Function at 0x41d5bd
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4a6a5a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5c0
push ebx
push ebp
push esi
mov esi, ecx
push edi
push 0x4d5fb8
lea ecx, [esp + 0xb8]
mov dword [esp + 0x98], esi
call fcn.00495fc3
xor ebx, ebx
push 0x4cc618
lea ecx, [esp + 0xe8]
mov dword [esp + 0x5dc], ebx
call fcn.00495fc3
push 0x4d5fb8
lea ecx, [esp + 0xe0]
mov byte [esp + 0x5dc], 1
call fcn.00495fc3
mov eax, dword [0x4d14fc]
mov dword [esp + 0x3c], eax
mov edi, dword [esp + 0x5e0]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
mov ecx, dword [edi + 0x1c]
push 0x18b
push ecx
mov byte [esp + 0x5e8], 3
call ebp
mov edx, dword [edi + 0x1c]
push 0x4cded0
push eax
push 0x181
push edx
call ebp
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe4]
mov edx, dword [esi + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0xc0]
push str._house__garden__getconf.php_verify_sfuid_sr
push eax
call fcn.0049415f
add esp, 0x10
lea edx, [esp + 0xb8]
mov ecx, esp
mov dword [esp + 0xdc], esp
push edx
call fcn.00495cca
push ecx
mov byte [esp + 0x5e0], 4
mov ecx, esp
mov dword [esp + 0xe8], esp
push str.www.kaixin001.com
call fcn.00495fc3
lea eax, [esp + 0x24]
lea ecx, [esi + 4]
push eax
mov byte [esp + 0x5e4], 3
call fcn.00416700
mov ecx, dword [edi + 0x1c]
push ebx
push ebx
push 0x18b
push ecx
mov byte [esp + 0x5e8], 5
call ebp
mov edx, dword [edi + 0x1c]
push 0x4cde88
push eax
push 0x181
push edx
call ebp
lea eax, [esp + 0x23]
lea ecx, [esp + 0x40]
push eax
call fcn.0047c7b0
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov byte [esp + 0x5c], bl
lea ecx, [esp + 0x140]
mov byte [esp + 0x5d8], 6
call fcn.0040f6a0
push ebx
push 0x4cde78
lea ecx, [esp + 0x148]
mov byte [esp + 0x5e0], 7
call fcn.00404f70
mov edx, dword [esp + 0x1c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x144]
push ebx
dec ecx
push eax
lea eax, [esp + 0x4c]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 8
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41d7b8
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41d774
mov ecx, dword [esp + 0x44]
add ecx, 0x18
jmp 0x41d778
lea ecx, [esp + 0x54]
lea edx, [esp + 0xc0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 9
cmp eax, ebx
jne 0x41d799
mov eax, 0x4b1900
push eax
lea ecx, [esi + 0x60]
call fcn.004960de
push 1
lea ecx, [esp + 0xc4]
mov byte [esp + 0x5dc], 8
call fcn.00404f20
lea ecx, [esp + 0x198]
call fcn.0040f6a0
push ebx
push str.____rank__._____rank__
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x5e0], 0xa
call fcn.00404f70
mov edx, dword [esp + 0x1c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x19c]
push ebx
dec ecx
push eax
lea eax, [esp + 0x4c]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0xb
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41d870
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41d82c
mov ecx, dword [esp + 0x44]
add ecx, 0x18
jmp 0x41d830
lea ecx, [esp + 0x54]
lea edx, [esp + 0xc0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0xc
cmp eax, ebx
jne 0x41d851
mov eax, 0x4b1900
push eax
lea ecx, [esi + 0x64]
call fcn.004960de
push 1
lea ecx, [esp + 0xc4]
mov byte [esp + 0x5dc], 0xb
call fcn.00404f20
lea ecx, [esp + 0x18c]
call fcn.0040f6a0
push ebx
push str.____ranktip__._____ranktip__
lea ecx, [esp + 0x194]
mov byte [esp + 0x5e0], 0xd
call fcn.00404f70
mov edx, dword [esp + 0x1c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x190]
push ebx
dec ecx
push eax
lea eax, [esp + 0x4c]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0xe
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41d928
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41d8e4
mov ecx, dword [esp + 0x44]
add ecx, 0x18
jmp 0x41d8e8
lea ecx, [esp + 0x54]
lea edx, [esp + 0xc0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0xf
cmp eax, ebx
jne 0x41d909
mov eax, 0x4b1900
push eax
lea ecx, [esi + 0x68]
call fcn.004960de
push 1
lea ecx, [esp + 0xc4]
mov byte [esp + 0x5dc], 0xe
call fcn.00404f20
lea ecx, [esp + 0x17c]
call fcn.0040f6a0
push ebx
push str.____cash__._____cash__
lea ecx, [esp + 0x184]
mov byte [esp + 0x5e0], 0x10
call fcn.00404f70
mov edx, dword [esp + 0x1c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x180]
push ebx
dec ecx
push eax
lea eax, [esp + 0x4c]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x11
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41d9e0
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41d99c
mov ecx, dword [esp + 0x44]
add ecx, 0x18
jmp 0x41d9a0
lea ecx, [esp + 0x54]
lea edx, [esp + 0xc0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x12
cmp eax, ebx
jne 0x41d9c1
mov eax, 0x4b1900
push eax
lea ecx, [esi + 0x6c]
call fcn.004960de
push 1
lea ecx, [esp + 0xc4]
mov byte [esp + 0x5dc], 0x11
call fcn.00404f20
lea ecx, [esp + 0x138]
call fcn.0040f6a0
push ebx
push str.____cashtip__._____cashtip__
lea ecx, [esp + 0x140]
mov byte [esp + 0x5e0], 0x13
call fcn.00404f70
mov edx, dword [esp + 0x1c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x13c]
push ebx
dec ecx
push eax
lea eax, [esp + 0x4c]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x14
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41da98
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41da54
mov ecx, dword [esp + 0x44]
add ecx, 0x18
jmp 0x41da58
lea ecx, [esp + 0x54]
lea edx, [esp + 0xc0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x15
cmp eax, ebx
jne 0x41da79
mov eax, 0x4b1900
push eax
lea ecx, [esi + 0x70]
call fcn.004960de
push 1
lea ecx, [esp + 0xc4]
mov byte [esp + 0x5dc], 0x14
call fcn.00404f20
lea ecx, [esp + 0x164]
call fcn.0040f6a0
push ebx
push str.____name__._____name__
lea ecx, [esp + 0x16c]
mov byte [esp + 0x5e0], 0x16
call fcn.00404f70
mov edx, dword [esp + 0x1c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x168]
push ebx
dec ecx
push eax
lea eax, [esp + 0x4c]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x17
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41db50
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41db0c
mov ecx, dword [esp + 0x44]
add ecx, 0x18
jmp 0x41db10
lea ecx, [esp + 0x54]
lea edx, [esp + 0xc0]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x18
cmp eax, ebx
jne 0x41db31
mov eax, 0x4b1900
push eax
lea ecx, [esi + 0x5c]
call fcn.004960de
push 1
lea ecx, [esp + 0xc4]
mov byte [esp + 0x5dc], 0x17
call fcn.00404f20
mov esi, dword [esp + 0x5e0]
push ebx
push ebx
push 0x18b
mov eax, dword [esi + 0x1c]
push eax
call ebp
mov ecx, dword [esi + 0x1c]
push 0x4d5fb8
push eax
push 0x181
push ecx
call ebp
mov eax, dword [esp + 0x94]
mov edx, dword [eax + 0x70]
mov ecx, dword [eax + 0x68]
push edx
mov edx, dword [eax + 0x60]
mov eax, dword [eax + 0x5c]
push ecx
push edx
push eax
lea ecx, [esp + 0x4c]
push str._s_ID:_s__s___s
push ecx
call fcn.0049415f
mov edx, dword [esi + 0x1c]
add esp, 0x18
push ebx
push ebx
push 0x18b
push edx
call ebp
mov ecx, dword [esp + 0x3c]
mov edx, dword [esi + 0x1c]
push ecx
push eax
push 0x181
push edx
call ebp
mov eax, dword [esi + 0x1c]
push ebx
push ebx
push 0x18b
push eax
call ebp
mov ecx, dword [esi + 0x1c]
push 0x4d5fb8
push eax
push 0x181
push ecx
call ebp
lea ecx, [esp + 0x118]
call fcn.0040f6a0
push ebx
push str._item_.___item_
lea ecx, [esp + 0x120]
mov byte [esp + 0x5e0], 0x19
call fcn.00404f70
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x5dc], 0x1a
call fcn.00496385
mov dl, byte [esp + 0x23]
push ebx
lea ecx, [esp + 0x12c]
mov esi, eax
mov byte [esp + 0x12c], dl
call fcn.00404f20
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x130]
call fcn.00404fd0
lea ecx, [esp + 0x128]
mov byte [esp + 0x5d8], 0x1b
call fcn.00404ea0
mov esi, dword [esp + 0x12c]
lea ecx, [esp + 0x128]
call fcn.00404ea0
mov eax, dword [esp + 0x12c]
cmp eax, ebx
jne 0x41dc81
mov dword [esp + 0xa4], ebx
jmp 0x41dc91
mov ecx, dword [esp + 0x130]
add ecx, eax
mov dword [esp + 0xa4], ecx
mov edx, dword [0x4d14fc]
mov dword [esp + 0xac], edx
mov edx, dword [esp + 0xa4]
push esi
lea eax, [esp + 0x11c]
push ebx
lea ecx, [esp + 0x48]
push eax
push ecx
push edx
push esi
mov byte [esp + 0x5f0], 0x1c
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41f8ff
lea ecx, [esp + 0x1c8]
call fcn.0041cfd0
push 0x4cc618
lea ecx, [esp + 0x208]
mov byte [esp + 0x5dc], 0x1d
call fcn.004960de
push 0x4cc898
lea ecx, [esp + 0x20c]
call fcn.004960de
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41dd1b
mov eax, dword [esp + 0x44]
lea ecx, [eax + 0x18]
jmp 0x41dd1f
lea ecx, [esp + 0x54]
lea edx, [esp + 0x4e8]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x1e
cmp eax, ebx
jne 0x41dd40
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x18]
call fcn.00495fc3
push 1
lea ecx, [esp + 0x4ec]
mov byte [esp + 0x5dc], 0x20
call fcn.00404f20
lea eax, [esp + 0x9b]
lea ecx, [esp + 0x2d8]
push eax
call fcn.0047c7b0
mov dword [esp + 0x2ec], ebx
mov dword [esp + 0x2f0], ebx
mov byte [esp + 0x2f4], bl
push 0x4cddcc
lea ecx, [esp + 0x74]
mov byte [esp + 0x5dc], 0x21
call fcn.00495fc3
lea ecx, [esp + 0x120]
mov byte [esp + 0x5d8], 0x22
call fcn.0040f6a0
push ebx
push str.____cropsid__._____cropsid__
lea ecx, [esp + 0x128]
mov byte [esp + 0x5e0], 0x23
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x124]
push ebx
dec ecx
push eax
lea eax, [esp + 0x2e4]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x24
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41de7d
lea ecx, [esp + 0x2d8]
call fcn.00406060
cmp eax, 2
jle 0x41de24
mov ecx, dword [esp + 0x2dc]
add ecx, 0x18
jmp 0x41de2b
lea ecx, [esp + 0x2ec]
lea edx, [esp + 0x4c8]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x25
cmp eax, ebx
jne 0x41de4c
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x74]
call fcn.004960de
push 1
lea ecx, [esp + 0x4cc]
mov byte [esp + 0x5dc], 0x24
call fcn.00404f20
lea eax, [esp + 0x70]
lea ecx, [esp + 0x1d0]
push eax
call fcn.0049608e
lea ecx, [esp + 0xa3]
push ecx
lea ecx, [esp + 0x29c]
call fcn.0047c7b0
mov dword [esp + 0x2ac], ebx
mov dword [esp + 0x2b0], ebx
mov byte [esp + 0x2b4], bl
push 0x4d5fb8
lea ecx, [esp + 0x3c]
mov byte [esp + 0x5dc], 0x26
call fcn.00495fc3
lea ecx, [esp + 0x108]
mov byte [esp + 0x5d8], 0x27
call fcn.0040f6a0
push ebx
push str.____farmnum__._____farmnum__
lea ecx, [esp + 0x110]
mov byte [esp + 0x5e0], 0x28
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x10c]
push ebx
dec ecx
push eax
lea eax, [esp + 0x2a4]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x29
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41df9a
lea ecx, [esp + 0x298]
call fcn.00406060
cmp eax, 2
jle 0x41df41
mov ecx, dword [esp + 0x29c]
add ecx, 0x18
jmp 0x41df48
lea ecx, [esp + 0x2ac]
lea edx, [esp + 0x508]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x2a
cmp eax, ebx
jne 0x41df69
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x3c]
call fcn.004960de
push 1
lea ecx, [esp + 0x50c]
mov byte [esp + 0x5dc], 0x29
call fcn.00404f20
lea eax, [esp + 0x38]
lea ecx, [esp + 0x1cc]
push eax
call fcn.0049608e
lea ecx, [esp + 0xb3]
push ecx
lea ecx, [esp + 0x25c]
call fcn.0047c7b0
mov dword [esp + 0x26c], ebx
mov dword [esp + 0x270], ebx
mov byte [esp + 0x274], bl
push 0x4cddcc
lea ecx, [esp + 0x80]
mov byte [esp + 0x5dc], 0x2b
call fcn.00495fc3
lea ecx, [esp + 0xf8]
mov byte [esp + 0x5d8], 0x2c
call fcn.0040f6a0
push ebx
push str.____seedid__._____seedid__
lea ecx, [esp + 0x100]
mov byte [esp + 0x5e0], 0x2d
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xfc]
push ebx
dec ecx
push eax
lea eax, [esp + 0x264]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x2e
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e0bd
lea ecx, [esp + 0x258]
call fcn.00406060
cmp eax, 2
jle 0x41e061
mov ecx, dword [esp + 0x25c]
add ecx, 0x18
jmp 0x41e068
lea ecx, [esp + 0x26c]
lea edx, [esp + 0x438]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x2f
cmp eax, ebx
jne 0x41e089
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x80]
call fcn.004960de
push 1
lea ecx, [esp + 0x43c]
mov byte [esp + 0x5dc], 0x2e
call fcn.00404f20
lea eax, [esp + 0x7c]
lea ecx, [esp + 0x1d4]
push eax
call fcn.0049608e
lea ecx, [esp + 0xbd]
push ecx
lea ecx, [esp + 0x23c]
call fcn.0047c7b0
mov dword [esp + 0x24c], ebx
mov dword [esp + 0x250], ebx
mov byte [esp + 0x254], bl
mov edx, dword [0x4d14fc]
mov dword [esp + 0x74], edx
lea ecx, [esp + 0xf0]
mov byte [esp + 0x5d8], 0x31
call fcn.0040f6a0
push ebx
push str.____water__._____water__
lea ecx, [esp + 0xf8]
mov byte [esp + 0x5e0], 0x32
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xf4]
push ebx
dec ecx
push eax
lea eax, [esp + 0x244]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x33
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e1d1
lea ecx, [esp + 0x238]
call fcn.00406060
cmp eax, 2
jle 0x41e175
mov ecx, dword [esp + 0x23c]
add ecx, 0x18
jmp 0x41e17c
lea ecx, [esp + 0x24c]
lea edx, [esp + 0x418]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x34
cmp eax, ebx
jne 0x41e19d
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x78]
call fcn.004960de
push 1
lea ecx, [esp + 0x41c]
mov byte [esp + 0x5dc], 0x33
call fcn.00404f20
mov eax, dword [esp + 0x74]
push eax
call fcn.00459043
add esp, 4
mov dword [esp + 0x1e0], eax
lea ecx, [esp + 0xd2]
push ecx
lea ecx, [esp + 0x27c]
call fcn.0047c7b0
mov dword [esp + 0x28c], ebx
mov dword [esp + 0x290], ebx
mov byte [esp + 0x294], bl
mov edx, dword [0x4d14fc]
mov dword [esp + 0x68], edx
lea ecx, [esp + 0xe8]
mov byte [esp + 0x5d8], 0x36
call fcn.0040f6a0
push ebx
push str.____vermin__._____vermin__
lea ecx, [esp + 0xf0]
mov byte [esp + 0x5e0], 0x37
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xec]
push ebx
dec ecx
push eax
lea eax, [esp + 0x284]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x38
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e2e5
lea ecx, [esp + 0x278]
call fcn.00406060
cmp eax, 2
jle 0x41e289
mov ecx, dword [esp + 0x27c]
add ecx, 0x18
jmp 0x41e290
lea ecx, [esp + 0x28c]
lea edx, [esp + 0x458]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x39
cmp eax, ebx
jne 0x41e2b1
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x6c]
call fcn.004960de
push 1
lea ecx, [esp + 0x45c]
mov byte [esp + 0x5dc], 0x38
call fcn.00404f20
mov eax, dword [esp + 0x68]
push eax
call fcn.00459043
add esp, 4
mov dword [esp + 0x1e8], eax
lea ecx, [esp + 0xd3]
push ecx
lea ecx, [esp + 0x2bc]
call fcn.0047c7b0
mov dword [esp + 0x2cc], ebx
mov dword [esp + 0x2d0], ebx
mov byte [esp + 0x2d4], bl
push 0x4d5fb8
lea ecx, [esp + 0x68]
mov byte [esp + 0x5dc], 0x3a
call fcn.00495fc3
lea ecx, [esp + 0x110]
mov byte [esp + 0x5d8], 0x3b
call fcn.0040f6a0
push ebx
push str.____cropsstatus__._____cropsstatus__
lea ecx, [esp + 0x118]
mov byte [esp + 0x5e0], 0x3c
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x114]
push ebx
dec ecx
push eax
lea eax, [esp + 0x2c4]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x3d
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e405
lea ecx, [esp + 0x2b8]
call fcn.00406060
cmp eax, 2
jle 0x41e3a9
mov ecx, dword [esp + 0x2bc]
add ecx, 0x18
jmp 0x41e3b0
lea ecx, [esp + 0x2cc]
lea edx, [esp + 0x4d8]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x3e
cmp eax, ebx
jne 0x41e3d1
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x68]
call fcn.004960de
push 1
lea ecx, [esp + 0x4dc]
mov byte [esp + 0x5dc], 0x3d
call fcn.00404f20
mov eax, dword [esp + 0x64]
push eax
call fcn.00459043
add esp, 4
mov dword [esp + 0x1f0], eax
lea ecx, [esp + 0xbe]
push ecx
lea ecx, [esp + 0x21c]
call fcn.0047c7b0
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x230], ebx
mov byte [esp + 0x234], bl
push 0x4d5fb8
lea ecx, [esp + 0x2c]
mov byte [esp + 0x5dc], 0x3f
call fcn.00495fc3
lea ecx, [esp + 0x100]
mov byte [esp + 0x5d8], 0x40
call fcn.0040f6a0
push ebx
push str.____status__._____status__
lea ecx, [esp + 0x108]
mov byte [esp + 0x5e0], 0x41
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x104]
push ebx
dec ecx
push eax
lea eax, [esp + 0x224]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x42
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e568
lea ecx, [esp + 0x218]
call fcn.00406060
cmp eax, 2
jle 0x41e4cd
mov ecx, dword [esp + 0x21c]
add ecx, 0x18
jmp 0x41e4d4
lea ecx, [esp + 0x22c]
lea edx, [esp + 0x478]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x43
cmp eax, ebx
jne 0x41e4f5
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x2c]
call fcn.004960de
push 1
lea ecx, [esp + 0x47c]
mov byte [esp + 0x5dc], 0x42
call fcn.00404f20
mov eax, dword [esp + 0x28]
push 0x4cc618
push eax
call fcn.00458f09
add esp, 8
test eax, eax
jne 0x41e554
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41e548
mov ecx, dword [esp + 0x44]
mov esi, dword [ecx + 0x1c]
lea eax, [ecx + 0x18]
jmp 0x41f723
lea eax, [esp + 0x54]
mov esi, dword [eax + 4]
jmp 0x41f723
mov edx, dword [esp + 0x28]
push edx
call fcn.00459043
add esp, 4
mov dword [esp + 0x1f4], eax
lea eax, [esp + 0x83]
lea ecx, [esp + 0x3f8]
push eax
call fcn.0047c7b0
mov dword [esp + 0x40c], ebx
mov dword [esp + 0x410], ebx
mov byte [esp + 0x414], bl
mov ecx, dword [0x4d14fc]
mov dword [esp + 0xd8], ecx
lea ecx, [esp + 0xc0]
mov byte [esp + 0x5d8], 0x45
call fcn.0040f6a0
push ebx
push str.____fuid__._____fuid__
lea ecx, [esp + 0xc8]
mov byte [esp + 0x5e0], 0x46
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0xc4]
push ebx
dec ecx
push eax
lea eax, [esp + 0x404]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x47
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e66e
lea ecx, [esp + 0x3f8]
call fcn.00406060
cmp eax, 2
jle 0x41e623
mov ecx, dword [esp + 0x3fc]
add ecx, 0x18
jmp 0x41e62a
lea ecx, [esp + 0x40c]
lea edx, [esp + 0x4f8]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x48
cmp eax, ebx
jne 0x41e64b
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x200]
call fcn.004960de
push 1
lea ecx, [esp + 0x4fc]
mov byte [esp + 0x5dc], 0x47
call fcn.00404f20
lea eax, [esp + 0xbb]
lea ecx, [esp + 0x3b8]
push eax
call fcn.0047c7b0
mov dword [esp + 0x3cc], ebx
mov dword [esp + 0x3d0], ebx
mov byte [esp + 0x3d4], bl
mov ecx, dword [0x4d14fc]
mov dword [esp + 0xe0], ecx
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x5d8], 0x4a
call fcn.0040f6a0
push ebx
push str.____shared__._____shared__
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x5e0], 0x4b
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x1bc]
push ebx
dec ecx
push eax
lea eax, [esp + 0x3c4]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x4c
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e767
lea ecx, [esp + 0x3b8]
call fcn.00406060
cmp eax, 2
jle 0x41e729
mov ecx, dword [esp + 0x3bc]
add ecx, 0x18
jmp 0x41e730
lea ecx, [esp + 0x3cc]
lea edx, [esp + 0x498]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x41e749
mov eax, 0x4b1900
push eax
call fcn.00459043
add esp, 4
lea ecx, [esp + 0x498]
mov dword [esp + 0x1f8], eax
push 1
call fcn.00404f20
lea eax, [esp + 0x8b]
lea ecx, [esp + 0x378]
push eax
call fcn.0047c7b0
mov dword [esp + 0x38c], ebx
mov dword [esp + 0x390], ebx
mov byte [esp + 0x394], bl
mov ecx, dword [0x4d14fc]
mov dword [esp + 0x9c], ecx
lea ecx, [esp + 0x184]
mov byte [esp + 0x5d8], 0x4e
call fcn.0040f6a0
push ebx
push str.____grass__._____grass__
lea ecx, [esp + 0x18c]
mov byte [esp + 0x5e0], 0x4f
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x188]
push ebx
dec ecx
push eax
lea eax, [esp + 0x384]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x50
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41e884
lea ecx, [esp + 0x378]
call fcn.00406060
cmp eax, 2
jle 0x41e822
mov ecx, dword [esp + 0x37c]
add ecx, 0x18
jmp 0x41e829
lea ecx, [esp + 0x38c]
lea edx, [esp + 0x518]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x51
cmp eax, ebx
jne 0x41e84a
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0xa0]
call fcn.004960de
push 1
lea ecx, [esp + 0x51c]
mov byte [esp + 0x5dc], 0x50
call fcn.00404f20
mov eax, dword [esp + 0x9c]
push eax
call fcn.00459043
add esp, 4
mov dword [esp + 0x1e4], eax
lea ecx, [esp + 0xbf]
push ecx
lea ecx, [esp + 0x33c]
call fcn.0047c7b0
mov dword [esp + 0x34c], ebx
mov dword [esp + 0x350], ebx
mov byte [esp + 0x354], bl
push 0x4d5fb8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x5dc], 0x52
call fcn.00495fc3
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x5d8], 0x53
call fcn.0040f6a0
push ebx
push str.____crops__._____crops__
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x5e0], 0x54
call fcn.00404f70
mov edx, dword [esp + 0x14]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push edx
lea eax, [esp + 0x1a4]
push ebx
dec ecx
push eax
lea eax, [esp + 0x344]
add ecx, edx
push eax
push ecx
push edx
mov byte [esp + 0x5f0], 0x55
call fcn.004053a0
add esp, 0x18
test al, al
je 0x41f5d8
lea ecx, [esp + 0x338]
call fcn.00406060
cmp eax, 2
jle 0x41e94c
mov ecx, dword [esp + 0x33c]
add ecx, 0x18
jmp 0x41e953
lea ecx, [esp + 0x34c]
lea edx, [esp + 0x4b8]
push edx
call fcn.00404b80
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x56
cmp eax, ebx
jne 0x41e974
mov eax, 0x4b1900
push eax
lea ecx, [esp + 0x1c]
call fcn.004960de
push 1
lea ecx, [esp + 0x4bc]
mov byte [esp + 0x5dc], 0x55
call fcn.00404f20
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1d8]
push eax
call fcn.0049608e
lea ecx, [esp + 0x93]
push ecx
lea ecx, [esp + 0x31c]
call fcn.0047c7b0
mov dword [esp + 0x32c], ebx
mov dword [esp + 0x330], ebx
mov byte [esp + 0x334], bl
push 0x7d0
mov byte [esp + 0x5dc], 0x57
call fcn.00495c96
mov edx, dword [esp + 0x1c]
add esp, 4
mov esi, eax
lea ecx, [esp + 0x18]
mov eax, dword [edx - 8]
push eax
call fcn.00496385
push ebx
mov edi, eax
push ebx
push 0xffffffffffffffff
push edi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push eax
push esi
push 0xffffffffffffffff
push edi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [esp + 0x174]
call fcn.0040f6a0
push ebx
push 0x4cdc48
lea ecx, [esp + 0x17c]
mov byte [esp + 0x5e0], 0x58
call fcn.0040f670
mov eax, dword [0x4d14fc]
mov dword [esp + 0x8c], eax
push esi
mov byte [esp + 0x5dc], 0x5a
call fcn.004595ce
push esi
lea ecx, [esp + 0x17c]
push ebx
lea edx, [esp + 0x324]
lea eax, [esi + eax*2]
push ecx
push edx
push eax
push esi
call fcn.00410440
add esp, 0x1c
test al, al
je 0x41ed91
lea ecx, [esp + 0x318]
call fcn.00406060
cmp eax, 2
jle 0x41ea96
mov eax, dword [esp + 0x31c]
lea ecx, [eax + 0x18]
jmp 0x41ea9d
lea ecx, [esp + 0x32c]
lea edx, [esp + 0x428]
push edx
call fcn.0040f460
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x5b
cmp eax, ebx
jne 0x41eabe
mov eax, 0x4b1a70
push eax
lea ecx, [esp + 0x14]
call fcn.00496015
push 1
lea ecx, [esp + 0x42c]
mov byte [esp + 0x5dc], 0x5d
call fcn.0040f620
lea eax, [esp + 0x10]
lea ecx, [esp + 0x8c]
push eax
call fcn.0049608e
push 0x4cdc44
lea ecx, [esp + 0x14]
xor ebp, ebp
call fcn.00493dd9
mov edi, eax
mov eax, dword [0x4d14fc]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x78], eax
cmp edi, 0xffffffff
mov byte [esp + 0x5d8], 0x60
je 0x41eb9c
push edi
lea ecx, [esp + 0x14c]
push ebx
push ecx
lea ecx, [esp + 0x1c]
call fcn.00493c2d
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0x5dc], 0x61
call fcn.0049608e
lea ecx, [esp + 0x148]
mov byte [esp + 0x5d8], 0x60
call fcn.00495f55
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
sub eax, edi
sub eax, 2
push eax
lea eax, [esp + 0x1ac]
push eax
call fcn.00493cc3
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x5dc], 0x62
call fcn.0049608e
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x5d8], 0x60
call fcn.00495f55
push 0x4cc300
lea ecx, [esp + 0x14]
call fcn.00493dd9
mov edi, eax
cmp edi, 0xffffffff
je 0x41ec2e
push edi
lea ecx, [esp + 0x158]
push ebx
push ecx
lea ecx, [esp + 0x1c]
call fcn.00493c2d
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x5dc], 0x63
call fcn.0049608e
lea ecx, [esp + 0x154]
mov byte [esp + 0x5d8], 0x60
call fcn.00495f55
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
sub eax, edi
sub eax, 4
push eax
lea eax, [esp + 0x198]
push eax
call fcn.00493cc3
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x5dc], 0x64
call fcn.0049608e
lea ecx, [esp + 0x194]
mov byte [esp + 0x5d8], 0x60
call fcn.00495f55
push 0x4cdc40
lea ecx, [esp + 0x14]
call fcn.00493dd9
mov edi, eax
cmp edi, 0xffffffff
je 0x41ecc0
push edi
lea ecx, [esp + 0x15c]
push ebx
push ecx
lea ecx, [esp + 0x1c]
call fcn.00493c2d
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x5dc], 0x65
call fcn.0049608e
lea ecx, [esp + 0x158]
mov byte [esp + 0x5d8], 0x60
call fcn.00495f55
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
sub eax, edi
sub eax, 2
push eax
lea eax, [esp + 0x154]
push eax
call fcn.00493cc3
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x5dc], 0x66
call fcn.0049608e
lea ecx, [esp + 0x150]
mov byte [esp + 0x5d8], 0x60
call fcn.00495f55
mov ecx, dword [esp + 0x6c]
push 0x4d5fb8
push ecx
call fcn.00458f09
add esp, 8
test eax, eax
je 0x41eced
mov edx, dword [esp + 0x6c]
push edx
call fcn.00459043
lea ebp, [eax + eax*4]
add esp, 4
lea ebp, [ebp + ebp*8]
shl ebp, 5
mov eax, dword [esp + 0x60]
push 0x4d5fb8
push eax
call fcn.00458f09
add esp, 8
test eax, eax
je 0x41ed1b
mov ecx, dword [esp + 0x60]
push ecx
call fcn.00459043
mov edx, eax
add esp, 4
shl edx, 4
sub edx, eax
lea ebp, [ebp + edx*4]
mov eax, dword [esp + 0x78]
push 0x4d5fb8
push eax
call fcn.00458f09
add esp, 8
test eax, eax
je 0x41ed40
mov ecx, dword [esp + 0x78]
push ecx
call fcn.00459043
add esp, 4
add ebp, eax
lea ecx, [esp + 0x78]
mov dword [esp + 0x1ec], ebp
mov byte [esp + 0x5d8], 0x5f
call fcn.00495f55
lea ecx, [esp + 0x60]
mov byte [esp + 0x5d8], 0x5e
call fcn.00495f55
lea ecx, [esp + 0x6c]
mov byte [esp + 0x5d8], 0x5d
call fcn.00495f55
lea ecx, [esp + 0x10]
mov byte [esp + 0x5d8], 0x5a
call fcn.00495f55
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
mov edi, dword [esp + 0x5e8]
lea edx, [esp + 0xd1]
push edx
lea ecx, [esp + 0x3dc]
call fcn.0047c7b0
mov dword [esp + 0x3ec], ebx
mov dword [esp + 0x3f0], ebx
mov byte [esp + 0x3f4], bl
mov eax, dword [0x4d14fc]
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x16c]
mov byte [esp + 0x5d8], 0x68
call fcn.0040f6a0
push ebx
push 0x4cdc18
lea ecx, [esp + 0x174]
mov byte [esp + 0x5e0], 0x69
call fcn.0040f670
push esi
mov byte [esp + 0x5dc], 0x6a
call fcn.004595ce
push esi
lea ecx, [esp + 0x174]
push ebx
lea edx, [esp + 0x3e4]
lea eax, [esi + eax*2]
push ecx
push edx
push eax
push esi
call fcn.00410440
add esp, 0x1c
test al, al
je 0x41eecf
lea ecx, [esp + 0x3d8]
call fcn.00406060
cmp eax, 2
jle 0x41ee4a
mov eax, dword [esp + 0x3dc]
lea ecx, [eax + 0x18]
jmp 0x41ee51
lea ecx, [esp + 0x3ec]
lea edx, [esp + 0x448]
push edx
call fcn.0040f460
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x6b
cmp eax, ebx
jne 0x41ee72
mov eax, 0x4b1a70
push eax
lea ecx, [esp + 0x34]
call fcn.00496105
push 1
lea ecx, [esp + 0x44c]
mov byte [esp + 0x5dc], 0x6a
call fcn.0040f620
lea eax, [esp + 0x30]
push 0x4cdc14
lea ecx, [esp + 0x150]
push eax
push ecx
call fcn.004961ea
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x5dc], 0x6c
call fcn.0049608e
lea ecx, [esp + 0x14c]
mov byte [esp + 0x5d8], 0x6a
call fcn.00495f55
lea edx, [esp + 0xab]
lea ecx, [esp + 0x358]
push edx
call fcn.0047c7b0
mov dword [esp + 0x36c], ebx
mov dword [esp + 0x370], ebx
mov byte [esp + 0x374], bl
mov eax, dword [0x4d14fc]
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x5d8], 0x6e
call fcn.0040f6a0
push ebx
push 0x4cdbec
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x5e0], 0x6f
call fcn.0040f670
push esi
mov byte [esp + 0x5dc], 0x70
call fcn.004595ce
push esi
lea ecx, [esp + 0x1b4]
push ebx
lea edx, [esp + 0x364]
lea eax, [esi + eax*2]
push ecx
push edx
push eax
push esi
call fcn.00410440
add esp, 0x1c
test al, al
je 0x41f006
lea ecx, [esp + 0x358]
call fcn.00406060
cmp eax, 2
jle 0x41ef81
mov eax, dword [esp + 0x35c]
lea ecx, [eax + 0x18]
jmp 0x41ef88
lea ecx, [esp + 0x36c]
lea edx, [esp + 0x468]
push edx
call fcn.0040f460
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x71
cmp eax, ebx
jne 0x41efa9
mov eax, 0x4b1a70
push eax
lea ecx, [esp + 0x30]
call fcn.00496105
push 1
lea ecx, [esp + 0x46c]
mov byte [esp + 0x5dc], 0x70
call fcn.0040f620
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x1b4]
push eax
push 0x4cdbe4
push ecx
call fcn.0049625e
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x5dc], 0x72
call fcn.0049608e
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x5d8], 0x70
call fcn.00495f55
push 0x4cdbdc
lea ecx, [esp + 0x1c]
call fcn.00493dd9
cmp eax, 0xffffffff
je 0x41f2d7
push 0x4cdbd4
lea ecx, [esp + 0x1c]
call fcn.00493dd9
cmp eax, 0xffffffff
je 0x41f2d7
mov eax, dword [0x4d14fc]
mov dword [esp + 0x1ec], ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x34], eax
lea edx, [esp + 0x82]
lea ecx, [esp + 0x2f8]
push edx
mov byte [esp + 0x5dc], 0x74
call fcn.0047c7b0
mov dword [esp + 0x30c], ebx
mov dword [esp + 0x310], ebx
mov byte [esp + 0x314], bl
lea ecx, [esp + 0x15c]
mov byte [esp + 0x5d8], 0x75
call fcn.0040f6a0
push ebx
push 0x4cdbac
lea ecx, [esp + 0x164]
mov byte [esp + 0x5e0], 0x76
call fcn.0040f670
push esi
mov byte [esp + 0x5dc], 0x77
call fcn.004595ce
push esi
lea ecx, [esp + 0x164]
push ebx
lea edx, [esp + 0x304]
lea eax, [esi + eax*2]
push ecx
push edx
push eax
push esi
call fcn.00410440
add esp, 0x1c
test al, al
je 0x41f13d
lea ecx, [esp + 0x2f8]
call fcn.00406060
cmp eax, 2
jle 0x41f0f5
mov eax, dword [esp + 0x2fc]
lea ecx, [eax + 0x18]
jmp 0x41f0fc
lea ecx, [esp + 0x30c]
lea edx, [esp + 0x488]
push edx
call fcn.0040f460
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x78
cmp eax, ebx
jne 0x41f11d
mov eax, 0x4b1a70
push eax
lea ecx, [esp + 0x28]
call fcn.00496105
push 1
lea ecx, [esp + 0x48c]
mov byte [esp + 0x5dc], 0x77
call fcn.0040f620
lea eax, [esp + 0xbc]
lea ecx, [esp + 0x398]
push eax
call fcn.0047c7b0
mov dword [esp + 0x3ac], ebx
mov dword [esp + 0x3b0], ebx
mov byte [esp + 0x3b4], bl
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x5d8], 0x79
call fcn.0040f6a0
push ebx
push 0x4cdb84
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x5e0], 0x7a
call fcn.0040f670
push esi
mov byte [esp + 0x5dc], 0x7b
call fcn.004595ce
push esi
lea ecx, [esp + 0x1c8]
push ebx
lea edx, [esp + 0x3a4]
lea eax, [esi + eax*2]
push ecx
push edx
push eax
push esi
call fcn.00410440
add esp, 0x1c
test al, al
je 0x41f22a
lea ecx, [esp + 0x398]
call fcn.00406060
cmp eax, 2
jle 0x41f1e2
mov eax, dword [esp + 0x39c]
lea ecx, [eax + 0x18]
jmp 0x41f1e9
lea ecx, [esp + 0x3ac]
lea edx, [esp + 0x4a8]
push edx
call fcn.0040f460
mov eax, dword [eax + 4]
mov byte [esp + 0x5d8], 0x7c
cmp eax, ebx
jne 0x41f20a
mov eax, 0x4b1a70
push eax
lea ecx, [esp + 0x38]
call fcn.00496105
push 1
lea ecx, [esp + 0x4ac]
mov byte [esp + 0x5dc], 0x7b
call fcn.0040f620
mov eax, dword [esp + 0x34]
push 0x4cc618
push eax
call fcn.00458f09
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
add esp, 8
test eax, eax
push ecx
push edx
jne 0x41f251
push 0x4cdb68
jmp 0x41f256
push 0x4cdb54
lea eax, [esp + 0x24]
push eax
call fcn.0049415f
add esp, 0x10
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x5d8], 0x79
call fcn.0040e550
lea ecx, [esp + 0x398]
mov byte [esp + 0x5d8], 0x77
call fcn.00404fa0
lea ecx, [esp + 0x160]
mov byte [esp + 0x5d8], 0x75
call fcn.0040e550
lea ecx, [esp + 0x2f8]
mov byte [esp + 0x5d8], 0x74
call fcn.00404fa0
lea ecx, [esp + 0x34]
mov byte [esp + 0x5d8], 0x73
call fcn.00495f55
lea ecx, [esp + 0x24]
mov byte [esp + 0x5d8], 0x70
call fcn.00495f55
jmp 0x41f2fb
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
push ecx
push edx
push eax
lea ecx, [esp + 0x24]
push 0x4cdb38
push ecx
call fcn.0049415f
add esp, 0x14
lea ecx, [esp + 0x528]
call fcn.0044ef60
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x1d4]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
mov byte [esp + 0x5e4], 0x7d
call fcn.00495cca
lea ecx, [esp + 0x5a0]
push ecx
lea ecx, [esp + 0x534]
call fcn.0044f0d0
mov edx, dword [eax + 8]
mov eax, dword [esp + 0x3c]
push edx
push eax
lea ecx, [esp + 0xb8]
push 0x4cdb28
push ecx
mov byte [esp + 0x5ec], 0x7e
call fcn.0049415f
add esp, 0x14
lea ecx, [esp + 0x598]
mov byte [esp + 0x5d8], 0x7d
call fcn.0044efe0
mov esi, dword [esp + 0x5e0]
push ebx
push ebx
push 0x18b
mov edx, dword [esi + 0x1c]
push edx
call ebp
mov ecx, dword [esp + 0xac]
mov edx, dword [esi + 0x1c]
push ecx
push eax
push 0x181
push edx
call ebp
cmp dword [esp + 0x1ec], ebx
jle 0x41f516
mov eax, dword [0x4d759c]
push eax
call fcn.00459043
mov ecx, dword [esp + 0x1f0]
add esp, 4
cmp ecx, eax
jge 0x41f516
mov ecx, dword [esp + 0x1d4]
push 0x4d5fb8
push ecx
call fcn.00458f09
add esp, 8
test eax, eax
je 0x41f516
mov edx, dword [esp + 0x94]
mov eax, dword [edx + 0x50]
lea ecx, [edx + 0x48]
lea edx, [esp + 0x1c8]
push edx
push eax
call fcn.0042a380
mov eax, dword [edi + 0x1c]
push ebx
push ebx
push 0x1004
push eax
call ebp
push ebx
push ebx
push ebx
mov esi, eax
push ebx
push 0x4cc898
push esi
push 1
mov ecx, edi
call fcn.004944d7
push ecx
lea edx, [esp + 0x1d8]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.00495cca
lea eax, [esp + 0x564]
lea ecx, [esp + 0x52c]
push eax
call fcn.0044f0d0
add eax, 8
lea ecx, [esp + 0xd4]
push eax
mov byte [esp + 0x5dc], 0x7f
call fcn.00495cca
lea ecx, [esp + 0x560]
mov byte [esp + 0x5d8], 0x81
call fcn.0044efe0
mov ecx, dword [esp + 0xd4]
push ecx
push 1
push esi
mov ecx, edi
call fcn.0049459c
push 0x4d5fb8
lea ecx, [esp + 0x88]
call fcn.00495fc3
mov edx, dword [esp + 0x1ec]
lea eax, [esp + 0x84]
push edx
push 0x4cdb20
push eax
mov byte [esp + 0x5e4], 0x82
call fcn.0049415f
mov ecx, dword [esp + 0x90]
add esp, 0xc
push ecx
push 2
push esi
mov ecx, edi
call fcn.0049459c
push 0x4cdb18
push 3
push esi
mov ecx, edi
call fcn.0049459c
push 0x4cc618
push 4
push esi
mov ecx, edi
call fcn.0049459c
lea ecx, [esp + 0x84]
mov byte [esp + 0x5d8], 0x81
call fcn.00495f55
lea ecx, [esp + 0xd4]
mov byte [esp + 0x5d8], 0x7d
call fcn.00495f55
lea ecx, [esp + 0x528]
mov byte [esp + 0x5d8], 0x70
call fcn.0044efe0
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x5d8], 0x6e
call fcn.0040e550
lea ecx, [esp + 0x2c]
mov byte [esp + 0x5d8], 0x6d
call fcn.00495f55
lea ecx, [esp + 0x358]
mov byte [esp + 0x5d8], 0x6a
call fcn.00404fa0
lea ecx, [esp + 0x170]
mov byte [esp + 0x5d8], 0x68
call fcn.0040e550
lea ecx, [esp + 0x30]
mov byte [esp + 0x5d8], 0x67
call fcn.00495f55
lea ecx, [esp + 0x3d8]
mov byte [esp + 0x5d8], 0x5a
call fcn.00404fa0
lea ecx, [esp + 0x8c]
mov byte [esp + 0x5d8], 0x59
call fcn.00495f55
lea ecx, [esp + 0x178]
mov byte [esp + 0x5d8], 0x57
call fcn.0040e550
lea ecx, [esp + 0x318]
mov byte [esp + 0x5d8], 0x55
call fcn.00404fa0
mov edx, dword [esp + 0x5e4]
lea eax, [esp + 0x1c8]
push edx
sub esp, 0x50
mov ecx, esp
mov dword [esp + 0x78], esp
push eax
call fcn.0041fbf0
mov esi, dword [esp + 0xe8]
mov ecx, esi
call fcn.00424f30
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0x14]
lea edx, [esp + 0x1c8]
push edx
push eax
call fcn.0042a380
lea ecx, [esp + 0x40]
call fcn.00406060
cmp eax, 2
jle 0x41f62f
mov eax, dword [esp + 0x44]
add eax, 0x18
jmp 0x41f633
lea eax, [esp + 0x54]
mov esi, dword [eax + 4]
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x5d8], 0x53
call fcn.0040e550
lea ecx, [esp + 0x18]
mov byte [esp + 0x5d8], 0x52
call fcn.00495f55
lea ecx, [esp + 0x338]
mov byte [esp + 0x5d8], 0x50
call fcn.00404fa0
lea ecx, [esp + 0x188]
mov byte [esp + 0x5d8], 0x4e
call fcn.0040e550
lea ecx, [esp + 0x9c]
mov byte [esp + 0x5d8], 0x4d
call fcn.00495f55
lea ecx, [esp + 0x378]
mov byte [esp + 0x5d8], 0x4c
call fcn.00404fa0
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x5d8], 0x4a
call fcn.0040e550
lea ecx, [esp + 0xe0]
mov byte [esp + 0x5d8], 0x49
call fcn.00495f55
lea ecx, [esp + 0x3b8]
mov byte [esp + 0x5d8], 0x47
call fcn.00404fa0
lea ecx, [esp + 0xc4]
mov byte [esp + 0x5d8], 0x45
call fcn.0040e550
lea ecx, [esp + 0xd8]
mov byte [esp + 0x5d8], 0x44
call fcn.00495f55
lea ecx, [esp + 0x3f8]
mov byte [esp + 0x5d8], 0x42
call fcn.00404fa0
lea ecx, [esp + 0x104]
mov byte [esp + 0x5d8], 0x40
call fcn.0040e550
lea ecx, [esp + 0x28]
mov byte [esp + 0x5d8], 0x3f
call fcn.00495f55
lea ecx, [esp + 0x218]
mov byte [esp + 0x5d8], 0x3d
call fcn.00404fa0
lea ecx, [esp + 0x114]
mov byte [esp + 0x5d8], 0x3b
call fcn.0040e550
lea ecx, [esp + 0x64]
mov byte [esp + 0x5d8], 0x3a
call fcn.00495f55
lea ecx, [esp + 0x2b8]
mov byte [esp + 0x5d8], 0x38
call fcn.00404fa0
lea ecx, [esp + 0xec]
mov byte [esp + 0x5d8], 0x36
call fcn.0040e550
lea ecx, [esp + 0x68]
mov byte [esp + 0x5d8], 0x35
call fcn.00495f55
lea ecx, [esp + 0x278]
mov byte [esp + 0x5d8], 0x33
call fcn.00404fa0
lea ecx, [esp + 0xf4]
mov byte [esp + 0x5d8], 0x31
call fcn.0040e550
lea ecx, [esp + 0x74]
mov byte [esp + 0x5d8], 0x30
call fcn.00495f55
lea ecx, [esp + 0x238]
mov byte [esp + 0x5d8], 0x2e
call fcn.00404fa0
lea ecx, [esp + 0xfc]
mov byte [esp + 0x5d8], 0x2c
call fcn.0040e550
lea ecx, [esp + 0x7c]
mov byte [esp + 0x5d8], 0x2b
call fcn.00495f55
lea ecx, [esp + 0x258]
mov byte [esp + 0x5d8], 0x29
call fcn.00404fa0
lea ecx, [esp + 0x10c]
mov byte [esp + 0x5d8], 0x27
call fcn.0040e550
lea ecx, [esp + 0x38]
mov byte [esp + 0x5d8], 0x26
call fcn.00495f55
lea ecx, [esp + 0x298]
mov byte [esp + 0x5d8], 0x24
call fcn.00404fa0
lea ecx, [esp + 0x124]
mov byte [esp + 0x5d8], 0x22
call fcn.0040e550
lea ecx, [esp + 0x70]
mov byte [esp + 0x5d8], 0x21
call fcn.00495f55
lea ecx, [esp + 0x2d8]
mov byte [esp + 0x5d8], 0x20
call fcn.00404fa0
lea ecx, [esp + 0x14]
mov byte [esp + 0x5d8], 0x1d
call fcn.00495f55
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x5d8], 0x1c
call fcn.0041d0c0
mov eax, dword [esp + 0xa4]
push esi
lea ecx, [esp + 0x11c]
push ebx
lea edx, [esp + 0x48]
push ecx
push edx
push eax
push esi
call fcn.004053a0
add esp, 0x18
test al, al
jne 0x41dcce
mov esi, dword [esp + 0x5e0]
push ebx
push ebx
push 0x18b
mov ecx, dword [esi + 0x1c]
push ecx
call ebp
mov edx, dword [esi + 0x1c]
push 0x4cdb00
push eax
push 0x181
push edx
call ebp
mov eax, dword [esi + 0x1c]
push ebx
push ebx
push 0x18b
push eax
call ebp
mov ecx, dword [esi + 0x1c]
push 0x4cdaf4
push eax
push 0x181
push ecx
call ebp
mov eax, dword [0x4d7614]
cmp eax, ebx
jne 0x41f94f
xor edx, edx
jmp 0x41f96a
mov ecx, dword [0x4d7618]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
push edx
lea ecx, [esp + 0x40]
push 0x4cdae4
push ecx
call fcn.0049415f
mov edx, dword [esi + 0x1c]
add esp, 0xc
push ebx
push ebx
push 0x18b
push edx
call ebp
mov ecx, dword [esp + 0x3c]
mov edx, dword [esi + 0x1c]
push ecx
push eax
push 0x181
push edx
call ebp
mov eax, dword [esi + 0x1c]
push ebx
push ebx
push 0x18b
push eax
call ebp
mov ecx, dword [esi + 0x1c]
push 0x4cdac4
push eax
push 0x181
push ecx
call ebp
mov edx, dword [esi + 0x1c]
push ebx
push ebx
push 0x18b
push edx
call ebp
push str.________________________________
push eax
mov eax, dword [esi + 0x1c]
push 0x181
push eax
call ebp
lea ecx, [esp + 0xac]
mov byte [esp + 0x5d8], 0x1b
call fcn.00495f55
push 1
lea ecx, [esp + 0x12c]
mov byte [esp + 0x5dc], 0x1a
call fcn.00404f20
mov ecx, dword [esp + 0x11c]
mov byte [esp + 0x5d8], 0x17
cmp ecx, ebx
je 0x41fa19
call fcn.00404170
mov ecx, dword [esp + 0x168]
mov byte [esp + 0x5d8], 0x14
cmp ecx, ebx
je 0x41fa31
call fcn.00404170
mov eax, dword [esp + 0x13c]
mov byte [esp + 0x5d8], 0x11
cmp eax, ebx
je 0x41fa65
mov esi, eax
add eax, 4
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
mov edx, ecx
test edx, edx
jne 0x41fa65
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, esi
call fcn.00404b20
mov eax, dword [esp + 0x180]
mov byte [esp + 0x5d8], 0xe
cmp eax, ebx
je 0x41fa99
mov esi, eax
add eax, 4
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
mov edx, ecx
test edx, edx
jne 0x41fa99
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, esi
call fcn.00404b20
mov eax, dword [esp + 0x190]
mov byte [esp + 0x5d8], 0xb
cmp eax, ebx
je 0x41facd
mov esi, eax
add eax, 4
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
mov edx, ecx
test edx, edx
jne 0x41facd
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, esi
call fcn.00404b20
mov eax, dword [esp + 0x19c]
mov byte [esp + 0x5d8], 8
cmp eax, ebx
je 0x41fb01
mov esi, eax
add eax, 4
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
mov edx, ecx
test edx, edx
jne 0x41fb01
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, esi
call fcn.00404b20
mov eax, dword [esp + 0x144]
mov byte [esp + 0x5d8], 6
cmp eax, ebx
je 0x41fb35
mov esi, eax
add eax, 4
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
mov edx, ecx
test edx, edx
jne 0x41fb35
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, esi
call fcn.00404b20
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push ecx
push edx
lea ecx, [esp + 0x48]
mov byte [esp + 0x5e0], 5
call fcn.00410f40
mov eax, dword [esp + 0x44]
push eax
call fcn.00495cbf
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x5d8], 3
call fcn.00495f55
lea ecx, [esp + 0x3c]
mov byte [esp + 0x5d8], 2
call fcn.00495f55
lea ecx, [esp + 0xdc]
mov byte [esp + 0x5d8], 1
call fcn.00495f55
lea ecx, [esp + 0xe4]
mov byte [esp + 0x5d8], bl
call fcn.00495f55
lea ecx, [esp + 0xb4]
mov dword [esp + 0x5d8], 0xffffffff
call fcn.00495f55
mov ecx, dword [esp + 0x5d0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x5cc
ret 0xc