Function at 0x401490
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x41ddaa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x678
push ebx
lea eax, [esp + 0x85]
push esi
xor ebx, ebx
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x90], ebx
mov byte [esp + 0xe], 0x61
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov dword [esp + 0x688], 1
push ecx
lea ecx, [esp + 0x10]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x18]
call fcn.0040b050
lea edx, [esp + 0x88]
lea ecx, [esp + 0x650]
push edx
mov byte [esp + 0xe], 0x32
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x650]
push eax
mov byte [esp + 0x68c], 2
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x65c]
call fcn.0040b050
lea ecx, [esp + 0x650]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 3
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 2
call fcn.0040b010
lea ecx, [esp + 0x87]
mov byte [esp + 0xa], 0x56
push ecx
lea ecx, [esp + 0x634]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x630]
push edx
mov byte [esp + 0x68c], 4
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x63c]
call fcn.0040b050
lea eax, [esp + 0x630]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 5
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 4
call fcn.0040b010
lea eax, [esp + 0x8b]
lea ecx, [esp + 0x610]
push eax
mov byte [esp + 0xe], 0x79
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 6
push ecx
lea ecx, [esp + 0x614]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x61c]
call fcn.0040b050
lea edx, [esp + 0x610]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 7
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 6
call fcn.0040b010
lea edx, [esp + 0x2e]
lea ecx, [esp + 0x5f0]
push edx
mov byte [esp + 0xe], 0x62
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x5f0]
push eax
mov byte [esp + 0x68c], 8
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x5fc]
call fcn.0040b050
lea ecx, [esp + 0x5f0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 9
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 8
call fcn.0040b010
lea ecx, [esp + 0x74]
mov byte [esp + 0xa], 0x6d
push ecx
lea ecx, [esp + 0x5d4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x5d0]
push edx
mov byte [esp + 0x68c], 0xa
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x5dc]
call fcn.0040b050
lea eax, [esp + 0x5d0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xb
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xa
call fcn.0040b010
lea eax, [esp + 0x30]
lea ecx, [esp + 0x5b0]
push eax
mov byte [esp + 0xe], 0x56
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0xc
push ecx
lea ecx, [esp + 0x5b4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x5bc]
call fcn.0040b050
lea edx, [esp + 0x5b0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xd
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xc
call fcn.0040b010
lea edx, [esp + 0x5e]
lea ecx, [esp + 0x590]
push edx
mov byte [esp + 0xe], 0x73
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x590]
push eax
mov byte [esp + 0x68c], 0xe
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x59c]
call fcn.0040b050
lea ecx, [esp + 0x590]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xf
call fcn.0040b020
mov byte [esp + 0x688], 0xe
lea ecx, [esp + 0x1c]
call fcn.0040b010
lea ecx, [esp + 0x32]
mov byte [esp + 0xa], 0x4d
push ecx
lea ecx, [esp + 0x574]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x570]
push edx
mov byte [esp + 0x68c], 0x10
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x57c]
call fcn.0040b050
lea eax, [esp + 0x570]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x11
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x10
call fcn.0040b010
lea eax, [esp + 0x80]
lea ecx, [esp + 0x550]
push eax
mov byte [esp + 0xe], 0x7a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x12
push ecx
lea ecx, [esp + 0x554]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x55c]
call fcn.0040b050
lea edx, [esp + 0x550]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x13
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x12
call fcn.0040b010
lea edx, [esp + 0x34]
lea ecx, [esp + 0x530]
push edx
mov byte [esp + 0xe], 0x49
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x530]
push eax
mov byte [esp + 0x68c], 0x14
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x53c]
call fcn.0040b050
lea ecx, [esp + 0x530]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x15
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x14
call fcn.0040b010
lea ecx, [esp + 0x60]
mov byte [esp + 0xa], 0x75
push ecx
lea ecx, [esp + 0x514]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x510]
push edx
mov byte [esp + 0x68c], 0x16
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x51c]
call fcn.0040b050
lea eax, [esp + 0x510]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x17
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x16
call fcn.0040b010
lea eax, [esp + 0x36]
lea ecx, [esp + 0x4f0]
push eax
mov byte [esp + 0xe], 0x5a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x18
push ecx
lea ecx, [esp + 0x4f4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x4fc]
call fcn.0040b050
lea edx, [esp + 0x4f0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x19
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x18
call fcn.0040b010
mov byte [esp + 0xa], 0x47
lea edx, [esp + 0x76]
lea ecx, [esp + 0x4d0]
push edx
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x4d0]
push eax
mov byte [esp + 0x68c], 0x1a
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x4dc]
call fcn.0040b050
lea ecx, [esp + 0x4d0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x1b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x1a
call fcn.0040b010
lea ecx, [esp + 0x38]
mov byte [esp + 0xa], 0x78
push ecx
lea ecx, [esp + 0x4b4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x4b0]
push edx
mov byte [esp + 0x68c], 0x1c
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x4bc]
call fcn.0040b050
lea eax, [esp + 0x4b0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x1d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x1c
call fcn.0040b010
lea eax, [esp + 0x62]
lea ecx, [esp + 0x490]
push eax
mov byte [esp + 0xe], 0x73
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x1e
push ecx
lea ecx, [esp + 0x494]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x49c]
call fcn.0040b050
lea edx, [esp + 0x490]
push edx
lea eax, [esp + 0x10]
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x1f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x1e
call fcn.0040b010
lea edx, [esp + 0x3a]
lea ecx, [esp + 0x470]
push edx
mov byte [esp + 0xe], 0x4c
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x470]
push eax
mov byte [esp + 0x68c], 0x20
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x47c]
call fcn.0040b050
lea ecx, [esp + 0x470]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x21
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x20
call fcn.0040b010
lea ecx, [esp + 0x86]
mov byte [esp + 0xa], 0x45
push ecx
lea ecx, [esp + 0x454]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x450]
push edx
mov byte [esp + 0x68c], 0x22
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x45c]
call fcn.0040b050
lea eax, [esp + 0x450]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x23
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x22
call fcn.0040b010
mov byte [esp + 0xa], 0x5a
mov byte [esp + 0xb], bl
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x434]
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x24
push ecx
lea ecx, [esp + 0x434]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x43c]
call fcn.0040b050
lea edx, [esp + 0x430]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x25
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x24
call fcn.0040b010
lea edx, [esp + 0x64]
lea ecx, [esp + 0x410]
push edx
mov byte [esp + 0xe], 0x70
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x410]
push eax
mov byte [esp + 0x68c], 0x26
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x41c]
call fcn.0040b050
lea ecx, [esp + 0x410]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x27
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x26
call fcn.0040b010
lea ecx, [esp + 0x3e]
mov byte [esp + 0xa], 0x62
push ecx
lea ecx, [esp + 0x3f4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x3f0]
push edx
mov byte [esp + 0x68c], 0x28
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x3fc]
call fcn.0040b050
lea eax, [esp + 0x3f0]
lea ecx, [esp + 0xc]
push eax
push ecx
lea edx, [esp + 0x24]
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x29
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x28
call fcn.0040b010
lea eax, [esp + 0x78]
lea ecx, [esp + 0x3d0]
push eax
mov byte [esp + 0xe], 0x6d
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x2a
push ecx
lea ecx, [esp + 0x3d4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x3dc]
call fcn.0040b050
lea edx, [esp + 0x3d0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x2b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x2a
call fcn.0040b010
lea edx, [esp + 0x40]
lea ecx, [esp + 0x3b0]
push edx
mov byte [esp + 0xe], 0x52
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x3b0]
push eax
mov byte [esp + 0x68c], 0x2c
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x3bc]
call fcn.0040b050
lea ecx, [esp + 0x3b0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x2d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x2c
call fcn.0040b010
lea ecx, [esp + 0x66]
mov byte [esp + 0xa], 0x53
push ecx
mov byte [esp + 0xf], bl
lea ecx, [esp + 0x394]
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x390]
push edx
mov byte [esp + 0x68c], 0x2e
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x39c]
call fcn.0040b050
lea eax, [esp + 0x390]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x2f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x2e
call fcn.0040b010
lea eax, [esp + 0x42]
lea ecx, [esp + 0x370]
push eax
mov byte [esp + 0xe], 0x5a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x30
push ecx
lea ecx, [esp + 0x374]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x37c]
call fcn.0040b050
lea edx, [esp + 0x370]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x31
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x30
call fcn.0040b010
lea edx, [esp + 0x82]
lea ecx, [esp + 0x350]
push edx
mov byte [esp + 0xe], 0x58
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x350]
push eax
mov byte [esp + 0x68c], 0x32
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x35c]
call fcn.0040b050
lea ecx, [esp + 0x350]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x33
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x32
call fcn.0040b010
lea ecx, [esp + 0x44]
mov byte [esp + 0xa], 0x4e
push ecx
lea ecx, [esp + 0x334]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x330]
push edx
mov byte [esp + 0x68c], 0x34
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x33c]
call fcn.0040b050
lea eax, [esp + 0x330]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x35
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x34
call fcn.0040b010
lea eax, [esp + 0x68]
lea ecx, [esp + 0x310]
push eax
mov byte [esp + 0xe], 0x76
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x36
push ecx
lea ecx, [esp + 0x314]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x31c]
call fcn.0040b050
lea edx, [esp + 0x310]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x37
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x36
call fcn.0040b010
lea edx, [esp + 0x46]
lea ecx, [esp + 0x2f0]
push edx
mov byte [esp + 0xe], 0x64
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x2f0]
push eax
mov byte [esp + 0x68c], 0x38
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x2fc]
call fcn.0040b050
lea ecx, [esp + 0x2f0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x39
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x38
call fcn.0040b010
lea ecx, [esp + 0x7a]
mov byte [esp + 0xa], 0x58
push ecx
lea ecx, [esp + 0x2d4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x2d0]
push edx
mov byte [esp + 0x68c], 0x3a
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x2dc]
call fcn.0040b050
lea eax, [esp + 0x2d0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x3b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x3a
call fcn.0040b010
lea eax, [esp + 0x48]
lea ecx, [esp + 0x2b0]
push eax
mov byte [esp + 0xe], 0x4a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x3c
push ecx
lea ecx, [esp + 0x2b4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x2bc]
call fcn.0040b050
lea edx, [esp + 0x2b0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x3d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x3c
call fcn.0040b010
lea edx, [esp + 0x6a]
lea ecx, [esp + 0x290]
push edx
mov byte [esp + 0xe], 0x6a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x290]
push eax
mov byte [esp + 0x68c], 0x3e
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x29c]
call fcn.0040b050
lea ecx, [esp + 0x290]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x3f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x3e
call fcn.0040b010
lea ecx, [esp + 0x4a]
mov byte [esp + 0xa], 0x5a
push ecx
lea ecx, [esp + 0x274]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x270]
push edx
mov byte [esp + 0x68c], 0x40
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x27c]
call fcn.0040b050
lea eax, [esp + 0x270]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x41
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x40
call fcn.0040b010
lea eax, [esp + 0x8a]
lea ecx, [esp + 0x250]
push eax
mov byte [esp + 0xe], 0x55
mov byte [esp + 0xf], bl
call fcn.0040af90
mov byte [esp + 0x688], 0x42
lea ecx, [esp + 0xa]
push ecx
lea ecx, [esp + 0x254]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x25c]
call fcn.0040b050
lea edx, [esp + 0x250]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x43
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x42
call fcn.0040b010
lea edx, [esp + 0x4c]
lea ecx, [esp + 0x230]
push edx
mov byte [esp + 0xe], 0x45
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x230]
push eax
mov byte [esp + 0x68c], 0x44
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x23c]
call fcn.0040b050
lea ecx, [esp + 0x230]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x45
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x44
call fcn.0040b010
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa], 0x73
push ecx
lea ecx, [esp + 0x214]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x210]
push edx
mov byte [esp + 0x68c], 0x46
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x21c]
call fcn.0040b050
lea eax, [esp + 0x210]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
mov byte [esp + 0x688], 0x47
push eax
lea ecx, [esp + 0x10]
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x46
call fcn.0040b010
lea eax, [esp + 0x4e]
lea ecx, [esp + 0x1f0]
push eax
mov byte [esp + 0xe], 0x55
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x48
push ecx
lea ecx, [esp + 0x1f4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x1fc]
call fcn.0040b050
lea edx, [esp + 0x1f0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x49
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x48
call fcn.0040b010
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x1d0]
push edx
mov byte [esp + 0xe], 0x32
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x1d0]
push eax
mov byte [esp + 0x68c], 0x4a
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x1dc]
call fcn.0040b050
lea ecx, [esp + 0x1d0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x4b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x4a
call fcn.0040b010
lea ecx, [esp + 0x50]
mov byte [esp + 0xa], 0x6c
push ecx
lea ecx, [esp + 0x1b4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
mov byte [esp + 0x688], 0x4c
push edx
lea ecx, [esp + 0x1b4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x1bc]
call fcn.0040b050
lea eax, [esp + 0x1b0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x4d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x4c
call fcn.0040b010
lea eax, [esp + 0x6e]
lea ecx, [esp + 0x190]
push eax
mov byte [esp + 0xe], 0x36
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x4e
push ecx
lea ecx, [esp + 0x194]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x19c]
call fcn.0040b050
lea edx, [esp + 0x190]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x4f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x4e
call fcn.0040b010
lea edx, [esp + 0x52]
lea ecx, [esp + 0x170]
push edx
mov byte [esp + 0xe], 0x5a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x170]
push eax
mov byte [esp + 0x68c], 0x50
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x17c]
call fcn.0040b050
lea ecx, [esp + 0x170]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
mov byte [esp + 0x688], 0x51
push eax
lea ecx, [esp + 0x10]
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x50
call fcn.0040b010
lea ecx, [esp + 0x84]
mov byte [esp + 0xa], 0x57
push ecx
lea ecx, [esp + 0x154]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x150]
push edx
mov byte [esp + 0x68c], 0x52
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x15c]
call fcn.0040b050
lea eax, [esp + 0x150]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x53
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x52
call fcn.0040b010
lea eax, [esp + 0x54]
lea ecx, [esp + 0x130]
push eax
mov byte [esp + 0xe], 0x39
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x54
push ecx
lea ecx, [esp + 0x134]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x13c]
call fcn.0040b050
lea edx, [esp + 0x130]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x55
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x54
call fcn.0040b010
lea edx, [esp + 0x70]
lea ecx, [esp + 0x110]
push edx
mov byte [esp + 0xe], 0x6d
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x110]
push eax
mov byte [esp + 0x68c], 0x56
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x11c]
call fcn.0040b050
lea ecx, [esp + 0x110]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x57
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x56
call fcn.0040b010
lea ecx, [esp + 0x56]
mov byte [esp + 0xa], 0x55
push ecx
lea ecx, [esp + 0xf4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0xf0]
push edx
mov byte [esp + 0x68c], 0x58
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0xfc]
call fcn.0040b050
lea eax, [esp + 0xf0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x59
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x58
call fcn.0040b010
lea eax, [esp + 0x7e]
lea ecx, [esp + 0xd0]
push eax
mov byte [esp + 0xe], 0x6d
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x5a
push ecx
lea ecx, [esp + 0xd4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0xdc]
call fcn.0040b050
lea edx, [esp + 0xd0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x5b
call fcn.0040b020
mov byte [esp + 0x688], 0x5a
lea ecx, [esp + 0x1c]
call fcn.0040b010
lea edx, [esp + 0x58]
lea ecx, [esp + 0xb0]
push edx
mov byte [esp + 0xe], 0x56
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0xb0]
push eax
mov byte [esp + 0x68c], 0x5c
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0xbc]
call fcn.0040b050
lea ecx, [esp + 0xb0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x5d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x5c
call fcn.0040b010
lea ecx, [esp + 0x72]
mov byte [esp + 0xa], 0x7a
push ecx
lea ecx, [esp + 0x94]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x90]
push edx
mov byte [esp + 0x68c], 0x5e
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x9c]
call fcn.0040b050
lea eax, [esp + 0x90]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x5f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x5e
call fcn.0040b010
lea eax, [esp + 0x5a]
lea ecx, [esp + 0x380]
push eax
mov byte [esp + 0xe], 0x62
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x60
push ecx
lea ecx, [esp + 0x384]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x38c]
call fcn.0040b050
lea edx, [esp + 0x380]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x61
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x60
call fcn.0040b010
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x640]
push edx
mov byte [esp + 0xe], 0x33
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x640]
push eax
mov byte [esp + 0x68c], 0x62
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x64c]
call fcn.0040b050
lea ecx, [esp + 0x640]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x63
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x62
call fcn.0040b010
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa], 0x56
push ecx
lea ecx, [esp + 0x364]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x360]
push edx
mov byte [esp + 0x68c], 0x64
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x36c]
call fcn.0040b050
lea eax, [esp + 0x360]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x65
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x64
call fcn.0040b010
lea eax, [esp + 0x2d]
lea ecx, [esp + 0x4e0]
push eax
mov byte [esp + 0xe], 0x79
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x66
push ecx
lea ecx, [esp + 0x4e4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x4ec]
call fcn.0040b050
lea edx, [esp + 0x4e0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x67
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x66
call fcn.0040b010
lea edx, [esp + 0x2f]
lea ecx, [esp + 0x340]
push edx
mov byte [esp + 0xe], 0x59
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x340]
push eax
mov byte [esp + 0x68c], 0x68
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x34c]
call fcn.0040b050
lea ecx, [esp + 0x340]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x69
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x68
call fcn.0040b010
lea ecx, [esp + 0x31]
mov byte [esp + 0xa], 0x32
push ecx
lea ecx, [esp + 0x5a4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x5a0]
push edx
mov byte [esp + 0x68c], 0x6a
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x5ac]
call fcn.0040b050
lea eax, [esp + 0x5a0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x6b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x6a
call fcn.0040b010
lea eax, [esp + 0x33]
lea ecx, [esp + 0x320]
push eax
mov byte [esp + 0xe], 0x55
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x6c
push ecx
lea ecx, [esp + 0x324]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x32c]
call fcn.0040b050
lea edx, [esp + 0x320]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x6d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x6c
call fcn.0040b010
lea edx, [esp + 0x35]
lea ecx, [esp + 0x4c0]
push edx
mov byte [esp + 0xe], 0x73
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x4c0]
push eax
mov byte [esp + 0x68c], 0x6e
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x4cc]
call fcn.0040b050
lea ecx, [esp + 0x4c0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x6f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x6e
call fcn.0040b010
mov byte [esp + 0xa], 0x54
mov byte [esp + 0xb], bl
lea ecx, [esp + 0x37]
push ecx
lea ecx, [esp + 0x304]
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x300]
push edx
mov byte [esp + 0x68c], 0x70
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x30c]
call fcn.0040b050
lea eax, [esp + 0x300]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x71
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x70
call fcn.0040b010
lea eax, [esp + 0x39]
lea ecx, [esp + 0x600]
push eax
mov byte [esp + 0xe], 0x47
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x72
push ecx
lea ecx, [esp + 0x604]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x60c]
call fcn.0040b050
lea edx, [esp + 0x600]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x73
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x72
call fcn.0040b010
lea edx, [esp + 0x3b]
lea ecx, [esp + 0x2e0]
push edx
mov byte [esp + 0xe], 0x39
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x2e0]
push eax
mov byte [esp + 0x68c], 0x74
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x2ec]
call fcn.0040b050
lea ecx, [esp + 0x2e0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x75
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x74
call fcn.0040b010
lea ecx, [esp + 0x3d]
mov byte [esp + 0xa], 0x68
push ecx
lea ecx, [esp + 0x4a4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x4a0]
push edx
mov byte [esp + 0x68c], 0x76
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x4ac]
call fcn.0040b050
lea eax, [esp + 0x4a0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x77
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x76
call fcn.0040b010
lea eax, [esp + 0x3f]
lea ecx, [esp + 0x2c0]
push eax
mov byte [esp + 0xe], 0x5a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x78
push ecx
lea ecx, [esp + 0x2c4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x2cc]
call fcn.0040b050
lea edx, [esp + 0x2c0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x79
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x78
call fcn.0040b010
lea edx, [esp + 0x41]
mov byte [esp + 0xa], 0x46
mov byte [esp + 0xb], bl
push edx
lea ecx, [esp + 0x584]
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x580]
push eax
mov byte [esp + 0x68c], 0x7a
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x58c]
call fcn.0040b050
lea ecx, [esp + 0x580]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x7b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x7a
call fcn.0040b010
lea ecx, [esp + 0x43]
mov byte [esp + 0xa], 0x4a
push ecx
lea ecx, [esp + 0x2a4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x2a0]
push edx
mov byte [esp + 0x68c], 0x7c
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x2ac]
call fcn.0040b050
lea eax, [esp + 0x2a0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x7d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x7c
call fcn.0040b010
lea eax, [esp + 0x45]
lea ecx, [esp + 0x480]
push eax
mov byte [esp + 0xe], 0x6c
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x7e
push ecx
lea ecx, [esp + 0x484]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x48c]
call fcn.0040b050
lea edx, [esp + 0x480]
lea eax, [esp + 0xc]
push edx
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x7f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x7e
call fcn.0040b010
lea edx, [esp + 0x47]
lea ecx, [esp + 0x280]
push edx
mov byte [esp + 0xe], 0x63
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x280]
push eax
mov byte [esp + 0x68c], 0x80
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x28c]
call fcn.0040b050
lea ecx, [esp + 0x280]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x81
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x80
call fcn.0040b010
lea ecx, [esp + 0x49]
mov byte [esp + 0xa], 0x32
push ecx
lea ecx, [esp + 0x664]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x660]
push edx
mov byte [esp + 0x68c], 0x82
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x66c]
call fcn.0040b050
lea eax, [esp + 0x660]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x83
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x82
call fcn.0040b010
lea eax, [esp + 0x4b]
lea ecx, [esp + 0x260]
push eax
mov byte [esp + 0xe], 0x39
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x84
push ecx
lea ecx, [esp + 0x264]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x26c]
call fcn.0040b050
lea edx, [esp + 0x260]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x85
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x84
call fcn.0040b010
lea edx, [esp + 0x4d]
lea ecx, [esp + 0x460]
push edx
mov byte [esp + 0xe], 0x31
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x460]
push eax
mov byte [esp + 0x68c], 0x86
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x46c]
call fcn.0040b050
lea ecx, [esp + 0x460]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x87
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x86
call fcn.0040b010
lea ecx, [esp + 0x4f]
mov byte [esp + 0xa], 0x63
push ecx
lea ecx, [esp + 0x244]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x240]
push edx
mov byte [esp + 0x68c], 0x88
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x24c]
call fcn.0040b050
lea eax, [esp + 0x240]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x89
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x88
call fcn.0040b010
lea eax, [esp + 0x51]
lea ecx, [esp + 0x560]
push eax
mov byte [esp + 0xe], 0x6d
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x8a
push ecx
lea ecx, [esp + 0x564]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x56c]
call fcn.0040b050
lea edx, [esp + 0x560]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x8b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x8a
call fcn.0040b010
lea edx, [esp + 0x53]
lea ecx, [esp + 0x220]
push edx
mov byte [esp + 0xe], 0x4e
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x220]
push eax
mov byte [esp + 0x68c], 0x8c
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x22c]
call fcn.0040b050
lea ecx, [esp + 0x220]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x8d
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x8c
call fcn.0040b010
lea ecx, [esp + 0x55]
mov byte [esp + 0xa], 0x6c
push ecx
lea ecx, [esp + 0x444]
mov byte [esp + 0xf], bl
call fcn.0040af90
mov byte [esp + 0x688], 0x8e
lea edx, [esp + 0xa]
lea ecx, [esp + 0x440]
push edx
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x44c]
call fcn.0040b050
lea eax, [esp + 0x440]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x8f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x8e
call fcn.0040b010
lea eax, [esp + 0x57]
lea ecx, [esp + 0x200]
push eax
mov byte [esp + 0xe], 0x4c
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x90
push ecx
lea ecx, [esp + 0x204]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x20c]
call fcn.0040b050
lea edx, [esp + 0x200]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x91
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x90
call fcn.0040b010
lea edx, [esp + 0x59]
lea ecx, [esp + 0x5e0]
push edx
mov byte [esp + 0xe], 0x45
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x5e0]
push eax
mov byte [esp + 0x68c], 0x92
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x5ec]
call fcn.0040b050
lea ecx, [esp + 0x5e0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x93
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x92
call fcn.0040b010
lea ecx, [esp + 0x5b]
mov byte [esp + 0xa], 0x78
push ecx
lea ecx, [esp + 0x1e4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x1e0]
push edx
mov byte [esp + 0x68c], 0x94
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x1ec]
call fcn.0040b050
lea eax, [esp + 0x1e0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x95
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x94
call fcn.0040b010
lea eax, [esp + 0x5d]
lea ecx, [esp + 0x420]
push eax
mov byte [esp + 0xe], 0x76
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x96
push ecx
lea ecx, [esp + 0x424]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x42c]
call fcn.0040b050
lea edx, [esp + 0x420]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x97
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x96
call fcn.0040b010
lea edx, [esp + 0x5f]
lea ecx, [esp + 0x1c0]
push edx
mov byte [esp + 0xe], 0x59
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
mov byte [esp + 0x688], 0x98
push eax
lea ecx, [esp + 0x1c4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x1cc]
call fcn.0040b050
lea ecx, [esp + 0x1c0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x99
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x98
call fcn.0040b010
lea ecx, [esp + 0x61]
mov byte [esp + 0xa], 0x32
push ecx
lea ecx, [esp + 0x544]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x540]
push edx
mov byte [esp + 0x68c], 0x9a
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x54c]
call fcn.0040b050
lea eax, [esp + 0x540]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x9b
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x9a
call fcn.0040b010
lea eax, [esp + 0x63]
lea ecx, [esp + 0x1a0]
push eax
mov byte [esp + 0xe], 0x74
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0x9c
push ecx
lea ecx, [esp + 0x1a4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x1ac]
call fcn.0040b050
lea edx, [esp + 0x1a0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
mov byte [esp + 0x688], 0x9d
push eax
lea ecx, [esp + 0x10]
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x9c
call fcn.0040b010
lea edx, [esp + 0x65]
lea ecx, [esp + 0x400]
push edx
mov byte [esp + 0xe], 0x53
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x400]
push eax
mov byte [esp + 0x68c], 0x9e
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x40c]
call fcn.0040b050
lea ecx, [esp + 0x400]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0x9f
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0x9e
call fcn.0040b010
lea ecx, [esp + 0x67]
mov byte [esp + 0xa], 0x5a
push ecx
lea ecx, [esp + 0x184]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x180]
push edx
mov byte [esp + 0x68c], 0xa0
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x18c]
call fcn.0040b050
lea eax, [esp + 0x180]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xa1
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xa0
call fcn.0040b010
lea eax, [esp + 0x69]
lea ecx, [esp + 0x620]
push eax
mov byte [esp + 0xe], 0x58
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0xa2
push ecx
lea ecx, [esp + 0x624]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x62c]
call fcn.0040b050
lea edx, [esp + 0x620]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xa3
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xa2
call fcn.0040b010
lea edx, [esp + 0x6b]
lea ecx, [esp + 0x160]
push edx
mov byte [esp + 0xe], 0x4e
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x160]
push eax
mov byte [esp + 0x68c], 0xa4
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x16c]
call fcn.0040b050
lea ecx, [esp + 0x160]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xa5
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xa4
call fcn.0040b010
lea ecx, [esp + 0x6d]
mov byte [esp + 0xa], 0x76
push ecx
lea ecx, [esp + 0x3e4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x3e0]
push edx
mov byte [esp + 0x68c], 0xa6
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x3ec]
call fcn.0040b050
lea eax, [esp + 0x3e0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xa7
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xa6
call fcn.0040b010
lea eax, [esp + 0x6f]
lea ecx, [esp + 0x140]
push eax
mov byte [esp + 0xe], 0x64
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0xa8
push ecx
lea ecx, [esp + 0x144]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x14c]
call fcn.0040b050
lea edx, [esp + 0x140]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xa9
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xa8
call fcn.0040b010
lea edx, [esp + 0x71]
lea ecx, [esp + 0x520]
push edx
mov byte [esp + 0xe], 0x58
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x520]
push eax
mov byte [esp + 0x68c], 0xaa
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x52c]
call fcn.0040b050
lea ecx, [esp + 0x520]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xab
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xaa
call fcn.0040b010
lea ecx, [esp + 0x73]
mov byte [esp + 0xa], 0x4a
push ecx
lea ecx, [esp + 0x124]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x120]
push edx
mov byte [esp + 0x68c], 0xac
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x12c]
call fcn.0040b050
lea eax, [esp + 0x120]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xad
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xac
call fcn.0040b010
lea eax, [esp + 0x75]
lea ecx, [esp + 0x3c0]
push eax
mov byte [esp + 0xe], 0x6a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0xae
push ecx
lea ecx, [esp + 0x3c4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x3cc]
call fcn.0040b050
lea edx, [esp + 0x3c0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xaf
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xae
call fcn.0040b010
lea edx, [esp + 0x77]
lea ecx, [esp + 0x100]
push edx
mov byte [esp + 0xe], 0x5a
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x100]
push eax
mov byte [esp + 0x68c], 0xb0
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x10c]
call fcn.0040b050
lea ecx, [esp + 0x100]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xb1
call fcn.0040b020
mov byte [esp + 0x688], 0xb0
lea ecx, [esp + 0x1c]
call fcn.0040b010
lea ecx, [esp + 0x79]
mov byte [esp + 0xa], 0x53
push ecx
lea ecx, [esp + 0x5c4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x5c0]
push edx
mov byte [esp + 0x68c], 0xb2
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x5cc]
call fcn.0040b050
lea eax, [esp + 0x5c0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xb3
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xb2
call fcn.0040b010
lea eax, [esp + 0x7b]
lea ecx, [esp + 0xe0]
push eax
mov byte [esp + 0xe], 0x78
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0xb4
push ecx
lea ecx, [esp + 0xe4]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0xec]
call fcn.0040b050
lea edx, [esp + 0xe0]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xb5
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xb4
call fcn.0040b010
lea edx, [esp + 0x7d]
lea ecx, [esp + 0x3a0]
push edx
mov byte [esp + 0xe], 0x71
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0x3a0]
push eax
mov byte [esp + 0x68c], 0xb6
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x3ac]
call fcn.0040b050
lea ecx, [esp + 0x3a0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xb7
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xb6
call fcn.0040b010
lea ecx, [esp + 0x7f]
mov byte [esp + 0xa], 0x63
push ecx
lea ecx, [esp + 0xc4]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0xc0]
push edx
mov byte [esp + 0x68c], 0xb8
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0xcc]
call fcn.0040b050
lea eax, [esp + 0xc0]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xb9
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xb8
call fcn.0040b010
lea eax, [esp + 0x81]
lea ecx, [esp + 0x500]
push eax
mov byte [esp + 0xe], 0x47
mov byte [esp + 0xf], bl
call fcn.0040af90
lea ecx, [esp + 0xa]
mov byte [esp + 0x688], 0xba
push ecx
lea ecx, [esp + 0x504]
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x50c]
call fcn.0040b050
lea edx, [esp + 0x500]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xbb
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xba
call fcn.0040b010
mov byte [esp + 0xa], 0x63
lea edx, [esp + 0x83]
lea ecx, [esp + 0xa0]
push edx
mov byte [esp + 0xf], bl
call fcn.0040af90
lea eax, [esp + 0xa]
lea ecx, [esp + 0xa0]
push eax
mov byte [esp + 0x68c], 0xbc
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0xac]
call fcn.0040b050
lea ecx, [esp + 0xa0]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x20]
push edx
push eax
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xbd
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xbc
call fcn.0040b010
lea ecx, [esp + 0x85]
mov byte [esp + 0xa], 0x3d
push ecx
lea ecx, [esp + 0x674]
mov byte [esp + 0xf], bl
call fcn.0040af90
lea edx, [esp + 0xa]
lea ecx, [esp + 0x670]
push edx
mov byte [esp + 0x68c], 0xbe
call fcn.0040b0d0
push eax
push ebx
lea ecx, [esp + 0x67c]
call fcn.0040b050
lea eax, [esp + 0x670]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
call fcn.0040be70
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x68c], 0xbf
call fcn.0040b020
lea ecx, [esp + 0x1c]
mov byte [esp + 0x688], 0xbe
call fcn.0040b010
mov esi, dword [esp + 0x690]
lea eax, [esp + 0xc]
push eax
mov ecx, esi
call fcn.0040afb0
mov dword [esp + 0x8c], 1
lea ecx, [esp + 0x670]
mov byte [esp + 0x688], 0xbc
call fcn.0040b010
lea ecx, [esp + 0xa0]
mov byte [esp + 0x688], 0xba
call fcn.0040b010
lea ecx, [esp + 0x500]
mov byte [esp + 0x688], 0xb8
call fcn.0040b010
mov byte [esp + 0x688], 0xb6
lea ecx, [esp + 0xc0]
call fcn.0040b010
lea ecx, [esp + 0x3a0]
mov byte [esp + 0x688], 0xb4
call fcn.0040b010
lea ecx, [esp + 0xe0]
mov byte [esp + 0x688], 0xb2
call fcn.0040b010
lea ecx, [esp + 0x5c0]
mov byte [esp + 0x688], 0xb0
call fcn.0040b010
lea ecx, [esp + 0x100]
mov byte [esp + 0x688], 0xae
call fcn.0040b010
lea ecx, [esp + 0x3c0]
mov byte [esp + 0x688], 0xac
call fcn.0040b010
lea ecx, [esp + 0x120]
mov byte [esp + 0x688], 0xaa
call fcn.0040b010
lea ecx, [esp + 0x520]
mov byte [esp + 0x688], 0xa8
call fcn.0040b010
lea ecx, [esp + 0x140]
mov byte [esp + 0x688], 0xa6
call fcn.0040b010
lea ecx, [esp + 0x3e0]
mov byte [esp + 0x688], 0xa4
call fcn.0040b010
lea ecx, [esp + 0x160]
mov byte [esp + 0x688], 0xa2
call fcn.0040b010
lea ecx, [esp + 0x620]
mov byte [esp + 0x688], 0xa0
call fcn.0040b010
lea ecx, [esp + 0x180]
mov byte [esp + 0x688], 0x9e
call fcn.0040b010
lea ecx, [esp + 0x400]
mov byte [esp + 0x688], 0x9c
call fcn.0040b010
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x688], 0x9a
call fcn.0040b010
lea ecx, [esp + 0x540]
mov byte [esp + 0x688], 0x98
call fcn.0040b010
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x688], 0x96
call fcn.0040b010
lea ecx, [esp + 0x420]
mov byte [esp + 0x688], 0x94
call fcn.0040b010
lea ecx, [esp + 0x1e0]
mov byte [esp + 0x688], 0x92
call fcn.0040b010
lea ecx, [esp + 0x5e0]
mov byte [esp + 0x688], 0x90
call fcn.0040b010
lea ecx, [esp + 0x200]
mov byte [esp + 0x688], 0x8e
call fcn.0040b010
lea ecx, [esp + 0x440]
mov byte [esp + 0x688], 0x8c
call fcn.0040b010
lea ecx, [esp + 0x220]
mov byte [esp + 0x688], 0x8a
call fcn.0040b010
lea ecx, [esp + 0x560]
mov byte [esp + 0x688], 0x88
call fcn.0040b010
lea ecx, [esp + 0x240]
mov byte [esp + 0x688], 0x86
call fcn.0040b010
lea ecx, [esp + 0x460]
mov byte [esp + 0x688], 0x84
call fcn.0040b010
lea ecx, [esp + 0x260]
mov byte [esp + 0x688], 0x82
call fcn.0040b010
mov byte [esp + 0x688], 0x80
lea ecx, [esp + 0x660]
call fcn.0040b010
lea ecx, [esp + 0x280]
mov byte [esp + 0x688], 0x7e
call fcn.0040b010
lea ecx, [esp + 0x480]
mov byte [esp + 0x688], 0x7c
call fcn.0040b010
lea ecx, [esp + 0x2a0]
mov byte [esp + 0x688], 0x7a
call fcn.0040b010
lea ecx, [esp + 0x580]
mov byte [esp + 0x688], 0x78
call fcn.0040b010
lea ecx, [esp + 0x2c0]
mov byte [esp + 0x688], 0x76
call fcn.0040b010
lea ecx, [esp + 0x4a0]
mov byte [esp + 0x688], 0x74
call fcn.0040b010
lea ecx, [esp + 0x2e0]
mov byte [esp + 0x688], 0x72
call fcn.0040b010
lea ecx, [esp + 0x600]
mov byte [esp + 0x688], 0x70
call fcn.0040b010
lea ecx, [esp + 0x300]
mov byte [esp + 0x688], 0x6e
call fcn.0040b010
lea ecx, [esp + 0x4c0]
mov byte [esp + 0x688], 0x6c
call fcn.0040b010
lea ecx, [esp + 0x320]
mov byte [esp + 0x688], 0x6a
call fcn.0040b010
lea ecx, [esp + 0x5a0]
mov byte [esp + 0x688], 0x68
call fcn.0040b010
lea ecx, [esp + 0x340]
mov byte [esp + 0x688], 0x66
call fcn.0040b010
lea ecx, [esp + 0x4e0]
mov byte [esp + 0x688], 0x64
call fcn.0040b010
lea ecx, [esp + 0x360]
mov byte [esp + 0x688], 0x62
call fcn.0040b010
lea ecx, [esp + 0x640]
mov byte [esp + 0x688], 0x60
call fcn.0040b010
lea ecx, [esp + 0x380]
mov byte [esp + 0x688], 0x5e
call fcn.0040b010
lea ecx, [esp + 0x90]
mov byte [esp + 0x688], 0x5c
call fcn.0040b010
lea ecx, [esp + 0xb0]
mov byte [esp + 0x688], 0x5a
call fcn.0040b010
lea ecx, [esp + 0xd0]
mov byte [esp + 0x688], 0x58
call fcn.0040b010
lea ecx, [esp + 0xf0]
mov byte [esp + 0x688], 0x56
call fcn.0040b010
lea ecx, [esp + 0x110]
mov byte [esp + 0x688], 0x54
call fcn.0040b010
lea ecx, [esp + 0x130]
mov byte [esp + 0x688], 0x52
call fcn.0040b010
lea ecx, [esp + 0x150]
mov byte [esp + 0x688], 0x50
call fcn.0040b010
lea ecx, [esp + 0x170]
mov byte [esp + 0x688], 0x4e
call fcn.0040b010
lea ecx, [esp + 0x190]
mov byte [esp + 0x688], 0x4c
call fcn.0040b010
mov byte [esp + 0x688], 0x4a
lea ecx, [esp + 0x1b0]
call fcn.0040b010
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x688], 0x48
call fcn.0040b010
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x688], 0x46
call fcn.0040b010
lea ecx, [esp + 0x210]
mov byte [esp + 0x688], 0x44
call fcn.0040b010
lea ecx, [esp + 0x230]
mov byte [esp + 0x688], 0x42
call fcn.0040b010
lea ecx, [esp + 0x250]
mov byte [esp + 0x688], 0x40
call fcn.0040b010
lea ecx, [esp + 0x270]
mov byte [esp + 0x688], 0x3e
call fcn.0040b010
lea ecx, [esp + 0x290]
mov byte [esp + 0x688], 0x3c
call fcn.0040b010
lea ecx, [esp + 0x2b0]
mov byte [esp + 0x688], 0x3a
call fcn.0040b010
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x688], 0x38
call fcn.0040b010
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x688], 0x36
call fcn.0040b010
lea ecx, [esp + 0x310]
mov byte [esp + 0x688], 0x34
call fcn.0040b010
lea ecx, [esp + 0x330]
mov byte [esp + 0x688], 0x32
call fcn.0040b010
lea ecx, [esp + 0x350]
mov byte [esp + 0x688], 0x30
call fcn.0040b010
lea ecx, [esp + 0x370]
mov byte [esp + 0x688], 0x2e
call fcn.0040b010
lea ecx, [esp + 0x390]
mov byte [esp + 0x688], 0x2c
call fcn.0040b010
lea ecx, [esp + 0x3b0]
mov byte [esp + 0x688], 0x2a
call fcn.0040b010
lea ecx, [esp + 0x3d0]
mov byte [esp + 0x688], 0x28
call fcn.0040b010
lea ecx, [esp + 0x3f0]
mov byte [esp + 0x688], 0x26
call fcn.0040b010
lea ecx, [esp + 0x410]
mov byte [esp + 0x688], 0x24
call fcn.0040b010
lea ecx, [esp + 0x430]
mov byte [esp + 0x688], 0x22
call fcn.0040b010
lea ecx, [esp + 0x450]
mov byte [esp + 0x688], 0x20
call fcn.0040b010
lea ecx, [esp + 0x470]
mov byte [esp + 0x688], 0x1e
call fcn.0040b010
lea ecx, [esp + 0x490]
mov byte [esp + 0x688], 0x1c
call fcn.0040b010
lea ecx, [esp + 0x4b0]
mov byte [esp + 0x688], 0x1a
call fcn.0040b010
lea ecx, [esp + 0x4d0]
mov byte [esp + 0x688], 0x18
call fcn.0040b010
lea ecx, [esp + 0x4f0]
mov byte [esp + 0x688], 0x16
call fcn.0040b010
mov byte [esp + 0x688], 0x14
lea ecx, [esp + 0x510]
call fcn.0040b010
lea ecx, [esp + 0x530]
mov byte [esp + 0x688], 0x12
call fcn.0040b010
lea ecx, [esp + 0x550]
mov byte [esp + 0x688], 0x10
call fcn.0040b010
lea ecx, [esp + 0x570]
mov byte [esp + 0x688], 0xe
call fcn.0040b010
lea ecx, [esp + 0x590]
mov byte [esp + 0x688], 0xc
call fcn.0040b010
lea ecx, [esp + 0x5b0]
mov byte [esp + 0x688], 0xa
call fcn.0040b010
lea ecx, [esp + 0x5d0]
mov byte [esp + 0x688], 8
call fcn.0040b010
lea ecx, [esp + 0x5f0]
mov byte [esp + 0x688], 6
call fcn.0040b010
lea ecx, [esp + 0x610]
mov byte [esp + 0x688], 4
call fcn.0040b010
lea ecx, [esp + 0x630]
mov byte [esp + 0x688], 2
call fcn.0040b010
lea ecx, [esp + 0x650]
mov byte [esp + 0x688], 1
call fcn.0040b010
lea ecx, [esp + 0xc]
mov byte [esp + 0x688], bl
call fcn.0040b010
mov ecx, dword [esp + 0x680]
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x684
ret