Function at 0x18001df00
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
mov rax, qword [0x1800ff3c0]
xor rax, rsp
mov qword [rbp + 0x98], rax
xor r15d, r15d
movzx ebx, byte [0x180118a22]
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
movabs r13, 0xd80958fc74e988a6
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0x3882114bde571ad4
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ebx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a8], rax
mov dword [0x1801194c8], 2
call fcn.180032480
mov qword [0x180141108], r13
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
cmp byte [0x18013edc4], r15b
je 0x18001e043
call fcn.180032480
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r15
jmp 0x18001e089
call fcn.180032480
mov ecx, dword [rax]
movabs rax, 0xea1c610a04db6bbb
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a8], rax
mov dword [0x1801194c8], 3
mov qword [0x1801195b0], r15
mov dword [0x1801194d8], r15d
call fcn.180032480
cmp byte [0x18013edc3], r15b
je 0x18001e163
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rbx, 0x57fff03e423a4c0b
mov qword [0x180141108], rbx
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov dword [0x1801194c8], 1
call fcn.180032480
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
movabs rax, 0x4f8644af03d0e0d6
mov qword [0x180141108], rax
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
mov qword [0x180141108], rbx
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov dword [0x1801194c8], 1
call fcn.180032480
cmp byte [0x18013e4f8], r15b
je 0x18001e178
lea rcx, str.WEAPON_BZGAS
call fcn.18001d690
cmp byte [0x18013edbe], r15b
je 0x18001e369
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0xae4086104e067b1
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a8], rax
mov dword [0x1801194c8], 2
call fcn.180032480
mov dword [0x1801194d8], r15d
movabs rax, 0x7ff4944cc209192d
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 0xffffffff
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
lea rdi, str.Beast_Checkpoint
mov qword [0x1801195a8], rdi
lea rbx, str.APT_BvS_Soundset
mov qword [0x1801195b0], rbx
mov qword [0x1801195b8], r15
mov qword [0x1801195c0], r15
mov qword [0x1801195c8], r15
mov dword [0x1801194c8], 6
call fcn.180032480
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0xe65f427eb70ab1ed
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 0xffffffff
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
lea rax, str.Checkpoint_Beast_Hit
mov qword [0x1801195a8], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195b0], rax
lea rax, str.FM_Events_Sasquatch_Sounds
mov qword [0x1801195b8], rax
mov qword [0x1801195c0], r15
mov qword [0x1801195c8], r15
mov dword [0x1801194c8], 6
call fcn.180032480
mov dword [0x1801194d8], r15d
movabs rax, 0x67c540aa08e4a6f5
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 0xffffffff
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], rdi
mov qword [0x1801195b0], rbx
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x1801195b8], rax
mov dword [0x1801194c8], 4
call fcn.180032480
cmp byte [0x18013e4f9], r15b
je 0x18001e37e
lea rcx, str.WEAPON_STUNGUN
call fcn.18001d690
cmp byte [0x18013e4fa], r15b
je 0x18001e393
lea rcx, str.WEAPON_RAILGUN
call fcn.18001d690
cmp byte [0x18013e4fb], r15b
je 0x18001e3a8
lea rcx, str.WEAPON_STICKYBOMB
call fcn.18001d690
cmp byte [0x18013e4fc], r15b
je 0x18001e3bd
lea rcx, str.WEAPON_FLAREGUN
call fcn.18001d690
cmp byte [0x18013e4fd], r15b
je 0x18001e3d2
lea rcx, str.WEAPON_MOLOTOV
call fcn.18001d690
cmp byte [0x18013e4fe], r15b
je 0x18001e3e7
lea rcx, str.WEAPON_FIREWORK
call fcn.18001d690
cmp byte [0x18013e4ff], r15b
je 0x18001e3f5
call fcn.18001ced0
call fcn.18001b820
call fcn.18001bfb0
call fcn.18001c740
movabs rbx, 0x997abd671d25ca0b
movabs r12, 0x7fffffffffffffff
cmp byte [0x18013ed05], r15b
je 0x18001eba8
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
mov qword [0x180141108], rbx
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r15
mov dword [0x1801194c8], 2
call fcn.180032480
cmp dword [rax], r15d
je 0x18001eba8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r13, r8d
shl r13, 5
lea rbx, [0x180118a90]
add r13, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r12, r8d
shl r12, 5
add r12, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
add r14, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
add rdi, rbx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
lea rax, [0x180118a90]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd rax, r8d
shl rax, 5
lea rcx, [0x180118a90]
add rax, rcx
mov qword [rsp + 0x60], rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0xea0ea0eb
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x23
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
lea rax, [0x180118a90]
add r9, rax
mov rdx, qword [r9 + 0x10]
mov rcx, qword [rsp + 0x60]
mov r8, qword [rcx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, r8
jb 0x180020a84
cmp qword [r9 + 0x18], 0xf
jbe 0x18001e66f
mov r9, qword [r9]
cmp qword [rcx + 0x18], 0xf
jbe 0x18001e679
mov rcx, qword [rcx]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x38]
call fcn.180022650
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x18001e6a0
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x38]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xor ebx, ebx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18001e6e8
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x18001e72f
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rbp - 0x28]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x18001e776
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 0x48]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 0xf
jbe 0x18001e7bd
mov r15, qword [r15]
mov rdx, r15
lea rcx, [rbp + 0x18]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xor r15d, r15d
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 0xf
jbe 0x18001e80c
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rsp + 0x78]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0xf
jbe 0x18001e855
mov r13, qword [r13]
mov rdx, r13
lea rcx, [rbp - 0x68]
call fcn.180022bd0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x58], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x18001e8bd
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e8b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001e8b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x18001e90c
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e907
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001e907
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x18001e95b
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e956
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001e956
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18001e9a9
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e9a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001e9a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18001e9f7
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001e9f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001e9f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18001ea45
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ea40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001ea40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp + 8], r15
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], 0
lea rcx, [rbp + 0x38]
call fcn.180003120
lea rbx, [rbp + 0x58]
movq rdi, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rsi, xmm0
cmp rsi, 0xf
cmova rbx, rdi
movq rcx, xmm6
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov rdx, rax
sub rdx, rbx
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rbx]
mov byte [rbx + rdx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x18001eaa0
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
movabs r13, 0xd80958fc74e988a6
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0x9a9112a0fe9a4713
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r15
mov dword [0x1801194c8], 2
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0x95a88f0b409cda47
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r14
mov dword [0x1801194c8], 2
call fcn.180032480
nop
cmp rsi, 0xf
jbe 0x18001eb94
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18001eb8c
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001f098
mov rcx, rdi
call fcn.1800a9690
movabs r12, 0x7fffffffffffffff
movabs rbx, 0x997abd671d25ca0b
cmp byte [0x18013ed04], 0
je 0x18001f0a7
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
mov qword [0x180141108], rbx
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r15
mov dword [0x1801194c8], 2
call fcn.180032480
cmp dword [rax], 0
je 0x18001f0a7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r14, r8d
shl r14, 5
lea r13, [0x180118ef0]
add r14, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rsi, r8d
shl rsi, 5
add rsi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rdi, r8d
shl rdi, 5
add rdi, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd rbx, r8d
shl rbx, 5
add rbx, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r15, r8d
shl r15, 5
add r15, r13
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
movsxd r9, r8d
shl r9, 5
add r9, r13
mov rax, qword [r9 + 0x10]
mov rcx, qword [r15 + 0x10]
sub r12, rax
cmp r12, rcx
jb 0x180020a7e
cmp qword [r9 + 0x18], 0xf
jbe 0x18001ed4c
mov r9, qword [r9]
cmp qword [r15 + 0x18], 0xf
jbe 0x18001ed56
mov r15, qword [r15]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x58]
call fcn.180022650
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x18001ed7d
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x58]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xor r15d, r15d
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x18001edc7
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x18001ee0e
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [rbp - 0x28]
call fcn.180022bd0
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], r15
mov qword [rbp + 0x10], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x18001ee55
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 8]
call fcn.180022bd0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x38], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm6
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x18001eebd
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001eeb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001eeb8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp + 8], r15
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18001ef0b
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ef06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001ef06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18001ef59
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001ef54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001ef54
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800a9690
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
lea rcx, [rbp + 0x58]
call fcn.180003120
lea rbx, [rbp + 0x38]
movq rdi, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rsi, xmm0
cmp rsi, 0xf
cmova rbx, rdi
movq rcx, xmm6
inc rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov rdx, rax
sub rdx, rbx
nop dword [rax + rax]
movzx ecx, byte [rbx]
mov byte [rbx + rdx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x18001efb0
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
movabs r13, 0xd80958fc74e988a6
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0x9a9112a0fe9a4713
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r15
mov dword [0x1801194c8], 2
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0x95a88f0b409cda47
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r14
mov dword [0x1801194c8], 2
call fcn.180032480
nop
cmp rsi, 0xf
jbe 0x18001f0a7
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18001f09f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18001f09f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800a9690
movabs rbx, 0x3fef770d40960d5a
cmp byte [0x18013ed19], 0
je 0x18001f1e6
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
mov qword [0x180141108], rbx
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a8], rax
mov dword [0x1801194c8], 2
call fcn.180032480
movups xmm4, xmmword [rax]
movsd xmm3, qword [rax + 0x10]
movss xmm0, dword [0x1800d7f30]
movss dword [rsp + 0x38], xmm0
movss xmm1, dword [0x1800d89dc]
movss dword [rsp + 0x30], xmm1
mov eax, dword [0x1801414b4]
mov dword [rsp + 0x28], eax
mov eax, dword [0x1801414b0]
mov dword [rsp + 0x20], eax
mov r9d, dword [0x18011cdd0]
movaps xmm2, xmm3
movsd qword [rbp - 0x58], xmm3
movaps xmm1, xmm4
shufps xmm1, xmm4, 0xaa
movaps xmm0, xmm4
call fcn.1800246f0
cmp byte [0x18013ed18], 0
je 0x18001f1e6
mov ecx, dword [0x1801414b4]
mov edx, dword [0x18011cdd0]
test edx, edx
jle 0x18001f1b0
test ecx, ecx
jne 0x18001f1b0
dec edx
mov dword [0x18011cdd0], edx
mov eax, dword [0x1801414b0]
inc eax
mov dword [0x1801414b0], eax
jmp 0x18001f1b6
mov eax, dword [0x1801414b0]
test eax, eax
jle 0x18001f1ce
test edx, edx
jne 0x18001f1ce
dec eax
mov dword [0x1801414b0], eax
inc ecx
mov dword [0x1801414b4], ecx
test ecx, ecx
jle 0x18001f1e6
test eax, eax
jne 0x18001f1e6
inc edx
mov dword [0x18011cdd0], edx
dec ecx
mov dword [0x1801414b4], ecx
cmp byte [0x18013ed0b], 0
je 0x18001f27d
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
movabs rax, 0x1913fe4cbf41c463
mov qword [0x180141108], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 0x41
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a8], rax
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x1801195b0], rax
mov dword [0x1801194c8], 3
call fcn.180032480
mov edx, 0x9c
mov ecx, 0xf4
mov r9d, 0xff
mov r8d, 4
call fcn.1800235f0
mov edx, 0x9c
mov ecx, 0xf4
mov r9d, 0xff
mov r8d, 4
call fcn.1800235f0
mov edx, 0x9c
mov ecx, 0xf4
mov r9d, 0xff
mov r8d, 4
call fcn.1800235f0
mov edx, 0x90
mov ecx, 4
mov r9d, 0x37
mov r8d, 0xf4
call fcn.1800235f0
mov edx, 0x90
mov ecx, 4
mov r9d, 0x37
mov r8d, 0xf4
call fcn.1800235f0
mov edx, 0x90
mov ecx, 4
mov r9d, 0x37
mov r8d, 0xf4
call fcn.1800235f0
mov edx, 0x90
mov ecx, 4
mov r9d, 0xff
mov r8d, 0xf4
call fcn.1800235f0
xor r9d, r9d
mov edx, 0x90
mov ecx, 4
mov r8d, 0xf4
call fcn.1800235f0
xor r9d, r9d
mov edx, 0x9b
mov ecx, 0x14
mov r8d, edx
call fcn.1800235f0
movabs r14, 0xb80d8756b4668ab6
lea rdi, str.scr_rcbarry1
movabs r12, 0x6c38af3693a69a91
lea rsi, str.rcmcollect_paperleadinout_
movss xmm10, dword [0x1800d7278]
xorps xmm9, xmm9
movss xmm7, dword [0x1800d8f28]
cmp byte [0x18013ed11], 0
je 0x18001f4a9
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r14
mov qword [0x1801195a0], rdi
mov dword [0x1801194c8], 1
call fcn.180032480
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r12
mov qword [0x1801195a0], rdi
mov dword [0x1801194c8], 1
call fcn.180032480
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x38], xmm9
movss dword [rsp + 0x30], xmm9
movss dword [rsp + 0x28], xmm9
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
xorps xmm2, xmm2
mov edx, dword [rax]
lea rcx, str.scr_alien_teleport
call fcn.180023280
call fcn.180014a30
mov dword [0x1801194d8], r15d
movabs rax, 0xd3bd40951412fef6
mov qword [0x180141108], rax
mov qword [0x1801195a0], rsi
mov dword [0x1801194c8], 1
call fcn.180032480
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
movss dword [rsp + 0x38], xmm9
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
mov ecx, dword [rax]
call fcn.180022d70
mov dword [0x1801194d8], r15d
mov dword [0x1801194c8], 1
cmp byte [0x18013ed0d], 0
je 0x18001f4de
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
jmp 0x18001f4e5
mov qword [0x1801195a0], r15
movabs rax, 0x1268615ace24d504
mov qword [0x180141108], rax
call fcn.180032480
cmp byte [0x18013ed14], 0
je 0x18001f606
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r14
mov qword [0x1801195a0], rdi
mov dword [0x1801194c8], 1
call fcn.180032480
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r12
mov qword [0x1801195a0], rdi
mov dword [0x1801194c8], 1
call fcn.180032480
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x38], xmm9
movss dword [rsp + 0x30], xmm9
movss dword [rsp + 0x28], xmm9
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
xorps xmm2, xmm2
mov edx, dword [rax]
lea rcx, str.scr_alien_disintegrate
call fcn.180023280
call fcn.180014650
mov dword [0x1801194d8], r15d
movabs rax, 0xd3bd40951412fef6
mov qword [0x180141108], rax
mov qword [0x1801195a0], rsi
mov dword [0x1801194c8], 1
call fcn.180032480
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
movss dword [rsp + 0x38], xmm9
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
mov ecx, dword [rax]
call fcn.180022d70
call fcn.180016f10
call fcn.18001b480
call fcn.1800177f0
call fcn.180018a40
movzx ecx, byte [0x18013ed07]
call fcn.180019860
call fcn.180018fa0
cmp byte [0x18013ed0f], 0
je 0x18001f705
mov dword [0x1801194c8], r15d
mov dword [0x1801194d8], r15d
mov qword [0x180141108], r13
call fcn.180032480
mov ecx, dword [rax]
mov dword [0x1801194d8], r15d
mov qword [0x180141108], rbx
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x60], ecx
mov rax, qword [rsp + 0x60]
mov qword [0x1801195a0], rax
mov qword [0x1801195a8], r15
mov dword [0x1801194c8], 2
call fcn.180032480
movups xmm6, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x78], xmm0
lea rcx, str.prop_boogieboard_05
call fcn.1800258a0
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1801414ac]
cmp eax, 0x64
jb 0x18001f705
movss xmm3, dword [rbp - 0x78]
subss xmm3, xmm10
movaps xmm2, xmm6
shufps xmm2, xmm6, 0xaa
subss xmm2, xmm10
mov dword [rsp + 0x30], 1
movaps xmm1, xmm6
mov ecx, ebx
call fcn.1800251c0
mov ebx, eax
call fcn.180026080
mov ecx, eax
call fcn.180025b60
movaps xmm1, xmm0
mov ecx, ebx
call fcn.1800249e0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1801414ac], eax
call fcn.180017280
call fcn.180017610
call fcn.1800168a0
cmp byte [0x18013ed17], 0
je 0x18001f748
mov edx, 0x28c357
lea rcx, [rsp + 0x60]
call fcn.180025fc0
mov r8d, 8
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.180024290
mov rcx, qword [rax]
mov dword [rcx], 1
call fcn.180016af0
cmp byte [0x18013ed25], 0
je 0x18001f7b2
call fcn.180026080
mov ecx, eax
call fcn.180015150
test al, al
je 0x18001f7b2
call fcn.180026080
mov ecx, eax
lea rdx, [rsp + 0x78]
call fcn.180025840
test eax, eax
je 0x18001f7b2
movss dword [rsp + 0x38], xmm9
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
movss xmm0, dword [0x1800d7568]
movss dword [rsp + 0x20], xmm0
xor r9d, r9d
movss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x80]
movss xmm0, dword [rsp + 0x78]
call fcn.1800242f0
call fcn.180016760
call fcn.180016320
cmp byte [0x18013ed22], 0
je 0x18001f81b
mov edx, 0x193c99
lea rcx, [rsp + 0x60]
call fcn.180025fc0
mov r8d, 0x494
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.180024290
mov rcx, qword [rax]
mov dword [rcx], 0xffffffff
mov edx, 0x193c99
lea rcx, [rsp + 0x60]
call fcn.180025fc0
mov r8d, 0x484
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.180024290
mov rcx, qword [rax]
mov dword [rcx], 0xffffffff
call fcn.180015210
call fcn.180015240
cmp byte [0x18013ed1b], 0
je 0x18001f879
mov dword [rsp + 0x78], 8
mov dword [rsp + 0x7c], 0x10a8
mov dword [rbp - 0x80], 0x888
lea rax, [rsp + 0x78]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x7c]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.180021b20
mov rcx, rax
call fcn.180021ed0
call fcn.180013c10
call fcn.1800137c0
call fcn.1800033e0
call fcn.180003380
call fcn.180003330
call fcn.180014f00
call fcn.180014cc0
call fcn.1800033b0
call fcn.180013410
call fcn.180013fc0
cmp byte [0x18013e4f7], 0
je 0x18001f940
mov rcx, rdi
call fcn.180024170
mov rcx, rdi
call fcn.1800233b0
call fcn.180026080
mov edx, eax
movss dword [rsp + 0x40], xmm10
movss dword [rsp + 0x38], xmm9
movss dword [rsp + 0x30], xmm9
movss dword [rsp + 0x28], xmm9
movss dword [rsp + 0x20], xmm7
xorps xmm3, xmm3
xorps xmm2, xmm2
lea rcx, str.scr_alien_disintegrate
call fcn.180023280
call fcn.180014380
mov rcx, rsi
call fcn.1800231a0
call fcn.180026080
mov ecx, eax
movss dword [rsp + 0x38], xmm9
mov dword [rsp + 0x30], 0x10
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
lea r8, str.meditiate_idle
mov rdx, rsi
call fcn.1800230b0
call fcn.180003570
call fcn.1800037a0
cmp byte [0x18013edb6], 0
je 0x18001fc54
call fcn.180025ff0
call fcn.180026080
mov ebx, eax
mov ecx, eax
call fcn.180025680
mov edi, eax
mov ecx, eax
call fcn.180025630
xor r8d, r8d
mov edx, ebx
lea rcx, [rbp - 0x68]
call fcn.180025bb0
movups xmm7, xmmword [rax]
movsd xmm11, qword [rax + 0x10]
mov dword [rsp + 0x60], 0
xorps xmm0, xmm0
call fcn.1800255f0
mov ecx, edi
call fcn.180025630
mov ecx, eax
call fcn.1800255a0
movsd qword [rbp - 0x58], xmm11
movaps xmm8, xmm7
shufps xmm8, xmm7, 0xaa
test eax, eax
jne 0x18001fbc3
lea r9, [rsp + 0x60]
movaps xmm2, xmm11
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.180025520
test eax, eax
je 0x18001fbc3
lea rcx, str.prop_container_ld2
call fcn.1800258a0
mov dword [rsp + 0x20], eax
movss xmm3, dword [0x1800d7420]
movaps xmm2, xmm11
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.180025450
mov esi, eax
mov ecx, eax
call fcn.180025400
test eax, eax
je 0x18001fb4a
movss xmm0, dword [rsp + 0x60]
comiss xmm0, dword [0x1800d9650]
jbe 0x18001fb4a
xor r8d, r8d
mov edx, ebx
lea rcx, [rsp + 0x78]
call fcn.180025380
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movsd xmm6, qword [rax + 0x10]
mov ecx, esi
call fcn.180020ba0
movss xmm3, dword [rsp + 0x60]
subss xmm3, dword [0x1800d72f8]
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], r15d
movaps xmm2, xmm8
movaps xmm1, xmm7
mov ecx, esi
call fcn.1800252b0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], r15d
movaps xmm3, xmm6
movsd qword [rbp - 0x58], xmm6
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ecx, esi
call fcn.1800251f0
mov r8d, 1
mov edx, esi
lea rcx, [rsp + 0x78]
call fcn.180025bb0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movsd xmm6, qword [rax + 0x10]
movsd qword [rbp - 0x58], xmm6
comiss xmm6, xmm11
jbe 0x18001fc54
xor edx, edx
mov ecx, ebx
call fcn.180025df0
test eax, eax
jne 0x18001fafa
addss xmm6, dword [0x1800d737c]
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], r15d
movaps xmm3, xmm6
movaps xmm2, xmm8
movaps xmm1, xmm7
mov ecx, ebx
call fcn.1800252b0
jmp 0x18001fc54
mov ecx, edi
call fcn.180020ba0
mov r8d, 1
mov edx, edi
lea rcx, [rbp - 0x68]
call fcn.180025bb0
movups xmm1, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x58], xmm0
addss xmm6, dword [0x1800d737c]
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], r15d
movaps xmm3, xmm6
movaps xmm2, xmm1
shufps xmm2, xmm1, 0xaa
mov ecx, edi
call fcn.1800252b0
jmp 0x18001fc54
lea rcx, str.prop_container_ld2
call fcn.1800258a0
mov ebx, eax
mov ecx, eax
call fcn.1800259d0
mov ecx, ebx
call fcn.180025a10
test eax, eax
jne 0x18001fb82
nop word [rax + rax]
xor ecx, ecx
call fcn.180028970
mov ecx, ebx
call fcn.180025a10
test eax, eax
je 0x18001fb70
mov dword [rsp + 0x30], r15d
movaps xmm3, xmm11
movaps xmm2, xmm8
movaps xmm1, xmm7
mov ecx, ebx
call fcn.1800251c0
mov ebx, eax
mov ecx, eax
call fcn.180020ba0
mov edx, 1
mov ecx, ebx
call fcn.180025070
mov ecx, ebx
call fcn.180025010
xor edx, edx
mov ecx, ebx
call fcn.180026020
jmp 0x18001fc54
lea rcx, str.prop_container_ld2
call fcn.1800258a0
mov dword [rsp + 0x20], eax
movss xmm3, dword [0x1800d7420]
movaps xmm2, xmm11
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.180025450
mov dword [rsp + 0x70], eax
mov ecx, eax
call fcn.180025400
test eax, eax
je 0x18001fc54
mov ecx, dword [rsp + 0x70]
call fcn.180020ba0
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], r15d
movss xmm3, dword [0x1800da940]
xorps xmm2, xmm2
xorps xmm1, xmm1
mov ecx, dword [rsp + 0x70]
call fcn.1800252b0
mov ecx, 0xa
call fcn.180028970
lea rcx, [rsp + 0x70]
call fcn.180024fd0
lea rcx, [rsp + 0x70]
call fcn.180024f90
movabs rcx, 0x5e5e99285ae812db
call fcn.180025f90
call fcn.1800043e0
call fcn.1800048d0
cmp byte [0x18013edaf], 0
je 0x18001ff0e
call fcn.180026080
mov ebx, eax
xor r8d, r8d
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.180025bb0
movups xmm11, xmmword [rax]
movsd xmm13, qword [rax + 0x10]
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
movsd qword [rbp - 0x58], xmm13
movaps xmm3, xmm13
movaps xmm12, xmm11
shufps xmm12, xmm11, 0xaa
movaps xmm2, xmm12
movaps xmm1, xmm11
mov ecx, ebx
call fcn.180025cc0
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm14, dword [0x1800d722c]
test ax, ax
jne 0x18001fce2
mov edx, 0x10c
call fcn.180025a60
test eax, eax
je 0x18001fd44
mov ecx, ebx
call fcn.180025b60
movaps xmm6, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm7, xmm0
mulss xmm7, xmm14
mulss xmm7, dword [0x1800d8f58]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
mulss xmm6, xmm14
mov ecx, ebx
call fcn.180025b60
subss xmm11, xmm7
subss xmm12, xmm6
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
movaps xmm3, xmm13
movaps xmm2, xmm12
movaps xmm1, xmm11
mov ecx, ebx
call fcn.180025cc0
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18001fd62
mov edx, 0x10d
call fcn.180025a60
test eax, eax
je 0x18001fddf
mov ecx, ebx
call fcn.180025b60
movaps xmm8, xmm0
movaps xmm6, xmm0
mulss xmm6, dword [0x1800d73dc]
divss xmm6, dword [0x1800d8260]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm7, xmm0
mulss xmm7, xmm14
mulss xmm7, dword [0x1800d8f58]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm6, xmm0
mulss xmm6, xmm14
movaps xmm1, xmm8
mov ecx, ebx
call fcn.1800249e0
addss xmm11, xmm7
addss xmm12, xmm6
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
movaps xmm3, xmm13
movaps xmm2, xmm12
movaps xmm1, xmm11
mov ecx, ebx
call fcn.180025cc0
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18001fdfd
mov edx, 0x10a
call fcn.180025a60
test eax, eax
je 0x18001fe13
mov ecx, ebx
call fcn.180025b60
addss xmm0, xmm10
movaps xmm1, xmm0
mov ecx, ebx
call fcn.1800249e0
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18001fe31
mov edx, 0x10f
call fcn.180025a60
test eax, eax
je 0x18001fe47
mov ecx, ebx
call fcn.180025b60
subss xmm0, xmm10
movaps xmm1, xmm0
mov ecx, ebx
call fcn.1800249e0
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movsd xmm6, qword [0x1800d72f0]
test ax, ax
jne 0x18001fe6d
mov edx, 0xce
call fcn.180025a60
test eax, eax
je 0x18001feb1
mov ecx, ebx
call fcn.180025b60
movaps xmm1, xmm0
mov ecx, ebx
call fcn.1800249e0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm13
subsd xmm0, xmm6
cvtpd2ps xmm13, xmm0
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
movaps xmm3, xmm13
movaps xmm2, xmm12
movaps xmm1, xmm11
mov ecx, ebx
call fcn.180025cc0
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18001fecf
mov edx, 0xcd
call fcn.180025a60
test eax, eax
je 0x18001ff0e
mov ecx, ebx
call fcn.180025b60
movaps xmm1, xmm0
mov ecx, ebx
call fcn.1800249e0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm13
addsd xmm0, xmm6
cvtpd2ps xmm3, xmm0
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
movaps xmm2, xmm12
movaps xmm1, xmm11
mov ecx, ebx
call fcn.180025cc0
call fcn.180003970
call fcn.180005d50
movss xmm6, dword [0x1800d746c]
cmp byte [0x18013ed4b], 0
je 0x18001ff81
mov ecx, dword [rsp + 0x60]
call fcn.180025c30
xor r8d, r8d
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.180025bb0
movups xmm0, xmmword [rax]
movsd xmm2, qword [rax + 0x10]
movsd qword [rbp - 0x58], xmm2
subss xmm2, dword [0x1800d737c]
movss dword [rsp + 0x38], xmm9
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 1
movss dword [rsp + 0x20], xmm6
mov r9d, 0xd
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xaa
call fcn.1800242f0
call fcn.180012100
call fcn.1800121f0
call fcn.180005c80
call fcn.180004ca0
call fcn.180004f60
cmp byte [0x18013ed50], 0
je 0x18002004f
mov dword [rsp + 0x78], 8
mov dword [rsp + 0x7c], 0x10c8
mov dword [rbp - 0x80], 0x218
lea rax, [rsp + 0x78]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x7c]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.180021b20
mov rcx, rax
call fcn.180022010
mov ebx, eax
mov ecx, eax
bts ecx, 0xb
cmp ecx, eax
je 0x18002004f
mov dword [rsp + 0x78], 8
mov dword [rsp + 0x7c], 0x10c8
mov dword [rbp - 0x80], 0x218
lea rax, [rsp + 0x78]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x7c]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.180021b20
lea edx, [rbx + 0x800]
mov rcx, rax
call fcn.180022100
call fcn.180003f90
call fcn.180003e10
cmp byte [0x18013edb1], 0
je 0x180020108
mov edx, 0x4538d6
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rcx, qword [rax]
mov dword [rcx], 0x7ffffffe
mov edx, 0x4538dc
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rcx, qword [rax]
mov dword [rcx], 0x7fffffff
mov edx, 0x4538db
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rcx, qword [rax]
mov dword [rcx], r15d
mov edx, 0x4538da
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rcx, qword [rax]
mov dword [rcx], r15d
mov edx, 0x4538d8
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rcx, qword [rax]
mov dword [rcx], 0x615762f1
mov edx, 0x4538d7
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rcx, qword [rax]
mov dword [rcx], 0xf4240
mov edx, 0x4538d5
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rcx, qword [rax]
mov dword [rcx], 2
call fcn.1800127f0
call fcn.1800129e0
call fcn.180012bd0
call fcn.180012dc0
cmp byte [0x1801414a0], 0
je 0x1800201d4
call qword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x1801414e4]
cmp eax, 0x7d0
jbe 0x1800201d4
mov edx, 0xb2d05dff
mov ecx, 0x3b9aca00
call fcn.180024c80
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x20], 0x7a120
lea rcx, [rsp + 0x60]
call fcn.180024bc0
mov ecx, dword [rsp + 0x60]
call fcn.180024ab0
test eax, eax
je 0x1800201d4
lea rcx, str.MPPLY_TOTAL_EVC
call fcn.1800258a0
mov ecx, eax
lea rdx, [rsp + 0x70]
call fcn.180024a40
call fcn.180026080
mov r8d, eax
lea r9, str.UI_FRONTEND_CUSTOM_SOUNDSET
lea rdx, str.PICK_UP_PARACHUTE
call fcn.180025eb0
mov ebx, dword [rsp + 0x70]
lea rcx, str.MPPLY_TOTAL_EVC
call fcn.1800258a0
mov r8d, 1
lea edx, [rbx + 0x7a120]
mov ecx, eax
call fcn.180024d60
call qword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x1801414e4], eax
call fcn.180004a50
call fcn.1800141f0
call fcn.180005200
call fcn.180005440
call fcn.180005680
call fcn.180005a30
call fcn.180005ec0
call fcn.180006030
call fcn.1800062f0
cmp byte [0x18013eda1], 0
je 0x18002025c
call fcn.180026080
lea rdx, [rsp + 0x78]
mov ecx, eax
call fcn.180025840
call fcn.180026080
mov ecx, eax
call fcn.180025c30
movss dword [rsp + 0x38], xmm9
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 1
movss dword [rsp + 0x20], xmm6
mov r9d, 0xd
movss xmm2, dword [rbp - 0x78]
movss xmm1, dword [rbp - 0x80]
movss xmm0, dword [rsp + 0x78]
call fcn.1800242f0
call fcn.180006bc0
cmp byte [0x18013ed9f], 0
je 0x18002029a
call fcn.180026080
mov ebx, eax
call fcn.180026080
mov ecx, eax
call fcn.180025400
test eax, eax
je 0x18002029a
lea rdx, [rbp - 0x68]
mov ecx, ebx
call fcn.180025840
test eax, eax
je 0x18002029a
cvttss2si ecx, dword [rbp - 0x68]
call fcn.1800242b0
call fcn.180006d60
call fcn.180007940
cmp byte [0x18013ed9d], 0
je 0x180020326
mov edx, 0x24f3a0
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov rbx, rax
call fcn.180025ff0
mov r9d, 0x166
mov r8d, eax
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.180024270
mov r8d, 0xcb
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.180024290
mov rcx, qword [rax]
mov dword [rcx], 1
call fcn.180024240
mov r9d, eax
mov edx, 0x252065
lea rcx, [rsp + 0x78]
call fcn.180025fc0
mov r8d, 0x45
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.180024290
mov rcx, qword [rax]
mov dword [rcx], r9d
call fcn.180006e10
call fcn.1800075a0
call fcn.180006f80
call fcn.180007a70
call fcn.1800080e0
call fcn.180008a70
call fcn.180008cd0
call fcn.180008ee0
call fcn.180008fd0
call fcn.180009020
call fcn.180009070
call fcn.180009240
call fcn.180009540
call fcn.1800096b0
call fcn.1800097a0
call fcn.180009920
call fcn.180009b70
movzx ecx, byte [0x18014149e]
call fcn.18000c1a0
call fcn.180014290
cmp byte [0x18013edbd], 0
je 0x1800203c9
call fcn.180025e50
test eax, eax
je 0x1800203c9
xor edx, edx
mov ecx, dword [0x180141740]
call fcn.180025df0
test eax, eax
jne 0x1800203c9
mov ecx, dword [0x180141740]
call fcn.180025da0
test eax, eax
jne 0x1800203c9
mov ecx, dword [0x180141740]
call fcn.180025f30
call fcn.180003410
cmp byte [0x18013edb0], 0
je 0x180020422
mov edx, 0xe4e1c0
mov ecx, 0x176d9d54
call fcn.180004c20
mov edx, 0x6acfc0
mov ecx, 0xed97afc1
call fcn.180004c20
mov edx, 0xe4e1c0
mov ecx, 0xa174f633
call fcn.180004c20
mov edx, 0xf4240
mov ecx, 0x314fb8b0
call fcn.180004c20
mov edx, 0x1e8480
mov ecx, 0x4b6a869c
call fcn.180004c20
call fcn.1800058c0
call fcn.18000cfd0
cmp byte [0x18013ed63], 0
je 0x1800204ac
mov ecx, dword [0x180140360]
call fcn.180023560
mov ecx, eax
call fcn.1800257f0
test eax, eax
je 0x1800204ac
mov ecx, dword [0x180140360]
call fcn.180023560
mov ecx, eax
lea rdx, [rsp + 0x78]
call fcn.180025840
lea rcx, str.CARGOPLANE
call fcn.1800258a0
mov ebx, eax
mov ecx, eax
call fcn.1800259d0
mov ecx, ebx
call fcn.180025a10
test eax, eax
je 0x1800204ac
mov dword [rsp + 0x30], r15d
movss dword [rsp + 0x20], xmm9
movss xmm3, dword [rbp - 0x78]
movss xmm2, dword [rbp - 0x80]
movss xmm1, dword [rsp + 0x78]
mov ecx, ebx
call fcn.180023480
mov ecx, ebx
call fcn.1800247f0
call fcn.18000a450
call fcn.180007990
call fcn.180007a20
cmp byte [0x18013ed94], 0
je 0x180020592
lea rcx, str.GADGET_PARACHUTE
call fcn.1800258a0
mov ebx, eax
call fcn.180026080
mov ecx, eax
mov edx, ebx
call fcn.180024950
call fcn.180026080
mov ecx, eax
call fcn.1800257f0
test eax, eax
je 0x180020592
call fcn.180026080
mov ecx, eax
lea rdx, [rsp + 0x78]
call fcn.180025840
test eax, eax
je 0x180020592
call fcn.180026080
mov ecx, eax
call fcn.180025da0
test eax, eax
jne 0x180020592
call fcn.180026080
mov ecx, eax
movss xmm6, dword [0x1800d75c8]
movaps xmm3, xmm6
movaps xmm2, xmm9
movaps xmm1, xmm9
call fcn.180020e00
call fcn.180026080
mov ecx, eax
movaps xmm1, xmm6
call fcn.180024110
call fcn.180026080
mov ecx, eax
movss xmm3, dword [rbp - 0x78]
movss xmm2, dword [rbp - 0x80]
movss xmm1, dword [rsp + 0x78]
call fcn.180024080
call fcn.180026080
mov ecx, eax
call fcn.180025da0
test eax, eax
je 0x180020592
call fcn.180026080
mov ecx, eax
movaps xmm3, xmm9
movaps xmm2, xmm6
movaps xmm1, xmm9
call fcn.180020e00
call fcn.18000a6b0
call fcn.18000a8d0
call fcn.18000a980
cmp byte [0x18013ed76], 0
je 0x180020615
call fcn.180023fc0
divss xmm10, xmm0
cvttss2si r9d, xmm10
lea r8, str.FPS:_w__d
mov edx, 0x3c
lea rcx, [rbp + 0x58]
call fcn.180023f60
call fcn.18000aeb0
mov ecx, 2
call fcn.180023f20
movss xmm0, dword [0x1800d7250]
movaps xmm1, xmm0
call fcn.180023ec0
mov edx, 0xff
xor ecx, ecx
mov r8d, edx
call fcn.180023e30
call fcn.180023e00
movss xmm1, dword [0x1800d7184]
movaps xmm2, xmm1
lea rcx, [rbp + 0x58]
call fcn.18000b060
call fcn.18000ab80
call fcn.18000ad20
cmp byte [0x18013ed72], 0
je 0x180020637
movabs rcx, 0x3bc861df703e5097
call fcn.180025f90
call fcn.18000b1f0
cmp byte [0x18013ed70], 0
je 0x180020654
movabs rcx, 0x719ff505f097fd20
call fcn.180025f90
call fcn.18000b2a0
call fcn.18000b8f0
call fcn.18000c590
call fcn.18000bb80
call fcn.18000bbe0
call fcn.1800111e0
call fcn.180010b80
call fcn.18000bc30
call fcn.18000bc80
call fcn.18000bd30
movzx ecx, byte [0x18013ed69]
call fcn.18000c1a0
call fcn.18000b150
call fcn.18000cd40
cmp byte [0x18013ed64], 0
je 0x1800206f1
mov ecx, dword [0x180140360]
call fcn.180025c30
mov ecx, eax
call fcn.180025400
test eax, eax
je 0x1800206f1
mov ecx, dword [0x180140360]
call fcn.180025c30
mov ecx, eax
call fcn.180025c80
mov ecx, dword [0x180140360]
call fcn.180025c30
mov ecx, eax
call fcn.1800256d0
mov ecx, dword [0x180140360]
call fcn.180025c30
mov ecx, eax
call fcn.1800235b0
call fcn.18000d880
call fcn.18000db70
cmp byte [0x18013ed5a], 0
je 0x1800207d0
call qword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x18013ed5c]
cmp eax, 0x15e
jbe 0x1800207d0
mov ecx, dword [0x180140360]
call fcn.180025c30
mov ebx, eax
lea rcx, str.prop_alien_egg_01
call fcn.1800258a0
mov ecx, eax
call fcn.1800259d0
lea rcx, str.prop_alien_egg_01
call fcn.1800258a0
mov ecx, eax
call fcn.180025a10
test eax, eax
jne 0x18002075f
xor ecx, ecx
call fcn.180028970
jmp 0x1800207c4
xor r8d, r8d
mov edx, ebx
lea rcx, [rbp - 0x68]
call fcn.180025bb0
movups xmm7, xmmword [rax]
movsd xmm6, qword [rax + 0x10]
lea rcx, str.prop_alien_egg_01
call fcn.1800258a0
movsd qword [rbp - 0x58], xmm6
addss xmm6, dword [0x1800d71b0]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x9c4
movaps xmm3, xmm6
movaps xmm2, xmm7
shufps xmm2, xmm7, 0xaa
movaps xmm1, xmm7
mov ecx, 0xde78f17e
call fcn.1800258e0
lea rcx, str.prop_alien_egg_01
call fcn.1800258a0
mov ecx, eax
call fcn.1800247f0
call qword [sym.imp.WINMM.dll_timeGetTime]
mov dword [0x18013ed5c], eax
call fcn.180011670
call fcn.18000dee0
call fcn.18000e650
call fcn.18000edc0
call fcn.18000f530
call fcn.18000fca0
call fcn.180010410
call fcn.180011320
call fcn.180011b40
call fcn.180011d20
call fcn.18000d4a0
call fcn.1800123e0
call fcn.1800124a0
call fcn.180012510
cmp byte [0x18013ed28], 0
je 0x180020a1e
call fcn.180026080
mov r15d, eax
xor r12d, r12d
mov ebx, r12d
movabs r13, 0x2513dfb0fb8400fe
movss xmm7, dword [0x1800d721c]
mov ecx, ebx
call fcn.180025c30
mov edi, eax
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm9
movaps xmm2, xmm9
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.180023ae0
movups xmm6, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movsd qword [rbp - 0x58], xmm0
xor r8d, r8d
mov edx, r15d
lea rcx, [rsp + 0x78]
call fcn.180025bb0
mov ecx, ebx
call fcn.180023a40
mov ecx, eax
call fcn.180023a90
mov ecx, edi
call fcn.180025400
test eax, eax
je 0x180020a13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
movss xmm2, dword [rbp - 0x58]
movaps xmm1, xmm6
shufps xmm1, xmm6, 0xaa
movaps xmm0, xmm6
call fcn.180023730
mov ecx, ebx
call fcn.180023a40
mov ecx, eax
call fcn.180023a90
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.1800246b0
nop
lea r8, [rbp - 0x48]
lea rdx, str.UI_COLOUR_RED
lea rcx, [rbp - 0x28]
call fcn.180021fa0
nop
lea r8, [rbp - 0x48]
lea rdx, str.UI_COLOUR_GREEN
lea rcx, [rbp - 8]
call fcn.180021fa0
nop
mov rcx, qword [rbp - 0x18]
inc rcx
call fcn.1800a9820
mov r14, rax
mov rcx, qword [rbp + 8]
inc rcx
call fcn.1800a9820
mov rsi, rax
lea rcx, [rbp - 0x28]
call fcn.180023720
mov rdx, r14
sub rdx, rax
nop word [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x180020940
lea rcx, [rbp - 8]
call fcn.180023720
mov rdx, rsi
sub rdx, rax
nop dword [rax]
movzx ecx, byte [rax]
mov byte [rax + rdx], cl
lea rax, [rax + 1]
test cl, cl
jne 0x180020960
mov ecx, 7
call fcn.180023f20
movaps xmm1, xmm7
movaps xmm0, xmm9
call fcn.180023ec0
call fcn.180023e00
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call fcn.180023d60
call fcn.180023c70
call fcn.180023c30
mov edx, edi
mov ecx, r15d
call fcn.1800236a0
test eax, eax
mov rcx, rsi
jne 0x1800209b9
mov rcx, r14
call fcn.180023bf0
movss xmm1, dword [rsp + 0x60]
movss xmm0, dword [rsp + 0x70]
call fcn.180023b90
mov rcx, r13
call fcn.180025f90
mov dword [rsp + 0x20], 0xff
mov ecx, 5
mov r9d, 0xff
mov r8d, 0x4e
call fcn.180023d60
nop
lea rcx, [rbp - 8]
call fcn.180003120
nop
lea rcx, [rbp - 0x28]
call fcn.180003120
nop
lea rcx, [rbp - 0x48]
call fcn.180003120
inc ebx
cmp ebx, 0x20
jl 0x180020843
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.1800a9300
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180024580
int3
call fcn.180024580
int3