Function at 0x4018b9
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c8
mov eax, dword [paycheck.grossAmount]
lea edx, [paycheck.netAmount]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [ebp + 8]
mov dword [esp + 8], eax
mov dword [esp + 4], str.Contracheque__s__d__s
lea eax, [ebp - 0x97]
mov dword [esp], eax
call sym._sprintf
lea eax, [ebp - 0x97]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s.html
lea eax, [ebp - 0x127]
mov dword [esp], eax
call sym._sprintf
mov dword [esp + 4], 0x4061a9
lea eax, [ebp - 0x127]
mov dword [esp], eax
call sym._fopen
mov dword [ebp - 0xc], eax
fld dword [ebp + 0xec]
fld dword [0x407680]
fmulp st(1)
mov edx, dword [paycheck.inss]
fld dword [ebp + 0x30]
fld dword [paycheck.fgts]
fsubp st(1)
fld dword [ebp + 0xe0]
fld dword [0x407680]
fmulp st(1)
fstp qword [ebp - 0x130]
fld dword [ebp + 0x30]
fstp qword [ebp - 0x138]
fld dword [ebp + 0xdc]
fstp qword [ebp - 0x140]
fld dword [ebp + 0x34]
fld dword [paycheck.fgts]
fld dword [paycheck.irrf]
faddp st(1)
fld dword [ebp + 0x30]
fld dword [paycheck.irrf]
fld dword [paycheck.fgts]
fld dword [ebp + 0x30]
fxch st(7)
mov eax, dword [paycheck.grossAmount]
fstp qword [esp + 0x70]
fxch st(5)
mov dword [esp + 0x6c], edx
fstp qword [esp + 0x64]
fld qword [ebp - 0x130]
fstp qword [esp + 0x5c]
fld qword [ebp - 0x138]
fstp qword [esp + 0x54]
fld qword [ebp - 0x140]
fstp qword [esp + 0x4c]
fxch st(3)
fstp qword [esp + 0x44]
fxch st(1)
fstp qword [esp + 0x3c]
fstp qword [esp + 0x34]
fstp qword [esp + 0x2c]
fstp qword [esp + 0x24]
fstp qword [esp + 0x1c]
lea edx, [ebp + 0x8c]
mov dword [esp + 0x18], edx
lea edx, [paycheck.netAmount]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
lea eax, [ebp + 8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x97]
mov dword [esp + 8], eax
mov dword [esp + 4], str.__DOCTYPE_html__html_lang_pt_br___head______meta_charset_windows_1252_______title__s__title______link_rel_stylesheet__href_https:__stackpath.bootstrapcdn.com_bootstrap_4.5.0_css_bootstrap.min.css__integrity_sha384_9aIt2nRpC12Uk9gS9baDl411NQApFmC26EwAOH8WgZl5MYYxFfcNcPb1dKGj7Sk__crossorigin_anonymous_______style__________media__min_width:_1200px______________.container_________________max_width:_960px_____________________________.document_info_.document_title_____________font_size:_2rem_________________.document_info_.company_name_____________font_size:_1.5rem_________________.document_info_.company_identifier_____________font_size:_1.25rem_________________.document_info_.document_date_____________font_size:_1rem_______________style___head__body__main______section_class_document_info___________div_class_container_py_5_border_bottom_______________div_class_row___________________div_class_col_______________________h1_class_document_title__Demonstrativo_de_pagamento_de_sal
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sym._fprintf
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sym._fclose
mov dword [esp], str._nContracheque_gerado_com_sucesso.
call sym._puts
lea eax, [ebp - 0x127]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x409080
mov dword [esp], str.Arquivo_salvo_em__s_s._n_n
call sym._printf
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
lea eax, [ebp - 0x127]
mov dword [esp + 8], eax
mov dword [esp + 4], str.open
mov dword [esp], 0
call sym._ShellExecuteA_24
sub esp, 0x18
nop
leave
ret