Function at 0x4b3f00
Capabilities:
Check internet connectivity via wininet

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x527210
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x569638]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebx - 0x168]
push 0x64
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
push 0
push 0
mov dword [ebx + 0x18], 0
mov ecx, dword [0x5742b4]
push 0x41b
push ecx
call edi
cmp byte [ebx + 0x1c], 0
jne 0x4b3fb3
mov esi, dword [ebp + 8]
push 0x26
push str.https:__checkout.360totalsecurity.com_
add esi, 0xc
push esi
call fcn.0041b080
cmp eax, 0xffffffff
je 0x4b3f88
push 0xc
push str.transaction
push esi
call fcn.0041b080
cmp eax, 0xffffffff
jne 0x4b3fac
push 0xf
push str._order_payment_
push esi
call fcn.0041b080
cmp eax, 0xffffffff
je 0x4b3fb3
push 0xd
push str.order_detail
push esi
call fcn.0041b080
cmp eax, 0xffffffff
je 0x4b3fb3
mov byte [ebx + 0xb1], 1
mov esi, dword [ebp + 8]
mov eax, dword [esi + 8]
cmp eax, 1
jne 0x4b41e6
cmp byte [ebx + 0x1c], 0
jne 0x4b41e6
push 0xe
push str._inap_success_
add esi, 0xc
push esi
call fcn.0041b080
cmp eax, 0xffffffff
je 0x4b3ffa
push 5
push str.token
push esi
call fcn.0041b080
cmp eax, 0xffffffff
je 0x4b3ffa
mov byte [ebx + 0xb2], 1
cmp byte [ebx + 0xb1], 1
jne 0x4b401e
cmp byte [ebx + 0xb3], 1
jne 0x4b401e
mov edx, dword [0x5742b4]
push 0
push 1
push 0x424
push edx
call edi
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x14], 0
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
jne 0x4b403f
cmp dword [ebx + 0x20], 2
je 0x4b42af
cmp dword [ebx + 0x20], 3
je 0x4b42af
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x20]
mov byte [ebp - 0xd], 1
test eax, eax
je 0x4b410c
mov edi, 4
cmp eax, edi
jbe 0x4b4198
cmp dword [esi + 0x18], 0x10
jb 0x4b4073
mov esi, dword [esi + 4]
jmp 0x4b4075
add esi, edi
test esi, esi
jne 0x4b4083
push 0x80070057
call fcn.0042c060
mov edx, dword [0x570fac]
mov eax, dword [edx]
push 1
push edi
mov ecx, 0x570fac
call eax
test eax, eax
jne 0x4b409e
call fcn.0042bdd0
add eax, 0x10
cmp dword [eax - 8], edi
mov dword [ebp + 8], eax
jge 0x4b40b3
push 0x80070057
call fcn.0042c060
push edi
push esi
push edi
mov dword [eax - 0xc], edi
push eax
mov byte [eax + 4], 0
call fcn.004f4154
add esp, 0x10
lea edi, [ebp + 8]
mov dword [ebp - 4], 0
call fcn.004b0ef0
mov ecx, dword [ebp + 8]
push str.http
push ecx
call fcn.004fa619
add esp, 8
test eax, eax
setne al
test al, al
je 0x4b40f3
mov byte [ebp - 0xd], 0
lea eax, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.00441c30
cmp byte [ebp - 0xd], 0
je 0x4b4198
lea esi, [ebx - 0x198]
push 0
mov eax, 3
mov edi, esi
call fcn.004b49c0
mov edx, dword [ebx - 0x168]
push 0x185
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_RedrawWindow]
push 0xffffffffffffffff
lea eax, [ebp + 8]
push eax
mov ecx, esi
call fcn.004b5130
mov dword [ebp - 4], 1
mov ecx, dword [eax]
push ecx
push 0x545148
push 0
push 0x540748
mov esi, 5
call fcn.00452970
add esp, 0x10
lea ecx, [ebp + 8]
call fcn.004062c0
mov edx, dword [ebx - 0x168]
push 0
push 0
push 0x41f
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0xffffffffffffffff
lea eax, [ebp + 8]
add ebx, 0xfffffe68
push eax
mov ecx, ebx
call fcn.004b5130
mov dword [ebp - 4], 2
mov eax, dword [eax]
push eax
push 0x545148
push 0
push 0x540748
mov esi, 9
call fcn.00452970
add esp, 0x10
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.004062c0
push 0
mov edi, ebx
jmp 0x4b42a5
mov ecx, dword [ebx + 0x20]
cmp ecx, 2
je 0x4b42af
mov esi, 9
cmp eax, 2
jne 0x4b4201
lea esi, [eax + 9]
jmp 0x4b4213
cmp eax, 3
jne 0x4b420b
lea esi, [eax + 9]
jmp 0x4b4213
cmp eax, 4
jne 0x4b4213
lea esi, [eax - 1]
cmp ecx, 3
jne 0x4b4240
push 0
lea ecx, [ebp - 0x14]
push ecx
mov dword [ebp - 0x14], 0
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x4b4295
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x28]
test eax, eax
je 0x4b42af
cmp eax, 0xfffffffd
je 0x4b42af
jmp 0x4b4295
push 0xffffffffffffffff
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebx - 0x198]
call fcn.004b5130
mov dword [ebp - 4], 3
mov eax, dword [eax]
push eax
push 0x545148
push 0
push 0x540748
call fcn.00452970
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4b4295
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, 0xb
sete cl
movzx edx, cl
push edx
lea edi, [ebx - 0x198]
mov eax, 2
call fcn.004b49c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4