Function at 0x404310
Capabilities:
Check internet connectivity via wininet

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a1af7
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c8a00]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov edi, ecx
call fcn.00452a99
push 0x4abe64
mov ecx, edi
call fcn.0045b4b9
lea ebx, [edi + 0x2f0]
mov esi, ebx
call fcn.0041e3d0
lea esi, [edi + 0x2f8]
call fcn.0041e4d0
push str.yxdownup.exe
lea eax, [esp + 0x1c]
push ebx
push eax
call fcn.004145b0
add esp, 0xc
xor ebp, ebp
lea ecx, [edi + 0x304]
push eax
mov dword [esp + 0xc4], ebp
call fcn.00402260
mov dword [esp + 0xc0], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4043c1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4abe8c
call fcn.00401c60
mov dword [esp + 0xc4], 1
mov eax, dword [esi]
push ecx
sub eax, 0x10
mov dword [esp + 0x1c], esp
mov ebx, esp
push eax
call fcn.00402640
add eax, 0x10
mov dword [ebx], eax
lea ecx, [esp + 0x3c]
add esp, 4
or ebx, 0xffffffff
push ecx
mov dword [esp + 0xcc], ebx
call fcn.0041e540
add esp, 0xc
lea ecx, [edi + 0x2f4]
push eax
mov dword [esp + 0xc4], 2
call fcn.00402260
mov dword [esp + 0xc0], ebx
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, ebx
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40444b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ebp
push 1
push str.http:__www.baidu.com
call dword [sym.imp.WININET.dll_InternetCheckConnectionW]
mov ecx, edi
mov dword [edi + 0x34c], eax
call fcn.0040e5f0
cmp dword [edi + 0x34c], ebp
je 0x4044a7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.gameyxdown.dat
lea eax, [edi + 0x2f0]
push eax
push ecx
call fcn.004145b0
add esp, 0xc
call fcn.0042fa70
add esp, 4
cmp eax, ebp
je 0x4044a7
mov edx, dword [edi + 0x39c]
cmp dword [edx - 0xc], ebp
je 0x4044a7
push edi
call fcn.0040ec20
mov esi, edi
call fcn.0040c720
call fcn.0040c8c0
push 0x60
call fcn.0044d1d8
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0xc0], 3
cmp eax, ebp
je 0x4044dd
push eax
mov ebx, edi
call fcn.00416410
or ebx, 0xffffffff
jmp 0x4044df
xor eax, eax
mov dword [esp + 0xc0], ebx
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x20]
mov dword [edi + 0x3d0], eax
mov edx, dword [eax + 0x20]
push ecx
push edx
call ebx
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
sub ecx, 8
add esi, 6
push 1
add edx, 7
sub eax, 9
mov dword [esp + 0x30], ecx
sub ecx, esi
push ecx
mov dword [esp + 0x30], eax
sub eax, edx
push eax
push esi
push edx
mov ecx, edi
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], esi
call fcn.0045b51b
mov ecx, dword [edi + 0x20]
lea eax, [esp + 0xa4]
push eax
push ecx
call ebx
mov eax, 0x284
mov edx, 0x296
mov dword [esp + 0x50], edx
mov dword [esp + 0x58], edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x60], eax
mov edx, 0x3c8
mov dword [esp + 0x68], eax
mov eax, 0x321
push 1
mov ecx, 0x2c
mov dword [esp + 0x68], edx
mov dword [esp + 0x70], edx
mov dword [esp + 0x78], eax
mov dword [esp + 0x80], eax
mov eax, 0xaa
push 0xc
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x50], 0xa8
mov dword [esp + 0x58], 0xb7
mov dword [esp + 0x60], 0x310
mov dword [esp + 0x68], 0x320
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ecx
lea esi, [edi + 0x18c]
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
push eax
mov ecx, esi
call fcn.004551ea
cmp esi, ebp
jne 0x404610
xor esi, esi
jmp 0x404613
mov esi, dword [esi + 4]
mov eax, dword [edi + 0x20]
push 1
push esi
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov esi, edi
mov dword [0x4ce1ac], edi
call fcn.0040d5b0
lea esi, [edi + 0x2fc]
push esi
lea eax, [edi + 0x2f0]
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.004144f0
add esp, 0xc
mov dword [esp + 0xc0], 4
cmp dword [edi + 0x310], ebp
jne 0x4046af
mov eax, dword [esp + 0x1c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov ebx, esp
push eax
call fcn.00402640
add eax, 0x10
add esp, 4
mov dword [ebx], eax
call fcn.0042fa70
add esp, 4
cmp eax, ebp
je 0x4046af
mov edx, dword [esi]
cmp dword [edx - 0xc], ebp
je 0x4046af
mov eax, dword [esp + 0x1c]
push 3
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.00402640
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov esi, edi
call fcn.0040f8c0
push ebp
mov ecx, edi
call fcn.0045b55b
mov eax, dword [edi + 0x20]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push ebp
push 0x1d4c0
push 0x3ec
push eax
call esi
mov ecx, dword [edi + 0x20]
push ebp
push 0xea60
push 0x3ed
push ecx
call esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4ab640
call fcn.00401c60
push ecx
mov byte [esp + 0xcc], 5
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4ab640
call fcn.00401c60
push ecx
mov byte [esp + 0xd0], 6
mov ecx, esp
mov dword [esp + 0xa8], esp
push 0x4ab640
call fcn.00401c60
push ecx
mov byte [esp + 0xd4], 7
mov ecx, esp
mov dword [esp + 0xa8], esp
push 0x4ab640
call fcn.00401c60
mov byte [esp + 0xd4], 8
mov edi, dword [edi + 0x348]
push ecx
sub edi, 0x10
mov dword [esp + 0xb4], esp
mov esi, esp
push edi
call fcn.00402640
add eax, 0x10
mov dword [esi], eax
mov ecx, esp
mov dword [esp + 0xbc], esp
push str.gg_tool_start_show
mov byte [esp + 0xe0], 9
call fcn.00401c60
push 0x4ce560
mov byte [esp + 0xe0], 4
call fcn.004464d0
mov dword [esp + 0xc0], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4047c1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret