Function at 0x4ab330
Capabilities:
Check internet connectivity via wininet
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x4ab338
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4ab8a9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x53ce64]
mov edx, 0x4ab8c0
call fcn.004056d0
jne 0x4ab3b0
push 0
lea eax, [ebp - 8]
push eax
call sub.wininet.dll_InternetGetConnectedState
test eax, eax
je 0x4ab3a4
mov eax, 0x4ab8cc
call fcn.004404a4
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c9a8
jmp 0x4ab869
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x53ce34]
mov edx, 0x4ab900
call fcn.004056d0
jne 0x4ab869
mov eax, dword [0x53cea0]
mov edx, 0x4ab8c0
call fcn.004056d0
jne 0x4ab3f0
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
or ecx, 0xffffffff
mov edx, 0x18
call fcn.00473104
jmp 0x4ab418
mov eax, dword [0x53cea0]
mov edx, 0x4ab90c
call fcn.004056d0
jne 0x4ab418
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
xor ecx, ecx
mov edx, 0x18
call fcn.00473104
call fcn.004033d8
lea eax, [ebp - 4]
mov edx, 0x4ab918
call fcn.00405340
mov eax, 0x18
call fcn.00403400
mov edx, eax
inc edx
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.004367b0
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0xc]
mov edx, 1
call fcn.004367cc
mov edx, dword [ebp - 0xc]
lea eax, [ebp - 4]
call fcn.00405340
mov eax, 0x270f
call fcn.00403400
lea edx, [ebp - 0x2c]
call fcn.00409f44
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.0049fb84
lea eax, [ebp - 0x28]
lea edx, [ebp - 0x18]
call fcn.0049fbfc
mov eax, dword [ebp - 0x18]
push eax
mov eax, 5
call fcn.00403400
mov edx, eax
inc edx
lea ecx, [ebp - 0x14]
pop eax
call fcn.004367b0
mov edx, dword [ebp - 0x14]
mov eax, 0x53cf28
call fcn.004052fc
push dword [ebp - 4]
push 0x4ab93c
push dword [0x53cf28]
push 0x4ab948
mov eax, 0x53cf28
mov edx, 4
call fcn.0040563c
mov eax, 0x270f
call fcn.00403400
lea edx, [ebp - 0x38]
call fcn.00409f44
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x28]
call fcn.0049fb84
lea eax, [ebp - 0x28]
lea edx, [ebp - 0x34]
call fcn.0049fbfc
mov eax, dword [ebp - 0x34]
push eax
mov eax, 0x14
call fcn.00403400
mov edx, eax
add edx, 0xa
lea ecx, [ebp - 0x30]
pop eax
call fcn.004367b0
mov edx, dword [ebp - 0x30]
mov eax, 0x53cf2c
call fcn.004052fc
mov eax, dword [0x53cea4]
mov edx, 0x4ab8c0
call fcn.004056d0
jne 0x4ab535
call fcn.004a72ec
mov eax, dword [0x53cef4]
mov edx, 0x4ab8c0
call fcn.004056d0
jne 0x4ab595
lea eax, [ebp - 0x3c]
call fcn.004ab238
push dword [ebp - 0x3c]
push dword [0x53cf2c]
lea edx, [ebp - 0x40]
mov eax, dword [0x53ce3c]
call fcn.004aa318
push dword [ebp - 0x40]
mov eax, 0x53cf24
mov edx, 3
call fcn.0040563c
lea edx, [ebp - 0x44]
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046d010
mov eax, dword [ebp - 0x44]
mov edx, dword [0x53cf24]
call fcn.004aaa48
jmp 0x4ab5dd
push dword [0x53cf28]
push dword [0x53cf2c]
lea edx, [ebp - 0x48]
mov eax, dword [0x53ce3c]
call fcn.004aa318
push dword [ebp - 0x48]
mov eax, 0x53cf24
mov edx, 3
call fcn.0040563c
lea edx, [ebp - 0x4c]
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046d010
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x53cf24]
call fcn.004aae50
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c6d8
lea eax, [ebp - 0x50]
mov edx, dword [0x53cf24]
call fcn.00405c00
mov ecx, dword [ebp - 0x50]
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
mov edx, 1
call fcn.004734d4
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x360]
xor ecx, ecx
mov edx, 0x16
call fcn.00473104
cmp dword [0x53ce98], 0
je 0x4ab686
cmp dword [0x53ce9c], 0
je 0x4ab686
xor eax, eax
push ebp
push 0x4ab67c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x53ce9c]
call fcn.0040a080
mov edx, eax
mov eax, dword [0x53ce30]
call fcn.0044e57c
mov eax, dword [0x53ce98]
call fcn.0040a080
mov edx, eax
mov eax, dword [0x53ce30]
call fcn.0044e5b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ab686
mov eax, dword [0x53cee4]
mov edx, 0x4ab90c
call fcn.004056d0
jne 0x4ab6a3
mov dl, 3
mov eax, dword [0x53ce30]
call fcn.0046533c
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x5365e0]
cmp dword [eax], 0
je 0x4ab751
xor eax, eax
push ebp
push 0x4ab747
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x53ce30]
call fcn.00464020
mov ebx, eax
mov eax, dword [0x53ce80]
call fcn.0040a080
add ebx, eax
mov edx, ebx
mov eax, dword [0x536368]
mov eax, dword [eax]
call fcn.00469650
mov eax, dword [0x53ce30]
call fcn.00464040
mov ebx, eax
mov eax, dword [0x53ce84]
call fcn.0040a080
add ebx, eax
mov edx, ebx
mov eax, dword [0x536368]
mov eax, dword [eax]
call fcn.0046968c
mov edx, dword [0x5365e0]
mov edx, dword [edx]
mov eax, dword [0x536368]
mov eax, dword [eax]
mov eax, dword [eax + 0x360]
call fcn.0044eec4
mov eax, dword [0x536368]
mov eax, dword [eax]
call fcn.00468c4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ab751
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c6d8
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x36c]
mov dl, 1
call fcn.0043a4e8
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x368]
mov dl, 1
call fcn.0043a4e8
cmp dword [0x53ceb8], 0
je 0x4ab7b5
mov eax, dword [0x53ceb8]
mov edx, 0x4ab954
call fcn.004056d0
je 0x4ab7b5
push 1
push 0
push 0
mov eax, dword [0x53ceb8]
call fcn.00405738
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x54]
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x374]
call fcn.0044ee94
mov edx, dword [ebp - 0x54]
mov eax, 0x4ab964
call fcn.00405884
test eax, eax
jg 0x4ab7e5
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c9a8
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x374]
mov edx, 0xc0
call fcn.0044e57c
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x374]
mov edx, 0x11
call fcn.0044e5b0
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x374]
mov dl, 1
call fcn.0044edb4
mov eax, dword [0x53ce30]
mov eax, dword [eax + 0x374]
call fcn.0044f124
mov eax, dword [0x5363d4]
mov eax, dword [eax]
call fcn.0046c6d8
xor eax, eax
push ebp
push 0x4ab85f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004411f8
mov edx, dword [eax]
call dword [edx + 0x18]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ab869
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ab8b0
lea eax, [ebp - 0x54]
call fcn.004052a8
lea eax, [ebp - 0x50]
call fcn.00405ab0
lea eax, [ebp - 0x4c]
mov edx, 9
call fcn.004052cc
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.004052cc
lea eax, [ebp - 4]
call fcn.004052a8
ret