Function at 0x404100
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4204d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3cc
push ebx
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CStdioFile::CStdioFile
lea eax, [ebp - 0x34]
mov ecx, 0x42ec40
push eax
mov byte [ebp - 4], 2
call fcn.00402260
push str.list.html
lea ecx, [ebp - 0x30]
push eax
push ecx
mov byte [ebp - 4], 3
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
push edi
push 0x1001
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CStdioFile::Open
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
push str.__DOCTYPE_HTML_PUBLIC_____W3C__DTD_HTML_4.01_Transitional__EN___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._html__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.___head__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._t_title___title__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._meta_http_equiv_Pragma__content_no_cache___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._meta_http_equiv_no_cache___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._meta_http_equiv_Expires__content__1___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._meta_http_equiv_Cache_Control__content_no_cache___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.____head__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._style__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.body__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push 0x42ce48
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._tborder:0px___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._toverflow_x:hidden__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._toverflow_y:hidden__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push 0x42ce04
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.atext_decoration:none__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.a:link_color:1A66FF_n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.a:visitedcolor:1A66FF_n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.a:hover_color:1A66FF_text_decoration:underline_n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.a:active_color:1A66FF_n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__style__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._body_leftMargin_0__topMargin_0__marginwidth_0__marginheight_0__background_images_rightbg.bmp___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._script_type_text_javascript____n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.function_kp_f_sbh_type_path_fpsl_cch_kpjh_bj_dkh__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push 0x42cc94
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
add esi, 0xec
lea edx, [ebp - 0x34]
push esi
push str._twindow.location_kp__type___sbh___path___fpsl___cch___kpjh___bj___dkh__
push edx
call sub.MFC42.DLL_operator_1
push str.____n
push eax
lea eax, [ebp - 0x30]
mov bl, 5
push eax
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
push str._twindow.location____n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push 0x42ce04
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.function_search_f___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push 0x42cc94
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._twindow.location_search__key.value_____n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._twindow.location____n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push 0x42ce04
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__script__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._table_valign_top__border_0__cellSpacing_0__cellPadding_0__width_100_____n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._tr_height_50___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._t_td_width_180__nbsp_nbsp__span_style_font_size:10pt_color:19A4EB___b_
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp + 8]
lea edx, [ebp - 0x34]
push ecx
push str._t_td__img_src_images_searchbg.bmp___input_type_text__id_key__name_key__value_
push edx
call sub.MFC42.DLL_operator_1
push str.__style_position:absolute_left:220_top:17_width:260_height:20_border:0px_font_size:10pt____td__n
push eax
lea eax, [ebp - 0x30]
mov ebx, 7
push eax
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 8
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
push str._t_td_nbsp_nbsp__a_href_javascript:search_f_____img_border0_align_absmiddle__src_images_search.bmp____a___td__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._t_td_width_300____td__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__tr__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._tr_height_3___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._t_td_width_100___colspan_4__background_images_line2.bmp____td__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__tr__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__table__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._div_style_overflow_x:hidden_overflow_y:auto_position:absolute_height:355_width:100_____n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._t_table_valign_top__align_center__border_0__cellSpacing_0__cellPadding_0__width_100___style_font_size:10pt___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
mov dword [ebp - 0x3c], edi
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea ecx, [ebp - 0x38]
push ecx
push 0x42c4f8
push ebx
push edi
push 0x42c4e8
mov byte [ebp - 4], 9
call esi
cmp eax, edi
jl 0x4044d1
mov edx, dword [ebp - 0x38]
push edx
call dword [sym.imp.ole32.dll_OleRun]
cmp eax, edi
jl 0x4044c8
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x3c]
push edx
push 0x42c4d8
mov ecx, dword [eax]
push eax
call dword [ecx]
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x42ec3c
call fcn.00406150
push ecx
mov byte [ebp - 4], 0xa
mov ecx, esp
mov dword [ebp - 0x88], esp
push 0x42ec3c
call fcn.00406150
lea edx, [ebp - 0x40]
mov ecx, 0x42ec40
push edx
mov byte [ebp - 4], 0xb
call fcn.00402260
push eax
lea eax, [ebp - 0x34]
push str.DriverMicrosoft_Access_Driver__.mdb___t_t_tDbq
push eax
mov byte [ebp - 4], 0xc
call sub.MFC42.DLL_operator_1
push str.db.mdb_Uid_Pwd_
lea ecx, [ebp - 0x30]
push eax
push ecx
mov byte [ebp - 4], 0xd
call sub.MFC42.DLL_operator_2
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004040a0
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push eax
call fcn.00406150
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xf
call fcn.00418c90
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.00403f60
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x10
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call sub.MFC42.DLL_CString::CString
mov dword [ebp - 0x18], edi
lea edx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
push edx
push 0x42c4f8
push ebx
push edi
push 0x42c468
call esi
cmp eax, edi
jl 0x4045c9
mov eax, dword [ebp - 0x38]
push eax
call dword [sym.imp.ole32.dll_OleRun]
cmp eax, edi
jl 0x4045c0
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x18]
push edx
push 0x42c458
mov ecx, dword [eax]
push eax
call dword [ecx]
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x42ec3c
lea ecx, [ebp - 0x6c]
call sub.MFC42.DLL_CString::CString_2
mov edx, dword [ebp + 8]
push 0x42ec3c
push edx
mov byte [ebp - 4], 0x14
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
je 0x40467d
lea eax, [ebp + 8]
lea ecx, [ebp - 0x68]
push eax
push str.select_sh_mc_type_path_cch_dkh_kpjh_bj_from_fwkp_where__sh_like__
push ecx
call sub.MFC42.DLL_operator_1
push str.__or_mc_like__
lea edx, [ebp - 0x40]
push eax
push edx
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_operator_2
lea ecx, [ebp + 8]
lea edx, [ebp - 0x34]
push ecx
push eax
push edx
mov byte [ebp - 4], 0x16
call sub.MFC42.DLL_operator
push str.___order_by_id
push eax
lea eax, [ebp - 0x30]
mov bl, 0x17
push eax
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operator_2
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x18
call fcn.0041edca
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x16
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
call sub.MFC42.DLL_CString::CString
jmp 0x40468a
push str.select_sh_mc_type_path_cch_dkh_kpjh_bj_from_fwkp_order_by_id
lea ecx, [ebp - 0x6c]
call fcn.0041ed8e
mov eax, dword [ebp - 0x3c]
mov word [ebp - 0x98], 9
mov dword [ebp - 0x90], eax
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov esi, dword [ebp - 0x6c]
mov bl, 0x19
push 0xc
mov byte [ebp - 4], bl
call sub.MFC42.DLL_operatornew
mov ecx, eax
add esp, 4
mov dword [ebp - 0x70], ecx
cmp ecx, edi
mov byte [ebp - 4], 0x1a
je 0x4046cb
push esi
call fcn.00406320
mov edi, eax
jmp 0x4046cd
xor edi, edi
test edi, edi
mov byte [ebp - 4], bl
mov dword [ebp - 0x70], edi
jne 0x4046e1
push 0x8007000e
call fcn.0041f4a9
test edi, edi
mov byte [ebp - 4], 0x1b
mov word [ebp - 0xa8], 8
je 0x4046f6
mov esi, dword [edi]
jmp 0x4046f8
xor esi, esi
push esi
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
push eax
push esi
call dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
test eax, eax
mov dword [ebp - 0xa0], eax
jne 0x40471b
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x1c
test eax, eax
jne 0x404733
push 0x80004003
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x98]
push 1
push 3
push 2
sub esp, 0x10
mov edx, dword [eax]
mov ecx, esp
sub esp, 0x10
mov esi, eax
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x90]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [ecx + 0xc], ebx
mov ebx, dword [ebp - 0xa8]
mov ecx, esp
push eax
mov dword [ecx], ebx
mov ebx, dword [ebp - 0xa4]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0xa0]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x9c]
mov dword [ecx + 0xc], ebx
call dword [edx + 0xa0]
test eax, eax
jge 0x4047a4
push 0x42c408
push esi
push eax
call fcn.0041f4b7
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edx, [ebp - 0xa8]
push edx
mov byte [ebp - 4], 0x1b
call esi
test eax, eax
jge 0x4047c1
push eax
call fcn.0041f4a9
test edi, edi
je 0x4047cc
mov ecx, edi
call fcn.004063a0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x14
push eax
call esi
test eax, eax
jge 0x4047e3
push eax
call fcn.0041f4a9
mov ebx, dword [ebp - 0x14]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x404800
push 0x80004003
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
lea edx, [ebp - 0x76]
push edx
push eax
mov esi, eax
call dword [ecx + 0x50]
test eax, eax
jge 0x40481c
push 0x42c408
push esi
push eax
call fcn.0041f4b7
cmp word [ebp - 0x76], 0
jne 0x405fa7
mov esi, 8
push 0x42c3fc
mov word [ebp - 0x1e8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x1e0], eax
jne 0x40485a
mov eax, 0x42c3fc
test eax, eax
je 0x40485a
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x1d
test eax, eax
jne 0x40486f
push 0x80004003
call fcn.0041f4a9
lea ecx, [ebp - 0x1e8]
lea edx, [ebp - 0x3d8]
push ecx
mov ecx, dword [ebp - 0x18]
push edx
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x1e
je 0x4048ff
push 0x42c3fc
mov word [ebp - 0x2b8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x2b0], eax
jne 0x4048bd
mov eax, 0x42c3fc
test eax, eax
je 0x4048bd
push 0x8007000e
call fcn.0041f4a9
or ebx, 1
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x1f
test eax, eax
jne 0x4048d8
push 0x80004003
call fcn.0041f4a9
lea ecx, [ebp - 0x2b8]
lea edx, [ebp - 0x2e8]
push ecx
mov ecx, dword [ebp - 0x18]
push edx
call fcn.004060d0
or ebx, 2
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x20
jmp 0x404940
push 0x42ec3c
mov word [ebp - 0xa8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0xa0], eax
jne 0x40492d
mov eax, 0x42ec3c
test eax, eax
je 0x40492d
push 0x8007000e
call fcn.0041f4a9
or ebx, 4
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0xa8]
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x58], 0
cmp word [esi], 8
jne 0x40495b
mov ecx, dword [esi + 8]
push ecx
lea ecx, [ebp - 0x58]
call fcn.00406240
jmp 0x4049a3
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0x22
call fcn.00406420
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x58]
push eax
call fcn.00406240
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x21
push ecx
call edi
test eax, eax
jge 0x4049a3
push eax
call fcn.0041f4a9
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 4], 0x23
test ecx, ecx
je 0x4049b8
call fcn.004063f0
jmp 0x4049ba
xor eax, eax
push eax
lea ecx, [ebp - 0x74]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x4049d6
call fcn.004063a0
mov dword [ebp - 0x58], 0
test bl, 4
mov byte [ebp - 4], 0x29
je 0x4049f8
lea edx, [ebp - 0xa8]
and ebx, 0xfffffffb
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x4049f8
push eax
call fcn.0041f4a9
test bl, 2
mov dword [ebp - 4], 0x28
je 0x404a1d
lea eax, [ebp - 0x2e8]
and ebx, 0xfffffffd
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404a1d
push eax
call fcn.0041f4a9
test bl, 1
mov dword [ebp - 4], 0x27
je 0x404a42
lea ecx, [ebp - 0x2b8]
and ebx, 0xfffffffe
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404a42
push eax
call fcn.0041f4a9
lea edx, [ebp - 0x3d8]
mov dword [ebp - 4], 0x26
push edx
call edi
test eax, eax
jge 0x404a5c
push eax
call fcn.0041f4a9
lea eax, [ebp - 0x1e8]
mov byte [ebp - 4], 0x25
push eax
call edi
test eax, eax
jge 0x404a73
push eax
call fcn.0041f4a9
mov esi, 8
push 0x42c3f8
mov word [ebp - 0x238], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x230], eax
jne 0x404aa6
mov ecx, 0x42c3f8
test ecx, ecx
je 0x404aa6
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x2b
test eax, eax
jne 0x404abb
push 0x80004003
call fcn.0041f4a9
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x238]
lea eax, [ebp - 0x3a8]
push edx
push eax
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x2c
je 0x404b4a
push 0x42c3f8
mov word [ebp - 0x148], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x140], eax
jne 0x404b09
mov ecx, 0x42c3f8
test ecx, ecx
je 0x404b09
push 0x8007000e
call fcn.0041f4a9
or ebx, esi
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x2d
test eax, eax
jne 0x404b23
push 0x80004003
call fcn.0041f4a9
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x148]
lea eax, [ebp - 0x308]
push edx
push eax
call fcn.004060d0
or ebx, 0x10
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x2e
jmp 0x404b8b
push 0x42ec3c
mov word [ebp - 0x218], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x210], eax
jne 0x404b78
mov ecx, 0x42ec3c
test ecx, ecx
je 0x404b78
push 0x8007000e
call fcn.0041f4a9
or ebx, 0x20
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0x218]
mov dword [ebp - 4], 0x2f
mov dword [ebp - 0x4c], 0
cmp word [esi], 8
jne 0x404ba6
mov edx, dword [esi + 8]
lea ecx, [ebp - 0x4c]
push edx
call fcn.00406240
jmp 0x404bee
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0x30
call fcn.00406420
mov ecx, dword [ebp - 0x120]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.00406240
lea edx, [ebp - 0x128]
mov byte [ebp - 4], 0x2f
push edx
call edi
test eax, eax
jge 0x404bee
push eax
call fcn.0041f4a9
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 4], 0x31
test ecx, ecx
je 0x404c03
call fcn.004063f0
jmp 0x404c05
xor eax, eax
push eax
lea ecx, [ebp - 0x30]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x404c21
call fcn.004063a0
mov dword [ebp - 0x4c], 0
test bl, 0x20
mov byte [ebp - 4], 0x37
je 0x404c43
lea eax, [ebp - 0x218]
and ebx, 0xffffffdf
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404c43
push eax
call fcn.0041f4a9
test bl, 0x10
mov dword [ebp - 4], 0x36
je 0x404c68
lea ecx, [ebp - 0x308]
and ebx, 0xffffffef
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404c68
push eax
call fcn.0041f4a9
test bl, 8
mov dword [ebp - 4], 0x35
je 0x404c8d
lea edx, [ebp - 0x148]
and ebx, 0xfffffff7
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404c8d
push eax
call fcn.0041f4a9
lea eax, [ebp - 0x3a8]
mov dword [ebp - 4], 0x34
push eax
call edi
test eax, eax
jge 0x404ca7
push eax
call fcn.0041f4a9
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x33
push ecx
call edi
test eax, eax
jge 0x404cbe
push eax
call fcn.0041f4a9
mov esi, 8
push str.type
mov word [ebp - 0x278], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x270], eax
jne 0x404cf1
mov edx, str.type
test edx, edx
je 0x404cf1
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x39
test eax, eax
jne 0x404d06
push 0x80004003
call fcn.0041f4a9
lea eax, [ebp - 0x278]
lea ecx, [ebp - 0x388]
push eax
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x3a
je 0x404d96
push str.type
mov word [ebp - 0x188], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x180], eax
jne 0x404d54
mov edx, str.type
test edx, edx
je 0x404d54
push 0x8007000e
call fcn.0041f4a9
or ebx, 0x40
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x3b
test eax, eax
jne 0x404d6f
push 0x80004003
call fcn.0041f4a9
lea eax, [ebp - 0x188]
lea ecx, [ebp - 0x328]
push eax
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.004060d0
or bl, 0x80
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x3c
jmp 0x404dd7
push 0x42ec3c
mov word [ebp - 0x258], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x250], eax
jne 0x404dc4
mov edx, 0x42ec3c
test edx, edx
je 0x404dc4
push 0x8007000e
call fcn.0041f4a9
or bh, 1
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0x258]
mov dword [ebp - 4], 0x3d
mov dword [ebp - 0x5c], 0
cmp word [esi], 8
jne 0x404df2
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x5c]
push eax
call fcn.00406240
jmp 0x404e3a
lea ecx, [ebp - 0x168]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], 0x3e
call fcn.00406420
mov edx, dword [ebp - 0x160]
lea ecx, [ebp - 0x5c]
push edx
call fcn.00406240
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x3d
push eax
call edi
test eax, eax
jge 0x404e3a
push eax
call fcn.0041f4a9
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x3f
test ecx, ecx
je 0x404e4f
call fcn.004063f0
jmp 0x404e51
xor eax, eax
push eax
lea ecx, [ebp - 0x48]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x5c]
test ecx, ecx
je 0x404e6d
call fcn.004063a0
mov dword [ebp - 0x5c], 0
test bh, 1
mov byte [ebp - 4], 0x45
je 0x404e8f
lea ecx, [ebp - 0x258]
and bh, 0xfe
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404e8f
push eax
call fcn.0041f4a9
test bl, 0x80
mov dword [ebp - 4], 0x44
je 0x404eb4
lea edx, [ebp - 0x328]
and bl, 0x7f
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404eb4
push eax
call fcn.0041f4a9
test bl, 0x40
mov dword [ebp - 4], 0x43
je 0x404ed9
lea eax, [ebp - 0x188]
and ebx, 0xffffffbf
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x404ed9
push eax
call fcn.0041f4a9
lea ecx, [ebp - 0x388]
mov dword [ebp - 4], 0x42
push ecx
call edi
test eax, eax
jge 0x404ef3
push eax
call fcn.0041f4a9
lea edx, [ebp - 0x278]
mov byte [ebp - 4], 0x41
push edx
call edi
test eax, eax
jge 0x404f0a
push eax
call fcn.0041f4a9
mov esi, 8
push 0x42c3e8
mov word [ebp - 0x108], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x100], eax
jne 0x404f3d
mov eax, 0x42c3e8
test eax, eax
je 0x404f3d
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x47
test eax, eax
jne 0x404f52
push 0x80004003
call fcn.0041f4a9
lea ecx, [ebp - 0x108]
lea edx, [ebp - 0x3c8]
push ecx
mov ecx, dword [ebp - 0x18]
push edx
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x48
je 0x404fe2
push 0x42c3e8
mov word [ebp - 0x1c8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x1c0], eax
jne 0x404fa0
mov eax, 0x42c3e8
test eax, eax
je 0x404fa0
push 0x8007000e
call fcn.0041f4a9
or bh, 2
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x49
test eax, eax
jne 0x404fbb
push 0x80004003
call fcn.0041f4a9
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x348]
push ecx
mov ecx, dword [ebp - 0x18]
push edx
call fcn.004060d0
or bh, 4
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x4a
jmp 0x405023
push 0x42ec3c
mov word [ebp - 0x298], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x290], eax
jne 0x405010
mov eax, 0x42ec3c
test eax, eax
je 0x405010
push 0x8007000e
call fcn.0041f4a9
or bh, 8
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0x298]
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0x64], 0
cmp word [esi], 8
jne 0x40503e
mov ecx, dword [esi + 8]
push ecx
lea ecx, [ebp - 0x64]
call fcn.00406240
jmp 0x405086
lea edx, [ebp - 0x1a8]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 4], 0x4c
call fcn.00406420
mov eax, dword [ebp - 0x1a0]
lea ecx, [ebp - 0x64]
push eax
call fcn.00406240
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x4b
push ecx
call edi
test eax, eax
jge 0x405086
push eax
call fcn.0041f4a9
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 4], 0x4d
test ecx, ecx
je 0x40509b
call fcn.004063f0
jmp 0x40509d
xor eax, eax
push eax
lea ecx, [ebp - 0x38]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x64]
test ecx, ecx
je 0x4050b9
call fcn.004063a0
mov dword [ebp - 0x64], 0
test bh, 8
mov byte [ebp - 4], 0x53
je 0x4050db
lea edx, [ebp - 0x298]
and bh, 0xf7
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x4050db
push eax
call fcn.0041f4a9
test bh, 4
mov dword [ebp - 4], 0x52
je 0x405100
lea eax, [ebp - 0x348]
and bh, 0xfb
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405100
push eax
call fcn.0041f4a9
test bh, 2
mov dword [ebp - 4], 0x51
je 0x405125
lea ecx, [ebp - 0x1c8]
and bh, 0xfd
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405125
push eax
call fcn.0041f4a9
lea edx, [ebp - 0x3c8]
mov dword [ebp - 4], 0x50
push edx
call edi
test eax, eax
jge 0x40513f
push eax
call fcn.0041f4a9
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x4f
push eax
call edi
test eax, eax
jge 0x405156
push eax
call fcn.0041f4a9
mov esi, 8
push 0x42c3e4
mov word [ebp - 0x2a8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x2a0], eax
jne 0x405189
mov ecx, 0x42c3e4
test ecx, ecx
je 0x405189
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x55
test eax, eax
jne 0x40519e
push 0x80004003
call fcn.0041f4a9
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x2a8]
lea eax, [ebp - 0x2f8]
push edx
push eax
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x56
je 0x40522e
push 0x42c3e4
mov word [ebp - 0x208], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x200], eax
jne 0x4051ec
mov ecx, 0x42c3e4
test ecx, ecx
je 0x4051ec
push 0x8007000e
call fcn.0041f4a9
or bh, 0x10
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x57
test eax, eax
jne 0x405207
push 0x80004003
call fcn.0041f4a9
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x208]
lea eax, [ebp - 0x368]
push edx
push eax
call fcn.004060d0
or bh, 0x20
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x58
jmp 0x40526f
push 0x42ec3c
mov word [ebp - 0x268], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x260], eax
jne 0x40525c
mov ecx, 0x42ec3c
test ecx, ecx
je 0x40525c
push 0x8007000e
call fcn.0041f4a9
or bh, 0x40
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0x268]
mov dword [ebp - 4], 0x59
mov dword [ebp - 0x50], 0
cmp word [esi], 8
jne 0x40528a
mov edx, dword [esi + 8]
lea ecx, [ebp - 0x50]
push edx
call fcn.00406240
jmp 0x4052d2
lea eax, [ebp - 0x2d8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 4], 0x5a
call fcn.00406420
mov ecx, dword [ebp - 0x2d0]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00406240
lea edx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x59
push edx
call edi
test eax, eax
jge 0x4052d2
push eax
call fcn.0041f4a9
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 4], 0x5b
test ecx, ecx
je 0x4052e7
call fcn.004063f0
jmp 0x4052e9
xor eax, eax
push eax
lea ecx, [ebp - 0x34]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x405305
call fcn.004063a0
mov dword [ebp - 0x50], 0
test bh, 0x40
mov byte [ebp - 4], 0x61
je 0x405327
lea eax, [ebp - 0x268]
and bh, 0xbf
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405327
push eax
call fcn.0041f4a9
test bh, 0x20
mov dword [ebp - 4], 0x60
je 0x40534c
lea ecx, [ebp - 0x368]
and bh, 0xdf
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x40534c
push eax
call fcn.0041f4a9
test bh, 0x10
mov dword [ebp - 4], 0x5f
je 0x405371
lea edx, [ebp - 0x208]
and bh, 0xef
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405371
push eax
call fcn.0041f4a9
lea eax, [ebp - 0x2f8]
mov dword [ebp - 4], 0x5e
push eax
call edi
test eax, eax
jge 0x40538b
push eax
call fcn.0041f4a9
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x5d
push ecx
call edi
test eax, eax
jge 0x4053a2
push eax
call fcn.0041f4a9
mov esi, 8
push 0x42c3e0
mov word [ebp - 0x2c8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x2c0], eax
jne 0x4053d5
mov edx, 0x42c3e0
test edx, edx
je 0x4053d5
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x63
test eax, eax
jne 0x4053ea
push 0x80004003
call fcn.0041f4a9
lea eax, [ebp - 0x2c8]
lea ecx, [ebp - 0x338]
push eax
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x64
je 0x40547d
push 0x42c3e0
mov word [ebp - 0x248], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x240], eax
jne 0x405438
mov edx, 0x42c3e0
test edx, edx
je 0x405438
push 0x8007000e
call fcn.0041f4a9
or bh, 0x80
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x65
test eax, eax
jne 0x405453
push 0x80004003
call fcn.0041f4a9
lea eax, [ebp - 0x248]
lea ecx, [ebp - 0x318]
push eax
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.004060d0
or ebx, 0x10000
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x66
jmp 0x4054c1
push 0x42ec3c
mov word [ebp - 0x288], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x280], eax
jne 0x4054ab
mov edx, 0x42ec3c
test edx, edx
je 0x4054ab
push 0x8007000e
call fcn.0041f4a9
or ebx, 0x20000
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0x288]
mov dword [ebp - 4], 0x67
mov dword [ebp - 0x54], 0
cmp word [esi], 8
jne 0x4054dc
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x54]
push eax
call fcn.00406240
jmp 0x405524
lea ecx, [ebp - 0x228]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x228]
mov dword [ebp - 4], 0x68
call fcn.00406420
mov edx, dword [ebp - 0x220]
lea ecx, [ebp - 0x54]
push edx
call fcn.00406240
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0x67
push eax
call edi
test eax, eax
jge 0x405524
push eax
call fcn.0041f4a9
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 4], 0x69
test ecx, ecx
je 0x405539
call fcn.004063f0
jmp 0x40553b
xor eax, eax
push eax
lea ecx, [ebp - 0x40]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x405557
call fcn.004063a0
mov dword [ebp - 0x54], 0
test ebx, 0x20000
mov byte [ebp - 4], 0x6f
je 0x40557f
lea ecx, [ebp - 0x288]
and ebx, 0xfffdffff
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x40557f
push eax
call fcn.0041f4a9
test ebx, 0x10000
mov dword [ebp - 4], 0x6e
je 0x4055aa
lea edx, [ebp - 0x318]
and ebx, 0xfffeffff
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x4055aa
push eax
call fcn.0041f4a9
test bh, 0x80
mov dword [ebp - 4], 0x6d
je 0x4055cf
lea eax, [ebp - 0x248]
and bh, 0x7f
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x4055cf
push eax
call fcn.0041f4a9
lea ecx, [ebp - 0x338]
mov dword [ebp - 4], 0x6c
push ecx
call edi
test eax, eax
jge 0x4055e9
push eax
call fcn.0041f4a9
lea edx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x6b
push edx
call edi
test eax, eax
jge 0x405600
push eax
call fcn.0041f4a9
mov esi, 8
push 0x42c3d8
mov word [ebp - 0x138], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x130], eax
jne 0x405633
mov eax, 0x42c3d8
test eax, eax
je 0x405633
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x71
test eax, eax
jne 0x405648
push 0x80004003
call fcn.0041f4a9
lea ecx, [ebp - 0x138]
lea edx, [ebp - 0x378]
push ecx
mov ecx, dword [ebp - 0x18]
push edx
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x72
je 0x4056de
push 0x42c3d8
mov word [ebp - 0x118], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x110], eax
jne 0x405696
mov eax, 0x42c3d8
test eax, eax
je 0x405696
push 0x8007000e
call fcn.0041f4a9
or ebx, 0x40000
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x73
test eax, eax
jne 0x4056b4
push 0x80004003
call fcn.0041f4a9
lea ecx, [ebp - 0x118]
lea edx, [ebp - 0x358]
push ecx
mov ecx, dword [ebp - 0x18]
push edx
call fcn.004060d0
or ebx, 0x80000
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x74
jmp 0x405722
push 0x42ec3c
mov word [ebp - 0x1f8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x1f0], eax
jne 0x40570c
mov eax, 0x42ec3c
test eax, eax
je 0x40570c
push 0x8007000e
call fcn.0041f4a9
or ebx, 0x100000
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0x1f8]
mov dword [ebp - 4], 0x75
mov dword [ebp - 0x60], 0
cmp word [esi], 8
jne 0x40573d
mov ecx, dword [esi + 8]
push ecx
lea ecx, [ebp - 0x60]
call fcn.00406240
jmp 0x405785
lea edx, [ebp - 0x1d8]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 4], 0x76
call fcn.00406420
mov eax, dword [ebp - 0x1d0]
lea ecx, [ebp - 0x60]
push eax
call fcn.00406240
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x75
push ecx
call edi
test eax, eax
jge 0x405785
push eax
call fcn.0041f4a9
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 4], 0x77
test ecx, ecx
je 0x40579a
call fcn.004063f0
jmp 0x40579c
xor eax, eax
push eax
lea ecx, [ebp - 0x68]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x60]
test ecx, ecx
je 0x4057b8
call fcn.004063a0
mov dword [ebp - 0x60], 0
test ebx, 0x100000
mov byte [ebp - 4], 0x7d
je 0x4057e0
lea edx, [ebp - 0x1f8]
and ebx, 0xffefffff
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x4057e0
push eax
call fcn.0041f4a9
test ebx, 0x80000
mov dword [ebp - 4], 0x7c
je 0x40580b
lea eax, [ebp - 0x358]
and ebx, 0xfff7ffff
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x40580b
push eax
call fcn.0041f4a9
test ebx, 0x40000
mov dword [ebp - 4], 0x7b
je 0x405836
lea ecx, [ebp - 0x118]
and ebx, 0xfffbffff
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405836
push eax
call fcn.0041f4a9
lea edx, [ebp - 0x378]
mov dword [ebp - 4], 0x7a
push edx
call edi
test eax, eax
jge 0x405850
push eax
call fcn.0041f4a9
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x79
push eax
call edi
test eax, eax
jge 0x405867
push eax
call fcn.0041f4a9
mov esi, 8
push 0x42c78c
mov word [ebp - 0x1b8], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x1b0], eax
jne 0x40589a
mov ecx, 0x42c78c
test ecx, ecx
je 0x40589a
push 0x8007000e
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x7f
test eax, eax
jne 0x4058af
push 0x80004003
call fcn.0041f4a9
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x3b8]
push edx
push eax
call fcn.004060d0
cmp word [eax], 1
mov byte [ebp - 4], 0x80
je 0x405945
push 0x42c78c
mov word [ebp - 0x198], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x190], eax
jne 0x4058fd
mov ecx, 0x42c78c
test ecx, ecx
je 0x4058fd
push 0x8007000e
call fcn.0041f4a9
or ebx, 0x200000
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x81
test eax, eax
jne 0x40591b
push 0x80004003
call fcn.0041f4a9
mov ecx, dword [ebp - 0x18]
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x398]
push edx
push eax
call fcn.004060d0
or ebx, 0x400000
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 4], 0x82
jmp 0x405989
push 0x42c788
mov word [ebp - 0x178], si
call fcn.0041f3c0
test eax, eax
mov dword [ebp - 0x170], eax
jne 0x405973
mov ecx, 0x42c788
test ecx, ecx
je 0x405973
push 0x8007000e
call fcn.0041f4a9
or ebx, 0x800000
mov dword [ebp - 0x14], ebx
lea esi, [ebp - 0x178]
mov dword [ebp - 4], 0x83
mov dword [ebp - 0x44], 0
cmp word [esi], 8
jne 0x4059cd
mov esi, dword [esi + 8]
lea ecx, [ebp - 0x44]
call fcn.004061f0
push 0xc
call sub.MFC42.DLL_operatornew
mov ecx, eax
add esp, 4
mov dword [ebp - 0x80], ecx
test ecx, ecx
mov dword [ebp - 4], 0x84
je 0x4059c6
push esi
call fcn.00406360
mov dword [ebp - 0x44], eax
jmp 0x405a18
xor eax, eax
mov dword [ebp - 0x44], eax
jmp 0x405a18
lea edx, [ebp - 0x158]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push esi
push 8
lea ecx, [ebp - 0x158]
mov dword [ebp - 4], 0x85
call fcn.00406420
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x44]
push eax
call fcn.00406240
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x83
push ecx
call edi
test eax, eax
jge 0x405a15
push eax
call fcn.0041f4a9
mov eax, dword [ebp - 0x44]
test eax, eax
mov dword [ebp - 4], 0x86
je 0x405a56
mov ecx, dword [eax + 4]
lea esi, [eax + 4]
test ecx, ecx
mov edi, eax
jne 0x405a4c
mov edx, dword [eax]
push edx
call fcn.0041f435
test eax, eax
mov dword [esi], eax
jne 0x405a4c
cmp dword [edi], 0
je 0x405a4c
push 0x8007000e
call fcn.0041f4a9
mov esi, dword [esi]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x405a58
xor esi, esi
push esi
lea ecx, [ebp - 0x84]
call sub.MFC42.DLL_CString::CString_2
mov ecx, dword [ebp - 0x44]
test ecx, ecx
je 0x405a77
call fcn.004063a0
mov dword [ebp - 0x44], 0
test ebx, 0x800000
mov byte [ebp - 4], 0x8c
je 0x405a9f
lea eax, [ebp - 0x178]
and ebx, 0xff7fffff
push eax
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405a9f
push eax
call fcn.0041f4a9
test ebx, 0x400000
mov dword [ebp - 4], 0x8b
je 0x405aca
lea ecx, [ebp - 0x398]
and ebx, 0xffbfffff
push ecx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405aca
push eax
call fcn.0041f4a9
test ebx, 0x200000
mov dword [ebp - 4], 0x8a
je 0x405af5
lea edx, [ebp - 0x198]
and ebx, 0xffdfffff
push edx
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jge 0x405af5
push eax
call fcn.0041f4a9
lea eax, [ebp - 0x3b8]
mov dword [ebp - 4], 0x89
push eax
call edi
test eax, eax
jge 0x405b0f
push eax
call fcn.0041f4a9
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x88
push ecx
call edi
test eax, eax
jge 0x405b26
push eax
call fcn.0041f4a9
push 0x7ba
push ecx
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x80], esp
push edx
call sub.MFC42.DLL_CString::CString_3
mov esi, dword [ebp - 0xc8]
lea eax, [ebp - 0xd0]
push eax
mov ecx, esi
call fcn.00402d80
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x8e
call fcn.0041edca
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x88
call sub.MFC42.DLL_CString::CString
push 0x7ba
push ecx
lea edx, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x80], esp
push edx
call sub.MFC42.DLL_CString::CString_3
lea eax, [ebp - 0xd8]
mov ecx, esi
push eax
call fcn.00402d80
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x8f
call fcn.0041edca
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x88
call sub.MFC42.DLL_CString::CString
push str._tr_height_25__onmouseover_this.style.backgroundColorB8DFF2__onmouseout_this.style.backgroundColorFAFAFA___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._td_width_65___n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.nbsp__img_align_absmiddle__src_images_kh.gif__width_24__height_24____td__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0xf0]
push ecx
push str._td_align_left__
push edx
call sub.MFC42.DLL_operator_1
push str.__td__n
push eax
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0x90
push eax
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x91
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x90
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x88
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0xf8]
push ecx
push str._td_align_left__
push edx
call sub.MFC42.DLL_operator_1
mov byte [ebp - 4], 0x92
push str.__td__n
push eax
lea eax, [ebp - 0xd4]
push eax
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x93
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x92
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x88
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0xb4]
push ecx
push str._td_align_left__
push edx
call sub.MFC42.DLL_operator_1
push str.__td__n
push eax
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x94
push eax
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x95
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x94
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x88
call sub.MFC42.DLL_CString::CString
push str._td_align_left___t_t_n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__td__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x70]
push ecx
push str._td_width_100___a_href_javascript:kp_f_
push edx
call sub.MFC42.DLL_operator_1
push 0x42c648
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x96
push eax
call sub.MFC42.DLL_operator_2
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x7c]
push ecx
push eax
push edx
mov byte [ebp - 4], 0x97
call sub.MFC42.DLL_operator
push 0x42c648
push eax
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x98
push eax
call sub.MFC42.DLL_operator_2
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x99
push ecx
push eax
lea edx, [ebp - 0xb8]
push edx
call sub.MFC42.DLL_operator
push str.__
push eax
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0x9a
push eax
call sub.MFC42.DLL_operator_2
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0xac]
push ecx
push eax
push edx
mov byte [ebp - 4], 0x9b
call sub.MFC42.DLL_operator
push 0x42c648
push eax
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x9c
push eax
call sub.MFC42.DLL_operator_2
lea ecx, [ebp - 0x68]
lea edx, [ebp - 0xcc]
push ecx
push eax
push edx
mov byte [ebp - 4], 0x9d
call sub.MFC42.DLL_operator
push 0x42c648
push eax
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x9e
push eax
call sub.MFC42.DLL_operator_2
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xc4]
push ecx
push eax
push edx
mov byte [ebp - 4], 0x9f
call sub.MFC42.DLL_operator
push 0x42c648
push eax
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0xa0
push eax
call sub.MFC42.DLL_operator_2
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0xbc]
push ecx
push eax
push edx
mov byte [ebp - 4], 0xa1
call sub.MFC42.DLL_operator
push str.____img_border0_align_absmiddle__src_images_kp.gif___a___td__n
push eax
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0xa2
push eax
call sub.MFC42.DLL_operator_2
mov eax, dword [eax]
lea ecx, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0xa3
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xa2
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0xbc]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xa0
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x9f
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x9e
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x9d
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x9c
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x9b
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x9a
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x99
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x98
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x97
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x96
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x88
call sub.MFC42.DLL_CString::CString
push str.__tr__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._tr_height_2___td_colspan_4__background_images_line1.bmp____td___tr__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x405f24
push 0x80004003
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x90]
test eax, eax
jge 0x405f3f
push 0x42c408
push esi
push eax
call fcn.0041f4b7
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x79
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x6b
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x5d
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x4f
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x41
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x33
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x25
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x14
call sub.MFC42.DLL_CString::CString
jmp 0x4047ec
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x405fbb
push 0x80004003
call fcn.0041f4a9
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
push eax
mov esi, eax
call dword [edx + 0x80]
test eax, eax
jge 0x405fd6
push 0x42c408
push esi
push eax
call fcn.0041f4b7
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x405fea
push 0x80004003
call fcn.0041f4a9
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
push eax
mov esi, eax
call dword [ecx + 0x3c]
test eax, eax
jge 0x406002
push 0x42c3c8
push esi
push eax
call fcn.0041f4b7
push str._tr_height_100____td__td___tr__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str._t__table__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__div__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__form__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__body__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
push str.__html__n
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::WriteString
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::Flush
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CStdioFile::Close
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 9
test eax, eax
je 0x40607d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 2
test eax, eax
je 0x40608e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.0041edd6
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4