Function at 0x441570
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x84
push ebx
push esi
push edi
mov edi, ecx
push str._r_n_html__head__style__r_n______r_nbody_td_a_p_.hfont_family:arial_sans_serif__font_size:_12px___r_n.hfont_size:_20px__r_n.qcolor:0000cc__r_n______r_n__style___head__r_n_r_n_body__r_n_r_n_r_n
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x2c], edi
call fcn.004013c7
push 0x483074
lea ecx, [ebp - 0x20]
call fcn.004013c7
mov ecx, dword [ebp + 0xc]
xor ebx, ebx
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0xc]
jl 0x4415b4
push eax
mov dword [ebp - 8], ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4415c5
mov eax, dword [0x481530]
push ecx
lea ecx, [ebp - 8]
mov dword [ebp - 8], eax
call fcn.004080f7
push dword [edi + 4]
lea eax, [ebp - 8]
push ecx
mov ecx, esp
push eax
call fcn.00401355
call fcn.0044cf38
pop ecx
test eax, eax
pop ecx
je 0x441a4f
push 0x481664
push dword [ebp - 8]
call fcn.0046e2f0
mov esi, eax
pop ecx
cmp esi, ebx
pop ecx
mov dword [ebp - 0x38], esi
jne 0x441614
push ebx
push 0x48be08
push 0x4830e0
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x441a4f
push esi
push 1
pop edi
lea eax, [ebp - 0x68]
push edi
push 2
push eax
mov dword [ebp - 0x68], 0xfeff
call fcn.0046e186
mov eax, dword [0x481530]
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 4]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x34], ebx
call fcn.00401521
push str._TABLE_Border0__TR_
lea ecx, [ebp - 0x14]
call fcn.004013c7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401657
lea ecx, [ebp - 0x14]
call fcn.0040139b
mov eax, dword [ebp - 4]
push esi
lea ecx, [ebp - 4]
mov eax, dword [eax - 8]
add eax, eax
push eax
push edi
push ebx
call fcn.004016d3
push eax
call fcn.0046e186
add esp, 0x10
mov esi, 0x48be38
lea ecx, [ebp - 4]
push esi
call fcn.00401571
push esi
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x28], ebx
call fcn.004013c7
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push edi
push eax
push dword [ebp + 8]
mov dword [ebp - 0x30], ebx
call fcn.00441a76
test eax, eax
je 0x4419bf
mov eax, dword [ebp + 0x10]
inc eax
lea eax, [eax*4 + 4]
mov dword [ebp - 0x70], eax
push 0x48be08
push 0x4830dc
lea ecx, [ebp - 0x10]
call fcn.00401b5c
push dword [ebp - 0x70]
mov dword [ebp - 0x48], ebx
call fcn.0046d854
cmp eax, ebx
pop ecx
je 0x441723
mov ecx, dword [ebp + 0x10]
lea edi, [ecx + 1]
lea ecx, [eax + 4]
mov dword [eax], edi
mov edx, ecx
lea eax, [edi - 1]
cmp eax, ebx
jl 0x44171b
inc eax
mov edi, dword [0x481530]
mov dword [edx], edi
add edx, 4
dec eax
jne 0x44170d
push 1
mov dword [ebp - 0x1c], ecx
pop edi
jmp 0x441726
mov dword [ebp - 0x1c], ebx
lea eax, [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
push 9
push eax
lea eax, [ebp - 0xc]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00441b20
test eax, eax
je 0x441771
mov edi, dword [ebp - 0x1c]
lea eax, [ebp - 0xc]
mov ecx, edi
push eax
call fcn.00401521
lea eax, [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
push 9
push eax
lea eax, [ebp - 0xc]
push 1
push eax
lea eax, [ebp - 0x10]
push eax
add edi, 4
call fcn.00441b20
test eax, eax
jne 0x441744
push 1
pop edi
cmp dword [ebp - 0x30], ebx
jne 0x44179f
push str.___TR_BGCOLOREEEEEE_
lea ecx, [ebp - 0x5c]
call fcn.004013c7
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401657
lea ecx, [ebp - 0x5c]
call fcn.0040139b
mov dword [ebp - 0x30], edi
jmp 0x4417c6
push str.___TR_
lea ecx, [ebp - 0x3c]
call fcn.004013c7
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401657
lea ecx, [ebp - 0x3c]
call fcn.0040139b
mov dword [ebp - 0x30], ebx
push esi
lea ecx, [ebp - 0x18]
call fcn.00401571
cmp dword [ebp - 0x34], ebx
jne 0x4417e1
push 0x485b6c
lea ecx, [ebp - 0x18]
call fcn.00401571
mov eax, dword [ebp + 0x10]
cmp eax, ebx
jle 0x44193d
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x14], ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0xc]
call fcn.00401521
push str._nbsp_
push 0x483144
lea ecx, [ebp - 0xc]
call fcn.00401b5c
mov eax, dword [ebp - 0xc]
cmp dword [eax - 8], ebx
jle 0x4418c3
push str.__td_
lea ecx, [ebp - 0x60]
call fcn.004013c7
push str._nobr_
lea ecx, [ebp - 0x50]
call fcn.004013c7
push str._td_
lea ecx, [ebp - 0x64]
call fcn.004013c7
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004015b5
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004015b5
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004015b5
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.004015b5
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401657
lea ecx, [ebp - 0x80]
call fcn.0040139b
lea ecx, [ebp - 0x78]
call fcn.0040139b
lea ecx, [ebp - 0x6c]
call fcn.0040139b
lea ecx, [ebp - 0x74]
call fcn.0040139b
lea ecx, [ebp - 0x64]
call fcn.0040139b
lea ecx, [ebp - 0x50]
call fcn.0040139b
lea ecx, [ebp - 0x60]
jmp 0x44192b
push str.nbsp___td_
lea ecx, [ebp - 0x4c]
call fcn.004013c7
push str._td_
lea ecx, [ebp - 0x58]
call fcn.004013c7
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.004015b5
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004015b5
mov eax, dword [eax]
lea ecx, [ebp - 4]
push eax
push dword [eax - 8]
call fcn.00401657
lea ecx, [ebp - 0x7c]
call fcn.0040139b
lea ecx, [ebp - 0x84]
call fcn.0040139b
lea ecx, [ebp - 0x58]
call fcn.0040139b
lea ecx, [ebp - 0x4c]
call fcn.0040139b
add dword [ebp - 0x14], 4
dec dword [ebp - 0x54]
jne 0x4417f5
push str._____TR__r_n
lea ecx, [ebp - 0x40]
call fcn.004013c7
lea eax, [ebp - 0x40]
lea ecx, [ebp - 4]
push eax
call fcn.00408413
lea ecx, [ebp - 0x40]
call fcn.0040139b
inc dword [ebp - 0x34]
cmp dword [ebp - 0x28], 0x64
jle 0x441992
mov eax, dword [ebp - 4]
push dword [ebp - 0x38]
lea ecx, [ebp - 4]
mov eax, dword [eax - 8]
add eax, eax
push eax
push edi
push ebx
call fcn.004016d3
push eax
call fcn.0046e186
add esp, 0x10
lea ecx, [ebp - 4]
push esi
call fcn.00401571
mov dword [ebp - 0x28], ebx
mov ecx, dword [ebp - 0x1c]
inc dword [ebp - 0x28]
cmp ecx, ebx
je 0x4419a3
push 3
call fcn.0040d54a
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push edi
push eax
push dword [ebp + 8]
call fcn.00441a76
test eax, eax
jne 0x4416d6
push str.__TABLE_
lea ecx, [ebp + 0x10]
call fcn.004013c7
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004015b5
push eax
lea ecx, [ebp - 4]
call fcn.00408413
lea ecx, [ebp + 8]
call fcn.0040139b
lea ecx, [ebp + 0x10]
call fcn.0040139b
mov eax, dword [ebp - 4]
push dword [ebp - 0x38]
lea ecx, [ebp - 4]
mov eax, dword [eax - 8]
add eax, eax
push eax
push edi
push ebx
call fcn.004016d3
push eax
call fcn.0046e186
push dword [ebp - 0x38]
call fcn.0046e109
add esp, 0x14
push edi
push ebx
push ebx
push dword [ebp - 8]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x18]
call fcn.0040139b
lea ecx, [ebp - 0x10]
call fcn.0040139b
lea ecx, [ebp - 0xc]
call fcn.0040139b
lea ecx, [ebp - 4]
call fcn.0040139b
lea ecx, [ebp - 8]
call fcn.0040139b
lea ecx, [ebp - 0x20]
call fcn.0040139b
lea ecx, [ebp - 0x24]
call fcn.0040139b
lea ecx, [ebp + 0xc]
call fcn.0040139b
pop edi
pop esi
pop ebx
leave
ret 0xc