Function at 0x442e10
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4ab5bd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc8
push ebx
push ebp
xor ebx, ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0x28], ebx
mov eax, dword [0x4d14fc]
mov dword [esp + 0xe0], 1
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], eax
push 0x4d5fb8
lea ecx, [esp + 0x20]
mov byte [esp + 0xe4], 4
call fcn.004960de
push eax
lea ecx, [esp + 0x18]
call fcn.0049608e
push eax
lea ecx, [esp + 0x1c]
call fcn.0049608e
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0xec]
push eax
push ecx
lea edx, [esp + 0x20]
push str._house__ranch__getfriendtools.php_bskey_sverify_s
push edx
call fcn.0049415f
add esp, 0xc
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.00495cca
push ecx
mov byte [esp + 0xe8], 5
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.www.kaixin001.com
call fcn.00495fc3
lea ecx, [esp + 0x34]
mov byte [esp + 0xe8], 4
push ecx
lea ecx, [esi + 4]
call fcn.00416700
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xe4], 6
call fcn.0049608e
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe0], 4
call fcn.00495f55
mov dl, byte [esp + 0x13]
mov dword [esp + 0x34], ebx
mov byte [esp + 0x30], dl
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov byte [esp + 0x4c], bl
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
push ebx
push str.____item__fuid__._____fuid__
lea ecx, [esp + 0x28]
mov byte [esp + 0xe8], 8
call fcn.00404f70
mov edx, dword [esp + 0x14]
mov byte [esp + 0xe0], 9
mov ebp, edx
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov esi, ecx
lea ecx, [esp + 0x20]
add esi, edx
call fcn.0044cb40
test eax, 0x80000
jne 0x44301d
push ebp
lea eax, [esp + 0x24]
push ebx
lea ecx, [esp + 0x38]
push eax
push ecx
push esi
push ebp
lea ecx, [esp + 0x80]
call fcn.004455c0
push 0x405d90
lea ecx, [esp + 0x6c]
mov byte [esp + 0xe4], 0xa
call fcn.00445940
lea ecx, [esp + 0x68]
mov byte [esp + 0x13], al
mov byte [esp + 0xe0], 9
call fcn.004105d0
cmp byte [esp + 0x13], bl
je 0x44301d
mov esi, dword [esp + 0x34]
cmp esi, ebx
je 0x442fde
mov ecx, dword [esp + 0x38]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 1
mov eax, edx
lea ecx, [esi + 0x18]
shr eax, 0x1f
add edx, eax
cmp edx, 2
jg 0x442fe2
lea ecx, [esp + 0x44]
lea edx, [esp + 0x58]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0xe0], 0xb
cmp eax, ebx
jne 0x443000
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x20]
call fcn.004960de
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0xe4], 9
call fcn.00404f20
mov edi, dword [esp + 0xe8]
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
call fcn.00495cca
mov dword [esp + 0x28], 1
mov esi, dword [esp + 0x24]
mov byte [esp + 0xe0], 7
cmp esi, ebx
je 0x443078
lea ecx, [esi + 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
mov eax, edx
test eax, eax
jne 0x443078
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
lea eax, [esi + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
mov edx, ecx
test edx, edx
jne 0x443078
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
mov ecx, dword [esp + 0x34]
push ecx
call fcn.00495cbf
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov byte [esp + 0xe0], 3
call fcn.00495f55
lea ecx, [esp + 0x14]
mov byte [esp + 0xe0], 2
call fcn.00495f55
lea ecx, [esp + 0x18]
mov byte [esp + 0xe0], 1
call fcn.00495f55
lea ecx, [esp + 0xec]
mov byte [esp + 0xe0], bl
call fcn.00495f55
mov ecx, dword [esp + 0xd8]
mov eax, edi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xd4
ret 8