Function at 0x408e90
Capabilities:
Delete file
Get common file path
Persist via run registry key
Shutdown system

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ac77a
mov eax, dword fs:[0]
push eax
sub esp, 0x5b8
mov eax, dword [0x620024]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x240], 0
cmp dword [ebx + 0x298], 1
mov dword [ebp - 0x254], ebx
je 0x408efd
cmp dword [ebx + 0x2a0], 1
je 0x408efd
cmp dword [ebx + 0x278], 0
jne 0x408f07
cmp dword [0x62b99c], 0
jne 0x408f07
push 0xffffffffffffffff
push 0
push ecx
call fcn.0040bb50
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1032
push dword [ebx + 0xd0]
call esi
test eax, eax
jne 0x408f2a
cmp dword [ebx + 0x278], eax
je 0x408f48
push 0
push 0
push 0x1032
push dword [ebx + 0x218]
call esi
test eax, eax
jne 0x408f5b
cmp dword [ebx + 0x278], 1
jne 0x408f5b
push 0xffffffffffffffff
push 0
push 0xe2
call fcn.0044b4c6
jmp 0x409b12
call fcn.00449b3d
mov ecx, eax
test ecx, ecx
je 0x409b2e
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x258], edi
push 0
push 0x24
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], 0
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x408fda
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x408fa0
sub ecx, edx
lea eax, [ebp - 0x21c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x258]
call fcn.00402d30
push 0x17
push str._tempEDE_Quicklist.txt
lea ecx, [ebp - 0x258]
call fcn.00405b30
mov edi, dword [ebp - 0x258]
cmp dword [ebx + 0x2a0], 0
jne 0x4091fa
push 0
push 0xb5
lea ecx, [ebp - 0x34c]
call fcn.0043f9c1
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2a4]
mov dword [ebp - method.CEdeCheckDlg.virtual_0], vtable.CEdeCheckDlg.0
mov dword [ebp - 0x244], eax
call fcn.00449b3d
test eax, eax
je 0x409b2e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x2a4], eax
mov eax, 0x5f3770
mov byte [ebp - 4], 2
shr eax, 0x10
mov ecx, 0x5f3770
movzx esi, cx
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x234], eax
test eax, eax
jne 0x40905c
push esi
call fcn.00403130
jmp 0x409068
push 0
push 0x5f3770
call fcn.00402d30
lea eax, [ebp - 0x2a0]
mov byte [ebp - 4], 3
mov dword [ebp - 0x244], eax
call fcn.00449b3d
test eax, eax
je 0x409b2e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a0]
cmp dword [ebp - 0x234], 0
jne 0x4090b0
push esi
call fcn.00403130
jmp 0x4090bc
push 0
push 0x5f3770
call fcn.00402d30
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 5
call fcn.0043ff77
cmp eax, 1
je 0x409144
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0
or ebx, 0xffffffff
mov edx, dword [ebp - 0x2a0]
mov eax, ebx
add edx, 0xfffffff0
mov dword [ebp - method.CEdeCheckDlg.virtual_0], vtable.CEdeCheckDlg.0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409105
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2a4]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409122
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x34c]
call fcn.0043fa20
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jmp 0x409b08
cmp dword [0x62b9a0], 0
mov esi, dword [ebp - 0x2a0]
je 0x4091a4
test esi, esi
je 0x409b2e
mov eax, dword [0x62b9bc]
mov ecx, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x409188
test dx, dx
je 0x409184
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x409188
add eax, 4
add ecx, 4
test dx, dx
jne 0x409162
xor eax, eax
jmp 0x40918d
sbb eax, eax
or eax, 1
test eax, eax
je 0x4091a4
push 0xffffffffffffffff
push 0
push 0xe3
call fcn.0044b4c6
jmp 0x4090d0
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0
or esi, 0xffffffff
mov dword [ebp - method.CEdeCheckDlg.virtual_0], vtable.CEdeCheckDlg.0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4091cc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2a4]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4091e9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x34c]
call fcn.0043fa20
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call fcn.0044bbac
mov ecx, dword [eax + 4]
call fcn.0044889d
push ebx
lea ecx, [ebp - 0x5c4]
mov byte [ebp - 4], 6
call fcn.0041ef80
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 7
call fcn.00450d50
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 8
call fcn.00453068
mov byte [ebp - 4], 9
mov eax, dword [ebx + 0x278]
test eax, eax
jne 0x40936c
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebx + 0xd0]
call esi
mov ecx, dword [ebx + 0x138]
mov dword [ebp - 0x234], ecx
add eax, 1
je 0x40930c
nop dword [eax]
push 2
lea esi, [eax - 1]
push esi
push 0x100c
push dword [ebx + 0xd0]
call dword [sym.imp.USER32.dll_SendMessageW]
inc eax
lea ecx, [ebx + 0xb0]
push esi
mov dword [ebp - 0x24c], eax
call fcn.0044d1f7
mov esi, eax
cmp esi, dword [ebp - 0x234]
jae 0x4092fe
test esi, esi
js 0x409b38
cmp esi, dword [ebx + 0x138]
jge 0x409b38
mov eax, dword [ebx + 0x134]
push 1
push 0x10
mov eax, dword [eax + esi*4]
push eax
mov dword [ebp - 0x23c], eax
call fcn.0044c4b5
test eax, eax
je 0x4092fe
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x298]
push dword [ebp - 0x290]
call fcn.00450f11
push esi
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x274]
call fcn.00450f11
mov eax, dword [ebp - 0x24c]
test eax, eax
jne 0x409270
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x5c4]
call fcn.0041fc10
test eax, eax
jne 0x409579
lea ecx, [ebp - 0x274]
call fcn.0045307f
lea ecx, [ebp - 0x298]
call fcn.00450d67
lea ecx, [ebp - 0x5c4]
call fcn.0041f380
lea ecx, [ebp - 0x245]
call fcn.004170e0
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jmp 0x409b08
cmp eax, 1
jne 0x409579
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebx + 0x218]
call esi
inc eax
mov dword [ebp - 0x23c], eax
mov eax, dword [ebx + 0x14c]
mov dword [ebp - 0x27c], eax
call fcn.00449b3d
mov ecx, eax
test ecx, ecx
je 0x409b3d
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x25c], esi
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x40955d
lea ecx, [ebx + 0x1f8]
mov dword [ebp - 0x278], ecx
push 2
lea ebx, [eax - 1]
mov eax, dword [ebp - 0x24c]
push ebx
push 0x100c
push dword [eax + 0x218]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x278]
inc eax
push ebx
mov dword [ebp - 0x23c], eax
call fcn.0044d1f7
mov ecx, eax
mov dword [ebp - 0x244], ecx
cmp ecx, dword [ebp - 0x27c]
jae 0x409549
test ecx, ecx
js 0x409b38
mov ebx, dword [ebp - 0x24c]
cmp ecx, dword [ebx + 0x14c]
jge 0x409b38
mov eax, dword [ebx + 0x148]
push 1
push 0x5c
mov eax, dword [eax + ecx*4]
push eax
mov dword [ebp - 0x234], eax
call fcn.0044c4b5
test eax, eax
je 0x40954f
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax + 4]
mov eax, dword [eax + 0xc]
sub eax, 0x10
mov dword [ebp - 0x250], ecx
push eax
call fcn.00405670
or dword [ebp - 0x240], 1
add eax, 0x10
add esp, 4
mov dword [ebp - 0x260], eax
lea edx, [eax - 0x10]
mov byte [ebp - 4], 0xb
lea ecx, [esi - 0x10]
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x280], ecx
cmp edx, ecx
je 0x409505
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x4094ea
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x4094e4
push edx
call fcn.00405670
add esp, 4
mov dword [ebp - 0x284], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x4094d9
mov esi, dword [ebp - 0x280]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x284]
lea esi, [eax + 0x10]
mov dword [ebp - 0x25c], esi
jmp 0x4094ff
mov eax, dword [ebp - 0x260]
push dword [eax - 0xc]
lea ecx, [ebp - 0x25c]
push eax
call fcn.00402d30
mov esi, dword [ebp - 0x25c]
mov edx, dword [ebp - 0x234]
mov byte [ebp - 4], 0xa
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40951e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
push dword [ebp - 0x250]
lea ecx, [ebp - 0x5c4]
call fcn.0041fec0
push dword [ebp - 0x244]
lea ecx, [ebp - 0x274]
push dword [ebp - 0x26c]
call fcn.00450f11
jmp 0x40954f
mov ebx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x23c]
test eax, eax
jne 0x4093d4
mov byte [ebp - 4], 9
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x409579
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x5c4]
call fcn.0043ff77
cmp eax, 1
jne 0x40972e
mov byte [ebp - 4], 0xc
mov eax, dword [ebx + 0x278]
mov esi, dword [ebp - 0x26c]
test eax, eax
jne 0x409669
mov eax, esi
dec esi
test eax, eax
je 0x40964f
test esi, esi
js 0x409b38
cmp esi, dword [ebp - 0x26c]
jge 0x409b38
mov eax, dword [ebp - 0x270]
mov eax, dword [eax + esi*4]
mov dword [ebp - 0x244], eax
test eax, eax
js 0x409b38
cmp eax, dword [ebx + 0x138]
jge 0x409b38
lea ecx, [eax*4]
mov eax, dword [ebx + 0x134]
push 1
push 0x10
mov dword [ebp - 0x250], ecx
mov eax, dword [eax + ecx]
push eax
mov dword [ebp - 0x260], eax
call fcn.0044c4b5
test eax, eax
je 0x4095a5
mov eax, dword [ebp - 0x244]
cmp eax, dword [ebx + 0x138]
jge 0x409b38
mov ecx, dword [ebp - 0x250]
mov eax, dword [ebx + 0x134]
mov dword [ecx + eax], 0
mov ecx, dword [ebp - 0x260]
test ecx, ecx
je 0x4095a5
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x4095a5
mov ecx, ebx
call fcn.00409b70
mov ecx, ebx
call fcn.0040e4b0
mov dword [ebp - 4], 9
jmp 0x40972e
cmp eax, 1
jne 0x4096fa
lea ecx, [ebp - 0x228]
call fcn.00404670
nop dword [eax]
mov eax, esi
dec esi
test eax, eax
je 0x4096f3
test esi, esi
js 0x409b38
cmp esi, dword [ebp - 0x26c]
jge 0x409b38
mov eax, dword [ebp - 0x270]
mov ecx, dword [eax + esi*4]
test ecx, ecx
js 0x409b38
cmp ecx, dword [ebx + 0x14c]
jge 0x409b38
mov eax, dword [ebx + 0x148]
push 1
push 0x5c
mov eax, dword [eax + ecx*4]
push eax
mov dword [ebp - 0x244], eax
call fcn.0044c4b5
test eax, eax
je 0x409680
mov ecx, dword [ebp - 0x244]
movq xmm0, qword [ebp - 0x228]
movq qword [ecx + 0x24], xmm0
mov eax, dword [ebp - 0x220]
mov dword [ecx + 0x2c], eax
jmp 0x409680
mov ecx, ebx
call fcn.0040ace0
mov ecx, ebx
call fcn.0040e4b0
mov dword [ebp - 4], 9
jmp 0x40972e
push edi
or esi, 0xffffffff
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebx + 0x2a0], 1
jne 0x4097dc
mov byte [ebp - 4], 0xe
mov eax, dword [0x62b984]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x409760
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x409776
call fcn.00449b3d
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x409b47
mov eax, dword [ecx]
call dword [eax + 0xc]
or dword [ebp - 0x240], 2
add eax, 0x10
mov dword [ebp - 0x234], eax
mov eax, dword [0x62b984]
push 0x11
push str.undeletedItem.txt
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.00416370
mov esi, dword [ebp - 0x234]
add esp, 0x14
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
and dword [ebp - 0x240], 0xfffffffd
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 9
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4097dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.undeletedItem.txt
lea eax, [ebp - 0x234]
push 0x62b984
push eax
call fcn.00415e40
add esp, 0xc
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xf
call fcn.00453255
push 0
push 0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
push dword [ebp - 0x234]
mov byte [ebp - 0x235], 0
call fcn.004538a1
test eax, eax
je 0x4098d1
push 0
push 0x1000
push 1
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x394]
call fcn.0044e222
mov byte [ebp - 4], 0x11
call fcn.00449b3d
mov ecx, eax
test ecx, ecx
je 0x409b51
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x394]
call fcn.0044eb5e
mov eax, dword [ebp - 0x23c]
lea ecx, [ebp - 0x394]
cmp dword [eax - 0xc], 0
setg byte [ebp - 0x235]
call fcn.0044e6a7
lea ecx, [ebp - 0x230]
call fcn.004535a9
mov byte [ebp - 4], 0x11
mov eax, esi
mov edx, dword [ebp - 0x23c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4098c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x394]
call fcn.0044e355
lea ecx, [ebp - 0x230]
call fcn.004532d9
mov byte [ebp - 4], 9
mov eax, esi
mov edx, dword [ebp - 0x234]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4098fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x235], 0
je 0x409aca
push 0x134
push 0x5f3e8c
push 0x5f3eb0
mov ecx, ebx
call fcn.0044443f
cmp eax, 6
jne 0x409a3a
lea eax, [ebp - 0x254]
push eax
call fcn.00413b40
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x244], esp
push str.__undeleted
push eax
push ecx
call fcn.00415e40
add esp, 8
mov byte [ebp - 4], 0x14
mov ebx, esp
mov dword [ebp - 0x250], ebx
call fcn.00449b3d
mov ecx, eax
test ecx, ecx
je 0x409b5b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov eax, str.SoftwareMicrosoftWindowsCurrentVersionRunOnceEDEwUndeleted
mov byte [ebp - 4], 0x15
mov ecx, ebx
test eax, 0xffff0000
jne 0x409993
movzx eax, ax
push eax
call fcn.00403130
jmp 0x40999f
push 0x3f
push str.SoftwareMicrosoftWindowsCurrentVersionRunOnceEDEwUndeleted
call fcn.00402d30
mov byte [ebp - 4], 0x14
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 4], 0x13
call fcn.00413870
mov byte [ebp - 4], 9
mov eax, esi
mov edx, dword [ebp - 0x254]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4099d2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x254]
push eax
push 0x28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea eax, [ebp - 0x228]
push eax
push 0x5f4340
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
push 0
push 0
push 0
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x22c], 1
push eax
push 0
push dword [ebp - 0x254]
mov dword [ebp - 0x220], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push 0
push 6
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0x409aca
mov byte [ebp - 4], 0x16
mov eax, dword [0x62b984]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x409a55
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x409a6b
call fcn.00449b3d
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x409b65
mov eax, dword [ecx]
call dword [eax + 0xc]
or dword [ebp - 0x240], 8
add eax, 0x10
mov dword [ebp - 0x234], eax
mov eax, dword [0x62b984]
push 0x11
push str.undeletedItem.txt
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.00416370
mov esi, dword [ebp - 0x234]
add esp, 0x14
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 9
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x409aca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x274]
call fcn.0045307f
lea ecx, [ebp - 0x298]
call fcn.00450d67
lea ecx, [ebp - 0x5c4]
call fcn.0041f380
lea ecx, [ebp - 0x245]
call fcn.004170e0
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x409b12
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00586281
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00403300
call fcn.004498c5
push 0x80004005
call fcn.00403300
push 0x80004005
call fcn.00403300
push 0x80004005
call fcn.00403300
push 0x80004005
call fcn.00403300
push 0x80004005
call fcn.00403300
int3