Function at 0x405b60
Capabilities:
Contain obfuscated stackstrings
Create directory
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5dea7a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x328
push ebx
push ebp
push esi
mov dword [esp + 0x14], ecx
push edi
add ecx, 0x930
push str.help
lea eax, [esp + 0x88]
push ecx
push eax
call fcn.005bc6b6
push 0x649634
lea ecx, [esp + 0x84]
xor esi, esi
push eax
push ecx
mov dword [esp + 0x34c], esi
call fcn.005bc6b6
mov edx, dword [esp + 0x34c]
mov edi, 1
push edx
push eax
lea eax, [esp + 0x44]
mov byte [esp + 0x348], 1
push eax
call fcn.005bc6b6
lea ecx, [esp + 0x80]
mov byte [esp + 0x340], 4
call fcn.005bc421
lea ecx, [esp + 0x84]
mov byte [esp + 0x340], 3
call fcn.005bc421
mov ecx, dword [esp + 0x3c]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x649634
lea ecx, [esp + 0x40]
call fcn.005bc7fd
lea ecx, [esp + 0x24]
call fcn.004918b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
call fcn.004918b0
mov eax, dword [0x6707bc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
push 0x64ae6c
lea ecx, [esp + 0x64]
mov byte [esp + 0x344], 8
call fcn.005bc48f
mov eax, dword [esp + 0x348]
mov byte [esp + 0x340], 9
mov dword [esp + 0x6c], edi
mov dword [esp + 0x40], edi
mov ecx, dword [eax + 0x54]
mov ebx, dword [eax + 0x58]
cmp ecx, esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x14], esi
jle 0x406f94
mov edi, dword [esp + 0x18]
mov esi, eax
jmp 0x405c9b
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0x348]
test byte [ebx + 0x14], 3
jne 0x406f72
lea ebp, [edi + 0xc0]
mov ecx, ebp
call fcn.00460cd0
push eax
push ebx
push esi
call fcn.00501980
add esp, 0xc
test eax, eax
je 0x406f72
mov dword [esp + 0x34], 0
mov eax, dword [ebx]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x34]
call fcn.00491ce0
push str.__font___big_nbsp_
lea ecx, [esp + 0x28]
call fcn.00491c60
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x405d17
test al, 0x80
je 0x405d04
push 0x64ada4
jmp 0x405d29
test ah, 0x80
je 0x405d10
push 0x64ad94
jmp 0x405d29
push 0x64ad88
jmp 0x405d29
test eax, 0x400000
mov eax, 0x64ad74
jne 0x405d28
mov eax, 0x64ad68
push eax
lea ecx, [esp + 0x28]
call fcn.00491c60
lea ecx, [esp + 0x10]
call fcn.005bc3ac
push 0
push 0
push 0
push ebx
lea edx, [esp + 0x20]
push esi
push edx
call fcn.00501a20
mov eax, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x24]
push eax
push str.__strong_nbsp_nbsp_nbsp_
call fcn.00491c90
mov ecx, dword [esi + 0x24]
push str.__a___p__p_
push ecx
push 0x64ad00
lea ecx, [esp + 0x30]
call fcn.00491cb0
mov eax, dword [ebx + 0x14]
test eax, 0x10000
je 0x405d8b
push 0x64acec
jmp 0x405d97
test eax, 0x20000
je 0x405da0
push 0x64acd4
lea ecx, [esp + 0x28]
call fcn.00491c60
mov edx, dword [ebx + 8]
push edx
call fcn.00492700
add esp, 4
test eax, eax
jne 0x405e01
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x1c]
push eax
call fcn.005bc5aa
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405dea
lea ecx, [esp + 0x1c]
push ecx
call fcn.00501770
add esp, 4
test eax, eax
jne 0x405dea
lea edx, [esp + 0x60]
lea ecx, [esp + 0x1c]
push edx
call fcn.005bc839
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push eax
call fcn.00491c60
lea ecx, [esp + 0x1c]
call fcn.005bc3ac
push str.__p__r_n
lea ecx, [esp + 0x28]
call fcn.00491c60
test dword [ebx + 0x14], 0x800044
je 0x406ae6
push ebx
push esi
mov ecx, edi
call fcn.0047eb70
test eax, eax
jle 0x4062dc
push str._p__big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.00491c60
mov edi, dword [ebx + 0x28]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407dc0
mov eax, dword [ebx + 0x24]
xor esi, esi
test eax, eax
jle 0x405f2d
mov ecx, ebp
call fcn.00460cd0
mov edx, dword [esp + 0x348]
push eax
push edi
push edx
call fcn.005019e0
add esp, 0xc
test eax, eax
je 0x405f1e
test byte [edi + 0xe], 0x10
jne 0x405f1e
test byte [ebx + 0x14], 0x40
je 0x405ea8
cmp esi, 8
jge 0x405ea8
push esi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x405ec4
mov ecx, dword [esp + 0x14]
push esi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x64ac68
lea ecx, [esp + 0x14]
call fcn.005bc5aa
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [edi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00407df0
mov eax, dword [ebx + 0x24]
add edi, 0x14
inc esi
cmp esi, eax
jl 0x405e59
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407e60
mov eax, dword [ebx + 0x24]
mov esi, dword [ebx + 0x28]
xor edi, edi
test eax, eax
mov dword [esp + 0x38], edi
jle 0x4062d0
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
test byte [ebx + 0x14], 0x40
je 0x405f6c
cmp edi, 8
jge 0x405f6c
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4062bd
test byte [esi + 0xe], 0x10
jne 0x4062bd
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.00460cd0
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.005019e0
add esp, 0xc
test eax, eax
je 0x4062bd
mov dword [esp + 0x5c], 0
mov ecx, dword [ebx]
mov edx, dword [esi]
push ecx
push 0x64ac58
push edx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x5c]
call fcn.00491ce0
mov eax, dword [esi]
push str.__font___big_nbsp_
push eax
push str.___title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
lea ecx, [esp + 0x58]
call fcn.00491cb0
test byte [ebx + 0x14], 0x40
je 0x405ff1
cmp edi, 8
jge 0x405ff1
push 0x64ac00
lea ecx, [esp + 0x50]
call fcn.00491c60
jmp 0x406026
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push ecx
push str.dt_d.htm__
push edx
call ebp
mov eax, dword [ebx]
add esp, 0xc
lea ecx, [esp + 0xf4]
push str.__a_
push eax
push ecx
push 0x64abc0
lea ecx, [esp + 0x5c]
call fcn.00491ce0
lea ecx, [esp + 0x10]
call fcn.005bc3ac
mov edx, dword [esp + 0x348]
push esi
push 0
push 0
push 0
lea eax, [esp + 0x20]
push edx
push eax
call fcn.00501a20
mov ecx, dword [esp + 0x28]
add esp, 0x18
push ecx
push 0x64ab9c
lea ecx, [esp + 0x54]
call fcn.00491c90
mov edx, dword [esp + 0x350]
lea eax, [esp + 0x1c]
movsx ecx, word [esi + 0xc]
push edx
push 0
push 0
push eax
push ecx
call fcn.00501320
mov ecx, dword [esp + 0x2c]
add esp, 4
push eax
push 0
call fcn.0047e2b0
mov edx, dword [esp + 0x1c]
push 0x64ab8c
push edx
push str.__p__r_n_p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.00491cb0
test byte [esi + 0xe], 8
je 0x4060b4
push 0x64ab50
lea ecx, [esp + 0x50]
call fcn.00491c60
test byte [esi + 0xe], 4
je 0x4060c8
push 0x64ab48
lea ecx, [esp + 0x50]
call fcn.00491c60
mov eax, dword [esi + 8]
push eax
call fcn.00492700
add esp, 4
test eax, eax
jne 0x406120
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc5aa
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406112
lea edx, [esp + 0x10]
push edx
call fcn.00501770
add esp, 4
test eax, eax
jne 0x406112
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc839
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
call fcn.00491c60
push str.__p__r_n
lea ecx, [esp + 0x50]
call fcn.00491c60
mov ax, word [esi + 0xc]
cmp ax, 0x3ee
je 0x40614e
cmp ax, 0x3e8
je 0x40614e
cmp ax, 0x3ef
je 0x40614e
cmp ax, 0x3f0
jne 0x406236
mov edx, dword [esi + 0x10]
push edx
call fcn.00492700
add esp, 4
test eax, eax
jne 0x406236
push 0x64ab2c
lea ecx, [esp + 0x14]
call fcn.005bc5aa
mov edi, dword [esi + 0x10]
xor ebp, ebp
cmp byte [edi], 0
je 0x406210
push str.nbsp_nbsp_nbsp___font_color_000000__
lea ecx, [esp + 0x14]
call fcn.005bc7fd
cmp word [esi + 0xc], 0x3e8
je 0x4061c1
mov eax, ebp
inc ebp
push eax
lea eax, [esp + 0xf8]
push 0x64aafc
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
jmp 0x4061d6
push edi
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push edi
call fcn.00492830
add esp, 4
add edi, eax
push 0x64aadc
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push edi
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push str.__font__br__r_n
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push edi
call fcn.00492830
add edi, eax
add esp, 4
cmp byte [edi], 0
jne 0x40617e
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.00491c60
push str.__p_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edi, dword [esp + 0x38]
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
push str._r_n_p_
lea ecx, [esp + 0x50]
call fcn.00491c60
test byte [ebx + 0x14], 0x40
je 0x406264
cmp edi, 8
jge 0x406264
push edi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call ebp
add esp, 0xc
jmp 0x40627c
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call ebp
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x80]
push ecx
push edx
call fcn.005bc6b6
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xa
call fcn.00491fc0
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 9
call fcn.005bc421
mov eax, dword [ebx + 0x24]
add esi, 0x14
inc edi
cmp edi, eax
mov dword [esp + 0x38], edi
jl 0x405f55
mov edi, dword [esp + 0x18]
mov dword [esp + 0x6c], 0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x4063df
push 0x64aa28
lea ecx, [esp + 0x28]
call fcn.00491c60
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.00407dc0
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x4063d1
mov ecx, dword [ebx + 0x10]
mov ebp, dword [esp + 0x348]
mov eax, dword [ecx + edi*4]
lea edx, [eax + eax*8]
mov eax, dword [ebp + 0x68]
lea esi, [eax + edx*4]
mov al, byte [eax + edx*4 + 0xe]
test al, 0xc
jne 0x4063c5
mov ecx, dword [esp + 0x18]
add ecx, 0xc0
call fcn.00460cd0
push eax
push esi
push ebp
call fcn.005019e0
add esp, 0xc
test eax, eax
je 0x4063c5
mov edx, dword [ebx + 0x10]
lea ecx, [esp + 0xf4]
mov eax, dword [edx + edi*4]
push eax
push str.cmd_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.00407df0
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x40630e
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
call fcn.00407e60
mov eax, dword [ebx + 0x1c]
test eax, eax
jle 0x4064f7
push 0x64a9d8
lea ecx, [esp + 0x28]
call fcn.00491c60
mov esi, dword [ebx + 0x20]
test esi, esi
je 0x40640f
test dword [esi + 8], 0x80000000
je 0x40640f
mov ebp, 1
jmp 0x406411
xor ebp, ebp
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407dc0
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x4064e9
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
test byte [esi + 8], 1
jne 0x4064db
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.00460cd0
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.005019b0
add esp, 0xc
test eax, eax
je 0x4064db
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.e_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00407df0
mov eax, dword [ebx + 0x1c]
add esi, ebp
inc edi
cmp edi, eax
jl 0x406436
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407e60
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x4065cf
test ah, 0x80
jne 0x4065cf
push str._p__big__strong_
lea ecx, [esp + 0x28]
call fcn.00491c60
mov ebp, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov ecx, ebp
call fcn.00407dc0
mov eax, dword [0x66de98]
xor esi, esi
test eax, eax
jle 0x4065c3
mov edi, 0x66dda8
test byte [edi + 8], 1
jne 0x4065b2
push esi
lea eax, [esp + 0xf8]
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edx, dword [edi]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebp
call fcn.00407df0
mov eax, dword [0x66de98]
inc esi
add edi, 0x14
cmp esi, eax
jl 0x40653d
lea edx, [esp + 0x24]
mov ecx, ebp
push edx
call fcn.00407e60
mov edx, dword [esp + 0x40]
xor ecx, ecx
xor eax, eax
cmp edx, 1
mov esi, 0x66dda8
mov dword [esp + 0x48], ecx
mov dword [esp + 0x38], eax
jne 0x4065f4
mov eax, dword [0x66de98]
neg eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx + 0x1c]
cmp eax, ecx
jge 0x406f04
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x406632
mov eax, dword [esp + 0x44]
mov esi, dword [eax + 0x20]
test esi, esi
je 0x40662a
test dword [esi + 8], 0x80000000
je 0x40662a
mov ebx, 1
mov dword [esp + 0x48], ebx
jmp 0x406636
xor ebx, ebx
mov dword [esp + 0x48], ebx
jmp 0x406636
mov ebx, dword [esp + 0x48]
test byte [esi + 8], 1
jne 0x406abf
mov ebp, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
call fcn.00460cd0
mov edi, dword [esp + 0x348]
push eax
push esi
push edi
call fcn.005019b0
add esp, 0xc
test eax, eax
je 0x406abf
mov dword [esp + 0x5c], 0
mov ecx, dword [esi]
push ecx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x54]
call fcn.00491c90
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x4066a4
mov edx, dword [esp + 0x44]
push 0x64a98c
lea ecx, [esp + 0x50]
mov eax, dword [edx]
push eax
push 0x64ac58
call fcn.00491cb0
mov ecx, dword [esi]
push ecx
push str.__title__r_n__head__r_n_body__r_n_p__big__strong__font_color_000000__
lea ecx, [esp + 0x54]
call fcn.00491c90
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x4066fc
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xf4]
push edx
push str.dt_d.htm__
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esp + 0x50]
add esp, 0xc
lea eax, [esp + 0xf4]
mov edx, dword [ecx]
push str.__a__r_n
push edx
push eax
push 0x64a8f8
lea ecx, [esp + 0x5c]
call fcn.00491ce0
jmp 0x40670a
push 0x64a8cc
lea ecx, [esp + 0x50]
call fcn.00491c60
lea ecx, [esp + 0x10]
call fcn.005bc3ac
push 0
push esi
push 0
push 0
lea ecx, [esp + 0x20]
push edi
push ecx
call fcn.00501a20
mov edx, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x4c]
push str.__p__r_n
push edx
push 0x64ab9c
call fcn.00491cb0
mov eax, dword [esi + 4]
push eax
call fcn.00492700
add esp, 4
test eax, eax
jne 0x4067ab
mov ecx, dword [esi + 4]
push ecx
lea ecx, [esp + 0x20]
call fcn.005bc5aa
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40678a
lea edx, [esp + 0x1c]
push edx
call fcn.00501770
add esp, 4
test eax, eax
jne 0x40678a
lea eax, [esp + 0x60]
lea ecx, [esp + 0x1c]
push eax
call fcn.005bc839
mov ecx, dword [esp + 0x1c]
push str.__p__r_n
push ecx
push str._p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.00491cb0
lea ecx, [esp + 0x1c]
call fcn.005bc3ac
push str._p__em_
lea ecx, [esp + 0x50]
call fcn.00491c60
test ebx, ebx
jne 0x4067c9
mov eax, dword [esi + 8]
and al, 0x18
neg al
sbb eax, eax
inc eax
jmp 0x4067d3
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
sete al
test eax, eax
je 0x4067de
push 0x64a878
jmp 0x40681a
test ebx, ebx
jne 0x4067f7
mov eax, dword [esi + 8]
and al, 8
neg al
sbb eax, eax
and eax, 0x2ff
add eax, reloc.OLEAUT32.dll_SysReAllocString
jmp 0x4067fa
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x350]
lea ecx, [esp + 0x1c]
push edx
push 0
push 0
push ecx
push eax
push 0
mov ecx, ebp
call fcn.0047e2b0
mov edx, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x50]
call fcn.00491c60
push str.__font_nbsp____em_
lea ecx, [esp + 0x50]
call fcn.00491c60
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x406842
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push ecx
jmp 0x406847
push 0x64ad88
lea ecx, [esp + 0x50]
call fcn.00491c60
mov edx, dword [esi]
push 0x64a860
push edx
push str.__em__
lea ecx, [esp + 0x58]
call fcn.00491cb0
mov eax, dword [esi + 0xc]
mov ebx, dword [esi + 0x10]
xor ebp, ebp
test eax, eax
jle 0x4068b6
mov edi, dword [esp + 0x48]
neg edi
sbb edi, edi
and edi, 4
add edi, 0xc
mov eax, dword [ebx]
push 0x64a850
push eax
push 0x64a838
lea ecx, [esp + 0x58]
call fcn.00491cb0
mov ecx, dword [esi + 0xc]
dec ecx
cmp ebp, ecx
je 0x4068ac
push 0x64a810
lea ecx, [esp + 0x50]
call fcn.00491c60
mov eax, dword [esi + 0xc]
add ebx, edi
inc ebp
cmp ebp, eax
jl 0x406880
push 0x64a7e8
lea ecx, [esp + 0x50]
call fcn.00491c60
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x4068d9
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x50]
call fcn.00491c60
mov eax, dword [esi + 0xc]
mov edi, dword [esi + 0x10]
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x20], 0
test eax, eax
jle 0x406a0b
mov ebx, ebp
neg ebx
sbb ebx, ebx
and ebx, 4
add ebx, 0xc
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x406915
push str._tr__r_n_td_width_30___valign_top___strong_
lea ecx, [esp + 0x50]
call fcn.00491c60
mov edx, dword [edi]
push str.__font___td__r_n_td_width_70___valign_top__
push edx
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x58]
call fcn.00491cb0
test ebp, ebp
jne 0x406944
mov eax, dword [edi + 8]
and al, 1
neg al
sbb eax, eax
and eax, 0xfffffd01
add eax, 0x80000301
jmp 0x406947
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push 0
push 0
push edx
push eax
push 0
call fcn.0047e2b0
mov eax, dword [esp + 0x1c]
push 0x64a65c
push eax
lea ecx, [esp + 0x54]
call fcn.00491c90
test ebp, ebp
je 0x40698f
test byte [edi + 8], 2
je 0x40698f
push 0x64a654
lea ecx, [esp + 0x50]
call fcn.00491c60
mov ecx, dword [edi + 4]
push ecx
call fcn.00492700
add esp, 4
test eax, eax
jne 0x4069e7
mov edx, dword [edi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc5aa
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x4069d9
lea eax, [esp + 0x10]
push eax
call fcn.00501770
add esp, 4
test eax, eax
jne 0x4069d9
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc839
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.00491c60
push str.__td__r_n__tr__r_n
lea ecx, [esp + 0x50]
call fcn.00491c60
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0xc]
add edi, ebx
inc eax
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x4068ff
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x406a20
push str.__table__r_n
lea ecx, [esp + 0x50]
call fcn.00491c60
push 0x64a5ac
lea ecx, [esp + 0x50]
call fcn.00491c60
mov edi, dword [esp + 0x38]
test edi, edi
jl 0x406a54
mov eax, dword [esp + 0x14]
push edi
push eax
lea ecx, [esp + 0xfc]
push str.e_d__d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x406a73
mov edx, dword [0x66de98]
lea eax, [esp + 0xf4]
add edx, edi
push edx
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x7c]
push edx
push eax
call fcn.005bc6b6
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xb
call fcn.00491fc0
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 9
call fcn.005bc421
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
add esi, ebp
jmp 0x406acf
neg ebx
mov edi, dword [esp + 0x38]
sbb ebx, ebx
and ebx, 4
add ebx, 0x14
add esi, ebx
mov ecx, dword [esp + 0x44]
inc edi
mov dword [esp + 0x38], edi
cmp edi, dword [ecx + 0x1c]
jl 0x406603
jmp 0x406f04
mov ecx, dword [ebx + 0x30]
mov esi, dword [ebx + 0x34]
xor eax, eax
test ecx, ecx
jle 0x406b02
lea edx, [esi + 0x14]
test byte [edx], 2
je 0x406b02
inc eax
add edx, 0x1c
cmp eax, ecx
jl 0x406af5
cmp eax, ecx
jge 0x406df1
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5___a_name_
lea ecx, [esp + 0x28]
call fcn.00491c60
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x38], 0
test eax, eax
jle 0x406de3
mov ebp, dword [esp + 0x350]
mov edi, 0x400000
test byte [esi + 0x14], 2
jne 0x406dcc
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x28]
call fcn.00491c60
mov edx, dword [esi + 8]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc5aa
test dword [ebx + 0x14], edi
jne 0x406bad
mov eax, dword [esi + 4]
push eax
call fcn.004eab40
add esp, 4
cmp eax, 1
jne 0x406bad
push 0x67557c
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edx, dword [esi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.004ea880
add esp, 8
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc839
push 0x675580
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_70___valign_top__
push ecx
lea ecx, [esp + 0x2c]
call fcn.00491c90
lea ecx, [esp + 0x10]
call fcn.005bc3ac
test dword [ebx + 0x14], edi
jne 0x406bf9
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push ebp
push 0
lea edx, [esp + 0x18]
push 0
push edx
push eax
push 0
call fcn.0047e2b0
push 0x64a65c
lea ecx, [esp + 0x14]
call fcn.005bc7fd
test dword [ebx + 0x14], edi
je 0x406c0f
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0xf4]
push ecx
push 0x64a480
push edx
jmp 0x406cec
test byte [esi + 0x14], 1
je 0x406d6f
mov eax, dword [esi]
cmp eax, 0x80000301
ja 0x406cc2
je 0x406cdb
cmp eax, 0x80000101
ja 0x406ca3
je 0x406c8e
cmp eax, reloc.OLEAUT32.dll_SysReAllocString
je 0x406c79
cmp eax, reloc.OLEAUT32.dll_SysReAllocStringLen
jne 0x406d6f
push 0x649bdc
lea ecx, [esp + 0x20]
call fcn.005bc5aa
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x1c]
push eax
call fcn.005bc7fd
push 0x6491cc
lea ecx, [esp + 0x20]
call fcn.005bc7fd
mov eax, dword [esp + 0x1c]
jmp 0x406cfc
mov eax, dword [esi + 0x18]
test eax, eax
je 0x406c87
mov eax, 0x649bc8
jmp 0x406cfc
mov eax, 0x649bc4
jmp 0x406cfc
xor ecx, ecx
lea edx, [esp + 0xf4]
mov cl, byte [esi + 0x18]
push ecx
push 0x64a478
push edx
jmp 0x406cec
cmp eax, 0x80000201
jne 0x406d6f
movsx eax, word [esi + 0x18]
push eax
lea ecx, [esp + 0xf8]
push 0x64a480
push ecx
jmp 0x406cec
cmp eax, 0x80000401
je 0x406cdb
cmp eax, 0x80000501
je 0x406cdb
cmp eax, 0x80000601
jne 0x406d6f
mov edx, dword [esi + 0x18]
lea eax, [esp + 0xf4]
push edx
push 0x64a480
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
test eax, eax
je 0x406d6f
mov ecx, dword [ebx + 0x14]
push eax
test edi, ecx
je 0x406d3a
lea ecx, [esp + 0x78]
push 0x64a468
push ecx
call fcn.00503c60
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xc
call fcn.005bc839
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x74]
jmp 0x406d6a
lea edx, [esp + 0x74]
push 0x64a458
push edx
call fcn.00503c60
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xd
call fcn.005bc839
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x70]
call fcn.005bc421
mov eax, dword [esi + 0x10]
push eax
call fcn.00492700
add esp, 4
test eax, eax
jne 0x406db9
mov ecx, dword [esi + 0x10]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406db9
lea edx, [esp + 0x10]
push edx
call fcn.00501770
add esp, 4
test eax, eax
jne 0x406db9
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc839
mov ecx, dword [esp + 0x10]
push str.__td__r_n__tr__r_n
push ecx
lea ecx, [esp + 0x2c]
call fcn.00491c90
mov eax, dword [esp + 0x38]
mov ecx, dword [ebx + 0x30]
inc eax
add esi, 0x1c
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x406b37
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.00491c60
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x406ef6
push 0x64aa28
lea ecx, [esp + 0x28]
call fcn.00491c60
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00407dc0
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x406ee8
mov ebp, dword [esp + 0x348]
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp + 0x68]
mov eax, dword [eax + edi*4]
lea ecx, [eax + eax*8]
mov al, byte [edx + ecx*4 + 0xe]
test al, 0xc
lea esi, [edx + ecx*4]
jne 0x406edc
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0xc0]
call fcn.00460cd0
push eax
push esi
push ebp
call fcn.005019e0
add esp, 0xc
test eax, eax
je 0x406edc
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0xf4]
mov edx, dword [ecx + edi*4]
push edx
push str.cmd_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edx, dword [esi]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.00407df0
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x406e2c
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00407e60
push 0x64a408
lea ecx, [esp + 0x28]
call fcn.00491c60
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.00491c60
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xf4]
push eax
push str.dt_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [esp + 0xf4]
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x64]
push edx
push eax
push ecx
call fcn.005bc6b6
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xe
call fcn.00491fc0
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.005bc421
add dword [esp + 0x44], 0x38
jmp 0x406f79
add ebx, 0x38
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0x348]
mov eax, dword [esp + 0x14]
inc eax
mov ecx, dword [edx + 0x54]
mov dword [esp + 0x14], eax
cmp eax, ecx
jl 0x405c8c
mov ebp, dword [esp + 0x348]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x14], 0
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x407151
mov ecx, dword [esp + 0x20]
xor edi, edi
mov dword [esp + 0x34], edi
lea eax, [ecx + 4]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
call fcn.00491ce0
mov edx, dword [ebp + 0x24]
push str.__a___p_
push edx
push str.__font_nbsp_font_color_000000__
lea ecx, [esp + 0x30]
call fcn.00491cb0
mov esi, dword [ebp + 0x68]
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00407dc0
mov eax, dword [ebp + 0x64]
test eax, eax
jle 0x4070bb
test byte [esi + 0xe], 0xc
jne 0x4070ac
lea ecx, [ebx + 0xc0]
call fcn.00460cd0
push eax
push esi
push ebp
call fcn.005019e0
add esp, 0xc
test eax, eax
je 0x4070ac
movsx ecx, word [esi + 0xc]
mov eax, dword [esp + 0x14]
dec ecx
cmp ecx, eax
jne 0x4070ac
push edi
lea edx, [esp + 0xf8]
push str.cmd_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00407df0
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x40700c
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00407e60
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.00491c60
mov esi, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push esi
push str.ct_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x64]
push eax
push ecx
push edx
call fcn.005bc6b6
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xf
call fcn.00491fc0
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.005bc421
mov edi, dword [esp + 0x20]
push edi
call fcn.00492830
add esp, 4
add edi, eax
mov eax, dword [ebp + 0x5c]
inc esi
cmp esi, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], esi
jl 0x406fb9
mov eax, dword [ebp + 0x24]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
mov dword [esp + 0x44], 0
call fcn.00491ce0
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push eax
push ecx
lea edx, [esp + 0xfc]
push 0x64a314
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x24]
push str.__font___big___big___strong_nbsp_nbsp_nbsp__a_href_.._index.htm__
push eax
call fcn.00491c90
mov ecx, dword [ebp + 0x2c]
push ecx
call fcn.00492700
add esp, 4
test eax, eax
jne 0x407202
mov edx, dword [ebp + 0x2c]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc5aa
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x4071ef
lea eax, [esp + 0x10]
push eax
call fcn.00501770
add esp, 4
test eax, eax
jne 0x4071ef
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc839
mov edx, dword [esp + 0x10]
push str.__p__p_
push edx
lea ecx, [esp + 0x2c]
call fcn.00491c90
lea ecx, [esp + 0x10]
call fcn.005bc3ac
push 0
push 0
push 0
push 0
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.00501a20
mov ecx, dword [esp + 0x28]
add esp, 0x18
push str.__p__p_
push ecx
push 0x64a2a0
lea ecx, [esp + 0x30]
call fcn.00491cb0
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x407301
push str._big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.00491c60
mov esi, dword [ebp + 0x60]
lea edx, [esp + 0x24]
push edx
mov ecx, ebx
call fcn.00407dc0
mov eax, dword [ebp + 0x5c]
xor edi, edi
test eax, eax
jle 0x4072f5
push edi
lea eax, [esp + 0xf8]
push str.ct_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
lea edx, [esi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebx
call fcn.00407df0
push esi
call fcn.00492830
add esp, 4
add esi, eax
mov eax, dword [ebp + 0x5c]
inc edi
cmp edi, eax
jl 0x40726e
lea edx, [esp + 0x24]
mov ecx, ebx
push edx
call fcn.00407e60
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x407402
mov eax, dword [esi + 0x14]
test al, 3
jne 0x4073df
test al, 0x40
je 0x4073df
lea ecx, [ebx + 0xc0]
call fcn.00460cd0
push eax
push esi
push ebp
call fcn.00501980
add esp, 0xc
test eax, eax
je 0x4073df
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x407368
push 0x64a204
lea ecx, [esp + 0x28]
call fcn.00491c60
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00407dc0
push edi
lea ecx, [esp + 0xf8]
push str.dt_d.htm
push ecx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, ebx
call fcn.00407df0
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x407315
mov eax, dword [esp + 0x20]
test eax, eax
je 0x407402
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00407e60
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x4074fa
test byte [esi + 0x14], 0x43
jne 0x4074d7
lea ecx, [ebx + 0xc0]
call fcn.00460cd0
push eax
push esi
push ebp
call fcn.00501980
add esp, 0xc
test eax, eax
je 0x4074d7
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x407460
push 0x64a1b4
lea ecx, [esp + 0x28]
call fcn.00491c60
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00407dc0
push edi
lea edx, [esp + 0xf8]
push str.dt_d.htm
push edx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x64ac68
call fcn.005bc5aa
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005bc7fd
push 0x64ac64
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00407df0
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x407416
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4074fa
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00407e60
mov eax, dword [ebp + 0x84]
test eax, eax
jle 0x407512
push str._p__big__a_href_const.htm___strong_
lea ecx, [esp + 0x28]
call fcn.00491c60
mov edx, dword [ebp + 0x74]
push edx
call fcn.00492700
add esp, 4
test eax, eax
jne 0x40758b
push str._p__big__strong__br___
lea ecx, [esp + 0x28]
call fcn.00491c60
mov esi, dword [ebp + 0x74]
mov al, byte [esi]
test al, al
je 0x40757d
cmp al, 0x40
jne 0x40753e
inc esi
push str.__td__td_width_78___
push esi
push str._tr__td_width_22___
lea ecx, [esp + 0x30]
call fcn.00491cb0
push esi
call fcn.00492830
add esp, 4
add esi, eax
lea ecx, [esp + 0x24]
push str.nbsp__td___tr__r_n
push esi
call fcn.00491c90
push esi
call fcn.00492830
add esi, eax
add esp, 4
mov al, byte [esi]
test al, al
jne 0x407539
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.00491c60
push 0x649fbc
lea eax, [esp + 0x80]
push 0x676010
push eax
call fcn.005bc6b6
push 0x649634
lea ecx, [esp + 0x7c]
push eax
push ecx
mov byte [esp + 0x34c], 0x10
call fcn.005bc6b6
mov edx, dword [esp + 0x34c]
mov byte [esp + 0x340], 0x11
push edx
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.005bc6b6
push 0x649634
lea ecx, [esp + 0x74]
push eax
push ecx
mov byte [esp + 0x34c], 0x12
call fcn.005bc6b6
push str.samples
lea edx, [esp + 0x68]
push eax
push edx
mov byte [esp + 0x34c], 0x13
call fcn.005bc6b6
push 0x649634
push eax
lea eax, [esp + 0x70]
mov byte [esp + 0x348], 0x14
push eax
call fcn.005bc6b6
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 0x1a
call fcn.005bc421
lea ecx, [esp + 0x70]
mov byte [esp + 0x340], 0x19
call fcn.005bc421
lea ecx, [esp + 0x74]
mov byte [esp + 0x340], 0x18
call fcn.005bc421
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 0x17
call fcn.005bc421
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 0x16
call fcn.005bc421
lea ecx, [esp + 0x68]
push 0x649fb0
lea edx, [esp + 0x44]
xor edi, edi
push ecx
push edx
mov dword [esp + 0x2c], edi
call fcn.005bc6b6
mov eax, dword [eax]
lea ecx, [esp + 0x1f8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], esi
call fcn.005bc421
cmp esi, 0xffffffff
je 0x407b5e
mov eax, dword [0x6707bc]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x24
call fcn.005bc3ac
lea ecx, [esp + 0x8c]
call fcn.005bc3ac
lea ecx, [esp + 0x90]
call fcn.005bc3ac
lea ecx, [esp + 0x94]
call fcn.005bc3ac
lea ecx, [esp + 0x98]
call fcn.005bc3ac
lea ecx, [esp + 0x9c]
call fcn.005bc3ac
lea ecx, [esp + 0xa0]
call fcn.005bc3ac
lea ecx, [esp + 0xa4]
call fcn.005bc3ac
lea ecx, [esp + 0xa8]
call fcn.005bc3ac
lea ecx, [esp + 0xac]
call fcn.005bc3ac
lea edx, [esp + 0xc4]
push 0x14
push edx
mov dword [esp + 0xb8], 1
mov dword [esp + 0xbc], edi
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc8], edi
call fcn.004927e0
lea eax, [esp + 0xe4]
push 4
push eax
mov dword [esp + 0xe8], edi
call fcn.004927e0
add esp, 0x10
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x340], 0x25
call fcn.00456540
mov ecx, dword [0x6707bc]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
call fcn.004918b0
mov byte [esp + 0x340], 0x27
lea edx, [esp + 0x224]
lea eax, [esp + 0x68]
push edx
lea ecx, [esp + 0x44]
push eax
push ecx
call fcn.005bc6b6
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x344], 0x28
call fcn.005bc55a
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x27
call fcn.005bc421
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x1bc]
push edi
lea eax, [esp + 0x8c]
push edx
push eax
push ecx
call fcn.0045bad0
add esp, 0x10
cmp eax, 1
jne 0x407a34
mov edx, dword [esp + 0x88]
cmp dword [edx - 8], edi
je 0x407a34
lea ecx, [ebx + 0xc0]
call fcn.00460cd0
lea ecx, [esp + 0x1bc]
mov edi, eax
call fcn.00456500
test eax, edi
je 0x407a32
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4078b9
push 0x649e28
lea ecx, [esp + 0x28]
call fcn.00491c60
mov dword [esp + 0x20], 1
mov eax, dword [esp + 0x88]
push str.__td__td_width_30___
push eax
push str._tr__td_width_20___
lea ecx, [esp + 0x30]
call fcn.00491cb0
push str._a_href_.._.._lib_
lea ecx, [esp + 0x14]
call fcn.005bc5aa
mov ecx, dword [esp + 0x34c]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc7fd
push str._samples_
lea ecx, [esp + 0x14]
call fcn.005bc7fd
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x224]
push edx
lea eax, [esp + 0x228]
push 0x64ac64
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.00491ce0
push str.__a_
lea ecx, [esp + 0x28]
call fcn.00491c60
lea edx, [esp + 0x14]
push 0x649dd4
push edx
call fcn.00502630
add esp, 8
lea eax, [esp + 0x14]
lea ecx, [esp + 0xe0]
push 0xffffffffffffffff
push eax
call fcn.00491e70
cmp eax, 0xffffffff
je 0x407a0f
xor edi, edi
lea ecx, [esp + 0x14]
push ecx
push edi
lea ecx, [esp + 0xe8]
call fcn.004923a0
mov edi, eax
cmp edi, 0xffffffff
je 0x407a0f
lea ecx, [esp + 0x14]
call fcn.005b8ca8
lea ecx, [esp + 0x14]
call fcn.005b8c5c
mov edx, dword [esp + 0x14]
mov eax, dword [edx - 8]
test eax, eax
je 0x407962
lea eax, [esp + 0x14]
lea ecx, [esp + 0x68]
push eax
lea edx, [esp + 0x70]
push ecx
push edx
call fcn.005bc650
mov eax, dword [eax]
mov byte [esp + 0x340], 0x29
push eax
call fcn.00502530
add esp, 4
lea ecx, [esp + 0x6c]
mov esi, eax
mov byte [esp + 0x340], 0x27
call fcn.005bc421
test esi, esi
je 0x407962
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push 0x64ac64
push eax
push ecx
push str._br___
lea ecx, [esp + 0x34]
call fcn.00491ce0
mov edx, dword [esp + 0x14]
push str.__a_
push edx
lea ecx, [esp + 0x2c]
call fcn.00491c90
jmp 0x407962
mov eax, dword [esp + 0x8c]
push str.nbsp__td___tr__r_n
push eax
push str.__td__td_width_50___
lea ecx, [esp + 0x30]
call fcn.00491cb0
mov esi, dword [esp + 0x48]
xor edi, edi
jmp 0x407a34
xor edi, edi
lea ecx, [esp + 0x1f8]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x407809
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [esp + 0x20], edi
je 0x407a66
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.00491c60
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
mov dword [esp + 0xe0], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0x14]
mov byte [esp + 0x340], 0x25
call fcn.005bc421
lea ecx, [esp + 0xac]
mov byte [esp + 0x340], 0x32
call fcn.005bc421
lea ecx, [esp + 0xa8]
mov byte [esp + 0x340], 0x31
call fcn.005bc421
lea ecx, [esp + 0xa4]
mov byte [esp + 0x340], 0x30
call fcn.005bc421
lea ecx, [esp + 0xa0]
mov byte [esp + 0x340], 0x2f
call fcn.005bc421
lea ecx, [esp + 0x9c]
mov byte [esp + 0x340], 0x2e
call fcn.005bc421
lea ecx, [esp + 0x98]
mov byte [esp + 0x340], 0x2d
call fcn.005bc421
lea ecx, [esp + 0x94]
mov byte [esp + 0x340], 0x2c
call fcn.005bc421
lea ecx, [esp + 0x90]
mov byte [esp + 0x340], 0x2b
call fcn.005bc421
lea ecx, [esp + 0x8c]
mov byte [esp + 0x340], 0x2a
call fcn.005bc421
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x16
call fcn.005bc421
lea edx, [esp + 0x3c]
push str.index.htm
lea eax, [esp + 0x44]
push edx
push eax
call fcn.005bc6b6
xor edi, edi
lea ecx, [esp + 0x24]
push edi
push 0xffffffffffffffff
push eax
mov byte [esp + 0x34c], 0x33
call fcn.00491fc0
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.005bc421
push str._table_border1_cols3_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x28]
mov dword [esp + 0x38], edi
call fcn.00491c60
mov eax, dword [ebp + 0x84]
mov esi, dword [ebp + 0x88]
test eax, eax
jle 0x407c80
test edi, edi
jne 0x407bd2
push str._tr__r_n_td_width_25____strong_
lea ecx, [esp + 0x28]
call fcn.00491c60
mov ecx, dword [esi]
push str.__font___td__td_width_25____font_color_000000__
push ecx
push str._tr__td_width_25____font_color_000000__
lea ecx, [esp + 0x30]
call fcn.00491cb0
lea edx, [esp + 0x10]
mov ecx, ebx
push edx
push esi
call fcn.00405a30
mov eax, dword [esp + 0x10]
push str.__font___td__r_n_td_width_50___
push eax
lea ecx, [esp + 0x2c]
call fcn.00491c90
mov ecx, dword [esi + 8]
push ecx
call fcn.00492700
add esp, 4
test eax, eax
jne 0x407c60
mov edx, dword [esi + 8]
lea ecx, [esp + 0x10]
push edx
call fcn.005bc5aa
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x407c52
lea eax, [esp + 0x10]
push eax
call fcn.00501770
add esp, 4
test eax, eax
jne 0x407c52
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.005bc839
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push edx
call fcn.00491c60
push str.__td___tr__r_n
lea ecx, [esp + 0x28]
call fcn.00491c60
mov eax, dword [ebp + 0x84]
add esi, 0x20
inc edi
cmp edi, eax
jl 0x407bc0
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.00491c60
lea eax, [esp + 0x3c]
push str.const.htm
lea ecx, [esp + 0x44]
push eax
push ecx
call fcn.005bc6b6
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0x34
call fcn.00491fc0
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.005bc421
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x68]
xor edi, edi
test eax, eax
jle 0x407d17
test byte [esi + 0xe], 0xc
jne 0x407d0c
lea ecx, [ebx + 0xc0]
call fcn.00460cd0
push eax
push esi
push ebp
call fcn.005019e0
add esp, 0xc
test eax, eax
je 0x407d0c
mov edx, dword [esp + 0x350]
lea eax, [esp + 0x3c]
push edx
push eax
push edi
push esi
push ebp
mov ecx, ebx
call fcn.00407ed0
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x407cd5
lea ecx, [esp + 0x68]
mov byte [esp + 0x340], 9
call fcn.005bc421
lea ecx, [esp + 0x60]
mov byte [esp + 0x340], 8
call fcn.005bc421
lea ecx, [esp + 0x1c]
mov byte [esp + 0x340], 7
call fcn.005bc421
lea ecx, [esp + 0x10]
mov byte [esp + 0x340], 6
call fcn.005bc421
mov esi, 0x5f7940
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
mov dword [esp + 0x4c], esi
call fcn.00491ab0
lea ecx, [esp + 0x24]
mov byte [esp + 0x340], 3
mov dword [esp + 0x24], esi
call fcn.00491ab0
lea ecx, [esp + 0x3c]
mov dword [esp + 0x340], 0xffffffff
call fcn.005bc421
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x334
ret 0xc