Function at 0x180007630
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x958]
sub rsp, 0xa30
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x18007c040]
xor rax, rsp
mov qword [rbp + 0x8b8], rax
xor r14d, r14d
mov dword [rbp - 0x60], r14d
lea rdx, [rbp - 0x60]
lea rcx, [0x18007ce40]
call fcn.180010610
mov r13, rax
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x5c], r14d
lea rdx, [rbp - 0x5c]
lea rcx, [0x18007ce50]
call fcn.1800104c0
mov qword [rbp - 0x50], rax
movabs r15, 0x142373288
mov r15, qword [r15]
mov qword [rsp + 0x78], r15
test r15, r15
je 0x18000c1e6
mov rbx, qword [r15 + 0x48]
test rbx, rbx
je 0x18000c1e6
cmp qword [r15 + 0x70], r14
je 0x18000c1e6
mov rcx, qword [r15 + 0xd0]
test rcx, rcx
je 0x18000c1e6
call fcn.180001b00
mov rdi, rax
mov qword [rbp - 0x30], rax
test rax, rax
je 0x18000c1e6
mov rcx, rax
call fcn.180001a90
mov qword [rbp + 0x630], rax
test rax, rax
je 0x18000c1e6
mov rcx, rdi
call fcn.180001aa0
mov rsi, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x18000c1e6
mov rcx, rax
call fcn.1800016e0
mov qword [rbp - 0x28], rax
test rax, rax
je 0x18000c1e6
lea rdi, [rax + 0x28]
test rdi, rdi
je 0x18000c1e6
mov rcx, qword [r15 + 0xe0]
test rcx, rcx
je 0x18000c1e6
call fcn.180001a70
mov r12, rax
mov qword [rbp + 0x60], rax
test rax, rax
je 0x18000c1e6
mov rdi, qword [rdi + 8]
test rdi, rdi
je 0x18000c1e6
mov rdi, qword [rdi + 0xd0]
test rdi, rdi
je 0x18000c1e6
lea rcx, [rbp + 0x870]
call fcn.18000c240
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x870], xmm1
mov qword [rbp + 0x880], r14
movsd xmm12, qword [rbx + 0x17c0]
mov r14d, dword [rbx + 0x17c8]
mov dword [rsp + 0x68], r14d
mov rax, qword [r15 + 0xc0]
xorps xmm10, xmm10
cmp byte [rax + 0x70], 0
je 0x180007802
cmp byte [rax + 0x27c], 0
jne 0x180007802
movss xmm1, dword [rax + 0x60]
movss xmm0, dword [0x18007cdd4]
addss xmm0, xmm1
movss dword [0x18007cdd4], xmm0
mov dword [0x18007cdd0], 0x3d4ccccd
call fcn.180007490
movsd qword [rbp - 0x70], xmm12
mov dword [rbp - 0x68], r14d
mov rdx, rsi
lea rcx, [rbp - 0x70]
call fcn.180007320
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 8]
mov dword [rbp - 0x58], eax
movabs rax, 0x1425ef258
mov rcx, qword [rax]
mov dword [rcx + 0x994], 0x98967f
mov dword [rcx + 0x998], 0x98967f
mov rcx, qword [rax]
xor eax, eax
mov qword [rcx + 0xf70], rax
mov rcx, qword [rbp - 0x30]
call fcn.180001a80
mov rbx, rax
lea rdx, str.survival_midgard_midgard_base
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a35
lea rdx, str.survival_midgard_midgard
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a35
lea rdx, str.survival_japan_japan_base
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a2e
lea rdx, str.survival_japan_japan_act1
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a2e
lea rdx, str.survival_japan_japan_act2
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a2e
lea rdx, str.survival_japan_japan_act3
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a2e
lea rdx, str.survival_japan_japan_act4
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a2e
lea rdx, str.survival_arachnid_arachnid_base
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a27
lea rdx, str.survival_arachnid_arachnid_act1
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a27
lea rdx, str.survival_arachnid_arachnid_act2
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a27
lea rdx, str.survival_arachnid_arachnid_act3
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a27
lea rdx, str.survival_arachnid_arachnid_act4
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a27
lea rdx, str.survival_icebreaker_icebreaker_base
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a20
lea rdx, str.survival_icebreaker_icebreaker_act1
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a20
lea rdx, str.survival_icebreaker_icebreaker_act2
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a20
lea rdx, str.survival_icebreaker_icebreaker_act3
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a20
lea rdx, str.survival_icebreaker_icebreaker_act4_boss
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180007a20
mov byte [r13 + 0xf], al
mov byte [r13 + 0x11], al
mov word [r13 + 0xc], ax
jmp 0x180007a3a
mov byte [r13 + 0xd], 1
jmp 0x180007a3a
mov byte [r13 + 0xc], 1
jmp 0x180007a3a
mov byte [r13 + 0x11], 1
jmp 0x180007a3a
mov byte [r13 + 0xf], 1
mov rax, qword [r12]
mov rdx, qword [rax + 0x30]
mov rcx, r12
call rdx
mov r15, rax
mov rdi, qword [rbp + 0x878]
test rax, rax
je 0x18000c168
movss xmm11, dword [0x180074640]
movss xmm9, dword [0x180074534]
nop dword [rax]
mov rcx, r15
call fcn.180001700
test al, al
jne 0x18000c14f
xor eax, eax
mov dword [rbp - 0x80], eax
mov dword [rbp - 0x7c], eax
mov rcx, r15
call fcn.180001710
mov rcx, r15
call fcn.180001720
test rax, rax
je 0x18000c14f
mov rcx, rax
call fcn.1800016c0
mov rbx, rax
mov rcx, qword [r15]
mov r8, qword [rcx + 0xc8]
lea rdx, [rbp + 0x858]
mov rcx, r15
call r8
mov rcx, r15
call fcn.1800016e0
mov r12, rax
test rax, rax
je 0x18000c14f
mov r9d, 1
lea r8, str.Case
lea rdx, str.GeomEntity
mov rcx, r15
call fcn.180007590
test al, al
je 0x180007b12
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov r9d, 1
lea r8, str.case_closed_active
lea rdx, str.BasicEntity
mov rcx, r15
call fcn.180007590
test al, al
je 0x180007b4d
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov r9d, 1
lea r8, str.Lootbox_Closed
lea rdx, str.GeomEntity
mov rcx, r15
call fcn.180007590
test al, al
je 0x180007b88
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov r9d, 1
lea r8, str.case
lea rdx, [0x180043749]
mov rcx, r15
call fcn.180007590
test al, al
je 0x180007bc3
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov r9d, 1
lea r8, str.K01_Item
lea rdx, [0x180043749]
mov rcx, r15
call fcn.180007590
test al, al
je 0x180007bfe
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov r9d, 1
lea r8, str.Laptop
lea rdx, str.GeomEntity
mov rcx, r15
call fcn.180007590
test al, al
je 0x180007c39
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov rax, qword [rbp - 0x50]
cmp byte [rax + 0x13], 0
je 0x180007d05
lea rdx, str.InventoryPickup
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180007c77
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
lea rdx, str.shop_name
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180007ca7
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
lea rdx, str.default_name
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180007cd7
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov rcx, r15
call fcn.1800016f0
cmp eax, 0x480012
jne 0x180007d01
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov rax, qword [rbp - 0x50]
cmp byte [rax + 0x14], 0
je 0x180007d6b
lea rdx, str.claymoreexplosive
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180007d3b
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
lea rdx, str.explosivegrenade
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180007d6b
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
movaps xmm2, xmm11
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
movzx r9d, byte [r13 + 0x1c]
lea r8, str.Boss_Eye
lea rdx, str.ShootingObject
mov rcx, r15
call fcn.180007590
test al, al
je 0x180007f13
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007f13
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x660], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x668], rax
lea rdx, [rbp + 0x660]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x70], xmm12
mov dword [rbp + 0x78], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x180007f00
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7d4]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x80]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x80]
movsd qword [rbp + 0x90], xmm3
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x98], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180007e61
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x1c]
lea r8, str.Boss_Dron_Body
lea rdx, str.ShootingObject
mov rcx, r15
call fcn.180007590
test al, al
je 0x1800080c4
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800080c4
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x670], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x678], rax
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0xa0], xmm12
mov dword [rbp + 0xa8], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x1800080b1
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7a4]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0xb0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0xb0]
movsd qword [rbp + 0xc0], xmm3
mov eax, dword [rbp + 0xb8]
mov dword [rbp + 0xc8], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008012
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x14]
lea r8, str.explosive_barrels
lea rdx, str.DestroyableObject
mov rcx, r15
call fcn.180007590
test al, al
je 0x180008302
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008302
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x640], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x648], rax
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0xd0], xmm12
mov dword [rbp + 0xd8], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x180008236
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7b0]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0xe0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0xe0]
movsd qword [rbp + 0xf0], xmm3
mov eax, dword [rbp + 0xe8]
mov dword [rbp + 0xf8], eax
movsd qword [rbp + 0x100], xmm12
mov dword [rbp + 0x108], r14d
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x100]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x1800082ef
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x1800082ef
nop word [rax + rax]
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7c8]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x110]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x110]
movsd qword [rbp + 0x120], xmm3
mov eax, dword [rbp + 0x118]
mov dword [rbp + 0x128], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x120]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008250
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x16]
lea r8, str.BossEye
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x180008542
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008542
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x680], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x688], rax
lea rdx, [rbp + 0x680]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x130], xmm12
mov dword [rbp + 0x138], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x130]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x180008474
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x78c]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x140]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x140]
movsd qword [rbp + 0x150], xmm3
mov eax, dword [rbp + 0x148]
mov dword [rbp + 0x158], eax
movsd qword [rbp + 0x160], xmm12
mov dword [rbp + 0x168], r14d
lea r8, [rbp + 0x150]
lea rdx, [rbp + 0x160]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000852f
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x18000852f
nop word [rax + rax]
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7e0]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x170]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x170]
movsd qword [rbp + 0x180], xmm3
mov eax, dword [rbp + 0x178]
mov dword [rbp + 0x188], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x180]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008490
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x16]
lea r8, str.Eye_CoverProxy
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x180008782
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008782
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x690], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x698], rax
lea rdx, [rbp + 0x690]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x190], xmm12
mov dword [rbp + 0x198], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x190]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x1800086b4
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x780]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x1a0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x1a0]
movsd qword [rbp + 0x1b0], xmm3
mov eax, dword [rbp + 0x1a8]
mov dword [rbp + 0x1b8], eax
movsd qword [rbp + 0x1c0], xmm12
mov dword [rbp + 0x1c8], r14d
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x1c0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000876f
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x18000876f
nop word [rax + rax]
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7ec]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x1d0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x1d0]
movsd qword [rbp + 0x1e0], xmm3
mov eax, dword [rbp + 0x1d8]
mov dword [rbp + 0x1e8], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x1800086d0
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x16]
lea r8, str.BossThroat
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x1800089c2
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800089c2
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6a0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6a8], rax
lea rdx, [rbp + 0x6a0]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x1f0], xmm12
mov dword [rbp + 0x1f8], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x1800088f4
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7f8]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x200]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x200]
movsd qword [rbp + 0x210], xmm3
mov eax, dword [rbp + 0x208]
mov dword [rbp + 0x218], eax
movsd qword [rbp + 0x220], xmm12
mov dword [rbp + 0x228], r14d
lea r8, [rbp + 0x210]
lea rdx, [rbp + 0x220]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x1800089af
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x1800089af
nop word [rax + rax]
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x804]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x230]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x230]
movsd qword [rbp + 0x240], xmm3
mov eax, dword [rbp + 0x238]
mov dword [rbp + 0x248], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008910
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x17]
lea r8, str.Corridor_Pipe
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x180008be3
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6b0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6b8], rax
lea rdx, [rbp + 0x6b0]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x250], xmm12
mov dword [rbp + 0x258], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x250]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x180008b20
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x810]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x260]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x260]
movsd qword [rbp + 0x270], xmm3
mov eax, dword [rbp + 0x268]
mov dword [rbp + 0x278], eax
movsd qword [rbp + 0x280], xmm12
mov dword [rbp + 0x288], r14d
lea r8, [rbp + 0x270]
lea rdx, [rbp + 0x280]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x180008bd0
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x180008bd0
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x81c]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x290]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x290]
movsd qword [rbp + 0x2a0], xmm3
mov eax, dword [rbp + 0x298]
mov dword [rbp + 0x2a8], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008b31
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x18]
lea r8, str.Hive
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x180008e04
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6c0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6c8], rax
lea rdx, [rbp + 0x6c0]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x2b0], xmm12
mov dword [rbp + 0x2b8], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x180008d41
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x828]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x2c0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x2c0]
movsd qword [rbp + 0x2d0], xmm3
mov eax, dword [rbp + 0x2c8]
mov dword [rbp + 0x2d8], eax
movsd qword [rbp + 0x2e0], xmm12
mov dword [rbp + 0x2e8], r14d
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x2e0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x180008df1
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x180008df1
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x834]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x2f0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x2f0]
movsd qword [rbp + 0x300], xmm3
mov eax, dword [rbp + 0x2f8]
mov dword [rbp + 0x308], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x300]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008d52
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x19]
lea r8, str.Heli
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x180009032
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6d0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6d8], rax
lea rdx, [rbp + 0x6d0]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x310], xmm12
mov dword [rbp + 0x318], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x310]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x180008f62
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x720]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x320]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x320]
movsd qword [rbp + 0x330], xmm3
mov eax, dword [rbp + 0x328]
mov dword [rbp + 0x338], eax
movsd qword [rbp + 0x340], xmm12
mov dword [rbp + 0x348], r14d
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x340]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000901f
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x18000901f
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x72c]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x350]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x350]
movsd qword [rbp + 0x360], xmm3
mov eax, dword [rbp + 0x358]
mov dword [rbp + 0x368], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x360]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180008f80
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x1a]
lea r8, str.ShootingTarget_duck
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x180009253
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6e0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6e8], rax
lea rdx, [rbp + 0x6e0]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x370], xmm12
mov dword [rbp + 0x378], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x370]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x180009190
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x738]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x380]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x380]
movsd qword [rbp + 0x390], xmm3
mov eax, dword [rbp + 0x388]
mov dword [rbp + 0x398], eax
movsd qword [rbp + 0x3a0], xmm12
mov dword [rbp + 0x3a8], r14d
lea r8, [rbp + 0x390]
lea rdx, [rbp + 0x3a0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x180009240
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x180009240
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x744]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x3b0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x3b0]
movsd qword [rbp + 0x3c0], xmm3
mov eax, dword [rbp + 0x3b8]
mov dword [rbp + 0x3c8], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x3c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x1800091a1
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x1d]
lea r8, str.Bottom
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x180009492
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009492
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x6f0], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x6f8], rax
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x3d0], xmm12
mov dword [rbp + 0x3d8], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x1800093c5
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x840]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x3e0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x3e0]
movsd qword [rbp + 0x3f0], xmm3
mov eax, dword [rbp + 0x3e8]
mov dword [rbp + 0x3f8], eax
movsd qword [rbp + 0x400], xmm12
mov dword [rbp + 0x408], r14d
lea r8, [rbp + 0x3f0]
lea rdx, [rbp + 0x400]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000947f
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x18000947f
nop word [rax + rax]
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x750]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x410]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x410]
movsd qword [rbp + 0x420], xmm3
mov eax, dword [rbp + 0x418]
mov dword [rbp + 0x428], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x420]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x1800093e0
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
movzx r9d, byte [r13 + 0x1d]
lea r8, str.shootT_mine2
lea rdx, str.ShootingTarget
mov rcx, r15
call fcn.180007590
test al, al
je 0x1800096d2
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800096d2
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x700], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x708], rax
lea rdx, [rbp + 0x700]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x430], xmm12
mov dword [rbp + 0x438], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x430]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
cmp byte [r13 + 5], 0
jne 0x180009604
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x75c]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x440]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x440]
movsd qword [rbp + 0x450], xmm3
mov eax, dword [rbp + 0x448]
mov dword [rbp + 0x458], eax
movsd qword [rbp + 0x460], xmm12
mov dword [rbp + 0x468], r14d
lea r8, [rbp + 0x450]
lea rdx, [rbp + 0x460]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x1800096bf
xor ebx, ebx
mov rdi, qword [rbp + 0x888]
cmp dword [rdi], ebx
jle 0x1800096bf
nop word [rax + rax]
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x768]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x470]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x470]
movsd qword [rbp + 0x480], xmm3
mov eax, dword [rbp + 0x478]
mov dword [rbp + 0x488], eax
mov rcx, r15
call fcn.1800016d0
mov edx, eax
mov byte [rsp + 0x38], 0
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x480]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
inc ebx
cmp ebx, dword [rdi]
jl 0x180009620
lea rcx, [rbp + 0x888]
call fcn.18000fa60
mov rdi, qword [rbp + 0x878]
cmp byte [r13 + 0x1d], 0
je 0x180009fa8
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x1800099c4
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.laymore
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1800099c4
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800099c4
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x710], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x718], rax
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x490], xmm12
mov dword [rbp + 0x498], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x490]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov rsi, qword [rbp + 0x888]
cmp byte [r13 + 5], 0
jne 0x180009887
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x774]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x4a0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x4a0]
movsd qword [rbp + 0x4b0], xmm3
mov eax, dword [rbp + 0x4a8]
mov dword [rbp + 0x4b8], eax
movsd qword [rbp + 0x4c0], xmm12
mov dword [rbp + 0x4c8], r14d
lea r8, [rbp + 0x4b0]
lea rdx, [rbp + 0x4c0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x180009970
xor ebx, ebx
cmp dword [rsi], ebx
jle 0x180009970
mov rdi, qword [rbp + 0x878]
nop dword [rax + rax]
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x180009949
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x180009964
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc ebx
cmp ebx, dword [rsi]
jl 0x1800098a0
jmp 0x180009977
mov rdi, qword [rbp + 0x878]
test rsi, rsi
je 0x1800099bf
mov rax, qword [rbp + 0x898]
sub rax, rsi
sar rax, 2
lea rdx, [rax*4]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800099b7
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000c239
mov rcx, rsi
call fcn.1800414ec
mov rsi, qword [rsp + 0x70]
cmp byte [r13 + 0x1d], 0
je 0x180009fa8
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180009cb0
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.S01_ShootingTarget1
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180009cb0
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009cb0
lea rcx, [rbp + 0x888]
call fcn.18000c240
mov dword [rsp + 0x40], 1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x650], rax
lea rax, [rsp + 0x44]
mov qword [rbp + 0x658], rax
lea rdx, [rbp + 0x650]
lea rcx, [rbp + 0x888]
call fcn.18000fac0
nop
movsd qword [rbp + 0x4d0], xmm12
mov dword [rbp + 0x4d8], r14d
movzx eax, byte [rsi + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x4d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rsi + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
mov rdx, rax
lea rcx, [rbp + 0x870]
call fcn.1800108c0
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call fcn.180001690
mov rsi, qword [rbp + 0x888]
cmp byte [r13 + 5], 0
jne 0x180009b79
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x7bc]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x4e0]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x4e0]
movsd qword [rbp + 0x4f0], xmm3
mov eax, dword [rbp + 0x4e8]
mov dword [rbp + 0x4f8], eax
movsd qword [rbp + 0x500], xmm12
mov dword [rbp + 0x508], r14d
lea r8, [rbp + 0x4f0]
lea rdx, [rbp + 0x500]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x180009c61
xor r14d, r14d
mov ebx, r14d
cmp dword [rsi], r14d
jle 0x180009c61
mov rdi, qword [rbp + 0x878]
nop
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], r14d
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], r14d
mov byte [rsp + 0x64], r14b
cmp rdi, qword [rbp + 0x880]
je 0x180009c3a
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x180009c55
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc ebx
cmp ebx, dword [rsi]
jl 0x180009b90
jmp 0x180009c68
mov rdi, qword [rbp + 0x878]
test rsi, rsi
je 0x180009cb0
mov rax, qword [rbp + 0x898]
sub rax, rsi
sar rax, 2
lea rdx, [rax*4]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180009ca8
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000c239
mov rcx, rsi
call fcn.1800414ec
cmp byte [r13 + 0x1d], 0
je 0x180009fa8
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x180009fa8
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.S02_ShootingTarget1
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180009fa8
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009fa8
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rsi, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
movsd qword [rbp + 0x510], xmm12
mov ebx, dword [rsp + 0x68]
mov dword [rbp + 0x518], ebx
mov rdx, qword [rsp + 0x70]
movzx eax, byte [rdx + 0xce4]
mov byte [rsp + 0x38], al
movss dword [rsp + 0x30], xmm10
lea rax, [rbp + 0x510]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xc
mov r9d, 6
lea r8d, [r9 + 6]
mov edx, dword [rdx + 0x20]
lea rcx, [rsp + 0x44]
call fcn.180001d30
lea rcx, [rbp + 0x870]
cmp rdi, qword [rbp + 0x880]
je 0x180009dc8
mov rdx, rax
call fcn.1800118a0
jmp 0x180009dd3
mov r8, rax
mov rdx, rdi
call fcn.1800118d0
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x180009e7f
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x84c]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x520]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x520]
movsd qword [rbp + 0x530], xmm3
mov eax, dword [rbp + 0x528]
mov dword [rbp + 0x538], eax
movsd qword [rbp + 0x540], xmm12
mov dword [rbp + 0x548], ebx
lea r8, [rbp + 0x530]
lea rdx, [rbp + 0x540]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x180009f60
xor ebx, ebx
cmp dword [rsi], ebx
jle 0x180009f60
mov rdi, qword [rbp + 0x878]
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x180009f39
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x180009f54
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc ebx
cmp ebx, dword [rsi]
jl 0x180009e90
jmp 0x180009f67
mov rdi, qword [rbp + 0x878]
test rsi, rsi
je 0x180009fa8
sub r14, rsi
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x180009fa0
add rdx, 0x27
mov rcx, qword [rsi - 8]
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rsi, rcx
mov rcx, rsi
call fcn.1800414ec
cmp byte [r13 + 0x1e], 0
je 0x18000a2a5
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000a2a5
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.apsule
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000a2a5
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a2a5
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000a0c5
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000a0e0
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000a18c
lea r8, [rbp + 0x864]
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x798]
call fcn.180010a90
mov rcx, rax
movaps xmm2, xmm9
lea rdx, [rbp + 0x550]
call fcn.180010ad0
movsd xmm3, qword [rbp + 0x550]
movsd qword [rbp + 0x560], xmm3
mov eax, dword [rbp + 0x558]
mov dword [rbp + 0x568], eax
movsd qword [rbp + 0x570], xmm12
mov dword [rbp + 0x578], esi
lea r8, [rbp + 0x560]
lea rdx, [rbp + 0x570]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000a264
xor esi, esi
cmp dword [rbx], esi
jle 0x18000a264
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000a23f
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000a25a
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000a196
test rbx, rbx
je 0x18000a2a5
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000a29d
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x13], 0
je 0x18000aba2
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000a5a4
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.Core
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000a5a4
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a5a4
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rax, qword [rsp + 0x70]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000a3c2
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000a3dd
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000a48b
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm1
movss dword [rbp - 8], xmm2
movsd qword [rbp + 0x580], xmm12
mov dword [rbp + 0x588], esi
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x580]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000a563
xor esi, esi
cmp dword [rbx], esi
jle 0x18000a563
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000a53e
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000a559
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000a495
test rbx, rbx
je 0x18000a5a4
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000a59c
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x13], 0
je 0x18000aba2
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000a8a3
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.CenterCapsule
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000a8a3
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a8a3
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rax, qword [rsp + 0x70]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000a6c1
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000a6dc
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000a78a
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp], xmm0
movss dword [rbp + 4], xmm1
movss dword [rbp + 8], xmm2
movsd qword [rbp + 0x590], xmm12
mov dword [rbp + 0x598], esi
lea r8, [rbp]
lea rdx, [rbp + 0x590]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000a862
xor esi, esi
cmp dword [rbx], esi
jle 0x18000a862
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000a83d
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000a858
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000a794
test rbx, rbx
je 0x18000a8a3
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000a89b
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x13], 0
je 0x18000aba2
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000aba2
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.Capsule
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000aba2
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000aba2
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rax, qword [rsp + 0x70]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000a9c0
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000a9db
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000aa89
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp + 0x10], xmm0
movss dword [rbp + 0x14], xmm1
movss dword [rbp + 0x18], xmm2
movsd qword [rbp + 0x5a0], xmm12
mov dword [rbp + 0x5a8], esi
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x5a0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000ab61
xor esi, esi
cmp dword [rbx], esi
jle 0x18000ab61
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000ab3c
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000ab57
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000aa93
test rbx, rbx
je 0x18000aba2
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000ab9a
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x15], 0
je 0x18000b49f
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000aea1
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.Laser
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000aea1
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000aea1
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000acbf
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000acda
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000ad88
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm1
movss dword [rbp + 0x28], xmm2
movsd qword [rbp + 0x5b0], xmm12
mov dword [rbp + 0x5b8], esi
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x5b0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000ae60
xor esi, esi
cmp dword [rbx], esi
jle 0x18000ae60
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000ae3b
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000ae56
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000ad92
test rbx, rbx
je 0x18000aea1
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000ae99
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x15], 0
je 0x18000b49f
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000b1a0
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.ShootingTarget_base
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000b1a0
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b1a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rax, qword [rsp + 0x70]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000afbe
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000afd9
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000b087
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp + 0x30], xmm0
movss dword [rbp + 0x34], xmm1
movss dword [rbp + 0x38], xmm2
movsd qword [rbp + 0x5c0], xmm12
mov dword [rbp + 0x5c8], esi
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x5c0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000b15f
xor esi, esi
cmp dword [rbx], esi
jle 0x18000b15f
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000b13a
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000b155
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000b091
test rbx, rbx
je 0x18000b1a0
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000b198
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x15], 0
je 0x18000b49f
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000b49f
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.Platform
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000b49f
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b49f
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rax, qword [rsp + 0x70]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000b2bd
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000b2d8
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000b386
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp + 0x40], xmm0
movss dword [rbp + 0x44], xmm1
movss dword [rbp + 0x48], xmm2
movsd qword [rbp + 0x5d0], xmm12
mov dword [rbp + 0x5d8], esi
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x5d0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000b45e
xor esi, esi
cmp dword [rbx], esi
jle 0x18000b45e
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000b439
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000b454
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000b390
test rbx, rbx
je 0x18000b49f
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000b497
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x12], 0
je 0x18000ba9f
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000b79f
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.ShootingTarget185
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000b79f
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000b79f
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000b5bc
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000b5d7
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000b685
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x54], xmm1
movss dword [rbp + 0x58], xmm2
movsd qword [rbp + 0x5e0], xmm12
mov dword [rbp + 0x5e8], esi
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x5e0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000b75e
xor esi, esi
cmp dword [rbx], esi
jle 0x18000b75e
nop
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000b739
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000b754
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000b690
test rbx, rbx
je 0x18000b79f
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000b797
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x12], 0
je 0x18000ba9f
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000ba9f
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.ShootingTarget201
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000ba9f
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000ba9f
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r14, [rax + 4]
mov qword [rbp + 0x898], r14
mov dword [rax], 1
mov qword [rbp + 0x890], r14
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx + 0x20]
movzx ecx, byte [rcx + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000b8bc
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000b8d7
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
movaps xmm1, xmm11
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000b985
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm1
movss dword [rbp - 0x18], xmm2
movsd qword [rbp + 0x5f0], xmm12
mov dword [rbp + 0x5f8], esi
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x5f0]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000ba5e
xor esi, esi
cmp dword [rbx], esi
jle 0x18000ba5e
nop
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
xor eax, eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], al
cmp rdi, qword [rbp + 0x880]
je 0x18000ba39
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000ba54
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000b990
test rbx, rbx
je 0x18000ba9f
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000ba97
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
cmp byte [r13 + 0x1b], 0
je 0x18000bda2
mov rax, qword [r15]
mov rdx, qword [rax + 0x18]
mov rcx, r15
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
lea rdx, str.ShootingTarget
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne 0x18000bda2
mov rax, qword [r15]
mov rdx, qword [rax + 0x60]
mov rcx, r15
call rdx
lea rdx, str.Smart_mine
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x18000bda2
xorps xmm0, xmm0
movups xmmword [rbp + 0x8a0], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x8a0], rax
lea r14, [rax + 4]
mov qword [rbp + 0x8b0], r14
mov dword [rax], 1
mov qword [rbp + 0x8a8], r14
mov rax, qword [rsp + 0x70]
movzx ecx, byte [rax + 0xce4]
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x5c], esi
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000bba8
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000bbc3
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov rax, qword [r12]
mov rdx, qword [rax + 0x160]
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm11
movaps xmm2, xmm10
mov rcx, r12
call rdx
or dword [r12 + 0x24], 0x10
cmp byte [r13 + 5], 0
jne 0x18000bc83
movss xmm2, dword [rbp + 0x860]
addss xmm2, dword [rbp + 0x86c]
movss xmm1, dword [rbp + 0x85c]
addss xmm1, dword [rbp + 0x868]
mulss xmm2, xmm9
mulss xmm1, xmm9
movss xmm0, dword [rbp + 0x858]
addss xmm0, dword [rbp + 0x864]
mulss xmm0, xmm9
movss dword [rbp - 0x70], xmm0
movss dword [rbp - 0x6c], xmm1
movss dword [rbp - 0x68], xmm2
movsd qword [rbp + 0x600], xmm12
mov dword [rbp + 0x608], esi
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x600]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000bd61
xor r12d, r12d
mov esi, r12d
cmp dword [rbx], r12d
jle 0x18000bd61
movss xmm8, dword [rbp + 0x860]
addss xmm8, dword [rbp + 0x86c]
movss xmm7, dword [rbp + 0x85c]
addss xmm7, dword [rbp + 0x868]
movss xmm6, dword [rbp + 0x858]
addss xmm6, dword [rbp + 0x864]
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x4c], 1
mulss xmm6, xmm9
movss dword [rsp + 0x54], xmm6
mulss xmm7, xmm9
movss dword [rsp + 0x58], xmm7
mulss xmm8, xmm9
movss dword [rsp + 0x5c], xmm8
mov dword [rsp + 0x60], r12d
mov byte [rsp + 0x64], r12b
cmp rdi, qword [rbp + 0x880]
je 0x18000bd3c
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000bd57
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc esi
cmp esi, dword [rbx]
jl 0x18000bc92
test rbx, rbx
je 0x18000bda2
sub r14, rbx
sar r14, 2
lea rdx, [r14*4]
cmp rdx, 0x1000
jb 0x18000bd9a
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
mov rax, qword [r15]
mov rdx, qword [rax + 8]
mov rcx, r15
call rdx
mov ebx, eax
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0xc8]
mov rcx, rax
call rdx
mov rcx, qword [rax]
mov r8, qword [rcx + 0x78]
mov edx, ebx
mov rcx, rax
call r8
mov rsi, rax
test rax, rax
je 0x18000c145
cmp byte [r13 + 0x1f], 0
je 0x18000bdf8
mov ecx, 0x54
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x18000be78
cmp byte [r13 + 0x20], 0
je 0x18000be0e
mov ecx, 0x55
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x18000be24
movabs rax, 0x1425ef258
mov rax, qword [rax]
cmp dword [rax + 0x708], 6
jne 0x18000be49
mov r12, qword [rsp + 0x70]
cmp r12, rsi
je 0x18000be41
mov rax, qword [rsi]
mov rdx, qword [rax + 0xe0]
mov rcx, rsi
call rdx
test eax, eax
jg 0x18000be7d
mov rsi, r12
jmp 0x18000c14a
mov eax, dword [rsi + 0x3e0]
mov r12, qword [rsp + 0x70]
cmp dword [r12 + 0x3e0], eax
je 0x18000be41
cmp r12, rsi
je 0x18000be41
mov rax, qword [rsi]
mov rdx, qword [rax + 0xe0]
mov rcx, rsi
call rdx
test eax, eax
jle 0x18000be41
jmp 0x18000be7d
mov r12, qword [rsp + 0x70]
mov r14, qword [rsi + 0x10]
test r14, r14
je 0x18000c145
mov rax, qword [r14]
mov rdx, qword [rax + 0x60]
mov rcx, r14
call rdx
mov r15, rax
mov rcx, qword [r14]
mov rdx, qword [rcx + 0x18]
mov rcx, r14
call rdx
test rax, rax
je 0x18000c145
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, qword [rcx + 0x130]
mov rcx, rsi
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
lea rcx, [rbp - 0x7c]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
mov r9, rbx
mov r8, r15
mov rdx, rax
mov rcx, qword [rbp + 0x630]
call fcn.180006f10
test al, al
je 0x18000c145
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
mov ecx, 4
call fcn.180041140
mov rbx, rax
mov qword [rbp + 0x888], rax
lea r13, [rax + 4]
mov qword [rbp + 0x898], r13
mov dword [rax], 1
mov qword [rbp + 0x890], r13
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], 0xc
mov dword [rsp + 0x4c], 6
mov dword [rsp + 0x50], 0xc
movsd qword [rsp + 0x54], xmm12
mov r14d, dword [rsp + 0x68]
mov dword [rsp + 0x5c], r14d
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000bfc3
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000bfde
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
mov rax, qword [rbp - 0x48]
cmp byte [rax + 5], 0
jne 0x18000c032
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp + 0x610], xmm0
mov eax, dword [rbp - 0x38]
mov dword [rbp + 0x618], eax
movsd qword [rbp + 0x620], xmm12
mov dword [rbp + 0x628], r14d
lea r8, [rbp + 0x610]
lea rdx, [rbp + 0x620]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0x70]
call fcn.180001bd0
test al, al
je 0x18000c0f9
xor r14d, r14d
cmp dword [rbx], r14d
jle 0x18000c0f4
movss xmm6, dword [rbp - 0x38]
movss xmm7, dword [rbp - 0x3c]
movss xmm8, dword [rbp - 0x40]
mov r15d, dword [rbp - 0x80]
mov r12d, dword [rbp - 0x7c]
nop word [rax + rax]
mov eax, dword [rsi + 0x20]
movzx ecx, byte [rsi + 0xce4]
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], r15d
movss dword [rsp + 0x54], xmm8
movss dword [rsp + 0x58], xmm7
movss dword [rsp + 0x5c], xmm6
mov dword [rsp + 0x60], 0
mov byte [rsp + 0x64], cl
cmp rdi, qword [rbp + 0x880]
je 0x18000c0cd
movups xmm0, xmmword [rsp + 0x44]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x54]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rsp + 0x64]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rbp + 0x878], rdi
jmp 0x18000c0e8
lea r8, [rsp + 0x44]
mov rdx, rdi
lea rcx, [rbp + 0x870]
call fcn.1800118d0
mov rdi, qword [rbp + 0x878]
inc r14d
cmp r14d, dword [rbx]
jl 0x18000c060
mov r14d, dword [rsp + 0x68]
test rbx, rbx
je 0x18000c13a
sub r13, rbx
sar r13, 2
lea rdx, [r13*4]
cmp rdx, 0x1000
jb 0x18000c132
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18000c239
mov rbx, rcx
mov rcx, rbx
call fcn.1800414ec
mov r13, qword [rbp - 0x48]
mov rsi, qword [rsp + 0x70]
jmp 0x18000c14f
mov rsi, qword [rsp + 0x70]
mov r14d, dword [rsp + 0x68]
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x30]
call rdx
mov r15, rax
test rax, rax
jne 0x180007a70
cmp byte [r13 + 2], 0
je 0x18000c1da
movss xmm0, dword [0x18007cdd4]
comiss xmm0, dword [0x18007cdd0]
jb 0x18000c1da
cmp qword [rbp + 0x870], rdi
je 0x18000c1d0
mov rbx, qword [rbp - 0x28]
mov rcx, rbx
call fcn.1800018e0
test al, al
je 0x18000c1d0
mov rcx, rbx
call fcn.1800018e0
test al, al
je 0x18000c1d0
lea rdx, [rbp + 0x870]
lea rcx, [rbp + 0x8a0]
call fcn.180010970
mov rdx, rax
mov ecx, dword [rbp - 0x58]
call fcn.180007370
mov rcx, rbx
call fcn.180007520
call fcn.180007490
mov dword [0x18007cdd4], 0
lea rcx, [rbp + 0x870]
call fcn.1800108f0
mov rcx, qword [rbp + 0x8b8]
xor rcx, rsp
call fcn.180041120
lea r11, [rsp + 0xa30]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop