Function at 0x404b3e
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x42a43c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
movzx ebx, word [ebp + 0xc]
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push edi
push 0xffffffffffffffeb
push ebx
push eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
xor edi, edi
cmp eax, edi
je 0x404b88
push dword [ebp - 0x20]
push dword [ebp + 0xc]
push 0x111
push eax
jmp 0x404cef
mov eax, 0x3f8
cmp ebx, eax
jg 0x404d8a
je 0x404d6d
add eax, 0xfffffff5
cmp ebx, eax
jg 0x404c9f
je 0x404c8f
sub ebx, 0x33
je 0x404c3c
sub ebx, 5
je 0x404bee
sub ebx, 0x3b2
je 0x404bd5
dec ebx
dec ebx
jne 0x404e5e
push edi
push edi
push 0x405c7e
push 0x6b
jmp 0x404bde
push edi
push edi
push section..text
push 0x67
push dword [ebp - 0x1c]
call fcn.0040cdd4
add esp, 0x14
jmp 0x404e5e
push 0xce4
push dword [ebp - 0x1c]
call esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push 0xffffffffffffffff
mov ebx, eax
push 0x100c
push ebx
call esi
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5c]
push eax
push edi
push 0x1005
push ebx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x5c], 4
call esi
test eax, eax
je 0x404e5e
push dword [ebp - 0x3c]
push edi
push 0x8072
jmp 0x404cec
push 1
push 0xffffffffffffffff
push 0x100c
push 0x5e1
push dword [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push eax
call ebx
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5c]
push eax
push edi
push 0x1005
push 0x5e1
push dword [ebp - 0x1c]
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x5c], 4
call esi
push eax
call ebx
test eax, eax
je 0x404e5e
push dword [ebp - 0x3c]
push edi
push 0x806c
jmp 0x404cec
push dword [0x431c0c]
call fcn.00403fda
jmp 0x404d4b
sub ebx, 0x3ef
je 0x404d51
dec ebx
je 0x404cfa
sub ebx, 4
jne 0x404e5e
push 1
mov ebx, 0x440430
push ebx
push dword [ebp - 0x1c]
call fcn.004036c8
add esp, 0xc
test eax, eax
je 0x404e5e
push ebx
push 0x3f8
push dword [ebp - 0x1c]
call esi
push eax
call fcn.00406c9c
pop ecx
pop ecx
push edi
push edi
push 0x806f
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x404e5e
mov eax, dword [ebp + 0xc]
shr eax, 0x10
cmp ax, 1
jne 0x404e5e
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edi
push edi
push 0x147
push dword [ebp - 0x20]
call esi
push edi
mov ebx, eax
push ebx
push 0x149
push dword [ebp - 0x20]
call esi
cmp eax, 0x14
jae 0x404e5e
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x148
push dword [ebp - 0x20]
call esi
lea eax, [ebp - 0x18]
push eax
call fcn.0040cfba
pop ecx
jmp 0x404e5e
push 1
push edi
push edi
push 0x43f880
push str.open
push dword [ebp - 0x1c]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x404e5e
mov eax, dword [ebp + 0xc]
shr eax, 0x10
cmp ax, 1
jne 0x404e5e
push dword [ebp - 0x20]
call fcn.00406ce1
jmp 0x404ce4
mov eax, 0x44c
sub ebx, eax
je 0x404e41
sub ebx, 0x192
je 0x404e2e
dec ebx
dec ebx
je 0x404e1d
sub ebx, 0x60
je 0x404e41
dec ebx
je 0x404e09
dec ebx
je 0x404df1
sub ebx, 0x63e
jne 0x404e5e
push dword [ebp - 0x1c]
call fcn.00403c27
pop ecx
test eax, eax
je 0x404de5
push edi
push 0x422f98
push 0x423698
push dword [ebp - 0x1c]
call fcn.0040bf58
add esp, 0x10
push edi
push edi
push 0x8071
jmp 0x404cec
push 3
push 0x640
push dword [ebp - 0x1c]
call esi
push eax
call fcn.0040d186
pop ecx
jmp 0x404d4b
push edi
push edi
push 0x1009
push 0x640
push dword [ebp - 0x1c]
call esi
push eax
jmp 0x404e58
push eax
push dword [ebp - 0x1c]
call esi
push eax
call fcn.0040d0ca
jmp 0x404d4b
push edi
push edi
push 0x184
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
jmp 0x404e5e
mov eax, dword [ebp + 0xc]
shr eax, 0x10
cmp ax, 5
jne 0x404e5e
push edi
push 0xffffffffffffffff
push 0x186
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0040e208
leave
ret