Function at 0x140026adf
Capabilities:
Delete registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3e8
movaps xmmword [rsp + 0x3d0], xmm6
mov rsi, rcx
mov rax, qword [0x1401c6028]
xor rax, rsp
mov qword [rsp + 0x3c8], rax
call sub.gnelf.dll_IsBrowserProcess
test al, al
je 0x140026bbe
lea rdi, [rsp + 0x1b2]
mov r8d, 0x208
mov rcx, rdi
mov dl, 0xaa
call fcn.1401543c0
mov word [rdi - 2], 0
lea rdi, [rsp + 0x1b0]
xor ecx, ecx
mov rdx, rdi
mov r8d, 0x105
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [rax - 1]
cmp ecx, 0x103
ja 0x140026bbe
mov eax, eax
lea rdx, [rsp + 0x170]
mov qword [rdx], rdi
mov qword [rdx + 8], rax
lea rdi, [rsp + 0x190]
mov rcx, rdi
call fcn.140077ff0
lea rbx, [rsp + 0x40]
mov rcx, rdi
mov rdx, rbx
call fcn.140078a50
mov rcx, rbx
call fcn.14005e2a0
cmp byte [rbx + 0x17], 0
jns 0x140026ba7
mov rcx, qword [rsp + 0x40]
call fcn.140150da4
cmp byte [rsp + 0x1a7], 0
jns 0x140026bbe
mov rcx, qword [rsp + 0x190]
call fcn.140150da4
call qword [sym.imp.gnelf.dll_GetInstallDetailsPayload]
mov rdi, rax
mov ecx, 0x10
call fcn.140150d68
lea rcx, method.std::__Cr::locale::facet.virtual_0
mov qword [rax], rcx
mov qword [rax + 8], rdi
mov qword [0x1401d8110], rax
call sub.gnelf.dll_SignalInitializeCrashReporting
call sub.gnelf.dll_IsBrowserProcess
test al, al
je 0x140026bfb
mov byte [0x1401d66f0], 1
lea rcx, [0x1400568e0]
call fcn.140164df8
mov dword [0x1401d8128], 1
mov byte [0x1401d8124], 1
xor ecx, ecx
xor edx, edx
call fcn.14007bf60
mov rdi, qword [0x1401d80f0]
movabs r13, 0xaaaaaaaaaaaaaaaa
lea rbx, [rsp + 0xb0]
mov qword [rbx + 0x10], r13
movaps xmm6, xmmword [0x1401990c0]
movaps xmmword [rbx], xmm6
lea rax, str.type
lea r8, [rsp + 0xa0]
mov qword [r8], rax
mov qword [r8 + 8], 4
mov rcx, rdi
mov rdx, rbx
call fcn.14007d0d0
movzx eax, byte [rbx + 0x17]
test al, al
jns 0x140026c85
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xb0]
test rax, rax
js 0x140027992
je 0x140026c99
test rbx, rbx
je 0x140027995
cmp rax, 0x10
jne 0x140026cd5
movdqu xmm0, xmmword [rbx]
pcmpeqb xmm0, xmmword [str.crashpad_handler]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1400271aa
movdqu xmm0, xmmword [rbx]
pcmpeqb xmm0, xmmword [str.fallback_handler]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1400273da
lea rcx, [rsp + 0xd0]
mov qword [rcx], r13
mov rax, qword [0x1401c8548]
call qword [0x1401b8a50]
call sub.gnelf.dll_SignalChromeElf
mov qword [rsp + 0x68], r13
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
mov rbx, qword [0x1401d8108]
movabs rax, 0xfffffffc00000000
and rax, rbx
cmp rax, qword [0x1401c8588]
jne 0x140026d35
mov rcx, rbx
call fcn.1400844a0
lea rax, [rsp + 0x40]
mov qword [rax + 0x28], rbx
mov qword [0x1401d8108], rax
cmp qword [rdi + 0x40], 1
jbe 0x140027086
lea rax, str.no_appcompat_clear
lea r8, [rsp + 0x1b0]
mov qword [r8], rax
mov qword [r8 + 8], 0x12
lea rcx, [rdi + 0x30]
add rdi, 0x38
lea rbx, [rsp + 0x190]
mov rdx, rbx
call fcn.14007fab0
cmp qword [rbx], rdi
jne 0x1400277f4
pxor xmm0, xmm0
lea rdx, [rsp + 0x1b0]
movdqa xmmword [rdx], xmm0
mov qword [rdx + 0x10], 0
mov ecx, 1
call fcn.14005f550
test al, al
je 0x1400277dd
lea rdi, [rsp + 0x1b0]
mov rcx, rdi
call fcn.14007aa40
test al, al
je 0x1400277dd
lea rcx, [rsp + 0x190]
mov qword [rcx + 8], r13
xor eax, eax
mov qword [rcx], rax
mov dword [rcx + 8], 0
mov qword [rcx + 0x10], rax
lea r8, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov rdx, 0xffffffff80000001
mov r9d, 0x2001f
call fcn.140053fd0
test eax, eax
jne 0x140027789
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], 0
cmp byte [rsp + 0x1c7], 0
jns 0x140026e35
mov rdi, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x190]
lea rbx, [rsp + 0x170]
mov rdx, rdi
mov r8, rbx
call fcn.140054050
test eax, eax
jne 0x140027772
mov qword [rsp + 0x160], r13
movaps xmmword [rsp + 0x150], xmm6
lea rcx, [0x14019e3ca]
movzx eax, byte [rsp + 0x187]
test al, al
cmovs rax, qword [rsp + 0x178]
mov qword [rsp + 0xf8], rcx
cmovs rbx, qword [rsp + 0x170]
mov qword [rsp + 0x100], 1
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xe8], rax
test rax, rax
js 0x1400279bc
je 0x140026ec3
test rbx, rbx
je 0x1400279bf
mov dword [rsp + 0x20], 1
lea rbx, [rsp + 0x150]
lea rdx, [rsp + 0xe0]
lea r8, [rsp + 0xf8]
mov rcx, rbx
mov r9d, 1
call fcn.140055e90
xor ebp, ebp
lea rax, [rsp + 0x130]
mov qword [rsp + 0x38], rax
mov r12, qword [rsp + 0x150]
mov rdi, qword [rsp + 0x158]
cmp r12, rdi
je 0x140027055
lea rax, str.WIN95
mov r15, qword [rbp + rax]
test r15, r15
je 0x1400279a4
mov rcx, r15
call fcn.140171c94
movzx edx, byte [r12 + 0x17]
mov rcx, r12
test dl, dl
jns 0x140026f4c
mov rdx, qword [r12 + 8]
mov rcx, qword [r12]
test rdx, rdx
js 0x1400279a1
je 0x140026f60
test rcx, rcx
je 0x140027998
cmp rdx, rax
jne 0x140026f82
test rax, rax
je 0x140026f90
xor edx, edx
movzx r8d, word [rcx + rdx*2]
cmp r8w, word [r15 + rdx*2]
jne 0x140026f82
inc rdx
cmp rax, rdx
jne 0x140026f6c
jmp 0x140026f90
add r12, 0x18
cmp r12, rdi
jne 0x140026f36
jmp 0x140027055
cmp r12, rdi
je 0x140027055
mov rax, r12
add rax, 0x18
cmp rax, rdi
je 0x140027081
mov r14, r12
mov rbx, r12
mov r12, rax
mov rcx, r15
call fcn.140171c94
movzx edx, byte [rbx + 0x2f]
mov rcx, r12
test dl, dl
jns 0x140026fcd
mov rdx, qword [rbx + 0x20]
mov rcx, qword [rbx + 0x18]
test rdx, rdx
js 0x14002798c
je 0x140026fe1
test rcx, rcx
je 0x14002798f
cmp rdx, rax
jne 0x140027003
test rax, rax
je 0x140027035
xor edx, edx
movzx r8d, word [rcx + rdx*2]
cmp r8w, word [r15 + rdx*2]
jne 0x140027003
inc rdx
cmp rax, rdx
jne 0x140026fed
jmp 0x140027035
cmp byte [r14 + 0x17], 0
jns 0x140027012
mov rcx, qword [r14]
call fcn.140150da4
mov rax, qword [r12 + 0x10]
mov qword [r14 + 0x10], rax
movdqu xmm0, xmmword [r12]
movdqu xmmword [r14], xmm0
mov byte [rbx + 0x2f], 0
mov word [r12], 0
add r14, 0x18
lea rax, [r12 + 0x18]
cmp rax, rdi
jne 0x140026fac
mov rdi, qword [rsp + 0x158]
lea rbx, [rsp + 0x150]
jmp 0x140027058
mov r14, rdi
mov rcx, rbx
lea rdx, [rsp + 0x130]
mov r8, r14
mov r9, rdi
call fcn.140027a94
add rbp, 8
cmp rbp, 0x68
jne 0x140026f00
jmp 0x140027666
mov r14, r12
jmp 0x140027058
mov rcx, qword [rdi + 0x30]
lea rax, [rdi + 0x38]
cmp rcx, rax
je 0x140027134
movzx edx, byte [rcx + 0x37]
test dl, dl
jns 0x1400270a9
mov rdx, qword [rcx + 0x28]
mov r8, qword [rcx + 0x20]
jmp 0x1400270ad
lea r8, [rcx + 0x20]
test rdx, rdx
js 0x140027986
je 0x1400270c1
test r8, r8
je 0x140027989
cmp rdx, 0x11
jne 0x140026d50
movdqu xmm0, xmmword [r8]
movzx edx, byte [r8 + 0x10]
movzx r8d, byte [0x1401ac000]
movd xmm1, edx
movd xmm2, r8d
pcmpeqb xmm0, xmmword [str.profile_directory]
pcmpeqb xmm2, xmm1
pand xmm0, xmm2
pmovmskb edx, xmm0
cmp edx, 0xffff
jne 0x140026d50
mov r8, qword [rcx + 8]
test r8, r8
je 0x14002711c
mov rdx, r8
mov r8, qword [r8]
test r8, r8
jne 0x14002710f
jmp 0x140027128
mov rdx, qword [rcx + 0x10]
cmp qword [rdx], rcx
mov rcx, rdx
jne 0x14002711c
mov rcx, rdx
cmp rdx, rax
jne 0x140027097
pxor xmm0, xmm0
lea rcx, [rsp + 0x1b0]
movdqa xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
call fcn.140081294
test al, al
je 0x1400273ba
lea rbx, [rsp + 0x1b0]
mov rcx, rbx
call fcn.140028a80
mov rcx, rbx
call fcn.140080ba4
test rax, rax
je 0x1400273ba
mov rcx, rax
call fcn.140080c61
mov ebx, eax
cmp byte [rsp + 0x1c7], 0
jns 0x14002719b
mov rcx, qword [rsp + 0x1b0]
call fcn.140150da4
test ebx, ebx
jne 0x140026d50
xor esi, esi
jmp 0x140027930
mov rcx, rdi
call fcn.1400832e0
lea rax, str.no_periodic_tasks
lea r8, [rsp + 0x1b0]
mov qword [r8], rax
mov qword [r8 + 8], 0x11
lea rcx, [rdi + 0x30]
lea rbx, [rdi + 0x38]
lea rsi, [rsp + 0x40]
mov rdx, rsi
call fcn.14007fab0
cmp qword [rsi], rbx
jne 0x140027324
lea rsi, [rsp + 0x1b0]
mov qword [rsi + 0x40], r13
pxor xmm0, xmm0
movdqa xmmword [rsi], xmm0
movdqa xmmword [rsi + 0x10], xmm0
movdqa xmmword [rsi + 0x20], xmm0
mov qword [rsi + 0x30], 0xffffffffffffffff
mov qword [rsi + 0x38], 0
mov byte [rsi + 0x40], 0
lea rax, str.initial_client_data
lea r8, [rsp + 0x90]
mov qword [r8], rax
mov qword [r8 + 8], 0x13
lea r14, [rsp + 0x40]
mov rcx, rdi
mov rdx, r14
call fcn.14007d0d0
mov rcx, rsi
mov rdx, r14
call fcn.140083c24
mov ebx, eax
cmp byte [r14 + 0x17], 0
jns 0x140027264
mov rcx, qword [rsp + 0x40]
call fcn.140150da4
test bl, bl
je 0x140027324
lea rsi, [rsp + 0x190]
mov qword [rsi], 0xffffffffffffffff
mov r15, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call r15
mov rbx, rax
mov r14, qword [rsp + 0x1e8]
call r15
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x400
mov rcx, rax
mov rdx, r14
mov r8, rbx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x140027324
lea rsi, [rsp + 0x40]
movaps xmmword [rsi], xmm6
mov rdx, qword [rsp + 0x190]
mov rcx, rsi
call fcn.1400564a0
mov ecx, 0xa0
call fcn.140150d68
mov rbx, rax
mov rcx, rax
call fcn.140028608
lea r14, [rsp + 0x80]
mov rcx, r14
mov rdx, rsi
call fcn.140056520
mov rcx, rbx
mov rdx, r14
call fcn.1400286c4
test al, al
je 0x140027318
mov rcx, rbx
call fcn.14002876c
lea rcx, [rsp + 0x40]
call fcn.140028a50
jmp 0x140027326
xor ebx, ebx
lea rsi, [rsp + 0x1b0]
mov qword [rsi + 0x10], r13
movaps xmmword [rsi], xmm6
lea r14, str.user_data_dir
lea r8, [rsp + 0x70]
mov qword [r8], r14
mov qword [r8 + 8], 0xd
mov rcx, rdi
mov rdx, rsi
call fcn.14007d240
mov rcx, qword [0x1401d80f0]
lea r8, str.type
mov rdx, rsi
mov r9, r14
call fcn.1400823f8
mov esi, eax
test eax, eax
je 0x140027601
test rbx, rbx
je 0x140027647
mov rcx, qword [rbx + 0x98]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x14002739a
call qword [sym.imp.KERNEL32.dll_SetEvent]
cmp byte [rsp + 0x1c7], 0
jns 0x14002761d
mov rcx, qword [rsp + 0x1b0]
call fcn.140150da4
jmp 0x14002761d
cmp byte [rsp + 0x1c7], 0
jns 0x140026d50
mov rcx, qword [rsp + 0x1b0]
call fcn.140150da4
jmp 0x140026d50
lea rsi, [rsp + 0x1b0]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.1401543c0
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400279a7
pxor xmm0, xmm0
lea rsi, [rsp + 0x40]
movdqa xmmword [rsi], xmm0
xor eax, eax
mov qword [rsi + 0x10], rax
lea rbx, [rsp + 0x190]
mov qword [rbx + 0x10], rax
movdqa xmmword [rbx], xmm0
lea r12, [rsp + 0x170]
mov qword [r12 + 0x10], rax
movdqa xmmword [r12], xmm0
lea r14, [rsp + 0x150]
mov qword [r14 + 0x10], rax
movdqa xmmword [r14], xmm0
lea r15, [rsp + 0x130]
lea rdx, [rsp + 0x1b0]
mov rcx, r15
call fcn.1400279c4
mov qword [rsp + 0x20], r12
mov rcx, r15
mov rdx, rsi
mov r8, rbx
mov r9, r14
call fcn.140081f42
cmp byte [r15 + 0x17], 0
jns 0x140027494
mov rcx, qword [rsp + 0x130]
call fcn.140150da4
movzx eax, byte [rsp + 0x187]
test al, al
cmovs rax, qword [rsp + 0x178]
cmovs r12, qword [rsp + 0x170]
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], rax
test rax, rax
js 0x1400279aa
je 0x1400274d4
test r12, r12
je 0x1400279ad
lea rcx, [rsp + 0x130]
lea rdx, [rsp + 0x120]
call fcn.140065640
movzx eax, byte [rsp + 0x1a7]
test al, al
cmovs rax, qword [rsp + 0x198]
cmovs rbx, qword [rsp + 0x190]
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rax
test rax, rax
js 0x1400279b0
je 0x140027529
test rbx, rbx
je 0x1400279b3
lea rcx, [rsp + 0xf8]
lea rdx, [rsp + 0x110]
call fcn.140065640
movzx eax, byte [rsp + 0x57]
test al, al
cmovs rax, qword [rsp + 0x48]
cmovs rsi, qword [rsp + 0x40]
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0xd8], rax
test rax, rax
js 0x1400279b6
je 0x140027575
test rsi, rsi
je 0x1400279b9
lea rsi, [rsp + 0xe0]
lea rdx, [rsp + 0xd0]
mov rcx, rsi
call fcn.140065640
lea r8, [rsp + 0xf8]
lea r9, [rsp + 0x130]
mov rcx, rdi
mov rdx, rsi
call fcn.140083616
mov esi, eax
cmp byte [rsp + 0x167], 0
jns 0x1400275c1
mov rcx, qword [rsp + 0x150]
call fcn.140150da4
cmp byte [rsp + 0x187], 0
jns 0x1400275d8
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
cmp byte [rsp + 0x1a7], 0
jns 0x1400275ef
mov rcx, qword [rsp + 0x190]
call fcn.140150da4
cmp byte [rsp + 0x57], 0
jns 0x14002793a
mov rcx, qword [rsp + 0x40]
jmp 0x14002763d
cmp byte [rsp + 0x1c7], 0
jns 0x140027618
mov rcx, qword [rsp + 0x1b0]
call fcn.140150da4
test rbx, rbx
je 0x14002765f
lea rcx, [rbx + 0x98]
call fcn.140028a50
lea rcx, [rbx + 0x10]
call fcn.140062d50
mov rcx, rbx
call fcn.140028a50
mov rcx, rbx
call fcn.140150da4
jmp 0x14002793a
cmp byte [rsp + 0x1c7], 0
jns 0x14002793a
mov rcx, qword [rsp + 0x1b0]
jmp 0x14002763d
xor esi, esi
jmp 0x14002793a
mov rax, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x158]
cmp rax, rcx
je 0x140027705
mov qword [rsp + 0x140], r13
movaps xmmword [rsp + 0x130], xmm6
lea r8, [rsp + 0x120]
lea rdx, [0x14019e3ca]
mov qword [r8], rdx
mov qword [r8 + 8], 1
sub rcx, rax
sar rcx, 3
movabs r9, 0xaaaaaaaaaaaaaaab
imul r9, rcx
lea rdx, [rsp + 0x110]
mov qword [rdx], rax
mov qword [rdx + 8], r9
lea rcx, [rsp + 0x130]
call fcn.140055a50
cmp byte [rsp + 0x147], 0
jns 0x1400276f1
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x38], rax
cmp byte [rsp + 0x1c7], 0
jns 0x140027719
mov rdx, qword [rsp + 0x1b0]
jmp 0x140027721
cmp byte [rsp + 0x1c7], 0
jns 0x14002774c
mov rdx, qword [rsp + 0x1b0]
jmp 0x140027754
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x190]
mov r8, qword [rsp + 0x38]
call fcn.140054160
cmp byte [rsp + 0x147], 0
jns 0x140027762
mov rcx, qword [rsp + 0x130]
call fcn.140150da4
jmp 0x140027762
lea rdx, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x190]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea rcx, [rsp + 0x130]
mov qword [rcx], rbx
call fcn.140027b96
cmp byte [rsp + 0x187], 0
jns 0x140027789
mov rcx, qword [rsp + 0x170]
call fcn.140150da4
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x1400277b3
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x190], 0
mov dword [rsp + 0x198], 0
mov rcx, qword [rsp + 0x1a0]
mov qword [rsp + 0x1a0], 0
test rcx, rcx
je 0x1400277dd
mov rax, qword [rcx]
mov rax, qword [rax]
mov edx, 1
call qword [0x1401b8a50]
cmp byte [rsp + 0x1c7], 0
jns 0x1400277f4
mov rcx, qword [rsp + 0x1b0]
call fcn.140150da4
mov rcx, qword [0x1401d8080]
test rcx, rcx
je 0x140027821
lea rax, str.....chrome_appchrome_exe_main_win.cc
lea rdx, [rsp + 0x1b0]
mov qword [rdx], rax
mov qword [rdx + 8], 0x27
call fcn.1400ad0a0
jmp 0x140027831
xor ecx, ecx
sub ecx, dword [0x1401d8070]
mov eax, 0xffffffff
cmovns eax, ecx
test eax, eax
jle 0x14002787a
lea rdx, str.....chrome_appchrome_exe_main_win.cc
lea rdi, [rsp + 0x1b0]
mov rcx, rdi
mov r8d, 0x18f
mov r9d, 0xffffffff
call fcn.140072910
lea rcx, [rsp + 0x1c0]
lea rdx, str.About_to_load_main_DLL.
mov r8d, 0x17
call fcn.140027c01
mov rcx, rdi
call fcn.140072e50
mov ecx, 0x28
call fcn.140150d68
mov rdi, rax
lea rax, fcn.140028510
mov qword [rdi], rax
pxor xmm0, xmm0
movdqu xmmword [rdi + 8], xmm0
movdqu xmmword [rdi + 0x18], xmm0
mov r8, qword [rsp + 0xd0]
mov rcx, rdi
mov rdx, rsi
call fcn.140027ffc
mov esi, eax
mov rcx, rdi
call fcn.1400284c2
test rdi, rdi
je 0x1400278ce
mov rcx, rdi
mov edx, 1
call fcn.140028510
lea rax, [rsp + 0xb0]
movzx ecx, byte [rax + 0x17]
test cl, cl
cmovs rcx, qword [rax + 8]
cmovs rax, qword [rax]
test rcx, rcx
js 0x14002799b
je 0x1400278f9
test rax, rax
je 0x14002799e
cmp rcx, 5
je 0x140027918
cmp rcx, 7
jne 0x140027930
mov ecx, dword [rax]
xor ecx, dword [str.utility]
mov eax, dword [rax + 3]
xor eax, dword [0x14019e6a4]
jmp 0x14002792c
mov ecx, dword [rax]
xor ecx, dword [str.ppapi]
mov al, byte [rax + 4]
xor al, byte [0x14019e69a]
movzx eax, al
or eax, ecx
je 0x14002797f
lea rcx, [rsp + 0x40]
call fcn.14007fff0
cmp byte [rsp + 0xc7], 0
jns 0x140027951
mov rcx, qword [rsp + 0xb0]
call fcn.140150da4
mov rcx, qword [rsp + 0x3c8]
xor rcx, rsp
call fcn.140152280
mov eax, esi
movaps xmm6, xmmword [rsp + 0x3d0]
add rsp, 0x3e8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, esi
call fcn.1400566a0
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3