Function at 0x404cd0
Capabilities:
Contain obfuscated stackstrings
Create directory
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x539a4a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x328
push ebx
push ebp
push esi
mov dword [esp + 0x14], ecx
push edi
add ecx, 0x894
push str.help
lea eax, [esp + 0x88]
push ecx
push eax
call fcn.0051985f
push 0x57347c
lea ecx, [esp + 0x84]
xor esi, esi
push eax
push ecx
mov dword [esp + 0x34c], esi
call fcn.0051985f
mov edx, dword [esp + 0x34c]
mov edi, 1
push edx
push eax
lea eax, [esp + 0x44]
mov byte [esp + 0x348], 1
push eax
call fcn.0051985f
lea ecx, [esp + 0x80]
mov byte [esp + 0x340], 4
call fcn.00519616
lea ecx, [esp + 0x84]
mov byte [esp + 0x340], 3
call fcn.00519616
mov ecx, dword [esp + 0x3c]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x57347c
lea ecx, [esp + 0x40]
call fcn.005199a6
lea ecx, [esp + 0x24]
call fcn.00473110
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
call fcn.00473110
mov eax, dword [0x59697c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
push 0x574b24
lea ecx, [esp + 0x64]
mov byte [esp + 0x344], 8
call fcn.00519684
mov eax, dword [esp + 0x348]
mov byte [esp + 0x340], 9
mov dword [esp + 0x6c], edi
mov dword [esp + 0x40], edi
mov ecx, dword [eax + 0x54]
mov ebx, dword [eax + 0x58]
cmp ecx, esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x14], esi
jle 0x406104
mov edi, dword [esp + 0x18]
mov esi, eax
jmp 0x404e0b
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x348]
mov ebx, dword [esp + 0x44]
test byte [ebx + 0x14], 3
jne 0x4060e2
lea ebp, [edi + 0xc0]
mov ecx, ebp
call fcn.0044ffa0
push eax
push ebx
push esi
call fcn.004de250
add esp, 0xc
test eax, eax
je 0x4060e2
mov dword [esp + 0x34], 0
mov eax, dword [ebx]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x34]
call fcn.00473540
push str.__font___big_nbsp_
lea ecx, [esp + 0x28]
call fcn.004734c0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x404e87
test al, 0x80
je 0x404e74
push 0x574a5c
jmp 0x404e99
test ah, 0x80
je 0x404e80
push 0x574a4c
jmp 0x404e99
push 0x574a40
jmp 0x404e99
test eax, 0x400000
mov eax, 0x574a2c
jne 0x404e98
mov eax, 0x574a20
push eax
lea ecx, [esp + 0x28]
call fcn.004734c0
lea ecx, [esp + 0x10]
call fcn.005195a1
push 0
push 0
push 0
push ebx
lea edx, [esp + 0x20]
push esi
push edx
call fcn.004de2f0
mov eax, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x24]
push eax
push str.__strong_nbsp_nbsp_nbsp_
call fcn.004734f0
mov ecx, dword [esi + 0x24]
push str.__a___p__p_
push ecx
push 0x5749b8
lea ecx, [esp + 0x30]
call fcn.00473510
mov eax, dword [ebx + 0x14]
test eax, 0x10000
je 0x404efb
push 0x5749a4
jmp 0x404f07
test eax, 0x20000
je 0x404f10
push 0x57498c
lea ecx, [esp + 0x28]
call fcn.004734c0
mov edx, dword [ebx + 8]
push edx
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x404f71
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x1c]
push eax
call fcn.00519753
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x404f5a
lea ecx, [esp + 0x1c]
push ecx
call fcn.004de040
add esp, 4
test eax, eax
jne 0x404f5a
lea edx, [esp + 0x60]
lea ecx, [esp + 0x1c]
push edx
call fcn.005199e2
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push eax
call fcn.004734c0
lea ecx, [esp + 0x1c]
call fcn.005195a1
push str.__p__r_n
lea ecx, [esp + 0x28]
call fcn.004734c0
test dword [ebx + 0x14], 0x800044
je 0x405c56
push ebx
push esi
mov ecx, edi
call fcn.004655e0
test eax, eax
jle 0x40544c
push str._p__big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.004734c0
mov edi, dword [ebx + 0x28]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406f20
mov eax, dword [ebx + 0x24]
xor esi, esi
test eax, eax
jle 0x40509d
mov ecx, ebp
call fcn.0044ffa0
mov edx, dword [esp + 0x348]
push eax
push edi
push edx
call fcn.004de2b0
add esp, 0xc
test eax, eax
je 0x40508e
test byte [edi + 0xe], 0x10
jne 0x40508e
test byte [ebx + 0x14], 0x40
je 0x405018
cmp esi, 8
jge 0x405018
push esi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x405034
mov ecx, dword [esp + 0x14]
push esi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x574920
lea ecx, [esp + 0x14]
call fcn.00519753
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [edi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00406f50
mov eax, dword [ebx + 0x24]
add edi, 0x14
inc esi
cmp esi, eax
jl 0x404fc9
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406fc0
mov eax, dword [ebx + 0x24]
mov esi, dword [ebx + 0x28]
xor edi, edi
test eax, eax
mov dword [esp + 0x38], edi
jle 0x405440
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
test byte [ebx + 0x14], 0x40
je 0x4050dc
cmp edi, 8
jge 0x4050dc
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x40542d
test byte [esi + 0xe], 0x10
jne 0x40542d
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.0044ffa0
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004de2b0
add esp, 0xc
test eax, eax
je 0x40542d
mov dword [esp + 0x5c], 0
mov ecx, dword [ebx]
mov edx, dword [esi]
push ecx
push 0x574910
push edx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x5c]
call fcn.00473540
mov eax, dword [esi]
push str.__font___big_nbsp_
push eax
push str.___title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
lea ecx, [esp + 0x58]
call fcn.00473510
test byte [ebx + 0x14], 0x40
je 0x405161
cmp edi, 8
jge 0x405161
push 0x5748b8
lea ecx, [esp + 0x50]
call fcn.004734c0
jmp 0x405196
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push ecx
push str.dt_d.htm__
push edx
call ebp
mov eax, dword [ebx]
add esp, 0xc
lea ecx, [esp + 0xf4]
push str.__a_
push eax
push ecx
push 0x574878
lea ecx, [esp + 0x5c]
call fcn.00473540
lea ecx, [esp + 0x10]
call fcn.005195a1
mov edx, dword [esp + 0x348]
push esi
push 0
push 0
push 0
lea eax, [esp + 0x20]
push edx
push eax
call fcn.004de2f0
mov ecx, dword [esp + 0x28]
add esp, 0x18
push ecx
push 0x574854
lea ecx, [esp + 0x54]
call fcn.004734f0
mov edx, dword [esp + 0x350]
lea eax, [esp + 0x1c]
movsx ecx, word [esi + 0xc]
push edx
push 0
push 0
push eax
push ecx
call fcn.004ddbf0
mov ecx, dword [esp + 0x2c]
add esp, 4
push eax
push 0
call fcn.00464f20
mov edx, dword [esp + 0x1c]
push 0x574844
push edx
push str.__p__r_n_p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.00473510
test byte [esi + 0xe], 8
je 0x405224
push 0x574808
lea ecx, [esp + 0x50]
call fcn.004734c0
test byte [esi + 0xe], 4
je 0x405238
push 0x574800
lea ecx, [esp + 0x50]
call fcn.004734c0
mov eax, dword [esi + 8]
push eax
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x405290
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.00519753
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405282
lea edx, [esp + 0x10]
push edx
call fcn.004de040
add esp, 4
test eax, eax
jne 0x405282
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.005199e2
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
call fcn.004734c0
push str.__p__r_n
lea ecx, [esp + 0x50]
call fcn.004734c0
mov ax, word [esi + 0xc]
cmp ax, 0x3ee
je 0x4052be
cmp ax, 0x3e8
je 0x4052be
cmp ax, 0x3ef
je 0x4052be
cmp ax, 0x3f0
jne 0x4053a6
mov edx, dword [esi + 0x10]
push edx
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x4053a6
push 0x5747e4
lea ecx, [esp + 0x14]
call fcn.00519753
mov edi, dword [esi + 0x10]
xor ebp, ebp
cmp byte [edi], 0
je 0x405380
push str.nbsp_nbsp_nbsp___font_color_000000__
lea ecx, [esp + 0x14]
call fcn.005199a6
cmp word [esi + 0xc], 0x3e8
je 0x405331
mov eax, ebp
inc ebp
push eax
lea eax, [esp + 0xf8]
push 0x5747b4
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
jmp 0x405346
push edi
lea ecx, [esp + 0x14]
call fcn.005199a6
push edi
call fcn.00474090
add esp, 4
add edi, eax
push 0x574794
lea ecx, [esp + 0x14]
call fcn.005199a6
push edi
lea ecx, [esp + 0x14]
call fcn.005199a6
push str.__font__br__r_n
lea ecx, [esp + 0x14]
call fcn.005199a6
push edi
call fcn.00474090
add edi, eax
add esp, 4
cmp byte [edi], 0
jne 0x4052ee
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.004734c0
push str.__p_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edi, dword [esp + 0x38]
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
push str._r_n_p_
lea ecx, [esp + 0x50]
call fcn.004734c0
test byte [ebx + 0x14], 0x40
je 0x4053d4
cmp edi, 8
jge 0x4053d4
push edi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call ebp
add esp, 0xc
jmp 0x4053ec
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call ebp
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x80]
push ecx
push edx
call fcn.0051985f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xa
call fcn.00473820
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 9
call fcn.00519616
mov eax, dword [ebx + 0x24]
add esi, 0x14
inc edi
cmp edi, eax
mov dword [esp + 0x38], edi
jl 0x4050c5
mov edi, dword [esp + 0x18]
mov dword [esp + 0x6c], 0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x40554f
push 0x5746e0
lea ecx, [esp + 0x28]
call fcn.004734c0
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.00406f20
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x405541
mov ecx, dword [ebx + 0x10]
mov ebp, dword [esp + 0x348]
mov eax, dword [ecx + edi*4]
lea edx, [eax + eax*8]
mov eax, dword [ebp + 0x68]
lea esi, [eax + edx*4]
mov al, byte [eax + edx*4 + 0xe]
test al, 0xc
jne 0x405535
mov ecx, dword [esp + 0x18]
add ecx, 0xc0
call fcn.0044ffa0
push eax
push esi
push ebp
call fcn.004de2b0
add esp, 0xc
test eax, eax
je 0x405535
mov edx, dword [ebx + 0x10]
lea ecx, [esp + 0xf4]
mov eax, dword [edx + edi*4]
push eax
push str.cmd_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.00406f50
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x40547e
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
call fcn.00406fc0
mov eax, dword [ebx + 0x1c]
test eax, eax
jle 0x405667
push 0x574690
lea ecx, [esp + 0x28]
call fcn.004734c0
mov esi, dword [ebx + 0x20]
test esi, esi
je 0x40557f
test dword [esi + 8], 0x80000000
je 0x40557f
mov ebp, 1
jmp 0x405581
xor ebp, ebp
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406f20
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x405659
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
test byte [esi + 8], 1
jne 0x40564b
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.0044ffa0
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004de280
add esp, 0xc
test eax, eax
je 0x40564b
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.e_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00406f50
mov eax, dword [ebx + 0x1c]
add esi, ebp
inc edi
cmp edi, eax
jl 0x4055a6
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406fc0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x40573f
test ah, 0x80
jne 0x40573f
push str._p__big__strong_
lea ecx, [esp + 0x28]
call fcn.004734c0
mov ebp, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov ecx, ebp
call fcn.00406f20
mov eax, dword [0x594090]
xor esi, esi
test eax, eax
jle 0x405733
mov edi, 0x593fa0
test byte [edi + 8], 1
jne 0x405722
push esi
lea eax, [esp + 0xf8]
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edx, dword [edi]
lea ecx, [esp + 0x10]
push edx
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebp
call fcn.00406f50
mov eax, dword [0x594090]
inc esi
add edi, 0x14
cmp esi, eax
jl 0x4056ad
lea edx, [esp + 0x24]
mov ecx, ebp
push edx
call fcn.00406fc0
mov edx, dword [esp + 0x40]
xor ecx, ecx
xor eax, eax
cmp edx, 1
mov esi, 0x593fa0
mov dword [esp + 0x48], ecx
mov dword [esp + 0x38], eax
jne 0x405764
mov eax, dword [0x594090]
neg eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx + 0x1c]
cmp eax, ecx
jge 0x406074
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x4057a2
mov eax, dword [esp + 0x44]
mov esi, dword [eax + 0x20]
test esi, esi
je 0x40579a
test dword [esi + 8], 0x80000000
je 0x40579a
mov ebx, 1
mov dword [esp + 0x48], ebx
jmp 0x4057a6
xor ebx, ebx
mov dword [esp + 0x48], ebx
jmp 0x4057a6
mov ebx, dword [esp + 0x48]
test byte [esi + 8], 1
jne 0x405c2f
mov ebp, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
call fcn.0044ffa0
mov edi, dword [esp + 0x348]
push eax
push esi
push edi
call fcn.004de280
add esp, 0xc
test eax, eax
je 0x405c2f
mov dword [esp + 0x5c], 0
mov ecx, dword [esi]
push ecx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x54]
call fcn.004734f0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x405814
mov edx, dword [esp + 0x44]
push 0x574644
lea ecx, [esp + 0x50]
mov eax, dword [edx]
push eax
push 0x574910
call fcn.00473510
mov ecx, dword [esi]
push ecx
push str.__title__r_n__head__r_n_body__r_n_p__big__strong__font_color_000000__
lea ecx, [esp + 0x54]
call fcn.004734f0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x40586c
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xf4]
push edx
push str.dt_d.htm__
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esp + 0x50]
add esp, 0xc
lea eax, [esp + 0xf4]
mov edx, dword [ecx]
push str.__a__r_n
push edx
push eax
push 0x5745b0
lea ecx, [esp + 0x5c]
call fcn.00473540
jmp 0x40587a
push 0x574584
lea ecx, [esp + 0x50]
call fcn.004734c0
lea ecx, [esp + 0x10]
call fcn.005195a1
push 0
push esi
push 0
push 0
lea ecx, [esp + 0x20]
push edi
push ecx
call fcn.004de2f0
mov edx, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x4c]
push str.__p__r_n
push edx
push 0x574854
call fcn.00473510
mov eax, dword [esi + 4]
push eax
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x40591b
mov ecx, dword [esi + 4]
push ecx
lea ecx, [esp + 0x20]
call fcn.00519753
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x4058fa
lea edx, [esp + 0x1c]
push edx
call fcn.004de040
add esp, 4
test eax, eax
jne 0x4058fa
lea eax, [esp + 0x60]
lea ecx, [esp + 0x1c]
push eax
call fcn.005199e2
mov ecx, dword [esp + 0x1c]
push str.__p__r_n
push ecx
push str._p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.00473510
lea ecx, [esp + 0x1c]
call fcn.005195a1
push str._p__em_
lea ecx, [esp + 0x50]
call fcn.004734c0
test ebx, ebx
jne 0x405939
mov eax, dword [esi + 8]
and al, 0x18
neg al
sbb eax, eax
inc eax
jmp 0x405943
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
sete al
test eax, eax
je 0x40594e
push 0x574530
jmp 0x40598a
test ebx, ebx
jne 0x405967
mov eax, dword [esi + 8]
and al, 8
neg al
sbb eax, eax
and eax, 0x2ff
add eax, 0x80000002
jmp 0x40596a
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x350]
lea ecx, [esp + 0x1c]
push edx
push 0
push 0
push ecx
push eax
push 0
mov ecx, ebp
call fcn.00464f20
mov edx, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x50]
call fcn.004734c0
push str.__font_nbsp____em_
lea ecx, [esp + 0x50]
call fcn.004734c0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x4059b2
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push ecx
jmp 0x4059b7
push 0x574a40
lea ecx, [esp + 0x50]
call fcn.004734c0
mov edx, dword [esi]
push 0x574518
push edx
push str.__em__
lea ecx, [esp + 0x58]
call fcn.00473510
mov eax, dword [esi + 0xc]
mov ebx, dword [esi + 0x10]
xor ebp, ebp
test eax, eax
jle 0x405a26
mov edi, dword [esp + 0x48]
neg edi
sbb edi, edi
and edi, 4
add edi, 0xc
mov eax, dword [ebx]
push 0x574508
push eax
push 0x5744f0
lea ecx, [esp + 0x58]
call fcn.00473510
mov ecx, dword [esi + 0xc]
dec ecx
cmp ebp, ecx
je 0x405a1c
push 0x5744c8
lea ecx, [esp + 0x50]
call fcn.004734c0
mov eax, dword [esi + 0xc]
add ebx, edi
inc ebp
cmp ebp, eax
jl 0x4059f0
push 0x5744a0
lea ecx, [esp + 0x50]
call fcn.004734c0
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405a49
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x50]
call fcn.004734c0
mov eax, dword [esi + 0xc]
mov edi, dword [esi + 0x10]
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x20], 0
test eax, eax
jle 0x405b7b
mov ebx, ebp
neg ebx
sbb ebx, ebx
and ebx, 4
add ebx, 0xc
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x405a85
push str._tr__r_n_td_width_30___valign_top___strong_
lea ecx, [esp + 0x50]
call fcn.004734c0
mov edx, dword [edi]
push str.__font___td__r_n_td_width_70___valign_top__
push edx
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x58]
call fcn.00473510
test ebp, ebp
jne 0x405ab4
mov eax, dword [edi + 8]
and al, 1
neg al
sbb eax, eax
and eax, 0xfffffd01
add eax, 0x80000301
jmp 0x405ab7
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push 0
push 0
push edx
push eax
push 0
call fcn.00464f20
mov eax, dword [esp + 0x1c]
push 0x574314
push eax
lea ecx, [esp + 0x54]
call fcn.004734f0
test ebp, ebp
je 0x405aff
test byte [edi + 8], 2
je 0x405aff
push 0x57430c
lea ecx, [esp + 0x50]
call fcn.004734c0
mov ecx, dword [edi + 4]
push ecx
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x405b57
mov edx, dword [edi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.00519753
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405b49
lea eax, [esp + 0x10]
push eax
call fcn.004de040
add esp, 4
test eax, eax
jne 0x405b49
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199e2
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.004734c0
push str.__td__r_n__tr__r_n
lea ecx, [esp + 0x50]
call fcn.004734c0
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0xc]
add edi, ebx
inc eax
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x405a6f
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405b90
push str.__table__r_n
lea ecx, [esp + 0x50]
call fcn.004734c0
push 0x574264
lea ecx, [esp + 0x50]
call fcn.004734c0
mov edi, dword [esp + 0x38]
test edi, edi
jl 0x405bc4
mov eax, dword [esp + 0x14]
push edi
push eax
lea ecx, [esp + 0xfc]
push str.e_d__d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x405be3
mov edx, dword [0x594090]
lea eax, [esp + 0xf4]
add edx, edi
push edx
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x7c]
push edx
push eax
call fcn.0051985f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xb
call fcn.00473820
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 9
call fcn.00519616
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
add esi, ebp
jmp 0x405c3f
neg ebx
mov edi, dword [esp + 0x38]
sbb ebx, ebx
and ebx, 4
add ebx, 0x14
add esi, ebx
mov ecx, dword [esp + 0x44]
inc edi
mov dword [esp + 0x38], edi
cmp edi, dword [ecx + 0x1c]
jl 0x405773
jmp 0x406074
mov ecx, dword [ebx + 0x30]
mov esi, dword [ebx + 0x34]
xor eax, eax
test ecx, ecx
jle 0x405c72
lea edx, [esi + 0x14]
test byte [edx], 2
je 0x405c72
inc eax
add edx, 0x1c
cmp eax, ecx
jl 0x405c65
cmp eax, ecx
jge 0x405f61
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5___a_name_
lea ecx, [esp + 0x28]
call fcn.004734c0
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x38], 0
test eax, eax
jle 0x405f53
mov ebp, dword [esp + 0x350]
mov edi, 0x400000
test byte [esi + 0x14], 2
jne 0x405f3c
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x28]
call fcn.004734c0
mov edx, dword [esi + 8]
lea ecx, [esp + 0x10]
push edx
call fcn.00519753
test dword [ebx + 0x14], edi
jne 0x405d1d
mov eax, dword [esi + 4]
push eax
call fcn.004c9830
add esp, 4
cmp eax, 1
jne 0x405d1d
push 0x5998f0
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edx, dword [esi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.004c9570
add esp, 8
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.005199e2
push 0x5998f4
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_70___valign_top__
push ecx
lea ecx, [esp + 0x2c]
call fcn.004734f0
lea ecx, [esp + 0x10]
call fcn.005195a1
test dword [ebx + 0x14], edi
jne 0x405d69
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push ebp
push 0
lea edx, [esp + 0x18]
push 0
push edx
push eax
push 0
call fcn.00464f20
push 0x574314
lea ecx, [esp + 0x14]
call fcn.005199a6
test dword [ebx + 0x14], edi
je 0x405d7f
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0xf4]
push ecx
push 0x574138
push edx
jmp 0x405e5c
test byte [esi + 0x14], 1
je 0x405edf
mov eax, dword [esi]
cmp eax, 0x80000301
ja 0x405e32
je 0x405e4b
cmp eax, 0x80000101
ja 0x405e13
je 0x405dfe
cmp eax, 0x80000002
je 0x405de9
cmp eax, 0x80000004
jne 0x405edf
push 0x573894
lea ecx, [esp + 0x20]
call fcn.00519753
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x1c]
push eax
call fcn.005199a6
push 0x573880
lea ecx, [esp + 0x20]
call fcn.005199a6
mov eax, dword [esp + 0x1c]
jmp 0x405e6c
mov eax, dword [esi + 0x18]
test eax, eax
je 0x405df7
mov eax, 0x57387c
jmp 0x405e6c
mov eax, 0x573878
jmp 0x405e6c
xor ecx, ecx
lea edx, [esp + 0xf4]
mov cl, byte [esi + 0x18]
push ecx
push 0x574130
push edx
jmp 0x405e5c
cmp eax, 0x80000201
jne 0x405edf
movsx eax, word [esi + 0x18]
push eax
lea ecx, [esp + 0xf8]
push 0x574138
push ecx
jmp 0x405e5c
cmp eax, 0x80000401
je 0x405e4b
cmp eax, 0x80000501
je 0x405e4b
cmp eax, 0x80000601
jne 0x405edf
mov edx, dword [esi + 0x18]
lea eax, [esp + 0xf4]
push edx
push 0x574138
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
test eax, eax
je 0x405edf
mov ecx, dword [ebx + 0x14]
push eax
test edi, ecx
je 0x405eaa
lea ecx, [esp + 0x78]
push 0x574120
push ecx
call fcn.004dfd70
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xc
call fcn.005199e2
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x74]
jmp 0x405eda
lea edx, [esp + 0x74]
push 0x574110
push edx
call fcn.004dfd70
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xd
call fcn.005199e2
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x70]
call fcn.00519616
mov eax, dword [esi + 0x10]
push eax
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x405f29
mov ecx, dword [esi + 0x10]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405f29
lea edx, [esp + 0x10]
push edx
call fcn.004de040
add esp, 4
test eax, eax
jne 0x405f29
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.005199e2
mov ecx, dword [esp + 0x10]
push str.__td__r_n__tr__r_n
push ecx
lea ecx, [esp + 0x2c]
call fcn.004734f0
mov eax, dword [esp + 0x38]
mov ecx, dword [ebx + 0x30]
inc eax
add esi, 0x1c
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x405ca7
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.004734c0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x406066
push 0x5746e0
lea ecx, [esp + 0x28]
call fcn.004734c0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00406f20
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x406058
mov ebp, dword [esp + 0x348]
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp + 0x68]
mov eax, dword [eax + edi*4]
lea ecx, [eax + eax*8]
mov al, byte [edx + ecx*4 + 0xe]
test al, 0xc
lea esi, [edx + ecx*4]
jne 0x40604c
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0xc0]
call fcn.0044ffa0
push eax
push esi
push ebp
call fcn.004de2b0
add esp, 0xc
test eax, eax
je 0x40604c
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0xf4]
mov edx, dword [ecx + edi*4]
push edx
push str.cmd_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edx, dword [esi]
lea ecx, [esp + 0x10]
push edx
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.00406f50
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x405f9c
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00406fc0
push 0x5740c0
lea ecx, [esp + 0x28]
call fcn.004734c0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.004734c0
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xf4]
push eax
push str.dt_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [esp + 0xf4]
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x64]
push edx
push eax
push ecx
call fcn.0051985f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xe
call fcn.00473820
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.00519616
add dword [esp + 0x44], 0x38
jmp 0x4060e9
add ebx, 0x38
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0x348]
mov eax, dword [esp + 0x14]
inc eax
mov ecx, dword [edx + 0x54]
mov dword [esp + 0x14], eax
cmp eax, ecx
jl 0x404dfc
mov ebp, dword [esp + 0x348]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x14], 0
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x4062c1
mov ecx, dword [esp + 0x20]
xor edi, edi
mov dword [esp + 0x34], edi
lea eax, [ecx + 4]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
call fcn.00473540
mov edx, dword [ebp + 0x24]
push str.__a___p_
push edx
push str.__font_nbsp_font_color_000000__
lea ecx, [esp + 0x30]
call fcn.00473510
mov esi, dword [ebp + 0x68]
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00406f20
mov eax, dword [ebp + 0x64]
test eax, eax
jle 0x40622b
test byte [esi + 0xe], 0xc
jne 0x40621c
lea ecx, [ebx + 0xc0]
call fcn.0044ffa0
push eax
push esi
push ebp
call fcn.004de2b0
add esp, 0xc
test eax, eax
je 0x40621c
movsx ecx, word [esi + 0xc]
mov eax, dword [esp + 0x14]
dec ecx
cmp ecx, eax
jne 0x40621c
push edi
lea edx, [esp + 0xf8]
push str.cmd_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00406f50
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x40617c
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00406fc0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.004734c0
mov esi, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push esi
push str.ct_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x64]
push eax
push ecx
push edx
call fcn.0051985f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xf
call fcn.00473820
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.00519616
mov edi, dword [esp + 0x20]
push edi
call fcn.00474090
add esp, 4
add edi, eax
mov eax, dword [ebp + 0x5c]
inc esi
cmp esi, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], esi
jl 0x406129
mov eax, dword [ebp + 0x24]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
mov dword [esp + 0x44], 0
call fcn.00473540
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push eax
push ecx
lea edx, [esp + 0xfc]
push 0x573fcc
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x24]
push str.__font___big___big___strong_nbsp_nbsp_nbsp__a_href_.._index.htm__
push eax
call fcn.004734f0
mov ecx, dword [ebp + 0x2c]
push ecx
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x406372
mov edx, dword [ebp + 0x2c]
lea ecx, [esp + 0x10]
push edx
call fcn.00519753
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40635f
lea eax, [esp + 0x10]
push eax
call fcn.004de040
add esp, 4
test eax, eax
jne 0x40635f
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199e2
mov edx, dword [esp + 0x10]
push str.__p__p_
push edx
lea ecx, [esp + 0x2c]
call fcn.004734f0
lea ecx, [esp + 0x10]
call fcn.005195a1
push 0
push 0
push 0
push 0
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.004de2f0
mov ecx, dword [esp + 0x28]
add esp, 0x18
push str.__p__p_
push ecx
push 0x573f58
lea ecx, [esp + 0x30]
call fcn.00473510
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x406471
push str._big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.004734c0
mov esi, dword [ebp + 0x60]
lea edx, [esp + 0x24]
push edx
mov ecx, ebx
call fcn.00406f20
mov eax, dword [ebp + 0x5c]
xor edi, edi
test eax, eax
jle 0x406465
push edi
lea eax, [esp + 0xf8]
push str.ct_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
lea edx, [esi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebx
call fcn.00406f50
push esi
call fcn.00474090
add esp, 4
add esi, eax
mov eax, dword [ebp + 0x5c]
inc edi
cmp edi, eax
jl 0x4063de
lea edx, [esp + 0x24]
mov ecx, ebx
push edx
call fcn.00406fc0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x406572
mov eax, dword [esi + 0x14]
test al, 3
jne 0x40654f
test al, 0x40
je 0x40654f
lea ecx, [ebx + 0xc0]
call fcn.0044ffa0
push eax
push esi
push ebp
call fcn.004de250
add esp, 0xc
test eax, eax
je 0x40654f
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4064d8
push 0x573ebc
lea ecx, [esp + 0x28]
call fcn.004734c0
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00406f20
push edi
lea ecx, [esp + 0xf8]
push str.dt_d.htm
push ecx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, ebx
call fcn.00406f50
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406485
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406572
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00406fc0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x40666a
test byte [esi + 0x14], 0x43
jne 0x406647
lea ecx, [ebx + 0xc0]
call fcn.0044ffa0
push eax
push esi
push ebp
call fcn.004de250
add esp, 0xc
test eax, eax
je 0x406647
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4065d0
push 0x573e6c
lea ecx, [esp + 0x28]
call fcn.004734c0
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00406f20
push edi
lea edx, [esp + 0xf8]
push str.dt_d.htm
push edx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x574920
call fcn.00519753
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005199a6
push 0x57491c
lea ecx, [esp + 0x14]
call fcn.005199a6
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005199a6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00406f50
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406586
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40666a
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00406fc0
mov eax, dword [ebp + 0x84]
test eax, eax
jle 0x406682
push str._p__big__a_href_const.htm___strong_
lea ecx, [esp + 0x28]
call fcn.004734c0
mov edx, dword [ebp + 0x74]
push edx
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x4066fb
push str._p__big__strong__br___
lea ecx, [esp + 0x28]
call fcn.004734c0
mov esi, dword [ebp + 0x74]
mov al, byte [esi]
test al, al
je 0x4066ed
cmp al, 0x40
jne 0x4066ae
inc esi
push str.__td__td_width_78___
push esi
push str._tr__td_width_22___
lea ecx, [esp + 0x30]
call fcn.00473510
push esi
call fcn.00474090
add esp, 4
add esi, eax
lea ecx, [esp + 0x24]
push str.nbsp__td___tr__r_n
push esi
call fcn.004734f0
push esi
call fcn.00474090
add esi, eax
add esp, 4
mov al, byte [esi]
test al, al
jne 0x4066a9
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.004734c0
push 0x573c74
lea eax, [esp + 0x80]
push 0x59a2dc
push eax
call fcn.0051985f
push 0x57347c
lea ecx, [esp + 0x7c]
push eax
push ecx
mov byte [esp + 0x34c], 0x10
call fcn.0051985f
mov edx, dword [esp + 0x34c]
mov byte [esp + 0x340], 0x11
push edx
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.0051985f
push 0x57347c
lea ecx, [esp + 0x74]
push eax
push ecx
mov byte [esp + 0x34c], 0x12
call fcn.0051985f
push str.samples
lea edx, [esp + 0x68]
push eax
push edx
mov byte [esp + 0x34c], 0x13
call fcn.0051985f
push 0x57347c
push eax
lea eax, [esp + 0x70]
mov byte [esp + 0x348], 0x14
push eax
call fcn.0051985f
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 0x1a
call fcn.00519616
lea ecx, [esp + 0x70]
mov byte [esp + 0x340], 0x19
call fcn.00519616
lea ecx, [esp + 0x74]
mov byte [esp + 0x340], 0x18
call fcn.00519616
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 0x17
call fcn.00519616
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 0x16
call fcn.00519616
lea ecx, [esp + 0x68]
push 0x573c68
lea edx, [esp + 0x44]
xor edi, edi
push ecx
push edx
mov dword [esp + 0x2c], edi
call fcn.0051985f
mov eax, dword [eax]
lea ecx, [esp + 0x1f8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], esi
call fcn.00519616
cmp esi, 0xffffffff
je 0x406cb6
mov eax, dword [0x59697c]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x24
call fcn.005195a1
lea ecx, [esp + 0x8c]
call fcn.005195a1
lea ecx, [esp + 0x90]
call fcn.005195a1
lea ecx, [esp + 0x94]
call fcn.005195a1
lea ecx, [esp + 0x98]
call fcn.005195a1
lea ecx, [esp + 0x9c]
call fcn.005195a1
lea ecx, [esp + 0xa0]
call fcn.005195a1
lea ecx, [esp + 0xa4]
call fcn.005195a1
lea ecx, [esp + 0xa8]
call fcn.005195a1
lea ecx, [esp + 0xac]
call fcn.005195a1
lea edx, [esp + 0xc4]
push 0x1c
push edx
mov dword [esp + 0xb8], 1
mov dword [esp + 0xbc], edi
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc8], edi
call fcn.00474040
add esp, 8
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x340], 0x25
call fcn.00447030
mov eax, dword [0x59697c]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
call fcn.00473110
mov byte [esp + 0x340], 0x27
jmp 0x406966
xor edi, edi
lea ecx, [esp + 0x224]
lea edx, [esp + 0x68]
push ecx
lea eax, [esp + 0x44]
push edx
push eax
call fcn.0051985f
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x344], 0x28
call fcn.00519703
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x27
call fcn.00519616
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1bc]
lea edx, [esp + 0x88]
push ecx
push edx
push eax
call fcn.0044b2c0
add esp, 0xc
cmp eax, 1
jne 0x406b8a
mov ecx, dword [esp + 0x88]
cmp dword [ecx - 8], edi
je 0x406b8a
lea ecx, [ebx + 0xc0]
call fcn.0044ffa0
lea ecx, [esp + 0x1bc]
mov edi, eax
call fcn.00446ff0
test eax, edi
je 0x406b8a
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x406a15
push 0x573ae0
lea ecx, [esp + 0x28]
call fcn.004734c0
mov dword [esp + 0x20], 1
mov edx, dword [esp + 0x88]
push str.__td__td_width_30___
push edx
push str._tr__td_width_20___
lea ecx, [esp + 0x30]
call fcn.00473510
push str._a_href_.._.._lib_
lea ecx, [esp + 0x14]
call fcn.00519753
mov eax, dword [esp + 0x34c]
lea ecx, [esp + 0x10]
push eax
call fcn.005199a6
push str._samples_
lea ecx, [esp + 0x14]
call fcn.005199a6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x224]
push ecx
lea edx, [esp + 0x228]
push 0x57491c
push edx
push eax
lea ecx, [esp + 0x34]
call fcn.00473540
push str.__a_
lea ecx, [esp + 0x28]
call fcn.004734c0
lea ecx, [esp + 0x14]
push 0x573a8c
push ecx
call fcn.004de740
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0xe0]
push 0xffffffffffffffff
push edx
call fcn.004736d0
cmp eax, 0xffffffff
je 0x406b6b
xor edi, edi
lea eax, [esp + 0x14]
lea ecx, [esp + 0xe0]
push eax
push edi
call fcn.00473c00
mov edi, eax
cmp edi, 0xffffffff
je 0x406b6b
lea ecx, [esp + 0x14]
call fcn.00516072
lea ecx, [esp + 0x14]
call fcn.00516026
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
test eax, eax
je 0x406abe
lea edx, [esp + 0x14]
lea eax, [esp + 0x68]
push edx
lea ecx, [esp + 0x70]
push eax
push ecx
call fcn.005197f9
mov eax, dword [eax]
mov byte [esp + 0x340], 0x29
push eax
call fcn.004de640
add esp, 4
lea ecx, [esp + 0x6c]
mov esi, eax
mov byte [esp + 0x340], 0x27
call fcn.00519616
test esi, esi
je 0x406abe
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0x57491c
push edx
push eax
push str._br___
lea ecx, [esp + 0x34]
call fcn.00473540
mov ecx, dword [esp + 0x14]
push str.__a_
push ecx
lea ecx, [esp + 0x2c]
call fcn.004734f0
jmp 0x406abe
mov edx, dword [esp + 0x8c]
push str.nbsp__td___tr__r_n
push edx
push str.__td__td_width_50___
lea ecx, [esp + 0x30]
call fcn.00473510
mov esi, dword [esp + 0x48]
lea eax, [esp + 0x1f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x406964
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406bbe
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.004734c0
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
mov dword [esp + 0xe0], 0x54d7d0
call fcn.00473310
lea ecx, [esp + 0x14]
mov byte [esp + 0x340], 0x25
call fcn.00519616
lea ecx, [esp + 0xac]
mov byte [esp + 0x340], 0x32
call fcn.00519616
lea ecx, [esp + 0xa8]
mov byte [esp + 0x340], 0x31
call fcn.00519616
lea ecx, [esp + 0xa4]
mov byte [esp + 0x340], 0x30
call fcn.00519616
lea ecx, [esp + 0xa0]
mov byte [esp + 0x340], 0x2f
call fcn.00519616
lea ecx, [esp + 0x9c]
mov byte [esp + 0x340], 0x2e
call fcn.00519616
lea ecx, [esp + 0x98]
mov byte [esp + 0x340], 0x2d
call fcn.00519616
lea ecx, [esp + 0x94]
mov byte [esp + 0x340], 0x2c
call fcn.00519616
lea ecx, [esp + 0x90]
mov byte [esp + 0x340], 0x2b
call fcn.00519616
lea ecx, [esp + 0x8c]
mov byte [esp + 0x340], 0x2a
call fcn.00519616
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x16
call fcn.00519616
lea ecx, [esp + 0x3c]
push str.index.htm
lea edx, [esp + 0x44]
push ecx
push edx
call fcn.0051985f
xor edi, edi
lea ecx, [esp + 0x24]
push edi
push 0xffffffffffffffff
push eax
mov byte [esp + 0x34c], 0x33
call fcn.00473820
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.00519616
push str._table_border1_cols3_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x28]
mov dword [esp + 0x38], edi
call fcn.004734c0
mov eax, dword [ebp + 0x84]
mov esi, dword [ebp + 0x88]
test eax, eax
jle 0x406dd8
test edi, edi
jne 0x406d2a
push str._tr__r_n_td_width_25____strong_
lea ecx, [esp + 0x28]
call fcn.004734c0
mov eax, dword [esi]
push str.__font___td__td_width_25____font_color_000000__
push eax
push str._tr__td_width_25____font_color_000000__
lea ecx, [esp + 0x30]
call fcn.00473510
lea ecx, [esp + 0x10]
push ecx
push esi
mov ecx, ebx
call fcn.00404ba0
mov edx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_50___
push edx
lea ecx, [esp + 0x2c]
call fcn.004734f0
mov eax, dword [esi + 8]
push eax
call fcn.00473f60
add esp, 4
test eax, eax
jne 0x406db8
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.00519753
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406daa
lea edx, [esp + 0x10]
push edx
call fcn.004de040
add esp, 4
test eax, eax
jne 0x406daa
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.005199e2
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004734c0
push str.__td___tr__r_n
lea ecx, [esp + 0x28]
call fcn.004734c0
mov eax, dword [ebp + 0x84]
add esi, 0x20
inc edi
cmp edi, eax
jl 0x406d18
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.004734c0
lea edx, [esp + 0x3c]
push str.const.htm
lea eax, [esp + 0x44]
push edx
push eax
call fcn.0051985f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0x34
call fcn.00473820
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.00519616
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x68]
xor edi, edi
test eax, eax
jle 0x406e6f
test byte [esi + 0xe], 0xc
jne 0x406e64
lea ecx, [ebx + 0xc0]
call fcn.0044ffa0
push eax
push esi
push ebp
call fcn.004de2b0
add esp, 0xc
test eax, eax
je 0x406e64
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x3c]
push ecx
push edx
push edi
push esi
push ebp
mov ecx, ebx
call fcn.00407030
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x406e2d
lea ecx, [esp + 0x68]
mov byte [esp + 0x340], 9
call fcn.00519616
lea ecx, [esp + 0x60]
mov byte [esp + 0x340], 8
call fcn.00519616
lea ecx, [esp + 0x1c]
mov byte [esp + 0x340], 7
call fcn.00519616
lea ecx, [esp + 0x10]
mov byte [esp + 0x340], 6
call fcn.00519616
mov esi, 0x54d7d0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
mov dword [esp + 0x4c], esi
call fcn.00473310
lea ecx, [esp + 0x24]
mov byte [esp + 0x340], 3
mov dword [esp + 0x24], esi
call fcn.00473310
lea ecx, [esp + 0x3c]
mov dword [esp + 0x340], 0xffffffff
call fcn.00519616
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x334
ret 0xc