Function at 0x1800055d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xed8]
sub rsp, 0xf98
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
movabs rbx, 0x1423f9210
mov rax, qword [rbx]
mov rcx, qword [rax + 0xd0]
mov rcx, qword [rcx + 0x48]
mov qword [rbp + 0x10], 0
mov rax, qword [rcx]
mov r8, qword [rax + 0x470]
lea rdx, [rbp + 0x10]
call r8
test al, al
jne 0x18000566f
xor ecx, ecx
mov qword [rbp + 0x10], rcx
jmp 0x180005673
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x18000b0fd
mov rax, qword [rcx]
mov r8, qword [rax + 0x1d8]
xor edx, edx
call r8
test rax, rax
je 0x18000b0fd
mov rax, qword [rbx]
mov qword [rbp + 0xb90], rax
test rax, rax
je 0x18000b0fd
mov rcx, qword [rax + 0xe0]
mov qword [rbp + 0xb88], rcx
mov rdi, qword [rax + 0xc0]
mov r14, qword [rax + 0x48]
mov qword [rbp + 0xb78], r14
mov rax, qword [rcx]
mov rdx, qword [rax + 0xa8]
call rdx
mov r15, rax
mov qword [rbp + 0x70], rax
test rax, rax
je 0x18000b0fd
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0xd0]
mov rbx, qword [rdx + 0x48]
mov qword [rbp + 0x78], rbx
mov rcx, qword [rbx]
mov rdx, qword [rcx + 0x448]
mov rcx, rbx
call rdx
mov r13, rax
mov qword [rbp + 0x60], rax
test rax, rax
je 0x18000b0fd
mov rcx, rbx
call fcn.1800047d0
mov r12, rax
mov qword [rbp - 0x60], rax
test rax, rax
je 0x18000b0fd
mov rcx, qword [rax]
mov r8, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, rax
call r8
mov rsi, rax
mov qword [rbp + 0xb80], rax
test rax, rax
je 0x18000b0fd
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x280]
mov rcx, rax
call rdx
test rax, rax
je 0x18000b0fd
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x18000b0fd
mov rbx, qword [rbx + 0xd0]
test rbx, rbx
je 0x18000b0fd
mov rax, qword [rdi]
mov r8, qword [rax + 0x38]
xor edx, edx
mov rcx, rdi
call r8
movss xmm1, dword [0x1800124dc]
addss xmm1, xmm0
movss dword [0x1800124dc], xmm1
mov dword [0x1800124d8], 0x3e000000
mov rax, qword [r13]
mov r8, qword [rax + 0x3a8]
lea rdx, str.mat_head
mov rcx, r13
call r8
mov r13d, eax
mov dword [rbp + 0xef0], eax
mov rcx, qword [0x1800124d0]
call fcn.18000bd30
movsd xmm15, qword [r14 + 0x17c0]
mov ecx, dword [r14 + 0x17c8]
movsd qword [rbp + 0x50], xmm15
movss dword [0x180012530], xmm15
movss xmm9, dword [rbp + 0x54]
movss dword [rbp - 0x30], xmm9
movss dword [0x180012534], xmm9
movd xmm10, ecx
movss dword [rbp - 0x2c], xmm10
movss dword [0x180012538], xmm10
movzx eax, byte [r12 + 0xce4]
mov byte [0x18001254c], al
mov dword [0x180012588], 1
xorps xmm11, xmm11
mov qword [0x180012590], 0
movss xmm7, dword [0x18000f8e0]
mov dword [0x180012598], 0x3f800000
mov qword [0x180012540], 0
mov dword [0x180012548], 0x3f800000
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], 0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov r14d, eax
mov dword [rbp + 8], eax
mov ecx, dword [0x180012344]
mov dword [rbp + 0xef8], ecx
lea rax, [rbp + 0xef8]
mov qword [rbp + 0xbb0], rax
lea rax, [rbp + 0xefc]
mov qword [rbp + 0xbb8], rax
lea r8, [rbp + 0xee0]
lea rdx, [rbp + 0xbb0]
lea rcx, [rbp - 0x10]
call fcn.180001a70
nop
mov ecx, dword [0x180012348]
mov dword [rbp - 0x28], ecx
lea rax, [rbp - 0x28]
mov qword [rbp + 0xba0], rax
lea rax, [rbp - 0x24]
mov qword [rbp + 0xba8], rax
lea r8, [rbp + 0xee8]
lea rdx, [rbp + 0xba0]
lea rcx, [rbp + 0xb60]
call fcn.180001a70
nop
mov rcx, qword [rsi + 0x10]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x60]
call rdx
mov qword [rbp + 0x68], rax
mov rcx, qword [r15]
mov rdx, qword [rcx + 0x30]
mov rcx, r15
call rdx
mov rsi, rax
mov rdi, qword [rsp + 0x78]
test rax, rax
je 0x18000ae09
movss xmm13, dword [0x18000f8dc]
movss xmm14, dword [0x18000f8f4]
movss xmm6, dword [0x18000f950]
movss xmm12, dword [0x18000f980]
mov rax, qword [rsi]
mov rdx, qword [rax + 0x178]
mov rcx, rsi
call rdx
test al, al
jne 0x18000adc8
mov rax, qword [rsi]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, rsi
call r8
mov rax, qword [rsi]
mov r8, qword [rax + 0x1d8]
xor edx, edx
mov rcx, rsi
call r8
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 0x60]
mov rcx, rsi
call rdx
mov r14, rax
mov qword [rbp + 0xb98], rax
mov rcx, qword [rsi]
mov rdx, qword [rcx + 0x18]
mov rcx, rsi
call rdx
test rax, rax
je 0x18000adc8
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
mov r15, rax
mov qword [rbp + 0x18], rax
mov rcx, qword [rsi]
mov r8, qword [rcx + 0xc8]
lea rdx, [rbp - 0x78]
mov rcx, rsi
call r8
lea rdx, [0x18000e32c]
mov rcx, qword [rbp + 0x68]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000a4e1
cmp dword [0x180012090], eax
je 0x180005ca5
lea rdx, str.Boss_Eye
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005a49
lea rdx, str.Boss_Dron_Body_Field_Proxy
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005ca5
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xca0], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xca0]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x398], eax
mov dword [rbp + 0x39c], r13d
mov r13d, 6
mov dword [rbp + 0x3a0], r13d
mov dword [rbp + 0x3a4], 0xc
movss dword [rbp + 0x3a8], xmm15
movss dword [rbp + 0x3ac], xmm9
movss dword [rbp + 0x3b0], xmm10
mov dword [rbp + 0x3b4], 0
mov byte [rbp + 0x3b8], cl
cmp rdi, qword [rbp - 0x80]
je 0x180005b14
movups xmm0, xmmword [rbp + 0x398]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x3a8]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x3b8]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180005b2d
lea r8, [rbp + 0x398]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r15d, 5
movabs r12, 0x1423f9210
nop dword [rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
mov rax, qword [r12]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm7
andps xmm0, xmm12
comiss xmm14, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
movsd qword [rbp - 0x20], xmm2
subss xmm2, xmm6
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180005bcd
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180005bd5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x180005bf1
test bl, bl
je 0x180005bf1
cmp dword [0x180012354], 0
je 0x180005bf1
mov bl, 1
jmp 0x180005bf3
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x374], eax
xor r14d, r14d
mov dword [rbp + 0x378], r14d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x37c], eax
mov dword [rbp + 0x380], r14d
movss dword [rbp + 0x384], xmm6
movss dword [rbp + 0x388], xmm8
movss dword [rbp + 0x38c], xmm7
mov dword [rbp + 0x390], r14d
mov byte [rbp + 0x394], r14b
cmp rdi, qword [rbp - 0x80]
je 0x180005c7d
movups xmm0, xmmword [rbp + 0x374]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x384]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x394]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180005c96
lea r8, [rbp + 0x374]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r15, 1
jne 0x180005b40
jmp 0x18000adbd
cmp dword [0x180012068], 0
je 0x1800069dd
lea rdx, str.DestroyableObject
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180005f55
cmp dword [0x180012058], 0
je 0x180005f55
lea rdx, str.explosive_barrels
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc90], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc90]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x350], eax
mov dword [rbp + 0x354], r13d
mov r13d, 6
mov dword [rbp + 0x358], r13d
mov dword [rbp + 0x35c], 0xc
movss dword [rbp + 0x360], xmm15
movss dword [rbp + 0x364], xmm9
movss dword [rbp + 0x368], xmm10
mov dword [rbp + 0x36c], 0
mov byte [rbp + 0x370], cl
cmp rdi, qword [rbp - 0x80]
je 0x180005dba
movups xmm0, xmmword [rbp + 0x350]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x360]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x370]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180005dd3
lea r8, [rbp + 0x350]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r15d, 5
movabs r12, 0x1423f9210
nop dword [rax]
nop word [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
mov rax, qword [r12]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm7
andps xmm0, xmm12
comiss xmm14, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
movsd qword [rbp - 0x20], xmm2
subss xmm2, xmm6
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180005e7d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180005e85
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x180005ea1
test bl, bl
je 0x180005ea1
cmp dword [0x180012354], 0
je 0x180005ea1
mov bl, 1
jmp 0x180005ea3
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x32c], eax
xor r14d, r14d
mov dword [rbp + 0x330], r14d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x334], eax
mov dword [rbp + 0x338], r14d
movss dword [rbp + 0x33c], xmm6
movss dword [rbp + 0x340], xmm8
movss dword [rbp + 0x344], xmm7
mov dword [rbp + 0x348], r14d
mov byte [rbp + 0x34c], r14b
cmp rdi, qword [rbp - 0x80]
je 0x180005f2d
movups xmm0, xmmword [rbp + 0x32c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x33c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x34c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180005f46
lea r8, [rbp + 0x32c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r15, 1
jne 0x180005df0
jmp 0x18000adbd
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800069dd
cmp dword [0x180012054], 0
je 0x180006215
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006215
lea rdx, str.ShootingTarget185
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180005fba
lea rdx, str.ShootingTarget201
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc80], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc80]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x308], eax
mov dword [rbp + 0x30c], r13d
mov r13d, 6
mov dword [rbp + 0x310], r13d
mov dword [rbp + 0x314], 0xc
movss dword [rbp + 0x318], xmm15
movss dword [rbp + 0x31c], xmm9
movss dword [rbp + 0x320], xmm10
mov dword [rbp + 0x324], 0
mov byte [rbp + 0x328], cl
cmp rdi, qword [rbp - 0x80]
je 0x180006085
movups xmm0, xmmword [rbp + 0x308]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x318]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x328]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000609e
lea r8, [rbp + 0x308]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r15d, 0xfa
movabs r12, 0x1423f9210
nop
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
mov rax, qword [r12]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm7
andps xmm0, xmm12
comiss xmm14, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
movsd qword [rbp - 0x20], xmm2
subss xmm2, xmm6
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000613d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006145
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x180006161
test bl, bl
je 0x180006161
cmp dword [0x180012354], 0
je 0x180006161
mov bl, 1
jmp 0x180006163
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x2e4], eax
xor r14d, r14d
mov dword [rbp + 0x2e8], r14d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x2ec], eax
mov dword [rbp + 0x2f0], r14d
movss dword [rbp + 0x2f4], xmm6
movss dword [rbp + 0x2f8], xmm8
movss dword [rbp + 0x2fc], xmm7
mov dword [rbp + 0x300], r14d
mov byte [rbp + 0x304], r14b
cmp rdi, qword [rbp - 0x80]
je 0x1800061ed
movups xmm0, xmmword [rbp + 0x2e4]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x2f4]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x304]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006206
lea r8, [rbp + 0x2e4]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r15, 1
jne 0x1800060b0
jmp 0x18000adbd
cmp dword [0x18001204c], 0
je 0x180006505
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006505
lea rdx, str.Level1_Capsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000629e
lea rdx, str.CenterCapsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000629e
lea rdx, str.Stage3_Core
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000629e
lea rdx, str.Level2_Capsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000629e
lea rdx, str.ShootingTarget_Capsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc70], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc70]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x2c0], eax
mov dword [rbp + 0x2c4], r13d
mov r13d, 6
mov dword [rbp + 0x2c8], r13d
mov dword [rbp + 0x2cc], 0xc
movss dword [rbp + 0x2d0], xmm15
movss dword [rbp + 0x2d4], xmm9
movss dword [rbp + 0x2d8], xmm10
mov dword [rbp + 0x2dc], 0
mov byte [rbp + 0x2e0], cl
cmp rdi, qword [rbp - 0x80]
je 0x180006369
movups xmm0, xmmword [rbp + 0x2c0]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x2d0]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x2e0]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006382
lea r8, [rbp + 0x2c0]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r15d, 0x19
movabs r12, 0x1423f9210
nop dword [rax]
nop word [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
mov rax, qword [r12]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm7
andps xmm0, xmm12
comiss xmm14, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
movsd qword [rbp - 0x20], xmm2
subss xmm2, xmm6
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000642d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006435
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x180006451
test bl, bl
je 0x180006451
cmp dword [0x180012354], 0
je 0x180006451
mov bl, 1
jmp 0x180006453
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x29c], eax
xor r14d, r14d
mov dword [rbp + 0x2a0], r14d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x2a4], eax
mov dword [rbp + 0x2a8], r14d
movss dword [rbp + 0x2ac], xmm6
movss dword [rbp + 0x2b0], xmm8
movss dword [rbp + 0x2b4], xmm7
mov dword [rbp + 0x2b8], r14d
mov byte [rbp + 0x2bc], r14b
cmp rdi, qword [rbp - 0x80]
je 0x1800064dd
movups xmm0, xmmword [rbp + 0x29c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x2ac]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x2bc]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800064f6
lea r8, [rbp + 0x29c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r15, 1
jne 0x1800063a0
jmp 0x18000adbd
cmp dword [0x180012050], 0
je 0x180006781
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006781
lea rdx, str.Laser
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006566
lea rdx, str.ShootingTarget_base
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006566
lea rdx, str.Platform
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc60], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc60]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x254], eax
mov dword [rbp + 0x258], r13d
mov eax, 6
mov dword [rbp + 0x25c], eax
mov dword [rbp + 0x260], 0xc
movss dword [rbp + 0x264], xmm15
movss dword [rbp + 0x268], xmm9
movss dword [rbp + 0x26c], xmm10
mov dword [rbp + 0x270], 0
mov byte [rbp + 0x274], cl
cmp rdi, qword [rbp - 0x80]
je 0x18000662f
movups xmm0, xmmword [rbp + 0x254]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x264]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x274]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006648
lea r8, [rbp + 0x254]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xab0], xmm6
movss dword [rbp + 0xab4], xmm8
movss dword [rbp + 0xab8], xmm7
lea rdx, [rbp + 0xab0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x1800066cc
cmp dword [0x180012354], r15d
je 0x1800066cc
mov bl, 1
jmp 0x1800066ce
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x230], eax
mov dword [rbp + 0x234], r15d
mov eax, 1
test bl, bl
mov ebx, 6
cmovne eax, ebx
mov dword [rbp + 0x238], eax
mov dword [rbp + 0x23c], r15d
movss dword [rbp + 0x240], xmm6
movss dword [rbp + 0x244], xmm8
movss dword [rbp + 0x248], xmm7
mov dword [rbp + 0x24c], r15d
mov byte [rbp + 0x250], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180006759
movups xmm0, xmmword [rbp + 0x230]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x240]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x250]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006772
lea r8, [rbp + 0x230]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180006660
jmp 0x18000adc8
cmp dword [0x18001205c], 0
je 0x1800069dd
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800069dd
lea rdx, str.Bottom
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800067ce
lea rdx, str.shootT_mine2
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd70], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd70]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x1a0], eax
mov dword [rbp + 0x1a4], r13d
mov eax, 6
mov dword [rbp + 0x1a8], eax
mov dword [rbp + 0x1ac], 0xc
movss dword [rbp + 0x1b0], xmm15
movss dword [rbp + 0x1b4], xmm9
movss dword [rbp + 0x1b8], xmm10
mov dword [rbp + 0x1bc], 0
mov byte [rbp + 0x1c0], cl
cmp rdi, qword [rbp - 0x80]
je 0x180006897
movups xmm0, xmmword [rbp + 0x1a0]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x1b0]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x1c0]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800068b0
lea r8, [rbp + 0x1a0]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop dword [rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xac0], xmm6
movss dword [rbp + 0xac4], xmm8
movss dword [rbp + 0xac8], xmm7
lea rdx, [rbp + 0xac0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000692c
cmp dword [0x180012354], r15d
je 0x18000692c
mov bl, 1
jmp 0x18000692e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x20c], eax
mov dword [rbp + 0x210], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x214], eax
mov dword [rbp + 0x218], r15d
movss dword [rbp + 0x21c], xmm6
movss dword [rbp + 0x220], xmm8
movss dword [rbp + 0x224], xmm7
mov dword [rbp + 0x228], r15d
mov byte [rbp + 0x22c], r15b
cmp rdi, qword [rbp - 0x80]
je 0x1800069b5
movups xmm0, xmmword [rbp + 0x20c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x21c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x22c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800069ce
lea r8, [rbp + 0x20c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x1800068c0
jmp 0x18000adc1
cmp dword [0x180012070], 0
je 0x18000715d
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000715d
cmp dword [0x180012040], 0
je 0x180006cc5
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006cc5
lea rdx, str.BossEye
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006a63
lea rdx, str.Eye_CoverProxy
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180006a63
lea rdx, str.BossThroat
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc50], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x1e8], eax
mov dword [rbp + 0x1ec], r13d
mov eax, 6
mov dword [rbp + 0x1f0], eax
mov dword [rbp + 0x1f4], 0xc
movss dword [rbp + 0x1f8], xmm15
movss dword [rbp + 0x1fc], xmm9
movss dword [rbp + 0x200], xmm10
mov dword [rbp + 0x204], 0
mov byte [rbp + 0x208], cl
cmp rdi, qword [rbp - 0x80]
je 0x180006b2c
movups xmm0, xmmword [rbp + 0x1e8]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x1f8]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x208]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006b45
lea r8, [rbp + 0x1e8]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r15d, 0x32
lea r13d, [r15 - 0x2c]
movabs r12, 0x1423f9210
nop dword [rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
mov rax, qword [r12]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm7
andps xmm0, xmm12
comiss xmm14, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
movsd qword [rbp - 0x20], xmm2
subss xmm2, xmm6
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x180006bed
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180006bf5
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x180006c11
test bl, bl
je 0x180006c11
cmp dword [0x180012354], 0
je 0x180006c11
mov bl, 1
jmp 0x180006c13
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x1c4], eax
xor r14d, r14d
mov dword [rbp + 0x1c8], r14d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x1cc], eax
mov dword [rbp + 0x1d0], r14d
movss dword [rbp + 0x1d4], xmm6
movss dword [rbp + 0x1d8], xmm8
movss dword [rbp + 0x1dc], xmm7
mov dword [rbp + 0x1e0], r14d
mov byte [rbp + 0x1e4], r14b
cmp rdi, qword [rbp - 0x80]
je 0x180006c9d
movups xmm0, xmmword [rbp + 0x1c4]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x1d4]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x1e4]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006cb6
lea r8, [rbp + 0x1c4]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r15, 1
jne 0x180006b60
jmp 0x18000adbd
cmp dword [0x180012044], 0
je 0x180006f0d
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180006f0d
lea rdx, str.Hive
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc40], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x17c], eax
mov dword [rbp + 0x180], r13d
mov eax, 6
mov dword [rbp + 0x184], eax
mov dword [rbp + 0x188], 0xc
movss dword [rbp + 0x18c], xmm15
movss dword [rbp + 0x190], xmm9
movss dword [rbp + 0x194], xmm10
mov dword [rbp + 0x198], 0
mov byte [rbp + 0x19c], cl
cmp rdi, qword [rbp - 0x80]
je 0x180006dc7
movups xmm0, xmmword [rbp + 0x17c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x18c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x19c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006de0
lea r8, [rbp + 0x17c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x19
xor r15d, r15d
lea r13d, [r14 - 0x13]
nop dword [rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xad0], xmm6
movss dword [rbp + 0xad4], xmm8
movss dword [rbp + 0xad8], xmm7
lea rdx, [rbp + 0xad0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180006e5c
cmp dword [0x180012354], r15d
je 0x180006e5c
mov bl, 1
jmp 0x180006e5e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x158], eax
mov dword [rbp + 0x15c], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x160], eax
mov dword [rbp + 0x164], r15d
movss dword [rbp + 0x168], xmm6
movss dword [rbp + 0x16c], xmm8
movss dword [rbp + 0x170], xmm7
mov dword [rbp + 0x174], r15d
mov byte [rbp + 0x178], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180006ee5
movups xmm0, xmmword [rbp + 0x158]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x168]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x178]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180006efe
lea r8, [rbp + 0x158]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180006df0
jmp 0x18000adc1
cmp dword [0x180012048], 0
je 0x18000715d
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000715d
lea rdx, str.Corridor_Pipe
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc30], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc30]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x134], eax
mov dword [rbp + 0x138], r13d
mov eax, 6
mov dword [rbp + 0x13c], eax
mov dword [rbp + 0x140], 0xc
movss dword [rbp + 0x144], xmm15
movss dword [rbp + 0x148], xmm9
movss dword [rbp + 0x14c], xmm10
mov dword [rbp + 0x150], 0
mov byte [rbp + 0x154], cl
cmp rdi, qword [rbp - 0x80]
je 0x18000700f
movups xmm0, xmmword [rbp + 0x134]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x144]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x154]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180007028
lea r8, [rbp + 0x134]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop word [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xae0], xmm6
movss dword [rbp + 0xae4], xmm8
movss dword [rbp + 0xae8], xmm7
lea rdx, [rbp + 0xae0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x1800070ac
cmp dword [0x180012354], r15d
je 0x1800070ac
mov bl, 1
jmp 0x1800070ae
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x110], eax
mov dword [rbp + 0x114], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x118], eax
mov dword [rbp + 0x11c], r15d
movss dword [rbp + 0x120], xmm6
movss dword [rbp + 0x124], xmm8
movss dword [rbp + 0x128], xmm7
mov dword [rbp + 0x12c], r15d
mov byte [rbp + 0x130], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180007135
movups xmm0, xmmword [rbp + 0x110]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x120]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x130]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000714e
lea r8, [rbp + 0x110]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180007040
jmp 0x18000adc1
cmp dword [0x18001206c], 0
je 0x1800073cd
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800073cd
cmp dword [0x18001203c], 0
je 0x1800073cd
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800073cd
lea rdx, str.Heli
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc10], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc10]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0xec], eax
mov dword [rbp + 0xf0], r13d
mov eax, 6
mov dword [rbp + 0xf4], eax
mov dword [rbp + 0xf8], 0xc
movss dword [rbp + 0xfc], xmm15
movss dword [rbp + 0x100], xmm9
movss dword [rbp + 0x104], xmm10
mov dword [rbp + 0x108], 0
mov byte [rbp + 0x10c], cl
cmp rdi, qword [rbp - 0x80]
je 0x180007284
movups xmm0, xmmword [rbp + 0xec]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0xfc]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x10c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000729d
lea r8, [rbp + 0xec]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x19
xor r15d, r15d
lea r13d, [r14 - 0x13]
nop word [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xaf0], xmm6
movss dword [rbp + 0xaf4], xmm8
movss dword [rbp + 0xaf8], xmm7
lea rdx, [rbp + 0xaf0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000731c
cmp dword [0x180012354], r15d
je 0x18000731c
mov bl, 1
jmp 0x18000731e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0xc8], eax
mov dword [rbp + 0xcc], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0xd0], eax
mov dword [rbp + 0xd4], r15d
movss dword [rbp + 0xd8], xmm6
movss dword [rbp + 0xdc], xmm8
movss dword [rbp + 0xe0], xmm7
mov dword [rbp + 0xe4], r15d
mov byte [rbp + 0xe8], r15b
cmp rdi, qword [rbp - 0x80]
je 0x1800073a5
movups xmm0, xmmword [rbp + 0xc8]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0xd8]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0xe8]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800073be
lea r8, [rbp + 0xc8]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x1800072b0
jmp 0x18000adc1
lea rdx, str.DestroyableObject
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007660
cmp dword [0x1800121b4], 0
je 0x180007660
lea rdx, str.explosive_barrels
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc00], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc00]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0xa4], eax
mov dword [rbp + 0xa8], r13d
mov eax, 6
mov dword [rbp + 0xac], eax
mov dword [rbp + 0xb0], 0xc
movss dword [rbp + 0xb4], xmm15
movss dword [rbp + 0xb8], xmm9
movss dword [rbp + 0xbc], xmm10
mov dword [rbp + 0xc0], 0
mov byte [rbp + 0xc4], cl
cmp rdi, qword [rbp - 0x80]
je 0x1800074d3
movups xmm0, xmmword [rbp + 0xa4]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0xb4]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0xc4]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800074ec
lea r8, [rbp + 0xa4]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r15d, 5
lea r13d, [r15 + 1]
movabs r12, 0x1423f9210
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
mov rax, qword [r12]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm7
andps xmm0, xmm12
comiss xmm14, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
movsd qword [rbp - 0x20], xmm2
subss xmm2, xmm6
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000758d
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x180007595
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x1800075b1
test bl, bl
je 0x1800075b1
cmp dword [0x180012354], 0
je 0x1800075b1
mov bl, 1
jmp 0x1800075b3
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x278], eax
xor ecx, ecx
mov dword [rbp + 0x27c], ecx
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x280], eax
mov dword [rbp + 0x284], ecx
movss dword [rbp + 0x288], xmm6
movss dword [rbp + 0x28c], xmm8
movss dword [rbp + 0x290], xmm7
mov dword [rbp + 0x294], ecx
mov byte [rbp + 0x298], cl
cmp rdi, qword [rbp - 0x80]
je 0x180007638
movups xmm0, xmmword [rbp + 0x278]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x288]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x298]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180007651
lea r8, [rbp + 0x278]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r15, 1
jne 0x180007500
jmp 0x18000adbd
mov rax, qword [rsi]
mov rdx, qword [rax + 0x18]
mov rcx, rsi
call rdx
test rax, rax
je 0x18000adc8
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov rcx, rax
call rdx
cmp dword [0x180012190], 0
je 0x1800078e0
lea rdx, str.heavydroid_rocket
mov rcx, rax
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x1800078e0
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800078e0
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xbf0], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xbf0]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x80], eax
mov dword [rbp + 0x84], r13d
mov eax, 6
mov dword [rbp + 0x88], eax
mov dword [rbp + 0x8c], 0xc
movss dword [rbp + 0x90], xmm15
movss dword [rbp + 0x94], xmm9
movss dword [rbp + 0x98], xmm10
mov dword [rbp + 0x9c], 0
mov byte [rbp + 0xa0], cl
cmp rdi, qword [rbp - 0x80]
je 0x180007783
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x90]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0xa0]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000779c
lea r8, [rbp + 0x80]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r15d, 5
nop dword [rax]
nop word [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xb00], xmm6
movss dword [rbp + 0xb04], xmm8
movss dword [rbp + 0xb08], xmm7
lea rdx, [rbp + 0xb00]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000781c
cmp dword [0x180012354], 0
je 0x18000781c
mov bl, 1
jmp 0x18000781e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x404], eax
xor ecx, ecx
mov dword [rbp + 0x408], ecx
mov eax, 1
test bl, bl
mov ebx, 6
cmovne eax, ebx
mov dword [rbp + 0x40c], eax
mov dword [rbp + 0x410], ecx
movss dword [rbp + 0x414], xmm6
movss dword [rbp + 0x418], xmm8
movss dword [rbp + 0x41c], xmm7
mov dword [rbp + 0x420], ecx
mov byte [rbp + 0x424], cl
cmp rdi, qword [rbp - 0x80]
je 0x1800078a7
movups xmm0, xmmword [rbp + 0x404]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x414]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x424]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800078c0
lea r8, [rbp + 0x404]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r15, 1
jne 0x1800077b0
movss xmm6, dword [0x18000f950]
movss xmm7, dword [0x18000f8e0]
mov r15, qword [rbp + 0x18]
jmp 0x1800078e5
mov ebx, 6
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007b3d
cmp dword [0x180012180], 0
je 0x180007b3d
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007b3d
lea rdx, str.S00_ShootingTarget1
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x3e0], eax
mov dword [rbp + 0x3e4], r13d
mov dword [rbp + 0x3e8], ebx
mov dword [rbp + 0x3ec], 0xc
movss dword [rbp + 0x3f0], xmm15
movss dword [rbp + 0x3f4], xmm9
movss dword [rbp + 0x3f8], xmm10
mov dword [rbp + 0x3fc], 0
mov byte [rbp + 0x400], cl
cmp rdi, qword [rbp - 0x80]
je 0x1800079bb
movups xmm0, xmmword [rbp + 0x3e0]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x3f0]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x400]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800079d4
lea r8, [rbp + 0x3e0]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd60], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd60]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xb10], xmm6
movss dword [rbp + 0xb14], xmm8
movss dword [rbp + 0xb18], xmm7
lea rdx, [rbp + 0xb10]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180007a8c
cmp dword [0x180012354], r15d
je 0x180007a8c
mov bl, 1
jmp 0x180007a8e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x3bc], eax
mov dword [rbp + 0x3c0], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x3c4], eax
mov dword [rbp + 0x3c8], r15d
movss dword [rbp + 0x3cc], xmm6
movss dword [rbp + 0x3d0], xmm8
movss dword [rbp + 0x3d4], xmm7
mov dword [rbp + 0x3d8], r15d
mov byte [rbp + 0x3dc], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180007b15
movups xmm0, xmmword [rbp + 0x3bc]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x3cc]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x3dc]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180007b2e
lea r8, [rbp + 0x3bc]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180007a20
jmp 0x18000adc1
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007d9d
cmp dword [0x180012184], 0
je 0x180007d9d
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007d9d
lea rdx, str.S01_ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x44c], eax
mov dword [rbp + 0x450], r13d
mov dword [rbp + 0x454], ebx
mov dword [rbp + 0x458], 0xc
movss dword [rbp + 0x45c], xmm15
movss dword [rbp + 0x460], xmm9
movss dword [rbp + 0x464], xmm10
mov dword [rbp + 0x468], 0
mov byte [rbp + 0x46c], cl
cmp rdi, qword [rbp - 0x80]
je 0x180007c13
movups xmm0, xmmword [rbp + 0x44c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x45c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x46c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180007c2c
lea r8, [rbp + 0x44c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd10], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd10]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop dword [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xb20], xmm6
movss dword [rbp + 0xb24], xmm8
movss dword [rbp + 0xb28], xmm7
lea rdx, [rbp + 0xb20]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180007cec
cmp dword [0x180012354], r15d
je 0x180007cec
mov bl, 1
jmp 0x180007cee
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x470], eax
mov dword [rbp + 0x474], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x478], eax
mov dword [rbp + 0x47c], r15d
movss dword [rbp + 0x480], xmm6
movss dword [rbp + 0x484], xmm8
movss dword [rbp + 0x488], xmm7
mov dword [rbp + 0x48c], r15d
mov byte [rbp + 0x490], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180007d75
movups xmm0, xmmword [rbp + 0x470]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x480]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x490]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180007d8e
lea r8, [rbp + 0x470]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180007c80
jmp 0x18000adc1
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x180007ffd
cmp dword [0x180012188], 0
je 0x180007ffd
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007ffd
lea rdx, str.S02_ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x494], eax
mov dword [rbp + 0x498], r13d
mov dword [rbp + 0x49c], ebx
mov dword [rbp + 0x4a0], 0xc
movss dword [rbp + 0x4a4], xmm15
movss dword [rbp + 0x4a8], xmm9
movss dword [rbp + 0x4ac], xmm10
mov dword [rbp + 0x4b0], 0
mov byte [rbp + 0x4b4], cl
cmp rdi, qword [rbp - 0x80]
je 0x180007e73
movups xmm0, xmmword [rbp + 0x494]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x4a4]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x4b4]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180007e8c
lea r8, [rbp + 0x494]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd00], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd00]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop dword [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xb30], xmm6
movss dword [rbp + 0xb34], xmm8
movss dword [rbp + 0xb38], xmm7
lea rdx, [rbp + 0xb30]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180007f4c
cmp dword [0x180012354], r15d
je 0x180007f4c
mov bl, 1
jmp 0x180007f4e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x4b8], eax
mov dword [rbp + 0x4bc], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x4c0], eax
mov dword [rbp + 0x4c4], r15d
movss dword [rbp + 0x4c8], xmm6
movss dword [rbp + 0x4cc], xmm8
movss dword [rbp + 0x4d0], xmm7
mov dword [rbp + 0x4d4], r15d
mov byte [rbp + 0x4d8], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180007fd5
movups xmm0, xmmword [rbp + 0x4b8]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x4c8]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x4d8]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180007fee
lea r8, [rbp + 0x4b8]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180007ee0
jmp 0x18000adc1
lea rdx, str.ShootingTarget
mov rcx, r15
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000a4e1
cmp dword [0x1800121b0], 0
je 0x18000826d
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000826d
lea rdx, str.ShootingTarget185
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008062
lea rdx, str.ShootingTarget201
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x4dc], eax
mov dword [rbp + 0x4e0], r13d
mov dword [rbp + 0x4e4], ebx
mov dword [rbp + 0x4e8], 0xc
movss dword [rbp + 0x4ec], xmm15
movss dword [rbp + 0x4f0], xmm9
movss dword [rbp + 0x4f4], xmm10
mov dword [rbp + 0x4f8], 0
mov byte [rbp + 0x4fc], cl
cmp rdi, qword [rbp - 0x80]
je 0x1800080e7
movups xmm0, xmmword [rbp + 0x4dc]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x4ec]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x4fc]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180008100
lea r8, [rbp + 0x4dc]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xcf0], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xcf0]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
mov r14d, 0xfa
xor r15d, r15d
lea r13d, [r15 + 6]
nop dword [rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xb40], xmm6
movss dword [rbp + 0xb44], xmm8
movss dword [rbp + 0xb48], xmm7
lea rdx, [rbp + 0xb40]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x1800081bc
cmp dword [0x180012354], r15d
je 0x1800081bc
mov bl, 1
jmp 0x1800081be
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x500], eax
mov dword [rbp + 0x504], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x508], eax
mov dword [rbp + 0x50c], r15d
movss dword [rbp + 0x510], xmm6
movss dword [rbp + 0x514], xmm8
movss dword [rbp + 0x518], xmm7
mov dword [rbp + 0x51c], r15d
mov byte [rbp + 0x520], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180008245
movups xmm0, xmmword [rbp + 0x500]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x510]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x520]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000825e
lea r8, [rbp + 0x500]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180008150
jmp 0x18000adc1
cmp dword [0x1800121a4], 0
je 0x1800084fd
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800084fd
lea rdx, str.Level1_Capsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800082f6
lea rdx, str.CenterCapsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800082f6
lea rdx, str.Stage3_Core
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800082f6
lea rdx, str.Level2_Capsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800082f6
lea rdx, str.ShootingTarget_Capsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xce0], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xce0]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x524], eax
mov dword [rbp + 0x528], r13d
mov dword [rbp + 0x52c], ebx
mov dword [rbp + 0x530], 0xc
movss dword [rbp + 0x534], xmm15
movss dword [rbp + 0x538], xmm9
movss dword [rbp + 0x53c], xmm10
mov dword [rbp + 0x540], 0
mov byte [rbp + 0x544], cl
cmp rdi, qword [rbp - 0x80]
je 0x1800083ba
movups xmm0, xmmword [rbp + 0x524]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x534]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x544]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800083d3
lea r8, [rbp + 0x524]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x19
xor r15d, r15d
lea r13d, [r14 - 0x13]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xb50], xmm6
movss dword [rbp + 0xb54], xmm8
movss dword [rbp + 0xb58], xmm7
lea rdx, [rbp + 0xb50]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000844c
cmp dword [0x180012354], r15d
je 0x18000844c
mov bl, 1
jmp 0x18000844e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x548], eax
mov dword [rbp + 0x54c], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x550], eax
mov dword [rbp + 0x554], r15d
movss dword [rbp + 0x558], xmm6
movss dword [rbp + 0x55c], xmm8
movss dword [rbp + 0x560], xmm7
mov dword [rbp + 0x564], r15d
mov byte [rbp + 0x568], r15b
cmp rdi, qword [rbp - 0x80]
je 0x1800084d5
movups xmm0, xmmword [rbp + 0x548]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x558]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x568]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800084ee
lea r8, [rbp + 0x548]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x1800083e0
jmp 0x18000adc1
cmp dword [0x18001217c], 0
je 0x18000875d
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000875d
lea rdx, str.Bottom
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000854a
lea rdx, str.shootT_mine2
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xcd0], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xcd0]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x56c], eax
mov dword [rbp + 0x570], r13d
mov dword [rbp + 0x574], ebx
mov dword [rbp + 0x578], 0xc
movss dword [rbp + 0x57c], xmm15
movss dword [rbp + 0x580], xmm9
movss dword [rbp + 0x584], xmm10
mov dword [rbp + 0x588], 0
mov byte [rbp + 0x58c], cl
cmp rdi, qword [rbp - 0x80]
je 0x18000860e
movups xmm0, xmmword [rbp + 0x56c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x57c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x58c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180008627
lea r8, [rbp + 0x56c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop dword [rax]
nop dword [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0x9b0], xmm6
movss dword [rbp + 0x9b4], xmm8
movss dword [rbp + 0x9b8], xmm7
lea rdx, [rbp + 0x9b0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x1800086ac
cmp dword [0x180012354], r15d
je 0x1800086ac
mov bl, 1
jmp 0x1800086ae
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x590], eax
mov dword [rbp + 0x594], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x598], eax
mov dword [rbp + 0x59c], r15d
movss dword [rbp + 0x5a0], xmm6
movss dword [rbp + 0x5a4], xmm8
movss dword [rbp + 0x5a8], xmm7
mov dword [rbp + 0x5ac], r15d
mov byte [rbp + 0x5b0], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180008735
movups xmm0, xmmword [rbp + 0x590]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x5a0]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x5b0]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000874e
lea r8, [rbp + 0x590]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180008640
jmp 0x18000adc1
cmp dword [0x18001218c], 0
je 0x1800089cd
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800089cd
lea rdx, str.S00_ShootingTarget
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800087be
lea rdx, str.laymore
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x1800087be
lea rdx, str.shootT_mine2
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xcc0], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xcc0]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x5b4], eax
mov dword [rbp + 0x5b8], r13d
mov dword [rbp + 0x5bc], ebx
mov dword [rbp + 0x5c0], 0xc
movss dword [rbp + 0x5c4], xmm15
movss dword [rbp + 0x5c8], xmm9
movss dword [rbp + 0x5cc], xmm10
mov dword [rbp + 0x5d0], 0
mov byte [rbp + 0x5d4], cl
cmp rdi, qword [rbp - 0x80]
je 0x180008882
movups xmm0, xmmword [rbp + 0x5b4]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x5c4]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x5d4]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000889b
lea r8, [rbp + 0x5b4]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop dword [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0x9c0], xmm6
movss dword [rbp + 0x9c4], xmm8
movss dword [rbp + 0x9c8], xmm7
lea rdx, [rbp + 0x9c0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000891c
cmp dword [0x180012354], r15d
je 0x18000891c
mov bl, 1
jmp 0x18000891e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x5d8], eax
mov dword [rbp + 0x5dc], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x5e0], eax
mov dword [rbp + 0x5e4], r15d
movss dword [rbp + 0x5e8], xmm6
movss dword [rbp + 0x5ec], xmm8
movss dword [rbp + 0x5f0], xmm7
mov dword [rbp + 0x5f4], r15d
mov byte [rbp + 0x5f8], r15b
cmp rdi, qword [rbp - 0x80]
je 0x1800089a5
movups xmm0, xmmword [rbp + 0x5d8]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x5e8]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x5f8]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800089be
lea r8, [rbp + 0x5d8]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x1800088b0
jmp 0x18000adc1
cmp dword [0x1800121a4], 0
je 0x180008c0d
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008c0d
lea rdx, str.ShootingTarget_Capsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xcb0], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xcb0]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x5fc], eax
mov dword [rbp + 0x600], r13d
mov dword [rbp + 0x604], ebx
mov dword [rbp + 0x608], 0xc
movss dword [rbp + 0x60c], xmm15
movss dword [rbp + 0x610], xmm9
movss dword [rbp + 0x614], xmm10
mov dword [rbp + 0x618], 0
mov byte [rbp + 0x61c], cl
cmp rdi, qword [rbp - 0x80]
je 0x180008aca
movups xmm0, xmmword [rbp + 0x5fc]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x60c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x61c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180008ae3
lea r8, [rbp + 0x5fc]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0x9d0], xmm6
movss dword [rbp + 0x9d4], xmm8
movss dword [rbp + 0x9d8], xmm7
lea rdx, [rbp + 0x9d0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180008b5c
cmp dword [0x180012354], r15d
je 0x180008b5c
mov bl, 1
jmp 0x180008b5e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x620], eax
mov dword [rbp + 0x624], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x628], eax
mov dword [rbp + 0x62c], r15d
movss dword [rbp + 0x630], xmm6
movss dword [rbp + 0x634], xmm8
movss dword [rbp + 0x638], xmm7
mov dword [rbp + 0x63c], r15d
mov byte [rbp + 0x640], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180008be5
movups xmm0, xmmword [rbp + 0x620]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x630]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x640]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180008bfe
lea r8, [rbp + 0x620]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180008af0
jmp 0x18000adc1
cmp dword [0x1800121bc], 0
je 0x180008e7d
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180008e7d
lea rdx, str.BossEye
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008c6e
lea rdx, str.Eye_CoverProxy
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x180008c6e
lea rdx, str.BossThroat
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd50], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd50]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x644], eax
mov dword [rbp + 0x648], r13d
mov dword [rbp + 0x64c], ebx
mov dword [rbp + 0x650], 0xc
movss dword [rbp + 0x654], xmm15
movss dword [rbp + 0x658], xmm9
movss dword [rbp + 0x65c], xmm10
mov dword [rbp + 0x660], 0
mov byte [rbp + 0x664], cl
cmp rdi, qword [rbp - 0x80]
je 0x180008d32
movups xmm0, xmmword [rbp + 0x644]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x654]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x664]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180008d4b
lea r8, [rbp + 0x644]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x32
xor r15d, r15d
lea r13d, [r14 - 0x2c]
nop dword [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xaa0], xmm6
movss dword [rbp + 0xaa4], xmm8
movss dword [rbp + 0xaa8], xmm7
lea rdx, [rbp + 0xaa0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180008dcc
cmp dword [0x180012354], r15d
je 0x180008dcc
mov bl, 1
jmp 0x180008dce
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x668], eax
mov dword [rbp + 0x66c], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x670], eax
mov dword [rbp + 0x674], r15d
movss dword [rbp + 0x678], xmm6
movss dword [rbp + 0x67c], xmm8
movss dword [rbp + 0x680], xmm7
mov dword [rbp + 0x684], r15d
mov byte [rbp + 0x688], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180008e55
movups xmm0, xmmword [rbp + 0x668]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x678]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x688]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180008e6e
lea r8, [rbp + 0x668]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180008d60
jmp 0x18000adc1
cmp dword [0x180012198], 0
je 0x1800090bd
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800090bd
lea rdx, str.Heli
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd40], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd40]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x68c], eax
mov dword [rbp + 0x690], r13d
mov dword [rbp + 0x694], ebx
mov dword [rbp + 0x698], 0xc
movss dword [rbp + 0x69c], xmm15
movss dword [rbp + 0x6a0], xmm9
movss dword [rbp + 0x6a4], xmm10
mov dword [rbp + 0x6a8], 0
mov byte [rbp + 0x6ac], cl
cmp rdi, qword [rbp - 0x80]
je 0x180008f7a
movups xmm0, xmmword [rbp + 0x68c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x69c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x6ac]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180008f93
lea r8, [rbp + 0x68c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x19
xor r15d, r15d
lea r13d, [r14 - 0x13]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0x9e0], xmm6
movss dword [rbp + 0x9e4], xmm8
movss dword [rbp + 0x9e8], xmm7
lea rdx, [rbp + 0x9e0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000900c
cmp dword [0x180012354], r15d
je 0x18000900c
mov bl, 1
jmp 0x18000900e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x6b0], eax
mov dword [rbp + 0x6b4], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x6b8], eax
mov dword [rbp + 0x6bc], r15d
movss dword [rbp + 0x6c0], xmm6
movss dword [rbp + 0x6c4], xmm8
movss dword [rbp + 0x6c8], xmm7
mov dword [rbp + 0x6cc], r15d
mov byte [rbp + 0x6d0], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180009095
movups xmm0, xmmword [rbp + 0x6b0]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x6c0]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x6d0]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800090ae
lea r8, [rbp + 0x6b0]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180008fa0
jmp 0x18000adc1
cmp dword [0x180012178], 0
je 0x1800092fd
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800092fd
lea rdx, str.apsule
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd30], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd30]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x6d4], eax
mov dword [rbp + 0x6d8], r13d
mov dword [rbp + 0x6dc], ebx
mov dword [rbp + 0x6e0], 0xc
movss dword [rbp + 0x6e4], xmm15
movss dword [rbp + 0x6e8], xmm9
movss dword [rbp + 0x6ec], xmm10
mov dword [rbp + 0x6f0], 0
mov byte [rbp + 0x6f4], cl
cmp rdi, qword [rbp - 0x80]
je 0x1800091ba
movups xmm0, xmmword [rbp + 0x6d4]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x6e4]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x6f4]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800091d3
lea r8, [rbp + 0x6d4]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0x9f0], xmm6
movss dword [rbp + 0x9f4], xmm8
movss dword [rbp + 0x9f8], xmm7
lea rdx, [rbp + 0x9f0]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000924c
cmp dword [0x180012354], r15d
je 0x18000924c
mov bl, 1
jmp 0x18000924e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x6f8], eax
mov dword [rbp + 0x6fc], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x700], eax
mov dword [rbp + 0x704], r15d
movss dword [rbp + 0x708], xmm6
movss dword [rbp + 0x70c], xmm8
movss dword [rbp + 0x710], xmm7
mov dword [rbp + 0x714], r15d
mov byte [rbp + 0x718], r15b
cmp rdi, qword [rbp - 0x80]
je 0x1800092d5
movups xmm0, xmmword [rbp + 0x6f8]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x708]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x718]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800092ee
lea r8, [rbp + 0x6f8]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x1800091e0
jmp 0x18000adc1
cmp dword [0x180012194], 0
je 0x18000953d
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000953d
lea rdx, str.Hive
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xc20], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xc20]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x71c], eax
mov dword [rbp + 0x720], r13d
mov dword [rbp + 0x724], ebx
mov dword [rbp + 0x728], 0xc
movss dword [rbp + 0x72c], xmm15
movss dword [rbp + 0x730], xmm9
movss dword [rbp + 0x734], xmm10
mov dword [rbp + 0x738], 0
mov byte [rbp + 0x73c], cl
cmp rdi, qword [rbp - 0x80]
je 0x1800093fa
movups xmm0, xmmword [rbp + 0x71c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x72c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x73c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180009413
lea r8, [rbp + 0x71c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x19
xor r15d, r15d
lea r13d, [r14 - 0x13]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa00], xmm6
movss dword [rbp + 0xa04], xmm8
movss dword [rbp + 0xa08], xmm7
lea rdx, [rbp + 0xa00]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000948c
cmp dword [0x180012354], r15d
je 0x18000948c
mov bl, 1
jmp 0x18000948e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x740], eax
mov dword [rbp + 0x744], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x748], eax
mov dword [rbp + 0x74c], r15d
movss dword [rbp + 0x750], xmm6
movss dword [rbp + 0x754], xmm8
movss dword [rbp + 0x758], xmm7
mov dword [rbp + 0x75c], r15d
mov byte [rbp + 0x760], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180009515
movups xmm0, xmmword [rbp + 0x740]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x750]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x760]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000952e
lea r8, [rbp + 0x740]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180009420
jmp 0x18000adc1
cmp dword [0x1800121a8], 0
je 0x1800097ad
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800097ad
lea rdx, str.Laser
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000959e
lea rdx, str.ShootingTarget_base
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000959e
lea rdx, str.Platform
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
movaps xmm0, xmmword [0x18000f970]
movaps xmmword [rbp + 0xd20], xmm0
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0xd20]
mov edx, eax
xor ecx, ecx
movabs rax, 0x14171ef90
call rax
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x428], eax
mov dword [rbp + 0x42c], r13d
mov dword [rbp + 0x430], ebx
mov dword [rbp + 0x434], 0xc
movss dword [rbp + 0x438], xmm15
movss dword [rbp + 0x43c], xmm9
movss dword [rbp + 0x440], xmm10
mov dword [rbp + 0x444], 0
mov byte [rbp + 0x448], cl
cmp rdi, qword [rbp - 0x80]
je 0x180009662
movups xmm0, xmmword [rbp + 0x428]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x438]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x448]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000967b
lea r8, [rbp + 0x428]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop dword [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa10], xmm6
movss dword [rbp + 0xa14], xmm8
movss dword [rbp + 0xa18], xmm7
lea rdx, [rbp + 0xa10]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x1800096fc
cmp dword [0x180012354], r15d
je 0x1800096fc
mov bl, 1
jmp 0x1800096fe
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x764], eax
mov dword [rbp + 0x768], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x76c], eax
mov dword [rbp + 0x770], r15d
movss dword [rbp + 0x774], xmm6
movss dword [rbp + 0x778], xmm8
movss dword [rbp + 0x77c], xmm7
mov dword [rbp + 0x780], r15d
mov byte [rbp + 0x784], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180009785
movups xmm0, xmmword [rbp + 0x764]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x774]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x784]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000979e
lea r8, [rbp + 0x764]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180009690
jmp 0x18000adc1
cmp dword [0x1800121d0], 0
je 0x1800099dd
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800099dd
lea rdx, str.Corridor_Pipe
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm7
movaps xmm1, xmm11
call fcn.180004e90
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x788], eax
mov dword [rbp + 0x78c], r13d
mov dword [rbp + 0x790], ebx
mov dword [rbp + 0x794], 0xc
movss dword [rbp + 0x798], xmm15
movss dword [rbp + 0x79c], xmm9
movss dword [rbp + 0x7a0], xmm10
mov dword [rbp + 0x7a4], 0
mov byte [rbp + 0x7a8], cl
cmp rdi, qword [rbp - 0x80]
je 0x180009899
movups xmm0, xmmword [rbp + 0x788]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x798]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x7a8]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800098b2
lea r8, [rbp + 0x788]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa20], xmm6
movss dword [rbp + 0xa24], xmm8
movss dword [rbp + 0xa28], xmm7
lea rdx, [rbp + 0xa20]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000992c
cmp dword [0x180012354], r15d
je 0x18000992c
mov bl, 1
jmp 0x18000992e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x7ac], eax
mov dword [rbp + 0x7b0], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x7b4], eax
mov dword [rbp + 0x7b8], r15d
movss dword [rbp + 0x7bc], xmm6
movss dword [rbp + 0x7c0], xmm8
movss dword [rbp + 0x7c4], xmm7
mov dword [rbp + 0x7c8], r15d
mov byte [rbp + 0x7cc], r15b
cmp rdi, qword [rbp - 0x80]
je 0x1800099b5
movups xmm0, xmmword [rbp + 0x7ac]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x7bc]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x7cc]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x1800099ce
lea r8, [rbp + 0x7ac]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x1800098c0
jmp 0x18000adc1
cmp dword [0x1800121d4], 0
je 0x180009c0d
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009c0d
lea rdx, str.Ursula
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm7
movaps xmm1, xmm11
call fcn.180004e90
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x7d0], eax
mov dword [rbp + 0x7d4], r13d
mov dword [rbp + 0x7d8], ebx
mov dword [rbp + 0x7dc], 0xc
movss dword [rbp + 0x7e0], xmm15
movss dword [rbp + 0x7e4], xmm9
movss dword [rbp + 0x7e8], xmm10
mov dword [rbp + 0x7ec], 0
mov byte [rbp + 0x7f0], cl
cmp rdi, qword [rbp - 0x80]
je 0x180009ac9
movups xmm0, xmmword [rbp + 0x7d0]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x7e0]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x7f0]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180009ae2
lea r8, [rbp + 0x7d0]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x19
xor r15d, r15d
lea r13d, [r14 - 0x13]
nop
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa30], xmm6
movss dword [rbp + 0xa34], xmm8
movss dword [rbp + 0xa38], xmm7
lea rdx, [rbp + 0xa30]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180009b5c
cmp dword [0x180012354], r15d
je 0x180009b5c
mov bl, 1
jmp 0x180009b5e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x7f4], eax
mov dword [rbp + 0x7f8], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x7fc], eax
mov dword [rbp + 0x800], r15d
movss dword [rbp + 0x804], xmm6
movss dword [rbp + 0x808], xmm8
movss dword [rbp + 0x80c], xmm7
mov dword [rbp + 0x810], r15d
mov byte [rbp + 0x814], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180009be5
movups xmm0, xmmword [rbp + 0x7f4]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x804]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x814]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180009bfe
lea r8, [rbp + 0x7f4]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180009af0
jmp 0x18000adc1
cmp dword [0x18001219c], 0
je 0x180009e3d
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180009e3d
lea rdx, str.ShootingTarget_duck
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm7
movaps xmm1, xmm11
call fcn.180004e90
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x818], eax
mov dword [rbp + 0x81c], r13d
mov dword [rbp + 0x820], ebx
mov dword [rbp + 0x824], 0xc
movss dword [rbp + 0x828], xmm15
movss dword [rbp + 0x82c], xmm9
movss dword [rbp + 0x830], xmm10
mov dword [rbp + 0x834], 0
mov byte [rbp + 0x838], cl
cmp rdi, qword [rbp - 0x80]
je 0x180009cf9
movups xmm0, xmmword [rbp + 0x818]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x828]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x838]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180009d12
lea r8, [rbp + 0x818]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 5
xor r15d, r15d
lea r13d, [r14 + 1]
nop
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa40], xmm6
movss dword [rbp + 0xa44], xmm8
movss dword [rbp + 0xa48], xmm7
lea rdx, [rbp + 0xa40]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180009d8c
cmp dword [0x180012354], r15d
je 0x180009d8c
mov bl, 1
jmp 0x180009d8e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x83c], eax
mov dword [rbp + 0x840], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x844], eax
mov dword [rbp + 0x848], r15d
movss dword [rbp + 0x84c], xmm6
movss dword [rbp + 0x850], xmm8
movss dword [rbp + 0x854], xmm7
mov dword [rbp + 0x858], r15d
mov byte [rbp + 0x85c], r15b
cmp rdi, qword [rbp - 0x80]
je 0x180009e15
movups xmm0, xmmword [rbp + 0x83c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x84c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x85c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180009e2e
lea r8, [rbp + 0x83c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180009d20
jmp 0x18000adc1
cmp dword [0x1800121c0], 0
je 0x18000a06d
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a06d
lea rdx, str.Smart_mine
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm7
movaps xmm1, xmm11
call fcn.180004e90
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x860], eax
mov dword [rbp + 0x864], r13d
mov dword [rbp + 0x868], ebx
mov dword [rbp + 0x86c], 0xc
movss dword [rbp + 0x870], xmm15
movss dword [rbp + 0x874], xmm9
movss dword [rbp + 0x878], xmm10
mov dword [rbp + 0x87c], 0
mov byte [rbp + 0x880], cl
cmp rdi, qword [rbp - 0x80]
je 0x180009f29
movups xmm0, xmmword [rbp + 0x860]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x870]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x880]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x180009f42
lea r8, [rbp + 0x860]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0xf
xor r15d, r15d
lea r13d, [r14 - 9]
nop
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa50], xmm6
movss dword [rbp + 0xa54], xmm8
movss dword [rbp + 0xa58], xmm7
lea rdx, [rbp + 0xa50]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x180009fbc
cmp dword [0x180012354], r15d
je 0x180009fbc
mov bl, 1
jmp 0x180009fbe
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x884], eax
mov dword [rbp + 0x888], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x88c], eax
mov dword [rbp + 0x890], r15d
movss dword [rbp + 0x894], xmm6
movss dword [rbp + 0x898], xmm8
movss dword [rbp + 0x89c], xmm7
mov dword [rbp + 0x8a0], r15d
mov byte [rbp + 0x8a4], r15b
cmp rdi, qword [rbp - 0x80]
je 0x18000a045
movups xmm0, xmmword [rbp + 0x884]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x894]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x8a4]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000a05e
lea r8, [rbp + 0x884]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x180009f50
jmp 0x18000adc1
cmp dword [0x1800121b8], 0
je 0x18000a2bd
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000a2bd
lea rdx, str.weakpoint
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x18000a0ba
lea rdx, str._Generator
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm7
movaps xmm1, xmm11
call fcn.180004e90
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x8a8], eax
mov dword [rbp + 0x8ac], r13d
mov dword [rbp + 0x8b0], ebx
mov dword [rbp + 0x8b4], 0xc
movss dword [rbp + 0x8b8], xmm15
movss dword [rbp + 0x8bc], xmm9
movss dword [rbp + 0x8c0], xmm10
mov dword [rbp + 0x8c4], 0
mov byte [rbp + 0x8c8], cl
cmp rdi, qword [rbp - 0x80]
je 0x18000a16d
movups xmm0, xmmword [rbp + 0x8a8]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x8b8]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x8c8]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000a186
lea r8, [rbp + 0x8a8]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x32
xor r15d, r15d
lea r13d, [r14 - 0x2c]
nop dword [rax]
nop word [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa60], xmm6
movss dword [rbp + 0xa64], xmm8
movss dword [rbp + 0xa68], xmm7
lea rdx, [rbp + 0xa60]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000a20c
cmp dword [0x180012354], r15d
je 0x18000a20c
mov bl, 1
jmp 0x18000a20e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x8cc], eax
mov dword [rbp + 0x8d0], r15d
mov eax, 1
test bl, bl
cmovne eax, r13d
mov dword [rbp + 0x8d4], eax
mov dword [rbp + 0x8d8], r15d
movss dword [rbp + 0x8dc], xmm6
movss dword [rbp + 0x8e0], xmm8
movss dword [rbp + 0x8e4], xmm7
mov dword [rbp + 0x8e8], r15d
mov byte [rbp + 0x8ec], r15b
cmp rdi, qword [rbp - 0x80]
je 0x18000a295
movups xmm0, xmmword [rbp + 0x8cc]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x8dc]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x8ec]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000a2ae
lea r8, [rbp + 0x8cc]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x18000a1a0
jmp 0x18000adc1
cmp dword [0x180012168], 0
je 0x18000a4e1
lea rdx, [0x18000f8bc]
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000adc8
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov ecx, eax
movss dword [rsp + 0x30], xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
movaps xmm3, xmm11
movaps xmm2, xmm7
movaps xmm1, xmm11
call fcn.180004e90
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x8f0], eax
mov dword [rbp + 0x8f4], r13d
mov dword [rbp + 0x8f8], ebx
mov dword [rbp + 0x8fc], 0xc
movss dword [rbp + 0x900], xmm15
movss dword [rbp + 0x904], xmm9
movss dword [rbp + 0x908], xmm10
mov dword [rbp + 0x90c], 0
mov byte [rbp + 0x910], cl
cmp rdi, qword [rbp - 0x80]
je 0x18000a395
movups xmm0, xmmword [rbp + 0x8f0]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x900]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x910]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000a3ae
lea r8, [rbp + 0x8f0]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov r14d, 0x64
xor r15d, r15d
lea r12d, [r14 - 0x5e]
nop dword [rax + rax]
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
movss dword [rbp + 0xa70], xmm6
movss dword [rbp + 0xa74], xmm8
movss dword [rbp + 0xa78], xmm7
lea rdx, [rbp + 0xa70]
mov rcx, qword [0x1800124d0]
call fcn.1800053d0
test al, al
je 0x18000a42c
cmp dword [0x180012354], r15d
je 0x18000a42c
mov bl, 1
jmp 0x18000a42e
xor bl, bl
mov rax, qword [rsi]
mov rdx, qword [rax + 8]
mov rcx, rsi
call rdx
mov dword [rbp + 0x914], eax
mov dword [rbp + 0x918], r15d
mov eax, 1
test bl, bl
cmovne eax, r12d
mov dword [rbp + 0x91c], eax
mov dword [rbp + 0x920], r15d
movss dword [rbp + 0x924], xmm6
movss dword [rbp + 0x928], xmm8
movss dword [rbp + 0x92c], xmm7
mov dword [rbp + 0x930], r15d
mov byte [rbp + 0x934], r15b
cmp rdi, qword [rbp - 0x80]
je 0x18000a4b5
movups xmm0, xmmword [rbp + 0x914]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x924]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x934]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000a4ce
lea r8, [rbp + 0x914]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
sub r14, 1
jne 0x18000a3c0
mov r12, qword [rbp - 0x60]
jmp 0x18000adc8
mov rcx, qword [rbp + 0x78]
mov rax, qword [rcx]
mov rdx, qword [rax + 0xc8]
call rdx
mov rbx, rax
mov rcx, qword [rsi]
mov rdx, qword [rcx + 8]
mov rcx, rsi
call rdx
mov rcx, qword [rbx]
mov r8, qword [rcx + 0x78]
mov edx, eax
mov rcx, rbx
call r8
mov r13, rax
test rax, rax
je 0x18000adc1
mov r12, qword [rax + 0x10]
mov qword [rbp - 0x20], r12
test r12, r12
je 0x18000adbd
cmp dword [0x180012064], 0
je 0x18000aae9
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000aae9
lea rdx, str.Suicide
mov rcx, r14
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x18000a70d
xor r15d, r15d
movsxd rcx, dword [0x1800124c8]
mov rax, qword [rbp + 0xb60]
cmp dword [rax + rcx*4], r15d
jle 0x18000a709
lea r12d, [r15 + 6]
movabs r14, 0x1423f9210
nop
movss xmm7, dword [rbp - 0x64]
addss xmm7, dword [rbp - 0x70]
movss xmm8, dword [rbp - 0x68]
addss xmm8, dword [rbp - 0x74]
mulss xmm7, xmm13
mulss xmm8, xmm13
movss xmm6, dword [rbp - 0x6c]
addss xmm6, dword [rbp - 0x78]
mulss xmm6, xmm13
mov rax, qword [r14]
mov rcx, qword [rax + 0x48]
movsd xmm2, qword [rcx + 0x17c0]
movss xmm0, dword [rcx + 0x17c8]
subss xmm0, xmm7
andps xmm0, xmm12
comiss xmm14, xmm0
setae bl
movaps xmm1, xmm2
shufps xmm1, xmm1, 0x55
subss xmm1, xmm8
movsd qword [rbp + 0x40], xmm2
subss xmm2, xmm6
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm11
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000a61c
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18000a624
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x18000a640
test bl, bl
je 0x18000a640
cmp dword [0x180012354], 0
je 0x18000a640
mov cl, 1
jmp 0x18000a642
xor cl, cl
mov eax, dword [r13 + 0x20]
mov dword [rbp + 0x938], eax
mov dword [rbp + 0x93c], 0
mov eax, 1
test cl, cl
cmovne eax, r12d
mov dword [rbp + 0x940], eax
mov dword [rbp + 0x944], 0
movss dword [rbp + 0x948], xmm6
movss dword [rbp + 0x94c], xmm8
movss dword [rbp + 0x950], xmm7
mov dword [rbp + 0x954], 0
mov byte [rbp + 0x958], 0
cmp rdi, qword [rbp - 0x80]
je 0x18000a6ca
movups xmm0, xmmword [rbp + 0x938]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x948]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x958]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000a6e3
lea r8, [rbp + 0x938]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
inc r15d
movsxd rcx, dword [0x1800124c8]
mov rax, qword [rbp + 0xb60]
cmp r15d, dword [rax + rcx*4]
jl 0x18000a590
mov r14, qword [rbp + 0xb98]
mov r12, qword [rbp - 0x20]
mov r15, qword [rbp + 0x18]
mov qword [rbp - 0x58], 0
mov dword [rbp - 0x50], 0
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x40], 0
xor edi, edi
mov dword [rbp - 0x38], edi
mov dword [rbp - 0x34], edi
mov rax, qword [r13]
mov rdx, qword [rax + 0x130]
mov rcx, r13
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
mov rbx, rax
mov qword [rbp + 0x40], rdi
mov rax, qword [rbp + 0x78]
mov rcx, qword [rax]
mov r8, qword [rcx + 0x470]
lea rdx, [rbp + 0x40]
mov rcx, rax
call r8
test al, al
je 0x18000adf4
cmp qword [rbp + 0x40], rdi
je 0x18000adf8
mov r8, qword [rbp - 0x60]
mov rcx, qword [r8]
mov rax, qword [rcx + 0x1d8]
xor edx, edx
mov rcx, r8
call rax
test rax, rax
je 0x18000adf8
lea rax, [rbp - 0x34]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x38]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r15
mov r9, r14
mov r8, rbx
mov rdx, qword [rbp + 0x60]
mov rcx, qword [0x1800124d0]
call fcn.180004ef0
test al, al
je 0x18000adb8
mov rax, qword [r13]
mov rdx, qword [rax + 0x130]
mov rcx, r13
call rdx
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x100]
mov rcx, rax
call rdx
xor r15d, r15d
cmp dword [0x180012120], edi
jne 0x18000a926
mov rax, qword [rbp + 0xb90]
mov rcx, qword [rax + 0x70]
movss dword [rbp + 0xa90], xmm15
movss dword [rbp + 0xa94], xmm9
movss dword [rbp + 0xa98], xmm10
xorps xmm0, xmm0
movups xmmword [rbp + 0xd80], xmm0
movups xmmword [rbp + 0xd90], xmm0
movups xmmword [rbp + 0xda0], xmm0
movups xmmword [rbp + 0xdb0], xmm0
movups xmmword [rbp + 0xdc0], xmm0
movss xmm2, dword [rbp - 0x40]
subss xmm2, xmm10
movss xmm1, dword [rbp - 0x44]
subss xmm1, xmm9
movss xmm0, dword [rbp - 0x48]
subss xmm0, xmm15
movss dword [rbp + 0xa80], xmm0
movss dword [rbp + 0xa84], xmm1
movss dword [rbp + 0xa88], xmm2
mov rax, qword [rcx]
mov r10, qword [rax + 0x118]
mov dword [rsp + 0x68], 4
mov qword [rsp + 0x60], r15
lea rax, str.RayWorldIntersection_Game_
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x40], r15d
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], 1
lea rax, [rbp + 0xd80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xa000150a
mov r9d, 0x101
lea r8, [rbp + 0xa80]
lea rdx, [rbp + 0xa90]
call r10
test eax, eax
jle 0x18000a926
mov rcx, qword [rbp + 0xb88]
mov rax, qword [rcx]
mov r8, qword [rax + 0xd0]
mov rdx, qword [rbp + 0xd88]
call r8
cmp rax, r12
jne 0x18000adb8
movss xmm10, dword [rbp - 0x40]
movss xmm11, dword [rbp - 0x44]
movss xmm12, dword [rbp - 0x48]
cmp dword [0x180012338], edi
je 0x18000ab69
movss dword [rbp + 0xbc0], xmm12
movss dword [rbp + 0xbc4], xmm11
movss dword [rbp + 0xbc8], xmm10
lea rax, [rbp - 0x58]
mov qword [rbp + 0xbd0], rax
lea rax, [rbp - 0x54]
mov qword [rbp + 0xbd8], rax
lea rax, [rbp - 0x50]
mov qword [rbp + 0xbe0], rax
mov r14, qword [rbp + 0xb78]
mov rax, qword [r14]
mov r8, qword [rax + 0x378]
lea rdx, [rbp + 0xbc0]
mov rcx, r14
call r8
mov rax, qword [r14]
mov rdx, qword [rax + 0x310]
mov rcx, r14
call rdx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x18000f8d8]
movss xmm0, dword [rbp - 0x58]
mulss xmm0, xmm1
movss dword [rbp - 0x58], xmm0
mov rax, qword [r14]
mov rdx, qword [rax + 0x318]
mov rcx, r14
call rdx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x18000f8d8]
movss xmm0, dword [rbp - 0x54]
mulss xmm0, xmm1
movss dword [rbp - 0x54], xmm0
movss xmm1, dword [0x18000f8e0]
comiss xmm1, dword [rbp - 0x50]
jbe 0x18000adb8
movss xmm0, dword [rbp - 0x58]
xorps xmm6, xmm6
comiss xmm0, xmm6
jbe 0x18000adb8
mov rax, qword [r14]
mov rdx, qword [rax + 0x310]
mov rcx, r14
call rdx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [rbp - 0x58]
jbe 0x18000adb8
movss xmm0, dword [rbp - 0x54]
comiss xmm0, xmm6
jbe 0x18000adb8
mov rax, qword [r14]
mov rdx, qword [rax + 0x318]
mov rcx, r14
call rdx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss xmm8, dword [rbp - 0x54]
comiss xmm0, xmm8
jbe 0x18000adb8
cmp dword [0x180012338], edi
je 0x18000ab6c
movss xmm7, dword [rbp - 0x58]
xorps xmm9, xmm9
cvtsi2ss xmm9, dword [0x18001233c]
mov rax, qword [r14]
mov rdx, qword [rax + 0x310]
mov rcx, r14
call rdx
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm13
mov rax, qword [r14]
mov rdx, qword [rax + 0x318]
mov rcx, r14
call rdx
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm0, xmm13
subss xmm8, xmm0
subss xmm7, xmm6
mulss xmm7, xmm7
mulss xmm8, xmm8
addss xmm7, xmm8
xorps xmm0, xmm0
ucomiss xmm0, xmm7
ja 0x18000ab51
xorps xmm0, xmm0
sqrtss xmm0, xmm7
jmp 0x18000ab59
cmp dword [0x180012100], 0
je 0x18000ab29
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000ab29
cmp r13, qword [rbp - 0x60]
je 0x18000adbd
mov rax, qword [r13]
mov rdx, qword [rax + 0xc0]
mov rcx, r13
call rdx
test al, al
jne 0x18000adbd
jmp 0x18000a70d
mov r8d, dword [r13 + 0x20]
mov rdx, qword [rbp - 0x60]
mov edx, dword [rdx + 0x20]
mov rcx, qword [rbp + 0x60]
movabs rax, 0x1411d8a90
call rax
test eax, eax
jne 0x18000adbd
jmp 0x18000a70d
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm9, xmm0
movss xmm9, dword [rbp - 0x30]
jb 0x18000adb8
xorps xmm6, xmm6
lea rdx, [0x18000e32c]
mov rcx, qword [rbp + 0x68]
call sub.VCRUNTIME140.dll_strstr
mov r12, qword [rbp - 0x60]
test rax, rax
jne 0x18000ac31
movzx ecx, byte [r12 + 0xce4]
mov eax, dword [r12 + 0x20]
mov dword [rbp + 0x95c], eax
mov eax, dword [rbp + 0xef0]
mov dword [rbp + 0x960], eax
mov eax, 6
mov dword [rbp + 0x964], eax
mov dword [rbp + 0x968], 0xc
movss dword [rbp + 0x96c], xmm15
movss dword [rbp + 0x970], xmm9
movss xmm0, dword [rbp - 0x2c]
movss dword [rbp + 0x974], xmm0
mov dword [rbp + 0x978], edi
mov byte [rbp + 0x97c], cl
mov rdi, qword [rsp + 0x78]
cmp rdi, qword [rbp - 0x80]
je 0x18000ac1d
movups xmm0, xmmword [rbp + 0x95c]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x96c]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x97c]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000ac36
lea r8, [rbp + 0x95c]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
mov esi, r15d
movsxd rax, dword [0x1800124c8]
mov rbx, qword [rbp - 0x10]
cmp dword [rbx + rax*4], 0
jle 0x18000adc1
mov r15d, dword [rbp - 0x38]
mov r12d, dword [rbp - 0x34]
movss xmm7, dword [0x18000f980]
nop
movzx r14d, byte [r13 + 0xce4]
movabs rax, 0x1423f9210
mov rax, qword [rax]
mov rax, qword [rax + 0x48]
movsd xmm0, qword [rax + 0x17c0]
movsd qword [rbp + 0x50], xmm0
movd xmm0, dword [rax + 0x17c8]
subss xmm0, xmm10
andps xmm0, xmm7
comiss xmm14, xmm0
setae bl
movss xmm1, dword [rbp + 0x54]
subss xmm1, xmm11
movss xmm2, dword [rbp + 0x50]
subss xmm2, xmm12
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm6
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18000acd2
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18000acda
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm14, xmm0
setae al
test al, al
je 0x18000acfd
test bl, bl
je 0x18000acfd
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000acfd
mov cl, 1
jmp 0x18000acff
xor cl, cl
mov eax, dword [r13 + 0x20]
mov dword [rbp + 0x980], eax
mov dword [rbp + 0x984], r12d
mov eax, 1
test cl, cl
mov ecx, 6
cmovne eax, ecx
mov dword [rbp + 0x988], eax
mov dword [rbp + 0x98c], r15d
movss dword [rbp + 0x990], xmm12
movss dword [rbp + 0x994], xmm11
movss dword [rbp + 0x998], xmm10
mov dword [rbp + 0x99c], 0
mov byte [rbp + 0x9a0], r14b
cmp rdi, qword [rbp - 0x80]
je 0x18000ad87
movups xmm0, xmmword [rbp + 0x980]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0x990]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [rbp + 0x9a0]
mov dword [rdi + 0x20], eax
add rdi, 0x24
mov qword [rsp + 0x78], rdi
jmp 0x18000ada0
lea r8, [rbp + 0x980]
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.180001590
mov rdi, qword [rsp + 0x78]
inc esi
movsxd rax, dword [0x1800124c8]
mov rbx, qword [rbp - 0x10]
cmp esi, dword [rbx + rax*4]
jl 0x18000ac60
jmp 0x18000adbd
mov rdi, qword [rsp + 0x78]
mov r12, qword [rbp - 0x60]
mov r13d, dword [rbp + 0xef0]
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x30]
call rdx
mov rsi, rax
test rax, rax
je 0x18000ae01
movss xmm10, dword [rbp - 0x2c]
xorps xmm11, xmm11
movss xmm7, dword [0x18000f8e0]
jmp 0x180005951
mov qword [rbp + 0x40], rdi
mov rbx, qword [rbp - 0x10]
jmp 0x18000afde
mov r15, qword [rbp + 0x70]
mov r14d, dword [rbp + 8]
mov rbx, qword [rbp - 0x10]
mov rax, qword [r15]
mov rdx, qword [rax + 0x10]
mov rcx, r15
call rdx
cmp dword [0x1800120fc], 0
je 0x18000afdc
movss xmm0, dword [0x1800124dc]
comiss xmm0, dword [0x1800124d8]
jb 0x18000afdc
cmp qword [rsp + 0x70], rdi
je 0x18000afc4
mov rdi, qword [rbp + 0xb80]
mov rcx, rdi
call fcn.180005470
test al, al
je 0x18000afc4
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0xdd0]
call fcn.180001d40
mov rbx, rax
mov qword [rbp + 0xef0], rax
mov dword [0x18001258c], r14d
mov dword [rbp + 0x20], r14d
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.180001d40
nop
mov r9, qword [0x180012558]
cmp r9, qword [0x180012560]
je 0x18000aed6
mov eax, dword [rbp + 0x20]
mov dword [r9], eax
mov rdx, qword [rbp + 0x38]
xor esi, esi
mov qword [rbp + 0x38], rsi
mov rcx, qword [rbp + 0x30]
mov qword [rbp + 0x30], rsi
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x28], rsi
mov qword [r9 + 8], rax
mov qword [r9 + 0x10], rcx
mov qword [r9 + 0x18], rdx
add qword [0x180012558], 0x20
jmp 0x18000aeeb
lea r8, [rbp + 0x20]
mov rdx, r9
lea rcx, [0x180012550]
call fcn.180001360
xor esi, esi
mov r8, qword [rbp + 0x28]
movabs r14, 0xe38e38e38e38e39
test r8, r8
je 0x18000af5c
mov rcx, qword [rbp + 0x38]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, r8
cmp rdx, 0x1000
jb 0x18000af48
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000af48
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18000ca5c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rsi
mov rcx, rbx
call fcn.18000bc00
mov rax, qword [0x180012558]
cmp qword [0x180012550], rax
je 0x18000afa6
movabs rdx, 0x1426968c8
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 0x100
lea r8, [0x180012530]
mov rdx, qword [rdx]
mov rcx, qword [rdi + 0x18]
movabs rax, 0x141493490
call rax
mov rcx, qword [0x1800124d0]
call fcn.18000bd30
mov rbx, qword [rbp - 0x10]
mov dword [0x1800124dc], 0
xor edi, edi
jmp 0x18000afe8
movabs r14, 0xe38e38e38e38e39
mov dword [0x1800124dc], 0
xor edi, edi
jmp 0x18000afe8
xor edi, edi
movabs r14, 0xe38e38e38e38e39
mov rcx, qword [rbp + 0xb60]
test rcx, rcx
je 0x18000b04d
mov rax, qword [rbp + 0xb70]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000b032
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b032
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18000ca5c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xb60], xmm0
mov qword [rbp + 0xb70], rdi
mov rbx, qword [rbp - 0x10]
test rbx, rbx
je 0x18000b0a1
mov rax, qword [rbp]
sub rax, rbx
sar rax, 2
lea rdx, [rax*4]
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000b08d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b08d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.18000ca5c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov r8, qword [rsp + 0x70]
test r8, r8
je 0x18000b0fd
mov rcx, qword [rbp - 0x80]
sub rcx, r8
mov rax, r14
imul rcx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 2
mov rax, r8
cmp rdx, 0x1000
jb 0x18000b0f5
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000b0f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.18000ca5c
lea r11, [rsp + 0xf98]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret