Function at 0x100039ba
Capabilities:
Check internet connectivity via wininet
Create http request
Create thread
Get http content length

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 8
call fcn.100071ed
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x10017240
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
push 0x1001726d
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.10001249
add esp, 8
cmp eax, 0
jne 0x10003a81
mov eax, 0xfffffffe
jmp 0x10004ad3
mov dword [ebp - 0x50], esp
mov ebx, dword [ebp + 0xc]
push dword [ebx]
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionA]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10003aa5
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x10003ac4
push eax
mov ebx, eax
call fcn.100012e6
inc eax
push eax
call fcn.100071ed
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10003ad5
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x1001726d
push dword [ebp - 4]
call fcn.10001249
add esp, 8
cmp eax, 0
jne 0x10003c19
push 0x80000301
push 0
push 1
push 0x80000004
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x10003b13
mov eax, 0x1001726d
push eax
push 2
mov ebx, 0x138
call fcn.10009300
add esp, 0x1c
mov dword [ebp - 0x50], eax
push 0x10017279
push dword [ebp - 0x50]
call fcn.10001249
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10003b57
push ebx
call fcn.100071e7
add esp, 4
cmp dword [ebp - 0x54], 0
je 0x10003bbd
push dword [ebp + 8]
call fcn.10004b50
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10003b80
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 8]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.10001351
add esp, 8
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x10003bb2
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
jmp 0x10003c19
push dword [ebp + 8]
call fcn.10004b50
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10003bdc
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 8]
push 0x10017279
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 3
call fcn.10001351
add esp, 0xc
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x10003c13
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push 0x10017514
push 0x80000004
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x10003c4c
mov eax, 0x1001726d
push eax
push 4
mov ebx, 0x14c
call fcn.10009370
add esp, 0x34
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffff
jne 0x10003e13
push 0
push 0
push 0
push 0x80000004
push 0
push 0x10017279
push 0x80000004
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x10003c93
mov eax, 0x1001726d
push eax
push 3
mov ebx, 0x190
call fcn.10009420
add esp, 0x28
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10003ccb
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10003cc7
imul eax, dword [ebx]
jmp 0x10003cbc
mov ecx, eax
test ecx, ecx
je 0x10003cea
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x10003ce3
push ebx
push eax
call fcn.100071e7
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x10003cd1
call fcn.100071e7
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push 0x80000004
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x10003d17
mov eax, 0x1001726d
push eax
push 2
mov ebx, 0x138
call fcn.10009300
add esp, 0x1c
mov dword [ebp - 0x50], eax
push 0x10017279
push dword [ebp - 0x50]
call fcn.10001249
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10003d5b
push ebx
call fcn.100071e7
add esp, 4
cmp dword [ebp - 0x54], 0
je 0x10003d9b
push 0x10017279
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.10001351
add esp, 8
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x10003d95
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov ebx, dword [ebp - 0xc]
call fcn.10003981
push ebx
push ecx
mov ebx, dword [ebp - 0xc]
call fcn.100039a1
dec eax
jns 0x10003dbd
push 4
call fcn.100071f9
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x10003dd0
push 1
call fcn.100071f9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x54]
push dword [ebx]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
mov ecx, 2
call fcn.10001351
add esp, 8
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
test ebx, ebx
je 0x10003e08
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
jmp 0x10003e13
mov dword [ebp - 0x50], esp
push 0
push dword [ebp - 0x10]
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10003e3a
push 6
call fcn.100071f9
add esp, 4
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x10]
push 2
mov ebx, 0xc4
call fcn.10009610
add esp, 0x1c
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x10003ee4
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.10009630
add esp, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], esp
push 0
push 0
push 0
push 4
push dword [ebp - 0x50]
call dword [sym.imp.WININET.dll_InternetOpenA]
nop
nop
nop
nop
cmp dword [ebp - 0x54], esp
je 0x10003ec6
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10003ed9
push ebx
call fcn.100071e7
add esp, 4
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x14], eax
jmp 0x10003f54
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.10009630
add esp, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], esp
push 0
push 0
push 0
push 0
push dword [ebp - 0x50]
call dword [sym.imp.WININET.dll_InternetOpenA]
nop
nop
nop
nop
cmp dword [ebp - 0x54], esp
je 0x10003f3b
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10003f4e
push ebx
call fcn.100071e7
add esp, 4
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x10003f68
mov eax, 0xffffffff
jmp 0x10004ad3
mov eax, str.Accept:___r_nAccept_Language:_zh_cn_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_4.0_compatible__MSIE_6.0__Windows_NT_5.0__MyIE2__.NET_CLR_1.1.4322_
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10003f7e
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x10003f95
mov eax, 0x1001726d
push eax
push 1
mov ebx, 0x130
call fcn.10007fb0
add esp, 0x10
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], esp
push 0
push 0x84000100
push dword [ebp - 0x50]
push dword [ebp - 0x18]
mov ebx, dword [ebp + 8]
push dword [ebx]
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
nop
nop
nop
nop
cmp dword [ebp - 0x54], esp
je 0x10003fe2
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x1000401b
mov dword [ebp - 0x50], esp
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004011
push 6
call fcn.100071f9
add esp, 4
mov eax, 0xffffffff
jmp 0x10004ad3
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x50], esp
mov eax, 0
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x20000005
push dword [ebp - 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoA]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004064
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x10004078
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x50], esp
push dword [ebp - 0x1c]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x1000409a
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100040bc
push 6
call fcn.100071f9
add esp, 4
push 0x80000301
push 0
push 0x40000000
push 0x80000301
push 0
push SysReAllocString
push 2
mov ebx, 0xc8
call fcn.10009650
add esp, 0x1c
mov dword [ebp - 0x50], eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push 1
push 2
mov ebx, 0xc8
call fcn.10009650
add esp, 0x1c
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], esp
push 0
push 0
push 2
push 0
push dword [ebp - 0x54]
push dword [ebp - 0x50]
mov ebx, dword [ebp + 0xc]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
nop
nop
nop
nop
cmp dword [ebp - 0x58], esp
je 0x10004154
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jne 0x1000416b
mov eax, 0xffffffff
jmp 0x10004ad3
mov dword [ebp - 0x50], esp
push 0
push dword [ebp - 0x20]
push 0
push 4
push 0
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100041a4
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x100041dd
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100041d3
push 6
call fcn.100071f9
add esp, 4
mov eax, 0xffffffff
jmp 0x10004ad3
cmp dword [ebp - 0x20], 0
jne 0x10004235
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004209
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x1000422b
push 6
call fcn.100071f9
add esp, 4
mov eax, 0
jmp 0x10004ad3
mov dword [ebp - 0x30], 0x100000
fild dword [ebp - 0x20]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fild dword [ebp - 0x30]
fstp qword [ebp - 0x5c]
fdiv qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.10001011
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x54]
push 0x80000601
push dword [ebp - 0x50]
push dword [ebp - 0x54]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x5c]
push 0x80000601
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push 2
mov ebx, 0x48
call fcn.10009670
add esp, 0x1c
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
fld qword [ebp - 0x6c]
ftst
fnstsw ax
test ah, 1
je 0x100042a4
fchs
fcomp qword [0x1001750c]
fnstsw ax
test ah, 0x41
jne 0x100042b8
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp dword [ebp + 0x10], eax
jle 0x100042ca
mov eax, dword [ebp - 0x34]
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x50], esp
push 0
push 0
push 4
call dword [sym.imp.KERNEL32.dll_HeapCreate]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100042f8
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x10004353
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004327
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004349
push 6
call fcn.100071f9
add esp, 4
mov eax, 0xffffffff
jmp 0x10004ad3
mov dword [ebp - 0x50], esp
push 0x3c
push 8
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x1000437f
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x100043fc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100043ae
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100043d0
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100043f2
push 6
call fcn.100071f9
add esp, 4
mov eax, 0xffffffff
jmp 0x10004ad3
push 0x80000004
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x10004411
mov eax, 0x1001726d
push eax
push 1
mov ebx, 0x130
call fcn.10007fb0
add esp, 0x10
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
fadd qword [0x100175b3]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], esp
fld qword [ebp - 0x60]
call fcn.10001011
push eax
push 8
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
nop
nop
nop
nop
cmp dword [ebp - 0x64], esp
je 0x10004469
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x100044e6
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004498
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100044ba
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100044dc
push 6
call fcn.100071f9
add esp, 4
mov eax, 0xffffffff
jmp 0x10004ad3
push 0x80000004
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x100044fb
mov eax, 0x1001726d
push eax
push 1
mov ebx, 0x130
call fcn.10007fb0
add esp, 0x10
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
fadd qword [0x100175b3]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], esp
fld qword [ebp - 0x60]
call fcn.10001011
push eax
mov ebx, dword [ebp + 8]
push dword [ebx]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x64], esp
je 0x10004553
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push 0x18
push 8
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x1000457f
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x100045fc
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100045ae
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100045d0
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x100045f2
push 6
call fcn.100071f9
add esp, 4
mov eax, 0xffffffff
jmp 0x10004ad3
mov dword [ebp - 0x50], esp
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x1000461e
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push 4
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004649
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175bb]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp + 0x14]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x1000468c
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175c3]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x28]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x100046cf
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175cb]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x2c]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x10004712
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175d3]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x38]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x10004755
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175db]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x44]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x10004798
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175e3]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp + 0x10]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x100047db
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175eb]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x48]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x1000481e
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175f3]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
mov eax, 0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x10004869
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x100175fb]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x30]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x100048ac
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x10017603]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
mov eax, 0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x100048f7
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x1001760b]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x34]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x1000493a
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x10017613]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
mov eax, 0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x10004985
push 6
call fcn.100071f9
add esp, 4
fild dword [ebp - 0x3c]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fadd qword [0x1001761b]
fstp qword [ebp - 0x5c]
mov dword [ebp - 0x60], esp
push 4
lea eax, [ebp - 0x20]
push eax
fld qword [ebp - 0x5c]
call fcn.10001011
push eax
call dword [sym.imp.KERNEL32.dll_RtlMoveMemory]
nop
nop
nop
nop
cmp dword [ebp - 0x60], esp
je 0x100049c8
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
mov eax, 0
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
push 0
push dword [ebp - 0x3c]
push 0x10006f76
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004a0a
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x10004aa9
mov dword [ebp - 0x50], esp
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004a39
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004a5b
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004a7d
push 6
call fcn.100071f9
add esp, 4
mov dword [ebp - 0x50], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004a9f
push 6
call fcn.100071f9
add esp, 4
mov eax, 0xffffffff
jmp 0x10004ad3
mov dword [ebp - 0x50], esp
push dword [ebp - 0x4c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x50], esp
je 0x10004acb
push 6
call fcn.100071f9
add esp, 4
mov eax, dword [ebp - 0x3c]
jmp 0x10004ad3
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004ae4
push ebx
call fcn.100071e7
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004af4
push ebx
call fcn.100071e7
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10004b12
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10004b0e
imul eax, dword [ebx]
jmp 0x10004b03
mov ecx, eax
test ecx, ecx
je 0x10004b31
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x10004b2a
push ebx
push eax
call fcn.100071e7
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x10004b18
call fcn.100071e7
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10004b49
push ebx
call fcn.100071e7
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10