Function at 0x543062
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2480
call fcn.00722ce0
mov eax, dword [0xee37e4]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
xor esi, esi
mov dword [ebp - 0x2454], ecx
push edi
mov dword [ebp - 0x2478], edx
mov dword [ebp - 0x2464], eax
mov dword [ebp - 0x2458], esi
mov dword [ebp - 0x244c], esi
mov dword [ebp - 0x247c], esi
call fcn.004f703f
push esi
push eax
call fcn.00724770
mov edi, dword [ebp - 0x2454]
pop ecx
pop ecx
test eax, eax
jne 0x543c3d
mov eax, dword [edi + 0x20]
cmp dword [eax + 0x40], esi
jne 0x543c3d
mov ecx, edi
call fcn.00542f06
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0x2e
mov dword [ebp - 0x244c], eax
call fcn.004fce89
pop ecx
mov edx, eax
mov ecx, edi
call fcn.004fb645
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0xcc
mov dword [ebp - 0x2468], eax
call fcn.004fce89
pop ecx
mov ebx, eax
mov ecx, edi
mov dword [ebp - 0x2450], ebx
push esi
push dword [ebp - 0x2468]
test ebx, ebx
je 0x543139
mov edx, dword [ebp - 0x2478]
push esi
push ebx
push dword [ebp - 0x244c]
call fcn.00544625
add esp, 0x14
jmp 0x543146
mov edx, dword [ebp - 0x244c]
call fcn.005427a8
pop ecx
pop ecx
test ebx, ebx
je 0x543186
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0xa3
call fcn.004fce89
pop ecx
cmp eax, 0x1e2
jne 0x543186
push 0xc7
mov edx, ebx
mov ecx, edi
call fcn.004fce89
pop ecx
mov edx, eax
mov ecx, edi
call fcn.004fb572
sub eax, 4
neg eax
sbb eax, eax
inc eax
jmp 0x543188
mov eax, esi
test eax, eax
je 0x54330e
mov edi, dword [ebp - 0x2468]
mov eax, 0xea29b8
mov dword [ebp - 0x2038], eax
mov ebx, esi
mov dword [ebp - 0x2034], str.SimSun_Regular
mov dword [ebp - 0x2030], 0xea2a10
mov dword [ebp - 0x202c], str.SimHei_Regular
mov dword [ebp - 0x2028], 0xea29f4
mov dword [ebp - 0x2024], str.SimKai_Regular
mov dword [ebp - 0x2020], 0xea2a40
mov dword [ebp - 0x201c], str.SimFang_Regular
mov dword [ebp - 0x2018], 0xea2a28
mov dword [ebp - 0x2014], str.SimLi_Regular
mov dword [ebp - 0x2010], esi
mov dword [ebp - 0x245c], esi
mov edx, edi
mov cl, byte [edx]
cmp cl, byte [eax]
mov byte [ebp - 0x2445], cl
mov ecx, dword [ebp - 0x245c]
jne 0x54324d
cmp byte [ebp - 0x2445], 0
je 0x543249
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
mov byte [ebp - 0x2445], cl
mov ecx, dword [ebp - 0x245c]
jne 0x54324d
add edx, 2
add eax, 2
cmp byte [ebp - 0x2445], 0
jne 0x54320b
mov eax, esi
jmp 0x543252
sbb eax, eax
or eax, 1
mov dword [ebp - 0x245c], ecx
test eax, eax
je 0x543272
add ebx, 2
mov ecx, ebx
mov dword [ebp - 0x245c], ecx
mov eax, dword [ebp + ecx*4 - 0x2038]
test eax, eax
jne 0x543209
mov edi, dword [ebp - 0x2454]
cmp dword [ebp + ecx*4 - 0x2038], esi
je 0x54330e
push str.workaround_for_S22PDF_lying_about_chinese_font_encodings
push edi
call fcn.004f6fc4
mov edx, dword [ebp - 0x244c]
mov ecx, edi
call fcn.00536bbd
mov ecx, edi
mov dword [ebp - 0x244c], esi
call fcn.00542f06
mov edx, dword [ebp - 0x2478]
mov ebx, eax
mov eax, dword [ebp - 0x245c]
mov ecx, edi
push esi
mov dword [ebp - 0x244c], ebx
push dword [ebp + eax*4 - 0x2034]
push str.Adobe_GB1
push dword [ebp - 0x2450]
push ebx
call fcn.00544625
add esp, 0x1c
mov edx, 0xea2ac8
mov ecx, edi
call fcn.0059622d
mov edx, 0xea2a5c
mov dword [ebx + 0x2c], eax
mov ecx, edi
call fcn.0059622d
mov edx, 0xea2a5c
mov dword [ebx + 0x3c], eax
mov ecx, edi
call fcn.0059622d
mov dword [ebx + 0x30], eax
jmp 0x543a9e
mov eax, dword [ebp - 0x244c]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x2c]
mov ecx, ebx
mov dword [ebp - 0x2460], ebx
call fcn.005422da
mov edx, eax
mov eax, dword [ebp - 0x244c]
push 0
mov dword [ebp - 0x245c], edx
mov ecx, dword [eax + 0x10]
and ecx, 4
test byte [eax + 0x10], 0x20
pop eax
cmovne ecx, eax
inc eax
mov dword [ebp - 0x2468], ecx
cmp edx, eax
jne 0x5433a2
mov ecx, dword [ebx + 0x24]
test ecx, ecx
jle 0x543398
mov eax, dword [ebx + 0x28]
mov edx, esi
push 4
mov dword [ebp - 0x2450], eax
mov eax, esi
pop ebx
mov edi, dword [ebp - 0x2450]
mov eax, dword [eax + edi]
mov edi, dword [ebp - 0x2454]
cmp word [eax + 8], 7
je 0x54339a
inc edx
mov eax, ebx
add ebx, 4
cmp edx, ecx
jl 0x543367
mov ebx, dword [ebp - 0x2460]
test ecx, ecx
jle 0x543398
mov eax, dword [ebx + 0x28]
mov eax, dword [eax]
jmp 0x54339a
mov eax, esi
mov ebx, dword [ebp - 0x2460]
jmp 0x5433c2
push 2
pop eax
cmp edx, eax
jne 0x5433b4
mov edx, ecx
mov ecx, ebx
call fcn.00542fa2
jmp 0x5433c2
cmp dword [ebx + 0x24], esi
jle 0x5433c0
mov eax, dword [ebx + 0x28]
mov eax, dword [eax]
jmp 0x5433c2
mov eax, esi
test eax, eax
je 0x5433eb
mov edx, eax
mov ecx, ebx
call fcn.00618e8a
test eax, eax
je 0x5433f8
mov ecx, eax
call fcn.0052de73
push eax
push str.freetype_could_not_set_cmap:__s
push edi
call fcn.004f6fc4
add esp, 0xc
jmp 0x5433f8
push str.freetype_could_not_find_any_cmaps
push edi
call fcn.004f6fc4
pop ecx
pop ecx
mov ebx, 0x200
mov ecx, edi
mov edx, ebx
call fcn.00522007
mov dword [ebp - 0x2458], eax
mov ecx, esi
mov eax, dword [ebp - 0x244c]
mov edi, esi
push 2
add dword [eax + 8], ebx
mov ebx, esi
pop eax
push 4
pop edx
mov dword [ebp + edi - 0x243c], esi
xor esi, esi
mov edi, dword [ebp - 0x2458]
inc ecx
mov word [ebx + edi], si
mov edi, edx
mov ebx, eax
add edx, 4
add eax, 2
cmp ecx, 0x100
jl 0x543421
mov edi, dword [ebp - 0x2454]
mov ecx, edi
mov edx, dword [ebp - 0x2464]
push 0xa3
call fcn.004fce89
mov ebx, eax
pop ecx
test ebx, ebx
je 0x5435a5
mov edx, ebx
mov ecx, edi
call fcn.004fb4cd
test eax, eax
je 0x54348d
mov edx, ebx
mov ecx, edi
call fcn.004fb645
mov edx, eax
lea ecx, [ebp - 0x243c]
call fcn.00542092
mov edx, ebx
mov ecx, edi
call fcn.004fb52a
test eax, eax
je 0x5435c9
push 0x2d
mov edx, ebx
mov ecx, edi
call fcn.004fce89
pop ecx
mov edx, eax
mov dword [ebp - 0x2450], eax
mov ecx, edi
call fcn.004fb4cd
test eax, eax
je 0x5434ce
mov edx, dword [ebp - 0x2450]
mov ecx, edi
call fcn.004fb645
mov edx, eax
jmp 0x5434e7
mov eax, dword [ebp - 0x244c]
cmp dword [eax + 0x78], esi
jne 0x5434f2
cmp dword [ebp - 0x2468], 0
jne 0x5434f2
mov edx, str.StandardEncoding
lea ecx, [ebp - 0x243c]
call fcn.00542092
push 0x91
mov edx, ebx
mov ecx, edi
call fcn.004fce89
mov ebx, eax
pop ecx
mov edx, ebx
mov dword [ebp - 0x2440], ebx
mov ecx, edi
call fcn.004fb500
test eax, eax
je 0x5435c9
mov edx, ebx
mov ecx, edi
call fcn.004fbd39
mov dword [ebp - 0x2444], eax
mov ebx, esi
mov dword [ebp - 0x2450], esi
test eax, eax
jle 0x5435c9
mov edx, dword [ebp - 0x2440]
mov ecx, edi
push esi
call fcn.004fbd63
pop ecx
mov edx, eax
mov dword [ebp - 0x246c], eax
mov ecx, edi
call fcn.004fb44a
test eax, eax
je 0x54356a
mov edx, dword [ebp - 0x246c]
mov ecx, edi
call fcn.004fb572
mov ebx, eax
mov edx, dword [ebp - 0x246c]
mov ecx, edi
call fcn.004fb4cd
test eax, eax
je 0x543598
cmp ebx, 0xff
ja 0x543598
mov edx, dword [ebp - 0x246c]
mov ecx, edi
call fcn.004fb645
mov dword [ebp + ebx*4 - 0x243c], eax
inc ebx
inc esi
cmp esi, dword [ebp - 0x2444]
jl 0x543539
xor esi, esi
jmp 0x5435c9
mov eax, dword [ebp - 0x244c]
cmp dword [eax + 0x78], esi
jne 0x5435c9
cmp dword [ebp - 0x2468], 0
jne 0x5435c9
mov edx, str.StandardEncoding
lea ecx, [ebp - 0x243c]
call fcn.00542092
mov ebx, dword [ebp - 0x2460]
mov eax, esi
mov dword [ebp - 0x2444], esi
mov edi, esi
mov edx, eax
mov ecx, ebx
call fcn.0052d597
mov ecx, dword [ebp - 0x2458]
mov word [ecx + edi*2], ax
lea eax, [esi + 1]
mov edi, eax
mov esi, eax
cmp edi, 0x100
jl 0x5435d9
mov edi, dword [ebp - 0x2454]
xor ebx, ebx
inc ebx
push ebx
push dword [edi + 0x14]
call dword [edi + 0x18]
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0x1a8
mov dword [ebp - 0x247c], ebx
call fcn.004fce89
add esp, 0xc
mov ebx, eax
mov edx, ebx
mov ecx, edi
push 0x1c2
call fcn.004fba71
pop ecx
push 0
pop esi
test eax, eax
jne 0x5436a9
push 0x121
mov edx, ebx
mov ecx, edi
call fcn.004fba71
pop ecx
test eax, eax
jne 0x5436a9
push 0x1bd
mov edx, ebx
mov ecx, edi
call fcn.004fba71
pop ecx
test eax, eax
je 0x543672
push 2
pop eax
mov dword [ebp - 0x245c], eax
jmp 0x54371d
push 0x48
mov edx, ebx
mov ecx, edi
call fcn.004fba71
pop ecx
test eax, eax
jne 0x5436a9
push 0x4a
mov edx, ebx
mov ecx, edi
call fcn.004fba71
pop ecx
test eax, eax
mov eax, dword [ebp - 0x245c]
push 2
pop ecx
cmovne eax, ecx
mov dword [ebp - 0x245c], eax
cmp eax, 1
jne 0x543715
jmp 0x5436b2
xor eax, eax
inc eax
mov dword [ebp - 0x245c], eax
mov edi, dword [ebp - 0x2460]
mov ebx, esi
mov ecx, esi
mov dword [ebp - 0x2444], esi
mov eax, esi
mov dword [ebp - 0x2440], esi
mov edx, dword [ebp + eax*4 - 0x243c]
test edx, edx
je 0x5436f4
mov ecx, edi
call fcn.0052d5d0
mov ecx, ebx
test eax, eax
jle 0x5436f4
mov ecx, dword [ebp - 0x2440]
mov edx, dword [ebp - 0x2458]
mov word [edx + ecx*2], ax
mov ecx, esi
lea ebx, [ecx + 1]
mov eax, ebx
mov ecx, ebx
mov dword [ebp - 0x2440], eax
mov esi, ebx
cmp eax, 0x100
jl 0x5436ca
mov eax, dword [ebp - 0x245c]
xor esi, esi
push 2
pop ecx
cmp eax, ecx
jne 0x543880
mov edx, dword [ebp - 0x2468]
mov ecx, dword [ebp - 0x2460]
test edx, edx
jne 0x543816
mov eax, dword [ecx + 0x5c]
test eax, eax
je 0x54379c
cmp word [eax + 8], 3
jne 0x54379c
mov edi, dword [ebp - 0x2460]
mov ebx, esi
mov ecx, esi
mov dword [ebp - 0x2444], esi
mov eax, esi
mov dword [ebp - 0x2440], esi
mov edx, dword [ebp + eax*4 - 0x243c]
test edx, edx
je 0x543781
mov ecx, edi
call fcn.005426f2
mov ecx, ebx
test eax, eax
jle 0x543781
mov ecx, dword [ebp - 0x2440]
mov edx, dword [ebp - 0x2458]
mov word [edx + ecx*2], ax
mov ecx, esi
lea ebx, [ecx + 1]
mov eax, ebx
mov ecx, ebx
mov dword [ebp - 0x2440], eax
mov esi, ebx
cmp eax, 0x100
jl 0x543757
jmp 0x54387e
test edx, edx
jne 0x543816
mov eax, dword [ecx + 0x5c]
test eax, eax
je 0x543816
inc edx
cmp word [eax + 8], dx
jne 0x543816
mov edi, esi
mov ebx, esi
mov eax, dword [ebp + ebx*4 - 0x243c]
mov dword [ebp - 0x2444], eax
test eax, eax
je 0x543809
mov ecx, eax
call fcn.00542665
mov edx, eax
mov eax, esi
test edx, edx
jle 0x5437e6
mov ecx, dword [ebp - 0x2460]
call fcn.0052d597
mov edx, dword [ebp + ebx*4 - 0x243c]
jmp 0x5437ec
mov edx, dword [ebp - 0x2444]
test eax, eax
jne 0x5437fd
mov ecx, dword [ebp - 0x2460]
call fcn.0052d5d0
test eax, eax
jle 0x543809
mov ecx, dword [ebp - 0x2458]
mov word [ecx + edi*2], ax
inc edi
mov ebx, edi
cmp ebx, 0x100
jl 0x5437b2
jmp 0x543880
mov eax, dword [ecx + 0x5c]
test eax, eax
je 0x543826
cmp dword [eax + 4], 0x73796d62
je 0x543880
mov edi, dword [ebp - 0x2460]
mov ebx, esi
mov ecx, esi
mov dword [ebp - 0x2444], esi
mov eax, esi
mov dword [ebp - 0x2440], esi
mov edx, dword [ebp + eax*4 - 0x243c]
test edx, edx
je 0x543868
mov ecx, edi
call fcn.0052d5d0
mov ecx, ebx
test eax, eax
jle 0x543868
mov ecx, dword [ebp - 0x2440]
mov edx, dword [ebp - 0x2458]
mov word [edx + ecx*2], ax
mov ecx, esi
lea ebx, [ecx + 1]
mov eax, ebx
mov ecx, ebx
mov dword [ebp - 0x2440], eax
mov esi, ebx
cmp eax, 0x100
jl 0x54383e
xor esi, esi
lea eax, [ebp - 0x200c]
mov ecx, esi
mov dword [ebp - 0x2440], eax
mov edx, esi
mov eax, esi
mov dword [ebp - 0x246c], ecx
mov dword [ebp - 0x2450], eax
mov ebx, esi
mov edi, dword [ebp - 0x2458]
movzx eax, word [edi + eax*2]
mov edi, dword [ebp - 0x2454]
mov dword [ebp - 0x2444], eax
test ax, ax
je 0x543953
cmp dword [ebp + ebx*4 - 0x243c], esi
jne 0x543953
mov eax, dword [ebp - 0x2460]
test dword [eax + 8], 0x200
je 0x543945
shl edx, 5
lea ecx, [ebp - 0x200c]
add ecx, edx
mov dword [ebp - 0x2470], ecx
push 0x20
push ecx
mov ecx, dword [ebp - 0x2444]
movzx edx, cx
mov ecx, eax
call fcn.006190b0
pop ecx
pop ecx
test eax, eax
je 0x54392c
mov ecx, eax
call fcn.0052de73
mov ecx, dword [ebp - 0x2458]
push eax
mov eax, dword [ebp - 0x2450]
movzx eax, word [ecx + eax*2]
push eax
push str.freetype_get_glyph_name__gid__d_:__s
push edi
call fcn.004f6fc4
add esp, 0x10
mov eax, dword [ebp - 0x2440]
mov ecx, dword [ebp - 0x246c]
cmp byte [eax], 0
je 0x543953
mov eax, dword [ebp - 0x2470]
jmp 0x54394c
mov eax, dword [ebx*4 + 0xee5c08]
mov dword [ebp + ebx*4 - 0x243c], eax
add dword [ebp - 0x2440], 0x20
inc ecx
mov eax, ecx
mov dword [ebp - 0x246c], ecx
mov dword [ebp - 0x2450], eax
mov edx, ecx
mov ebx, eax
cmp eax, 0x100
jl 0x5438a0
xor eax, eax
inc eax
cmp dword [ebp - 0x245c], eax
jne 0x5439e7
cmp dword [ebp - 0x2468], 0
je 0x5439e7
mov eax, dword [ebp - 0x2458]
mov ebx, esi
push 2
mov dword [ebp - 0x2440], eax
pop ecx
cmp word [eax], si
je 0x5439d1
mov ecx, dword [ebp + ebx - 0x243c]
test ecx, ecx
je 0x5439ce
call fcn.00530b8a
push 2
pop ecx
test eax, eax
jne 0x5439c6
mov eax, dword [ebx + 0xee5808]
mov dword [ebp + ebx - 0x243c], eax
mov eax, dword [ebp - 0x2440]
jmp 0x5439d1
push 2
pop ecx
add eax, ecx
add ebx, 4
mov dword [ebp - 0x2440], eax
cmp ebx, 0x400
jl 0x54399d
xor eax, eax
inc eax
push eax
push dword [edi + 0x14]
call dword [edi + 0x1c]
add esp, 4
mov dword [ebp - 0x247c], esi
mov ecx, edi
call fcn.0059616c
mov ebx, dword [ebp - 0x244c]
mov edx, eax
pop ecx
mov ecx, edi
mov dword [ebx + 0x2c], eax
call fcn.00597428
add dword [ebx + 8], eax
mov ecx, edi
mov eax, dword [ebp - 0x2458]
mov dword [ebx + 0x34], 0x100
mov dword [ebx + 0x38], eax
call fcn.004f703f
push esi
push eax
call fcn.00724770
mov ebx, dword [ebp - 0x244c]
mov edi, dword [ebp - 0x2454]
pop ecx
pop ecx
test eax, eax
jne 0x543a79
mov eax, dword [edi + 0x20]
cmp dword [eax + 0x40], esi
jne 0x543a79
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0x1b5
call fcn.004fce89
mov edx, dword [ebp - 0x2478]
pop ecx
push eax
push esi
lea eax, [ebp - 0x243c]
mov ecx, edi
push eax
push ebx
call fcn.0059765a
add esp, 0x10
mov ecx, edi
call fcn.004f70d4
test eax, eax
je 0x543a9e
cmp dword [edi + 0x6088], 5
je 0x543c92
push str.cannot_load_ToUnicode_CMap
push edi
call fcn.004f6fc4
pop ecx
pop ecx
cvttss2si eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0x1e1
mov dword [ebx + 0x58], eax
call fcn.004fce89
mov dword [ebp - 0x2470], eax
pop ecx
test eax, eax
je 0x543b7f
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0xbd
call fcn.004fce89
pop ecx
mov edx, eax
mov ecx, edi
call fcn.004fb572
mov edx, dword [ebp - 0x2464]
mov ecx, edi
push 0x10e
mov dword [ebp - 0x2440], eax
call fcn.004fce89
pop ecx
mov edx, eax
mov ecx, edi
call fcn.004fb572
mov ecx, dword [ebp - 0x2440]
test ecx, ecx
js 0x543b1a
cmp eax, 0xff
jg 0x543b1a
cmp ecx, eax
jle 0x543b24
mov ecx, esi
mov eax, esi
mov dword [ebp - 0x2440], ecx
sub eax, ecx
inc eax
mov dword [ebp - 0x2444], eax
test eax, eax
jle 0x543c34
mov dword [ebp - 0x2450], esi
mov edx, dword [ebp - 0x2470]
mov ecx, edi
push esi
call fcn.004fee2d
pop ecx
mov ecx, dword [ebp - 0x2440]
mov edx, ebx
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ecx + esi]
mov ecx, edi
push eax
call fcn.00595dec
mov esi, dword [ebp - 0x2450]
add esp, 0xc
inc esi
mov dword [ebp - 0x2450], esi
cmp esi, dword [ebp - 0x2444]
jl 0x543b3b
jmp 0x543c34
mov eax, esi
mov dword [ebp - 0x2440], eax
mov edx, eax
mov ecx, ebx
call fcn.00542351
mov ecx, dword [ebx + 0xc]
lea edx, [ebp - 0x2480]
push edx
mov dword [ebp - 0x2480], esi
mov edx, eax
push 0x80b
mov ecx, dword [ecx + 0x2c]
mov dword [ebp - 0x2470], eax
mov dword [ebp - 0x2444], ecx
call fcn.00616386
pop ecx
pop ecx
test eax, eax
je 0x543be2
cmp eax, 6
je 0x543be2
mov ecx, eax
call fcn.0052de73
push eax
push dword [ebp - 0x2470]
push str.FT_Get_Advance__d_:__s
push edi
call fcn.004f6fc4
add esp, 0x10
mov eax, dword [ebp - 0x2444]
movzx ecx, word [eax + 0x44]
mov eax, 0x800
test cx, cx
cmove ecx, eax
imul eax, dword [ebp - 0x2480], 0x3e8
movzx ecx, cx
cdq
idiv ecx
mov edx, ebx
mov ecx, edi
push eax
mov eax, dword [ebp - 0x2440]
push eax
push eax
call fcn.00595dec
mov eax, dword [ebp - 0x2440]
add esp, 0xc
inc eax
mov dword [ebp - 0x2440], eax
cmp eax, 0x100
jl 0x543b87
mov edx, ebx
call fcn.00595ed6
jmp 0x543c43
mov ebx, dword [ebp - 0x244c]
mov ecx, edi
call fcn.004f70d4
test eax, eax
je 0x543c81
cmp dword [ebp - 0x247c], 0
je 0x543c5c
call fcn.00542087
test ebx, ebx
je 0x543c74
mov eax, dword [ebp - 0x2458]
cmp eax, dword [ebx + 0x38]
je 0x543c74
push eax
push edi
call fcn.0052213a
pop ecx
pop ecx
mov edx, ebx
mov ecx, edi
call fcn.004f7b13
mov ecx, edi
jmp 0x543c92
mov ecx, dword [ebp - 8]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006f3e28
leave
ret
call fcn.004f7175
int3