Function at 0x404dc0
Capabilities:
Contain obfuscated stackstrings
Create directory
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x54a54a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x328
push ebx
push ebp
push esi
mov dword [esp + 0x14], ecx
push edi
add ecx, 0x898
push str.help
lea eax, [esp + 0x88]
push ecx
push eax
call fcn.005282b4
push 0x58948c
lea ecx, [esp + 0x84]
xor esi, esi
push eax
push ecx
mov dword [esp + 0x34c], esi
call fcn.005282b4
mov edx, dword [esp + 0x34c]
mov edi, 1
push edx
push eax
lea eax, [esp + 0x44]
mov byte [esp + 0x348], 1
push eax
call fcn.005282b4
lea ecx, [esp + 0x80]
mov byte [esp + 0x340], 4
call fcn.0052801f
lea ecx, [esp + 0x84]
mov byte [esp + 0x340], 3
call fcn.0052801f
mov ecx, dword [esp + 0x3c]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x58948c
lea ecx, [esp + 0x40]
call fcn.005283fb
lea ecx, [esp + 0x24]
call fcn.00477df0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
call fcn.00477df0
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
push 0x58ab80
lea ecx, [esp + 0x64]
mov byte [esp + 0x344], 8
call fcn.0052808d
mov eax, dword [esp + 0x348]
mov byte [esp + 0x340], 9
mov dword [esp + 0x6c], edi
mov dword [esp + 0x40], edi
mov ecx, dword [eax + 0x54]
mov ebx, dword [eax + 0x58]
cmp ecx, esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x14], esi
jle 0x4061f4
mov edi, dword [esp + 0x18]
mov esi, eax
jmp 0x404efb
mov esi, dword [esp + 0x348]
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
test byte [ebx + 0x14], 3
jne 0x4061d2
lea ebp, [edi + 0xc0]
mov ecx, ebp
call fcn.00453e20
push eax
push ebx
push esi
call fcn.004e52c0
add esp, 0xc
test eax, eax
je 0x4061d2
mov dword [esp + 0x34], 0
mov eax, dword [ebx]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x34]
call fcn.00478220
push str.__font___big_nbsp_
lea ecx, [esp + 0x28]
call fcn.004781a0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x404f77
test al, 0x80
je 0x404f64
push 0x58aab8
jmp 0x404f89
test ah, 0x80
je 0x404f70
push 0x58aaa8
jmp 0x404f89
push 0x58aa9c
jmp 0x404f89
test eax, 0x400000
mov eax, 0x58aa88
jne 0x404f88
mov eax, 0x58aa7c
push eax
lea ecx, [esp + 0x28]
call fcn.004781a0
lea ecx, [esp + 0x10]
call fcn.00527faa
push 0
push 0
push 0
push ebx
lea edx, [esp + 0x20]
push esi
push edx
call fcn.004e5320
mov eax, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x24]
push eax
push str.__strong_nbsp_nbsp_nbsp_
call fcn.004781d0
mov ecx, dword [esi + 0x24]
push str.__a___p__p_
push ecx
push 0x58aa14
lea ecx, [esp + 0x30]
call fcn.004781f0
mov eax, dword [ebx + 0x14]
test eax, 0x10000
je 0x404feb
push 0x58aa00
jmp 0x404ff7
test eax, 0x20000
je 0x405000
push 0x58a9e8
lea ecx, [esp + 0x28]
call fcn.004781a0
mov edx, dword [ebx + 8]
push edx
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x405061
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x1c]
push eax
call fcn.005281a8
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40504a
lea ecx, [esp + 0x1c]
push ecx
call fcn.004e5070
add esp, 4
test eax, eax
jne 0x40504a
lea edx, [esp + 0x60]
lea ecx, [esp + 0x1c]
push edx
call fcn.00528437
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push eax
call fcn.004781a0
lea ecx, [esp + 0x1c]
call fcn.00527faa
push str.__p__r_n
lea ecx, [esp + 0x28]
call fcn.004781a0
test dword [ebx + 0x14], 0x800044
je 0x405d46
push ebx
push esi
mov ecx, edi
call fcn.004698c0
test eax, eax
jle 0x40553c
push str._p__big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.004781a0
mov edi, dword [ebx + 0x28]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407010
mov eax, dword [ebx + 0x24]
xor esi, esi
test eax, eax
jle 0x40518d
mov ecx, ebp
call fcn.00453e20
mov edx, dword [esp + 0x348]
push eax
push edi
push edx
call fcn.004e5280
add esp, 0xc
test eax, eax
je 0x40517e
test byte [edi + 0xe], 0x10
jne 0x40517e
test byte [ebx + 0x14], 0x40
je 0x405108
cmp esi, 8
jge 0x405108
push esi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x405124
mov ecx, dword [esp + 0x14]
push esi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x58a97c
lea ecx, [esp + 0x14]
call fcn.005281a8
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [edi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00407040
mov eax, dword [ebx + 0x24]
add edi, 0x14
inc esi
cmp esi, eax
jl 0x4050b9
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.004070b0
mov eax, dword [ebx + 0x24]
mov esi, dword [ebx + 0x28]
xor edi, edi
test eax, eax
mov dword [esp + 0x38], edi
jle 0x405530
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
test byte [ebx + 0x14], 0x40
je 0x4051cc
cmp edi, 8
jge 0x4051cc
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x40551d
test byte [esi + 0xe], 0x10
jne 0x40551d
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.00453e20
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004e5280
add esp, 0xc
test eax, eax
je 0x40551d
mov dword [esp + 0x5c], 0
mov ecx, dword [ebx]
mov edx, dword [esi]
push ecx
push 0x58a96c
push edx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x5c]
call fcn.00478220
mov eax, dword [esi]
push str.__font___big_nbsp_
push eax
push str.___title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
lea ecx, [esp + 0x58]
call fcn.004781f0
test byte [ebx + 0x14], 0x40
je 0x405251
cmp edi, 8
jge 0x405251
push 0x58a914
lea ecx, [esp + 0x50]
call fcn.004781a0
jmp 0x405286
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push ecx
push str.dt_d.htm__
push edx
call ebp
mov eax, dword [ebx]
add esp, 0xc
lea ecx, [esp + 0xf4]
push str.__a_
push eax
push ecx
push 0x58a8d4
lea ecx, [esp + 0x5c]
call fcn.00478220
lea ecx, [esp + 0x10]
call fcn.00527faa
mov edx, dword [esp + 0x348]
push esi
push 0
push 0
push 0
lea eax, [esp + 0x20]
push edx
push eax
call fcn.004e5320
mov ecx, dword [esp + 0x28]
add esp, 0x18
push ecx
push 0x58a8b0
lea ecx, [esp + 0x54]
call fcn.004781d0
mov edx, dword [esp + 0x350]
lea eax, [esp + 0x1c]
movsx ecx, word [esi + 0xc]
push edx
push 0
push 0
push eax
push ecx
call fcn.004e4c20
mov ecx, dword [esp + 0x2c]
add esp, 4
push eax
push 0
call fcn.00469220
mov edx, dword [esp + 0x1c]
push 0x58a8a0
push edx
push str.__p__r_n_p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.004781f0
test byte [esi + 0xe], 8
je 0x405314
push 0x58a864
lea ecx, [esp + 0x50]
call fcn.004781a0
test byte [esi + 0xe], 4
je 0x405328
push 0x58a85c
lea ecx, [esp + 0x50]
call fcn.004781a0
mov eax, dword [esi + 8]
push eax
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x405380
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.005281a8
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405372
lea edx, [esp + 0x10]
push edx
call fcn.004e5070
add esp, 4
test eax, eax
jne 0x405372
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00528437
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
call fcn.004781a0
push str.__p__r_n
lea ecx, [esp + 0x50]
call fcn.004781a0
mov ax, word [esi + 0xc]
cmp ax, 0x3ee
je 0x4053ae
cmp ax, 0x3e8
je 0x4053ae
cmp ax, 0x3ef
je 0x4053ae
cmp ax, 0x3f0
jne 0x405496
mov edx, dword [esi + 0x10]
push edx
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x405496
push 0x58a840
lea ecx, [esp + 0x14]
call fcn.005281a8
mov edi, dword [esi + 0x10]
xor ebp, ebp
cmp byte [edi], 0
je 0x405470
push str.nbsp_nbsp_nbsp___font_color_000000__
lea ecx, [esp + 0x14]
call fcn.005283fb
cmp word [esi + 0xc], 0x3e8
je 0x405421
mov eax, ebp
inc ebp
push eax
lea eax, [esp + 0xf8]
push 0x58a810
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
jmp 0x405436
push edi
lea ecx, [esp + 0x14]
call fcn.005283fb
push edi
call fcn.00478d70
add esp, 4
add edi, eax
push 0x58a7f0
lea ecx, [esp + 0x14]
call fcn.005283fb
push edi
lea ecx, [esp + 0x14]
call fcn.005283fb
push str.__font__br__r_n
lea ecx, [esp + 0x14]
call fcn.005283fb
push edi
call fcn.00478d70
add edi, eax
add esp, 4
cmp byte [edi], 0
jne 0x4053de
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.004781a0
push str.__p_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edi, dword [esp + 0x38]
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
push str._r_n_p_
lea ecx, [esp + 0x50]
call fcn.004781a0
test byte [ebx + 0x14], 0x40
je 0x4054c4
cmp edi, 8
jge 0x4054c4
push edi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call ebp
add esp, 0xc
jmp 0x4054dc
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call ebp
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x80]
push ecx
push edx
call fcn.005282b4
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xa
call fcn.00478500
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 9
call fcn.0052801f
mov eax, dword [ebx + 0x24]
add esi, 0x14
inc edi
cmp edi, eax
mov dword [esp + 0x38], edi
jl 0x4051b5
mov edi, dword [esp + 0x18]
mov dword [esp + 0x6c], 0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x40563f
push 0x58a73c
lea ecx, [esp + 0x28]
call fcn.004781a0
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.00407010
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x405631
mov ecx, dword [ebx + 0x10]
mov ebp, dword [esp + 0x348]
mov eax, dword [ecx + edi*4]
lea edx, [eax + eax*8]
mov eax, dword [ebp + 0x68]
lea esi, [eax + edx*4]
mov al, byte [eax + edx*4 + 0xe]
test al, 0xc
jne 0x405625
mov ecx, dword [esp + 0x18]
add ecx, 0xc0
call fcn.00453e20
push eax
push esi
push ebp
call fcn.004e5280
add esp, 0xc
test eax, eax
je 0x405625
mov edx, dword [ebx + 0x10]
lea ecx, [esp + 0xf4]
mov eax, dword [edx + edi*4]
push eax
push str.cmd_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.00407040
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x40556e
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
call fcn.004070b0
mov eax, dword [ebx + 0x1c]
test eax, eax
jle 0x405757
push 0x58a6ec
lea ecx, [esp + 0x28]
call fcn.004781a0
mov esi, dword [ebx + 0x20]
test esi, esi
je 0x40566f
test dword [esi + 8], 0x80000000
je 0x40566f
mov ebp, 1
jmp 0x405671
xor ebp, ebp
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407010
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x405749
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
test byte [esi + 8], 1
jne 0x40573b
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.00453e20
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004e52f0
add esp, 0xc
test eax, eax
je 0x40573b
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.e_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00407040
mov eax, dword [ebx + 0x1c]
add esi, ebp
inc edi
cmp edi, eax
jl 0x405696
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.004070b0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x40582f
test ah, 0x80
jne 0x40582f
push str._p__big__strong_
lea ecx, [esp + 0x28]
call fcn.004781a0
mov ebp, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov ecx, ebp
call fcn.00407010
mov eax, dword [0x5ab178]
xor esi, esi
test eax, eax
jle 0x405823
mov edi, 0x5ab088
test byte [edi + 8], 1
jne 0x405812
push esi
lea eax, [esp + 0xf8]
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edx, dword [edi]
lea ecx, [esp + 0x10]
push edx
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebp
call fcn.00407040
mov eax, dword [0x5ab178]
inc esi
add edi, 0x14
cmp esi, eax
jl 0x40579d
lea edx, [esp + 0x24]
mov ecx, ebp
push edx
call fcn.004070b0
mov edx, dword [esp + 0x40]
xor ecx, ecx
xor eax, eax
cmp edx, 1
mov esi, 0x5ab088
mov dword [esp + 0x48], ecx
mov dword [esp + 0x38], eax
jne 0x405854
mov eax, dword [0x5ab178]
neg eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx + 0x1c]
cmp eax, ecx
jge 0x406164
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x405892
mov eax, dword [esp + 0x44]
mov esi, dword [eax + 0x20]
test esi, esi
je 0x40588a
test dword [esi + 8], 0x80000000
je 0x40588a
mov ebx, 1
mov dword [esp + 0x48], ebx
jmp 0x405896
xor ebx, ebx
mov dword [esp + 0x48], ebx
jmp 0x405896
mov ebx, dword [esp + 0x48]
test byte [esi + 8], 1
jne 0x405d1f
mov ebp, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
call fcn.00453e20
mov edi, dword [esp + 0x348]
push eax
push esi
push edi
call fcn.004e52f0
add esp, 0xc
test eax, eax
je 0x405d1f
mov dword [esp + 0x5c], 0
mov ecx, dword [esi]
push ecx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x54]
call fcn.004781d0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x405904
mov edx, dword [esp + 0x44]
push 0x58a6a0
lea ecx, [esp + 0x50]
mov eax, dword [edx]
push eax
push 0x58a96c
call fcn.004781f0
mov ecx, dword [esi]
push ecx
push str.__title__r_n__head__r_n_body__r_n_p__big__strong__font_color_000000__
lea ecx, [esp + 0x54]
call fcn.004781d0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x40595c
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xf4]
push edx
push str.dt_d.htm__
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esp + 0x50]
add esp, 0xc
lea eax, [esp + 0xf4]
mov edx, dword [ecx]
push str.__a__r_n
push edx
push eax
push 0x58a60c
lea ecx, [esp + 0x5c]
call fcn.00478220
jmp 0x40596a
push 0x58a5e0
lea ecx, [esp + 0x50]
call fcn.004781a0
lea ecx, [esp + 0x10]
call fcn.00527faa
push 0
push esi
push 0
push 0
lea ecx, [esp + 0x20]
push edi
push ecx
call fcn.004e5320
mov edx, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x4c]
push str.__p__r_n
push edx
push 0x58a8b0
call fcn.004781f0
mov eax, dword [esi + 4]
push eax
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x405a0b
mov ecx, dword [esi + 4]
push ecx
lea ecx, [esp + 0x20]
call fcn.005281a8
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x4059ea
lea edx, [esp + 0x1c]
push edx
call fcn.004e5070
add esp, 4
test eax, eax
jne 0x4059ea
lea eax, [esp + 0x60]
lea ecx, [esp + 0x1c]
push eax
call fcn.00528437
mov ecx, dword [esp + 0x1c]
push str.__p__r_n
push ecx
push str._p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.004781f0
lea ecx, [esp + 0x1c]
call fcn.00527faa
push str._p__em_
lea ecx, [esp + 0x50]
call fcn.004781a0
test ebx, ebx
jne 0x405a29
mov eax, dword [esi + 8]
and al, 0x18
neg al
sbb eax, eax
inc eax
jmp 0x405a33
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
sete al
test eax, eax
je 0x405a3e
push 0x58a58c
jmp 0x405a7a
test ebx, ebx
jne 0x405a57
mov eax, dword [esi + 8]
and al, 8
neg al
sbb eax, eax
and eax, 0x2ff
add eax, reloc.OLEAUT32.dll_SysReAllocString
jmp 0x405a5a
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x350]
lea ecx, [esp + 0x1c]
push edx
push 0
push 0
push ecx
push eax
push 0
mov ecx, ebp
call fcn.00469220
mov edx, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x50]
call fcn.004781a0
push str.__font_nbsp____em_
lea ecx, [esp + 0x50]
call fcn.004781a0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x405aa2
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push ecx
jmp 0x405aa7
push 0x58aa9c
lea ecx, [esp + 0x50]
call fcn.004781a0
mov edx, dword [esi]
push 0x58a574
push edx
push str.__em__
lea ecx, [esp + 0x58]
call fcn.004781f0
mov eax, dword [esi + 0xc]
mov ebx, dword [esi + 0x10]
xor ebp, ebp
test eax, eax
jle 0x405b16
mov edi, dword [esp + 0x48]
neg edi
sbb edi, edi
and edi, 4
add edi, 0xc
mov eax, dword [ebx]
push 0x58a564
push eax
push 0x58a54c
lea ecx, [esp + 0x58]
call fcn.004781f0
mov ecx, dword [esi + 0xc]
dec ecx
cmp ebp, ecx
je 0x405b0c
push 0x58a524
lea ecx, [esp + 0x50]
call fcn.004781a0
mov eax, dword [esi + 0xc]
add ebx, edi
inc ebp
cmp ebp, eax
jl 0x405ae0
push 0x58a4fc
lea ecx, [esp + 0x50]
call fcn.004781a0
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405b39
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x50]
call fcn.004781a0
mov eax, dword [esi + 0xc]
mov edi, dword [esi + 0x10]
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x20], 0
test eax, eax
jle 0x405c6b
mov ebx, ebp
neg ebx
sbb ebx, ebx
and ebx, 4
add ebx, 0xc
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x405b75
push str._tr__r_n_td_width_30___valign_top___strong_
lea ecx, [esp + 0x50]
call fcn.004781a0
mov edx, dword [edi]
push str.__font___td__r_n_td_width_70___valign_top__
push edx
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x58]
call fcn.004781f0
test ebp, ebp
jne 0x405ba4
mov eax, dword [edi + 8]
and al, 1
neg al
sbb eax, eax
and eax, 0xfffffd01
add eax, 0x80000301
jmp 0x405ba7
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push 0
push 0
push edx
push eax
push 0
call fcn.00469220
mov eax, dword [esp + 0x1c]
push 0x58a370
push eax
lea ecx, [esp + 0x54]
call fcn.004781d0
test ebp, ebp
je 0x405bef
test byte [edi + 8], 2
je 0x405bef
push 0x58a368
lea ecx, [esp + 0x50]
call fcn.004781a0
mov ecx, dword [edi + 4]
push ecx
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x405c47
mov edx, dword [edi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.005281a8
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405c39
lea eax, [esp + 0x10]
push eax
call fcn.004e5070
add esp, 4
test eax, eax
jne 0x405c39
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.00528437
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.004781a0
push str.__td__r_n__tr__r_n
lea ecx, [esp + 0x50]
call fcn.004781a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0xc]
add edi, ebx
inc eax
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x405b5f
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405c80
push str.__table__r_n
lea ecx, [esp + 0x50]
call fcn.004781a0
push 0x58a2c0
lea ecx, [esp + 0x50]
call fcn.004781a0
mov edi, dword [esp + 0x38]
test edi, edi
jl 0x405cb4
mov eax, dword [esp + 0x14]
push edi
push eax
lea ecx, [esp + 0xfc]
push str.e_d__d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x405cd3
mov edx, dword [0x5ab178]
lea eax, [esp + 0xf4]
add edx, edi
push edx
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x7c]
push edx
push eax
call fcn.005282b4
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xb
call fcn.00478500
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 9
call fcn.0052801f
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
add esi, ebp
jmp 0x405d2f
neg ebx
mov edi, dword [esp + 0x38]
sbb ebx, ebx
and ebx, 4
add ebx, 0x14
add esi, ebx
mov ecx, dword [esp + 0x44]
inc edi
mov dword [esp + 0x38], edi
cmp edi, dword [ecx + 0x1c]
jl 0x405863
jmp 0x406164
mov ecx, dword [ebx + 0x30]
mov esi, dword [ebx + 0x34]
xor eax, eax
test ecx, ecx
jle 0x405d62
lea edx, [esi + 0x14]
test byte [edx], 2
je 0x405d62
inc eax
add edx, 0x1c
cmp eax, ecx
jl 0x405d55
cmp eax, ecx
jge 0x406051
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5___a_name_
lea ecx, [esp + 0x28]
call fcn.004781a0
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x38], 0
test eax, eax
jle 0x406043
mov ebp, dword [esp + 0x350]
mov edi, 0x400000
test byte [esi + 0x14], 2
jne 0x40602c
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x28]
call fcn.004781a0
mov edx, dword [esi + 8]
lea ecx, [esp + 0x10]
push edx
call fcn.005281a8
test dword [ebx + 0x14], edi
jne 0x405e0d
mov eax, dword [esi + 4]
push eax
call fcn.004ce550
add esp, 4
cmp eax, 1
jne 0x405e0d
push 0x5b10b8
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edx, dword [esi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.004ce290
add esp, 8
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.00528437
push 0x5b10bc
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_70___valign_top__
push ecx
lea ecx, [esp + 0x2c]
call fcn.004781d0
lea ecx, [esp + 0x10]
call fcn.00527faa
test dword [ebx + 0x14], edi
jne 0x405e59
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push ebp
push 0
lea edx, [esp + 0x18]
push 0
push edx
push eax
push 0
call fcn.00469220
push 0x58a370
lea ecx, [esp + 0x14]
call fcn.005283fb
test dword [ebx + 0x14], edi
je 0x405e6f
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0xf4]
push ecx
push 0x58a194
push edx
jmp 0x405f4c
test byte [esi + 0x14], 1
je 0x405fcf
mov eax, dword [esi]
cmp eax, 0x80000301
ja 0x405f22
je 0x405f3b
cmp eax, 0x80000101
ja 0x405f03
je 0x405eee
cmp eax, reloc.OLEAUT32.dll_SysReAllocString
je 0x405ed9
cmp eax, reloc.OLEAUT32.dll_SysReAllocStringLen
jne 0x405fcf
push 0x5898f0
lea ecx, [esp + 0x20]
call fcn.005281a8
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x1c]
push eax
call fcn.005283fb
push 0x5898dc
lea ecx, [esp + 0x20]
call fcn.005283fb
mov eax, dword [esp + 0x1c]
jmp 0x405f5c
mov eax, dword [esi + 0x18]
test eax, eax
je 0x405ee7
mov eax, 0x5898d8
jmp 0x405f5c
mov eax, 0x5898d4
jmp 0x405f5c
xor ecx, ecx
lea edx, [esp + 0xf4]
mov cl, byte [esi + 0x18]
push ecx
push str.__u
push edx
jmp 0x405f4c
cmp eax, 0x80000201
jne 0x405fcf
movsx eax, word [esi + 0x18]
push eax
lea ecx, [esp + 0xf8]
push 0x58a194
push ecx
jmp 0x405f4c
cmp eax, 0x80000401
je 0x405f3b
cmp eax, 0x80000501
je 0x405f3b
cmp eax, 0x80000601
jne 0x405fcf
mov edx, dword [esi + 0x18]
lea eax, [esp + 0xf4]
push edx
push 0x58a194
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
test eax, eax
je 0x405fcf
mov ecx, dword [ebx + 0x14]
push eax
test edi, ecx
je 0x405f9a
lea ecx, [esp + 0x78]
push 0x58a17c
push ecx
call fcn.004e6da0
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xc
call fcn.00528437
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x74]
jmp 0x405fca
lea edx, [esp + 0x74]
push 0x58a16c
push edx
call fcn.004e6da0
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xd
call fcn.00528437
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x70]
call fcn.0052801f
mov eax, dword [esi + 0x10]
push eax
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x406019
mov ecx, dword [esi + 0x10]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406019
lea edx, [esp + 0x10]
push edx
call fcn.004e5070
add esp, 4
test eax, eax
jne 0x406019
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00528437
mov ecx, dword [esp + 0x10]
push str.__td__r_n__tr__r_n
push ecx
lea ecx, [esp + 0x2c]
call fcn.004781d0
mov eax, dword [esp + 0x38]
mov ecx, dword [ebx + 0x30]
inc eax
add esi, 0x1c
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x405d97
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.004781a0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x406156
push 0x58a73c
lea ecx, [esp + 0x28]
call fcn.004781a0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00407010
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x406148
mov ebp, dword [esp + 0x348]
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp + 0x68]
mov eax, dword [eax + edi*4]
lea ecx, [eax + eax*8]
mov al, byte [edx + ecx*4 + 0xe]
test al, 0xc
lea esi, [edx + ecx*4]
jne 0x40613c
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0xc0]
call fcn.00453e20
push eax
push esi
push ebp
call fcn.004e5280
add esp, 0xc
test eax, eax
je 0x40613c
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0xf4]
mov edx, dword [ecx + edi*4]
push edx
push str.cmd_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edx, dword [esi]
lea ecx, [esp + 0x10]
push edx
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.00407040
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x40608c
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.004070b0
push 0x58a11c
lea ecx, [esp + 0x28]
call fcn.004781a0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.004781a0
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xf4]
push eax
push str.dt_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [esp + 0xf4]
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x64]
push edx
push eax
push ecx
call fcn.005282b4
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xe
call fcn.00478500
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.0052801f
add dword [esp + 0x44], 0x38
jmp 0x4061d9
add ebx, 0x38
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0x348]
mov eax, dword [esp + 0x14]
inc eax
mov ecx, dword [edx + 0x54]
mov dword [esp + 0x14], eax
cmp eax, ecx
jl 0x404eec
mov ebp, dword [esp + 0x348]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x14], 0
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x4063b1
mov ecx, dword [esp + 0x20]
xor edi, edi
mov dword [esp + 0x34], edi
lea eax, [ecx + 4]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
call fcn.00478220
mov edx, dword [ebp + 0x24]
push str.__a___p_
push edx
push str.__font_nbsp_font_color_000000__
lea ecx, [esp + 0x30]
call fcn.004781f0
mov esi, dword [ebp + 0x68]
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00407010
mov eax, dword [ebp + 0x64]
test eax, eax
jle 0x40631b
test byte [esi + 0xe], 0xc
jne 0x40630c
lea ecx, [ebx + 0xc0]
call fcn.00453e20
push eax
push esi
push ebp
call fcn.004e5280
add esp, 0xc
test eax, eax
je 0x40630c
movsx ecx, word [esi + 0xc]
mov eax, dword [esp + 0x14]
dec ecx
cmp ecx, eax
jne 0x40630c
push edi
lea edx, [esp + 0xf8]
push str.cmd_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00407040
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x40626c
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.004070b0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.004781a0
mov esi, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push esi
push str.ct_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x64]
push eax
push ecx
push edx
call fcn.005282b4
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xf
call fcn.00478500
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.0052801f
mov edi, dword [esp + 0x20]
push edi
call fcn.00478d70
add esp, 4
add edi, eax
mov eax, dword [ebp + 0x5c]
inc esi
cmp esi, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], esi
jl 0x406219
mov eax, dword [ebp + 0x24]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
mov dword [esp + 0x44], 0
call fcn.00478220
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push eax
push ecx
lea edx, [esp + 0xfc]
push 0x58a028
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x24]
push str.__font___big___big___strong_nbsp_nbsp_nbsp__a_href_.._index.htm__
push eax
call fcn.004781d0
mov ecx, dword [ebp + 0x2c]
push ecx
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x406462
mov edx, dword [ebp + 0x2c]
lea ecx, [esp + 0x10]
push edx
call fcn.005281a8
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40644f
lea eax, [esp + 0x10]
push eax
call fcn.004e5070
add esp, 4
test eax, eax
jne 0x40644f
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.00528437
mov edx, dword [esp + 0x10]
push str.__p__p_
push edx
lea ecx, [esp + 0x2c]
call fcn.004781d0
lea ecx, [esp + 0x10]
call fcn.00527faa
push 0
push 0
push 0
push 0
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.004e5320
mov ecx, dword [esp + 0x28]
add esp, 0x18
push str.__p__p_
push ecx
push 0x589fb4
lea ecx, [esp + 0x30]
call fcn.004781f0
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x406561
push str._big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.004781a0
mov esi, dword [ebp + 0x60]
lea edx, [esp + 0x24]
push edx
mov ecx, ebx
call fcn.00407010
mov eax, dword [ebp + 0x5c]
xor edi, edi
test eax, eax
jle 0x406555
push edi
lea eax, [esp + 0xf8]
push str.ct_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
lea edx, [esi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebx
call fcn.00407040
push esi
call fcn.00478d70
add esp, 4
add esi, eax
mov eax, dword [ebp + 0x5c]
inc edi
cmp edi, eax
jl 0x4064ce
lea edx, [esp + 0x24]
mov ecx, ebx
push edx
call fcn.004070b0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x406662
mov eax, dword [esi + 0x14]
test al, 3
jne 0x40663f
test al, 0x40
je 0x40663f
lea ecx, [ebx + 0xc0]
call fcn.00453e20
push eax
push esi
push ebp
call fcn.004e52c0
add esp, 0xc
test eax, eax
je 0x40663f
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4065c8
push 0x589f18
lea ecx, [esp + 0x28]
call fcn.004781a0
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00407010
push edi
lea ecx, [esp + 0xf8]
push str.dt_d.htm
push ecx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, ebx
call fcn.00407040
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406575
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406662
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.004070b0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x40675a
test byte [esi + 0x14], 0x43
jne 0x406737
lea ecx, [ebx + 0xc0]
call fcn.00453e20
push eax
push esi
push ebp
call fcn.004e52c0
add esp, 0xc
test eax, eax
je 0x406737
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4066c0
push 0x589ec8
lea ecx, [esp + 0x28]
call fcn.004781a0
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00407010
push edi
lea edx, [esp + 0xf8]
push str.dt_d.htm
push edx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.005281a8
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005283fb
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005283fb
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005283fb
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00407040
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406676
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40675a
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.004070b0
mov eax, dword [ebp + 0x84]
test eax, eax
jle 0x406772
push str._p__big__a_href_const.htm___strong_
lea ecx, [esp + 0x28]
call fcn.004781a0
mov edx, dword [ebp + 0x74]
push edx
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x4067eb
push str._p__big__strong__br___
lea ecx, [esp + 0x28]
call fcn.004781a0
mov esi, dword [ebp + 0x74]
mov al, byte [esi]
test al, al
je 0x4067dd
cmp al, 0x40
jne 0x40679e
inc esi
push str.__td__td_width_78___
push esi
push str._tr__td_width_22___
lea ecx, [esp + 0x30]
call fcn.004781f0
push esi
call fcn.00478d70
add esp, 4
add esi, eax
lea ecx, [esp + 0x24]
push str.nbsp__td___tr__r_n
push esi
call fcn.004781d0
push esi
call fcn.00478d70
add esi, eax
add esp, 4
mov al, byte [esi]
test al, al
jne 0x406799
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.004781a0
push 0x589cd0
lea eax, [esp + 0x80]
push 0x5b1aa8
push eax
call fcn.005282b4
push 0x58948c
lea ecx, [esp + 0x7c]
push eax
push ecx
mov byte [esp + 0x34c], 0x10
call fcn.005282b4
mov edx, dword [esp + 0x34c]
mov byte [esp + 0x340], 0x11
push edx
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.005282b4
push 0x58948c
lea ecx, [esp + 0x74]
push eax
push ecx
mov byte [esp + 0x34c], 0x12
call fcn.005282b4
push str.samples
lea edx, [esp + 0x68]
push eax
push edx
mov byte [esp + 0x34c], 0x13
call fcn.005282b4
push 0x58948c
push eax
lea eax, [esp + 0x70]
mov byte [esp + 0x348], 0x14
push eax
call fcn.005282b4
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 0x1a
call fcn.0052801f
lea ecx, [esp + 0x70]
mov byte [esp + 0x340], 0x19
call fcn.0052801f
lea ecx, [esp + 0x74]
mov byte [esp + 0x340], 0x18
call fcn.0052801f
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 0x17
call fcn.0052801f
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 0x16
call fcn.0052801f
lea ecx, [esp + 0x68]
push 0x589cc4
lea edx, [esp + 0x44]
xor edi, edi
push ecx
push edx
mov dword [esp + 0x2c], edi
call fcn.005282b4
mov eax, dword [eax]
lea ecx, [esp + 0x1f8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], esi
call fcn.0052801f
cmp esi, 0xffffffff
je 0x406da6
mov eax, dword [0x5ada84]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x24
call fcn.00527faa
lea ecx, [esp + 0x8c]
call fcn.00527faa
lea ecx, [esp + 0x90]
call fcn.00527faa
lea ecx, [esp + 0x94]
call fcn.00527faa
lea ecx, [esp + 0x98]
call fcn.00527faa
lea ecx, [esp + 0x9c]
call fcn.00527faa
lea ecx, [esp + 0xa0]
call fcn.00527faa
lea ecx, [esp + 0xa4]
call fcn.00527faa
lea ecx, [esp + 0xa8]
call fcn.00527faa
lea ecx, [esp + 0xac]
call fcn.00527faa
lea edx, [esp + 0xc4]
push 0x1c
push edx
mov dword [esp + 0xb8], 1
mov dword [esp + 0xbc], edi
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc8], edi
call fcn.00478d20
add esp, 8
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x340], 0x25
call fcn.0044acf0
mov eax, dword [0x5ada84]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
call fcn.00477df0
mov byte [esp + 0x340], 0x27
jmp 0x406a56
xor edi, edi
lea ecx, [esp + 0x224]
lea edx, [esp + 0x68]
push ecx
lea eax, [esp + 0x44]
push edx
push eax
call fcn.005282b4
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x344], 0x28
call fcn.00528158
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x27
call fcn.0052801f
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1bc]
lea edx, [esp + 0x88]
push ecx
push edx
push eax
call fcn.0044f060
add esp, 0xc
cmp eax, 1
jne 0x406c7a
mov ecx, dword [esp + 0x88]
cmp dword [ecx - 8], edi
je 0x406c7a
lea ecx, [ebx + 0xc0]
call fcn.00453e20
lea ecx, [esp + 0x1bc]
mov edi, eax
call fcn.0044acb0
test eax, edi
je 0x406c7a
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x406b05
push 0x589b3c
lea ecx, [esp + 0x28]
call fcn.004781a0
mov dword [esp + 0x20], 1
mov edx, dword [esp + 0x88]
push str.__td__td_width_30___
push edx
push str._tr__td_width_20___
lea ecx, [esp + 0x30]
call fcn.004781f0
push str._a_href_.._.._lib_
lea ecx, [esp + 0x14]
call fcn.005281a8
mov eax, dword [esp + 0x34c]
lea ecx, [esp + 0x10]
push eax
call fcn.005283fb
push str._samples_
lea ecx, [esp + 0x14]
call fcn.005283fb
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x224]
push ecx
lea edx, [esp + 0x228]
push 0x58a978
push edx
push eax
lea ecx, [esp + 0x34]
call fcn.00478220
push str.__a_
lea ecx, [esp + 0x28]
call fcn.004781a0
lea ecx, [esp + 0x14]
push 0x589ae8
push ecx
call fcn.004e5770
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0xe0]
push 0xffffffffffffffff
push edx
call fcn.004783b0
cmp eax, 0xffffffff
je 0x406c5b
xor edi, edi
lea eax, [esp + 0x14]
lea ecx, [esp + 0xe0]
push eax
push edi
call fcn.004788e0
mov edi, eax
cmp edi, 0xffffffff
je 0x406c5b
lea ecx, [esp + 0x14]
call fcn.005248a6
lea ecx, [esp + 0x14]
call fcn.0052485a
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
test eax, eax
je 0x406bae
lea edx, [esp + 0x14]
lea eax, [esp + 0x68]
push edx
lea ecx, [esp + 0x70]
push eax
push ecx
call fcn.0052824e
mov eax, dword [eax]
mov byte [esp + 0x340], 0x29
push eax
call fcn.004e5670
add esp, 4
lea ecx, [esp + 0x6c]
mov esi, eax
mov byte [esp + 0x340], 0x27
call fcn.0052801f
test esi, esi
je 0x406bae
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0x58a978
push edx
push eax
push str._br___
lea ecx, [esp + 0x34]
call fcn.00478220
mov ecx, dword [esp + 0x14]
push str.__a_
push ecx
lea ecx, [esp + 0x2c]
call fcn.004781d0
jmp 0x406bae
mov edx, dword [esp + 0x8c]
push str.nbsp__td___tr__r_n
push edx
push str.__td__td_width_50___
lea ecx, [esp + 0x30]
call fcn.004781f0
mov esi, dword [esp + 0x48]
lea eax, [esp + 0x1f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x406a54
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406cae
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.004781a0
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
mov dword [esp + 0xe0], 0x55f890
call fcn.00477ff0
lea ecx, [esp + 0x14]
mov byte [esp + 0x340], 0x25
call fcn.0052801f
lea ecx, [esp + 0xac]
mov byte [esp + 0x340], 0x32
call fcn.0052801f
lea ecx, [esp + 0xa8]
mov byte [esp + 0x340], 0x31
call fcn.0052801f
lea ecx, [esp + 0xa4]
mov byte [esp + 0x340], 0x30
call fcn.0052801f
lea ecx, [esp + 0xa0]
mov byte [esp + 0x340], 0x2f
call fcn.0052801f
lea ecx, [esp + 0x9c]
mov byte [esp + 0x340], 0x2e
call fcn.0052801f
lea ecx, [esp + 0x98]
mov byte [esp + 0x340], 0x2d
call fcn.0052801f
lea ecx, [esp + 0x94]
mov byte [esp + 0x340], 0x2c
call fcn.0052801f
lea ecx, [esp + 0x90]
mov byte [esp + 0x340], 0x2b
call fcn.0052801f
lea ecx, [esp + 0x8c]
mov byte [esp + 0x340], 0x2a
call fcn.0052801f
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x16
call fcn.0052801f
lea ecx, [esp + 0x3c]
push str.index.htm
lea edx, [esp + 0x44]
push ecx
push edx
call fcn.005282b4
xor edi, edi
lea ecx, [esp + 0x24]
push edi
push 0xffffffffffffffff
push eax
mov byte [esp + 0x34c], 0x33
call fcn.00478500
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.0052801f
push str._table_border1_cols3_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x28]
mov dword [esp + 0x38], edi
call fcn.004781a0
mov eax, dword [ebp + 0x84]
mov esi, dword [ebp + 0x88]
test eax, eax
jle 0x406ec8
test edi, edi
jne 0x406e1a
push str._tr__r_n_td_width_25____strong_
lea ecx, [esp + 0x28]
call fcn.004781a0
mov eax, dword [esi]
push str.__font___td__td_width_25____font_color_000000__
push eax
push str._tr__td_width_25____font_color_000000__
lea ecx, [esp + 0x30]
call fcn.004781f0
lea ecx, [esp + 0x10]
push ecx
push esi
mov ecx, ebx
call fcn.00404c90
mov edx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_50___
push edx
lea ecx, [esp + 0x2c]
call fcn.004781d0
mov eax, dword [esi + 8]
push eax
call fcn.00478c40
add esp, 4
test eax, eax
jne 0x406ea8
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.005281a8
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406e9a
lea edx, [esp + 0x10]
push edx
call fcn.004e5070
add esp, 4
test eax, eax
jne 0x406e9a
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00528437
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004781a0
push str.__td___tr__r_n
lea ecx, [esp + 0x28]
call fcn.004781a0
mov eax, dword [ebp + 0x84]
add esi, 0x20
inc edi
cmp edi, eax
jl 0x406e08
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.004781a0
lea edx, [esp + 0x3c]
push str.const.htm
lea eax, [esp + 0x44]
push edx
push eax
call fcn.005282b4
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0x34
call fcn.00478500
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.0052801f
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x68]
xor edi, edi
test eax, eax
jle 0x406f5f
test byte [esi + 0xe], 0xc
jne 0x406f54
lea ecx, [ebx + 0xc0]
call fcn.00453e20
push eax
push esi
push ebp
call fcn.004e5280
add esp, 0xc
test eax, eax
je 0x406f54
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x3c]
push ecx
push edx
push edi
push esi
push ebp
mov ecx, ebx
call fcn.00407120
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x406f1d
lea ecx, [esp + 0x68]
mov byte [esp + 0x340], 9
call fcn.0052801f
lea ecx, [esp + 0x60]
mov byte [esp + 0x340], 8
call fcn.0052801f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x340], 7
call fcn.0052801f
lea ecx, [esp + 0x10]
mov byte [esp + 0x340], 6
call fcn.0052801f
mov esi, 0x55f890
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
mov dword [esp + 0x4c], esi
call fcn.00477ff0
lea ecx, [esp + 0x24]
mov byte [esp + 0x340], 3
mov dword [esp + 0x24], esi
call fcn.00477ff0
lea ecx, [esp + 0x3c]
mov dword [esp + 0x340], 0xffffffff
call fcn.0052801f
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x334
ret 0xc