Function at 0x4ab5b0
Capabilities:
Check internet connectivity via wininet
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x4ab5b8
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4abaa4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x53ce64]
mov edx, 0x4ababc
call fcn.004056d0
jne 0x4ab62f
push 0
lea eax, [ebp - 8]
push eax
call sub.wininet.dll_InternetGetConnectedState
test eax, eax
je 0x4ab623
mov eax, 0x4abac8
call fcn.004404a4
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c9a8
jmp 0x4aba6c
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x53ce34]
mov edx, 0x4abafc
call fcn.004056d0
jne 0x4aba6c
mov eax, dword [0x53cea0]
mov edx, 0x4ababc
call fcn.004056d0
jne 0x4ab66f
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
or ecx, 0xffffffff
mov edx, 0x18
call fcn.00473104
jmp 0x4ab697
mov eax, dword [0x53cea0]
mov edx, 0x4abb08
call fcn.004056d0
jne 0x4ab697
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
xor ecx, ecx
mov edx, 0x18
call fcn.00473104
call fcn.004033d8
lea eax, [ebp - 4]
mov edx, 0x4abb14
call fcn.00405340
mov eax, 0x18
call fcn.00403400
mov edx, eax
inc edx
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004367b0
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0xc]
mov edx, 1
call fcn.004367cc
mov edx, dword [ebp - 0xc]
lea eax, [ebp - 4]
call fcn.00405340
mov eax, 0x270f
call fcn.00403400
lea edx, [ebp - 0x2c]
call fcn.00409f44
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.0049fb84
lea eax, [ebp - 0x28]
lea edx, [ebp - 0x18]
call fcn.0049fbfc
mov eax, dword [ebp - 0x18]
push eax
mov eax, 5
call fcn.00403400
mov edx, eax
inc edx
lea ecx, [ebp - 0x14]
pop eax
call fcn.004367b0
mov edx, dword [ebp - 0x14]
mov eax, 0x53cf28
call fcn.004052fc
push dword [ebp - 4]
push 0x4abb38
push dword [0x53cf28]
push 0x4abb44
mov eax, 0x53cf28
mov edx, 4
call fcn.0040563c
mov eax, 0x270f
call fcn.00403400
lea edx, [ebp - 0x38]
call fcn.00409f44
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x28]
call fcn.0049fb84
lea eax, [ebp - 0x28]
lea edx, [ebp - 0x34]
call fcn.0049fbfc
mov eax, dword [ebp - 0x34]
push eax
mov eax, 0x14
call fcn.00403400
mov edx, eax
add edx, 0xa
lea ecx, [ebp - 0x30]
pop eax
call fcn.004367b0
mov edx, dword [ebp - 0x30]
mov eax, 0x53cf2c
call fcn.004052fc
mov eax, dword [0x53cea4]
mov edx, 0x4ababc
call fcn.004056d0
jne 0x4ab7b4
call fcn.004a7348
mov eax, dword [0x53cef4]
mov edx, 0x4ababc
call fcn.004056d0
jne 0x4ab814
lea eax, [ebp - 0x3c]
call fcn.004ab4b8
push dword [ebp - 0x3c]
push dword [0x53cf2c]
lea edx, [ebp - 0x40]
mov eax, dword [0x53ce3c]
call fcn.004aa598
push dword [ebp - 0x40]
mov eax, 0x53cf24
mov edx, 3
call fcn.0040563c
lea edx, [ebp - 0x44]
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046d010
mov eax, dword [ebp - 0x44]
mov edx, dword [0x53cf24]
call fcn.004aacc8
jmp 0x4ab85c
push dword [0x53cf28]
push dword [0x53cf2c]
lea edx, [ebp - 0x48]
mov eax, dword [0x53ce3c]
call fcn.004aa598
push dword [ebp - 0x48]
mov eax, 0x53cf24
mov edx, 3
call fcn.0040563c
lea edx, [ebp - 0x4c]
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046d010
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x53cf24]
call fcn.004ab0d0
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c6d8
lea eax, [ebp - 0x50]
mov edx, dword [0x53cf24]
call fcn.00405c00
mov ecx, dword [ebp - 0x50]
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
mov edx, 1
call fcn.004734d4
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
xor ecx, ecx
mov edx, 0x16
call fcn.00473104
cmp dword [0x53ce98], 0
je 0x4ab905
cmp dword [0x53ce9c], 0
je 0x4ab905
xor eax, eax
push ebp
push 0x4ab8fb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x53ce9c]
call fcn.0040a080
mov edx, eax
mov eax, dword [0x53ce30]
call fcn.0044e57c
mov eax, dword [0x53ce98]
call fcn.0040a080
mov edx, eax
mov eax, dword [0x53ce30]
call fcn.0044e5b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ab905
mov eax, dword [0x53cee4]
mov edx, 0x4abb08
call fcn.004056d0
jne 0x4ab922
mov dl, 3
mov eax, dword [0x53ce30]
call fcn.0046533c
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x5365f0]
cmp dword [eax], 0
je 0x4ab9d0
xor eax, eax
push ebp
push 0x4ab9c6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x53ce30]
call fcn.00464020
mov ebx, eax
mov eax, dword [0x53ce80]
call fcn.0040a080
add ebx, eax
mov edx, ebx
mov eax, dword [0x53636c]
mov eax, dword [eax]
call fcn.00469650
mov eax, dword [0x53ce30]
call fcn.00464040
mov ebx, eax
mov eax, dword [0x53ce84]
call fcn.0040a080
add ebx, eax
mov edx, ebx
mov eax, dword [0x53636c]
mov eax, dword [eax]
call fcn.0046968c
mov edx, dword [0x5365f0]
mov edx, dword [edx]
mov eax, dword [0x53636c]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
call fcn.0044eec4
mov eax, dword [0x53636c]
mov eax, dword [eax]
call fcn.00468c4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ab9d0
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x36c]
mov dl, 1
call fcn.0043a4e8
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x368]
mov dl, 1
call fcn.0043a4e8
cmp dword [0x53ceb8], 0
je 0x4aba34
mov eax, dword [0x53ceb8]
mov edx, 0x4abb50
call fcn.004056d0
je 0x4aba34
push 1
push 0
push 0
mov eax, dword [0x53ceb8]
call fcn.00405738
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [0x5363d8]
mov eax, dword [eax]
call fcn.0046c6d8
xor eax, eax
push ebp
push 0x4aba62
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004411f8
mov edx, dword [eax]
call dword [edx + 0x18]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aba6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4abaab
lea eax, [ebp - 0x50]
call fcn.00405ab0
lea eax, [ebp - 0x4c]
mov edx, 9
call fcn.004052cc
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.004052cc
lea eax, [ebp - 4]
call fcn.004052a8
ret