Function at 0x43ee70
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4ab04d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x460
push ebx
push ebp
xor ebx, ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0x130], ebx
mov eax, dword [0x4d14fc]
mov dword [esp + 0x478], 1
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x484]
mov edx, dword [esi + 0xc]
push ecx
push edx
lea eax, [esp + 0x50]
push str.house_ranch__getconf.php_verify_sfuid_sr0.51839509466663
push eax
mov byte [esp + 0x488], 2
call fcn.0049415f
add esp, 0xc
lea edx, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00495cca
push ecx
mov byte [esp + 0x480], 3
mov ecx, esp
mov dword [esp + 0x18], esp
push str.www.kaixin001.com
call fcn.00495fc3
lea eax, [esp + 0x40]
lea ecx, [esi + 4]
push eax
mov byte [esp + 0x484], 2
call fcn.00416700
lea ebp, [esi + 0x10]
push eax
mov ecx, ebp
mov byte [esp + 0x47c], 4
mov dword [esp + 0x40], ebp
call fcn.0049608e
lea ecx, [esp + 0x38]
mov byte [esp + 0x478], 2
call fcn.00495f55
lea ecx, [esp + 0x36]
push ecx
lea ecx, [esp + 0xa0]
call fcn.0047c7b0
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xb8], bl
lea ecx, [esp + 0xdc]
mov byte [esp + 0x478], 5
call fcn.0040f6a0
push ebx
push str.____item___uid_._____item__
lea ecx, [esp + 0xe4]
mov byte [esp + 0x480], 6
call fcn.00404f70
push ebx
mov ecx, ebp
mov byte [esp + 0x47c], 7
call fcn.00496385
mov dl, byte [esp + 0x36]
push ebx
lea ecx, [esp + 0x58]
mov esi, eax
mov byte [esp + 0x58], dl
call fcn.00404f20
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x5c]
call fcn.00404fd0
lea ecx, [esp + 0x54]
mov byte [esp + 0x478], 8
call fcn.00404ea0
mov esi, dword [esp + 0x58]
lea ecx, [esp + 0x54]
call fcn.00404ea0
mov eax, dword [esp + 0x58]
cmp eax, ebx
jne 0x43eff5
mov dword [esp + 0x38], ebx
jmp 0x43efff
mov ecx, dword [esp + 0x5c]
add ecx, eax
mov dword [esp + 0x38], ecx
mov edx, dword [0x4d14fc]
mov dword [esp + 0x13c], edx
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x478], 9
call fcn.0044cf60
mov edx, dword [esp + 0x38]
push esi
lea eax, [esp + 0xe0]
push ebx
lea ecx, [esp + 0xa4]
push eax
push ecx
push edx
push esi
mov byte [esp + 0x490], 0xa
call fcn.004053a0
add esp, 0x18
test al, al
je 0x44044f
lea ecx, [esp + 0x140]
call fcn.00401010
lea ecx, [esp + 0x9c]
mov byte [esp + 0x478], 0xb
call fcn.00406060
cmp eax, 2
jle 0x43f081
mov eax, dword [esp + 0xa0]
lea ecx, [eax + 0x18]
jmp 0x43f088
lea ecx, [esp + 0xb0]
lea edx, [esp + 0x380]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0xc
cmp eax, ebx
jne 0x43f0a9
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x14]
call fcn.00495fc3
push 1
lea ecx, [esp + 0x384]
mov byte [esp + 0x47c], 0xe
call fcn.00404f20
lea ecx, [esp + 0x40]
call fcn.0040f6a0
push ebx
push str.____uid__._____uid__
lea ecx, [esp + 0x48]
mov byte [esp + 0x480], 0xf
call fcn.00404f70
lea eax, [esp + 0x37]
lea ecx, [esp + 0x14]
push eax
mov byte [esp + 0x47c], 0x10
call fcn.0047c7b0
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x30], 0
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x44]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x11
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f19f
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f157
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f15b
lea ecx, [esp + 0x28]
lea edx, [esp + 0x3d0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x12
cmp eax, ebx
jne 0x43f17c
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x148]
call fcn.004960de
push 1
lea ecx, [esp + 0x3d4]
mov byte [esp + 0x47c], 0x11
call fcn.00404f20
lea ecx, [esp + 0x4c]
call fcn.0040f6a0
push ebx
push str.____animalsid__._____animalsid__
lea ecx, [esp + 0x54]
mov byte [esp + 0x480], 0x13
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x50]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x14
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f252
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f20a
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f20e
lea ecx, [esp + 0x28]
lea edx, [esp + 0x390]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x15
cmp eax, ebx
jne 0x43f22f
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x14c]
call fcn.004960de
push 1
lea ecx, [esp + 0x394]
mov byte [esp + 0x47c], 0x14
call fcn.00404f20
lea ecx, [esp + 0x6c]
call fcn.0040f6a0
push ebx
push str.____aid__._____aid__
lea ecx, [esp + 0x74]
mov byte [esp + 0x480], 0x16
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x70]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x17
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f305
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f2bd
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f2c1
lea ecx, [esp + 0x28]
lea edx, [esp + 0x350]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x18
cmp eax, ebx
jne 0x43f2e2
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x150]
call fcn.004960de
push 1
lea ecx, [esp + 0x354]
mov byte [esp + 0x47c], 0x17
call fcn.00404f20
lea ecx, [esp + 0x7c]
call fcn.0040f6a0
push ebx
push str.____status__._____status__
lea ecx, [esp + 0x84]
mov byte [esp + 0x480], 0x19
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x80]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x1a
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f3be
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f376
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f37a
lea ecx, [esp + 0x28]
lea edx, [esp + 0x360]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x1b
cmp eax, ebx
jne 0x43f39b
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x154]
call fcn.004960de
push 1
lea ecx, [esp + 0x364]
mov byte [esp + 0x47c], 0x1a
call fcn.00404f20
lea ecx, [esp + 0x94]
call fcn.0040f6a0
push ebx
push str.____btime__._____btime__
lea ecx, [esp + 0x9c]
mov byte [esp + 0x480], 0x1c
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x98]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x1d
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f47a
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f432
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f436
lea ecx, [esp + 0x28]
lea edx, [esp + 0x3c0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x1e
cmp eax, ebx
jne 0x43f457
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x158]
call fcn.004960de
push 1
lea ecx, [esp + 0x3c4]
mov byte [esp + 0x47c], 0x1d
call fcn.00404f20
lea ecx, [esp + 0x84]
call fcn.0040f6a0
push ebx
push str.____buid__._____buid__
lea ecx, [esp + 0x8c]
mov byte [esp + 0x480], 0x1f
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x88]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x20
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f536
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f4ee
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f4f2
lea ecx, [esp + 0x28]
lea edx, [esp + 0x340]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x21
cmp eax, ebx
jne 0x43f513
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x15c]
call fcn.004960de
push 1
lea ecx, [esp + 0x344]
mov byte [esp + 0x47c], 0x20
call fcn.00404f20
lea ecx, [esp + 0x64]
call fcn.0040f6a0
push ebx
push str.____bnum__._____bnum__
lea ecx, [esp + 0x6c]
mov byte [esp + 0x480], 0x22
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x68]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x23
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f5e9
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f5a1
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f5a5
lea ecx, [esp + 0x28]
lea edx, [esp + 0x3a0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x24
cmp eax, ebx
jne 0x43f5c6
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x160]
call fcn.004960de
push 1
lea ecx, [esp + 0x3a4]
mov byte [esp + 0x47c], 0x23
call fcn.00404f20
lea ecx, [esp + 0x74]
call fcn.0040f6a0
push ebx
push str.____ctime__._____ctime__
lea ecx, [esp + 0x7c]
mov byte [esp + 0x480], 0x25
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x78]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x26
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f69c
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f654
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f658
lea ecx, [esp + 0x28]
lea edx, [esp + 0x3b0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x27
cmp eax, ebx
jne 0x43f679
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x164]
call fcn.004960de
push 1
lea ecx, [esp + 0x3b4]
mov byte [esp + 0x47c], 0x26
call fcn.00404f20
lea ecx, [esp + 0x8c]
call fcn.0040f6a0
push ebx
push str.____gtime__._____gtime__
lea ecx, [esp + 0x94]
mov byte [esp + 0x480], 0x28
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x90]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x29
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f758
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f710
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f714
lea ecx, [esp + 0x28]
lea edx, [esp + 0x370]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x2a
cmp eax, ebx
jne 0x43f735
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x168]
call fcn.004960de
push 1
lea ecx, [esp + 0x374]
mov byte [esp + 0x47c], 0x29
call fcn.00404f20
lea ecx, [esp + 0x120]
call fcn.0040f6a0
push ebx
push str.____ftime__._____ftime__
lea ecx, [esp + 0x128]
mov byte [esp + 0x480], 0x2b
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x124]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x2c
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f814
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f7cc
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f7d0
lea ecx, [esp + 0x28]
lea edx, [esp + 0x280]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x2d
cmp eax, ebx
jne 0x43f7f1
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x16c]
call fcn.004960de
push 1
lea ecx, [esp + 0x284]
mov byte [esp + 0x47c], 0x2c
call fcn.00404f20
lea ecx, [esp + 0x110]
call fcn.0040f6a0
push ebx
push str.____grow__._____grow__
lea ecx, [esp + 0x118]
mov byte [esp + 0x480], 0x2e
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x114]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x2f
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f8d0
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f888
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f88c
lea ecx, [esp + 0x28]
lea edx, [esp + 0x2d0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x30
cmp eax, ebx
jne 0x43f8ad
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x170]
call fcn.004960de
push 1
lea ecx, [esp + 0x2d4]
mov byte [esp + 0x47c], 0x2f
call fcn.00404f20
lea ecx, [esp + 0x100]
call fcn.0040f6a0
push ebx
push str.____ptime__._____ptime__
lea ecx, [esp + 0x108]
mov byte [esp + 0x480], 0x31
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x104]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x32
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43f98c
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43f944
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43f948
lea ecx, [esp + 0x28]
lea edx, [esp + 0x2b0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x33
cmp eax, ebx
jne 0x43f969
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x174]
call fcn.004960de
push 1
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x47c], 0x32
call fcn.00404f20
lea ecx, [esp + 0xec]
call fcn.0040f6a0
push ebx
push str.____pnum__._____pnum__
lea ecx, [esp + 0xf4]
mov byte [esp + 0x480], 0x34
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xf0]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x35
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43fa48
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43fa00
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43fa04
lea ecx, [esp + 0x28]
lea edx, [esp + 0x250]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x36
cmp eax, ebx
jne 0x43fa25
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x178]
call fcn.004960de
push 1
lea ecx, [esp + 0x254]
mov byte [esp + 0x47c], 0x35
call fcn.00404f20
lea ecx, [esp + 0x118]
call fcn.0040f6a0
push ebx
push str.____ptype__._____ptype__
lea ecx, [esp + 0x120]
mov byte [esp + 0x480], 0x37
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x11c]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x38
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43fb04
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43fabc
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43fac0
lea ecx, [esp + 0x28]
lea edx, [esp + 0x270]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x39
cmp eax, ebx
jne 0x43fae1
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x17c]
call fcn.004960de
push 1
lea ecx, [esp + 0x274]
mov byte [esp + 0x47c], 0x38
call fcn.00404f20
lea ecx, [esp + 0x128]
call fcn.0040f6a0
push ebx
push str.____daynum__._____daynum__
lea ecx, [esp + 0x130]
mov byte [esp + 0x480], 0x3a
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x12c]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x3b
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43fbc0
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43fb78
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43fb7c
lea ecx, [esp + 0x28]
lea edx, [esp + 0x2a0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x3c
cmp eax, ebx
jne 0x43fb9d
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x180]
call fcn.004960de
push 1
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x47c], 0x3b
call fcn.00404f20
lea ecx, [esp + 0x108]
call fcn.0040f6a0
push ebx
push str.____fstatus__._____fstatus__
lea ecx, [esp + 0x110]
mov byte [esp + 0x480], 0x3d
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x10c]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x3e
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43fc7c
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43fc34
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43fc38
lea ecx, [esp + 0x28]
lea edx, [esp + 0x260]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x3f
cmp eax, ebx
jne 0x43fc59
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x184]
call fcn.004960de
push 1
lea ecx, [esp + 0x264]
mov byte [esp + 0x47c], 0x3e
call fcn.00404f20
lea ecx, [esp + 0xd4]
call fcn.0040f6a0
push ebx
push str.____bproduct__._____bproduct__
lea ecx, [esp + 0xdc]
mov byte [esp + 0x480], 0x40
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xd8]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x41
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43fd38
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43fcf0
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43fcf4
lea ecx, [esp + 0x28]
lea edx, [esp + 0x2c0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x42
cmp eax, ebx
jne 0x43fd15
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x188]
call fcn.004960de
push 1
lea ecx, [esp + 0x2c4]
mov byte [esp + 0x47c], 0x41
call fcn.00404f20
lea ecx, [esp + 0xbc]
call fcn.0040f6a0
push ebx
push str.____leftptime__._____leftptime__
lea ecx, [esp + 0xc4]
mov byte [esp + 0x480], 0x43
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xd8]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x44
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43fdf4
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43fdac
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43fdb0
lea ecx, [esp + 0x28]
lea edx, [esp + 0x2e0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x45
cmp eax, ebx
jne 0x43fdd1
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x18c]
call fcn.004960de
push 1
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x47c], 0x44
call fcn.00404f20
lea ecx, [esp + 0x134]
call fcn.0040f6a0
push ebx
push str.____tips__._____tips__
lea ecx, [esp + 0x13c]
mov byte [esp + 0x480], 0x46
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x138]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x47
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43feb0
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43fe68
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43fe6c
lea ecx, [esp + 0x28]
lea edx, [esp + 0x290]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x48
cmp eax, ebx
jne 0x43fe8d
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x190]
call fcn.004960de
push 1
lea ecx, [esp + 0x294]
mov byte [esp + 0x47c], 0x47
call fcn.00404f20
lea ecx, [esp + 0xf4]
call fcn.0040f6a0
push ebx
push str.____aname__._____aname__
lea ecx, [esp + 0xfc]
mov byte [esp + 0x480], 0x49
call fcn.00404f70
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xf8]
push ebx
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], 0x4a
call fcn.004053a0
add esp, 0x18
test al, al
je 0x43ff6c
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x43ff24
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x43ff28
lea ecx, [esp + 0x28]
lea edx, [esp + 0xc4]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x4b
cmp eax, ebx
jne 0x43ff49
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x198]
call fcn.004960de
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x47c], 0x4a
call fcn.00404f20
lea ecx, [esp + 0x1c0]
call fcn.004012e0
push ecx
lea eax, [esp + 0x150]
mov ecx, esp
mov dword [esp + 0x100], esp
push eax
mov byte [esp + 0x480], 0x4c
call fcn.00495cca
lea ecx, [esp + 0x3e4]
push ecx
lea ecx, [esp + 0x1c8]
call fcn.00401a30
mov esi, eax
lea edx, [esi + 4]
lea ecx, [esp + 0x1c4]
push edx
mov byte [esp + 0x47c], 0x4d
call fcn.0049608e
lea eax, [esi + 8]
lea ecx, [esp + 0x1c8]
push eax
call fcn.0049608e
lea ecx, [esi + 0xc]
push ecx
lea ecx, [esp + 0x1d0]
call fcn.0049608e
lea edx, [esi + 0x10]
lea ecx, [esp + 0x1d0]
push edx
call fcn.0049608e
lea eax, [esi + 0x14]
lea ecx, [esp + 0x1d4]
push eax
call fcn.0049608e
lea ecx, [esi + 0x18]
push ecx
lea ecx, [esp + 0x1dc]
call fcn.0049608e
lea edx, [esi + 0x1c]
lea ecx, [esp + 0x1dc]
push edx
call fcn.0049608e
lea eax, [esi + 0x20]
lea ecx, [esp + 0x1e0]
push eax
call fcn.0049608e
lea ecx, [esi + 0x24]
push ecx
lea ecx, [esp + 0x1e8]
call fcn.0049608e
lea edx, [esi + 0x28]
lea ecx, [esp + 0x1e8]
push edx
call fcn.0049608e
lea eax, [esi + 0x2c]
lea ecx, [esp + 0x1ec]
push eax
call fcn.0049608e
lea ecx, [esi + 0x30]
push ecx
lea ecx, [esp + 0x1f4]
call fcn.0049608e
lea edx, [esi + 0x34]
lea ecx, [esp + 0x1f4]
push edx
call fcn.0049608e
lea eax, [esi + 0x38]
lea ecx, [esp + 0x1f8]
push eax
call fcn.0049608e
lea ecx, [esi + 0x3c]
push ecx
lea ecx, [esp + 0x200]
call fcn.0049608e
lea edx, [esi + 0x40]
lea ecx, [esp + 0x200]
push edx
call fcn.0049608e
lea eax, [esi + 0x44]
lea ecx, [esp + 0x204]
push eax
call fcn.0049608e
lea ecx, [esi + 0x48]
push ecx
lea ecx, [esp + 0x20c]
call fcn.0049608e
lea edx, [esi + 0x4c]
lea ecx, [esp + 0x20c]
push edx
call fcn.0049608e
lea eax, [esi + 0x50]
lea ecx, [esp + 0x210]
push eax
call fcn.0049608e
lea ecx, [esi + 0x54]
push ecx
lea ecx, [esp + 0x218]
call fcn.0049608e
lea edx, [esi + 0x58]
lea ecx, [esp + 0x218]
push edx
call fcn.0049608e
lea eax, [esi + 0x5c]
lea ecx, [esp + 0x21c]
push eax
call fcn.0049608e
lea ecx, [esi + 0x60]
push ecx
lea ecx, [esp + 0x224]
call fcn.0049608e
lea edx, [esi + 0x64]
lea ecx, [esp + 0x224]
push edx
call fcn.0049608e
lea eax, [esi + 0x68]
lea ecx, [esp + 0x228]
push eax
call fcn.0049608e
lea ecx, [esi + 0x6c]
push ecx
lea ecx, [esp + 0x230]
call fcn.0049608e
lea edx, [esi + 0x70]
lea ecx, [esp + 0x230]
push edx
call fcn.0049608e
lea eax, [esi + 0x74]
lea ecx, [esp + 0x234]
push eax
call fcn.0049608e
lea ecx, [esi + 0x78]
push ecx
lea ecx, [esp + 0x23c]
call fcn.0049608e
lea edx, [esi + 0x7c]
lea ecx, [esp + 0x23c]
push edx
call fcn.0049608e
lea eax, [esi + 0x80]
lea ecx, [esp + 0x240]
push eax
call fcn.0049608e
lea ecx, [esi + 0x84]
push ecx
lea ecx, [esp + 0x248]
call fcn.0049608e
lea edx, [esi + 0x88]
lea ecx, [esp + 0x248]
push edx
call fcn.0049608e
add esi, 0x8c
lea ecx, [esp + 0x24c]
push esi
call fcn.0049608e
lea ecx, [esp + 0x3e0]
mov byte [esp + 0x478], 0x4c
call fcn.00401450
lea eax, [esp + 0x210]
push eax
lea ecx, [esp + 0x19c]
call fcn.0049608e
mov edx, dword [esp + 0x2fc]
lea ecx, [esp + 0x140]
push ecx
push edx
lea ecx, [esp + 0x2fc]
call fcn.00444790
lea ecx, [esp + 0x9c]
call fcn.00406060
cmp eax, 2
jle 0x440252
mov eax, dword [esp + 0xa0]
add eax, 0x18
jmp 0x440259
lea eax, [esp + 0xb0]
mov esi, dword [eax + 4]
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x478], 0x4a
call fcn.00401450
lea ecx, [esp + 0xf8]
mov byte [esp + 0x478], 0x47
call fcn.0040e550
lea ecx, [esp + 0x138]
mov byte [esp + 0x478], 0x44
call fcn.0040e550
lea ecx, [esp + 0xc0]
mov byte [esp + 0x478], 0x41
call fcn.0040e550
lea ecx, [esp + 0xd8]
mov byte [esp + 0x478], 0x3e
call fcn.0040e550
lea ecx, [esp + 0x10c]
mov byte [esp + 0x478], 0x3b
call fcn.0040e550
lea ecx, [esp + 0x12c]
mov byte [esp + 0x478], 0x38
call fcn.0040e550
lea ecx, [esp + 0x11c]
mov byte [esp + 0x478], 0x35
call fcn.0040e550
lea ecx, [esp + 0xf0]
mov byte [esp + 0x478], 0x32
call fcn.0040e550
lea ecx, [esp + 0x104]
mov byte [esp + 0x478], 0x2f
call fcn.0040e550
lea ecx, [esp + 0x114]
mov byte [esp + 0x478], 0x2c
call fcn.0040e550
lea ecx, [esp + 0x124]
mov byte [esp + 0x478], 0x29
call fcn.0040e550
lea ecx, [esp + 0x90]
mov byte [esp + 0x478], 0x26
call fcn.0040e550
lea ecx, [esp + 0x78]
mov byte [esp + 0x478], 0x23
call fcn.0040e550
lea ecx, [esp + 0x68]
mov byte [esp + 0x478], 0x20
call fcn.0040e550
lea ecx, [esp + 0x88]
mov byte [esp + 0x478], 0x1d
call fcn.0040e550
lea ecx, [esp + 0x98]
mov byte [esp + 0x478], 0x1a
call fcn.0040e550
lea ecx, [esp + 0x80]
mov byte [esp + 0x478], 0x17
call fcn.0040e550
lea ecx, [esp + 0x70]
mov byte [esp + 0x478], 0x14
call fcn.0040e550
lea ecx, [esp + 0x50]
mov byte [esp + 0x478], 0x11
call fcn.0040e550
lea ecx, [esp + 0x14]
mov byte [esp + 0x478], 0x10
call fcn.00404fa0
lea ecx, [esp + 0x44]
mov byte [esp + 0x478], 0xe
call fcn.0040e550
lea ecx, [esp + 0x10]
mov byte [esp + 0x478], 0xb
call fcn.00495f55
lea ecx, [esp + 0x140]
mov byte [esp + 0x478], 0xa
call fcn.00401100
mov eax, dword [esp + 0x38]
push esi
lea ecx, [esp + 0xe0]
push ebx
lea edx, [esp + 0xa4]
push ecx
push edx
push eax
push esi
call fcn.004053a0
add esp, 0x18
test al, al
jne 0x43f050
lea ecx, [esp + 0xe4]
call fcn.0040f6a0
push ebx
push str._product2__item_.___item___product2_
lea ecx, [esp + 0xec]
mov byte [esp + 0x480], 0x4e
call fcn.00404f70
push ebx
mov ecx, ebp
mov byte [esp + 0x47c], 0x4f
call fcn.00496385
mov edx, eax
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x5c]
call fcn.00404fd0
lea ecx, [esp + 0x54]
call fcn.00404ea0
mov esi, dword [esp + 0x58]
lea ecx, [esp + 0x54]
call fcn.00404ea0
mov eax, dword [esp + 0x58]
cmp eax, ebx
jne 0x4404c0
xor ebp, ebp
jmp 0x4404c7
mov ecx, dword [esp + 0x5c]
lea ebp, [ecx + eax]
push esi
lea edx, [esp + 0xe8]
push ebx
lea eax, [esp + 0xa4]
push edx
push eax
push ebp
push esi
call fcn.004053a0
add esp, 0x18
test al, al
je 0x440d16
mov bl, 0x56
lea ecx, [esp + 0x140]
call fcn.0043b4e0
lea ecx, [esp + 0x9c]
mov byte [esp + 0x478], 0x50
call fcn.00406060
cmp eax, 2
jle 0x44051e
mov ecx, dword [esp + 0xa0]
add ecx, 0x18
jmp 0x440525
lea ecx, [esp + 0xb0]
lea edx, [esp + 0xc4]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
xor esi, esi
cmp eax, esi
mov byte [esp + 0x478], 0x51
jne 0x440548
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x14]
call fcn.00495fc3
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x47c], 0x53
call fcn.00404f20
lea ecx, [esp + 0x4c]
call fcn.0040f6a0
push esi
push str.____uid__._____uid__
lea ecx, [esp + 0x54]
mov byte [esp + 0x480], 0x54
call fcn.00404f70
lea eax, [esp + 0x37]
lea ecx, [esp + 0x14]
push eax
mov byte [esp + 0x47c], 0x55
call fcn.0047c7b0
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x30], 0
mov edx, dword [esp + 0x10]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x50]
push esi
dec ecx
push eax
lea eax, [esp + 0x20]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x490], bl
call fcn.004053a0
add esp, 0x18
test al, al
je 0x44063c
lea ecx, [esp + 0x14]
call fcn.00406060
cmp eax, 2
jle 0x4405f5
mov ecx, dword [esp + 0x18]
add ecx, 0x18
jmp 0x4405f9
lea ecx, [esp + 0x28]
lea edx, [esp + 0x290]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x57
cmp eax, esi
jne 0x44061a
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x148]
call fcn.004960de
push 1
lea ecx, [esp + 0x294]
mov byte [esp + 0x47c], bl
call fcn.00404f20
lea ecx, [esp + 0x40]
call fcn.0040f6a0
push esi
push str.____aid__._____aid__
lea ecx, [esp + 0x48]
mov byte [esp + 0x480], 0x58
call fcn.00404f70
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x40]
push esi
lea ecx, [esp + 0x18]
push eax
push ecx
push edx
mov byte [esp + 0x488], 0x59
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x4406d0
lea eax, [esp + 0x2e0]
lea ecx, [esp + 0x14]
push eax
push esi
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x5a
cmp eax, esi
jne 0x4406ad
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x150]
call fcn.004960de
push 1
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x47c], 0x59
call fcn.00404f20
push esi
push str.____type__._____type__
lea ecx, [esp + 0x94]
call fcn.00444660
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x8c]
push esi
lea edx, [esp + 0x18]
push ecx
push edx
push eax
mov byte [esp + 0x488], 0x5b
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440759
lea ecx, [esp + 0x2c0]
push ecx
push esi
lea ecx, [esp + 0x1c]
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x5c
cmp eax, esi
jne 0x440736
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x154]
call fcn.004960de
push 1
lea ecx, [esp + 0x2c4]
mov byte [esp + 0x47c], 0x5b
call fcn.00404f20
push esi
push str.____num__._____num__
lea ecx, [esp + 0x7c]
call fcn.00444660
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x74]
push esi
lea eax, [esp + 0x18]
push edx
push eax
push ecx
mov byte [esp + 0x488], 0x5d
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x4407dc
lea edx, [esp + 0x260]
lea ecx, [esp + 0x14]
push edx
push esi
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x5e
cmp eax, esi
jne 0x4407b9
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x158]
call fcn.004960de
push 1
lea ecx, [esp + 0x264]
mov byte [esp + 0x47c], 0x5d
call fcn.00404f20
push esi
push str.____stealnum__._____stealnum__
lea ecx, [esp + 0x6c]
call fcn.00444660
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x64]
push esi
lea ecx, [esp + 0x18]
push eax
push ecx
push edx
mov byte [esp + 0x488], 0x5f
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x44085f
lea eax, [esp + 0x2a0]
lea ecx, [esp + 0x14]
push eax
push esi
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x60
cmp eax, esi
jne 0x44083c
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x15c]
call fcn.004960de
push 1
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x47c], 0x5f
call fcn.00404f20
push esi
push str.____mtime__._____mtime__
lea ecx, [esp + 0x8c]
call fcn.00444660
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x84]
push esi
lea edx, [esp + 0x18]
push ecx
push edx
push eax
mov byte [esp + 0x488], 0x61
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x4408e8
lea ecx, [esp + 0x270]
push ecx
push esi
lea ecx, [esp + 0x1c]
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x62
cmp eax, esi
jne 0x4408c5
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x160]
call fcn.004960de
push 1
lea ecx, [esp + 0x274]
mov byte [esp + 0x47c], 0x61
call fcn.00404f20
push esi
push str.____skey__._____skey__
lea ecx, [esp + 0x9c]
call fcn.00444660
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x94]
push esi
lea eax, [esp + 0x18]
push edx
push eax
push ecx
mov byte [esp + 0x488], 0x63
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440971
lea edx, [esp + 0x250]
lea ecx, [esp + 0x14]
push edx
push esi
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x64
cmp eax, esi
jne 0x44094e
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x168]
call fcn.004960de
push 1
lea ecx, [esp + 0x254]
mov byte [esp + 0x47c], 0x63
call fcn.00404f20
push esi
push str.____pname__._____pname__
lea ecx, [esp + 0x84]
call fcn.00444660
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x7c]
push esi
lea ecx, [esp + 0x18]
push eax
push ecx
push edx
mov byte [esp + 0x488], 0x65
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x4409f7
lea eax, [esp + 0x2b0]
lea ecx, [esp + 0x14]
push eax
push esi
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x66
cmp eax, esi
jne 0x4409d4
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x16c]
call fcn.004960de
push 1
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x47c], 0x65
call fcn.00404f20
push esi
push str._____._____tname__
lea ecx, [esp + 0x74]
call fcn.00444660
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x6c]
push esi
lea edx, [esp + 0x18]
push ecx
push edx
push eax
mov byte [esp + 0x488], 0x67
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440b40
lea ecx, [esp + 0x2d0]
push ecx
push esi
lea ecx, [esp + 0x1c]
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x68
cmp eax, esi
jne 0x440a5b
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x164]
call fcn.004960de
push 1
lea ecx, [esp + 0x2d4]
mov byte [esp + 0x47c], 0x67
call fcn.00404f20
mov edx, dword [esp + 0x168]
lea ecx, [esp + 0x160]
push edx
call fcn.00493dd9
cmp eax, 0xffffffff
je 0x440ab0
lea eax, [esp + 0x168]
lea ecx, [esp + 0x160]
push eax
call fcn.0049608e
jmp 0x440b40
lea ecx, [esp + 0x1c0]
call fcn.004012e0
push ecx
lea edx, [esp + 0x150]
mov ecx, esp
mov dword [esp + 0x100], esp
push edx
mov byte [esp + 0x480], 0x69
call fcn.00495cca
lea eax, [esp + 0x3e4]
lea ecx, [esp + 0x1c4]
push eax
call fcn.00401a30
push eax
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x47c], 0x6a
call fcn.00402c90
lea ecx, [esp + 0x3e0]
mov byte [esp + 0x478], 0x69
call fcn.00401450
lea ecx, [esp + 0x208]
push ecx
lea ecx, [esp + 0x164]
call fcn.0049608e
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x478], 0x67
call fcn.00401450
push esi
push str.____tips__._____tips__
lea ecx, [esp + 0xc4]
call fcn.00444660
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0xbc]
push esi
lea eax, [esp + 0x18]
push edx
push eax
push ecx
mov byte [esp + 0x488], 0x6b
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440bc9
lea edx, [esp + 0x280]
lea ecx, [esp + 0x14]
push edx
push esi
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x6c
cmp eax, esi
jne 0x440ba6
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x170]
call fcn.004960de
push 1
lea ecx, [esp + 0x284]
mov byte [esp + 0x47c], 0x6b
call fcn.00404f20
mov ecx, dword [esp + 0x30c]
lea eax, [esp + 0x140]
push eax
push ecx
lea ecx, [esp + 0x30c]
mov dword [esp + 0x180], 1
call fcn.00444a10
push 0
lea ecx, [esp + 0xa0]
call fcn.00412720
mov esi, dword [eax + 4]
lea ecx, [esp + 0xc0]
mov byte [esp + 0x478], 0x67
call fcn.0040e550
lea ecx, [esp + 0x70]
mov byte [esp + 0x478], 0x65
call fcn.0040e550
lea ecx, [esp + 0x80]
mov byte [esp + 0x478], 0x63
call fcn.0040e550
lea ecx, [esp + 0x98]
mov byte [esp + 0x478], 0x61
call fcn.0040e550
lea ecx, [esp + 0x88]
mov byte [esp + 0x478], 0x5f
call fcn.0040e550
lea ecx, [esp + 0x68]
mov byte [esp + 0x478], 0x5d
call fcn.0040e550
lea ecx, [esp + 0x78]
mov byte [esp + 0x478], 0x5b
call fcn.0040e550
lea ecx, [esp + 0x90]
mov byte [esp + 0x478], 0x59
call fcn.0040e550
lea ecx, [esp + 0x44]
mov byte [esp + 0x478], bl
call fcn.0040e550
lea ecx, [esp + 0x14]
mov byte [esp + 0x478], 0x55
call fcn.00404fa0
lea ecx, [esp + 0x50]
mov byte [esp + 0x478], 0x53
call fcn.0040e550
lea ecx, [esp + 0x10]
mov byte [esp + 0x478], 0x50
call fcn.00495f55
lea ecx, [esp + 0x140]
mov byte [esp + 0x478], 0x4f
call fcn.0043b560
push esi
lea edx, [esp + 0xe8]
push 0
lea eax, [esp + 0xa4]
push edx
push eax
push ebp
push esi
call fcn.004053a0
add esp, 0x18
test al, al
jne 0x4404ed
xor ebx, ebx
mov esi, dword [esp + 0x3c]
push ebx
push str.____water__._____water__
lea ecx, [esp + 0x1b8]
call fcn.00444660
mov eax, dword [esi]
lea ecx, [esp + 0x1b0]
push ebx
lea edx, [esp + 0xa0]
push ecx
push edx
push eax
mov byte [esp + 0x488], 0x6d
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440da7
lea eax, [esp + 0xc4]
lea ecx, [esp + 0x9c]
push eax
push ebx
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x6e
cmp eax, ebx
jne 0x440d84
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x334]
call fcn.004960de
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x47c], 0x6d
call fcn.00404f20
push ebx
push str.____watertips__._____watertips__
lea ecx, [esp + 0x1b0]
call fcn.00444660
mov eax, dword [esi]
lea ecx, [esp + 0x1a8]
push ebx
lea edx, [esp + 0xa0]
push ecx
push edx
push eax
mov byte [esp + 0x488], 0x6f
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440e34
lea eax, [esp + 0xc4]
lea ecx, [esp + 0x9c]
push eax
push ebx
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x70
cmp eax, ebx
jne 0x440e11
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x338]
call fcn.004960de
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x47c], 0x6f
call fcn.00404f20
push ebx
push str._____watername__grass__._____grass__grasstips__
lea ecx, [esp + 0x1c0]
call fcn.00444660
mov eax, dword [esi]
lea ecx, [esp + 0x1b8]
push ebx
lea edx, [esp + 0xa0]
push ecx
push edx
push eax
mov byte [esp + 0x488], 0x71
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440ec1
lea eax, [esp + 0xc4]
lea ecx, [esp + 0x9c]
push eax
push ebx
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x72
cmp eax, ebx
jne 0x440e9e
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x33c]
call fcn.004960de
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x47c], 0x71
call fcn.00404f20
push 0
push str.____grasstips__._____grasstips__
lea ecx, [esp + 0x1a8]
call fcn.00444660
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x1a0]
push 0
push edx
mov eax, dword [ecx]
lea ecx, [esp + 0xa4]
mov bl, 0x73
push ecx
push eax
mov byte [esp + 0x488], bl
call fcn.0043dae0
add esp, 0x10
test al, al
je 0x440f55
lea edx, [esp + 0xc4]
lea ecx, [esp + 0x9c]
push edx
push 0
call fcn.00412720
mov ecx, eax
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x478], 0x74
test eax, eax
jne 0x440f33
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x340]
call fcn.004960de
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x47c], bl
call fcn.00404f20
mov esi, dword [esp + 0x480]
lea eax, [esp + 0x2f0]
push eax
mov ecx, esi
call fcn.0043db10
mov dword [esp + 0x130], 1
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x478], 0x71
call fcn.0040e550
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x478], 0x6f
call fcn.0040e550
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x478], 0x6d
call fcn.0040e550
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x478], 0x4f
call fcn.0040e550
lea ecx, [esp + 0xe8]
mov byte [esp + 0x478], 0xa
call fcn.0040e550
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x478], 9
call fcn.0044cff0
lea ecx, [esp + 0x13c]
mov byte [esp + 0x478], 8
call fcn.00495f55
push 1
lea ecx, [esp + 0x58]
mov byte [esp + 0x47c], 7
call fcn.00404f20
lea ecx, [esp + 0xe0]
mov byte [esp + 0x478], 5
call fcn.0040e550
lea ecx, [esp + 0x9c]
mov byte [esp + 0x478], 2
call fcn.00404fa0
lea ecx, [esp + 0x48]
mov byte [esp + 0x478], 1
call fcn.00495f55
lea ecx, [esp + 0x484]
mov byte [esp + 0x478], 0
call fcn.00495f55
mov ecx, dword [esp + 0x470]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x46c
ret 8