Function at 0x408dd0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4114f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfc
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x120]
xor ebp, ebp
mov esi, ecx
push edi
mov dword [esp + 0x30], ebp
call fcn.004094f0
lea ecx, [esp + 0xf4]
call fcn.00407a00
lea ecx, [esp + 0x14]
mov dword [esp + 0x114], 1
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x10]
mov byte [esp + 0x114], 2
call sub.MFC42.DLL_CString::CString_1
push 0x41649c
lea ecx, [esp + 0x18]
mov byte [esp + 0x118], 3
call fcn.0040fc42
push 0x416534
lea ecx, [esp + 0x14]
call fcn.0040fc42
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push edi
lea ecx, [esp + 0x100]
call fcn.00408660
push str.style
lea ecx, [esp + 0x18]
call fcn.0040fc42
push str._style
lea ecx, [esp + 0x14]
call fcn.0040fc42
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push edi
lea ecx, [esp + 0x100]
call fcn.00408820
push str.select
lea ecx, [esp + 0x18]
call fcn.0040fc42
push str._select
lea ecx, [esp + 0x14]
call fcn.0040fc42
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push edi
lea ecx, [esp + 0x100]
call fcn.00408820
push str.iframe
lea ecx, [esp + 0x18]
call fcn.0040fc42
push str._iframe
lea ecx, [esp + 0x14]
call fcn.0040fc42
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push edi
lea ecx, [esp + 0x100]
call fcn.00408820
push str.noscript
lea ecx, [esp + 0x18]
call fcn.0040fc42
push str._noscript
lea ecx, [esp + 0x14]
call fcn.0040fc42
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push edi
lea ecx, [esp + 0x100]
call fcn.00408820
push str.script
lea ecx, [esp + 0x18]
call fcn.0040fc42
push str._script
lea ecx, [esp + 0x14]
call fcn.0040fc42
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push edi
lea ecx, [esp + 0x100]
call fcn.00408820
push 0x417b20
lea ecx, [esi + 0xc]
mov dword [esi + 8], ebp
call fcn.0040fc42
lea ebx, [esi + 0x10]
push edi
mov ecx, ebx
call sub.MFC42.DLL_CString::operator_1
push 0x417b20
lea ecx, [esi + 0x14]
call fcn.0040fc42
push 0x417b20
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::CString_2
mov byte [esp + 0x114], 4
mov dword [esi + 4], ebp
lea eax, [esp + 0x1c]
mov ecx, esi
push eax
call fcn.00407ae0
cmp eax, ebp
je 0x408ff3
cmp eax, 1
jne 0x408fce
mov ecx, esi
call fcn.00407cf0
jmp 0x408fb0
mov ecx, dword [esp + 0x1c]
push str.body
push ecx
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
mov ecx, esi
test eax, eax
je 0x408fee
call fcn.00407cc0
jmp 0x408fb0
call fcn.00407cc0
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString_1
mov byte [esp + 0x114], 5
mov edi, dword [esi + 8]
lea edx, [esp + 0x1c]
mov ecx, esi
push edx
call fcn.00407ae0
cmp eax, ebp
je 0x4093e6
cmp eax, 1
jne 0x40908b
mov ecx, esi
call fcn.00407cf0
mov eax, dword [esi + 8]
lea ecx, [esp + 0x28]
sub eax, edi
push eax
push edi
push ecx
mov ecx, ebx
call sub.MFC42.DLL_CString::Mid
push eax
lea edx, [esp + 0x1c]
lea eax, [esp + 0x34]
push edx
push eax
mov byte [esp + 0x120], 8
call sub.MFC42.DLL_operator_1
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x118], 9
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x30]
mov byte [esp + 0x114], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0x114], 5
call sub.MFC42.DLL_CString::CString
jmp 0x409004
mov ecx, dword [0x4164f0]
mov eax, dword [str.table]
mov dword [esp + 0x34], ecx
mov cx, word [0x416488]
mov word [esp + 0x42], cx
xor ecx, ecx
mov dword [esp + 0x4b], ecx
xor edx, edx
mov word [esp + 0x4f], cx
mov dword [esp + 0x3e], eax
mov al, byte [0x416482]
mov byte [esp + 0x51], cl
mov dword [esp + 0x55], ecx
mov dword [esp + 0x38], edx
mov word [esp + 0x59], cx
mov byte [esp + 0x4a], al
mov al, byte [0x416562]
mov byte [esp + 0x5b], cl
mov dword [esp + 0x5f], ecx
mov word [esp + 0x3c], dx
mov dx, word [0x416480]
mov word [esp + 0x63], cx
mov byte [esp + 0x65], cl
mov dword [esp + 0x69], ecx
mov byte [esp + 0x54], al
mov al, byte [0x41655e]
mov word [esp + 0x6d], cx
mov word [esp + 0x48], dx
mov dx, word [0x416560]
mov byte [esp + 0x6f], cl
mov byte [esp + 0x5e], al
mov al, byte [0x41655a]
mov dword [esp + 0x73], ecx
mov word [esp + 0x52], dx
mov dx, word [0x41655c]
mov word [esp + 0x77], cx
mov byte [esp + 0x68], al
mov al, byte [0x416556]
mov word [esp + 0x5c], dx
mov dx, word [0x416558]
mov byte [esp + 0x79], cl
mov dword [esp + 0x7d], ecx
mov byte [esp + 0x72], al
mov al, byte [0x416552]
mov word [esp + 0x66], dx
mov dx, word [0x416554]
mov word [esp + 0x81], cx
mov byte [esp + 0x7c], al
mov al, byte [0x41646e]
mov byte [esp + 0x83], cl
mov word [esp + 0x70], dx
mov dx, word [0x416550]
mov dword [esp + 0x87], ecx
mov byte [esp + 0x86], al
mov word [esp + 0x8b], cx
mov word [esp + 0x7a], dx
mov dx, word [0x41646c]
xor eax, eax
mov byte [esp + 0x8d], cl
mov ecx, dword [str._table]
mov dword [esp + 0x90], eax
mov word [esp + 0x84], dx
mov dx, word [0x416470]
mov dword [esp + 0x94], eax
mov al, byte [0x41647e]
mov dword [esp + 0x98], ecx
xor ecx, ecx
mov word [esp + 0x8e], dx
mov dx, word [0x41647c]
mov byte [esp + 0x9e], al
mov word [esp + 0x9f], cx
xor eax, eax
mov word [esp + 0x9c], dx
mov edx, dword [0x416474]
mov byte [esp + 0xa1], cl
mov ecx, dword [0x41654c]
mov dword [esp + 0xa6], eax
mov dword [esp + 0x44], ebp
mov dword [esp + 0xa2], edx
mov word [esp + 0xaa], ax
mov dword [esp + 0xac], ecx
mov eax, dword [0x416548]
xor edx, edx
mov dword [esp + 0xb0], edx
xor ecx, ecx
mov word [esp + 0xb4], dx
mov edx, dword [0x416544]
mov dword [esp + 0xba], ecx
mov dword [esp + 0xc0], edx
mov word [esp + 0xbe], cx
mov ecx, dword [0x416540]
mov dword [esp + 0xb6], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0xca], ecx
mov dword [esp + 0xce], edx
xor ecx, ecx
mov dword [esp + 0xc4], eax
mov word [esp + 0xd2], dx
mov dx, word [0x41653c]
mov dword [esp + 0xd8], ecx
mov word [esp + 0xc8], ax
mov eax, dword [0x416538]
mov word [esp + 0xdc], cx
mov word [esp + 0xde], dx
mov edx, dword [str._div]
mov dword [esp + 0xe1], ecx
mov dword [esp + 0xd4], eax
mov al, byte [0x41653e]
mov word [esp + 0xe5], cx
mov dword [esp + 0xe8], edx
mov edx, dword [esp + 0x1c]
mov byte [esp + 0xe0], al
mov al, byte [0x4164ec]
mov byte [esp + 0xe7], cl
mov dword [esp + 0xed], ecx
push 0x4164e4
push edx
mov byte [esp + 0xf4], al
mov byte [esp + 0xf9], cl
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
jne 0x40936b
lea eax, [esp + 0x18]
push 0x41632c
lea ecx, [esp + 0x28]
push eax
push ecx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x118], 0xa
call sub.MFC42.DLL_CString::operator_1
mov byte [esp + 0x114], 5
lea ecx, [esp + 0x24]
jmp 0x4093d0
xor edi, edi
lea ebp, [esp + 0x34]
mov edx, dword [esp + 0x1c]
push ebp
push edx
call dword [sym.imp.MSVCRT.dll__mbscmp]
add esp, 8
test eax, eax
je 0x40939e
inc edi
add ebp, 0xa
cmp edi, 0x13
jl 0x409371
mov ecx, esi
call fcn.00407cc0
mov edi, dword [esi + 8]
xor ebp, ebp
jmp 0x409007
lea eax, [esp + 0x18]
push 0x416030
lea ecx, [esp + 0x24]
push eax
push ecx
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x118], 0xb
call sub.MFC42.DLL_CString::operator_1
mov byte [esp + 0x114], 5
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::CString
mov ecx, esi
call fcn.00407cc0
mov edi, dword [esi + 8]
xor ebp, ebp
jmp 0x409007
mov edx, dword [esi + 8]
lea eax, [esp + 0x24]
sub edx, edi
mov ecx, ebx
push edx
push edi
push eax
call sub.MFC42.DLL_CString::Mid
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x24]
mov bl, 6
push ecx
push edx
mov byte [esp + 0x120], bl
call sub.MFC42.DLL_operator_1
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x118], 7
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x20]
mov byte [esp + 0x114], bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0x114], 5
call sub.MFC42.DLL_CString::CString
push 0x41632c
push str.nbsp_
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::Replace
mov esi, dword [esp + 0x11c]
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.0040fc1e
mov dword [esp + 0x2c], 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x114], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x114], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0x114], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x114], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xf4]
mov byte [esp + 0x114], 0
call fcn.00407a80
mov ecx, dword [esp + 0x10c]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x108
ret 8