 0x140]
mov dword [rbp - 0x60], eax
movsd xmm6, qword [rbp + 0x138]
mov rdi, qword [rsp + 0x30]
jmp 0x180007280
cmp dword [0x18000d2a8], 0
je 0x1800074be
lea rdx, str.MID_T_ASR
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800074b1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rax, qword [0x18000d5a0]
xor r14d, r14d
cmp rax, 0xa
jbe 0x1800077cf
cmp dword [0x18000d268], r14d
jne 0x18000749f
mov dword [rbp - 0x60], r14d
cmp dword [0x18000d35c], r14d
jle 0x18000749f
nop
movsd xmm6, qword [rbp + 0x138]
mov esi, dword [rbp + 0x140]
movzx r14d, byte [rdi + 0xce4]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ebx, eax
mov edi, dword [0x18000d32c]
mov rdx, r12
mov rcx, qword [rbp - 0x50]
call fcn.1800040b0
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x74], edi
movss dword [rsp + 0x78], xmm6
movaps xmm0, xmm6
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x20], xmm6
movss dword [rsp + 0x7c], xmm0
mov dword [rbp - 0x80], esi
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], r14b
cmp r15, r13
je 0x18000745d
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x18000747f
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
mov eax, dword [rbp - 0x60]
inc eax
mov dword [rbp - 0x60], eax
cmp eax, dword [0x18000d35c]
mov rdi, qword [rsp + 0x30]
jl 0x1800073c0
mov rsi, qword [rbp - 0x68]
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x18000d5a0], rax
jmp 0x1800077cf
cmp dword [0x18000d268], 0
jne 0x1800077cc
movsd xmm6, qword [rbp + 0x138]
movsd qword [rbp + 0xd0], xmm6
mov eax, dword [rbp + 0x140]
mov dword [rbp - 0x60], eax
mov dword [rbp + 0xd8], eax
movsd qword [rbp], xmm10
mov dword [rbp + 8], ebx
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.180008200
movss xmm1, dword [0x18000d33c]
comiss xmm1, xmm0
jb 0x1800077cc
xor r14d, r14d
cmp dword [0x18000d35c], r14d
jle 0x1800077cf
nop word [rax + rax]
movzx esi, byte [rdi + 0xce4]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ebx, eax
mov edi, dword [0x18000d32c]
mov rdx, r12
mov rcx, qword [rbp - 0x50]
call fcn.1800040b0
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x74], edi
movss dword [rsp + 0x78], xmm6
movaps xmm0, xmm6
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x20], xmm6
movss dword [rsp + 0x7c], xmm0
movss xmm0, dword [rbp - 0x60]
movss dword [rbp - 0x80], xmm0
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], sil
cmp r15, r13
je 0x1800075b5
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800075d7
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
inc r14d
cmp r14d, dword [0x18000d35c]
jge 0x1800077c8
mov eax, dword [rbp + 0x140]
mov dword [rbp - 0x60], eax
movsd xmm6, qword [rbp + 0x138]
mov rdi, qword [rsp + 0x30]
jmp 0x180007520
cmp dword [0x18000d3c4], 0
je 0x1800077cc
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800077cc
cmp dword [0x18000d268], 0
jne 0x1800077cc
movzx ecx, byte [rsi + 0xce4]
mov eax, dword [rsi + 0x20]
mov dword [rsp + 0x68], eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 6
mov dword [rsp + 0x74], 0xc
movss dword [rsp + 0x78], xmm10
movss dword [rsp + 0x7c], xmm11
movss dword [rbp - 0x80], xmm12
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], cl
cmp r15, r13
je 0x1800076a0
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800076c2
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
xor r14d, r14d
cmp dword [0x18000d268], r14d
jne 0x1800077cf
mov dword [rbp - 0x60], r14d
cmp dword [0x18000d35c], r14d
jle 0x1800077cf
nop dword [rax]
nop word [rax + rax]
movsd xmm6, qword [rbp + 0x138]
mov esi, dword [rbp + 0x140]
movzx r14d, byte [rdi + 0xce4]
mov rax, qword [r12]
mov rdx, qword [rax + 8]
mov rcx, r12
call rdx
mov ebx, eax
mov edi, dword [0x18000d32c]
mov rdx, r12
mov rcx, qword [rbp - 0x50]
call fcn.1800040b0
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x74], edi
movss dword [rsp + 0x78], xmm6
movaps xmm0, xmm6
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x20], xmm6
movss dword [rsp + 0x7c], xmm0
mov dword [rbp - 0x80], esi
mov dword [rbp - 0x7c], 0
mov byte [rbp - 0x78], r14b
cmp r15, r13
je 0x18000778d
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [r15 + 0x10], xmm1
mov eax, dword [rbp - 0x78]
mov dword [r15 + 0x20], eax
add r15, 0x24
mov qword [rbp + 0x110], r15
jmp 0x1800077af
lea r8, [rsp + 0x68]
mov rdx, r15
lea rcx, [rbp + 0x108]
call fcn.1800013d0
mov r13, qword [rbp + 0x118]
mov r15, qword [rbp + 0x110]
mov eax, dword [rbp - 0x60]
inc eax
mov dword [rbp - 0x60], eax
cmp eax, dword [0x18000d35c]
mov rdi, qword [rsp + 0x30]
jl 0x1800076f0
mov rsi, qword [rbp - 0x68]
xor r14d, r14d
mov rbx, qword [rbp + 0x10]
mov rax, qword [rbx]
mov rdx, qword [rax + 0x30]
mov rcx, rbx
call rdx
mov r12, rax
test rax, rax
movss xmm7, dword [0x18000b118]
jne 0x180005373
mov rax, qword [rbx]
mov rdx, qword [rax + 0x10]
mov rcx, rbx
call rdx
cmp dword [0x18000d210], 0
je 0x18000796f
movss xmm0, dword [0x18000d1f8]
comiss xmm0, dword [0x18000d1f4]
jb 0x18000796f
mov rcx, qword [rbp + 0x108]
cmp rcx, r15
je 0x180007963
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x120]
call fcn.180001670
mov rbx, rax
mov qword [rbp - 0x10], rax
mov ecx, dword [0x18000d1f0]
mov dword [0x18000d56c], ecx
mov dword [rsp + 0x30], ecx
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.180001670
nop
mov r9, qword [0x18000d538]
cmp r9, qword [0x18000d540]
je 0x1800078b4
mov eax, dword [rsp + 0x30]
mov dword [r9], eax
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x40], r14
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x38], r14
mov qword [r9 + 8], rax
mov qword [r9 + 0x10], rcx
mov qword [r9 + 0x18], rdx
add qword [0x18000d538], 0x20
jmp 0x1800078c9
lea r8, [rsp + 0x30]
mov rdx, r9
lea rcx, [0x18000d530]
call fcn.1800011b0
nop
lea rcx, [rsp + 0x38]
call fcn.180007f50
nop
mov rcx, rbx
call fcn.180007f50
mov rax, qword [0x18000d538]
cmp qword [0x18000d530], rax
je 0x180007950
cmp dword [0x18000d20c], 0
jne 0x18000791a
mov rax, qword [rbp - 0x30]
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0xb8]
cmp rcx, 0x31
ja 0x180007950
movabs rax, 0x300000001f048
bt rax, rcx
jae 0x180007950
movabs rdx, 0x1426111c8
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 0x100
lea r8, [0x18000d510]
mov rdx, qword [rdx]
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax + 0x18]
movabs rax, 0x141491880
call rax
call fcn.180007ff0
mov r13, qword [rbp + 0x118]
mov rcx, qword [rbp + 0x108]
mov dword [0x18000d1f8], 0
jmp 0x180007976
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1800079cd
sub r13, rcx
movabs rax, 0xe38e38e38e38e39
imul r13
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800079c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800079c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800086cc
mov rcx, qword [rbp + 0x158]
xor rcx, rsp
call fcn.180008b60
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
jmp 0x180004930