Function at 0x405085
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x42a2e4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push esi
movzx esi, word [ebp + 0xc]
push edi
push 0xffffffffffffffeb
push esi
push eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
xor edi, edi
cmp eax, edi
je 0x4050cf
push dword [ebp - 0x20]
push dword [ebp + 0xc]
push 0x111
push eax
jmp 0x40525a
mov eax, 0x3f8
cmp esi, eax
jg 0x4052f4
je 0x4052d7
add eax, 0xfffffff5
cmp esi, eax
jg 0x40520c
je 0x4051df
sub esi, 0x33
je 0x405183
sub esi, 5
je 0x405135
sub esi, 0x3b2
je 0x40511c
dec esi
dec esi
jne 0x4053d5
push edi
push edi
push 0x4062a6
push 0x6b
jmp 0x405125
push edi
push edi
push section..text
push 0x67
push dword [ebp - 0x1c]
call fcn.0040d6ef
add esp, 0x14
jmp 0x4053d5
push 0xce4
push dword [ebp - 0x1c]
call ebx
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push 0xffffffffffffffff
mov ebx, eax
push 0x100c
push ebx
call esi
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5c]
push eax
push edi
push 0x1005
push ebx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x5c], 4
call esi
test eax, eax
je 0x4053d5
push dword [ebp - 0x3c]
push edi
push 0x8072
jmp 0x405257
push 1
push 0xffffffffffffffff
push 0x100c
push 0x5e1
push dword [ebp - 0x1c]
call ebx
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
call esi
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5c]
push eax
push edi
push 0x1005
push 0x5e1
push dword [ebp - 0x1c]
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x5c], 4
call ebx
push eax
call esi
test eax, eax
je 0x4053d5
cmp dword [ebp - 0x3c], edi
je 0x4053d5
push dword [ebp - 0x3c]
push edi
push 0x806c
jmp 0x405257
mov esi, dword [0x433afc]
push str.Requesting_Directory_Content_n
call fcn.0040cc99
mov dword [esp], 0x425a7d
xor eax, eax
push 0xd9
push esi
inc eax
call fcn.00403914
add esp, 0xc
jmp 0x4053d5
sub esi, 0x3ef
je 0x4052bb
dec esi
je 0x405265
sub esi, 4
jne 0x4053d5
push 1
push dword [ebp - 0x1c]
mov esi, 0x442a18
call fcn.0040374b
pop ecx
pop ecx
test eax, eax
je 0x4053d5
push esi
push 0x3f8
push dword [ebp - 0x1c]
call ebx
push eax
call fcn.00407306
pop ecx
pop ecx
push edi
push edi
push 0x806f
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4053d5
mov eax, dword [ebp + 0xc]
shr eax, 0x10
cmp ax, 1
jne 0x4053d5
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edi
push edi
push 0x147
push dword [ebp - 0x20]
call esi
push edi
mov ebx, eax
push ebx
push 0x149
push dword [ebp - 0x20]
call esi
cmp eax, 0x14
jae 0x4053d5
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x148
push dword [ebp - 0x20]
call esi
lea eax, [ebp - 0x18]
push eax
call fcn.0040d8d5
jmp 0x4053d4
push 1
push edi
push edi
push 0x441e60
push str.open
push dword [ebp - 0x1c]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4053d5
mov eax, dword [ebp + 0xc]
shr eax, 0x10
cmp ax, 1
jne 0x4053d5
mov ebx, dword [ebp - 0x20]
call fcn.0040734b
jmp 0x405250
mov eax, 0x641
cmp esi, eax
jg 0x40537b
je 0x405367
mov eax, 0x44c
sub esi, eax
je 0x40531d
sub esi, 0x192
je 0x405354
dec esi
dec esi
je 0x405343
sub esi, 0x60
jne 0x4053d5
mov eax, dword [ebp + 0xc]
shr eax, 0x10
cmp ax, 5
jne 0x4053d5
push edi
push 0xffffffffffffffff
push 0x186
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x4053d5
push eax
push dword [ebp - 0x1c]
call ebx
push eax
call fcn.0040d9e5
jmp 0x4053d4
push edi
push edi
push 0x184
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
jmp 0x4053d5
push edi
push edi
push 0x1009
push 0x640
push dword [ebp - 0x1c]
call ebx
push eax
jmp 0x405338
cmp esi, 0x642
je 0x4053c1
cmp esi, 0x709
je 0x40531d
cmp esi, 0xc80
jne 0x4053d5
mov ecx, dword [ebp - 0x1c]
call fcn.004041b1
test eax, eax
je 0x4053b5
push edi
push 0x4258cc
push str.DHCP_Configuration_has_been_saved
push dword [ebp - 0x1c]
call fcn.0040c856
add esp, 0x10
push edi
push edi
push 0x8071
jmp 0x405257
push 3
push 0x640
push dword [ebp - 0x1c]
call ebx
push eax
call fcn.0040daa1
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0040e92f
leave
ret