Function at 0x49e9cc
Capabilities:
Check internet connectivity via wininet
Create http request
Create thread
Get http content length

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 8
call fcn.004b7848
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x5d3c00
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
push dword [ebp + 0xc]
call fcn.0049fc18
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x49ea8d
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x5d3b7c
push dword [ebp - 4]
call fcn.0040182c
add esp, 8
cmp eax, 0
jne 0x49ebd1
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x49eacb
mov eax, 0x5d3b7c
push eax
push 2
mov ebx, 0x4b82c0
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x50], eax
push 0x5d447c
push dword [ebp - 0x50]
call fcn.0040182c
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x49eb0f
push ebx
call fcn.004b784e
add esp, 4
cmp dword [ebp - 0x54], 0
je 0x49eb75
push dword [ebp + 8]
call fcn.0049fc74
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x49eb38
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 8]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x49eb6a
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
jmp 0x49ebd1
push dword [ebp + 8]
call fcn.0049fc74
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x49eb94
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 8]
push 0x5d447c
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 3
call fcn.004016eb
add esp, 0xc
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x49ebcb
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x5d4484
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x49ec04
mov eax, 0x5d3b7c
push eax
push 4
mov ebx, 0x4b8590
call fcn.004b7854
add esp, 0x34
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffff
jne 0x49eddf
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x5d447c
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x49ec4b
mov eax, 0x5d3b7c
push eax
push 3
mov ebx, 0x4b9210
call fcn.004b7854
add esp, 0x28
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x49ec83
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x49ec7f
imul eax, dword [ebx]
jmp 0x49ec74
mov ecx, eax
test ecx, ecx
je 0x49eca2
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x49ec9b
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x49ec89
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x49eccf
mov eax, 0x5d3b7c
push eax
push 2
mov ebx, 0x4b82c0
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x50], eax
push 0x5d447c
push dword [ebp - 0x50]
call fcn.0040182c
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x49ed13
push ebx
call fcn.004b784e
add esp, 4
cmp dword [ebp - 0x54], 0
je 0x49ed53
push 0x5d447c
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x49ed4d
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
call fcn.00403718
push ebx
push ecx
mov ebx, dword [ebp - 0xc]
call fcn.00406fc4
dec eax
jns 0x49ed7f
push 0x34b
push 0x41702a0
push 4
call fcn.004b785a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x49ed9c
push 0x34b
push 0x41702a0
push 1
call fcn.004b785a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
push dword [ebx]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x49edd4
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
jmp 0x49eddf
mov dword [ebp - 0x50], esp
push 0
lea eax, [ebp - 0x10]
push eax
call sub.WININET.dll_InternetGetConnectedState
cmp dword [ebp - 0x50], esp
je 0x49ee0c
push 0x3af
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x10]
push 2
mov ebx, 0x4b7d00
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x49eebb
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x4b8370
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], esp
push 0
push 0
push 0
push 4
push dword [ebp - 0x50]
call sub.WININET.dll_InternetOpenA
cmp dword [ebp - 0x54], esp
je 0x49ee9d
push 0x44f
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x49eeb0
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x14], eax
jmp 0x49ef30
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x4b8370
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], esp
push 0
push 0
push 0
push 0
push dword [ebp - 0x50]
call sub.WININET.dll_InternetOpenA
cmp dword [ebp - 0x54], esp
je 0x49ef17
push 0x4bd
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x49ef2a
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x49ef44
mov eax, 0xffffffff
jmp 0x49fb9a
mov eax, str.Accept:___r_nAccept_Language:_zh_cn_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_4.0_compatible__MSIE_6.0__Windows_NT_5.0__MyIE2__.NET_CLR_1.1.4322_
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49ef5a
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x49ef71
mov eax, 0x5d3b7c
push eax
push 1
mov ebx, 0x4b7f20
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], esp
push 0
push 0x84000100
push dword [ebp - 0x50]
push dword [ebp - 0x18]
mov ebx, dword [ebp + 8]
push dword [ebx]
push dword [ebp - 0x14]
call sub.WININET.dll_InternetOpenUrlA
cmp dword [ebp - 0x54], esp
je 0x49efc3
push 0x6b6
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x49f001
mov dword [ebp - 0x50], esp
push dword [ebp - 0x14]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x50], esp
je 0x49eff7
push 0x73c
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0xffffffff
jmp 0x49fb9a
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x50], esp
mov eax, 0
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x20000005
push dword [ebp - 0x1c]
call sub.WININET.dll_HttpQueryInfoA
cmp dword [ebp - 0x50], esp
je 0x49f04f
push 0x7f1
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x49f063
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x50], esp
push dword [ebp - 0x1c]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f08a
push 0x86e
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x14]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f0b1
push 0x888
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
push 0x80000301
push 0
push 0x40000000
push 0x80000301
push 0
push SysReAllocString
push 2
mov ebx, 0x4b7d20
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x50], eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 1
push 2
mov ebx, 0x4b7d20
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], esp
push 0
push 0
push 2
push 0
push dword [ebp - 0x54]
push dword [ebp - 0x50]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
call sub.KERNEL32.DLL_CreateFileA
cmp dword [ebp - 0x58], esp
je 0x49f14e
push 0x99f
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jne 0x49f165
mov eax, 0xffffffff
jmp 0x49fb9a
mov dword [ebp - 0x50], esp
push 0
push dword [ebp - 0x20]
push 0
push 4
push 0
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CreateFileMappingA
cmp dword [ebp - 0x50], esp
je 0x49f1a3
push 0xa6a
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x49f1e1
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f1d7
push 0xae6
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0xffffffff
jmp 0x49fb9a
cmp dword [ebp - 0x20], 0
jne 0x49f243
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f212
push 0xb67
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f239
push 0xb81
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0
jmp 0x49fb9a
mov dword [ebp - 0x30], 0x100000
fild dword [ebp - 0x20]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fild dword [ebp - 0x30]
fstp qword [ebp - 0x5c]
fdiv qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.004020b4
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x54]
push 0x80000601
push dword [ebp - 0x50]
push dword [ebp - 0x54]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x5c]
push 0x80000601
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push 2
mov ebx, 0x4b7bd0
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
fld qword [ebp - 0x6c]
ftst
fnstsw ax
test ah, 1
je 0x49f2b2
fchs
fcomp qword [0x5d3cf0]
fnstsw ax
test ah, 0x41
jne 0x49f2c6
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp dword [ebp + 0x10], eax
jle 0x49f2d8
mov eax, dword [ebp - 0x34]
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x50], esp
push 0
push 0
push 4
call sub.KERNEL32.DLL_HeapCreate
cmp dword [ebp - 0x50], esp
je 0x49f30b
push 0xe97
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x49f370
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f33f
push 0xefc
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f366
push 0xf16
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0xffffffff
jmp 0x49fb9a
mov dword [ebp - 0x50], esp
push 0x3c
push 8
push dword [ebp - 0x38]
call sub.KERNEL32.DLL_HeapAlloc
cmp dword [ebp - 0x50], esp
je 0x49f3a1
push 0x1068
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x49f42d
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call sub.KERNEL32.DLL_HeapDestroy
cmp dword [ebp - 0x50], esp
je 0x49f3d5
push 0x10c5
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f3fc
push 0x10df
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f423
push 0x10f9
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0xffffffff
jmp 0x49fb9a
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x49f442
mov eax, 0x5d3b7c
push eax
push 1
mov ebx, 0x4b7f20
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
fadd qword [0x5d3c50]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], esp
fld qword [ebp - 0x60]
call fcn.004020b4
push eax
push 8
push dword [ebp - 0x38]
call sub.KERNEL32.DLL_HeapAlloc
cmp dword [ebp - 0x64], esp
je 0x49f49f
push 0x1191
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x49f52b
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call sub.KERNEL32.DLL_HeapDestroy
cmp dword [ebp - 0x50], esp
je 0x49f4d3
push 0x11ed
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f4fa
push 0x1207
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f521
push 0x1221
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0xffffffff
jmp 0x49fb9a
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x49f540
mov eax, 0x5d3b7c
push eax
push 1
mov ebx, 0x4b7f20
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
fadd qword [0x5d3c50]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], esp
fld qword [ebp - 0x60]
call fcn.004020b4
push eax
mov ebx, dword [ebp + 8]
push dword [ebx]
push dword [ebp - 0x40]
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x64], esp
je 0x49f59d
push 0x128b
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push 0x18
push 8
push dword [ebp - 0x38]
call sub.KERNEL32.DLL_HeapAlloc
cmp dword [ebp - 0x50], esp
je 0x49f5ce
push 0x12dc
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x49f65a
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call sub.KERNEL32.DLL_HeapDestroy
cmp dword [ebp - 0x50], esp
je 0x49f602
push 0x133f
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f629
push 0x1359
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49f650
push 0x1373
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0xffffffff
jmp 0x49fb9a
mov dword [ebp - 0x50], esp
push dword [ebp - 0x44]
call sub.KERNEL32.DLL_InitializeCriticalSection
cmp dword [ebp - 0x50], esp
je 0x49f681
push 0x13ab
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push 4
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x3c]
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x50], esp
je 0x49f6b1
push 0x13d8
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x5d3d20]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp + 0x14]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f6f9
push 0x1414
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x5d3d4c]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f741
push 0x145a
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x5d4ccc]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x2c]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f789
push 0x14a0
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x61a548]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x38]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f7d1
push 0x14e6
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x5d4648]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x44]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f819
push 0x152c
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x8aba24]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp + 0x10]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f861
push 0x1572
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x48]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f8a9
push 0x15b8
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x8aba34]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
mov eax, 0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f8f9
push 0x1617
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x8aba3c]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x30]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f941
push 0x165f
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x61cfc8]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
mov eax, 0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f991
push 0x16a5
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x8aba44]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x34]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49f9d9
push 0x16ed
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x8aba4c]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
mov eax, 0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49fa29
push 0x1733
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x8aba54]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x20]
push eax
fld qword [ebp - 0x5c]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x60], esp
je 0x49fa71
push 0x177b
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
mov eax, 0
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 0
push dword [ebp - 0x3c]
push 0x4a2575
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
cmp dword [ebp - 0x50], esp
je 0x49fab8
push 0x1861
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x49fb6b
mov dword [ebp - 0x50], esp
push dword [ebp - 0x44]
call sub.KERNEL32.DLL_DeleteCriticalSection
cmp dword [ebp - 0x50], esp
je 0x49faec
push 0x18db
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call sub.KERNEL32.DLL_HeapDestroy
cmp dword [ebp - 0x50], esp
je 0x49fb13
push 0x18f5
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49fb3a
push 0x190f
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49fb61
push 0x1929
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, 0xffffffff
jmp 0x49fb9a
mov dword [ebp - 0x50], esp
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_CloseHandle
cmp dword [ebp - 0x50], esp
je 0x49fb92
push 0x1961
push 0x41702a0
push 6
call fcn.004b785a
add esp, 0xc
mov eax, dword [ebp - 0x3c]
jmp 0x49fb9a
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x49fbab
push ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x49fbbb
push ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x49fbd9
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x49fbd5
imul eax, dword [ebx]
jmp 0x49fbca
mov ecx, eax
test ecx, ecx
je 0x49fbf8
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x49fbf1
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x49fbdf
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x49fc10
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10