Function at 0x4a0de4
Capabilities:
Check internet connectivity via wininet
Create http request
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x74], esp
push 4
push dword [ebp + 8]
lea eax, [ebp - 4]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x74], esp
je 0x4a0ee1
push 0xcc
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x5d3d20]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 8]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a0f35
push 0x10f
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x5d4ccc]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0xc]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a0f89
push 0x155
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x61a548]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x10]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a0fdd
push 0x19b
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x5d4648]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x14]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1031
push 0x1e1
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x18]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1085
push 0x227
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba3c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x1c]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a10d9
push 0x26d
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x61cfc8]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x20]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a112d
push 0x2b3
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba54]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x24]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1181
push 0x2f9
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a11a8
push 0x326
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x18]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a11fc
push 0x359
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fadd qword [0x5d3c50]
fstp qword [ebp - 0x90]
mov dword [ebp - 0x94], esp
push 4
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x94], esp
je 0x4a127f
push 0x3bb
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba68]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
mov eax, 1
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a12e1
push 0x3fa
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1308
push 0x430
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push 0
lea eax, [ebp - 0x28]
push eax
call sub.WININET.dll_InternetGetConnectedState
cmp dword [ebp - 0x74], esp
je 0x4a1335
push 0x45d
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x28]
push 2
mov ebx, 0x4b7d00
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x4a13e4
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x4b8370
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], esp
push 0
push 0
push 0
push 4
push dword [ebp - 0x74]
call sub.WININET.dll_InternetOpenA
cmp dword [ebp - 0x78], esp
je 0x4a13c6
push 0x4fd
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4a13d9
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2c], eax
jmp 0x4a1459
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x4b8370
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], esp
push 0
push 0
push 0
push 0
push dword [ebp - 0x74]
call sub.WININET.dll_InternetOpenA
cmp dword [ebp - 0x78], esp
je 0x4a1440
push 0x56b
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4a1453
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4a15ef
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a148a
push 0x609
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba34]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
mov eax, 0xffffffff
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a14ec
push 0x635
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x18]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1540
push 0x684
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fsub qword [0x5d3c50]
fstp qword [ebp - 0x90]
mov dword [ebp - 0x94], esp
push 4
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x94], esp
je 0x4a15c3
push 0x6e6
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a15ea
push 0x713
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
jmp 0x4a2540
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x20], eax
jne 0x4a1644
fild dword [ebp - 0x20]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5d3c50]
fstp qword [ebp - 0x80]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fmul qword [ebp - 0x80]
fstp qword [ebp - 0x90]
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
jmp 0x4a16c0
fild dword [ebp - 0x20]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fsub qword [0x5d3c50]
fstp qword [ebp - 0x80]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fmul qword [ebp - 0x80]
fstp qword [ebp - 0x90]
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x80]
fmul qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fsub qword [0x5d3c50]
fstp qword [ebp - 0x90]
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x38], eax
mov eax, str.Accept:___r_nAccept_Language:_zh_cn_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_4.0_compatible__MSIE_6.0__Windows_NT_5.0__MyIE2__.NET_CLR_1.1.4322_
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4a16d6
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0x80000301
push 0
push dword [ebp - 0x34]
push 1
mov ebx, 0x4b9ae0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x80000301
push 0
push dword [ebp - 0x38]
push 1
mov ebx, 0x4b9ae0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x78], eax
push dword [ebp - 0x78]
push 0x5d4ca8
push dword [ebp - 0x74]
push 0x8aba70
push dword [ebp - 0x3c]
mov ecx, 5
call fcn.004016eb
add esp, 0x14
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4a174b
push ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x4a175b
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x7c]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4a176f
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x4bc1a0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x74], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x4a17a5
mov eax, 0x5d3b7c
push eax
push 1
mov ebx, 0x4b7f20
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], esp
push 0
push 0x84000100
push dword [ebp - 0x78]
push dword [ebp - 0x3c]
push dword [ebp - 0x74]
push dword [ebp - 0x2c]
call sub.WININET.dll_InternetOpenUrlA
cmp dword [ebp - 0x7c], esp
je 0x4a17f5
push 0xa89
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x80], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x4a180b
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x4a19d1
mov dword [ebp - 0x74], esp
push dword [ebp - 0x2c]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x74], esp
je 0x4a1845
push 0xb0f
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a186c
push 0xb29
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba34]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
mov eax, 0xffffffff
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a18ce
push 0xb55
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x18]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1922
push 0xba4
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fsub qword [0x5d3c50]
fstp qword [ebp - 0x90]
mov dword [ebp - 0x94], esp
push 4
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x94], esp
je 0x4a19a5
push 0xc06
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a19cc
push 0xc33
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
jmp 0x4a2540
mov dword [ebp - 0x44], 0x10000
mov dword [ebp - 0x48], 0x5000
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x74], esp
push dword [ebp - 0x48]
push 8
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_HeapAlloc
cmp dword [ebp - 0x74], esp
je 0x4a1a15
push 0xcf8
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x4a1bfc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x40]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x74], esp
je 0x4a1a49
push 0xd59
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x2c]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x74], esp
je 0x4a1a70
push 0xd73
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1a97
push 0xd8d
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba34]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
mov eax, 0xffffffff
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1af9
push 0xdb9
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x18]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1b4d
push 0xe08
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fsub qword [0x5d3c50]
fstp qword [ebp - 0x90]
mov dword [ebp - 0x94], esp
push 4
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x94], esp
je 0x4a1bd0
push 0xe6a
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1bf7
push 0xe97
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
jmp 0x4a2540
mov dword [ebp - 0x74], esp
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x40]
call sub.WININET.dll_InternetReadFile
cmp dword [ebp - 0x74], esp
je 0x4a1c2d
push 0xf24
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x4a1cef
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1c61
push 0xf7c
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba34]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
mov eax, 0xffffffff
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1cc3
push 0xfa8
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1cea
push 0xfde
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
jmp 0x4a239e
cmp dword [ebp - 0x54], 0
jne 0x4a1cfe
jmp 0x4a239e
fild dword [ebp - 0x34]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004020b4
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x44]
fstp qword [ebp - 0x80]
fdiv qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004020b4
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x5c]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x44]
fstp qword [ebp - 0x80]
fmul qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004020b4
mov dword [ebp - 0x5c], eax
fild dword [ebp - 0x58]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x5c]
fstp qword [ebp - 0x80]
fsub qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fild dword [ebp - 0x54]
fstp qword [ebp - 0x90]
fadd qword [ebp - 0x90]
fstp qword [ebp - 0x98]
mov dword [ebp - 0x9c], esp
fld qword [ebp - 0x98]
call fcn.004020b4
push eax
push dword [ebp - 0x5c]
push 0
push 2
push dword [ebp - 0xc]
call sub.KERNEL32.DLL_MapViewOfFile
cmp dword [ebp - 0x9c], esp
je 0x4a1e01
push 0x119f
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jne 0x4a1ec3
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1e35
push 0x1220
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba34]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
mov eax, 0xffffffff
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x88]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a1e97
push 0x124c
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1ebe
push 0x1282
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
jmp 0x4a239e
fild dword [ebp - 0x60]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x58]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fild dword [ebp - 0x5c]
fstp qword [ebp - 0x90]
fsub qword [ebp - 0x90]
fstp qword [ebp - 0x98]
mov dword [ebp - 0x9c], esp
push dword [ebp - 0x54]
push dword [ebp - 0x50]
fld qword [ebp - 0x98]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x9c], esp
je 0x4a1f38
push 0x12e8
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x60]
call sub.KERNEL32.DLL_UnmapViewOfFile
cmp dword [ebp - 0x74], esp
je 0x4a1f5f
push 0x1320
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x54]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004020b4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a1fb2
push 0x1388
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba4c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x64]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a2006
push 0x13bb
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp - 0x64]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fild dword [ebp - 0x54]
fstp qword [ebp - 0x80]
fadd qword [ebp - 0x80]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
call fcn.004020b4
mov dword [ebp - 0x64], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba4c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
lea eax, [ebp - 0x64]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a2086
push 0x1435
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov ebx, dword [0x96593c]
call fcn.00406fc4
xor ecx, ecx
push eax
lea eax, [ebp - 0x68]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4a2113
mov ebx, dword [0x96593c]
call fcn.00403718
push ebx
push ecx
mov eax, dword [ebp - 0x68]
dec eax
jns 0x4a20d2
push 0x14df
push 0x41702a5
push 4
call fcn.004b785a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x4a20ef
push 0x14df
push 0x41702a5
push 1
call fcn.004b785a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x74]
mov eax, dword [ebx]
cmp dword [ebp + 8], eax
jne 0x4a210b
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x6c], eax
pop eax
pop ebx
pop ecx
jmp 0x4a209a
add esp, 0xc
cmp dword [ebp - 0x6c], 0
je 0x4a21f2
mov dword [ebp - 0x74], 0
push 0
push dword [ebp - 0x74]
mov dword [ebp - 0x78], 0
push 0
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], 0
push 0
push dword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
mov dword [ebp - 0x84], 0
push 0
push dword [ebp - 0x84]
mov dword [ebp - 0x88], 0
push 0
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], 0
push 0
push dword [ebp - 0x8c]
mov dword [ebp - 0x90], 0
push 0
push dword [ebp - 0x90]
mov dword [ebp - 0x94], 0
push 0
push dword [ebp - 0x94]
mov dword [ebp - 0x98], 0
push 0
push dword [ebp - 0x98]
mov dword [ebp - 0x9c], 0
push 0
push dword [ebp - 0x9c]
push 1
push dword [ebp - 0x64]
push 1
push dword [ebp - 0x24]
push 1
push 1
push 1
push dword [ebp - 0x6c]
push dword [ebp - 8]
call fcn.004a0da8
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba34]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x70]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a2246
push 0x163a
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a226d
push 0x1667
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
cmp dword [ebp - 0x70], 2
jne 0x4a2376
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a229e
push 0x16ca
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba34]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x70]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a22f2
push 0x16fd
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a2319
push 0x172a
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
cmp dword [ebp - 0x70], 0xffffffff
je 0x4a2331
cmp dword [ebp - 0x70], 1
je 0x4a2331
xor eax, eax
jmp 0x4a2336
mov eax, 1
test eax, eax
je 0x4a2343
jmp 0x4a2376
mov dword [ebp - 0x74], esp
push 0x64
push 0xffffffff
call sub.KERNEL32.DLL_WaitForSingleObject
cmp dword [ebp - 0x74], esp
je 0x4a2371
push 0x17c5
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
jmp 0x4a226d
cmp dword [ebp - 0x70], 0xffffffff
je 0x4a2391
cmp dword [ebp - 0x70], 1
je 0x4a2391
mov eax, 1
jmp 0x4a2396
mov eax, 0
test eax, eax
jne 0x4a1bfc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x50]
push 0
push dword [ebp - 0x10]
call sub.KERNEL32.DLL_HeapFree
cmp dword [ebp - 0x74], esp
je 0x4a23cd
push 0x1891
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x40]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x74], esp
je 0x4a23f4
push 0x18bb
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x2c]
call sub.WININET.dll_InternetCloseHandle
cmp dword [ebp - 0x74], esp
je 0x4a241b
push 0x18d5
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_EnterCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a2442
push 0x18ef
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
mov dword [ebp - 0x84], esp
push 4
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
lea eax, [ebp - 0x18]
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x84], esp
je 0x4a2496
push 0x1922
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
fild dword [ebp + 8]
fstp qword [ebp - 0x78]
fld qword [ebp - 0x78]
fadd qword [0x8aba2c]
fstp qword [ebp - 0x80]
fild dword [ebp - 0x18]
fstp qword [ebp - 0x88]
fld qword [ebp - 0x88]
fsub qword [0x5d3c50]
fstp qword [ebp - 0x90]
mov dword [ebp - 0x94], esp
push 4
fld qword [ebp - 0x90]
call fcn.004020b4
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
fld qword [ebp - 0x80]
call fcn.004020b4
push eax
call sub.KERNEL32.DLL_RtlMoveMemory
cmp dword [ebp - 0x94], esp
je 0x4a2519
push 0x1984
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov dword [ebp - 0x74], esp
push dword [ebp - 0x14]
call sub.KERNEL32.DLL_LeaveCriticalSection
cmp dword [ebp - 0x74], esp
je 0x4a2540
push 0x19b1
push 0x41702a5
push 6
call fcn.004b785a
add esp, 0xc
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4a2550
push ebx
call fcn.004b784e
add esp, 4
mov esp, ebp
pop ebp
ret 4