Function at 0x411580
Capabilities:
Hide graphical window
Resolve dns

Disassembly:
mov eax, dword [0x42874c]
mov ecx, dword [0x42842c]
sub esp, 0x40
test ah, 0x20
push ebp
push esi
push edi
jne 0x4115a6
and eax, 0x200
je 0x41160b
mov byte [0x429444], 0
jmp 0x4115c0
mov dl, byte [0x41e170]
and eax, 0x200
je 0x4115fa
cmp ecx, 0xa
jge 0x4115fa
cmp byte [0x429444], dl
ja 0x4115fa
mov eax, dword [0x428cc8]
push 1
push 0x12f
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov ecx, dword [0x428cd4]
push ecx
call dword [sym.imp.USER32.dll_DrawMenuBar]
mov edx, dword [0x428cd4]
push 0
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x40
ret 0xc
test eax, eax
je 0x41160b
cmp ecx, 0xa
jl 0x411614
inc dl
mov byte [0x429444], dl
cmp ecx, 0xa
jge 0x411b13
call fcn.004097d0
test al, al
jne 0x41166f
mov eax, dword [0x4283c4]
push 1
cmp eax, 0x804
jne 0x411637
push 0x41f518
push 0x41f4ec
jmp 0x411641
push str.info
push str.___You_computer_must_be_reboot_now
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
jne 0x411653
call fcn.00410970
mov eax, dword [esp + 0x50]
push 0
push 0
push 2
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x40
ret 0xc
mov eax, dword [0x42874c]
mov ebp, 0x80000
test ebp, eax
mov dword [0x428cc0], 0
mov dword [0x42842c], 0
je 0x4116bc
mov eax, dword [0x42952c]
test eax, eax
jne 0x4116bc
mov ecx, dword [esp + 0x50]
push 0
push 0x13e
push 0x111
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x40
ret 0xc
mov al, byte [0x429498]
mov edx, dword [0x429490]
test al, 2
je 0x411806
mov cl, byte [0x41e1c6]
test cl, cl
je 0x411806
test al, 8
je 0x411806
test edx, edx
je 0x411806
mov eax, dword [0x428430]
cmp byte [eax], 0
je 0x411806
mov eax, dword [0x41e154]
test eax, eax
jne 0x411740
mov edi, 0x4293d8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push eax
mov edx, ecx
mov esi, edi
mov edi, 0x428cac
push 0x428cac
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0040af30
add esp, 4
push eax
call fcn.004051a0
add esp, 8
mov edi, 0x428a80
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4117c0
mov eax, dword [0x428430]
mov esi, 0x428a80
add eax, 0x1a
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x411782
test cl, cl
je 0x41177e
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x411782
add eax, 2
add esi, 2
test cl, cl
jne 0x41175e
xor eax, eax
jmp 0x411787
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4117c0
mov esi, dword [esp + 0x50]
push 0x30
push 0x41f518
push 0x41f5ec
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
push 0x130
push 0x111
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x40
ret 0xc
mov al, byte [0x428330]
test al, al
je 0x411afe
mov esi, str.DrcomRAS
mov eax, 0x428330
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x411a89
test cl, cl
je 0x4117ff
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x411a89
add eax, 2
add esi, 2
test cl, cl
jne 0x4117d7
xor eax, eax
jmp 0x411a8e
mov eax, dword [0x42868c]
lea esi, [esp + 0xc]
test eax, 0x8000000
je 0x411834
mov edi, str.dlg001_aaa
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x58], esi
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [esp + 0x58]
mov eax, ecx
jmp 0x411850
mov edi, str.dlg001
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x58], esi
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [esp + 0x58]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
test edx, edx
rep movsb byte es:[edi], byte [esi]
je 0x411896
cmp edx, 0xffffffff
je 0x411896
push 0x429490
call fcn.0040a1d0
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x428cac
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4118d3
mov edi, 0x4293d8
or ecx, 0xffffffff
xor eax, eax
push 0
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x428cac
mov eax, ecx
mov esi, edi
mov edi, 0x428cac
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0040af30
add esp, 4
push eax
call fcn.004051a0
add esp, 8
mov eax, dword [0x41e154]
mov edx, dword [0x42868c]
test eax, eax
jne 0x411934
test edx, 0x8000000
lea esi, [esp + 0xc]
je 0x41190c
mov edi, str.dlg001b_aaa
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x58], esi
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [esp + 0x58]
mov eax, ecx
jmp 0x411928
mov edi, str.dlg001b
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x58], esi
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, dword [esp + 0x58]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test dword [0x42874c], ebp
je 0x411990
mov edi, str.dlg001b
or ecx, 0xffffffff
xor eax, eax
lea ebp, [esp + 0xc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
test edx, 0x8000000
rep movsb byte es:[edi], byte [esi]
je 0x411990
mov edi, str.dlg001b_aaa
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0xc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test dword [0x428684], 0x10000
je 0x4119ac
call fcn.004181c0
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x40
ret 0xc
mov ebp, dword [esp + 0x50]
mov edx, dword [0x428e68]
push 0
push 0x414fd0
lea ecx, [esp + 0x14]
push ebp
push ecx
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
test eax, eax
je 0x411b58
mov edi, 0x428a80
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x411a4e
mov eax, dword [0x428430]
mov esi, 0x428a80
add eax, 0x1a
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x411a14
test cl, cl
je 0x411a10
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x411a14
add eax, 2
add esi, 2
test cl, cl
jne 0x4119f0
xor eax, eax
jmp 0x411a19
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x411a4e
push 0x30
push 0x41f518
push 0x41f5ec
push ebp
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
push 0x130
push 0x111
push ebp
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x40
ret 0xc
mov al, byte [0x428330]
test al, al
je 0x411afe
mov esi, str.DrcomRAS
mov eax, 0x428330
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x411a89
test cl, cl
je 0x411a85
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x411a89
add eax, 2
add esi, 2
test cl, cl
jne 0x411a65
xor eax, eax
jmp 0x411a8e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x411afe
call fcn.0040fa40
push 0x428330
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
mov dword [0x42832c], eax
je 0x411ae1
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
test eax, eax
je 0x411ae1
mov ecx, dword [eax]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x428cac
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x411ae6
call fcn.004157c0
push 0
push 0x428cac
call fcn.0040af30
add esp, 4
push eax
call fcn.004051a0
add esp, 8
push 1
call fcn.0040f8e0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0x40
ret 0xc
test eax, eax
jne 0x411b58
cmp dword [esp + 0x58], 0x13734
je 0x411b49
push 0x21
push 0x4283b0
push 0x16
call fcn.004047d0
add esp, 4
push eax
mov eax, dword [esp + 0x5c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
jne 0x411b58
mov ecx, dword [0x42842c]
cmp ecx, 0xa
jl 0x411b58
push 1
call fcn.0040f7d0
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x40
ret 0xc