Function at 0x407030
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x539e02
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf0
push ebx
push ebp
mov dword [esp + 0x2c], ecx
push esi
push edi
lea ecx, [esp + 0x18]
call fcn.00473490
mov eax, dword [0x596a0c]
mov dword [esp + 0x108], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
push 0x574b24
lea ecx, [esp + 0x30]
mov byte [esp + 0x10c], 2
call fcn.005199e4
mov ebx, dword [esp + 0x114]
mov edi, dword [esp + 0x110]
mov byte [esp + 0x108], 3
cmp word [ebx + 0xc], 0xffff
jne 0x4070e5
mov eax, dword [edi + 0x54]
mov ebp, dword [edi + 0x58]
xor esi, esi
test eax, eax
jle 0x4070db
mov eax, dword [esp + 0x118]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
push eax
push ecx
push edx
call fcn.004742c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4070db
mov eax, dword [edi + 0x54]
add ebp, 0x38
inc esi
cmp esi, eax
jl 0x4070b3
cmp esi, dword [edi + 0x54]
jl 0x4070ed
jmp 0x407725
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x30]
mov eax, dword [ebx]
lea ecx, [esp + 0x18]
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
call fcn.00473870
cmp word [ebx + 0xc], 0xffff
jne 0x40711c
mov ecx, dword [ebp]
push 0x574644
push ecx
push 0x574910
lea ecx, [esp + 0x24]
call fcn.00473890
mov edx, dword [ebx]
push str.__font___big_nbsp_
push edx
push str.__title__r_n__head__r_n_body__r_n_p__big__strong__font_color_000000__
lea ecx, [esp + 0x24]
call fcn.00473890
cmp word [ebx + 0xc], 0xffff
jne 0x407140
push 0x574ee0
jmp 0x407145
push 0x574ed8
lea ecx, [esp + 0x1c]
call fcn.00473840
lea ecx, [esp + 0x10]
call fcn.00519901
push 0
push 0
push ebx
push 0
lea eax, [esp + 0x20]
push edi
push eax
call fcn.004de680
mov ecx, dword [esp + 0x28]
add esp, 0x18
push ecx
push str.__strong_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x20]
call fcn.00473870
mov ax, word [ebx + 0xc]
cmp ax, 0xffff
je 0x4071d8
movsx esi, ax
dec esi
lea edx, [esp + 0x38]
push esi
push str.ct_d.htm__
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x38]
lea ecx, [esp + 0x18]
push eax
push str.nbsp_nbsp_nbsp_
call fcn.00473870
mov edi, dword [edi + 0x60]
test esi, esi
jle 0x4071c9
push edi
call fcn.00474410
add esp, 4
add edi, eax
dec esi
jne 0x4071bb
add edi, 4
lea ecx, [esp + 0x18]
push edi
call fcn.00473840
jmp 0x407203
push esi
lea ecx, [esp + 0x3c]
push str.dt_d.htm__
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebp]
add esp, 0xc
lea eax, [esp + 0x38]
lea ecx, [esp + 0x18]
push edx
push eax
push 0x574e7c
call fcn.00473890
push str.__a___p__r_n_p_
lea ecx, [esp + 0x1c]
call fcn.00473840
xor esi, esi
cmp word [ebx + 0x16], 3
jne 0x40722d
push 0x574e48
lea ecx, [esp + 0x1c]
call fcn.00473840
mov esi, 1
test byte [ebx + 0xe], 0x10
je 0x407246
push 0x574e0c
lea ecx, [esp + 0x1c]
call fcn.00473840
mov esi, 1
mov ecx, dword [ebx + 8]
push ecx
call fcn.004742e0
add esp, 4
test eax, eax
jne 0x4072ba
cmp esi, 1
jne 0x407269
push str._br_
lea ecx, [esp + 0x1c]
call fcn.00473840
mov edx, dword [ebx + 8]
lea ecx, [esp + 0x14]
push edx
call fcn.00519ab3
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x4072a3
lea eax, [esp + 0x14]
push eax
call fcn.004de3d0
add esp, 4
test eax, eax
jne 0x4072a3
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x18]
call fcn.00519d42
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push edx
call fcn.00473840
lea ecx, [esp + 0x14]
call fcn.00519901
push str.__p__r_n_p__em_
lea ecx, [esp + 0x1c]
call fcn.00473840
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x4072d6
push 0x574530
jmp 0x40730c
mov ecx, dword [esp + 0x120]
lea edx, [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x38]
push 0
push 0
push edx
push eax
push 0
call fcn.004652a0
test byte [ebx + 0xe], 0x40
je 0x407307
push 0x574dc4
lea ecx, [esp + 0x18]
call fcn.00519d06
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
call fcn.00473840
push str.__font_nbsp_
lea ecx, [esp + 0x1c]
call fcn.00473840
cmp word [ebx + 0xc], 0xffff
jne 0x407360
push str._em_
lea ecx, [esp + 0x1c]
call fcn.00473840
test byte [ebp + 0x14], 0x10
je 0x407345
push 0x574a40
jmp 0x407349
mov ecx, dword [ebp]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00473840
push str.__em_
lea ecx, [esp + 0x1c]
call fcn.00473840
mov edx, dword [ebx]
push 0x574518
push edx
lea ecx, [esp + 0x20]
call fcn.00473870
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x4073d8
xor ebp, ebp
mov ecx, dword [ebx + 0x20]
mov esi, ebp
add esi, ecx
lea ecx, [esp + 0x14]
call fcn.00519901
test byte [esi + 0x14], 2
je 0x4073a1
mov eax, dword [esi]
push str.__font__font_color_000000__
push eax
push str._font_color_000000__
jmp 0x4073ae
mov ecx, dword [esi]
push 0x574508
push ecx
push 0x5744f0
lea ecx, [esp + 0x24]
call fcn.00473890
mov edx, dword [ebx + 0x1c]
dec edx
cmp edi, edx
je 0x4073cd
push 0x5744c8
lea ecx, [esp + 0x1c]
call fcn.00473840
mov eax, dword [ebx + 0x1c]
inc edi
add ebp, 0x18
cmp edi, eax
jl 0x40737c
test byte [ebx + 0xe], 0x20
je 0x4073ec
push 0x574cfc
lea ecx, [esp + 0x1c]
call fcn.00473840
push 0x5744a0
lea ecx, [esp + 0x1c]
call fcn.00473840
mov eax, dword [ebx + 0x1c]
test eax, eax
jle 0x40740f
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x1c]
call fcn.00473840
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x4076be
test edi, edi
jne 0x40742e
push str._tr__r_n_td_width_30___valign_top___strong_
lea ecx, [esp + 0x1c]
call fcn.00473840
mov ecx, dword [ebx + 0x20]
lea eax, [edi + edi*2]
push str.__font___td__r_n_td_width_70___valign_top__
mov edx, dword [ecx + eax*8]
lea esi, [ecx + eax*8]
push edx
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x24]
call fcn.00473890
push str._em_
lea ecx, [esp + 0x14]
call fcn.00519ab3
test byte [esi + 0x14], 2
je 0x407469
push str._font_color_808080__
jmp 0x40746e
push 0x574cd0
lea ecx, [esp + 0x14]
call fcn.00519d06
push 0x574cc8
lea ecx, [esp + 0x14]
call fcn.00519d06
push 0x574314
lea ecx, [esp + 0x14]
call fcn.00519d06
mov eax, dword [ebx + 0x1c]
dec eax
cmp edi, eax
jne 0x4074af
test byte [ebx + 0xe], 0x20
je 0x4074af
push 0x574cb4
lea ecx, [esp + 0x14]
call fcn.00519d06
mov ecx, dword [esp + 0x120]
mov eax, dword [esi + 0xc]
push ecx
mov ecx, dword [esp + 0x38]
push 0
lea edx, [esp + 0x1c]
push 0
push edx
push eax
push 0
call fcn.004652a0
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
call fcn.00519d42
test byte [esi + 0x14], 1
je 0x4075cb
mov eax, dword [esi + 0xc]
cmp eax, 0x80000201
ja 0x407556
je 0x407545
cmp eax, 0x80000004
ja 0x407528
je 0x407523
cmp eax, 0x80000000
je 0x407576
cmp eax, 0x80000002
jne 0x4075cb
mov eax, dword [esi + 0x10]
test eax, eax
je 0x40751c
mov eax, 0x57387c
jmp 0x407591
mov eax, 0x573878
jmp 0x407591
mov eax, dword [esi + 0x10]
jmp 0x407591
cmp eax, 0x80000101
jne 0x4075cb
xor edx, edx
lea eax, [esp + 0x38]
mov dl, byte [esi + 0x10]
push edx
push 0x574cb0
push eax
jmp 0x407584
movsx ecx, word [esi + 0x10]
push ecx
lea edx, [esp + 0x3c]
push 0x5747b4
push edx
jmp 0x407584
cmp eax, 0x80000501
ja 0x40756f
je 0x407576
cmp eax, 0x80000301
je 0x407576
cmp eax, 0x80000401
je 0x407576
jmp 0x4075cb
cmp eax, 0x80000601
jne 0x4075cb
mov eax, dword [esi + 0x10]
lea ecx, [esp + 0x38]
push eax
push 0x5747b4
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x38]
test eax, eax
je 0x4075cb
push eax
lea edx, [esp + 0x34]
push 0x574c9c
push edx
call fcn.004e0100
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x10c], 4
call fcn.00519d42
lea ecx, [esp + 0x30]
mov byte [esp + 0x108], 3
call fcn.00519976
mov eax, dword [esi + 0x14]
test al, 0x1c
je 0x4075f6
test al, 8
je 0x4075dd
push 0x574c80
jmp 0x4075ed
test al, 0x10
je 0x4075e8
push 0x574c5c
jmp 0x4075ed
push 0x574c44
lea ecx, [esp + 0x14]
call fcn.00519d06
mov eax, dword [esi + 0x14]
test al, 0x40
je 0x407604
push 0x574c1c
jmp 0x40760d
test al, 0x20
je 0x407616
push 0x574c00
lea ecx, [esp + 0x14]
call fcn.00519d06
mov eax, dword [esp + 0x10]
mov ecx, dword [eax - 8]
cmp byte [ecx + eax - 1], 0x20
jb 0x407643
lea eax, [esp + 0x10]
push eax
call fcn.004de3d0
add esp, 4
test eax, eax
jne 0x407643
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x14]
call fcn.00519d42
mov edx, dword [esi + 4]
push edx
call fcn.004742e0
add esp, 4
test eax, eax
jne 0x40768d
mov eax, dword [esi + 4]
lea ecx, [esp + 0x10]
push eax
call fcn.00519d06
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40768d
lea ecx, [esp + 0x10]
push ecx
call fcn.004de3d0
add esp, 4
test eax, eax
jne 0x40768d
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x10]
push edx
call fcn.00519d42
mov eax, dword [esp + 0x10]
push str.__td__r_n__tr__r_n
push eax
lea ecx, [esp + 0x20]
call fcn.00473870
mov eax, dword [ebx + 0x1c]
inc edi
cmp edi, eax
jl 0x40741c
test eax, eax
jle 0x4076be
push str.__table__r_n
lea ecx, [esp + 0x1c]
call fcn.00473840
push 0x574264
lea ecx, [esp + 0x1c]
call fcn.00473840
mov ecx, dword [esp + 0x118]
lea edx, [esp + 0x38]
push ecx
push str.cmd_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esp + 0x128]
add esp, 0xc
lea eax, [esp + 0x38]
lea edx, [esp + 0x30]
push eax
push ecx
push edx
call fcn.00519bbf
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x114], 5
call fcn.00473ba0
lea ecx, [esp + 0x30]
mov byte [esp + 0x108], 3
call fcn.00519976
lea ecx, [esp + 0x2c]
mov byte [esp + 0x108], 2
call fcn.00519976
lea ecx, [esp + 0x14]
mov byte [esp + 0x108], 1
call fcn.00519976
lea ecx, [esp + 0x10]
mov byte [esp + 0x108], 0
call fcn.00519976
lea ecx, [esp + 0x18]
mov dword [esp + 0x108], 0xffffffff
mov dword [esp + 0x18], 0x54d7d0
call fcn.00473690
mov ecx, dword [esp + 0x100]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xfc
ret 0x14