Function at 0x404ce0
Capabilities:
Contain obfuscated stackstrings
Create directory
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5347fa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x328
push ebx
push ebp
push esi
mov dword [esp + 0x14], ecx
push edi
add ecx, 0x894
push str.help
lea eax, [esp + 0x88]
push ecx
push eax
call fcn.0051457f
push 0x56c47c
lea ecx, [esp + 0x84]
xor esi, esi
push eax
push ecx
mov dword [esp + 0x34c], esi
call fcn.0051457f
mov edx, dword [esp + 0x34c]
mov edi, 1
push edx
push eax
lea eax, [esp + 0x44]
mov byte [esp + 0x348], 1
push eax
call fcn.0051457f
lea ecx, [esp + 0x80]
mov byte [esp + 0x340], 4
call fcn.00514336
lea ecx, [esp + 0x84]
mov byte [esp + 0x340], 3
call fcn.00514336
mov ecx, dword [esp + 0x3c]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x56c47c
lea ecx, [esp + 0x40]
call fcn.005146c6
lea ecx, [esp + 0x24]
call fcn.00470b30
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
call fcn.00470b30
mov eax, dword [0x58f614]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
push 0x56db24
lea ecx, [esp + 0x64]
mov byte [esp + 0x344], 8
call fcn.005143a4
mov eax, dword [esp + 0x348]
mov byte [esp + 0x340], 9
mov dword [esp + 0x6c], edi
mov dword [esp + 0x40], edi
mov ecx, dword [eax + 0x54]
mov ebx, dword [eax + 0x58]
cmp ecx, esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x14], esi
jle 0x406114
mov edi, dword [esp + 0x18]
mov esi, eax
jmp 0x404e1b
mov esi, dword [esp + 0x348]
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
test byte [ebx + 0x14], 3
jne 0x4060f2
lea ebp, [edi + 0xc0]
mov ecx, ebp
call fcn.0044e070
push eax
push ebx
push esi
call fcn.004dbc50
add esp, 0xc
test eax, eax
je 0x4060f2
mov dword [esp + 0x34], 0
mov eax, dword [ebx]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x34]
call fcn.00470f60
push str.__font___big_nbsp_
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x404e97
test al, 0x80
je 0x404e84
push 0x56da5c
jmp 0x404ea9
test ah, 0x80
je 0x404e90
push 0x56da4c
jmp 0x404ea9
push 0x56da40
jmp 0x404ea9
test eax, 0x400000
mov eax, 0x56da2c
jne 0x404ea8
mov eax, 0x56da20
push eax
lea ecx, [esp + 0x28]
call fcn.00470ee0
lea ecx, [esp + 0x10]
call fcn.005142c1
push 0
push 0
push 0
push ebx
lea edx, [esp + 0x20]
push esi
push edx
call fcn.004dbcf0
mov eax, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x24]
push eax
push str.__strong_nbsp_nbsp_nbsp_
call fcn.00470f10
mov ecx, dword [esi + 0x24]
push str.__a___p__p_
push ecx
push 0x56d9b8
lea ecx, [esp + 0x30]
call fcn.00470f30
mov eax, dword [ebx + 0x14]
test eax, 0x10000
je 0x404f0b
push 0x56d9a4
jmp 0x404f17
test eax, 0x20000
je 0x404f20
push 0x56d98c
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov edx, dword [ebx + 8]
push edx
call fcn.00471980
add esp, 4
test eax, eax
jne 0x404f81
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x1c]
push eax
call fcn.00514473
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x404f6a
lea ecx, [esp + 0x1c]
push ecx
call fcn.004dba40
add esp, 4
test eax, eax
jne 0x404f6a
lea edx, [esp + 0x60]
lea ecx, [esp + 0x1c]
push edx
call fcn.00514702
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push eax
call fcn.00470ee0
lea ecx, [esp + 0x1c]
call fcn.005142c1
push str.__p__r_n
lea ecx, [esp + 0x28]
call fcn.00470ee0
test dword [ebx + 0x14], 0x800044
je 0x405c66
push ebx
push esi
mov ecx, edi
call fcn.00463130
test eax, eax
jle 0x40545c
push str._p__big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov edi, dword [ebx + 0x28]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406f10
mov eax, dword [ebx + 0x24]
xor esi, esi
test eax, eax
jle 0x4050ad
mov ecx, ebp
call fcn.0044e070
mov edx, dword [esp + 0x348]
push eax
push edi
push edx
call fcn.004dbcb0
add esp, 0xc
test eax, eax
je 0x40509e
test byte [edi + 0xe], 0x10
jne 0x40509e
test byte [ebx + 0x14], 0x40
je 0x405028
cmp esi, 8
jge 0x405028
push esi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x405044
mov ecx, dword [esp + 0x14]
push esi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x56d920
lea ecx, [esp + 0x14]
call fcn.00514473
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [edi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00406f40
mov eax, dword [ebx + 0x24]
add edi, 0x14
inc esi
cmp esi, eax
jl 0x404fd9
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406fb0
mov eax, dword [ebx + 0x24]
mov esi, dword [ebx + 0x28]
xor edi, edi
test eax, eax
mov dword [esp + 0x38], edi
jle 0x405450
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
test byte [ebx + 0x14], 0x40
je 0x4050ec
cmp edi, 8
jge 0x4050ec
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x40543d
test byte [esi + 0xe], 0x10
jne 0x40543d
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.0044e070
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004dbcb0
add esp, 0xc
test eax, eax
je 0x40543d
mov dword [esp + 0x5c], 0
mov ecx, dword [ebx]
mov edx, dword [esi]
push ecx
push 0x56d910
push edx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x5c]
call fcn.00470f60
mov eax, dword [esi]
push str.__font___big_nbsp_
push eax
push str.___title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
lea ecx, [esp + 0x58]
call fcn.00470f30
test byte [ebx + 0x14], 0x40
je 0x405171
cmp edi, 8
jge 0x405171
push 0x56d8b8
lea ecx, [esp + 0x50]
call fcn.00470ee0
jmp 0x4051a6
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push ecx
push str.dt_d.htm__
push edx
call ebp
mov eax, dword [ebx]
add esp, 0xc
lea ecx, [esp + 0xf4]
push str.__a_
push eax
push ecx
push 0x56d878
lea ecx, [esp + 0x5c]
call fcn.00470f60
lea ecx, [esp + 0x10]
call fcn.005142c1
mov edx, dword [esp + 0x348]
push esi
push 0
push 0
push 0
lea eax, [esp + 0x20]
push edx
push eax
call fcn.004dbcf0
mov ecx, dword [esp + 0x28]
add esp, 0x18
push ecx
push 0x56d854
lea ecx, [esp + 0x54]
call fcn.00470f10
mov edx, dword [esp + 0x350]
lea eax, [esp + 0x1c]
movsx ecx, word [esi + 0xc]
push edx
push 0
push 0
push eax
push ecx
call fcn.004db5f0
mov ecx, dword [esp + 0x2c]
add esp, 4
push eax
push 0
call fcn.00462a80
mov edx, dword [esp + 0x1c]
push 0x56d844
push edx
push str.__p__r_n_p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.00470f30
test byte [esi + 0xe], 8
je 0x405234
push 0x56d808
lea ecx, [esp + 0x50]
call fcn.00470ee0
test byte [esi + 0xe], 4
je 0x405248
push 0x56d800
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov eax, dword [esi + 8]
push eax
call fcn.00471980
add esp, 4
test eax, eax
jne 0x4052a0
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.00514473
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405292
lea edx, [esp + 0x10]
push edx
call fcn.004dba40
add esp, 4
test eax, eax
jne 0x405292
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00514702
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
call fcn.00470ee0
push str.__p__r_n
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov ax, word [esi + 0xc]
cmp ax, 0x3ee
je 0x4052ce
cmp ax, 0x3e8
je 0x4052ce
cmp ax, 0x3ef
je 0x4052ce
cmp ax, 0x3f0
jne 0x4053b6
mov edx, dword [esi + 0x10]
push edx
call fcn.00471980
add esp, 4
test eax, eax
jne 0x4053b6
push 0x56d7e4
lea ecx, [esp + 0x14]
call fcn.00514473
mov edi, dword [esi + 0x10]
xor ebp, ebp
cmp byte [edi], 0
je 0x405390
push str.nbsp_nbsp_nbsp___font_color_000000__
lea ecx, [esp + 0x14]
call fcn.005146c6
cmp word [esi + 0xc], 0x3e8
je 0x405341
mov eax, ebp
inc ebp
push eax
lea eax, [esp + 0xf8]
push 0x56d7b4
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
jmp 0x405356
push edi
lea ecx, [esp + 0x14]
call fcn.005146c6
push edi
call fcn.00471ab0
add esp, 4
add edi, eax
push 0x56d794
lea ecx, [esp + 0x14]
call fcn.005146c6
push edi
lea ecx, [esp + 0x14]
call fcn.005146c6
push str.__font__br__r_n
lea ecx, [esp + 0x14]
call fcn.005146c6
push edi
call fcn.00471ab0
add edi, eax
add esp, 4
cmp byte [edi], 0
jne 0x4052fe
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.00470ee0
push str.__p_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edi, dword [esp + 0x38]
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
push str._r_n_p_
lea ecx, [esp + 0x50]
call fcn.00470ee0
test byte [ebx + 0x14], 0x40
je 0x4053e4
cmp edi, 8
jge 0x4053e4
push edi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call ebp
add esp, 0xc
jmp 0x4053fc
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call ebp
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x80]
push ecx
push edx
call fcn.0051457f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xa
call fcn.00471240
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 9
call fcn.00514336
mov eax, dword [ebx + 0x24]
add esi, 0x14
inc edi
cmp edi, eax
mov dword [esp + 0x38], edi
jl 0x4050d5
mov edi, dword [esp + 0x18]
mov dword [esp + 0x6c], 0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x40555f
push 0x56d6e0
lea ecx, [esp + 0x28]
call fcn.00470ee0
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.00406f10
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x405551
mov ecx, dword [ebx + 0x10]
mov ebp, dword [esp + 0x348]
mov eax, dword [ecx + edi*4]
lea edx, [eax + eax*8]
mov eax, dword [ebp + 0x68]
lea esi, [eax + edx*4]
mov al, byte [eax + edx*4 + 0xe]
test al, 0xc
jne 0x405545
mov ecx, dword [esp + 0x18]
add ecx, 0xc0
call fcn.0044e070
push eax
push esi
push ebp
call fcn.004dbcb0
add esp, 0xc
test eax, eax
je 0x405545
mov edx, dword [ebx + 0x10]
lea ecx, [esp + 0xf4]
mov eax, dword [edx + edi*4]
push eax
push str.cmd_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.00406f40
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x40548e
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
call fcn.00406fb0
mov eax, dword [ebx + 0x1c]
test eax, eax
jle 0x405677
push 0x56d690
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov esi, dword [ebx + 0x20]
test esi, esi
je 0x40558f
test dword [esi + 8], 0x80000000
je 0x40558f
mov ebp, 1
jmp 0x405591
xor ebp, ebp
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406f10
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x405669
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
test byte [esi + 8], 1
jne 0x40565b
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.0044e070
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004dbc80
add esp, 0xc
test eax, eax
je 0x40565b
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.e_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00406f40
mov eax, dword [ebx + 0x1c]
add esi, ebp
inc edi
cmp edi, eax
jl 0x4055b6
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00406fb0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x40574f
test ah, 0x80
jne 0x40574f
push str._p__big__strong_
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov ebp, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov ecx, ebp
call fcn.00406f10
mov eax, dword [0x58cd28]
xor esi, esi
test eax, eax
jle 0x405743
mov edi, 0x58cc38
test byte [edi + 8], 1
jne 0x405732
push esi
lea eax, [esp + 0xf8]
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edx, dword [edi]
lea ecx, [esp + 0x10]
push edx
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebp
call fcn.00406f40
mov eax, dword [0x58cd28]
inc esi
add edi, 0x14
cmp esi, eax
jl 0x4056bd
lea edx, [esp + 0x24]
mov ecx, ebp
push edx
call fcn.00406fb0
mov edx, dword [esp + 0x40]
xor ecx, ecx
xor eax, eax
cmp edx, 1
mov esi, 0x58cc38
mov dword [esp + 0x48], ecx
mov dword [esp + 0x38], eax
jne 0x405774
mov eax, dword [0x58cd28]
neg eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx + 0x1c]
cmp eax, ecx
jge 0x406084
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x4057b2
mov eax, dword [esp + 0x44]
mov esi, dword [eax + 0x20]
test esi, esi
je 0x4057aa
test dword [esi + 8], 0x80000000
je 0x4057aa
mov ebx, 1
mov dword [esp + 0x48], ebx
jmp 0x4057b6
xor ebx, ebx
mov dword [esp + 0x48], ebx
jmp 0x4057b6
mov ebx, dword [esp + 0x48]
test byte [esi + 8], 1
jne 0x405c3f
mov ebp, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
call fcn.0044e070
mov edi, dword [esp + 0x348]
push eax
push esi
push edi
call fcn.004dbc80
add esp, 0xc
test eax, eax
je 0x405c3f
mov dword [esp + 0x5c], 0
mov ecx, dword [esi]
push ecx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x54]
call fcn.00470f10
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x405824
mov edx, dword [esp + 0x44]
push 0x56d644
lea ecx, [esp + 0x50]
mov eax, dword [edx]
push eax
push 0x56d910
call fcn.00470f30
mov ecx, dword [esi]
push ecx
push str.__title__r_n__head__r_n_body__r_n_p__big__strong__font_color_000000__
lea ecx, [esp + 0x54]
call fcn.00470f10
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x40587c
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xf4]
push edx
push str.dt_d.htm__
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esp + 0x50]
add esp, 0xc
lea eax, [esp + 0xf4]
mov edx, dword [ecx]
push str.__a__r_n
push edx
push eax
push 0x56d5b0
lea ecx, [esp + 0x5c]
call fcn.00470f60
jmp 0x40588a
push 0x56d584
lea ecx, [esp + 0x50]
call fcn.00470ee0
lea ecx, [esp + 0x10]
call fcn.005142c1
push 0
push esi
push 0
push 0
lea ecx, [esp + 0x20]
push edi
push ecx
call fcn.004dbcf0
mov edx, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x4c]
push str.__p__r_n
push edx
push 0x56d854
call fcn.00470f30
mov eax, dword [esi + 4]
push eax
call fcn.00471980
add esp, 4
test eax, eax
jne 0x40592b
mov ecx, dword [esi + 4]
push ecx
lea ecx, [esp + 0x20]
call fcn.00514473
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40590a
lea edx, [esp + 0x1c]
push edx
call fcn.004dba40
add esp, 4
test eax, eax
jne 0x40590a
lea eax, [esp + 0x60]
lea ecx, [esp + 0x1c]
push eax
call fcn.00514702
mov ecx, dword [esp + 0x1c]
push str.__p__r_n
push ecx
push str._p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.00470f30
lea ecx, [esp + 0x1c]
call fcn.005142c1
push str._p__em_
lea ecx, [esp + 0x50]
call fcn.00470ee0
test ebx, ebx
jne 0x405949
mov eax, dword [esi + 8]
and al, 0x18
neg al
sbb eax, eax
inc eax
jmp 0x405953
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
sete al
test eax, eax
je 0x40595e
push 0x56d530
jmp 0x40599a
test ebx, ebx
jne 0x405977
mov eax, dword [esi + 8]
and al, 8
neg al
sbb eax, eax
and eax, 0x2ff
add eax, 0x80000002
jmp 0x40597a
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x350]
lea ecx, [esp + 0x1c]
push edx
push 0
push 0
push ecx
push eax
push 0
mov ecx, ebp
call fcn.00462a80
mov edx, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x50]
call fcn.00470ee0
push str.__font_nbsp____em_
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x4059c2
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push ecx
jmp 0x4059c7
push 0x56da40
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov edx, dword [esi]
push 0x56d518
push edx
push str.__em__
lea ecx, [esp + 0x58]
call fcn.00470f30
mov eax, dword [esi + 0xc]
mov ebx, dword [esi + 0x10]
xor ebp, ebp
test eax, eax
jle 0x405a36
mov edi, dword [esp + 0x48]
neg edi
sbb edi, edi
and edi, 4
add edi, 0xc
mov eax, dword [ebx]
push 0x56d508
push eax
push 0x56d4f0
lea ecx, [esp + 0x58]
call fcn.00470f30
mov ecx, dword [esi + 0xc]
dec ecx
cmp ebp, ecx
je 0x405a2c
push 0x56d4c8
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov eax, dword [esi + 0xc]
add ebx, edi
inc ebp
cmp ebp, eax
jl 0x405a00
push 0x56d4a0
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405a59
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov eax, dword [esi + 0xc]
mov edi, dword [esi + 0x10]
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x20], 0
test eax, eax
jle 0x405b8b
mov ebx, ebp
neg ebx
sbb ebx, ebx
and ebx, 4
add ebx, 0xc
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x405a95
push str._tr__r_n_td_width_30___valign_top___strong_
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov edx, dword [edi]
push str.__font___td__r_n_td_width_70___valign_top__
push edx
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x58]
call fcn.00470f30
test ebp, ebp
jne 0x405ac4
mov eax, dword [edi + 8]
and al, 1
neg al
sbb eax, eax
and eax, 0xfffffd01
add eax, 0x80000301
jmp 0x405ac7
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push 0
push 0
push edx
push eax
push 0
call fcn.00462a80
mov eax, dword [esp + 0x1c]
push 0x56d314
push eax
lea ecx, [esp + 0x54]
call fcn.00470f10
test ebp, ebp
je 0x405b0f
test byte [edi + 8], 2
je 0x405b0f
push 0x56d30c
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov ecx, dword [edi + 4]
push ecx
call fcn.00471980
add esp, 4
test eax, eax
jne 0x405b67
mov edx, dword [edi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.00514473
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405b59
lea eax, [esp + 0x10]
push eax
call fcn.004dba40
add esp, 4
test eax, eax
jne 0x405b59
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.00514702
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.00470ee0
push str.__td__r_n__tr__r_n
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0xc]
add edi, ebx
inc eax
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x405a7f
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405ba0
push str.__table__r_n
lea ecx, [esp + 0x50]
call fcn.00470ee0
push 0x56d264
lea ecx, [esp + 0x50]
call fcn.00470ee0
mov edi, dword [esp + 0x38]
test edi, edi
jl 0x405bd4
mov eax, dword [esp + 0x14]
push edi
push eax
lea ecx, [esp + 0xfc]
push str.e_d__d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x405bf3
mov edx, dword [0x58cd28]
lea eax, [esp + 0xf4]
add edx, edi
push edx
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x7c]
push edx
push eax
call fcn.0051457f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xb
call fcn.00471240
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 9
call fcn.00514336
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
add esi, ebp
jmp 0x405c4f
neg ebx
mov edi, dword [esp + 0x38]
sbb ebx, ebx
and ebx, 4
add ebx, 0x14
add esi, ebx
mov ecx, dword [esp + 0x44]
inc edi
mov dword [esp + 0x38], edi
cmp edi, dword [ecx + 0x1c]
jl 0x405783
jmp 0x406084
mov ecx, dword [ebx + 0x30]
mov esi, dword [ebx + 0x34]
xor eax, eax
test ecx, ecx
jle 0x405c82
lea edx, [esi + 0x14]
test byte [edx], 2
je 0x405c82
inc eax
add edx, 0x1c
cmp eax, ecx
jl 0x405c75
cmp eax, ecx
jge 0x405f71
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5___a_name_
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x38], 0
test eax, eax
jle 0x405f63
mov ebp, dword [esp + 0x350]
mov edi, 0x400000
test byte [esi + 0x14], 2
jne 0x405f4c
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov edx, dword [esi + 8]
lea ecx, [esp + 0x10]
push edx
call fcn.00514473
test dword [ebx + 0x14], edi
jne 0x405d2d
mov eax, dword [esi + 4]
push eax
call fcn.004c72a0
add esp, 4
cmp eax, 1
jne 0x405d2d
push 0x591db8
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edx, dword [esi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.004c6fe0
add esp, 8
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.00514702
push 0x591dbc
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_70___valign_top__
push ecx
lea ecx, [esp + 0x2c]
call fcn.00470f10
lea ecx, [esp + 0x10]
call fcn.005142c1
test dword [ebx + 0x14], edi
jne 0x405d79
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push ebp
push 0
lea edx, [esp + 0x18]
push 0
push edx
push eax
push 0
call fcn.00462a80
push 0x56d314
lea ecx, [esp + 0x14]
call fcn.005146c6
test dword [ebx + 0x14], edi
je 0x405d8f
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0xf4]
push ecx
push 0x56d138
push edx
jmp 0x405e6c
test byte [esi + 0x14], 1
je 0x405eef
mov eax, dword [esi]
cmp eax, 0x80000301
ja 0x405e42
je 0x405e5b
cmp eax, 0x80000101
ja 0x405e23
je 0x405e0e
cmp eax, 0x80000002
je 0x405df9
cmp eax, 0x80000004
jne 0x405eef
push 0x56c894
lea ecx, [esp + 0x20]
call fcn.00514473
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x1c]
push eax
call fcn.005146c6
push 0x56c880
lea ecx, [esp + 0x20]
call fcn.005146c6
mov eax, dword [esp + 0x1c]
jmp 0x405e7c
mov eax, dword [esi + 0x18]
test eax, eax
je 0x405e07
mov eax, 0x56c87c
jmp 0x405e7c
mov eax, 0x56c878
jmp 0x405e7c
xor ecx, ecx
lea edx, [esp + 0xf4]
mov cl, byte [esi + 0x18]
push ecx
push 0x56d130
push edx
jmp 0x405e6c
cmp eax, 0x80000201
jne 0x405eef
movsx eax, word [esi + 0x18]
push eax
lea ecx, [esp + 0xf8]
push 0x56d138
push ecx
jmp 0x405e6c
cmp eax, 0x80000401
je 0x405e5b
cmp eax, 0x80000501
je 0x405e5b
cmp eax, 0x80000601
jne 0x405eef
mov edx, dword [esi + 0x18]
lea eax, [esp + 0xf4]
push edx
push 0x56d138
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
test eax, eax
je 0x405eef
mov ecx, dword [ebx + 0x14]
push eax
test edi, ecx
je 0x405eba
lea ecx, [esp + 0x78]
push 0x56d120
push ecx
call fcn.004dd760
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xc
call fcn.00514702
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x74]
jmp 0x405eea
lea edx, [esp + 0x74]
push 0x56d110
push edx
call fcn.004dd760
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xd
call fcn.00514702
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x70]
call fcn.00514336
mov eax, dword [esi + 0x10]
push eax
call fcn.00471980
add esp, 4
test eax, eax
jne 0x405f39
mov ecx, dword [esi + 0x10]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405f39
lea edx, [esp + 0x10]
push edx
call fcn.004dba40
add esp, 4
test eax, eax
jne 0x405f39
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00514702
mov ecx, dword [esp + 0x10]
push str.__td__r_n__tr__r_n
push ecx
lea ecx, [esp + 0x2c]
call fcn.00470f10
mov eax, dword [esp + 0x38]
mov ecx, dword [ebx + 0x30]
inc eax
add esi, 0x1c
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x405cb7
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x406076
push 0x56d6e0
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00406f10
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x406068
mov ebp, dword [esp + 0x348]
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp + 0x68]
mov eax, dword [eax + edi*4]
lea ecx, [eax + eax*8]
mov al, byte [edx + ecx*4 + 0xe]
test al, 0xc
lea esi, [edx + ecx*4]
jne 0x40605c
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0xc0]
call fcn.0044e070
push eax
push esi
push ebp
call fcn.004dbcb0
add esp, 0xc
test eax, eax
je 0x40605c
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0xf4]
mov edx, dword [ecx + edi*4]
push edx
push str.cmd_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edx, dword [esi]
lea ecx, [esp + 0x10]
push edx
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.00406f40
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x405fac
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00406fb0
push 0x56d0c0
lea ecx, [esp + 0x28]
call fcn.00470ee0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xf4]
push eax
push str.dt_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [esp + 0xf4]
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x64]
push edx
push eax
push ecx
call fcn.0051457f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xe
call fcn.00471240
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.00514336
add dword [esp + 0x44], 0x38
jmp 0x4060f9
add ebx, 0x38
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0x348]
mov eax, dword [esp + 0x14]
inc eax
mov ecx, dword [edx + 0x54]
mov dword [esp + 0x14], eax
cmp eax, ecx
jl 0x404e0c
mov ebp, dword [esp + 0x348]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x14], 0
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x4062d1
mov ecx, dword [esp + 0x20]
xor edi, edi
mov dword [esp + 0x34], edi
lea eax, [ecx + 4]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
call fcn.00470f60
mov edx, dword [ebp + 0x24]
push str.__a___p_
push edx
push str.__font_nbsp_font_color_000000__
lea ecx, [esp + 0x30]
call fcn.00470f30
mov esi, dword [ebp + 0x68]
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00406f10
mov eax, dword [ebp + 0x64]
test eax, eax
jle 0x40623b
test byte [esi + 0xe], 0xc
jne 0x40622c
lea ecx, [ebx + 0xc0]
call fcn.0044e070
push eax
push esi
push ebp
call fcn.004dbcb0
add esp, 0xc
test eax, eax
je 0x40622c
movsx ecx, word [esi + 0xc]
mov eax, dword [esp + 0x14]
dec ecx
cmp ecx, eax
jne 0x40622c
push edi
lea edx, [esp + 0xf8]
push str.cmd_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00406f40
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x40618c
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00406fb0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov esi, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push esi
push str.ct_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x64]
push eax
push ecx
push edx
call fcn.0051457f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xf
call fcn.00471240
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.00514336
mov edi, dword [esp + 0x20]
push edi
call fcn.00471ab0
add esp, 4
add edi, eax
mov eax, dword [ebp + 0x5c]
inc esi
cmp esi, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], esi
jl 0x406139
mov eax, dword [ebp + 0x24]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
mov dword [esp + 0x44], 0
call fcn.00470f60
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push eax
push ecx
lea edx, [esp + 0xfc]
push 0x56cfcc
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x24]
push str.__font___big___big___strong_nbsp_nbsp_nbsp__a_href_.._index.htm__
push eax
call fcn.00470f10
mov ecx, dword [ebp + 0x2c]
push ecx
call fcn.00471980
add esp, 4
test eax, eax
jne 0x406382
mov edx, dword [ebp + 0x2c]
lea ecx, [esp + 0x10]
push edx
call fcn.00514473
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40636f
lea eax, [esp + 0x10]
push eax
call fcn.004dba40
add esp, 4
test eax, eax
jne 0x40636f
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.00514702
mov edx, dword [esp + 0x10]
push str.__p__p_
push edx
lea ecx, [esp + 0x2c]
call fcn.00470f10
lea ecx, [esp + 0x10]
call fcn.005142c1
push 0
push 0
push 0
push 0
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.004dbcf0
mov ecx, dword [esp + 0x28]
add esp, 0x18
push str.__p__p_
push ecx
push 0x56cf58
lea ecx, [esp + 0x30]
call fcn.00470f30
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x406481
push str._big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov esi, dword [ebp + 0x60]
lea edx, [esp + 0x24]
push edx
mov ecx, ebx
call fcn.00406f10
mov eax, dword [ebp + 0x5c]
xor edi, edi
test eax, eax
jle 0x406475
push edi
lea eax, [esp + 0xf8]
push str.ct_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
lea edx, [esi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebx
call fcn.00406f40
push esi
call fcn.00471ab0
add esp, 4
add esi, eax
mov eax, dword [ebp + 0x5c]
inc edi
cmp edi, eax
jl 0x4063ee
lea edx, [esp + 0x24]
mov ecx, ebx
push edx
call fcn.00406fb0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x406582
mov eax, dword [esi + 0x14]
test al, 3
jne 0x40655f
test al, 0x40
je 0x40655f
lea ecx, [ebx + 0xc0]
call fcn.0044e070
push eax
push esi
push ebp
call fcn.004dbc50
add esp, 0xc
test eax, eax
je 0x40655f
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4064e8
push 0x56cebc
lea ecx, [esp + 0x28]
call fcn.00470ee0
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00406f10
push edi
lea ecx, [esp + 0xf8]
push str.dt_d.htm
push ecx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, ebx
call fcn.00406f40
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406495
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406582
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00406fb0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x40667a
test byte [esi + 0x14], 0x43
jne 0x406657
lea ecx, [ebx + 0xc0]
call fcn.0044e070
push eax
push esi
push ebp
call fcn.004dbc50
add esp, 0xc
test eax, eax
je 0x406657
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4065e0
push 0x56ce6c
lea ecx, [esp + 0x28]
call fcn.00470ee0
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00406f10
push edi
lea edx, [esp + 0xf8]
push str.dt_d.htm
push edx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x56d920
call fcn.00514473
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005146c6
push 0x56d91c
lea ecx, [esp + 0x14]
call fcn.005146c6
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005146c6
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00406f40
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406596
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40667a
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00406fb0
mov eax, dword [ebp + 0x84]
test eax, eax
jle 0x406692
push str._p__big__a_href_const.htm___strong_
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov edx, dword [ebp + 0x74]
push edx
call fcn.00471980
add esp, 4
test eax, eax
jne 0x40670b
push str._p__big__strong__br___
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov esi, dword [ebp + 0x74]
mov al, byte [esi]
test al, al
je 0x4066fd
cmp al, 0x40
jne 0x4066be
inc esi
push str.__td__td_width_78___
push esi
push str._tr__td_width_22___
lea ecx, [esp + 0x30]
call fcn.00470f30
push esi
call fcn.00471ab0
add esp, 4
add esi, eax
lea ecx, [esp + 0x24]
push str.nbsp__td___tr__r_n
push esi
call fcn.00470f10
push esi
call fcn.00471ab0
add esi, eax
add esp, 4
mov al, byte [esi]
test al, al
jne 0x4066b9
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.00470ee0
push 0x56cc74
lea eax, [esp + 0x80]
push 0x5927a4
push eax
call fcn.0051457f
push 0x56c47c
lea ecx, [esp + 0x7c]
push eax
push ecx
mov byte [esp + 0x34c], 0x10
call fcn.0051457f
mov edx, dword [esp + 0x34c]
mov byte [esp + 0x340], 0x11
push edx
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.0051457f
push 0x56c47c
lea ecx, [esp + 0x74]
push eax
push ecx
mov byte [esp + 0x34c], 0x12
call fcn.0051457f
push str.samples
lea edx, [esp + 0x68]
push eax
push edx
mov byte [esp + 0x34c], 0x13
call fcn.0051457f
push 0x56c47c
push eax
lea eax, [esp + 0x70]
mov byte [esp + 0x348], 0x14
push eax
call fcn.0051457f
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 0x1a
call fcn.00514336
lea ecx, [esp + 0x70]
mov byte [esp + 0x340], 0x19
call fcn.00514336
lea ecx, [esp + 0x74]
mov byte [esp + 0x340], 0x18
call fcn.00514336
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 0x17
call fcn.00514336
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 0x16
call fcn.00514336
lea ecx, [esp + 0x68]
push 0x56cc68
lea edx, [esp + 0x44]
xor edi, edi
push ecx
push edx
mov dword [esp + 0x2c], edi
call fcn.0051457f
mov eax, dword [eax]
lea ecx, [esp + 0x1f8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], esi
call fcn.00514336
cmp esi, 0xffffffff
je 0x406caf
mov eax, dword [0x58f614]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x24
call fcn.005142c1
lea ecx, [esp + 0x8c]
call fcn.005142c1
lea ecx, [esp + 0x90]
call fcn.005142c1
lea ecx, [esp + 0x94]
call fcn.005142c1
lea ecx, [esp + 0x98]
call fcn.005142c1
lea ecx, [esp + 0x9c]
call fcn.005142c1
lea ecx, [esp + 0xa0]
call fcn.005142c1
lea ecx, [esp + 0xa4]
call fcn.005142c1
lea ecx, [esp + 0xa8]
call fcn.005142c1
lea ecx, [esp + 0xac]
call fcn.005142c1
lea edx, [esp + 0xb8]
push 0x28
push edx
mov dword [esp + 0xb8], 1
mov dword [esp + 0xbc], edi
call fcn.00471a60
add esp, 8
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x340], 0x25
call fcn.00445130
mov eax, dword [0x58f614]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
call fcn.00470b30
mov byte [esp + 0x340], 0x27
lea ecx, [esp + 0x224]
lea edx, [esp + 0x68]
push ecx
lea eax, [esp + 0x44]
push edx
push eax
call fcn.0051457f
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x344], 0x28
call fcn.00514423
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x27
call fcn.00514336
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1bc]
lea edx, [esp + 0x88]
push ecx
push edx
push eax
call fcn.004493b0
add esp, 0xc
cmp eax, 1
jne 0x406b83
mov ecx, dword [esp + 0x88]
mov eax, dword [ecx - 8]
test eax, eax
je 0x406b83
lea ecx, [ebx + 0xc0]
call fcn.0044e070
lea ecx, [esp + 0x1bc]
mov edi, eax
call fcn.004450f0
test eax, edi
je 0x406b83
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x406a0e
push 0x56cae0
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov dword [esp + 0x20], 1
mov edx, dword [esp + 0x88]
push str.__td__td_width_30___
push edx
push str._tr__td_width_20___
lea ecx, [esp + 0x30]
call fcn.00470f30
push str._a_href_.._.._lib_
lea ecx, [esp + 0x14]
call fcn.00514473
mov eax, dword [esp + 0x34c]
lea ecx, [esp + 0x10]
push eax
call fcn.005146c6
push str._samples_
lea ecx, [esp + 0x14]
call fcn.005146c6
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x224]
push ecx
lea edx, [esp + 0x228]
push 0x56d91c
push edx
push eax
lea ecx, [esp + 0x34]
call fcn.00470f60
push str.__a_
lea ecx, [esp + 0x28]
call fcn.00470ee0
lea ecx, [esp + 0x14]
push 0x56ca8c
push ecx
call fcn.004dc130
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0xe0]
push 0xffffffffffffffff
push edx
call fcn.004710f0
cmp eax, 0xffffffff
je 0x406b64
xor edi, edi
lea eax, [esp + 0x14]
lea ecx, [esp + 0xe0]
push eax
push edi
call fcn.00471620
mov edi, eax
cmp edi, 0xffffffff
je 0x406b64
lea ecx, [esp + 0x14]
call fcn.00510d92
lea ecx, [esp + 0x14]
call fcn.00510d46
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
test eax, eax
je 0x406ab7
lea edx, [esp + 0x14]
lea eax, [esp + 0x68]
push edx
lea ecx, [esp + 0x70]
push eax
push ecx
call fcn.00514519
mov eax, dword [eax]
mov byte [esp + 0x340], 0x29
push eax
call fcn.004dc040
add esp, 4
lea ecx, [esp + 0x6c]
mov esi, eax
mov byte [esp + 0x340], 0x27
call fcn.00514336
test esi, esi
je 0x406ab7
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0x56d91c
push edx
push eax
push str._br___
lea ecx, [esp + 0x34]
call fcn.00470f60
mov ecx, dword [esp + 0x14]
push str.__a_
push ecx
lea ecx, [esp + 0x2c]
call fcn.00470f10
jmp 0x406ab7
mov edx, dword [esp + 0x8c]
push str.nbsp__td___tr__r_n
push edx
push str.__td__td_width_50___
lea ecx, [esp + 0x30]
call fcn.00470f30
mov esi, dword [esp + 0x48]
lea eax, [esp + 0x1f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40695d
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406bb7
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.00470ee0
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
mov dword [esp + 0xe0], 0x5477b0
call fcn.00470d30
lea ecx, [esp + 0x14]
mov byte [esp + 0x340], 0x25
call fcn.00514336
lea ecx, [esp + 0xac]
mov byte [esp + 0x340], 0x32
call fcn.00514336
lea ecx, [esp + 0xa8]
mov byte [esp + 0x340], 0x31
call fcn.00514336
lea ecx, [esp + 0xa4]
mov byte [esp + 0x340], 0x30
call fcn.00514336
lea ecx, [esp + 0xa0]
mov byte [esp + 0x340], 0x2f
call fcn.00514336
lea ecx, [esp + 0x9c]
mov byte [esp + 0x340], 0x2e
call fcn.00514336
lea ecx, [esp + 0x98]
mov byte [esp + 0x340], 0x2d
call fcn.00514336
lea ecx, [esp + 0x94]
mov byte [esp + 0x340], 0x2c
call fcn.00514336
lea ecx, [esp + 0x90]
mov byte [esp + 0x340], 0x2b
call fcn.00514336
lea ecx, [esp + 0x8c]
mov byte [esp + 0x340], 0x2a
call fcn.00514336
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x16
call fcn.00514336
lea ecx, [esp + 0x3c]
push str.index.htm
lea edx, [esp + 0x44]
push ecx
push edx
call fcn.0051457f
xor edi, edi
lea ecx, [esp + 0x24]
push edi
push 0xffffffffffffffff
push eax
mov byte [esp + 0x34c], 0x33
call fcn.00471240
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.00514336
push str._table_border1_cols3_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x28]
mov dword [esp + 0x38], edi
call fcn.00470ee0
mov eax, dword [ebp + 0x84]
mov esi, dword [ebp + 0x88]
test eax, eax
jle 0x406dd1
test edi, edi
jne 0x406d23
push str._tr__r_n_td_width_25____strong_
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov eax, dword [esi]
push str.__font___td__td_width_25____font_color_000000__
push eax
push str._tr__td_width_25____font_color_000000__
lea ecx, [esp + 0x30]
call fcn.00470f30
lea ecx, [esp + 0x10]
push ecx
push esi
mov ecx, ebx
call fcn.00404bb0
mov edx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_50___
push edx
lea ecx, [esp + 0x2c]
call fcn.00470f10
mov eax, dword [esi + 8]
push eax
call fcn.00471980
add esp, 4
test eax, eax
jne 0x406db1
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.00514473
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406da3
lea edx, [esp + 0x10]
push edx
call fcn.004dba40
add esp, 4
test eax, eax
jne 0x406da3
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00514702
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.00470ee0
push str.__td___tr__r_n
lea ecx, [esp + 0x28]
call fcn.00470ee0
mov eax, dword [ebp + 0x84]
add esi, 0x20
inc edi
cmp edi, eax
jl 0x406d11
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.00470ee0
lea edx, [esp + 0x3c]
push str.const.htm
lea eax, [esp + 0x44]
push edx
push eax
call fcn.0051457f
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0x34
call fcn.00471240
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.00514336
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x68]
xor edi, edi
test eax, eax
jle 0x406e68
test byte [esi + 0xe], 0xc
jne 0x406e5d
lea ecx, [ebx + 0xc0]
call fcn.0044e070
push eax
push esi
push ebp
call fcn.004dbcb0
add esp, 0xc
test eax, eax
je 0x406e5d
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x3c]
push ecx
push edx
push edi
push esi
push ebp
mov ecx, ebx
call fcn.00407020
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x406e26
lea ecx, [esp + 0x68]
mov byte [esp + 0x340], 9
call fcn.00514336
lea ecx, [esp + 0x60]
mov byte [esp + 0x340], 8
call fcn.00514336
lea ecx, [esp + 0x1c]
mov byte [esp + 0x340], 7
call fcn.00514336
lea ecx, [esp + 0x10]
mov byte [esp + 0x340], 6
call fcn.00514336
mov esi, 0x5477b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
mov dword [esp + 0x4c], esi
call fcn.00470d30
lea ecx, [esp + 0x24]
mov byte [esp + 0x340], 3
mov dword [esp + 0x24], esi
call fcn.00470d30
lea ecx, [esp + 0x3c]
mov dword [esp + 0x340], 0xffffffff
call fcn.00514336
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x334
ret 0xc