Function at 0x413580
Capabilities:
Check for debugger via api
Encode data using xor
Execute command
Set console window title
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x441a02
mov eax, dword fs:[0]
push eax
sub esp, 0x180
mov eax, dword [0x45500c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push str.Russian
push 0
mov dword [ebp - 0x184], eax
mov dword [ebp - 4], 0
call dword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
mov edi, dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
add esp, 8
call edi
test eax, eax
jne 0x413fa5
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x413fa5
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x41363a
push 0x10
push 0x44727c
push 0x447298
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043f497
mov esp, ebp
pop ebp
ret
call edi
test eax, eax
jne 0x413fa5
push eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x413fa5
cmp dword [0x4583a0], 8
mov eax, 0x45838c
cmovae eax, dword [0x45838c]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push 0x4482c0
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x78], xmm0
call fcn.0040b880
push 0x1bb
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
mov byte [ebp - 0x16d], 1
mov dword [ebp - 0x178], ecx
mov eax, SysReAllocString
mov edx, dword [0x4583f0]
sub eax, edx
mov dword [ebp - 0x174], esp
cmp eax, 0x17
jb 0x41413b
cmp dword [0x4583f4], 8
mov eax, 0x4583e0
push 0x17
cmovae eax, dword [0x4583e0]
push str._getActualClientVersion
push edx
push eax
push ecx
push dword [ebp - 0x178]
call fcn.0040c4a0
sub esp, 0x18
mov byte [ebp - 4], 2
lea eax, [ebp - 0x78]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.00409d50
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
push 0x4583bc
call fcn.00409d50
mov dl, byte [ebp - 0x16d]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.00423610
mov byte [ebp - 4], 0
add esp, 0x4c
mov ecx, dword [ebp - 0x64]
cmp ecx, 8
jb 0x41376d
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x413763
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4137d4
push ecx
push edx
call fcn.0043f923
add esp, 8
cmp dword [ebp - 0x4c], 0x10
lea eax, [ebp - 0x60]
push dword [ebp - 0x50]
cmovae eax, dword [ebp - 0x60]
setae byte [ebp - 0x16d]
cmp dword [0x4583b8], 0x10
mov ecx, 0x4583a4
mov edx, dword [0x4583b4]
cmovae ecx, dword [0x4583a4]
push eax
call fcn.0040d920
add esp, 8
mov byte [ebp - 0x17d], al
cmp byte [ebp - 0x16d], 0
je 0x4137ea
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4137da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4137da
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043f923
mov al, byte [ebp - 0x17d]
add esp, 8
test al, al
jne 0x4137ff
push 0x10
push 0x44727c
push 0x4472f8
jmp 0x413614
call edi
test eax, eax
jne 0x413fa5
push eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x413fa5
xorps xmm0, xmm0
mov dword [ebp - 0x38], eax
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], al
mov byte [ebp - 4], 4
xor edx, edx
movaps xmm0, xmmword [0x44a030]
movups xmmword [ebp - 0x2c], xmm0
mov byte [ebp - 0x1c], al
mov al, byte [ebp - 0x2c]
xor byte [ebp + edx - 0x2b], al
inc edx
cmp edx, 0xf
jb 0x413843
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0x2b]
mov byte [ebp - 0x1c], 0
call fcn.00401fc0
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0xa
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea edx, [ebp - 0x48]
mov ecx, esi
call fcn.0040cc80
add esp, 4
mov eax, 0x45838c
cmp dword [0x4583a0], 8
cmovae eax, dword [0x45838c]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
mov ecx, dword [ebp - 0x38]
cmovae eax, dword [ebp - 0x48]
mov dword [ebp - 0x174], eax
test ecx, ecx
je 0x4138d1
push ecx
push 0x5f
push eax
call sub.VCRUNTIME140.dll_memchr
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4138d1
sub esi, dword [ebp - 0x174]
jmp 0x4138d4
or esi, 0xffffffff
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x184]
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov eax, dword [ebp - 0x18]
and eax, 0xffffffbf
or eax, 0x80
push eax
push dword [ebp - 0x184]
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
call edi
test eax, eax
jne 0x413fa5
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x413fa5
cmp esi, 0xffffffff
je 0x41406f
cmp dword [ebp - 0x38], esi
mov ecx, esi
mov dword [ebp - 0x50], eax
xorps xmm0, xmm0
cmovb ecx, dword [ebp - 0x38]
cmp dword [ebp - 0x34], 0x10
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x60]
movups xmmword [ebp - 0x60], xmm0
call fcn.004018f0
mov byte [ebp - 4], 5
inc esi
mov eax, dword [ebp - 0x38]
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
cmp eax, esi
jb 0x414140
sub eax, esi
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push ecx
add eax, esi
lea ecx, [ebp - 0x30]
push eax
call fcn.004018f0
mov byte [ebp - 4], 6
call edi
test eax, eax
jne 0x413fa5
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x413fa5
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 7
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileW]
test eax, eax
jne 0x413aa6
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Error_parsing_system_HWID
call fcn.00401fc0
push 0x40b340
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.PAUSE
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x413a35
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413a2b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413f9f
push ecx
push edx
call fcn.0043f923
add esp, 8
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x413a69
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413a5f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413f9f
push ecx
push edx
call fcn.0043f923
add esp, 8
mov ecx, dword [ebp - 0x34]
cmp ecx, 0x10
jb 0x41361c
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413a97
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413f9f
push ecx
push edx
call fcn.0043f923
add esp, 8
jmp 0x41361c
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x78], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x413ac4
sub ecx, edx
lea eax, [ebp - 0x168]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x78]
call fcn.0040b880
sub esp, 0x18
mov byte [ebp - 4], 8
lea edx, [ebp - 0x78]
mov dword [ebp - 0x17c], esp
mov ecx, esp
call fcn.0043e3d0
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp - 0x30]
mov dword [ebp - 0x178], esp
mov ecx, esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov byte [ebp - 4], 8
call fcn.00418160
add esp, 0x48
mov dword [ebp - 0x174], eax
test eax, eax
jne 0x413b9b
push str.PAUSE
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [ebp - 0x64]
add esp, 4
cmp ecx, 8
jb 0x413b82
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x413b78
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413ee9
push ecx
push edx
call fcn.0043f923
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
jmp 0x413a01
call edi
test eax, eax
jne 0x413fa5
push eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
test eax, eax
jne 0x413fa5
push 0x74
call fcn.0043f6a2
mov esi, eax
add esp, 4
mov dword [ebp - 0x17c], esi
push 0x74
push 0
push esi
mov byte [ebp - 4], 0xb
call sub.VCRUNTIME140.dll_memset
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x178], esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov ecx, esi
mov byte [ebp - 4], 0xb
call fcn.004060f0
mov ecx, eax
mov byte [ebp - 4], 8
mov eax, dword [ecx]
call dword [eax]
push 0x74
call fcn.0043f6a2
mov esi, eax
add esp, 4
mov dword [ebp - 0x17c], esi
push 0x74
push 0
push esi
mov byte [ebp - 4], 0xd
call sub.VCRUNTIME140.dll_memset
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x178], esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.0043ea00
mov ecx, eax
mov byte [ebp - 4], 8
mov eax, dword [ecx]
call dword [eax]
mov edi, dword [ebp - 0x174]
cmp byte [edi + 1], 0
je 0x413d49
push 0x74
call fcn.0043f6a2
mov esi, eax
add esp, 4
mov dword [ebp - 0x17c], esi
push 0x74
push 0
push esi
mov byte [ebp - 4], 0xf
call sub.VCRUNTIME140.dll_memset
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x178], esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov ecx, esi
mov byte [ebp - 4], 0xf
call fcn.00414150
mov ecx, eax
mov byte [ebp - 4], 8
mov eax, dword [ecx]
call dword [eax]
push 0x74
call fcn.0043f6a2
mov esi, eax
add esp, 4
mov dword [ebp - 0x17c], esi
push 0x74
push 0
push esi
mov byte [ebp - 4], 0x11
call sub.VCRUNTIME140.dll_memset
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x178], esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov ecx, esi
mov byte [ebp - 4], 0x11
call fcn.00435320
mov esi, eax
mov byte [ebp - 4], 8
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.00406220
push 0x74
push esi
call fcn.0043f923
add esp, 8
jmp 0x413d66
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, 0x447380
call fcn.0040b110
push 0x40b310
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
cmp byte [edi], 0
je 0x413e3b
push 0x74
call fcn.0043f6a2
mov esi, eax
add esp, 4
mov dword [ebp - 0x17c], esi
push 0x74
push 0
push esi
mov byte [ebp - 4], 0x13
call sub.VCRUNTIME140.dll_memset
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x178], esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov ecx, esi
mov byte [ebp - 4], 0x13
call fcn.00436fc0
mov ecx, eax
mov byte [ebp - 4], 8
mov eax, dword [ecx]
call dword [eax]
push 0x74
call fcn.0043f6a2
mov esi, eax
add esp, 4
mov dword [ebp - 0x17c], esi
push 0x74
push 0
push esi
mov byte [ebp - 4], 0x15
call sub.VCRUNTIME140.dll_memset
sub esp, 0xc
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x178], esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov ecx, esi
mov byte [ebp - 4], 0x15
call fcn.0043a1d0
mov esi, eax
mov byte [ebp - 4], 8
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.00406220
push 0x74
push esi
call fcn.0043f923
add esp, 8
jmp 0x413e58
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, 0x4473e8
call fcn.0040b110
push 0x40b310
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 2
push edi
call fcn.0043f923
sub esp, 0x10
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x17c], esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.0040a130
mov byte [ebp - 4], 8
call fcn.00419ef0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
add esp, 0x30
mov edx, 0x447454
call fcn.0040b110
push 0x40b310
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push str.PAUSE
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [ebp - 0x64]
add esp, 4
cmp ecx, 8
jb 0x413ef9
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x413eef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413eef
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043f923
add esp, 8
mov ecx, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
cmp ecx, 0x10
jb 0x413f3d
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413f33
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413f9f
push ecx
push edx
call fcn.0043f923
add esp, 8
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x413f6d
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413f63
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413f9f
push ecx
push edx
call fcn.0043f923
add esp, 8
mov ecx, dword [ebp - 0x34]
cmp ecx, 0x10
jb 0x41361c
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x413a97
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x413a97
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, 0x44748c
call fcn.0040b110
push 0x40b310
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
jmp 0x413f6d
call fcn.00401560
call fcn.0040a9b0
int3