Function at 0x404482
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x234
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
cmp eax, ebx
mov dword [esi + 0x78], eax
je 0x404584
push 1
push str.Not_connected...plase_wait...
call fcn.00404f68
mov edx, dword [0x413c58]
cmp edx, ebx
je 0x4044f6
mov al, byte [0x413c70]
push 0x7f
mov byte [ebp - 0x234], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x233]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x234]
push 0x200
push eax
push dword [esi + 0x78]
call edx
test eax, eax
jne 0x4044f6
lea eax, [ebp - 0x234]
push 1
push eax
mov ecx, esi
call fcn.00404f68
push ebx
mov ecx, 0x413b90
call fcn.00401ffd
mov eax, dword [esi + 0x6c]
cmp eax, 3
jge 0x404527
cmp dword [esi + 4], ebx
je 0x404527
push ebx
push ebx
push 0x806b
inc eax
push dword [esi + 0x4c]
mov dword [esi + 0x6c], eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4046c6
push ebx
push ebx
push 0x8069
mov dword [esi + 0x6c], ebx
push dword [esi + 0x4c]
call dword [sym.imp.USER32.dll_SendMessageA]
push 1
pop edi
push edi
push 0x402fa3
push dword [esi + 0x4c]
call dword [sym.imp.USER32.dll_EnumChildWindows]
push 0x3b
lea eax, [ebp - 0x34]
push dword [esi + 0x64]
mov dword [esi + 4], ebx
push str.Connect_Verbinden_Conectar_
push eax
call fcn.00402ac9
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
push edi
push dword [esi + 0x4c]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push dword [esi + 0x4c]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [esi + 0x30], edi
jmp 0x4046c6
mov eax, dword [ebp + 8]
sub eax, ebx
je 0x4046b8
dec eax
dec eax
je 0x4046af
sub eax, 3
je 0x4046a6
dec eax
je 0x40469d
sub eax, 4
je 0x404694
sub eax, 0x1ff6
je 0x4045d1
dec eax
je 0x4045c6
push 1
push str.Wait_to_Response_from_Server...
jmp 0x4046bf
push ebx
push str.Disconnected
jmp 0x4046bf
mov edi, dword [sym.imp.KERNEL32.DLL_Sleep]
mov ebx, 0x3e8
push ebx
call edi
push 1
push str.Connected
mov ecx, esi
call fcn.00404f68
push ebx
call edi
push 1
push str.Starting_Internet_Browser...
mov ecx, esi
call fcn.00404f68
push ebx
call edi
push 0xa
mov ecx, esi
call fcn.00405122
push 1
mov ecx, esi
pop edi
push edi
call fcn.00404927
xor ebx, ebx
cmp dword [esi + 0x48], ebx
jne 0x40462f
push str.http:__www.redirserver.com_update4.cfm_tidcn_id
mov ecx, esi
call fcn.00404e41
test eax, eax
je 0x40462f
mov dword [esi + 0x48], edi
mov eax, dword [esi + 0x70]
mov ecx, dword [0x413c44]
imul eax, eax, 0x798
push 3
push ebx
lea eax, [eax + ecx + 0x489]
push ebx
push eax
push str.open
push dword [esi + 0x4c]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jbe 0x40467b
mov ecx, esi
call fcn.0040596a
push edi
push str.Internet_Browser_started
mov ecx, esi
call fcn.00404f68
push edi
mov ecx, esi
call fcn.004040b1
jmp 0x404690
push ebx
mov ecx, esi
call fcn.004040b1
push edi
push str.Start_Internet_Browser_fail.
mov ecx, esi
call fcn.00404f68
mov eax, edi
jmp 0x4046c8
push 1
push str.Connecting_to_the_Network...
jmp 0x4046bf
push 1
push str.Authentication_event.
jmp 0x4046bf
push 1
push str.Authentication...
jmp 0x4046bf
push 1
push str.Connecting_...
jmp 0x4046bf
push 1
push str.Opening_the_port...
mov ecx, esi
call fcn.00404f68
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8