Function at 0x403050
Capabilities:
Create thread
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x94
push ebx
push esi
push edi
push 0x40
lea eax, [esp + 0x64]
push 0
push eax
call fcn.004094f0
movups xmm0, xmmword [esp + 0x6c]
add esp, 0xc
movups xmmword [0x424258], xmm0
mov dword [0x424258], 0x40
movups xmm0, xmmword [esp + 0x70]
push 0x424258
movups xmmword [0x424268], xmm0
movups xmm0, xmmword [esp + 0x84]
movups xmmword [0x424278], xmm0
movups xmm0, xmmword [esp + 0x94]
movups xmmword [0x424288], xmm0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x403c86
mov eax, 0x64
mov ebx, 0x34ca257d
sub eax, dword [0x42425c]
mov edi, 0x802c0f25
mov dword [esp + 0x48], eax
mov eax, dword [0x424268]
mul ebx
mov dword [esp + 0x10], eax
mov esi, edx
mov eax, dword [0x424268]
mul edi
mov edi, eax
mov dword [esp + 0x10], edx
mov eax, dword [0x42426c]
mul ebx
mov ecx, eax
mov ebx, edx
mov eax, dword [0x42426c]
mov edx, 0x802c0f25
mul edx
add ecx, esi
mov dword [esp + 0x34], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x10]
adc ecx, 0
mov dword [esp + 0x20], edi
xor eax, eax
add ebx, ecx
mov ecx, dword [esp + 0x34]
adc eax, eax
add ecx, ebx
adc edx, eax
shrd ecx, edx, 0x13
cmp dword [0x422004], 0
mov dword [esp + 0x34], ecx
je 0x403b7e
cmp ecx, dword [0x4248ac]
je 0x403c71
mov ebx, dword [esp + 0x48]
push 0x418a78
push ebx
push ecx
push 0x424050
push 0xc8
push 0x4242c8
mov dword [0x4248ac], ecx
call fcn.00408580
add esp, 0x18
xor eax, eax
nop dword [eax]
cmp eax, 0x12c
jae 0x403c8f
mov byte [eax + 0x424780], 0
inc eax
cmp eax, 0xfe
jle 0x403180
mov edi, dword [0x424048]
xor esi, esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x44], esi
cmp dword [0x424254], esi
jne 0x4036c9
mov ecx, dword [0x424268]
mov edx, 0x34ca257d
mov ebx, dword [0x42426c]
add ecx, 0x7fd40
mov eax, ecx
mov edi, 0x802c0f25
adc ebx, esi
mul edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], eax
mov esi, edx
mov eax, ecx
mov ecx, 0x34ca257d
mul edi
mov edi, eax
mov dword [esp + 0x20], edx
mov eax, ebx
mul ecx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0x10]
mov edx, 0x802c0f25
mul edx
add ecx, esi
mov dword [esp + 0x1c], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x20]
adc ecx, 0
mov dword [esp + 0x10], edi
xor eax, eax
mov edi, 0x802c0f25
add ebx, ecx
mov ecx, dword [esp + 0x1c]
adc eax, eax
add ecx, ebx
mov ebx, dword [0x42427c]
adc edx, eax
shrd ecx, edx, 0x13
shr edx, 0x13
mov dword [esp + 0x1c], ecx
mov dword [0x424268], ecx
mov ecx, dword [0x424278]
add ecx, 0x7fd40
mov dword [esp + 0xc], edx
mov dword [0x42426c], edx
mov eax, ecx
adc ebx, 0
mov edx, 0x34ca257d
mul edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], eax
mov esi, edx
mov eax, ecx
mov ecx, 0x34ca257d
mul edi
mov edi, eax
mov dword [esp + 0x20], edx
mov eax, ebx
mul ecx
mov ebx, edx
mov ecx, eax
mov eax, dword [esp + 0x10]
mov edx, 0x802c0f25
mul edx
add ecx, esi
mov dword [esp + 0x10], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x20]
adc ecx, 0
mov dword [esp + 0x38], edi
xor eax, eax
add ebx, ecx
mov ecx, dword [esp + 0x10]
adc eax, eax
add ecx, ebx
adc edx, eax
shrd ecx, edx, 0x13
shr edx, 0x13
mov dword [0x424278], ecx
mov ecx, dword [0x424260]
mov edi, 0x802c0f25
mov ebx, dword [0x424264]
add ecx, 0x7fd40
mov dword [0x42427c], edx
mov eax, ecx
adc ebx, 0
mov edx, 0x34ca257d
mul edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], eax
mov esi, edx
mov eax, ecx
mov ecx, 0x34ca257d
mul edi
mov edi, eax
mov dword [esp + 0x20], edx
mov eax, ebx
mul ecx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0x10]
mov edx, 0x802c0f25
mul edx
add ecx, esi
mov dword [esp + 0x10], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x20]
adc ecx, 0
mov dword [esp + 0x38], edi
xor eax, eax
mov edi, 0x346dc5d6
add ebx, ecx
mov ecx, dword [esp + 0x10]
adc eax, eax
add ecx, ebx
mov ebx, 0x3886594b
adc edx, eax
mov eax, dword [esp + 0x1c]
shrd ecx, edx, 0x13
shr edx, 0x13
mov dword [0x424264], edx
mul ebx
mov dword [0x424260], ecx
mov dword [esp + 0x10], eax
mov esi, edx
mov eax, dword [esp + 0x1c]
mul edi
mov edi, eax
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0xc]
mul ebx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0xc]
mov edx, 0x346dc5d6
mul edx
add ecx, esi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
adc ebx, 0
mov esi, dword [esp + 0x20]
add edi, ecx
mov dword [esp + 0x38], edi
mov edi, 0x2710
adc eax, 0
xor ecx, ecx
add ebx, eax
adc ecx, ecx
add esi, ebx
adc edx, ecx
shrd esi, edx, 0xb
shr edx, 0xb
mov eax, edx
mul edi
mov ecx, eax
mov eax, esi
mul edi
mov edi, dword [esp + 0x1c]
add ecx, edx
sub edi, eax
mov ebx, dword [esp + 0xc]
mov eax, edi
mov dword [esp + 0x44], edi
sbb ebx, ecx
mov ecx, 0x1a9fbe77
mul ecx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x10], eax
mov esi, edx
mov eax, edi
mov edx, 0x624dd2f
mul edx
mov edi, eax
mov dword [esp + 0x10], edx
mov eax, ebx
mul ecx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0x2c]
mov edx, 0x624dd2f
mul edx
add ecx, esi
mov dword [esp + 0x20], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x10]
adc ecx, 0
mov dword [esp + 0x38], edi
xor eax, eax
mov edi, 0x624dd2f
add ebx, ecx
mov ecx, dword [esp + 0x20]
adc eax, eax
add ecx, ebx
mov ebx, dword [esp + 0x44]
adc edx, eax
mov eax, dword [esp + 0x2c]
sub ebx, ecx
sbb eax, edx
shrd ebx, eax, 1
shr eax, 1
add ebx, ecx
adc eax, edx
shrd ebx, eax, 9
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x44], ebx
mov ebx, 0x1a9fbe77
mul ebx
mov dword [esp + 0x10], eax
mov esi, edx
mov eax, dword [esp + 0x1c]
mul edi
mov edi, eax
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0xc]
mul ebx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0xc]
mov edx, 0x624dd2f
mul edx
add ecx, esi
mov dword [esp + 0x20], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x10]
adc ecx, 0
mov dword [esp + 0x38], edi
mov edi, dword [esp + 0x1c]
xor eax, eax
add ebx, ecx
mov esi, edi
mov ecx, dword [esp + 0x20]
adc eax, eax
add ecx, ebx
mov ebx, dword [esp + 0xc]
adc edx, eax
sub esi, ecx
mov eax, ebx
sbb eax, edx
shrd esi, eax, 1
shr eax, 1
add esi, ecx
mov ecx, 0x3e8
adc eax, edx
shrd esi, eax, 9
shr eax, 9
mul ecx
mov edx, 0x3e8
mov ecx, eax
mov eax, esi
mul edx
add ecx, edx
sub edi, eax
mov eax, edi
mov dword [esp + 0x2c], edi
sbb ebx, ecx
mov ecx, 0xe147ae15
mul ecx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x10], eax
mov esi, edx
mov eax, edi
mov edx, 0x47ae147a
mul edx
mov edi, eax
mov dword [esp + 0x10], edx
mov eax, ebx
mul ecx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0x28]
mov edx, 0x47ae147a
mul edx
add ecx, esi
mov dword [esp + 0x20], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x10]
adc ecx, 0
mov dword [esp + 0x38], edi
xor eax, eax
mov edi, 0x47ae147a
add ebx, ecx
mov ecx, dword [esp + 0x20]
adc eax, eax
add ecx, ebx
mov ebx, dword [esp + 0x2c]
adc edx, eax
mov eax, dword [esp + 0x28]
sub ebx, ecx
sbb eax, edx
shrd ebx, eax, 1
shr eax, 1
add ebx, ecx
adc eax, edx
shrd ebx, eax, 6
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], ebx
mov ebx, 0xe147ae15
mul ebx
mov dword [esp + 0x10], eax
mov esi, edx
mov eax, dword [esp + 0x1c]
mul edi
mov edi, eax
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0xc]
mul ebx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0xc]
mov edx, 0x47ae147a
mul edx
add ecx, esi
mov dword [esp + 0x20], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], edi
adc ecx, 0
xor eax, eax
mov edi, dword [esp + 0x1c]
add ebx, ecx
mov esi, edi
mov ecx, dword [esp + 0x20]
adc eax, eax
add ecx, ebx
mov ebx, dword [esp + 0xc]
adc edx, eax
sub esi, ecx
mov eax, ebx
sbb eax, edx
shrd esi, eax, 1
shr eax, 1
add esi, ecx
mov ecx, 0x64
adc eax, edx
shrd esi, eax, 6
shr eax, 6
mul ecx
mov edx, 0x64
mov ecx, eax
mov eax, esi
mul edx
add ecx, edx
sub edi, eax
mov eax, edi
sbb ebx, ecx
mov ecx, 0xcccccccd
mul ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], eax
mov esi, edx
mov eax, edi
mov edx, 0xcccccccc
mul edx
mov edi, eax
mov dword [esp + 0x20], edx
mov eax, ebx
mul ecx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0x10]
mov edx, 0xcccccccc
mul edx
add ecx, esi
mov dword [esp + 0x30], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x20]
adc ecx, 0
mov dword [esp + 0x10], edi
xor eax, eax
add ebx, ecx
mov ecx, dword [esp + 0x30]
adc eax, eax
add ecx, ebx
mov ebx, 0xcccccccd
adc edx, eax
mov eax, dword [esp + 0x1c]
shrd ecx, edx, 3
mul ebx
lea edi, [ebx - 1]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], eax
mov esi, edx
mov eax, dword [esp + 0x1c]
mul edi
mov edi, eax
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0xc]
mul ebx
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0xc]
mov edx, 0xcccccccc
mul edx
add ecx, esi
mov dword [esp + 0x20], eax
adc ebx, 0
add edi, ecx
mov ecx, dword [esp + 0x10]
adc ecx, 0
mov esi, dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x38], edi
mov edi, dword [0x424048]
add ebx, ecx
mov ecx, dword [esp + 0x20]
adc eax, eax
add ecx, ebx
adc edx, eax
shrd ecx, edx, 3
mov edx, dword [esp + 0x30]
lea eax, [ecx + ecx*4]
mov ecx, dword [esp + 0x1c]
add eax, eax
sub ecx, eax
mov dword [esp + 0x1c], ecx
jmp 0x40371f
cmp ebx, 0x64
mov eax, 0x63
cmovae ebx, eax
mov eax, 0xcccccccd
mul ebx
mov ecx, ebx
mov dword [esp + 0x48], ebx
shr edx, 3
mov dword [esp + 0x30], edx
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
mov dword [esp + 0x1c], ecx
cmp edi, 2
jne 0x40371f
mov word [0x4247d6], 0x4040
mov byte [0x4247cf], 0x40
mov byte [0x4247c6], 4
mov byte [0x4247be], 0x40
mov word [0x4247b6], 0x4040
sub edi, 0
je 0x40396a
sub edi, 1
je 0x403961
sub edi, 1
jne 0x403974
xor ecx, ecx
mov edi, 0x4247eb
mov dword [esp + 0x20], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x10], edi
nop dword [eax]
test esi, esi
jne 0x40382e
cmp dword [esp + 0x44], esi
jne 0x40382e
mov esi, ecx
mov ebx, ecx
and esi, 1
shr ebx, 1
shl esi, 2
mov ecx, esi
test edx, edx
je 0x40381e
mov dl, byte [ebx + edx*4 + 0x418430]
shl dl, cl
mov cl, dl
mov al, dl
and al, 0x81
shr cl, 3
and cl, 8
or cl, al
mov al, dl
and al, 0x20
shr dl, 2
add al, al
shr cl, 1
and dl, 4
mov byte [esp + 0xc], cl
or al, dl
mov ecx, esi
mov byte [esp + 0xd], al
mov edx, edi
sub edx, dword [0x424254]
mov ax, word [esp + 0xc]
mov word [edx - 1], ax
mov eax, dword [esp + 0x1c]
mov dl, byte [ebx + eax*4 + 0x418430]
shl dl, cl
mov ecx, 0x4247ec
sub ecx, dword [0x424254]
mov bl, dl
sub ecx, dword [esp + 0x28]
mov dh, dl
shr dh, 3
mov al, dl
and al, 0x81
shr dl, 2
and bl, 0x20
and dh, 8
or dh, al
add bl, bl
and dl, 4
shr dh, 1
or bl, dl
mov byte [esp + 0xc], dh
mov al, bl
mov byte [esp + 0xd], al
mov al, dh
shr al, 4
mov byte [ecx], al
mov al, bl
shl dh, 4
shr al, 4
or dh, al
shl bl, 4
mov byte [ecx + 1], dh
mov byte [ecx + 2], bl
jmp 0x403937
mov eax, dword [esp + 0x1c]
mov dl, byte [ebx + eax*4 + 0x418430]
jmp 0x4038ff
mov eax, ecx
mov edi, ecx
shr eax, 1
and edi, 1
mov dword [esp + 0x38], eax
shl edi, 2
mov ecx, edi
mov dl, byte [eax + esi*4 + 0x418430]
mov esi, 0x4247e8
sub esi, dword [0x424254]
sub esi, dword [esp + 0x28]
shl dl, cl
mov cl, dl
mov bl, dl
mov al, dl
shr cl, 3
shr al, 2
and dl, 0x81
and al, 4
and bl, 0x20
and cl, 8
add bl, bl
or bl, al
or cl, dl
shr cl, 1
mov al, cl
shl cl, 4
shr al, 4
mov byte [esi], al
mov al, bl
shr al, 4
or cl, al
shl bl, 4
mov eax, dword [esp + 0x1c]
mov byte [esi + 2], bl
mov ebx, dword [esp + 0x38]
mov byte [esi + 1], cl
mov ecx, edi
mov edi, dword [esp + 0x10]
mov esi, 0x4247ed
sub esi, dword [0x424254]
mov bl, byte [ebx + eax*4 + 0x418430]
sub esi, dword [esp + 0x28]
shl bl, cl
mov dl, bl
mov ah, bl
shr dl, 3
mov al, bl
and dl, 8
shr al, 2
and al, 4
and ah, 0x20
and bl, 0x81
add ah, ah
or dl, bl
or ah, al
shr dl, 1
mov al, dl
shl dl, 4
shr al, 4
mov byte [esi], al
mov al, ah
shr al, 4
or dl, al
shl ah, 4
mov byte [esi + 1], dl
mov edx, dword [esp + 0x30]
mov byte [esi + 2], ah
mov eax, dword [esp + 0x38]
mov dl, byte [eax + edx*4 + 0x418430]
shl dl, cl
mov cl, dl
mov al, dl
shr cl, 3
and al, 0x81
and cl, 8
or cl, al
mov al, dl
and al, 0x20
shr cl, 1
shr dl, 2
add al, al
mov byte [esp + 0xc], cl
and dl, 4
or al, dl
mov ecx, edi
sub ecx, dword [0x424254]
mov byte [esp + 0xd], al
mov ax, word [esp + 0xc]
mov word [ecx], ax
mov ecx, dword [esp + 0x20]
sub edi, 8
add dword [esp + 0x28], 8
inc ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x10], edi
cmp edi, 0x4247ab
jle 0x403974
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x2c]
jmp 0x403750
push ecx
push edx
call fcn.004060e0
jmp 0x403971
push ecx
push edx
call fcn.00406930
add esp, 8
mov edi, dword [esp + 0x48]
mov eax, edi
shr eax, 0x1f
mov dword [0x424790], 0x33333303
mov dword [0x424794], 0x30333333
movd xmm0, edi
cvtdq2pd xmm0, xmm0
mov dword [0x424788], 0x33333303
mov dword [0x42478c], 0x30333333
addsd xmm0, qword [eax*8 + 0x419eb0]
cvtpd2ps xmm0, xmm0
comiss xmm0, dword [0x419e54]
jbe 0x4039d1
mov byte [0x424790], 6
mov byte [0x424788], 6
comiss xmm0, dword [0x419e5c]
jbe 0x4039e8
mov byte [0x424791], 0x63
mov byte [0x424789], 0x63
comiss xmm0, dword [0x419e60]
jbe 0x4039ff
mov byte [0x424791], 0x66
mov byte [0x424789], 0x66
comiss xmm0, dword [0x419e68]
jbe 0x403a16
mov byte [0x424792], 0x73
mov byte [0x42478a], 0x73
comiss xmm0, dword [0x419e6c]
jbe 0x403a2d
mov byte [0x424792], 0x77
mov byte [0x42478a], 0x77
comiss xmm0, dword [0x419e70]
jbe 0x403a44
mov byte [0x424793], 0x73
mov byte [0x42478b], 0x73
comiss xmm0, dword [0x419e78]
jbe 0x403a5b
mov byte [0x424793], 0x77
mov byte [0x42478b], 0x77
comiss xmm0, dword [0x419e7c]
jbe 0x403a72
mov byte [0x424794], 0x43
mov byte [0x42478c], 0x43
comiss xmm0, dword [0x419e84]
jbe 0x403a89
mov byte [0x424794], 0x44
mov byte [0x42478c], 0x44
comiss xmm0, dword [0x419e88]
jbe 0x403aa0
mov byte [0x424795], 0x43
mov byte [0x42478d], 0x43
comiss xmm0, dword [0x419e8c]
jbe 0x403ab7
mov byte [0x424795], 0x44
mov byte [0x42478d], 0x44
comiss xmm0, dword [0x419e94]
jbe 0x403ace
mov byte [0x424796], 0x43
mov byte [0x42478e], 0x43
comiss xmm0, dword [0x419e98]
jbe 0x403ae5
mov byte [0x424796], 0x44
mov byte [0x42478e], 0x44
comiss xmm0, dword [0x419ea0]
jbe 0x403afc
mov byte [0x424797], 0x40
mov byte [0x42478f], 0x40
push dword [0x42466c]
call dword [sym.imp.USER32.dll_GetDC]
mov ebx, eax
test ebx, ebx
je 0x403b6c
push 0
push 0x4183e8
push 0x424800
push 4
push 0x4183e8
push ebx
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov esi, eax
mov dword [esp + 0x20], esi
test esi, esi
je 0x403b5f
push 0
push 0x4183e8
push 0x424780
push 4
push 0x4183e8
push ebx
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov dword [esp + 0x10], eax
test eax, eax
jne 0x403bff
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
push ebx
push dword [0x42466c]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [esp + 0x34]
cmp edi, dword [0x42467c]
je 0x403b7e
mov dword [0x42467c], edi
cmp dword [0x42429c], 0
je 0x403c7a
cmp ecx, dword [0x4242a0]
jge 0x403c7a
push 0
push str.RAMbooster
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
jne 0x403c7a
imul eax, dword [0x424298], 0xffa80
cmp dword [0x422004], 0
cdq
mov dword [0x424670], eax
mov eax, 0x49
mov dword [0x424674], edx
mov word [0x422008], ax
je 0x403c7a
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x4041c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
neg eax
sbb eax, eax
neg eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x4c]
push eax
mov dword [esp + 0x50], 1
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], esi
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov esi, eax
test esi, esi
je 0x403c5a
push 0x4242b0
push 1
mov dword [0x4242c4], esi
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
test eax, eax
jne 0x403c53
push 0x4242b0
push eax
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push esi
call dword [sym.imp.USER32.dll_DestroyIcon]
push dword [esp + 0x10]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
push dword [esp + 0x20]
call esi
jmp 0x403b5f
mov edi, dword [esp + 0x48]
jmp 0x403b70
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004086df
int3