Function at 0x4029d0
Capabilities:
Download url
Get common file path
Read .ini file
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x429e10
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
mov eax, dword [0x436748]
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], eax
push 0
push 0
push 0
push 0
mov ebx, 1
push 0
mov dword [ebp - 4], 0
push 0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00425272
push 0
push 0
push ebx
push ebx
push str.http:__up.newyx.net_newyx.htm
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 2
call fcn.0042536d
lea ecx, [ebp - 0x20]
mov esi, eax
push ecx
mov ecx, esi
call fcn.00425d78
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x4c]
lea ecx, [ebp - 0x34]
call fcn.00425317
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.0042522d
jmp 0x402a6a
mov eax, dword [ebp - 0x20]
mov dword [ebp - 4], 0
cmp eax, 0xc8
jne 0x402b90
lea esi, [edi + 0x60]
push pe_nt_image_headers32
mov ecx, esi
call fcn.0041ea1d
push eax
push pe_nt_image_headers32
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0xffffffffffffffff
mov ecx, esi
call fcn.0041ea6c
mov ebx, dword [esi]
push pe_nt_image_headers32
mov ecx, esi
call fcn.0041ea1d
push eax
push 0
push 0x436238
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
call ebx
push 0xffffffffffffffff
mov ecx, esi
call fcn.0041ea6c
mov eax, dword [esi]
push 0
push 0
push eax
push str.http:__up.newyx.net_newyx.htm
push 0
call sub.urlmon.dll_URLDownloadToFileA
mov eax, dword [0x436748]
mov dword [ebp - 0x18], eax
mov esi, dword [esi]
lea ecx, [ebp - 0x18]
push esi
push pe_nt_image_headers32
push pe_nt_image_headers32
mov byte [ebp - 4], 4
call fcn.0041ea1d
push eax
push 0x43a794
push str.image
push str.tpgg
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.0041ea6c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx - 8]
test eax, eax
je 0x402b84
push pe_nt_image_headers32
lea ecx, [ebp - 0x14]
call fcn.0041ea1d
push eax
push pe_nt_image_headers32
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.0041ea6c
mov esi, dword [ebp - 0x14]
push pe_nt_image_headers32
lea ecx, [ebp - 0x14]
call fcn.0041ea1d
push eax
push 0
push 0x436238
push esi
call ebx
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.0041ea6c
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
push 0
push 0
push edx
push eax
push 0
call sub.urlmon.dll_URLDownloadToFileA
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.0041e614
lea ecx, [ebp - 0x78]
call fcn.00405955
mov ecx, dword [ebp - 0x14]
push 0
push ecx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 5
call fcn.00405a18
test eax, eax
je 0x402c01
mov edx, dword [ebp - 0x14]
push 0
push edx
call fcn.004020a0
add esp, 8
mov ebx, eax
push 0x10
call sub.gdiplus.dll_GdipAlloc
mov esi, eax
test esi, esi
je 0x402be6
lea eax, [esi + 4]
mov dword [esi], 0x42b910
push eax
push ebx
mov dword [eax], 0
call sub.gdiplus.dll_GdipLoadImageFromFile
mov dword [esi + 8], eax
jmp 0x402be8
xor esi, esi
test esi, esi
mov dword [edi + 0x178], esi
je 0x402c01
lea eax, [ebp - 0x14]
lea ecx, [edi + 0x9c]
push eax
call fcn.0041e74d
mov eax, dword [edi + 0x60]
lea esi, [edi + 0xa0]
push eax
push pe_nt_image_headers32
push pe_nt_image_headers32
mov ecx, esi
call fcn.0041ea1d
push eax
push 0x43a794
push 0x436370
push str.tpgg
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0xffffffffffffffff
mov ecx, esi
call fcn.0041ea6c
lea ecx, [ebp - 0x5c]
call fcn.0041c74c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 6
call fcn.0041c74c
mov eax, dword [edi + 0x60]
lea ecx, [ebp - 0x48]
push eax
push str.rmyx
lea edx, [ebp - 0x5c]
push ecx
push edx
mov byte [ebp - 4], 7
call fcn.004013d0
mov esi, eax
add esp, 0x10
cmp esi, 3
jge 0x402cd8
push str.http:__www.newyx.net_games_4348.htm
lea ecx, [edi + 0x194]
call fcn.0041e79d
push str.http:__www.newyx.net_games_4385.htm
lea ecx, [edi + 0x19c]
call fcn.0041e79d
push str.http:__www.newyx.net_games_4387.htm
lea ecx, [edi + 0x1a4]
call fcn.0041e79d
push 0x4362ec
lea ecx, [edi + 0x190]
call fcn.0041e79d
push 0x4362d8
lea ecx, [edi + 0x198]
call fcn.0041e79d
push 0x4362cc
lea ecx, [edi + 0x1a0]
call fcn.0041e79d
jmp 0x402d5b
xor eax, eax
xor edx, edx
mov ebx, edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x28], ebx
cmp eax, ebx
je 0x402cf3
cmp ebx, edx
je 0x402cf3
cmp eax, edx
jne 0x402d1b
call fcn.0040d5ed
cdq
idiv esi
mov dword [ebp - 0x2c], edx
call fcn.0040d5ed
cdq
idiv esi
mov ebx, edx
mov dword [ebp - 0x28], ebx
call fcn.0040d5ed
cdq
idiv esi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edx
jmp 0x402ce7
lea ebx, [ebp - 0x2c]
add edi, 0x194
mov dword [ebp - 0x1c], 3
mov esi, dword [ebx]
mov eax, dword [ebp - 0x58]
shl esi, 2
lea ecx, [esi + eax]
push ecx
lea ecx, [edi - 4]
call fcn.0041e74d
mov edx, dword [ebp - 0x44]
mov ecx, edi
add esi, edx
push esi
call fcn.0041e74d
mov eax, dword [ebp - 0x1c]
add ebx, 4
add edi, 8
dec eax
mov dword [ebp - 0x1c], eax
jne 0x402d2b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 6
call fcn.0041c77f
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 5
call fcn.0041c77f
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0
call fcn.00405992
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
call fcn.0041e614
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret