Function at 0x43f3fd
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
push esi
push edi
mov edi, ecx
push str._r_n_html__head__style__r_n______r_nbody_td_a_p_.hfont_family:arial_sans_serif__font_size:_12px___r_n.hfont_size:_20px__r_n.qcolor:0000cc__r_n______r_n__style___head__r_n_r_n_body__r_n_r_n_r_n
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x2c], edi
call fcn.004013c8
push 0x47ff28
lea ecx, [ebp - 0x20]
call fcn.004013c8
mov ecx, dword [ebp + 0xc]
xor ebx, ebx
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0xc]
jl 0x43f441
push eax
mov dword [ebp - 8], ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x43f452
mov eax, dword [0x47e520]
push ecx
lea ecx, [ebp - 8]
mov dword [ebp - 8], eax
call fcn.0040833f
push dword [edi + 4]
lea eax, [ebp - 8]
push ecx
mov ecx, esp
push eax
call fcn.00401356
call fcn.0044acfa
pop ecx
test eax, eax
pop ecx
je 0x43f8dc
push 0x47e654
push dword [ebp - 8]
call fcn.0046ba30
mov esi, eax
pop ecx
cmp esi, ebx
pop ecx
mov dword [ebp - 0x38], esi
jne 0x43f4a1
push ebx
push 0x488b68
push 0x47ff94
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x43f8dc
push esi
push 1
pop edi
lea eax, [ebp - 0x68]
push edi
push 2
push eax
mov dword [ebp - 0x68], 0xfeff
call fcn.0046b8c6
mov eax, dword [0x47e520]
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 4]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x34], ebx
call fcn.00401522
push str._TABLE_Border0__TR_
lea ecx, [ebp - 0x14]
call fcn.004013c8
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401658
lea ecx, [ebp - 0x14]
call fcn.0040139c
mov eax, dword [ebp - 4]
push esi
lea ecx, [ebp - 4]
mov eax, dword [eax - 8]
add eax, eax
push eax
push edi
push ebx
call fcn.004016d4
push eax
call fcn.0046b8c6
add esp, 0x10
mov esi, 0x488b98
lea ecx, [ebp - 4]
push esi
call fcn.00401572
push esi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x28], ebx
call fcn.004013c8
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push edi
push eax
push dword [ebp + 8]
mov dword [ebp - 0x30], ebx
call fcn.0043f903
test eax, eax
je 0x43f84c
mov eax, dword [ebp + 0x10]
inc eax
lea eax, [eax*4 + 4]
mov dword [ebp - 0x70], eax
push 0x488b68
push 0x47ff90
lea ecx, [ebp - 0x10]
call fcn.00401b5d
push dword [ebp - 0x70]
mov dword [ebp - 0x48], ebx
call fcn.0046af94
cmp eax, ebx
pop ecx
je 0x43f5b0
mov ecx, dword [ebp + 0x10]
lea edi, [ecx + 1]
lea ecx, [eax + 4]
mov dword [eax], edi
mov edx, ecx
lea eax, [edi - 1]
cmp eax, ebx
jl 0x43f5a8
inc eax
mov edi, dword [0x47e520]
mov dword [edx], edi
add edx, 4
dec eax
jne 0x43f59a
push 1
mov dword [ebp - 0x1c], ecx
pop edi
jmp 0x43f5b3
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
push 9
push eax
lea eax, [ebp - 0xc]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0043f9ad
test eax, eax
je 0x43f5fe
mov edi, dword [ebp - 0x1c]
lea eax, [ebp - 0xc]
mov ecx, edi
push eax
call fcn.00401522
lea eax, [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
push 9
push eax
lea eax, [ebp - 0xc]
push 1
push eax
lea eax, [ebp - 0x10]
push eax
add edi, 4
call fcn.0043f9ad
test eax, eax
jne 0x43f5d1
push 1
pop edi
cmp dword [ebp - 0x30], ebx
jne 0x43f62c
push str.___TR_BGCOLOREEEEEE_
lea ecx, [ebp - 0x5c]
call fcn.004013c8
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401658
lea ecx, [ebp - 0x5c]
call fcn.0040139c
mov dword [ebp - 0x30], edi
jmp 0x43f653
push str.___TR_
lea ecx, [ebp - 0x3c]
call fcn.004013c8
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401658
lea ecx, [ebp - 0x3c]
call fcn.0040139c
mov dword [ebp - 0x30], ebx
push esi
lea ecx, [ebp - 0x18]
call fcn.00401572
cmp dword [ebp - 0x34], ebx
jne 0x43f66e
push 0x482a1c
lea ecx, [ebp - 0x18]
call fcn.00401572
mov eax, dword [ebp + 0x10]
cmp eax, ebx
jle 0x43f7ca
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x14], ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0xc]
call fcn.00401522
push str._nbsp_
push 0x47fff8
lea ecx, [ebp - 0xc]
call fcn.00401b5d
mov eax, dword [ebp - 0xc]
cmp dword [eax - 8], ebx
jle 0x43f750
push 0x47fff0
lea ecx, [ebp - 0x60]
call fcn.004013c8
push str._nobr_
lea ecx, [ebp - 0x50]
call fcn.004013c8
push str._td_
lea ecx, [ebp - 0x64]
call fcn.004013c8
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004015b6
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004015b6
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004015b6
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.004015b6
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401658
lea ecx, [ebp - 0x80]
call fcn.0040139c
lea ecx, [ebp - 0x78]
call fcn.0040139c
lea ecx, [ebp - 0x6c]
call fcn.0040139c
lea ecx, [ebp - 0x74]
call fcn.0040139c
lea ecx, [ebp - 0x64]
call fcn.0040139c
lea ecx, [ebp - 0x50]
call fcn.0040139c
lea ecx, [ebp - 0x60]
jmp 0x43f7b8
push str.nbsp___td_
lea ecx, [ebp - 0x4c]
call fcn.004013c8
push str._td_
lea ecx, [ebp - 0x58]
call fcn.004013c8
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.004015b6
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004015b6
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401658
lea ecx, [ebp - 0x7c]
call fcn.0040139c
lea ecx, [ebp - 0x84]
call fcn.0040139c
lea ecx, [ebp - 0x58]
call fcn.0040139c
lea ecx, [ebp - 0x4c]
call fcn.0040139c
add dword [ebp - 0x14], 4
dec dword [ebp - 0x54]
jne 0x43f682
push str._____TR__r_n
lea ecx, [ebp - 0x40]
call fcn.004013c8
lea eax, [ebp - 0x40]
lea ecx, [ebp - 4]
push eax
call fcn.0040865b
lea ecx, [ebp - 0x40]
call fcn.0040139c
inc dword [ebp - 0x34]
cmp dword [ebp - 0x28], 0x64
jle 0x43f81f
mov eax, dword [ebp - 4]
push dword [ebp - 0x38]
lea ecx, [ebp - 4]
mov eax, dword [eax - 8]
add eax, eax
push eax
push edi
push ebx
call fcn.004016d4
push eax
call fcn.0046b8c6
add esp, 0x10
lea ecx, [ebp - 4]
push esi
call fcn.00401572
mov dword [ebp - 0x28], ebx
mov ecx, dword [ebp - 0x1c]
inc dword [ebp - 0x28]
cmp ecx, ebx
je 0x43f830
push 3
call fcn.0040d76e
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push edi
push eax
push dword [ebp + 8]
call fcn.0043f903
test eax, eax
jne 0x43f563
push str.__TABLE_
lea ecx, [ebp + 0x10]
call fcn.004013c8
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004015b6
push eax
lea ecx, [ebp - 4]
call fcn.0040865b
lea ecx, [ebp + 8]
call fcn.0040139c
lea ecx, [ebp + 0x10]
call fcn.0040139c
mov eax, dword [ebp - 4]
push dword [ebp - 0x38]
lea ecx, [ebp - 4]
mov eax, dword [eax - 8]
add eax, eax
push eax
push edi
push ebx
call fcn.004016d4
push eax
call fcn.0046b8c6
push dword [ebp - 0x38]
call fcn.0046b849
add esp, 0x14
push edi
push ebx
push ebx
push dword [ebp - 8]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x18]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
lea ecx, [ebp - 0xc]
call fcn.0040139c
lea ecx, [ebp - 4]
call fcn.0040139c
lea ecx, [ebp - 8]
call fcn.0040139c
lea ecx, [ebp - 0x20]
call fcn.0040139c
lea ecx, [ebp - 0x24]
call fcn.0040139c
lea ecx, [ebp + 0xc]
call fcn.0040139c
pop edi
pop esi
pop ebx
leave
ret 0xc