Function at 0x40de50
Capabilities:
Authenticate hmac
Encode data using base64
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x444a46
mov eax, dword fs:[0]
push eax
sub esp, 0x758
mov eax, dword [0x458648]
xor eax, esp
mov dword [esp + 0x754], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x458648]
xor eax, esp
push eax
lea eax, [esp + 0x76c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x77c]
xor ebx, ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x40], eax
mov ebp, 0xf
lea eax, [esp + 0x14]
mov dword [esp + 0x774], ebx
mov byte [esp + 0x14], 0x41
mov byte [esp + 0x15], bl
mov dword [esp + 0x64], ebp
mov dword [esp + 0x60], ebx
mov byte [esp + 0x50], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40dec4
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x54]
call fcn.00402f60
lea eax, [esp + 0x14]
mov dword [esp + 0x774], 1
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], bl
mov dword [esp + 0x25c], ebp
mov dword [esp + 0x258], ebx
mov byte [esp + 0x248], bl
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40df10
sub eax, esi
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x24c]
call fcn.00402f60
lea eax, [esp + 0x244]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 2
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 3
call fcn.004028e0
mov esi, 0x10
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 2
jb 0x40df84
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x43
mov byte [esp + 0x15], bl
mov dword [esp + 0x224], ebp
mov dword [esp + 0x220], ebx
mov byte [esp + 0x210], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40dfb0
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x214]
call fcn.00402f60
lea edx, [esp + 0x20c]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 4
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 5
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 4
jb 0x40e01f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x44
mov byte [esp + 0x15], bl
mov dword [esp + 0x1ec], ebp
mov dword [esp + 0x1e8], ebx
mov byte [esp + 0x1d8], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e044
sub eax, edx
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x1dc]
call fcn.00402f60
lea ecx, [esp + 0x1d4]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 6
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 7
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 6
jb 0x40e0b3
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x45
mov byte [esp + 0x15], bl
mov dword [esp + 0x1b4], ebp
mov dword [esp + 0x1b0], ebx
mov byte [esp + 0x1a0], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e0d8
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x1a4]
call fcn.00402f60
lea eax, [esp + 0x19c]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 8
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 9
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 8
jb 0x40e147
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x46
mov byte [esp + 0x15], bl
mov dword [esp + 0x17c], ebp
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e170
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x16c]
call fcn.00402f60
lea edx, [esp + 0x164]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0xa
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0xb
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0xa
jb 0x40e1df
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x47
mov byte [esp + 0x15], bl
mov dword [esp + 0x144], ebp
mov dword [esp + 0x140], ebx
mov byte [esp + 0x130], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e204
sub eax, edx
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x134]
call fcn.00402f60
lea ecx, [esp + 0x12c]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0xc
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0xd
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0xc
jb 0x40e273
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x48
mov byte [esp + 0x15], bl
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x108], ebx
mov byte [esp + 0xf8], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e298
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0xfc]
call fcn.00402f60
lea eax, [esp + 0xf4]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0xe
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0xf
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0xe
jb 0x40e307
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x49
mov byte [esp + 0x15], bl
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xc0], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e330
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0xc4]
call fcn.00402f60
lea edx, [esp + 0xbc]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x10
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x11
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x10
jb 0x40e39f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x4a
mov byte [esp + 0x15], bl
mov dword [esp + 0xb8], ebp
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e3c4
sub eax, edx
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0xa8]
call fcn.00402f60
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x12
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x13
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x12
jb 0x40e433
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x4b
mov byte [esp + 0x15], bl
mov dword [esp + 0x198], ebp
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e458
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x188]
call fcn.00402f60
lea eax, [esp + 0x180]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x14
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x15
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x14
jb 0x40e4c7
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x4c
mov byte [esp + 0x15], bl
mov dword [esp + 0x208], ebp
mov dword [esp + 0x204], ebx
mov byte [esp + 0x1f4], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e4f0
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x1f8]
call fcn.00402f60
lea edx, [esp + 0x1f0]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x16
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x17
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x16
jb 0x40e55f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x4d
mov byte [esp + 0x15], bl
mov dword [esp + 0x160], ebp
mov dword [esp + 0x15c], ebx
mov byte [esp + 0x14c], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e584
sub eax, edx
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x150]
call fcn.00402f60
lea ecx, [esp + 0x148]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x18
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x19
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x18
jb 0x40e5f3
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x4e
mov byte [esp + 0x15], bl
mov dword [esp + 0x240], ebp
mov dword [esp + 0x23c], ebx
mov byte [esp + 0x22c], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e618
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x230]
call fcn.00402f60
lea eax, [esp + 0x228]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x1a
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x1b
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x1a
jb 0x40e687
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x4f
mov byte [esp + 0x15], bl
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e6b0
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00402f60
lea edx, [esp + 0x84]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x1c
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x1d
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x1c
jb 0x40e71f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x50
mov byte [esp + 0x15], bl
mov dword [esp + 0x1d0], ebp
mov dword [esp + 0x1cc], ebx
mov byte [esp + 0x1bc], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e744
sub eax, edx
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x1c0]
call fcn.00402f60
lea ecx, [esp + 0x1b8]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x1e
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x1f
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x1e
jb 0x40e7b3
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x51
mov byte [esp + 0x15], bl
mov dword [esp + 0xf0], ebp
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e7d8
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0xe0]
call fcn.00402f60
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x20
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x21
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x20
jb 0x40e847
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x52
mov byte [esp + 0x15], bl
mov dword [esp + 0x278], ebp
mov dword [esp + 0x274], ebx
mov byte [esp + 0x264], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e870
sub eax, edx
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x268]
call fcn.00402f60
lea edx, [esp + 0x260]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x22
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x23
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x22
jb 0x40e8df
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x53
mov byte [esp + 0x15], bl
mov dword [esp + 0x294], ebp
mov dword [esp + 0x290], ebx
mov byte [esp + 0x280], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e904
sub eax, edx
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x284]
call fcn.00402f60
lea ecx, [esp + 0x27c]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x24
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x25
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x24
jb 0x40e973
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
mov byte [esp + 0x14], 0x54
mov byte [esp + 0x15], bl
mov dword [esp + 0x128], ebp
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x40e998
sub eax, edx
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x118]
call fcn.00402f60
lea eax, [esp + 0x110]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x26
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x27
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x26
jb 0x40ea07
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x718]
mov byte [esp + 0x18], 0x55
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x714]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x28
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x29
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x28
jb 0x40ea73
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x6e0]
mov byte [esp + 0x18], 0x56
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x6dc]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x2a
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x2b
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x2a
jb 0x40eadf
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x6a8]
mov byte [esp + 0x18], 0x57
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x6a4]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x2c
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x2d
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x2c
jb 0x40eb4b
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x670]
mov byte [esp + 0x18], 0x58
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x66c]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x2e
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x2f
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x2e
jb 0x40ebb7
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x638]
mov byte [esp + 0x18], 0x59
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x634]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x30
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x31
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x30
jb 0x40ec23
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x600]
mov byte [esp + 0x18], 0x5a
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x5fc]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x32
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x33
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x32
jb 0x40ec8f
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x5c8]
mov byte [esp + 0x18], 0x61
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x5c4]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x34
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x35
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x34
jb 0x40ecfb
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x590]
mov byte [esp + 0x18], 0x62
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x58c]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x36
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x37
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x36
jb 0x40ed67
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x558]
mov byte [esp + 0x18], 0x63
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x554]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x38
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x39
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x38
jb 0x40edd3
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x520]
mov byte [esp + 0x18], 0x64
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x51c]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x3a
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x3b
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x3a
jb 0x40ee3f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x4e8]
mov byte [esp + 0x18], 0x65
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x4e4]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x3c
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x3d
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x3c
jb 0x40eeab
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x4b0]
mov byte [esp + 0x18], 0x66
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x4ac]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x3e
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x3f
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x3e
jb 0x40ef17
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x478]
mov byte [esp + 0x18], 0x67
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x474]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x40
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x41
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x40
jb 0x40ef83
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x440]
mov byte [esp + 0x18], 0x68
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x43c]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x42
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x43
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x42
jb 0x40efef
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x408]
mov byte [esp + 0x18], 0x69
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x404]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x44
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x45
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x44
jb 0x40f05b
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x3d0]
mov byte [esp + 0x18], 0x6a
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x3cc]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x46
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x47
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x46
jb 0x40f0c7
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x398]
mov byte [esp + 0x18], 0x6b
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x394]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x48
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x49
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x48
jb 0x40f133
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x360]
mov byte [esp + 0x18], 0x6c
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x35c]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x4a
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x4b
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x4a
jb 0x40f19f
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x328]
mov byte [esp + 0x18], 0x6d
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x324]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x4c
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x4d
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x4c
jb 0x40f20b
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x18], 0x6e
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x2ec]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x4e
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x4f
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x4e
jb 0x40f277
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x2b8]
mov byte [esp + 0x18], 0x6f
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x2b4]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x50
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x51
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x50
jb 0x40f2e3
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x504]
mov byte [esp + 0x18], 0x70
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x500]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x52
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x53
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x52
jb 0x40f34f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x61c]
mov byte [esp + 0x18], 0x71
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x618]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x54
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x55
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x54
jb 0x40f3bb
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x4cc]
mov byte [esp + 0x18], 0x72
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x4c8]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x56
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x57
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x56
jb 0x40f427
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x6fc]
mov byte [esp + 0x18], 0x73
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x6f8]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x58
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x59
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x58
jb 0x40f493
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x494]
mov byte [esp + 0x18], 0x74
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x490]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x5a
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x5b
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x5a
jb 0x40f4ff
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x5e4]
mov byte [esp + 0x18], 0x75
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x5e0]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x5c
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x5d
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x5c
jb 0x40f56b
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x45c]
mov byte [esp + 0x18], 0x76
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x458]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x5e
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x5f
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x5e
jb 0x40f5d7
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x68c]
mov byte [esp + 0x18], 0x77
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x688]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x60
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x61
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x60
jb 0x40f643
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x424]
mov byte [esp + 0x18], 0x78
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x420]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x62
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x63
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x62
jb 0x40f6af
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x5ac]
mov byte [esp + 0x18], 0x79
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x5a8]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x64
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x65
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x64
jb 0x40f71b
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x3ec]
mov byte [esp + 0x18], 0x7a
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x3e8]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x66
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x67
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x66
jb 0x40f787
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x734]
mov byte [esp + 0x18], 0x30
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x730]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x68
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x69
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x68
jb 0x40f7f3
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x3b4]
mov byte [esp + 0x18], 0x31
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x3b0]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x6a
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x6b
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x6a
jb 0x40f85f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x574]
mov byte [esp + 0x18], 0x32
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x570]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x6c
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x6d
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x6c
jb 0x40f8cb
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x29c]
mov byte [esp + 0x18], 0x33
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x298]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x6e
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x6f
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x6e
jb 0x40f937
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x654]
mov byte [esp + 0x18], 0x34
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x650]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x70
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x71
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x70
jb 0x40f9a3
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x344]
mov byte [esp + 0x18], 0x35
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x72
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x73
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x72
jb 0x40fa0f
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x53c]
mov byte [esp + 0x18], 0x36
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x538]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x74
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x75
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x74
jb 0x40fa7b
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x30c]
mov byte [esp + 0x18], 0x37
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x308]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x76
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x77
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x76
jb 0x40fae7
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x6c4]
mov byte [esp + 0x18], 0x38
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x6c0]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x78
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x79
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x78
jb 0x40fb53
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x2d4]
mov byte [esp + 0x18], 0x39
mov byte [esp + 0x19], bl
call fcn.00403450
lea eax, [esp + 0x2d0]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x780], 0x7a
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x7b
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x7a
jb 0x40fbbf
mov eax, dword [esp + 0x1c]
push eax
call fcn.00413ce7
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x750]
mov byte [esp + 0x18], 0x2b
mov byte [esp + 0x19], bl
call fcn.00403450
lea edx, [esp + 0x74c]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x780], 0x7c
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x7d
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x7c
jb 0x40fc2b
mov edx, dword [esp + 0x1c]
push edx
call fcn.00413ce7
add esp, 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x37c]
mov byte [esp + 0x18], 0x2f
mov byte [esp + 0x19], bl
call fcn.00403450
lea ecx, [esp + 0x378]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x780], 0x7e
call fcn.004035f0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x780], 0x7f
call fcn.004028e0
cmp dword [esp + 0x30], esi
mov byte [esp + 0x774], 0x7e
jb 0x40fc97
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00413ce7
add esp, 4
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x88], ebx
mov byte [esp + 0x78], bl
call fcn.004028e0
mov eax, dword [esp + 0x40]
mov dword [eax + 0x18], ebp
mov dword [eax + 0x14], ebx
mov byte [esp + 0x774], 0x80
xor edi, edi
mov byte [eax + 4], bl
mov eax, dword [esp + 0x780]
mov eax, dword [eax + 0x14]
xor ebp, ebp
cmp eax, ebx
mov dword [esp + 0x48], 1
jbe 0x40fe7f
cmp ebp, eax
mov ecx, dword [esp + 0x780]
jbe 0x40fd04
call fcn.0042f9f1
mov ecx, dword [esp + 0x780]
cmp dword [ecx + 0x18], esi
jb 0x40fd0e
mov eax, dword [ecx + 4]
jmp 0x40fd11
lea eax, [ecx + 4]
mov al, byte [eax + ebp]
cmp al, 0x3d
je 0x40fdc7
mov byte [esp + edi + 0x38], al
add edi, 1
cmp edi, 4
jne 0x40fdb9
xor edi, edi
mov edi, edi
mov cl, byte [esp + edi + 0x38]
push 1
push ebx
lea edx, [esp + 0x3c]
mov byte [esp + 0x3c], cl
push edx
lea ecx, [esp + 0x74]
call fcn.00401e30
mov byte [esp + edi + 0x38], al
add edi, 1
cmp edi, 4
jl 0x40fd30
mov ecx, dword [esp + 0x38]
mov dl, cl
add dl, dl
add dl, dl
mov al, ch
shr al, 4
and al, 3
add al, dl
mov byte [esp + 0x3c], al
mov al, byte [esp + 0x3a]
mov dl, al
shr dl, 2
mov cl, ch
shl al, 6
add al, byte [esp + 0x3b]
and dl, 0xf
shl cl, 4
xor dl, cl
mov byte [esp + 0x3d], dl
mov byte [esp + 0x3e], al
xor edi, edi
mov al, byte [esp + edi + 0x3c]
mov byte [esp + 0x44], al
mov ecx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push 1
call fcn.00402830
add edi, 1
cmp edi, 3
jl 0x40fd90
mov ecx, dword [esp + 0x780]
xor edi, edi
mov eax, dword [ecx + 0x14]
add ebp, 1
cmp ebp, eax
jb 0x40fd04
cmp edi, ebx
je 0x40fe7f
cmp edi, 4
jge 0x40fdea
mov edx, 4
sub edx, edi
push edx
lea eax, [esp + edi + 0x3c]
push ebx
push eax
call fcn.0042f0b0
add esp, 0xc
xor ebp, ebp
lea esp, [esp]
mov al, byte [esp + ebp + 0x38]
push 1
push ebx
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x74]
mov byte [esp + 0x40], al
call fcn.00401e30
mov byte [esp + ebp + 0x38], al
add ebp, 1
cmp ebp, 4
jl 0x40fdf0
mov ecx, dword [esp + 0x38]
mov al, cl
add al, al
mov dl, ch
shr dl, 4
and dl, 3
add al, al
add dl, al
mov al, byte [esp + 0x3a]
mov byte [esp + 0x3c], dl
mov dl, al
shr dl, 2
mov cl, ch
shl al, 6
add al, byte [esp + 0x3b]
and dl, 0xf
shl cl, 4
xor dl, cl
add edi, 0xffffffff
xor ebp, ebp
cmp edi, ebx
mov byte [esp + 0x3d], dl
mov byte [esp + 0x3e], al
jle 0x40fe7f
jmp 0x40fe60
mov al, byte [esp + ebp + 0x3c]
mov byte [esp + 0x44], al
mov ecx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push 1
call fcn.00402830
add ebp, 1
cmp ebp, edi
jl 0x40fe60
cmp dword [esp + 0x80], esi
jb 0x40fe95
mov edx, dword [esp + 0x6c]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x390], esi
mov edi, 0xf
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
jb 0x40fec2
mov eax, dword [esp + 0x37c]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x764], esi
mov dword [esp + 0x390], edi
mov dword [esp + 0x38c], ebx
mov byte [esp + 0x37c], bl
jb 0x40fef0
mov ecx, dword [esp + 0x750]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x2e8], esi
mov dword [esp + 0x764], edi
mov dword [esp + 0x760], ebx
mov byte [esp + 0x750], bl
jb 0x40ff1e
mov edx, dword [esp + 0x2d4]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x6d8], esi
mov dword [esp + 0x2e8], edi
mov dword [esp + 0x2e4], ebx
mov byte [esp + 0x2d4], bl
jb 0x40ff4c
mov eax, dword [esp + 0x6c4]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x320], esi
mov dword [esp + 0x6d8], edi
mov dword [esp + 0x6d4], ebx
mov byte [esp + 0x6c4], bl
jb 0x40ff7a
mov ecx, dword [esp + 0x30c]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x550], esi
mov dword [esp + 0x320], edi
mov dword [esp + 0x31c], ebx
mov byte [esp + 0x30c], bl
jb 0x40ffa8
mov edx, dword [esp + 0x53c]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x358], esi
mov dword [esp + 0x550], edi
mov dword [esp + 0x54c], ebx
mov byte [esp + 0x53c], bl
jb 0x40ffd6
mov eax, dword [esp + 0x344]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x668], esi
mov dword [esp + 0x358], edi
mov dword [esp + 0x354], ebx
mov byte [esp + 0x344], bl
jb 0x410004
mov ecx, dword [esp + 0x654]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x2b0], esi
mov dword [esp + 0x668], edi
mov dword [esp + 0x664], ebx
mov byte [esp + 0x654], bl
jb 0x410032
mov edx, dword [esp + 0x29c]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x588], esi
mov dword [esp + 0x2b0], edi
mov dword [esp + 0x2ac], ebx
mov byte [esp + 0x29c], bl
jb 0x410060
mov eax, dword [esp + 0x574]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x3c8], esi
mov dword [esp + 0x588], edi
mov dword [esp + 0x584], ebx
mov byte [esp + 0x574], bl
jb 0x41008e
mov ecx, dword [esp + 0x3b4]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x748], esi
mov dword [esp + 0x3c8], edi
mov dword [esp + 0x3c4], ebx
mov byte [esp + 0x3b4], bl
jb 0x4100bc
mov edx, dword [esp + 0x734]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x400], esi
mov dword [esp + 0x748], edi
mov dword [esp + 0x744], ebx
mov byte [esp + 0x734], bl
jb 0x4100ea
mov eax, dword [esp + 0x3ec]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x5c0], esi
mov dword [esp + 0x400], edi
mov dword [esp + 0x3fc], ebx
mov byte [esp + 0x3ec], bl
jb 0x410118
mov ecx, dword [esp + 0x5ac]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x438], esi
mov dword [esp + 0x5c0], edi
mov dword [esp + 0x5bc], ebx
mov byte [esp + 0x5ac], bl
jb 0x410146
mov edx, dword [esp + 0x424]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x6a0], esi
mov dword [esp + 0x438], edi
mov dword [esp + 0x434], ebx
mov byte [esp + 0x424], bl
jb 0x410174
mov eax, dword [esp + 0x68c]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x470], esi
mov dword [esp + 0x6a0], edi
mov dword [esp + 0x69c], ebx
mov byte [esp + 0x68c], bl
jb 0x4101a2
mov ecx, dword [esp + 0x45c]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x5f8], esi
mov dword [esp + 0x470], edi
mov dword [esp + 0x46c], ebx
mov byte [esp + 0x45c], bl
jb 0x4101d0
mov edx, dword [esp + 0x5e4]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x4a8], esi
mov dword [esp + 0x5f8], edi
mov dword [esp + 0x5f4], ebx
mov byte [esp + 0x5e4], bl
jb 0x4101fe
mov eax, dword [esp + 0x494]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x710], esi
mov dword [esp + 0x4a8], edi
mov dword [esp + 0x4a4], ebx
mov byte [esp + 0x494], bl
jb 0x41022c
mov ecx, dword [esp + 0x6fc]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x4e0], esi
mov dword [esp + 0x710], edi
mov dword [esp + 0x70c], ebx
mov byte [esp + 0x6fc], bl
jb 0x41025a
mov edx, dword [esp + 0x4cc]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x630], esi
mov dword [esp + 0x4e0], edi
mov dword [esp + 0x4dc], ebx
mov byte [esp + 0x4cc], bl
jb 0x410288
mov eax, dword [esp + 0x61c]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x518], esi
mov dword [esp + 0x630], edi
mov dword [esp + 0x62c], ebx
mov byte [esp + 0x61c], bl
jb 0x4102b6
mov ecx, dword [esp + 0x504]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x2cc], esi
mov dword [esp + 0x518], edi
mov dword [esp + 0x514], ebx
mov byte [esp + 0x504], bl
jb 0x4102e4
mov edx, dword [esp + 0x2b8]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x304], esi
mov dword [esp + 0x2cc], edi
mov dword [esp + 0x2c8], ebx
mov byte [esp + 0x2b8], bl
jb 0x410312
mov eax, dword [esp + 0x2f0]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x33c], esi
mov dword [esp + 0x304], edi
mov dword [esp + 0x300], ebx
mov byte [esp + 0x2f0], bl
jb 0x410340
mov ecx, dword [esp + 0x328]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x374], esi
mov dword [esp + 0x33c], edi
mov dword [esp + 0x338], ebx
mov byte [esp + 0x328], bl
jb 0x41036e
mov edx, dword [esp + 0x360]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x3ac], esi
mov dword [esp + 0x374], edi
mov dword [esp + 0x370], ebx
mov byte [esp + 0x360], bl
jb 0x41039c
mov eax, dword [esp + 0x398]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x3e4], esi
mov dword [esp + 0x3ac], edi
mov dword [esp + 0x3a8], ebx
mov byte [esp + 0x398], bl
jb 0x4103ca
mov ecx, dword [esp + 0x3d0]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x41c], esi
mov dword [esp + 0x3e4], edi
mov dword [esp + 0x3e0], ebx
mov byte [esp + 0x3d0], bl
jb 0x4103f8
mov edx, dword [esp + 0x408]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x454], esi
mov dword [esp + 0x41c], edi
mov dword [esp + 0x418], ebx
mov byte [esp + 0x408], bl
jb 0x410426
mov eax, dword [esp + 0x440]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x48c], esi
mov dword [esp + 0x454], edi
mov dword [esp + 0x450], ebx
mov byte [esp + 0x440], bl
jb 0x410454
mov ecx, dword [esp + 0x478]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x4c4], esi
mov dword [esp + 0x48c], edi
mov dword [esp + 0x488], ebx
mov byte [esp + 0x478], bl
jb 0x410482
mov edx, dword [esp + 0x4b0]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x4fc], esi
mov dword [esp + 0x4c4], edi
mov dword [esp + 0x4c0], ebx
mov byte [esp + 0x4b0], bl
jb 0x4104b0
mov eax, dword [esp + 0x4e8]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x534], esi
mov dword [esp + 0x4fc], edi
mov dword [esp + 0x4f8], ebx
mov byte [esp + 0x4e8], bl
jb 0x4104de
mov ecx, dword [esp + 0x520]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x56c], esi
mov dword [esp + 0x534], edi
mov dword [esp + 0x530], ebx
mov byte [esp + 0x520], bl
jb 0x41050c
mov edx, dword [esp + 0x558]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x5a4], esi
mov dword [esp + 0x56c], edi
mov dword [esp + 0x568], ebx
mov byte [esp + 0x558], bl
jb 0x41053a
mov eax, dword [esp + 0x590]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x5dc], esi
mov dword [esp + 0x5a4], edi
mov dword [esp + 0x5a0], ebx
mov byte [esp + 0x590], bl
jb 0x410568
mov ecx, dword [esp + 0x5c8]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x614], esi
mov dword [esp + 0x5dc], edi
mov dword [esp + 0x5d8], ebx
mov byte [esp + 0x5c8], bl
jb 0x410596
mov edx, dword [esp + 0x600]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x64c], esi
mov dword [esp + 0x614], edi
mov dword [esp + 0x610], ebx
mov byte [esp + 0x600], bl
jb 0x4105c4
mov eax, dword [esp + 0x638]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x684], esi
mov dword [esp + 0x64c], edi
mov dword [esp + 0x648], ebx
mov byte [esp + 0x638], bl
jb 0x4105f2
mov ecx, dword [esp + 0x670]
push ecx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x6bc], esi
mov dword [esp + 0x684], edi
mov dword [esp + 0x680], ebx
mov byte [esp + 0x670], bl
jb 0x410620
mov edx, dword [esp + 0x6a8]
push edx
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x6f4], esi
mov dword [esp + 0x6bc], edi
mov dword [esp + 0x6b8], ebx
mov byte [esp + 0x6a8], bl
jb 0x41064e
mov eax, dword [esp + 0x6e0]
push eax
call fcn.00413ce7
add esp, 4
cmp dword [esp + 0x72c], esi
mov dword [esp + 0x6f4], edi
mov dword [esp + 0x6f0], ebx
mov byte [esp + 0x6e0], bl
jb 0x41067c