Function at 0x1800167a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1800f8408]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor r13d, r13d
movzx ebx, byte [0x180111a22]
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
movabs rax, 0xd80958fc74e988a6
mov qword [0x180170400], rax
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x3882114bde571ad4
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x180112778], rax
mov dword [0x180112698], 2
call fcn.180028a70
movabs rbx, 0xd80958fc74e988a6
mov qword [0x180170400], rbx
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
cmp byte [0x18016dcd5], r13b
je 0x1800168c0
call fcn.180028a70
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r13
jmp 0x180016906
call fcn.180028a70
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x180112778], rax
mov dword [0x180112698], 3
mov qword [0x180112780], r13
mov dword [0x1801126a8], r13d
call fcn.180028a70
cmp byte [0x18016dcd4], r13b
je 0x1800169ea
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rbx, 0x57fff03e423a4c0b
mov qword [0x180170400], rbx
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
movabs rax, 0x4f8644af03d0e0d6
mov qword [0x180170400], rax
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov dword [0x180112698], 1
call fcn.180028a70
movabs rbx, 0xd80958fc74e988a6
cmp byte [0x18016d408], r13b
je 0x1800169ff
lea rcx, str.WEAPON_STUNGUN
call fcn.180015f30
cmp byte [0x18016d409], r13b
je 0x180016a14
lea rcx, str.WEAPON_RAILGUN
call fcn.180015f30
cmp byte [0x18016d40b], r13b
je 0x180016a29
lea rcx, str.WEAPON_FLARE
call fcn.180015f30
cmp byte [0x18016d40c], r13b
je 0x180016a3e
lea rcx, str.WEAPON_FIREWORK
call fcn.180015f30
cmp byte [0x18016d40d], r13b
je 0x180016a4c
call fcn.180015770
call fcn.1800140c0
call fcn.180014850
call fcn.180014fe0
movabs rdi, 0x997abd671d25ca0b
movabs r12, 0x7fffffffffffffff
cmp byte [0x18016dc13], r13b
je 0x1800171f7
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rdi
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r13
mov dword [0x180112698], 2
call fcn.180028a70
cmp dword [rax], r13d
je 0x1800171f7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
lea rbx, [0x180111c60]
add r14, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r13, r8d
shl r13, 5
add r13, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r12, r8d
shl r12, 5
add r12, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
add rdi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
lea rax, [0x180111c60]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rax, r8d
shl rax, 5
lea rcx, [0x180111c60]
add rax, rcx
mov qword [rsp + 0x60], rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
lea rax, [0x180111c60]
add r9, rax
mov rdx, qword [r9 + 0x10]
mov rcx, qword [rsp + 0x60]
mov r8, qword [rcx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, r8
jb 0x1800182c1
cmp qword [r9 + 0x18], 0x10
jb 0x180016cc6
mov r9, qword [r9]
cmp qword [rcx + 0x18], 0x10
jb 0x180016cd0
mov rcx, qword [rcx]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x50]
call fcn.180019c30
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x180016cf7
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xor ebx, ebx
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x180016d3f
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x180016d88
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 0x10
jb 0x180016dd0
mov r15, qword [r15]
mov rdx, r15
lea rcx, [rbp - 0x30]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 0x10
jb 0x180016e1a
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp + 0x30]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0x10
jb 0x180016e62
mov r13, qword [r13]
mov rdx, r13
lea rcx, [rbp - 0x50]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xor r13d, r13d
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x180016eac
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp + 0x10]
call fcn.18001a1b0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x180016f14
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180016f0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180016f0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x180016f62
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180016f5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180016f5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x180016fb0
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180016fab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180016fab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180016ffe
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180016ff9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180016ff9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18001704d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017048
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180017048
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18001709c
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017097
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180017097
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
lea rcx, [rbp + 0x50]
call fcn.1800032b0
lea rbx, [rbp - 0x10]
mov rsi, qword [rbp + 8]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rbp - 0x10]
cmovae rbx, rdi
mov rcx, qword [rbp]
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov rdx, rax
sub rdx, rbx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbx]
mov byte [rdx + rbx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x1800170f0
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
movabs rbx, 0xd80958fc74e988a6
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x9a9112a0fe9a4713
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r13
mov dword [0x180112698], 2
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x95a88f0b409cda47
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r14
mov dword [0x180112698], 2
call fcn.180028a70
nop
test r15b, r15b
je 0x1800171e3
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800171db
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800176e7
mov rcx, rdi
call fcn.18009ec10
movabs r12, 0x7fffffffffffffff
movabs rdi, 0x997abd671d25ca0b
cmp byte [0x18016dc12], 0
je 0x1800176f6
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rdi
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r13
mov dword [0x180112698], 2
call fcn.180028a70
cmp dword [rax], 0
je 0x1800176f6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
lea r13, [0x1801120c0]
add rdi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
add r14, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
add rbx, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
add r9, r13
mov rax, qword [r9 + 0x10]
mov rcx, qword [r15 + 0x10]
sub r12, rax
cmp r12, rcx
jb 0x1800182bb
cmp qword [r9 + 0x18], 0x10
jb 0x18001739b
mov r9, qword [r9]
cmp qword [r15 + 0x18], 0x10
jb 0x1800173a5
mov r15, qword [r15]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x50]
call fcn.180019c30
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x1800173cc
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xor r13d, r13d
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x180017416
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 0x30]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x18001745f
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.18001a1b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x1800174a7
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.18001a1b0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18001750f
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001750a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001750a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18001755e
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017559
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180017559
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1800175ad
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800175a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800175a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18009ec10
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
lea rcx, [rbp + 0x50]
call fcn.1800032b0
lea rbx, [rbp - 0x10]
mov rsi, qword [rbp + 8]
cmp rsi, 0x10
setae r15b
mov rdi, qword [rbp - 0x10]
cmovae rbx, rdi
mov rcx, qword [rbp]
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov rdx, rax
sub rdx, rbx
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rbx]
mov byte [rdx + rbx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x180017600
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
movabs rbx, 0xd80958fc74e988a6
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x9a9112a0fe9a4713
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r13
mov dword [0x180112698], 2
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x95a88f0b409cda47
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r14
mov dword [0x180112698], 2
call fcn.180028a70
nop
test r15b, r15b
je 0x1800176f6
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800176ee
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800176ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.18009ec10
movabs rdi, 0x3fef770d40960d5a
cmp byte [0x18016dc2f], 0
je 0x180017835
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rdi
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x180112778], rax
mov dword [0x180112698], 2
call fcn.180028a70
movups xmm4, xmmword [rax]
movsd xmm3, qword [rax + 0x10]
movss xmm0, dword [0x1800cfcf4]
movss dword [rsp + 0x38], xmm0
movss xmm1, dword [0x1800d07a4]
movss dword [rsp + 0x30], xmm1
mov eax, dword [0x180170418]
mov dword [rsp + 0x28], eax
mov eax, dword [0x180170414]
mov dword [rsp + 0x20], eax
mov r9d, dword [0x180115f7c]
movaps xmm2, xmm3
movsd qword [rbp - 0x40], xmm3
movaps xmm1, xmm4
shufps xmm1, xmm4, 0xaa
movaps xmm0, xmm4
call fcn.18001b810
cmp byte [0x18016dc2e], 0
je 0x180017835
mov ecx, dword [0x180170418]
mov edx, dword [0x180115f7c]
test edx, edx
jle 0x1800177ff
test ecx, ecx
jne 0x1800177ff
dec edx
mov dword [0x180115f7c], edx
mov eax, dword [0x180170414]
inc eax
mov dword [0x180170414], eax
jmp 0x180017805
mov eax, dword [0x180170414]
test eax, eax
jle 0x18001781d
test edx, edx
jne 0x18001781d
dec eax
mov dword [0x180170414], eax
inc ecx
mov dword [0x180170418], ecx
test ecx, ecx
jle 0x180017835
test eax, eax
jne 0x180017835
inc edx
mov dword [0x180115f7c], edx
dec ecx
mov dword [0x180170418], ecx
cmp byte [0x18016dc19], 0
je 0x1800178cc
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x1913fe4cbf41c463
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], 0x41
mov rax, qword [rsp + 0x60]
mov qword [0x180112778], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x180112780], rax
mov dword [0x180112698], 3
call fcn.180028a70
movabs rsi, 0xb80d8756b4668ab6
lea rdi, str.scr_rcbarry1
movabs r14, 0x6c38af3693a69a91
movabs r15, 0xd3bd40951412fef6
lea r12, str.rcmcollect_paperleadinout_
movss xmm7, dword [0x1800cf060]
xorps xmm6, xmm6
movss xmm8, dword [0x1800d0cec]
cmp byte [0x18016dc1f], 0
je 0x180017a07
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rsi
mov qword [0x180112770], rdi
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x1801126a8], r13d
mov qword [0x180170400], r14
mov qword [0x180112770], rdi
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
xorps xmm2, xmm2
mov edx, dword [rax]
lea rcx, str.scr_alien_teleport
call fcn.18001a8d0
call fcn.1800104f0
mov dword [0x1801126a8], r13d
mov qword [0x180170400], r15
mov qword [0x180112770], r12
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm7
mov ecx, dword [rax]
call fcn.18001a350
mov dword [0x1801126a8], r13d
mov dword [0x180112698], 1
cmp byte [0x18016dc1b], 0
je 0x180017a3c
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
jmp 0x180017a43
mov qword [0x180112770], r13
movabs rax, 0x1268615ace24d504
mov qword [0x180170400], rax
call fcn.180028a70
cmp byte [0x18016dc2a], 0
je 0x180017b54
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rsi
mov qword [0x180112770], rdi
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x1801126a8], r13d
mov qword [0x180170400], r14
mov qword [0x180112770], rdi
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
xorps xmm2, xmm2
mov edx, dword [rax]
lea rcx, str.scr_alien_disintegrate
call fcn.18001a8d0
call fcn.180010110
mov dword [0x1801126a8], r13d
mov qword [0x180170400], r15
mov qword [0x180112770], r12
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm7
mov ecx, dword [rax]
call fcn.18001a350
call fcn.180011550
call fcn.180013d20
call fcn.180011ce0
call fcn.180012f10
movzx ecx, byte [0x18016dc15]
call fcn.180013d10
call fcn.180013470
cmp byte [0x18016dc1d], 0
je 0x180017d35
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x3fef770d40960d5a
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [0x180112778], r13
mov dword [0x180112698], 2
call fcn.180028a70
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp - 0x40], xmm1
mov dword [0x1801126a8], r13d
movabs rax, 0xd24d37cc275948cc
mov qword [0x180170400], rax
lea rax, str.prop_boogieboard_05
mov qword [0x180112770], rax
mov dword [0x180112698], 1
call fcn.180028a70
mov ebx, dword [rax]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x180170410]
cmp eax, 0x64
jb 0x180017d35
movss xmm0, dword [rbp - 0x40]
subss xmm0, xmm7
movss xmm3, dword [rbp - 0x48]
subss xmm3, xmm7
mov dword [rsp + 0x38], 1
movss dword [rsp + 0x20], xmm0
movss xmm2, dword [rbp - 0x50]
mov edx, ebx
call fcn.18001bdb0
mov ebx, eax
mov dword [0x180112698], r13d
mov dword [0x1801126a8], r13d
movabs rax, 0xd80958fc74e988a6
mov qword [0x180170400], rax
call fcn.180028a70
mov ecx, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0xe83d4f9ba2a38914
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0x60]
mov qword [0x180112770], rcx
mov dword [0x180112698], 1
call fcn.180028a70
movss xmm0, dword [rax]
mov dword [0x1801126a8], r13d
movabs rax, 0x8e2530aa8ada980e
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov qword [rsp + 0x60], r13
movss dword [rsp + 0x60], xmm0
mov rax, qword [rsp + 0x60]
mov qword [0x180112778], rax
mov dword [0x180112698], 2
call fcn.180028a70
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x180170410], eax
call fcn.1800118b0
cmp byte [0x18016dc1c], 0
je 0x180017e15
mov dword [0x1801126a8], r13d
movabs rax, 0x50fac3a3e030a6e1
mov qword [0x180170400], rax
mov qword [rsp + 0x60], r13
mov eax, dword [0x18016f278]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x60]
mov qword [0x180112770], rax
mov dword [0x180112698], 1
call fcn.180028a70
mov ebx, dword [rax]
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rsi
lea rdi, str.scr_agencyheist
mov qword [0x180112770], rdi
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x1801126a8], r13d
mov qword [0x180170400], r14
mov qword [0x180112770], rdi
mov dword [0x180112698], 1
call fcn.180028a70
movss xmm0, dword [0x1800cf408]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm8
xorps xmm3, xmm3
xorps xmm2, xmm2
mov edx, ebx
lea rcx, str.scr_fbi_dd_breach_smoke
call fcn.18001a8d0
call fcn.180011140
cmp byte [0x18016dc30], 0
je 0x180017eb7
mov dword [0x1801126a8], r13d
movabs rbx, 0x9dc711bc69c548df
mov qword [0x180170400], rbx
lea rax, str.am_armybase
mov qword [0x180112770], rax
mov dword [0x180112698], 1
call fcn.180028a70
mov dword [0x1801126a8], r13d
mov qword [0x180170400], rbx
lea rax, str.restrictedareas
mov qword [0x180112770], rax
mov dword [0x180112698], 1
call fcn.180028a70
lea rcx, str.re_armybase
call fcn.18001a4f0
lea rcx, str.re_lossantosintl
call fcn.18001a4f0
lea rcx, str.re_prison
call fcn.18001a4f0
lea rcx, str.re_prisonvanbreak
call fcn.18001a4f0
call fcn.180010d00
call fcn.180010cd0
call fcn.18000f9a0
call fcn.18000f550
call fcn.180003620
call fcn.1800035c0
call fcn.180003570
call fcn.1800109c0
call fcn.180010780
call fcn.1800035f0
call fcn.18000f1a0
call fcn.18000fd50
call fcn.180003650
call fcn.180003880
call fcn.180004060
call fcn.180004550
call fcn.180003a50
call fcn.180005b50
call fcn.18000e010
call fcn.180004bb0
call fcn.180004e70
call fcn.180003ee0
call fcn.180004b20
call fcn.18000e2f0
call fcn.18000e580
call fcn.18000e770
call fcn.18000e960
call fcn.18000eb50
call fcn.1800046d0
call fcn.180004960
call fcn.18000ff80
call fcn.180005110
call fcn.180005350
call fcn.180005590
call fcn.180005940
call fcn.180005cc0
call fcn.180005f80
call fcn.180006850
call fcn.1800069f0
call fcn.180006fe0
call fcn.180006aa0
call fcn.180006c10
call fcn.180007110
call fcn.180007780
call fcn.180008110
call fcn.180008370
call fcn.180008580
call fcn.180008670
call fcn.1800086a0
call fcn.1800086d0
call fcn.1800088a0
call fcn.180008ba0
call fcn.180008d10
call fcn.180008df0
call fcn.180008f60
movzx ecx, byte [0x180170408]
call fcn.18000a110
call fcn.180010020
call fcn.1800057d0
call fcn.18000a790
call fcn.180007030
call fcn.1800070c0
call fcn.1800091b0
call fcn.1800093b0
call fcn.180009550
call fcn.180009a30
call fcn.180009ae0
call fcn.180009b40
call fcn.18000d0f0
call fcn.18000ca90
call fcn.180009b90
call fcn.180009be0
call fcn.180009ca0
movzx ecx, byte [0x18016dc7a]
call fcn.18000a110
call fcn.180009990
call fcn.18000a500
call fcn.18000b360
call fcn.18000b650
call fcn.18000b9d0
call fcn.18000d580
call fcn.18000bcd0
call fcn.18000c3b0
call fcn.18000d230
call fcn.18000da50
call fcn.18000dc30
call fcn.18000ac80
call fcn.18000e100
call fcn.18000e180
cmp byte [0x18016dc3e], 0
je 0x18001827f
call fcn.18001c4b0
mov r15d, eax
mov ebx, r13d
movabs r12, 0x2513dfb0fb8400fe
movss xmm7, dword [0x1800cf020]
mov ecx, ebx
call fcn.18001c350
mov esi, eax
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movaps xmm2, xmm6
mov edx, eax
lea rcx, [rbp + 0x10]
call fcn.18001ae80
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp - 0x40], xmm1
xor r8d, r8d
mov edx, r15d
lea rcx, [rbp + 0x10]
call fcn.18001c2d0
mov ecx, ebx
call fcn.18001ade0
mov ecx, eax
call fcn.18001ae30
mov ecx, esi
call fcn.18001c030
test eax, eax
je 0x180018274
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
movss xmm2, dword [rbp - 0x40]
movss xmm1, dword [rbp - 0x48]
movss xmm0, dword [rbp - 0x50]
call fcn.18001a7a0
mov ecx, ebx
call fcn.18001ade0
mov ecx, eax
call fcn.18001ae30
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.18001b7d0
nop
lea r8, [rsp + 0x70]
lea rdx, str.HUD_COLOUR_RED
lea rcx, [rbp - 0x70]
call fcn.180019860
nop
lea r8, [rsp + 0x70]
lea rdx, str.HUD_COLOUR_GREEN
lea rcx, [rbp - 0x10]
call fcn.180019860
nop
mov rcx, qword [rbp - 0x60]
inc rcx
call fcn.18009ef18
mov rdi, rax
mov rcx, qword [rbp]
inc rcx
call fcn.18009ef18
mov r14, rax
lea rcx, [rbp - 0x70]
call fcn.18001a790
mov rdx, rdi
sub rdx, rax
nop word [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x1800181a0
lea rcx, [rbp - 0x10]
call fcn.18001a790
mov rdx, r14
sub rdx, rax
nop dword [rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x1800181c0
mov ecx, 7
call fcn.18001b260
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.18001b200
xor ecx, ecx
call fcn.18001b1c0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call fcn.18001b120
xor ecx, ecx
call fcn.18001b010
call fcn.18001afd0
mov edx, esi
mov ecx, r15d
call fcn.18001a710
test eax, eax
cmovne rdi, r14
mov rcx, rdi
call fcn.18001af90
movss xmm1, dword [rsp + 0x68]
movss xmm0, dword [rsp + 0x60]
call fcn.18001af30
mov rcx, r12
call fcn.18001c480
mov dword [rsp + 0x20], 0xff
mov ecx, 5
mov r9d, 0xff
lea r8d, [rcx + 0x49]
call fcn.18001b120
nop
lea rcx, [rbp - 0x10]
call fcn.1800032b0
nop
lea rcx, [rbp - 0x70]
call fcn.1800032b0
nop
lea rcx, [rsp + 0x70]
call fcn.1800032b0
inc ebx
cmp ebx, 0x20
jl 0x1800180a2
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.18009e870
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18001b6a0
int3
call fcn.18001b6a0
int3