Function at 0x408170
Capabilities:
Contain obfuscated stackstrings
Get file version info

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e4061
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x328
mov eax, dword [0x534068]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x334], ecx
lea ecx, [ebp - 0x2e8]
call fcn.00408fc0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0
call fcn.0040abd0
push 0x18
push str.update_ruanjian.2345.com
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 1
call fcn.004028e0
push 0x16
push str.check_soft_version.php
lea ecx, [ebp - 0x2d0]
call fcn.004028e0
push 0xb
push str.2345SoftMgr
lea ecx, [ebp - 0x2b8]
call fcn.004028e0
push 1
push 0x50bf28
lea ecx, [ebp - 0x2a0]
call fcn.004028e0
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 7
mov word [ebp - 0x244], ax
mov byte [ebp - 4], 4
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], 7
mov word [ebp - 0x1b4], ax
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 5
call fcn.00409e20
mov byte [ebp - 4], 6
xor edi, edi
mov dword [ebp - 0xb4], 0
xor eax, eax
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 7
push eax
call fcn.0046fab0
add esp, 4
test al, al
je 0x408ee0
cmp dword [ebp - 0x1a0], 8
lea esi, [ebp - 0x1b4]
cmovae esi, dword [ebp - 0x1b4]
call fcn.0047e170
push ecx
push esi
mov ecx, eax
call fcn.0047e250
test al, al
je 0x408ee0
lea edx, [ebp - 0x1b4]
lea ecx, [ebp - 0xdc]
call fcn.0047ecd0
mov esi, eax
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 8
cmp eax, esi
je 0x408361
mov ecx, eax
call fcn.00402880
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xc4], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], edi
movq qword [ebp - 0xb4], xmm0
mov edi, dword [ebp - 0xb4]
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 9
call fcn.00402880
mov byte [ebp - 4], 7
test edi, edi
je 0x408ee0
cmp dword [ebp - 0xb0], 8
lea eax, [ebp - 0xc4]
push edi
cmovae eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0x270]
push eax
call fcn.004028e0
cmp dword [ebp - 0xb0], 8
lea eax, [ebp - 0xc4]
push dword [ebp - 0xb4]
cmovae eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0x288]
push eax
call fcn.004028e0
mov byte [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 7
mov word [ebp - 0x19c], ax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push eax
push str.mshtml.dll
mov dword [ebp - 0xa8], 0x5c
call dword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov edi, eax
test edi, edi
je 0x408509
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
test esi, esi
je 0x408509
push esi
push edi
push dword [ebp - 0xa0]
push str.mshtml.dll
call dword [sym.imp.VERSION.dll_GetFileVersionInfoW]
test eax, eax
je 0x408502
lea eax, [ebp - 0xa4]
mov dword [ebp - 0xa4], 0
push eax
lea eax, [ebp - 0x328]
mov dword [ebp - 0x328], 0
push eax
lea eax, [ebp - 0xa8]
push eax
push esi
call dword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x408502
push 0x80
lea eax, [ebp - 0x98]
push 0
push eax
call fcn.004bf410
mov ecx, dword [ebp - 0x328]
add esp, 0xc
movzx eax, word [ecx + 0xc]
push eax
movzx eax, word [ecx + 0xe]
push eax
movzx eax, word [ecx + 8]
push eax
movzx eax, word [ecx + 0xa]
push eax
push str._d._d._d._d
push 0xffffffffffffffff
lea eax, [ebp - 0x98]
push 0x40
push eax
call fcn.00408150
lea ecx, [ebp - 0x98]
add esp, 0x20
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4084e0
sub ecx, edx
lea eax, [ebp - 0x98]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x19c]
call fcn.004028e0
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 1
xor eax, eax
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0
lea ecx, [ebp - 0x184]
push 0x50bf28
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 7
mov word [ebp - 0x184], ax
call fcn.004028e0
push 1
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x19c]
cmp dword [ebp - 0x188], 8
push 0x50bf2c
cmovae eax, dword [ebp - 0x19c]
push 0
push dword [ebp - 0x18c]
push eax
call fcn.00409b10
add esp, 0x14
cmp eax, 0xffffffff
je 0x4085ea
push eax
push 0
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.00409570
mov esi, eax
lea eax, [ebp - 0x184]
mov byte [ebp - 4], 0x1c
cmp eax, esi
je 0x4085d7
mov ecx, eax
call fcn.00402880
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x184], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x174], xmm0
mov word [esi], ax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x1d
call fcn.00402880
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x184]
mov dword [ebp - 0xe0], 0x50bf30
push eax
lea ecx, [ebp - 0xdc]
call fcn.00405530
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x13c]
call fcn.004097c0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x258]
call fcn.004094e0
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x24
call fcn.00402880
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x28
call fcn.00402880
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x2d
call fcn.00402880
mov byte [ebp - 4], 0x1b
call fcn.004ba660
test al, al
mov dword [ebp - 0x1d4], 0
mov ecx, 0x50bf28
mov dword [ebp - 0x1d0], 0
mov edx, 0x50bf48
mov dword [ebp - 0x1d4], 0
cmove edx, ecx
mov dword [ebp - 0x1d0], 7
mov ecx, edx
xor eax, eax
mov word [ebp - 0x1e4], ax
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4086b0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x1e4]
call fcn.004028e0
lea eax, [ebp - 0x1e4]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xe0], 0x50bf4c
call fcn.00405530
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x214]
call fcn.004097c0
lea eax, [ebp - 0x214]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x258]
call fcn.004094e0
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x35
call fcn.00402880
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x39
call fcn.00402880
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x3e
call fcn.00402880
mov byte [ebp - 4], 0x42
xor eax, eax
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x43
push eax
call fcn.004b6340
add esp, 4
mov dword [ebp - 0x158], str.process_info
lea eax, [ebp - 0x1cc]
lea ecx, [ebp - 0x154]
push eax
call fcn.00405530
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x44
push eax
lea ecx, [ebp - 0xf4]
call fcn.004097c0
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x258]
call fcn.004094e0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x47
call fcn.00402880
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x4b
call fcn.00402880
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x50
call fcn.00402880
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x43
call fcn.00468dc0
mov byte [ebp - 4], 0x54
xor ecx, ecx
movups xmm0, xmmword [eax]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
movups xmmword [ebp - 0x124], xmm0
mov dword [ebp - 0x128], str.src_pdt_ver
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0x114], xmm0
mov word [eax], cx
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [ebp - 0x16c]
call fcn.004097c0
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x258]
call fcn.004094e0
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x58
call fcn.00402880
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x5c
call fcn.00402880
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x61
call fcn.00402880
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x65
call fcn.00402880
mov byte [ebp - 4], 0x43
mov dword [ebp - 0xac], str.src_pdt_name
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa8], str.2345SafeCenter
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409850
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x69
push eax
lea ecx, [ebp - 0x258]
call fcn.004094e0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6b
call fcn.00402880
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x6f
call fcn.00402880
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 0x43
push eax
call fcn.004090b0
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x73
push eax
call fcn.004090b0
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x74
push eax
call fcn.004090b0
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x75
push eax
call fcn.0046fbc0
add esp, 4
test al, al
je 0x408984
lea eax, [ebp - 0xdc]
push eax
call fcn.0046fd40
add esp, 4
lea ecx, [ebp - 0xdc]
call fcn.0046f9b0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x76
call fcn.00402880
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x74
call fcn.00470190
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x7a
call fcn.00402880
mov byte [ebp - 4], 0x73
lea edx, [ebp - 0x22c]
cmp dword [ebp - 0x218], 8
mov dword [ebp - 0x144], 0
cmovae edx, dword [ebp - 0x22c]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 7
mov word [ebp - 0x154], ax
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x408a00
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x154]
call fcn.004028e0
push ecx
lea eax, [ebp - 0x2e8]
mov byte [ebp - 4], 0x7e
push eax
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x9c]
call fcn.0040ad80
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x7f
call fcn.00402880
mov byte [ebp - 4], 0x83
mov edi, 0xf
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], edi
mov dword [ebp - 0x1ec], 0
mov byte [ebp - 0x1fc], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x84
call fcn.0040b3f0
test al, al
je 0x408e3c
mov esi, dword [ebp - 0x9c]
cmp byte [esi + 0x1e8], 0
je 0x408e3c
push 1
push 0x50bfb8
lea ecx, [ebp - 0x1fc]
call fcn.004056d0
lea ecx, [ebp - 0x9c]
call fcn.0040d160
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x9c]
call fcn.0040e0c0
mov byte [ebp - 4], 0x85
cmp dword [ebp - 0xcc], 0
je 0x408e23
cmp dword [esi + 0x194], 8
lea eax, [esi + 0x180]
mov esi, eax
jb 0x408afa
mov esi, dword [eax]
cmp dword [eax + 0x10], 1
jne 0x408e18
mov ecx, 0x50bfbc
mov edx, 1
sub esi, ecx
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x408e18
add ecx, 2
sub edx, 1
jne 0x408b10
push 0x50bfc0
lea ecx, [ebp - 0x10c]
call fcn.00402800
lea eax, [ebp - 0x10c]
mov byte [ebp - 4], 0x86
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.004708c0
add esp, 0xc
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x89
call fcn.00402880
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x124]
push 0xf
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
push str.2345SoftMgr.exe
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
call fcn.004028e0
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x8d
call fcn.0047f2a0
mov byte [ebp - 0x329], al
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x8e
call fcn.00402880
cmp byte [ebp - 0x329], 0
mov byte [ebp - 4], 0x88
jne 0x408df6
mov byte [ebp - 4], 0x92
xor eax, eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 7
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x93
call fcn.00409fc0
lea eax, [ebp - 0x10c]
push eax
call fcn.0046fbc0
add esp, 4
test al, al
jne 0x408c43
lea ecx, [ebp - 0x10c]
call fcn.00470190
lea eax, [ebp - 0x154]
push eax
call fcn.0046fbc0
add esp, 4
test al, al
je 0x408c65
lea eax, [ebp - 0x154]
push eax
call fcn.0046fd40
add esp, 4
lea ecx, [ebp - 0x154]
call fcn.00470190
push 0x3c
lea eax, [ebp - 0x324]
push 0
push eax
call fcn.004bf410
add esp, 0xc
lea ecx, [ebp - 0x324]
call fcn.0047d610
mov byte [ebp - 4], 0x94
lea eax, [ebp - 0x154]
cmp dword [ebp - 0x140], 8
lea ecx, [ebp - 0xdc]
cmovae eax, dword [ebp - 0x154]
cmp dword [ebp - 0xc8], 8
cmovae ecx, dword [ebp - 0xdc]
cmp dword [ebp - 0x2ec], 0
push ecx
push eax
push ecx
lea ecx, [ebp - 0x324]
jl 0x408cd3
call fcn.0047da70
jmp 0x408cd8
call fcn.0047d900
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x324]
test al, al
jne 0x408cff
call fcn.0047d680
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x95
call fcn.00402880
jmp 0x408df2
call fcn.0047d680
push 0xf
xor eax, eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
lea ecx, [ebp - 0x124]
push str.2345SoftMgr.exe
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 7
mov word [ebp - 0x124], ax
call fcn.004028e0
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x99
call fcn.0047f2a0
mov byte [ebp - 0x329], al
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x9a
call fcn.00402880
cmp byte [ebp - 0x329], 0
mov byte [ebp - 4], 0x93
je 0x408d89
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x9e
call fcn.00402880
jmp 0x408df2
sub esp, 0x18
lea eax, [ebp - 0x10c]
mov ecx, esp
mov dword [ebp - 0xa8], esp
push eax
call fcn.00405530
sub esp, 0x18
mov byte [ebp - 4], 0xa2
lea eax, [ebp - 0x154]
mov dword [ebp - 0xa4], esp
mov ecx, esp
push eax
call fcn.00405530
mov ecx, dword [ebp - 0x334]
mov byte [ebp - 4], 0xa3
mov byte [ebp - 4], 0x93
call fcn.004091f0
test al, al
jne 0x408de3
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xa4
call fcn.00402880
jmp 0x408df2
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xa8
call fcn.00402880
mov byte [ebp - 4], 0x88
lea eax, [ebp - 0x154]
push eax
call fcn.0046fd40
add esp, 4
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0xac
call fcn.00402880
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x9c]
call fcn.0040df40
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xb0
call fcn.00402880
mov byte [ebp - 4], 0x84
mov edi, dword [ebp - 0x1e8]
mov byte [ebp - 4], 0xb4
cmp edi, 0x10
jb 0x408e76
mov ecx, dword [ebp - 0x1fc]
lea edx, [edi + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x408e6c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408fad
push edx
push ecx
call fcn.004bc9aa
add esp, 8
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0xb8
call fcn.00402880
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0xbc
call fcn.00402880
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0xc0
call fcn.00402880
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xc4
call fcn.00402880
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0xc8
call fcn.00402880
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xcc
call fcn.00402880
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0xd0
call fcn.00402880
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0xd4
call fcn.00402880
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0
call fcn.0040ad50
lea ecx, [ebp - 0x258]
mov dword [ebp - 4], 0xd8
call fcn.00409670
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xd9
call fcn.00402880
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xdd
call fcn.00402880
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0xe1
call fcn.00402880
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0xe5
call fcn.00402880
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0xe9
call fcn.00402880
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0xed
call fcn.00402880
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004bc969
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004c2549
int3