Function at 0x140078d30
Capabilities:
Get keyboard layout
Read file via mapping

Disassembly:
push rbp
push r12
push r13
push r15
lea rbp, [rsp - 0x58]
sub rsp, 0x158
mov rax, qword [0x14011e258]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov dword [rsp + 0x68], r9d
mov r15, r8
mov r12, rdx
mov qword [rbp], rdx
mov r13, rcx
call fcn.140082810
mov qword [0x140123478], r13
call fcn.140084200
call fcn.140070de0
call fcn.1400822f0
call fcn.140075030
call fcn.140082d30
cmp dword [0x140123470], 4
jb 0x140078d9d
jne 0x140078db0
cmp dword [0x140123468], 2
je 0x140078db0
lea rcx, str.MSWHEEL_ROLLMSG
call qword [sym.imp.USER32.dll_RegisterWindowMessageA]
mov dword [0x14011e244], eax
mov qword [rsp + 0x188], rbx
mov qword [rsp + 0x140], r14
call fcn.140081670
call fcn.14007e3d0
call fcn.1400036d0
xor ecx, ecx
mov qword [0x1401207c8], rax
call qword [sym.imp.ole32.dll_CoInitialize]
cmp eax, 1
jbe 0x140078e49
mov rdx, qword [0x1400b0ce0]
lea rcx, str._s_Fatal_Error
call fcn.14006c6b0
mov r9d, 0x30
lea rdx, str.Failed_to_initialize_COM_subsystem
mov r8, rax
xor ecx, ecx
mov rbx, rax
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, rbx
call fcn.140011ff0
mov r14, qword [rsp + 0x140]
mov eax, 1
mov rbx, qword [rsp + 0x188]
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14008ce70
add rsp, 0x158
pop r15
pop r13
pop r12
pop rbp
ret
mov ecx, dword [0x1400b0cd8]
mov qword [rsp + 0x150], rsi
call fcn.140021010
mov ecx, dword [0x1400b0cd8]
call fcn.14001cf50
xor ecx, ecx
mov rbx, rax
call fcn.140021000
test rbx, rbx
je 0x140078e81
mov ecx, dword [rbx + 0x9c]
call fcn.140021000
mov rcx, qword [0x1401207c8]
xor r8d, r8d
mov edx, 0x80
call fcn.140003940
mov rdx, qword [0x1401207c8]
xor ecx, ecx
call fcn.14001cf80
movzx eax, byte [r15]
mov rbx, r15
test al, al
je 0x140078ec7
nop
movsx ecx, al
call fcn.140098220
test eax, eax
je 0x140078ec7
movzx eax, byte [rbx + 1]
inc rbx
test al, al
jne 0x140078eb0
movzx eax, byte [rbx]
xor esi, esi
mov qword [rsp + 0x148], rdi
lea r14d, [rsi + 1]
cmp al, 0x26
jne 0x140078f09
cmp byte [rbx + 1], 0x52
jne 0x140079730
movzx eax, byte [rbx + 2]
lea rdi, [rbx + 2]
test al, al
je 0x140078efe
cmp al, 0x40
je 0x140078efe
cmp al, 0x26
jne 0x140079730
call fcn.140087dc0
movzx eax, byte [rdi]
mov rbx, rdi
cmp al, 0x40
jne 0x140079728
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rbx + rdi], sil
jne 0x140078f20
movsxd r15, edi
cmp r15, r14
jle 0x140078f4a
movsx ecx, byte [rbx + r15 - 1]
call fcn.140098220
test eax, eax
je 0x140078f4a
dec edi
dec r15
cmp r15, r14
jg 0x140078f31
mov rdx, qword [0x1401207c8]
lea rcx, [rbx + 1]
movsxd rax, edi
mov byte [rax + rbx], sil
call fcn.14001cf80
mov rcx, qword [0x1401207c8]
call fcn.140014540
test al, al
jne 0x140078f85
mov rcx, qword [0x1401207c8]
call fcn.140075080
test al, al
je 0x140079a88
mov rcx, qword [0x1401207c8]
call fcn.140002f30
mov rcx, qword [0x1401207c8]
call fcn.14001ce00
test r12, r12
jne 0x140079001
lea rax, [0x140079a90]
mov dword [rbp - 0x80], esi
mov edx, 0xc8
mov qword [rbp - 0x78], rax
mov rcx, r13
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], r13
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f01
xor ecx, ecx
mov qword [rbp - 0x60], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov r8, qword [0x1400b0ce0]
xorps xmm0, xmm0
xor edx, edx
movdqa xmmword [rbp - 0x50], xmm0
xor ecx, ecx
mov qword [rbp - 0x58], rax
call fcn.140014a60
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x40], rax
call qword [sym.imp.USER32.dll_RegisterClassW]
xor edx, edx
lea rcx, [0x14011fc90]
mov r8d, 0xb18
call fcn.14008e4e0
call fcn.14007c430
mov rcx, qword [0x1401207c8]
mov edx, 0x7b
mov dword [0x14011fc68], 0xa
mov dword [0x14011fc6c], 0x14
mov dword [0x14011fc60], 0x19
mov dword [0x14011fc64], 0x1c
call fcn.1400034c0
imul eax, dword [0x14011fc68]
mov edx, 0x7c
mov ebx, dword [0x14011fc60]
mov rcx, qword [0x1401207c8]
add ebx, eax
call fcn.1400034c0
mov edi, eax
lea rcx, [rbp]
imul edi, dword [0x14011fc6c]
add edi, dword [0x14011fc64]
call fcn.14007db50
mov eax, dword [rbp + 0xc]
mov r12d, 0xef0000
mov r15d, dword [rbp + 8]
sub r15d, dword [rbp]
mov ecx, dword [0x1400b0cd8]
cmp ebx, r15d
cmovle r15d, ebx
sub eax, dword [rbp + 4]
cmp edi, eax
cmovg edi, eax
call fcn.14001cf50
xor bl, bl
test rax, rax
je 0x1400790cb
test byte [rax + 0xa0], r14b
movzx ebx, bl
cmovne ebx, r14d
mov r8, qword [0x1400b0ce0]
xor edx, edx
xor ecx, ecx
call fcn.140014a60
mov rcx, qword [0x1401207c8]
mov edx, 0x75
mov qword [rbp], rax
call fcn.140003460
test al, al
mov ecx, 0xcf0000
mov edx, 0x77
cmove r12d, ecx
mov rcx, qword [0x1401207c8]
call fcn.1400034c0
cmp eax, r14d
je 0x140079115
test bl, bl
je 0x14007911c
and r12d, 0xfffaffff
mov rcx, qword [0x1401207c8]
mov edx, 0x5e
call fcn.140003460
mov ecx, 8
test al, al
mov ebx, esi
cmovne ebx, ecx
lea edx, [rcx + 0x7f]
mov rcx, qword [0x1401207c8]
call fcn.140003460
test al, al
je 0x140079150
bts ebx, 9
mov qword [rsp + 0x58], rsi
mov r9d, r12d
mov qword [rsp + 0x50], r13
mov ecx, ebx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], edi
mov rdi, qword [rbp]
mov dword [rsp + 0x30], r15d
mov r8, rdi
mov rdx, rdi
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14011e228], rax
xorps xmm0, xmm0
xor eax, eax
mov qword [0x140120f80], rax
movups xmmword [0x140120f70], xmm0
call fcn.14007dbd0
mov rcx, rdi
call fcn.140011ff0
xor edx, edx
xor ecx, ecx
call fcn.14007dcb0
call fcn.14007e370
mov rcx, qword [0x1401207c8]
lea rax, [0x1400caf00]
lea r8, [0x140120e78]
mov qword [0x140120e78], rax
lea rdx, [0x14011fc90]
call fcn.140064aa0
mov rdx, qword [0x1401207c8]
mov rcx, rax
mov qword [0x1401207d0], rax
call fcn.14007f150
mov rdx, qword [0x1401207c8]
lea rcx, str.P9_a_
call fcn.14000fc90
mov rcx, qword [0x1401207d0]
mov rdx, rax
mov qword [0x140120ef8], rax
call fcn.140069060
mov rcx, qword [0x1401207c8]
mov edx, 0x68
call fcn.1400034c0
mov rcx, qword [0x1401207c8]
mov edx, 0x7b
mov edi, eax
call fcn.1400034c0
mov rcx, qword [0x1401207c8]
mov edx, 0x7c
mov ebx, eax
call fcn.1400034c0
mov rcx, qword [0x1401207d0]
mov edx, eax
mov r9d, edi
mov r8d, ebx
call fcn.140069970
mov rcx, qword [0x14011e228]
lea rdx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14011e228]
lea rdx, [rbp]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x1401207c8]
mov edx, 0x88
call fcn.1400034c0
mov r8d, dword [rbp]
sub r8d, dword [rbp + 8]
sub r8d, dword [rbp + 0x20]
add r8d, dword [rbp + 0x28]
lea ecx, [rax + rax]
mov dword [0x14011fc78], eax
add r8d, ecx
mov dword [0x14011fc74], eax
mov eax, dword [rbp + 4]
sub eax, dword [rbp + 0xc]
sub eax, dword [rbp + 0x24]
add eax, dword [rbp + 0x2c]
mov dword [0x14011fc60], r8d
mov edx, dword [0x14011fc6c]
add ecx, eax
mov rax, qword [0x1401207d0]
xor r9d, r9d
mov dword [0x14011fc64], ecx
mov dword [rsp + 0x30], 0xe
imul edx, dword [rax + 0x174]
add edx, ecx
mov ecx, dword [0x14011fc68]
imul ecx, dword [rax + 0x178]
mov dword [rsp + 0x28], edx
xor edx, edx
add ecx, r8d
xor r8d, r8d
mov dword [rsp + 0x20], ecx
mov rcx, qword [0x14011e228]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x14011fc68]
xor r8d, r8d
add eax, 0xf
cdq
and edx, 0xf
add eax, edx
mov rdx, r14
sar eax, 4
imul eax, dword [0x14011fc6c]
add eax, eax
movsxd rbx, eax
mov rcx, rbx
call fcn.140012100
mov r8, rbx
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.14008e4e0
mov edx, dword [0x14011fc6c]
mov r9d, r14d
mov ecx, dword [0x14011fc68]
mov r8d, r14d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.GDI32.dll_CreateBitmap]
mov rcx, rdi
mov qword [0x140120f88], rax
call fcn.140011ff0
mov r9d, dword [0x14011fc6c]
mov r8d, dword [0x14011fc68]
mov rdx, qword [0x140120f88]
mov rcx, qword [0x14011e228]
call qword [sym.imp.USER32.dll_CreateCaret]
mov rax, qword [0x1401207d0]
lea r8, [rbp]
xor r9d, r9d
mov dword [rbp], 0x1c
mov edx, r14d
mov qword [rbp + 4], 0x1f
mov dword [rbp + 0x14], esi
mov ecx, dword [rax + 0x174]
mov dword [rbp + 0x10], ecx
lea eax, [rcx - 1]
mov rcx, qword [0x14011e228]
mov dword [rbp + 0xc], eax
call qword [sym.imp.USER32.dll_SetScrollInfo]
mov dword [0x140120f94], esi
mov dword [0x140120f98], esi
call qword [sym.imp.USER32.dll_GetDoubleClickTime]
mov rcx, qword [0x14011e228]
xor edx, edx
mov dword [0x140120f54], eax
call qword [sym.imp.USER32.dll_GetSystemMenu]
mov qword [0x1401207b8], rax
call qword [sym.imp.USER32.dll_CreatePopupMenu]
lea r9, [0x1400cb51c]
xor edx, edx
mov rcx, rax
mov qword [0x1401207c0], rax
mov r8d, 0x190
call qword [sym.imp.USER32.dll_AppendMenuA]
mov rcx, qword [0x1401207c0]
lea r9, str.Paste
xor edx, edx
mov r8d, 0x1a0
call qword [sym.imp.USER32.dll_AppendMenuA]
call qword [sym.imp.USER32.dll_CreateMenu]
movzx edx, r14b
lea rcx, [0x140120f00]
mov qword [0x140120ef0], rax
call fcn.14001cfe0
call fcn.14007f6d0
mov r15d, esi
lea r12, [0x1401207b8]
nop dword [rax + rax]
mov rdi, qword [r12]
xor r9d, r9d
mov rcx, rdi
xor r8d, r8d
mov edx, 0x800
call qword [sym.imp.USER32.dll_AppendMenuA]
xor edx, edx
lea r9, str.Event_Log
mov rcx, rdi
lea r8d, [rdx + 0x10]
call qword [sym.imp.USER32.dll_AppendMenuA]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
xor edx, edx
lea r9, str.New_Session...
mov rcx, rdi
lea r8d, [rdx + 0x20]
call qword [sym.imp.USER32.dll_AppendMenuA]
xor edx, edx
lea r9, str.Duplicate_Session
mov rcx, rdi
lea r8d, [rdx + 0x30]
call qword [sym.imp.USER32.dll_AppendMenuA]
mov r8, qword [0x140120ef0]
lea r9, str.Saved_Sessions
mov edx, 0x10
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
xor edx, edx
lea r9, str.Change_Settings...
mov rcx, rdi
lea r8d, [rdx + 0x50]
call qword [sym.imp.USER32.dll_AppendMenuA]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
lea r9, str.Copy_All_to_Clipboard
xor edx, edx
mov r8d, 0x170
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
xor edx, edx
lea r9, str.Clear_Scrollback
mov rcx, rdi
lea r8d, [rdx + 0x60]
call qword [sym.imp.USER32.dll_AppendMenuA]
xor edx, edx
lea r9, str.Reset_Terminal
mov rcx, rdi
lea r8d, [rdx + 0x70]
call qword [sym.imp.USER32.dll_AppendMenuA]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
mov rcx, qword [0x1401207c8]
mov edx, 0x77
call fcn.1400034c0
cmp eax, r14d
lea r9, str.Full_Screen
mov edx, esi
mov r8d, 0x180
sete dl
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
call fcn.140081650
test al, al
je 0x140079610
lea r9, [0x1400cb5e0]
xor edx, edx
mov r8d, 0x140
mov rcx, rdi
call qword [sym.imp.USER32.dll_AppendMenuA]
mov rdx, qword [0x1400b0ce0]
lea rcx, str.About__s
call fcn.14006c6b0
mov r9, rax
xor edx, edx
mov r8d, 0x150
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_AppendMenuA]
mov rcx, rbx
call fcn.140011ff0
inc r15d
add r12, 8
cmp r15d, 2
jb 0x1400794a0
call fcn.140087e00
test al, al
je 0x14007966f
lea rdx, str.Running_with_restricted_process_ACL
lea rcx, str.P9_a_
call fcn.14007e5c0
mov rcx, qword [0x14011e228]
call fcn.140087e60
call fcn.14007f250
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rcx, rax
call fcn.14007f100
mov edx, dword [rsp + 0x68]
mov rcx, qword [0x14011e228]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14011e228]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x14011e228]
mov rcx, qword [0x1401207d0]
sete dl
call fcn.140069890
mov rcx, qword [0x14011e228]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140001830
test al, al
jne 0x140079905
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
lea rcx, [rbp - 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140079905
mov edi, 0xffffffff
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x14011e228]
mov rcx, qword [0x1401207d0]
sete dl
call fcn.140069890
jmp 0x140079907
cmp al, 0x26
jne 0x1400797da
lea rcx, [rbx + 1]
lea r9, [rsp + 0x64]
lea r8, [rsp + 0x70]
lea rdx, str._p:_u
call fcn.14001c160
cmp eax, 2
jne 0x1400797c1
mov eax, dword [rsp + 0x64]
xor r9d, r9d
mov rcx, qword [rsp + 0x70]
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
je 0x1400797c1
mov ecx, dword [rsp + 0x64]
lea rdx, [rbp - 0x80]
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x80]
mov qword [rbp - 0x70], rcx
mov rcx, qword [0x1401207c8]
mov qword [rbp - 0x78], rsi
mov dword [rbp - 0x68], esi
mov qword [rbp - 0x60], rax
call fcn.1400032c0
test al, al
je 0x1400799d0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140078f85
mov rcx, qword [0x1401207c8]
call fcn.140075080
test al, al
je 0x1400799dd
jmp 0x140078f85
test al, al
je 0x1400798cc
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.14008b1a0
mov eax, dword [rsp + 0x60]
mov edi, esi
test eax, eax
jle 0x1400798cc
mov rbx, rsi
nop word [rax + rax]
mov rcx, qword [rbp + 0x20]
lea r12d, [rdi + 1]
mov r15, qword [rbx + rcx]
cmp r12d, eax
jge 0x140079828
mov rdx, qword [rbx + rcx + 8]
jmp 0x14007982b
mov rdx, rsi
mov r9, qword [0x1401207c8]
mov r8d, r14d
mov rcx, r15
call fcn.140001940
cmp eax, 0xfffffffe
je 0x140079a78
cmp eax, 2
jne 0x140079854
mov edi, r12d
add rbx, 8
jmp 0x140079859
cmp eax, r14d
jne 0x140079879
mov eax, dword [rsp + 0x60]
inc edi
add rbx, 8
cmp edi, eax
jl 0x140079810
mov rcx, qword [0x1401207c8]
call fcn.140002f30
mov r12, qword [rbp]
jmp 0x1400798d8
lea rdx, str._cleanup
mov rcx, r15
call fcn.140092af0
test eax, eax
je 0x1400799e5
lea rcx, str._pgpfp
nop word [rax + rax]
movzx eax, byte [r15 + rsi]
inc rsi
cmp al, byte [rcx + rsi - 1]
jne 0x1400798ba
cmp rsi, 7
je 0x140079a4e
jmp 0x1400798a0
cmp byte [r15], 0x2d
mov rdx, r15
je 0x140079a6b
jmp 0x140079a5e
mov rcx, qword [0x1401207c8]
call fcn.140002f30
mov rcx, qword [0x1401207c8]
call fcn.140001910
test al, al
jne 0x140078f91
mov rcx, qword [0x1401207c8]
call fcn.140075080
test al, al
je 0x140079a88
jmp 0x140078f91
mov edi, esi
lea rcx, [rsp + 0x60]
call fcn.140080c30
mov ecx, dword [rsp + 0x60]
mov r9d, edi
xor r8d, r8d
mov dword [rsp + 0x20], 0x1cff
mov rdx, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
cmp eax, dword [rsp + 0x60]
jae 0x140079940
mov ecx, eax
mov rcx, qword [rbx + rcx*8]
call fcn.140080d10
mov rcx, rbx
call fcn.140011ff0
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, [rbp - 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400799bd
cmp dword [rbp - 0x28], 0x12
je 0x1400799c7
call fcn.140075360
mov rcx, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14007998f
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsDialogMessageA]
test eax, eax
jne 0x140079999
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp - 0x28], 0x8005
jne 0x1400799bd
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, [rbp - 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140079963
call fcn.1400017c0
jmp 0x1400796d7
mov ecx, dword [rbp - 0x20]
call fcn.14007bf80
int3
lea rcx, str.Serialised_configuration_data_was_invalid
call fcn.14007e710
int3
xor ecx, ecx
call fcn.14007bf80
int3
mov rdx, qword [0x1400b0ce0]
lea rcx, str.This_procedure_will_remove_ALL_Registry_entries_nassociated_with__s__and_will_also_remove_nthe_random_seed_file.__This_only_affects_the_ncurrently_logged_in_user.__n_nTHIS_PROCESS_WILL_DESTROY_YOUR_SAVED_SESSIONS._nAre_you_really_sure_you_want_to_continue_
call fcn.14006c6b0
mov rdx, qword [0x1400b0ce0]
lea rcx, str._s_Warning
mov rbx, rax
call fcn.14006c6b0
mov r9d, 0x134
mov dword [rsp + 0x20], 4
mov r8, rax
mov rdx, rbx
xor ecx, ecx
mov rdi, rax
call fcn.14008af70
cmp eax, 6
jne 0x140079a36
call fcn.140088b70
mov rcx, rbx
call fcn.140011ff0
mov rcx, rdi
call fcn.140011ff0
xor ecx, ecx
call fcn.14009d378
int3
xor ecx, ecx
call fcn.14008b080
mov ecx, r14d
call fcn.14009d378
int3
lea rcx, str.unexpected_argument___s_
call fcn.14007c3b0
int3
lea rcx, str.unknown_option___s_
call fcn.14007c3b0
int3
mov rdx, r15
lea rcx, str.option___s__requires_an_argument
call fcn.14007c3b0
int3
xor ecx, ecx
call fcn.14007bf80
int3