Function at 0x404db0
Capabilities:
Contain obfuscated stackstrings
Create directory
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x54a42a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x328
push ebx
push ebp
push esi
mov dword [esp + 0x14], ecx
push edi
add ecx, 0x898
push str.help
lea eax, [esp + 0x88]
push ecx
push eax
call fcn.00528194
push 0x58948c
lea ecx, [esp + 0x84]
xor esi, esi
push eax
push ecx
mov dword [esp + 0x34c], esi
call fcn.00528194
mov edx, dword [esp + 0x34c]
mov edi, 1
push edx
push eax
lea eax, [esp + 0x44]
mov byte [esp + 0x348], 1
push eax
call fcn.00528194
lea ecx, [esp + 0x80]
mov byte [esp + 0x340], 4
call fcn.00527eff
lea ecx, [esp + 0x84]
mov byte [esp + 0x340], 3
call fcn.00527eff
mov ecx, dword [esp + 0x3c]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0x58948c
lea ecx, [esp + 0x40]
call fcn.005282db
lea ecx, [esp + 0x24]
call fcn.00477cf0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
call fcn.00477cf0
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
push 0x58ab80
lea ecx, [esp + 0x64]
mov byte [esp + 0x344], 8
call fcn.00527f6d
mov eax, dword [esp + 0x348]
mov byte [esp + 0x340], 9
mov dword [esp + 0x6c], edi
mov dword [esp + 0x40], edi
mov ecx, dword [eax + 0x54]
mov ebx, dword [eax + 0x58]
cmp ecx, esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x14], esi
jle 0x4061e4
mov edi, dword [esp + 0x18]
mov esi, eax
jmp 0x404eeb
mov esi, dword [esp + 0x348]
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
test byte [ebx + 0x14], 3
jne 0x4061c2
lea ebp, [edi + 0xc0]
mov ecx, ebp
call fcn.00453d20
push eax
push ebx
push esi
call fcn.004e5180
add esp, 0xc
test eax, eax
je 0x4061c2
mov dword [esp + 0x34], 0
mov eax, dword [ebx]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x34]
call fcn.00478120
push str.__font___big_nbsp_
lea ecx, [esp + 0x28]
call fcn.004780a0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x404f67
test al, 0x80
je 0x404f54
push 0x58aab8
jmp 0x404f79
test ah, 0x80
je 0x404f60
push 0x58aaa8
jmp 0x404f79
push 0x58aa9c
jmp 0x404f79
test eax, 0x400000
mov eax, 0x58aa88
jne 0x404f78
mov eax, 0x58aa7c
push eax
lea ecx, [esp + 0x28]
call fcn.004780a0
lea ecx, [esp + 0x10]
call fcn.00527e8a
push 0
push 0
push 0
push ebx
lea edx, [esp + 0x20]
push esi
push edx
call fcn.004e5220
mov eax, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x24]
push eax
push str.__strong_nbsp_nbsp_nbsp_
call fcn.004780d0
mov ecx, dword [esi + 0x24]
push str.__a___p__p_
push ecx
push 0x58aa14
lea ecx, [esp + 0x30]
call fcn.004780f0
mov eax, dword [ebx + 0x14]
test eax, 0x10000
je 0x404fdb
push 0x58aa00
jmp 0x404fe7
test eax, 0x20000
je 0x404ff0
push 0x58a9e8
lea ecx, [esp + 0x28]
call fcn.004780a0
mov edx, dword [ebx + 8]
push edx
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x405051
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x1c]
push eax
call fcn.00528088
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40503a
lea ecx, [esp + 0x1c]
push ecx
call fcn.004e4f70
add esp, 4
test eax, eax
jne 0x40503a
lea edx, [esp + 0x60]
lea ecx, [esp + 0x1c]
push edx
call fcn.00528317
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push eax
call fcn.004780a0
lea ecx, [esp + 0x1c]
call fcn.00527e8a
push str.__p__r_n
lea ecx, [esp + 0x28]
call fcn.004780a0
test dword [ebx + 0x14], 0x800044
je 0x405d36
push ebx
push esi
mov ecx, edi
call fcn.004697c0
test eax, eax
jle 0x40552c
push str._p__big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.004780a0
mov edi, dword [ebx + 0x28]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407000
mov eax, dword [ebx + 0x24]
xor esi, esi
test eax, eax
jle 0x40517d
mov ecx, ebp
call fcn.00453d20
mov edx, dword [esp + 0x348]
push eax
push edi
push edx
call fcn.004e51e0
add esp, 0xc
test eax, eax
je 0x40516e
test byte [edi + 0xe], 0x10
jne 0x40516e
test byte [ebx + 0x14], 0x40
je 0x4050f8
cmp esi, 8
jge 0x4050f8
push esi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x405114
mov ecx, dword [esp + 0x14]
push esi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x58a97c
lea ecx, [esp + 0x14]
call fcn.00528088
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [edi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00407030
mov eax, dword [ebx + 0x24]
add edi, 0x14
inc esi
cmp esi, eax
jl 0x4050a9
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.004070a0
mov eax, dword [ebx + 0x24]
mov esi, dword [ebx + 0x28]
xor edi, edi
test eax, eax
mov dword [esp + 0x38], edi
jle 0x405520
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
test byte [ebx + 0x14], 0x40
je 0x4051bc
cmp edi, 8
jge 0x4051bc
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x40550d
test byte [esi + 0xe], 0x10
jne 0x40550d
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.00453d20
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004e51e0
add esp, 0xc
test eax, eax
je 0x40550d
mov dword [esp + 0x5c], 0
mov ecx, dword [ebx]
mov edx, dword [esi]
push ecx
push 0x58a96c
push edx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x5c]
call fcn.00478120
mov eax, dword [esi]
push str.__font___big_nbsp_
push eax
push str.___title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
lea ecx, [esp + 0x58]
call fcn.004780f0
test byte [ebx + 0x14], 0x40
je 0x405241
cmp edi, 8
jge 0x405241
push 0x58a914
lea ecx, [esp + 0x50]
call fcn.004780a0
jmp 0x405276
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push ecx
push str.dt_d.htm__
push edx
call ebp
mov eax, dword [ebx]
add esp, 0xc
lea ecx, [esp + 0xf4]
push str.__a_
push eax
push ecx
push 0x58a8d4
lea ecx, [esp + 0x5c]
call fcn.00478120
lea ecx, [esp + 0x10]
call fcn.00527e8a
mov edx, dword [esp + 0x348]
push esi
push 0
push 0
push 0
lea eax, [esp + 0x20]
push edx
push eax
call fcn.004e5220
mov ecx, dword [esp + 0x28]
add esp, 0x18
push ecx
push 0x58a8b0
lea ecx, [esp + 0x54]
call fcn.004780d0
mov edx, dword [esp + 0x350]
lea eax, [esp + 0x1c]
movsx ecx, word [esi + 0xc]
push edx
push 0
push 0
push eax
push ecx
call fcn.004e4b20
mov ecx, dword [esp + 0x2c]
add esp, 4
push eax
push 0
call fcn.00469130
mov edx, dword [esp + 0x1c]
push 0x58a8a0
push edx
push str.__p__r_n_p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.004780f0
test byte [esi + 0xe], 8
je 0x405304
push 0x58a864
lea ecx, [esp + 0x50]
call fcn.004780a0
test byte [esi + 0xe], 4
je 0x405318
push 0x58a85c
lea ecx, [esp + 0x50]
call fcn.004780a0
mov eax, dword [esi + 8]
push eax
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x405370
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.00528088
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405362
lea edx, [esp + 0x10]
push edx
call fcn.004e4f70
add esp, 4
test eax, eax
jne 0x405362
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00528317
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x50]
call fcn.004780a0
push str.__p__r_n
lea ecx, [esp + 0x50]
call fcn.004780a0
mov ax, word [esi + 0xc]
cmp ax, 0x3ee
je 0x40539e
cmp ax, 0x3e8
je 0x40539e
cmp ax, 0x3ef
je 0x40539e
cmp ax, 0x3f0
jne 0x405486
mov edx, dword [esi + 0x10]
push edx
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x405486
push 0x58a840
lea ecx, [esp + 0x14]
call fcn.00528088
mov edi, dword [esi + 0x10]
xor ebp, ebp
cmp byte [edi], 0
je 0x405460
push str.nbsp_nbsp_nbsp___font_color_000000__
lea ecx, [esp + 0x14]
call fcn.005282db
cmp word [esi + 0xc], 0x3e8
je 0x405411
mov eax, ebp
inc ebp
push eax
lea eax, [esp + 0xf8]
push 0x58a810
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
jmp 0x405426
push edi
lea ecx, [esp + 0x14]
call fcn.005282db
push edi
call fcn.00478c70
add esp, 4
add edi, eax
push 0x58a7f0
lea ecx, [esp + 0x14]
call fcn.005282db
push edi
lea ecx, [esp + 0x14]
call fcn.005282db
push str.__font__br__r_n
lea ecx, [esp + 0x14]
call fcn.005282db
push edi
call fcn.00478c70
add edi, eax
add esp, 4
cmp byte [edi], 0
jne 0x4053ce
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.004780a0
push str.__p_
lea ecx, [esp + 0x14]
call fcn.005282db
mov edi, dword [esp + 0x38]
mov ebp, dword [sym.imp.USER32.dll_wsprintfA]
push str._r_n_p_
lea ecx, [esp + 0x50]
call fcn.004780a0
test byte [ebx + 0x14], 0x40
je 0x4054b4
cmp edi, 8
jge 0x4054b4
push edi
lea eax, [esp + 0xf8]
push str.pty_d.htm
push eax
call ebp
add esp, 0xc
jmp 0x4054cc
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.p_d__d.htm
push edx
call ebp
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x80]
push ecx
push edx
call fcn.00528194
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xa
call fcn.00478400
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 9
call fcn.00527eff
mov eax, dword [ebx + 0x24]
add esi, 0x14
inc edi
cmp edi, eax
mov dword [esp + 0x38], edi
jl 0x4051a5
mov edi, dword [esp + 0x18]
mov dword [esp + 0x6c], 0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x40562f
push 0x58a73c
lea ecx, [esp + 0x28]
call fcn.004780a0
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.00407000
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x405621
mov ecx, dword [ebx + 0x10]
mov ebp, dword [esp + 0x348]
mov eax, dword [ecx + edi*4]
lea edx, [eax + eax*8]
mov eax, dword [ebp + 0x68]
lea esi, [eax + edx*4]
mov al, byte [eax + edx*4 + 0xe]
test al, 0xc
jne 0x405615
mov ecx, dword [esp + 0x18]
add ecx, 0xc0
call fcn.00453d20
push eax
push esi
push ebp
call fcn.004e51e0
add esp, 0xc
test eax, eax
je 0x405615
mov edx, dword [ebx + 0x10]
lea ecx, [esp + 0xf4]
mov eax, dword [edx + edi*4]
push eax
push str.cmd_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.00407030
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x40555e
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push eax
call fcn.004070a0
mov eax, dword [ebx + 0x1c]
test eax, eax
jle 0x405747
push 0x58a6ec
lea ecx, [esp + 0x28]
call fcn.004780a0
mov esi, dword [ebx + 0x20]
test esi, esi
je 0x40565f
test dword [esi + 8], 0x80000000
je 0x40565f
mov ebp, 1
jmp 0x405661
xor ebp, ebp
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.00407000
mov eax, dword [ebx + 0x1c]
xor edi, edi
test eax, eax
jle 0x405739
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
test byte [esi + 8], 1
jne 0x40572b
mov edx, dword [esp + 0x18]
lea ecx, [edx + 0xc0]
call fcn.00453d20
push eax
mov eax, dword [esp + 0x34c]
push esi
push eax
call fcn.004e51b0
add esp, 0xc
test eax, eax
je 0x40572b
mov ecx, dword [esp + 0x14]
push edi
push ecx
lea edx, [esp + 0xfc]
push str.e_d__d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00407030
mov eax, dword [ebx + 0x1c]
add esi, ebp
inc edi
cmp edi, eax
jl 0x405686
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x1c]
call fcn.004070a0
mov eax, dword [ebx + 0x14]
test al, 0x40
je 0x40581f
test ah, 0x80
jne 0x40581f
push str._p__big__strong_
lea ecx, [esp + 0x28]
call fcn.004780a0
mov ebp, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov ecx, ebp
call fcn.00407000
mov eax, dword [0x5ab178]
xor esi, esi
test eax, eax
jle 0x405813
mov edi, 0x5ab088
test byte [edi + 8], 1
jne 0x405802
push esi
lea eax, [esp + 0xf8]
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov edx, dword [edi]
lea ecx, [esp + 0x10]
push edx
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebp
call fcn.00407030
mov eax, dword [0x5ab178]
inc esi
add edi, 0x14
cmp esi, eax
jl 0x40578d
lea edx, [esp + 0x24]
mov ecx, ebp
push edx
call fcn.004070a0
mov edx, dword [esp + 0x40]
xor ecx, ecx
xor eax, eax
cmp edx, 1
mov esi, 0x5ab088
mov dword [esp + 0x48], ecx
mov dword [esp + 0x38], eax
jne 0x405844
mov eax, dword [0x5ab178]
neg eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx + 0x1c]
cmp eax, ecx
jge 0x406154
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x405882
mov eax, dword [esp + 0x44]
mov esi, dword [eax + 0x20]
test esi, esi
je 0x40587a
test dword [esi + 8], 0x80000000
je 0x40587a
mov ebx, 1
mov dword [esp + 0x48], ebx
jmp 0x405886
xor ebx, ebx
mov dword [esp + 0x48], ebx
jmp 0x405886
mov ebx, dword [esp + 0x48]
test byte [esi + 8], 1
jne 0x405d0f
mov ebp, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
call fcn.00453d20
mov edi, dword [esp + 0x348]
push eax
push esi
push edi
call fcn.004e51b0
add esp, 0xc
test eax, eax
je 0x405d0f
mov dword [esp + 0x5c], 0
mov ecx, dword [esi]
push ecx
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
lea ecx, [esp + 0x54]
call fcn.004780d0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x4058f4
mov edx, dword [esp + 0x44]
push 0x58a6a0
lea ecx, [esp + 0x50]
mov eax, dword [edx]
push eax
push 0x58a96c
call fcn.004780f0
mov ecx, dword [esi]
push ecx
push str.__title__r_n__head__r_n_body__r_n_p__big__strong__font_color_000000__
lea ecx, [esp + 0x54]
call fcn.004780d0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x40594c
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xf4]
push edx
push str.dt_d.htm__
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [esp + 0x50]
add esp, 0xc
lea eax, [esp + 0xf4]
mov edx, dword [ecx]
push str.__a__r_n
push edx
push eax
push 0x58a60c
lea ecx, [esp + 0x5c]
call fcn.00478120
jmp 0x40595a
push 0x58a5e0
lea ecx, [esp + 0x50]
call fcn.004780a0
lea ecx, [esp + 0x10]
call fcn.00527e8a
push 0
push esi
push 0
push 0
lea ecx, [esp + 0x20]
push edi
push ecx
call fcn.004e5220
mov edx, dword [esp + 0x28]
add esp, 0x18
lea ecx, [esp + 0x4c]
push str.__p__r_n
push edx
push 0x58a8b0
call fcn.004780f0
mov eax, dword [esi + 4]
push eax
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x4059fb
mov ecx, dword [esi + 4]
push ecx
lea ecx, [esp + 0x20]
call fcn.00528088
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x4059da
lea edx, [esp + 0x1c]
push edx
call fcn.004e4f70
add esp, 4
test eax, eax
jne 0x4059da
lea eax, [esp + 0x60]
lea ecx, [esp + 0x1c]
push eax
call fcn.00528317
mov ecx, dword [esp + 0x1c]
push str.__p__r_n
push ecx
push str._p_nbsp_nbsp_nbsp_
lea ecx, [esp + 0x58]
call fcn.004780f0
lea ecx, [esp + 0x1c]
call fcn.00527e8a
push str._p__em_
lea ecx, [esp + 0x50]
call fcn.004780a0
test ebx, ebx
jne 0x405a19
mov eax, dword [esi + 8]
and al, 0x18
neg al
sbb eax, eax
inc eax
jmp 0x405a23
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
sete al
test eax, eax
je 0x405a2e
push 0x58a58c
jmp 0x405a6a
test ebx, ebx
jne 0x405a47
mov eax, dword [esi + 8]
and al, 8
neg al
sbb eax, eax
and eax, 0x2ff
add eax, reloc.OLEAUT32.dll_SysReAllocString
jmp 0x405a4a
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x350]
lea ecx, [esp + 0x1c]
push edx
push 0
push 0
push ecx
push eax
push 0
mov ecx, ebp
call fcn.00469130
mov edx, dword [esp + 0x1c]
push edx
lea ecx, [esp + 0x50]
call fcn.004780a0
push str.__font_nbsp____em_
lea ecx, [esp + 0x50]
call fcn.004780a0
mov eax, dword [esp + 0x38]
test eax, eax
jl 0x405a92
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push ecx
jmp 0x405a97
push 0x58aa9c
lea ecx, [esp + 0x50]
call fcn.004780a0
mov edx, dword [esi]
push 0x58a574
push edx
push str.__em__
lea ecx, [esp + 0x58]
call fcn.004780f0
mov eax, dword [esi + 0xc]
mov ebx, dword [esi + 0x10]
xor ebp, ebp
test eax, eax
jle 0x405b06
mov edi, dword [esp + 0x48]
neg edi
sbb edi, edi
and edi, 4
add edi, 0xc
mov eax, dword [ebx]
push 0x58a564
push eax
push 0x58a54c
lea ecx, [esp + 0x58]
call fcn.004780f0
mov ecx, dword [esi + 0xc]
dec ecx
cmp ebp, ecx
je 0x405afc
push 0x58a524
lea ecx, [esp + 0x50]
call fcn.004780a0
mov eax, dword [esi + 0xc]
add ebx, edi
inc ebp
cmp ebp, eax
jl 0x405ad0
push 0x58a4fc
lea ecx, [esp + 0x50]
call fcn.004780a0
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405b29
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x50]
call fcn.004780a0
mov eax, dword [esi + 0xc]
mov edi, dword [esi + 0x10]
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x20], 0
test eax, eax
jle 0x405c5b
mov ebx, ebp
neg ebx
sbb ebx, ebx
and ebx, 4
add ebx, 0xc
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x405b65
push str._tr__r_n_td_width_30___valign_top___strong_
lea ecx, [esp + 0x50]
call fcn.004780a0
mov edx, dword [edi]
push str.__font___td__r_n_td_width_70___valign_top__
push edx
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x58]
call fcn.004780f0
test ebp, ebp
jne 0x405b94
mov eax, dword [edi + 8]
and al, 1
neg al
sbb eax, eax
and eax, 0xfffffd01
add eax, 0x80000301
jmp 0x405b97
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push 0
push 0
push edx
push eax
push 0
call fcn.00469130
mov eax, dword [esp + 0x1c]
push 0x58a370
push eax
lea ecx, [esp + 0x54]
call fcn.004780d0
test ebp, ebp
je 0x405bdf
test byte [edi + 8], 2
je 0x405bdf
push 0x58a368
lea ecx, [esp + 0x50]
call fcn.004780a0
mov ecx, dword [edi + 4]
push ecx
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x405c37
mov edx, dword [edi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.00528088
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x405c29
lea eax, [esp + 0x10]
push eax
call fcn.004e4f70
add esp, 4
test eax, eax
jne 0x405c29
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.00528317
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x4c]
push edx
call fcn.004780a0
push str.__td__r_n__tr__r_n
lea ecx, [esp + 0x50]
call fcn.004780a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0xc]
add edi, ebx
inc eax
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x405b4f
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x405c70
push str.__table__r_n
lea ecx, [esp + 0x50]
call fcn.004780a0
push 0x58a2c0
lea ecx, [esp + 0x50]
call fcn.004780a0
mov edi, dword [esp + 0x38]
test edi, edi
jl 0x405ca4
mov eax, dword [esp + 0x14]
push edi
push eax
lea ecx, [esp + 0xfc]
push str.e_d__d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x405cc3
mov edx, dword [0x5ab178]
lea eax, [esp + 0xf4]
add edx, edi
push edx
push str.fevt_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0xf4]
lea edx, [esp + 0x3c]
push ecx
lea eax, [esp + 0x7c]
push edx
push eax
call fcn.00528194
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x34c], 0xb
call fcn.00478400
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 9
call fcn.00527eff
neg ebp
sbb ebp, ebp
and ebp, 4
add ebp, 0x14
add esi, ebp
jmp 0x405d1f
neg ebx
mov edi, dword [esp + 0x38]
sbb ebx, ebx
and ebx, 4
add ebx, 0x14
add esi, ebx
mov ecx, dword [esp + 0x44]
inc edi
mov dword [esp + 0x38], edi
cmp edi, dword [ecx + 0x1c]
jl 0x405853
jmp 0x406154
mov ecx, dword [ebx + 0x30]
mov esi, dword [ebx + 0x34]
xor eax, eax
test ecx, ecx
jle 0x405d52
lea edx, [esi + 0x14]
test byte [edx], 2
je 0x405d52
inc eax
add edx, 0x1c
cmp eax, ecx
jl 0x405d45
cmp eax, ecx
jge 0x406041
push str._table_border1_cols2_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5___a_name_
lea ecx, [esp + 0x28]
call fcn.004780a0
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x38], 0
test eax, eax
jle 0x406033
mov ebp, dword [esp + 0x350]
mov edi, 0x400000
test byte [esi + 0x14], 2
jne 0x40601c
push str._tr__r_n_td_width_30___valign_top___font_color_000000__
lea ecx, [esp + 0x28]
call fcn.004780a0
mov edx, dword [esi + 8]
lea ecx, [esp + 0x10]
push edx
call fcn.00528088
test dword [ebx + 0x14], edi
jne 0x405dfd
mov eax, dword [esi + 4]
push eax
call fcn.004ce440
add esp, 4
cmp eax, 1
jne 0x405dfd
push 0x5b10b8
lea ecx, [esp + 0x14]
call fcn.005282db
mov edx, dword [esi + 4]
lea ecx, [esp + 0x1c]
push ecx
push edx
call fcn.004ce180
add esp, 8
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.00528317
push 0x5b10bc
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_70___valign_top__
push ecx
lea ecx, [esp + 0x2c]
call fcn.004780d0
lea ecx, [esp + 0x10]
call fcn.00527e8a
test dword [ebx + 0x14], edi
jne 0x405e49
mov eax, dword [esi]
mov ecx, dword [esp + 0x18]
push ebp
push 0
lea edx, [esp + 0x18]
push 0
push edx
push eax
push 0
call fcn.00469130
push 0x58a370
lea ecx, [esp + 0x14]
call fcn.005282db
test dword [ebx + 0x14], edi
je 0x405e5f
mov ecx, dword [esi + 0x18]
lea edx, [esp + 0xf4]
push ecx
push 0x58a194
push edx
jmp 0x405f3c
test byte [esi + 0x14], 1
je 0x405fbf
mov eax, dword [esi]
cmp eax, 0x80000301
ja 0x405f12
je 0x405f2b
cmp eax, 0x80000101
ja 0x405ef3
je 0x405ede
cmp eax, reloc.OLEAUT32.dll_SysReAllocString
je 0x405ec9
cmp eax, reloc.OLEAUT32.dll_SysReAllocStringLen
jne 0x405fbf
push 0x5898f0
lea ecx, [esp + 0x20]
call fcn.00528088
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x1c]
push eax
call fcn.005282db
push 0x5898dc
lea ecx, [esp + 0x20]
call fcn.005282db
mov eax, dword [esp + 0x1c]
jmp 0x405f4c
mov eax, dword [esi + 0x18]
test eax, eax
je 0x405ed7
mov eax, 0x5898d8
jmp 0x405f4c
mov eax, 0x5898d4
jmp 0x405f4c
xor ecx, ecx
lea edx, [esp + 0xf4]
mov cl, byte [esi + 0x18]
push ecx
push 0x58a18c
push edx
jmp 0x405f3c
cmp eax, 0x80000201
jne 0x405fbf
movsx eax, word [esi + 0x18]
push eax
lea ecx, [esp + 0xf8]
push 0x58a194
push ecx
jmp 0x405f3c
cmp eax, 0x80000401
je 0x405f2b
cmp eax, 0x80000501
je 0x405f2b
cmp eax, 0x80000601
jne 0x405fbf
mov edx, dword [esi + 0x18]
lea eax, [esp + 0xf4]
push edx
push 0x58a194
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
test eax, eax
je 0x405fbf
mov ecx, dword [ebx + 0x14]
push eax
test edi, ecx
je 0x405f8a
lea ecx, [esp + 0x78]
push 0x58a17c
push ecx
call fcn.004e6ca0
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xc
call fcn.00528317
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x74]
jmp 0x405fba
lea edx, [esp + 0x74]
push 0x58a16c
push edx
call fcn.004e6ca0
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x344], 0xd
call fcn.00528317
mov byte [esp + 0x340], 9
lea ecx, [esp + 0x70]
call fcn.00527eff
mov eax, dword [esi + 0x10]
push eax
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x406009
mov ecx, dword [esi + 0x10]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406009
lea edx, [esp + 0x10]
push edx
call fcn.004e4f70
add esp, 4
test eax, eax
jne 0x406009
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00528317
mov ecx, dword [esp + 0x10]
push str.__td__r_n__tr__r_n
push ecx
lea ecx, [esp + 0x2c]
call fcn.004780d0
mov eax, dword [esp + 0x38]
mov ecx, dword [ebx + 0x30]
inc eax
add esi, 0x1c
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x405d87
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.004780a0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x406146
push 0x58a73c
lea ecx, [esp + 0x28]
call fcn.004780a0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.00407000
mov eax, dword [ebx + 0xc]
xor edi, edi
test eax, eax
jle 0x406138
mov ebp, dword [esp + 0x348]
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp + 0x68]
mov eax, dword [eax + edi*4]
lea ecx, [eax + eax*8]
mov al, byte [edx + ecx*4 + 0xe]
test al, 0xc
lea esi, [edx + ecx*4]
jne 0x40612c
mov eax, dword [esp + 0x18]
lea ecx, [eax + 0xc0]
call fcn.00453d20
push eax
push esi
push ebp
call fcn.004e51e0
add esp, 0xc
test eax, eax
je 0x40612c
mov ecx, dword [ebx + 0x10]
lea eax, [esp + 0xf4]
mov edx, dword [ecx + edi*4]
push edx
push str.cmd_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov edx, dword [esi]
lea ecx, [esp + 0x10]
push edx
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, dword [esp + 0x20]
call fcn.00407030
mov eax, dword [ebx + 0xc]
inc edi
cmp edi, eax
jl 0x40607c
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
call fcn.004070a0
push 0x58a11c
lea ecx, [esp + 0x28]
call fcn.004780a0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.004780a0
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xf4]
push eax
push str.dt_d.htm
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [esp + 0xf4]
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x64]
push edx
push eax
push ecx
call fcn.00528194
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xe
call fcn.00478400
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.00527eff
add dword [esp + 0x44], 0x38
jmp 0x4061c9
add ebx, 0x38
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0x348]
mov eax, dword [esp + 0x14]
inc eax
mov ecx, dword [edx + 0x54]
mov dword [esp + 0x14], eax
cmp eax, ecx
jl 0x404edc
mov ebp, dword [esp + 0x348]
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x14], 0
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x4063a1
mov ecx, dword [esp + 0x20]
xor edi, edi
mov dword [esp + 0x34], edi
lea eax, [ecx + 4]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
call fcn.00478120
mov edx, dword [ebp + 0x24]
push str.__a___p_
push edx
push str.__font_nbsp_font_color_000000__
lea ecx, [esp + 0x30]
call fcn.004780f0
mov esi, dword [ebp + 0x68]
lea eax, [esp + 0x24]
push eax
mov ecx, ebx
call fcn.00407000
mov eax, dword [ebp + 0x64]
test eax, eax
jle 0x40630b
test byte [esi + 0xe], 0xc
jne 0x4062fc
lea ecx, [ebx + 0xc0]
call fcn.00453d20
push eax
push esi
push ebp
call fcn.004e51e0
add esp, 0xc
test eax, eax
je 0x4062fc
movsx ecx, word [esi + 0xc]
mov eax, dword [esp + 0x14]
dec ecx
cmp ecx, eax
jne 0x4062fc
push edi
lea edx, [esp + 0xf8]
push str.cmd_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00407030
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x40625c
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.004070a0
push str.__body__r_n__html__r_n
lea ecx, [esp + 0x28]
call fcn.004780a0
mov esi, dword [esp + 0x14]
lea edx, [esp + 0xf4]
push esi
push str.ct_d.htm
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x64]
push eax
push ecx
push edx
call fcn.00528194
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0xf
call fcn.00478400
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 9
call fcn.00527eff
mov edi, dword [esp + 0x20]
push edi
call fcn.00478c70
add esp, 4
add edi, eax
mov eax, dword [ebp + 0x5c]
inc esi
cmp esi, eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x14], esi
jl 0x406209
mov eax, dword [ebp + 0x24]
lea ecx, [esp + 0x24]
push eax
push str.__title__r_n__head__r_n_body__r_n_p__strong__big__big__font_color_000000__
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetgb2312___r_n_title_
mov dword [esp + 0x44], 0
call fcn.00478120
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push eax
push ecx
lea edx, [esp + 0xfc]
push 0x58a028
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x24]
push str.__font___big___big___strong_nbsp_nbsp_nbsp__a_href_.._index.htm__
push eax
call fcn.004780d0
mov ecx, dword [ebp + 0x2c]
push ecx
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x406452
mov edx, dword [ebp + 0x2c]
lea ecx, [esp + 0x10]
push edx
call fcn.00528088
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x40643f
lea eax, [esp + 0x10]
push eax
call fcn.004e4f70
add esp, 4
test eax, eax
jne 0x40643f
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x14]
call fcn.00528317
mov edx, dword [esp + 0x10]
push str.__p__p_
push edx
lea ecx, [esp + 0x2c]
call fcn.004780d0
lea ecx, [esp + 0x10]
call fcn.00527e8a
push 0
push 0
push 0
push 0
lea eax, [esp + 0x20]
push ebp
push eax
call fcn.004e5220
mov ecx, dword [esp + 0x28]
add esp, 0x18
push str.__p__p_
push ecx
push 0x589fb4
lea ecx, [esp + 0x30]
call fcn.004780f0
mov eax, dword [ebp + 0x5c]
test eax, eax
jle 0x406551
push str._big__strong__a_name_
lea ecx, [esp + 0x28]
call fcn.004780a0
mov esi, dword [ebp + 0x60]
lea edx, [esp + 0x24]
push edx
mov ecx, ebx
call fcn.00407000
mov eax, dword [ebp + 0x5c]
xor edi, edi
test eax, eax
jle 0x406545
push edi
lea eax, [esp + 0xf8]
push str.ct_d.htm
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
lea edx, [esi + 4]
lea ecx, [esp + 0x10]
push edx
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, ebx
call fcn.00407030
push esi
call fcn.00478c70
add esp, 4
add esi, eax
mov eax, dword [ebp + 0x5c]
inc edi
cmp edi, eax
jl 0x4064be
lea edx, [esp + 0x24]
mov ecx, ebx
push edx
call fcn.004070a0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x406652
mov eax, dword [esi + 0x14]
test al, 3
jne 0x40662f
test al, 0x40
je 0x40662f
lea ecx, [ebx + 0xc0]
call fcn.00453d20
push eax
push esi
push ebp
call fcn.004e5180
add esp, 0xc
test eax, eax
je 0x40662f
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4065b8
push 0x589f18
lea ecx, [esp + 0x28]
call fcn.004780a0
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.00407000
push edi
lea ecx, [esp + 0xf8]
push str.dt_d.htm
push ecx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea edx, [esp + 0xf4]
lea ecx, [esp + 0x10]
push edx
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov eax, dword [esi]
lea ecx, [esp + 0x10]
push eax
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push ecx
push edx
mov ecx, ebx
call fcn.00407030
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406565
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406652
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.004070a0
mov eax, dword [ebp + 0x54]
mov esi, dword [ebp + 0x58]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
jle 0x40674a
test byte [esi + 0x14], 0x43
jne 0x406727
lea ecx, [ebx + 0xc0]
call fcn.00453d20
push eax
push esi
push ebp
call fcn.004e5180
add esp, 0xc
test eax, eax
je 0x406727
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4066b0
push 0x589ec8
lea ecx, [esp + 0x28]
call fcn.004780a0
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.00407000
push edi
lea edx, [esp + 0xf8]
push str.dt_d.htm
push edx
mov dword [esp + 0x2c], 1
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [esp + 0x10]
push 0x58a97c
call fcn.00528088
lea eax, [esp + 0xf4]
lea ecx, [esp + 0x10]
push eax
call fcn.005282db
push 0x58a978
lea ecx, [esp + 0x14]
call fcn.005282db
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x14]
call fcn.005282db
push str.__a_
lea ecx, [esp + 0x14]
call fcn.005282db
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.00407030
mov eax, dword [ebp + 0x54]
add esi, 0x38
inc edi
cmp edi, eax
jl 0x406666
mov eax, dword [esp + 0x20]
test eax, eax
je 0x40674a
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call fcn.004070a0
mov eax, dword [ebp + 0x84]
test eax, eax
jle 0x406762
push str._p__big__a_href_const.htm___strong_
lea ecx, [esp + 0x28]
call fcn.004780a0
mov edx, dword [ebp + 0x74]
push edx
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x4067db
push str._p__big__strong__br___
lea ecx, [esp + 0x28]
call fcn.004780a0
mov esi, dword [ebp + 0x74]
mov al, byte [esi]
test al, al
je 0x4067cd
cmp al, 0x40
jne 0x40678e
inc esi
push str.__td__td_width_78___
push esi
push str._tr__td_width_22___
lea ecx, [esp + 0x30]
call fcn.004780f0
push esi
call fcn.00478c70
add esp, 4
add esi, eax
lea ecx, [esp + 0x24]
push str.nbsp__td___tr__r_n
push esi
call fcn.004780d0
push esi
call fcn.00478c70
add esi, eax
add esp, 4
mov al, byte [esi]
test al, al
jne 0x406789
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.004780a0
push 0x589cd0
lea eax, [esp + 0x80]
push 0x5b1aa8
push eax
call fcn.00528194
push 0x58948c
lea ecx, [esp + 0x7c]
push eax
push ecx
mov byte [esp + 0x34c], 0x10
call fcn.00528194
mov edx, dword [esp + 0x34c]
mov byte [esp + 0x340], 0x11
push edx
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00528194
push 0x58948c
lea ecx, [esp + 0x74]
push eax
push ecx
mov byte [esp + 0x34c], 0x12
call fcn.00528194
push str.samples
lea edx, [esp + 0x68]
push eax
push edx
mov byte [esp + 0x34c], 0x13
call fcn.00528194
push 0x58948c
push eax
lea eax, [esp + 0x70]
mov byte [esp + 0x348], 0x14
push eax
call fcn.00528194
lea ecx, [esp + 0x64]
mov byte [esp + 0x340], 0x1a
call fcn.00527eff
lea ecx, [esp + 0x70]
mov byte [esp + 0x340], 0x19
call fcn.00527eff
lea ecx, [esp + 0x74]
mov byte [esp + 0x340], 0x18
call fcn.00527eff
lea ecx, [esp + 0x78]
mov byte [esp + 0x340], 0x17
call fcn.00527eff
lea ecx, [esp + 0x7c]
mov byte [esp + 0x340], 0x16
call fcn.00527eff
lea ecx, [esp + 0x68]
push 0x589cc4
lea edx, [esp + 0x44]
xor edi, edi
push ecx
push edx
mov dword [esp + 0x2c], edi
call fcn.00528194
mov eax, dword [eax]
lea ecx, [esp + 0x1f8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], esi
call fcn.00527eff
cmp esi, 0xffffffff
je 0x406d96
mov eax, dword [0x5ada84]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x24
call fcn.00527e8a
lea ecx, [esp + 0x8c]
call fcn.00527e8a
lea ecx, [esp + 0x90]
call fcn.00527e8a
lea ecx, [esp + 0x94]
call fcn.00527e8a
lea ecx, [esp + 0x98]
call fcn.00527e8a
lea ecx, [esp + 0x9c]
call fcn.00527e8a
lea ecx, [esp + 0xa0]
call fcn.00527e8a
lea ecx, [esp + 0xa4]
call fcn.00527e8a
lea ecx, [esp + 0xa8]
call fcn.00527e8a
lea ecx, [esp + 0xac]
call fcn.00527e8a
lea edx, [esp + 0xc4]
push 0x1c
push edx
mov dword [esp + 0xb8], 1
mov dword [esp + 0xbc], edi
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc8], edi
call fcn.00478c20
add esp, 8
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x340], 0x25
call fcn.0044abf0
mov eax, dword [0x5ada84]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
call fcn.00477cf0
mov byte [esp + 0x340], 0x27
jmp 0x406a46
xor edi, edi
lea ecx, [esp + 0x224]
lea edx, [esp + 0x68]
push ecx
lea eax, [esp + 0x44]
push edx
push eax
call fcn.00528194
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x344], 0x28
call fcn.00528038
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x27
call fcn.00527eff
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1bc]
lea edx, [esp + 0x88]
push ecx
push edx
push eax
call fcn.0044ef60
add esp, 0xc
cmp eax, 1
jne 0x406c6a
mov ecx, dword [esp + 0x88]
cmp dword [ecx - 8], edi
je 0x406c6a
lea ecx, [ebx + 0xc0]
call fcn.00453d20
lea ecx, [esp + 0x1bc]
mov edi, eax
call fcn.0044abb0
test eax, edi
je 0x406c6a
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x406af5
push 0x589b3c
lea ecx, [esp + 0x28]
call fcn.004780a0
mov dword [esp + 0x20], 1
mov edx, dword [esp + 0x88]
push str.__td__td_width_30___
push edx
push str._tr__td_width_20___
lea ecx, [esp + 0x30]
call fcn.004780f0
push str._a_href_.._.._lib_
lea ecx, [esp + 0x14]
call fcn.00528088
mov eax, dword [esp + 0x34c]
lea ecx, [esp + 0x10]
push eax
call fcn.005282db
push str._samples_
lea ecx, [esp + 0x14]
call fcn.005282db
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x224]
push ecx
lea edx, [esp + 0x228]
push 0x58a978
push edx
push eax
lea ecx, [esp + 0x34]
call fcn.00478120
push str.__a_
lea ecx, [esp + 0x28]
call fcn.004780a0
lea ecx, [esp + 0x14]
push 0x589ae8
push ecx
call fcn.004e5670
add esp, 8
lea edx, [esp + 0x14]
lea ecx, [esp + 0xe0]
push 0xffffffffffffffff
push edx
call fcn.004782b0
cmp eax, 0xffffffff
je 0x406c4b
xor edi, edi
lea eax, [esp + 0x14]
lea ecx, [esp + 0xe0]
push eax
push edi
call fcn.004787e0
mov edi, eax
cmp edi, 0xffffffff
je 0x406c4b
lea ecx, [esp + 0x14]
call fcn.00524786
lea ecx, [esp + 0x14]
call fcn.0052473a
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx - 8]
test eax, eax
je 0x406b9e
lea edx, [esp + 0x14]
lea eax, [esp + 0x68]
push edx
lea ecx, [esp + 0x70]
push eax
push ecx
call fcn.0052812e
mov eax, dword [eax]
mov byte [esp + 0x340], 0x29
push eax
call fcn.004e5570
add esp, 4
lea ecx, [esp + 0x6c]
mov esi, eax
mov byte [esp + 0x340], 0x27
call fcn.00527eff
test esi, esi
je 0x406b9e
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0x58a978
push edx
push eax
push str._br___
lea ecx, [esp + 0x34]
call fcn.00478120
mov ecx, dword [esp + 0x14]
push str.__a_
push ecx
lea ecx, [esp + 0x2c]
call fcn.004780d0
jmp 0x406b9e
mov edx, dword [esp + 0x8c]
push str.nbsp__td___tr__r_n
push edx
push str.__td__td_width_50___
lea ecx, [esp + 0x30]
call fcn.004780f0
mov esi, dword [esp + 0x48]
lea eax, [esp + 0x1f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x406a44
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x406c9e
push str.__table___div_
lea ecx, [esp + 0x28]
call fcn.004780a0
lea ecx, [esp + 0xe0]
mov byte [esp + 0x340], 0x26
mov dword [esp + 0xe0], 0x55f890
call fcn.00477ef0
lea ecx, [esp + 0x14]
mov byte [esp + 0x340], 0x25
call fcn.00527eff
lea ecx, [esp + 0xac]
mov byte [esp + 0x340], 0x32
call fcn.00527eff
lea ecx, [esp + 0xa8]
mov byte [esp + 0x340], 0x31
call fcn.00527eff
lea ecx, [esp + 0xa4]
mov byte [esp + 0x340], 0x30
call fcn.00527eff
lea ecx, [esp + 0xa0]
mov byte [esp + 0x340], 0x2f
call fcn.00527eff
lea ecx, [esp + 0x9c]
mov byte [esp + 0x340], 0x2e
call fcn.00527eff
lea ecx, [esp + 0x98]
mov byte [esp + 0x340], 0x2d
call fcn.00527eff
lea ecx, [esp + 0x94]
mov byte [esp + 0x340], 0x2c
call fcn.00527eff
lea ecx, [esp + 0x90]
mov byte [esp + 0x340], 0x2b
call fcn.00527eff
lea ecx, [esp + 0x8c]
mov byte [esp + 0x340], 0x2a
call fcn.00527eff
lea ecx, [esp + 0x88]
mov byte [esp + 0x340], 0x16
call fcn.00527eff
lea ecx, [esp + 0x3c]
push str.index.htm
lea edx, [esp + 0x44]
push ecx
push edx
call fcn.00528194
xor edi, edi
lea ecx, [esp + 0x24]
push edi
push 0xffffffffffffffff
push eax
mov byte [esp + 0x34c], 0x33
call fcn.00478400
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.00527eff
push str._table_border1_cols3_framebelow_rulesrows_width_100___bordercolorlight_000000__bordercolordark_FFFFFF__cellspacing_0__cellpadding_5__
lea ecx, [esp + 0x28]
mov dword [esp + 0x38], edi
call fcn.004780a0
mov eax, dword [ebp + 0x84]
mov esi, dword [ebp + 0x88]
test eax, eax
jle 0x406eb8
test edi, edi
jne 0x406e0a
push str._tr__r_n_td_width_25____strong_
lea ecx, [esp + 0x28]
call fcn.004780a0
mov eax, dword [esi]
push str.__font___td__td_width_25____font_color_000000__
push eax
push str._tr__td_width_25____font_color_000000__
lea ecx, [esp + 0x30]
call fcn.004780f0
lea ecx, [esp + 0x10]
push ecx
push esi
mov ecx, ebx
call fcn.00404c80
mov edx, dword [esp + 0x10]
push str.__font___td__r_n_td_width_50___
push edx
lea ecx, [esp + 0x2c]
call fcn.004780d0
mov eax, dword [esi + 8]
push eax
call fcn.00478b40
add esp, 4
test eax, eax
jne 0x406e98
mov ecx, dword [esi + 8]
push ecx
lea ecx, [esp + 0x14]
call fcn.00528088
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
cmp byte [eax + ecx - 1], 0x20
jb 0x406e8a
lea edx, [esp + 0x10]
push edx
call fcn.004e4f70
add esp, 4
test eax, eax
jne 0x406e8a
lea eax, [esp + 0x60]
lea ecx, [esp + 0x10]
push eax
call fcn.00528317
mov ecx, dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x28]
call fcn.004780a0
push str.__td___tr__r_n
lea ecx, [esp + 0x28]
call fcn.004780a0
mov eax, dword [ebp + 0x84]
add esi, 0x20
inc edi
cmp edi, eax
jl 0x406df8
push str.__table__r_n
lea ecx, [esp + 0x28]
call fcn.004780a0
lea edx, [esp + 0x3c]
push str.const.htm
lea eax, [esp + 0x44]
push edx
push eax
call fcn.00528194
push 0
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x34c], 0x34
call fcn.00478400
lea ecx, [esp + 0x40]
mov byte [esp + 0x340], 0x16
call fcn.00527eff
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x68]
xor edi, edi
test eax, eax
jle 0x406f4f
test byte [esi + 0xe], 0xc
jne 0x406f44
lea ecx, [ebx + 0xc0]
call fcn.00453d20
push eax
push esi
push ebp
call fcn.004e51e0
add esp, 0xc
test eax, eax
je 0x406f44
mov ecx, dword [esp + 0x350]
lea edx, [esp + 0x3c]
push ecx
push edx
push edi
push esi
push ebp
mov ecx, ebx
call fcn.00407110
mov eax, dword [ebp + 0x64]
add esi, 0x24
inc edi
cmp edi, eax
jl 0x406f0d
lea ecx, [esp + 0x68]
mov byte [esp + 0x340], 9
call fcn.00527eff
lea ecx, [esp + 0x60]
mov byte [esp + 0x340], 8
call fcn.00527eff
lea ecx, [esp + 0x1c]
mov byte [esp + 0x340], 7
call fcn.00527eff
lea ecx, [esp + 0x10]
mov byte [esp + 0x340], 6
call fcn.00527eff
mov esi, 0x55f890
lea ecx, [esp + 0x4c]
mov byte [esp + 0x340], 5
mov dword [esp + 0x4c], esi
call fcn.00477ef0
lea ecx, [esp + 0x24]
mov byte [esp + 0x340], 3
mov dword [esp + 0x24], esi
call fcn.00477ef0
lea ecx, [esp + 0x3c]
mov dword [esp + 0x340], 0xffffffff
call fcn.00527eff
mov ecx, dword [esp + 0x338]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x334
ret 0xc