Function at 0x402569
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x427484]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
movzx esi, word [ebp + 8]
push edi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0xffffffffffffffeb
mov ebx, ecx
push esi
push ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
xor ecx, ecx
cmp eax, ecx
je 0x4025b5
push dword [ebp - 0x44]
push dword [ebp + 8]
push 0x111
push eax
jmp 0x4027cc
mov eax, 0xfa2
cmp esi, eax
jg 0x402725
je 0x402717
mov eax, 0x640
cmp esi, eax
jg 0x4026df
je 0x40275a
sub esi, 0x33
je 0x40267c
sub esi, 5
je 0x402624
sub esi, 0x5a6
je 0x40260c
dec esi
dec esi
jne 0x40287b
push 0x1004
push ebx
call edi
push eax
call fcn.0040e450
jmp 0x402825
push ecx
push ecx
push 0x184
push 0x1004
push ebx
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
jmp 0x40287b
push 0xce4
push ebx
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 1
push 0xffffffffffffffff
mov edi, eax
push 0x100c
push edi
call esi
cmp eax, 0xffffffff
je 0x40287b
and dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0x1005
push edi
mov dword [ebp - 0x40], 4
call esi
test eax, eax
je 0x40287b
push dword [ebp - 0x20]
push 0
push 0x8072
jmp 0x4027cb
push 1
push 0xffffffffffffffff
push 0x100c
mov ebx, 0x5e1
push ebx
push dword [ebp - 0x48]
call edi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
call esi
and dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0x1005
push ebx
push dword [ebp - 0x48]
mov dword [ebp - 0x40], 4
call edi
push eax
call esi
test eax, eax
je 0x40287b
cmp dword [ebp - 0x20], 0
je 0x40287b
push dword [ebp - 0x20]
push 0
push 0x806c
push dword [ebp - 0x48]
jmp 0x4027cc
sub esi, 0x641
je 0x402709
dec esi
je 0x4026f7
sub esi, 0xc7
je 0x40275a
jmp 0x40287b
push 3
push eax
push ebx
call edi
push eax
call fcn.0040e51b
pop ecx
jmp 0x402825
push ecx
push ecx
push 0x1009
push eax
push ebx
call edi
push eax
jmp 0x402775
push ecx
push ecx
push 0x401146
push 0x67
jmp 0x402872
sub esi, 0xfa4
je 0x402869
dec esi
je 0x40283f
dec esi
dec esi
je 0x402828
dec esi
je 0x4027d7
sub esi, 4
je 0x40279a
sub esi, 4
je 0x402780
sub esi, 0x54
jne 0x40287b
mov eax, dword [ebp + 8]
shr eax, 0x10
cmp ax, 5
jne 0x40287b
push ecx
push 0xffffffffffffffff
push 0x186
push dword [ebp - 0x44]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x40287b
mov eax, dword [ebp + 8]
shr eax, 0x10
cmp ax, 1
jne 0x40287b
push dword [ebp - 0x44]
call fcn.00405602
jmp 0x4027c1
push 1
push ebx
mov esi, 0x444f48
call fcn.004011d7
pop ecx
pop ecx
test eax, eax
je 0x40287b
push esi
push 0xfb0
push ebx
call edi
push eax
call fcn.004055bd
pop ecx
pop ecx
push 0
push 0
push 0x806f
push ebx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x40287b
mov eax, dword [ebp + 8]
shr eax, 0x10
cmp ax, 1
jne 0x40287b
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push ecx
push ecx
push 0x147
push dword [ebp - 0x44]
call esi
push 0
mov edi, eax
push edi
push 0x149
push dword [ebp - 0x44]
call esi
cmp eax, 0x28
jae 0x40287b
lea eax, [ebp - 0x2c]
push eax
push edi
push 0x148
push dword [ebp - 0x44]
call esi
lea eax, [ebp - 0x2c]
push eax
call fcn.0040e30a
pop ecx
jmp 0x40287b
push 1
push ecx
push ecx
push 0x444340
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x40287b
mov esi, dword [0x431934]
push str.Requesting_Directory_Content_n
call fcn.0040e70d
mov dword [esp], 0x442908
xor eax, eax
push 0xd9
push esi
inc eax
call section..text
add esp, 0xc
jmp 0x40287b
push ecx
push ecx
push 0x4049c7
push 0x6b
push ebx
call fcn.0040e100
add esp, 0x14
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0040ffa3
leave
ret