Function at 0x4044d7
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
cmp eax, ebx
mov dword [esi + 0x74], eax
je 0x4045d5
push 1
push str.Not_connected...plase_wait...
call fcn.00404f84
mov edx, dword [0x413d28]
cmp edx, ebx
je 0x40454b
mov al, byte [0x413d40]
push 0x7f
mov byte [ebp - 0x234], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x233]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x234]
push 0x200
push eax
push dword [esi + 0x74]
call edx
test eax, eax
jne 0x40454b
lea eax, [ebp - 0x234]
push 1
push eax
mov ecx, esi
call fcn.00404f84
push ebx
mov ecx, 0x413c60
call fcn.00401ffd
mov eax, dword [esi + 0x68]
cmp eax, 3
jge 0x40457c
cmp dword [esi + 4], ebx
je 0x40457c
push ebx
push ebx
push 0x806b
inc eax
push dword [esi + 0x48]
mov dword [esi + 0x68], eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x404717
push ebx
push ebx
push 0x8069
mov dword [esi + 0x68], ebx
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
push 0x402fa3
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_EnumChildWindows]
push 0x3b
lea eax, [ebp - 0x34]
push dword [esi + 0x60]
mov dword [esi + 4], ebx
push str.Connect_Verbinden_Conectar_
push eax
call fcn.00402ac9
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
push 1
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x404717
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x404709
dec eax
dec eax
je 0x404700
sub eax, 3
je 0x4046f7
dec eax
je 0x4046ee
sub eax, 4
je 0x4046e5
sub eax, 0x1ff6
je 0x404622
dec eax
je 0x404617
push 1
push str.Wait_to_Response_from_Server...
jmp 0x404710
push ebx
push str.Disconnected
jmp 0x404710
mov edi, dword [sym.imp.KERNEL32.DLL_Sleep]
mov ebx, 0x3e8
push ebx
call edi
push 1
push str.Connected
mov ecx, esi
call fcn.00404f84
push ebx
call edi
push 1
push str.Starting_Internet_Browser...
mov ecx, esi
call fcn.00404f84
push ebx
call edi
push 0xa
mov ecx, esi
call fcn.0040513e
push 1
mov ecx, esi
pop edi
push edi
call fcn.0040491e
xor ebx, ebx
cmp dword [esi + 0x44], ebx
jne 0x404680
push str.http:__www.redirserver.com_update4.cfm_tidcn_id
mov ecx, esi
call fcn.00404e35
test eax, eax
je 0x404680
mov dword [esi + 0x44], edi
mov eax, dword [esi + 0x6c]
mov ecx, dword [0x413d14]
imul eax, eax, 0x798
push 3
push ebx
lea eax, [eax + ecx + 0x489]
push ebx
push eax
push str.open
push dword [esi + 0x48]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jbe 0x4046cc
mov ecx, esi
call fcn.00405a5c
push edi
push str.Internet_Browser_started
mov ecx, esi
call fcn.00404f84
push edi
mov ecx, esi
call fcn.00404106
jmp 0x4046e1
push ebx
mov ecx, esi
call fcn.00404106
push edi
push str.Start_Internet_Browser_fail.
mov ecx, esi
call fcn.00404f84
mov eax, edi
jmp 0x404719
push 1
push str.Connecting_to_the_Network...
jmp 0x404710
push 1
push str.Authentication_event.
jmp 0x404710
push 1
push str.Authentication...
jmp 0x404710
push 1
push str.Connecting_...
jmp 0x404710
push 1
push str.Opening_the_port...
mov ecx, esi
call fcn.00404f84
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8