Function at 0x4a9f40
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5121ab
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x572bb0]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov dword [esp + 0x24], ecx
push str.IN_time
lea ecx, [esp + 0x34]
call fcn.00471bb0
push str.crossDomainRequest
lea ecx, [esp + 0x38]
mov dword [esp + 0x84], 0
call fcn.00471bb0
mov byte [esp + 0x80], 1
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4a9fbb
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x3c], esi
mov byte [esp + 0x80], 2
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4a9fed
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x38], edi
lea eax, [esp + 0x3c]
mov byte [esp + 0x80], 3
push eax
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x20]
call fcn.00472fc0
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 4
push ecx
mov edx, eax
lea ecx, [esp + 0x24]
call fcn.00472fc0
add esp, 4
mov ebx, eax
mov byte [esp + 0x80], 5
call fcn.004eb20c
push eax
mov edx, ebx
lea ecx, [esp + 0x2c]
call fcn.00472f20
add esp, 4
mov ecx, eax
mov eax, dword [esp + 0x24]
mov byte [esp + 0x80], 6
cmp dword [eax + 0xc], 0
je 0x4aa076
push 0
push ecx
lea ecx, [esp + 0x3c]
add eax, 8
push ecx
push eax
call fcn.00473100
mov byte [esp + 0x80], 5
or ebx, 0xffffffff
mov edx, dword [esp + 0x28]
mov eax, ebx
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4aa09e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 4
mov ecx, ebx
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa0c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 3
mov ecx, ebx
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa0e8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x80], 2
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa109
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x80], 1
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa12a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0
mov ecx, ebx
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa14f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x80], 0xffffffff
mov ecx, ebx
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa177
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa193
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x80], 7
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa1c8
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x80], 8
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa1fa
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x34], eax
mov edi, dword [ebp + 8]
mov ecx, edi
mov byte [esp + 0x80], 9
push 0x54d294
mov dword [esp + 0x44], 0
call fcn.0048ad90
cmp eax, 0x57a1b0
je 0x4aab21
push 0x54d294
mov ecx, edi
call fcn.0048ad90
cmp byte [eax + 8], 4
jne 0x4aab21
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa264
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
push 0x54d294
mov ecx, edi
mov byte [esp + 0x84], 0xe
call fcn.0048ad90
mov dword [esp + 0x3c], eax
cmp byte [eax + 8], 4
je 0x4aa2ab
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004edc00
mov eax, dword [esp + 0x48]
add esp, 0xc
mov edx, dword [eax]
test edx, edx
jne 0x4aa2b5
xor ecx, ecx
jmp 0x4aa2cb
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x3c], eax
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4aa2c0
sub ecx, dword [esp + 0x3c]
push ecx
push edx
lea ecx, [esp + 0x20]
call fcn.0047e3b0
lea edx, [esp + 0x20]
lea ecx, [esp + 0x18]
call fcn.0047da90
push str.onSuccessId
mov ecx, edi
mov dword [esp + 0x34], 0xffffffff
call fcn.0048ad90
cmp eax, 0x57a1b0
je 0x4aa327
push str.onSuccessId
mov ecx, edi
call fcn.0048ad90
cmp byte [eax + 8], 1
jne 0x4aa327
push str.onSuccessId
mov ecx, edi
call fcn.0048ad90
mov ecx, eax
call fcn.0048a570
mov dword [esp + 0x30], eax
push str.onFailureId
mov ecx, edi
call fcn.0048ad90
cmp eax, 0x57a1b0
je 0x4aa368
push str.onFailureId
mov ecx, edi
call fcn.0048ad90
cmp byte [eax + 8], 1
jne 0x4aa368
push str.onFailureId
mov ecx, edi
call fcn.0048ad90
mov ecx, eax
call fcn.0048a570
cmp eax, 0xffffffff
jne 0x4aa8e6
cmp dword [esp + 0x30], 0xffffffff
jne 0x4aa8e6
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa38f
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x28], edi
mov byte [esp + 0x80], 0x15
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa3c1
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x30], eax
mov ecx, dword [ebp + 8]
push str.additionalRequestHeaders
mov byte [esp + 0x84], 0x16
call fcn.0048ad90
cmp eax, 0x57a1b0
je 0x4aa466
mov ecx, dword [ebp + 8]
push str.additionalRequestHeaders
call fcn.0048ad90
cmp byte [eax + 8], 4
jne 0x4aa466
mov ecx, dword [ebp + 8]
push str.additionalRequestHeaders
call fcn.0048ad90
mov dword [esp + 0x3c], eax
cmp byte [eax + 8], 4
je 0x4aa430
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004edc00
mov eax, dword [esp + 0x48]
add esp, 0xc
mov edx, dword [eax]
test edx, edx
jne 0x4aa43a
xor ecx, ecx
jmp 0x4aa44e
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x3c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4aa443
sub ecx, dword [esp + 0x3c]
push ecx
push edx
lea ecx, [esp + 0x20]
call fcn.0047e3b0
lea edx, [esp + 0x30]
lea ecx, [esp + 0x18]
call fcn.0047da90
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa482
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x2c], eax
mov ecx, dword [ebp + 8]
push str.referer
mov byte [esp + 0x84], 0x17
call fcn.0048ad90
cmp eax, 0x57a1b0
je 0x4aa527
mov ecx, dword [ebp + 8]
push str.referer
call fcn.0048ad90
cmp byte [eax + 8], 4
jne 0x4aa527
mov ecx, dword [ebp + 8]
push str.referer
call fcn.0048ad90
mov dword [esp + 0x3c], eax
cmp byte [eax + 8], 4
je 0x4aa4f1
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004edc00
mov eax, dword [esp + 0x48]
add esp, 0xc
mov edx, dword [eax]
test edx, edx
jne 0x4aa4fb
xor ecx, ecx
jmp 0x4aa50f
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x3c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4aa504
sub ecx, dword [esp + 0x3c]
push ecx
push edx
lea ecx, [esp + 0x20]
call fcn.0047e3b0
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x18]
call fcn.0047da90
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x34]
push eax
lea edx, [esp + 0x28]
lea ecx, [esp + 0x6c]
call fcn.004803c0
add esp, 8
push 0
push 0x54c9e4
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x18
call fcn.0047e3b0
push str.result
lea ecx, [esp + 0x68]
call fcn.0048ad90
cmp eax, 0x57a1b0
je 0x4aa5fe
push ecx
push str.result
lea ecx, [esp + 0x6c]
call fcn.0048ac10
mov ecx, eax
call fcn.0048a850
test al, al
je 0x4aa5fe
push str.content
lea ecx, [esp + 0x68]
call fcn.0048ad90
cmp eax, 0x57a1b0
je 0x4aa5fe
push ecx
push str.content
lea ecx, [esp + 0x6c]
call fcn.0048ac10
mov dword [esp + 0x3c], eax
cmp byte [eax + 8], 4
je 0x4aa5d5
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004edc00
mov eax, dword [esp + 0x48]
add esp, 0xc
mov edx, dword [eax]
test edx, edx
jne 0x4aa5df
xor ecx, ecx
jmp 0x4aa5f3
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x3c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4aa5e8
sub ecx, dword [esp + 0x3c]
push ecx
push edx
lea ecx, [esp + 0x20]
call fcn.0047e3b0
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x4aa626
lea ecx, [esp + 0x18]
call fcn.004c7970
test al, al
je 0x4aa626
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x18]
call fcn.0047da90
mov esi, dword [esp + 0x1c]
mov ecx, str.__READ_OR_DOWNLOAD_WAS_NOT_SUCCESSFUL__
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4aa656
test dx, dx
je 0x4aa652
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4aa656
add eax, 4
add ecx, 4
test dx, dx
jne 0x4aa630
xor eax, eax
jmp 0x4aa65b
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x4aa855
push 0x54c414
lea ecx, [esp + 0x40]
call fcn.00471bb0
push str.errorrequestsync
lea ecx, [esp + 0x3c]
mov byte [esp + 0x84], 0x19
call fcn.00471bb0
mov byte [esp + 0x80], 0x1a
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aa6b0
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x44], esi
lea eax, [esp + 0x38]
mov byte [esp + 0x80], 0x1b
push eax
lea edx, [esp + 0x48]
lea ecx, [esp + 0x58]
call fcn.00472fc0
add esp, 4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x80], 0x1c
push ecx
mov edx, eax
lea ecx, [esp + 0x54]
call fcn.00472fc0
add esp, 4
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 0x1d
push ecx
mov edx, eax
lea ecx, [esp + 0x50]
call fcn.00472fc0
add esp, 4
mov edi, eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x80], 0x1e
call fcn.0047cff0
mov edx, eax
mov byte [esp + 0x80], 0x1f
mov ecx, edi
call fcn.00473f80
mov byte [esp + 0x80], 0x1e
mov ecx, ebx
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa75a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x1d
mov ecx, ebx
mov edx, dword [esp + 0x4c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa77f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x1c
mov ecx, ebx
mov edx, dword [esp + 0x50]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa7a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x1b
mov ecx, ebx
mov edx, dword [esp + 0x54]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa7c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x80], 0x1a
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa7ea
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x19
mov ecx, ebx
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa80f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x18
mov ecx, ebx
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa834
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x29
push str.crossDomainRequest_HttpRequest_sync_error
lea ecx, [esp + 0x30]
call fcn.004725a0
lea ecx, [esp + 0x1c]
call fcn.00471aa0
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x28]
lea ecx, [esp + 0x64]
mov byte [esp + 0x80], 0x17
call fcn.0048a2e0
mov byte [esp + 0x80], 0x16
mov ecx, ebx
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa88b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x15
mov ecx, ebx
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aa8b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x80], 0xe
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aab10
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 9
mov edx, dword [esp + 0x20]
jmp 0x4aac40
push 0x10
call fcn.004e991c
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
je 0x4aa90c
mov byte [eax + 8], 0
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
jmp 0x4aa912
xor eax, eax
mov dword [esp + 0x3c], eax
push edi
lea ecx, [esp + 0x68]
mov byte [esp + 0x84], 0xe
call fcn.0048a170
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x6c]
movsx eax, byte [edi + 8]
xor eax, ebx
mov byte [edi + 8], bl
mov ecx, dword [edi]
and eax, 0xff
mov edx, dword [edi + 4]
xor ebx, eax
mov eax, dword [esp + 0x64]
mov dword [edi], eax
mov eax, dword [esp + 0x68]
mov dword [edi + 4], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x64], ecx
mov ecx, dword [edi + 8]
mov edx, ecx
shl edx, 0x17
mov eax, ecx
sar edx, 0x1f
xor eax, ebx
shl edx, 8
and eax, 0x100
xor edx, ebx
xor eax, ecx
and edx, 0x100
mov dword [edi + 8], eax
xor ebx, edx
lea ecx, [esp + 0x64]
mov dword [esp + 0x6c], ebx
call fcn.0048a2e0
lea eax, [esp + 0x40]
push eax
push 0
push edi
push 0x4a4f20
push 0
push 0
call fcn.004ea558
add esp, 0x18
test eax, eax
jne 0x4aab06
mov ecx, edi
call fcn.0048a2e0
push edi
call fcn.004e98a6
add esp, 4
lea ecx, [esp + 0x34]
push 0x26
push str.crossDomainRequest_beginthreadex_error
call fcn.004725a0
push str._beginthreadex_error
lea ecx, [esp + 0x3c]
call fcn.00471c70
push str.crossDomainRequest
lea ecx, [esp + 0x40]
mov byte [esp + 0x84], 0x11
call fcn.00471bb0
mov byte [esp + 0x80], 0x12
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aaa12
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x54], edi
lea eax, [esp + 0x38]
mov byte [esp + 0x80], 0x13
push eax
lea edx, [esp + 0x58]
lea ecx, [esp + 0x54]
call fcn.00472fc0
add esp, 4
mov ecx, eax
mov eax, dword [esp + 0x24]
mov byte [esp + 0x80], 0x14
cmp dword [eax + 0xc], 0
je 0x4aaa62
push 2
push ecx
lea ecx, [esp + 0x44]
add eax, 8
push ecx
push eax
call fcn.00473100
mov byte [esp + 0x80], 0x13
or ebx, 0xffffffff
mov edx, dword [esp + 0x50]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaa8a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x80], 0x12
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaaab
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x11
mov ecx, ebx
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaad0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0xe
mov ecx, ebx
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaaf5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 9
mov edx, dword [esp + 0x20]
jmp 0x4aac40
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or ebx, 0xffffffff
mov byte [esp + 0x80], 9
mov edx, dword [esp + 0x20]
jmp 0x4aac40
push 0x1e
push str.crossDomainRequest_url_missing
lea ecx, [esp + 0x3c]
call fcn.004725a0
push str.url_error
lea ecx, [esp + 0x3c]
call fcn.00471c70
push str.crossDomainRequest
lea ecx, [esp + 0x40]
mov byte [esp + 0x84], 0xa
call fcn.00471bb0
mov byte [esp + 0x80], 0xb
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aab79
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x54], edi
lea eax, [esp + 0x38]
mov byte [esp + 0x80], 0xc
push eax
lea edx, [esp + 0x58]
lea ecx, [esp + 0x54]
call fcn.00472fc0
add esp, 4
mov ecx, eax
mov eax, dword [esp + 0x24]
mov byte [esp + 0x80], 0xd
cmp dword [eax + 0xc], 0
je 0x4aabc9
push 2
push ecx
lea ecx, [esp + 0x44]
add eax, 8
push ecx
push eax
call fcn.00473100
mov byte [esp + 0x80], 0xc
mov ecx, ebx
mov edx, dword [esp + 0x50]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aabee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x80], 0xb
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aac0f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0xa
mov ecx, ebx
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aac34
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 9
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aac59
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x4aac7e
mov eax, 8
mov word [edi], ax
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x4aac7b
call fcn.004722b0
mov dword [edi + 8], eax
push str._threadId
lea ecx, [esp + 0x30]
call fcn.00471bb0
push str.OUT_time
lea ecx, [esp + 0x3c]
mov byte [esp + 0x84], 0x20
call fcn.00471bb0
push str.crossDomainRequest
lea ecx, [esp + 0x40]
mov byte [esp + 0x84], 0x21
call fcn.00471bb0
mov byte [esp + 0x80], 0x22
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aacdc
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x54], edi
mov byte [esp + 0x80], 0x23
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4aad0e
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x50], ebx
lea eax, [esp + 0x54]
mov byte [esp + 0x80], 0x24
push eax
lea edx, [esp + 0x54]
lea ecx, [esp + 0x64]
call fcn.00472fc0
add esp, 4
lea ecx, [esp + 0x38]
mov byte [esp + 0x80], 0x25
push ecx
mov edx, eax
lea ecx, [esp + 0x60]
call fcn.00472fc0
add esp, 4
mov dword [esp + 0x4c], eax
mov byte [esp + 0x80], 0x26
call fcn.004eb20c
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x58]
push eax
call fcn.00472f20
add esp, 4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x27
push ecx
mov edx, eax
lea ecx, [esp + 0x48]
call fcn.00472fc0
add esp, 4
mov byte [esp + 0x80], 0x28
lea ecx, [esp + 0x48]
push dword [esp + 0x40]
mov edx, eax
call fcn.00472f20
add esp, 4
mov ecx, eax
mov eax, dword [esp + 0x24]
mov byte [esp + 0x80], 0x29
cmp dword [eax + 0xc], 0
je 0x4aadd0
push 0
push ecx
lea ecx, [esp + 0x44]
add eax, 8
push ecx
push eax
call fcn.00473100
mov byte [esp + 0x80], 0x28
or ecx, 0xffffffff
mov edx, dword [esp + 0x48]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aadf6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x27
or ecx, 0xffffffff
mov edx, dword [esp + 0x44]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aae1c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x26
or ecx, 0xffffffff
mov edx, dword [esp + 0x58]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aae42
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x25
or ecx, 0xffffffff
mov edx, dword [esp + 0x5c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aae68
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x24
or ecx, 0xffffffff
mov edx, dword [esp + 0x60]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aae8e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebx - 0x10]
mov byte [esp + 0x80], 0x23
or ebx, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaeb2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x80], 0x22
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaed3
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x21
mov ecx, ebx
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaef8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 0x20
mov ecx, ebx
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaf1d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 9
mov ecx, ebx
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaf42
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 8
mov ecx, ebx
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaf67
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x80], 7
mov ecx, ebx
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4aaf8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov dword [esp + 0x80], 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x4aafae
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8