Function at 0x504d60
Capabilities:
Check os version
Get socket status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ab150
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x100
push ebx
push esi
push edi
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x10], esp
mov esi, ecx
xor ebx, ebx
push eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x48], ebx
call fcn.0056c17c
lea ecx, [ebp - 0x44]
push ecx
call fcn.0056c17c
mov eax, dword [esi + 0xac]
add esp, 8
cmp eax, ebx
jne 0x504dc2
cmp dword [esi + 0xbc], ebx
je 0x504dd2
cmp dword [esi + 0x10c], ebx
je 0x504ddb
cmp dword [esi + 0x110], ebx
je 0x504ddb
mov dword [ebp - 0x20], 1
jmp 0x504dde
mov dword [ebp - 0x20], ebx
mov ecx, esi
call fcn.00536820
mov ecx, esi
call fcn.00536f40
mov ecx, esi
call fcn.00536040
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov eax, dword [esi + 0x38]
mov ecx, esi
cmp eax, ebx
je 0x504e65
call fcn.005059f0
lea ecx, [esi + 0x48]
call fcn.004f5d10
mov edx, dword [esi + 0x140]
mov ecx, dword [esi + 0x144]
lea eax, [esi + 0x20]
mov dword [esi + 0x30], ebx
push eax
push 0x1389
mov dword [eax], edx
mov edx, dword [esi + 0x148]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x14c]
mov dword [esi + 0x28], edx
mov edx, dword [esi + 0x10]
mov dword [esi + 0x2c], ecx
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00535cf0
test al, al
mov byte [ebp - 0x24], al
je 0x504e8f
lea ecx, [ebp - 0x68]
push ecx
call fcn.0056c17c
mov edx, dword [esi + 0x148]
mov eax, dword [esi + 0x14c]
add esp, 4
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x4c]
lea edx, [esi + 0x5e0]
push ecx
lea eax, [esi + 0x3dc]
push edx
lea ecx, [esi + 0x1d8]
push eax
push ecx
push ebx
call sub.WSOCK32.dll_select
mov edi, eax
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x504edc
mov ecx, esi
call fcn.005059f0
lea ecx, [esi + 0x48]
call fcn.004f5d10
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x148]
mov ecx, dword [esi + 0x14c]
or eax, ecx
jne 0x504f20
lea edx, [ebp - 0x44]
push edx
call fcn.0056c17c
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x8c]
sub eax, edx
add esp, 4
cmp eax, 0x12c
jle 0x504f20
mov eax, 0x7532
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x504f82
cmp edi, ebx
je 0x504f82
xor edi, edi
cmp edi, dword [esi + 0x130]
jge 0x504fb7
lea eax, [edi + edi*2]
lea ecx, [eax + eax*4]
lea eax, [edi + ecx*4]
mov ecx, dword [esi + 0x1d4]
lea edx, [eax + eax*4]
lea eax, [edi + edx*2]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
cmp dword [ecx + 0x54], ebx
je 0x504f7f
cmp dword [esi + 0x38], ebx
je 0x504f7a
lea ecx, [esi + 0x48]
call fcn.004f5d10
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00501ae0
inc edi
jmp 0x504f2b
xor edi, edi
cmp edi, dword [esi + 0x130]
jge 0x504fb7
lea eax, [edi + edi*2]
lea edx, [eax + eax*4]
lea eax, [edi + edx*4]
mov edx, dword [esi + 0x1d4]
lea eax, [eax + eax*4]
lea eax, [edi + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
cmp eax, ebx
lea ecx, [edx + ecx*8]
je 0x504fb4
call fcn.005013f0
inc edi
jmp 0x504f84
mov eax, dword [ebp - 0x24]
mov ecx, esi
push eax
push ebx
call fcn.00536110
lea ecx, [ebp - 0x80]
push ecx
call fcn.0056c17c
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x44]
sub eax, ecx
mov ecx, dword [ebp - 0x7c]
and ecx, 0xffff
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x40]
shl edx, 3
and eax, 0xffff
sub edx, eax
add edx, ecx
cmp edx, 0xfa
jl 0x50507d
lea edx, [ebp - 0x44]
push edx
call fcn.0056c17c
add esp, 4
xor ebx, ebx
cmp ebx, dword [esi + 0x130]
jge 0x50507d
lea eax, [ebx + ebx*2]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
lea ecx, [eax + eax*4]
lea eax, [ebx + ecx*2]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1d4]
lea edi, [eax + edx*8]
mov eax, dword [eax + edx*8 + 0x54]
test eax, eax
je 0x50507a
mov ecx, dword [edi + 0x70]
mov edx, dword [ecx]
cmp dword [edx], 0
je 0x50507a
mov eax, dword [edi + 0x38]
mov ecx, dword [edi + 0x3c]
or eax, ecx
je 0x50507a
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.004f9320
mov ecx, dword [edi + 0x70]
lea eax, [edi + 0x2d0]
push eax
push 0x13ef
mov edx, dword [ecx]
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x50500e
mov eax, dword [esi + 0x38]
test eax, eax
je 0x5050a9
mov ecx, esi
call fcn.005059f0
lea ecx, [esi + 0x48]
call fcn.004f5d10
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x50513e
mov eax, dword [esi + 0x144]
test eax, eax
jg 0x5050d6
jl 0x5050ca
mov eax, dword [esi + 0x140]
test eax, eax
ja 0x5050d6
mov ecx, dword [esi + 0x1d4]
cmp dword [ecx + 0x5c], 6
jne 0x50513e
mov eax, dword [esi + 0x10c]
test eax, eax
je 0x505103
mov eax, dword [esi + 0x110]
test eax, eax
je 0x505103
mov edx, dword [esi + 0x114]
push 0
push edx
push 0x1407
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x505125
mov ecx, esi
call fcn.005059f0
lea ecx, [esi + 0x48]
call fcn.004f5d10
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x804]
mov dword [ebp - 0x20], 0
mov dword [esi + 0x12c], eax
mov dword [esi + 0x1d0], eax
mov eax, dword [esi + 0xc]
mov cl, byte [eax + 0x2be]
test cl, cl
je 0x5051a2
mov al, byte [0x6615dc]
test al, al
jne 0x5051a2
mov eax, dword [esi + 0x144]
test eax, eax
jl 0x5051a2
jg 0x50516a
mov eax, dword [esi + 0x140]
test eax, eax
jbe 0x5051a2
push str.Stop_downloading__wait_while_the_Start_btn_will_be_pressed_n
mov ecx, esi
call fcn.00535f00
mov ecx, esi
call fcn.005059f0
lea ecx, [esi + 0x48]
call fcn.004f5d10
mov dword [esi + 0x38], 1
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp - 0x24]
test al, al
je 0x5053bb
mov ecx, dword [esi + 0x14c]
mov eax, dword [esi + 0x148]
test ecx, ecx
jl 0x5053bb
jg 0x5051ce
cmp eax, 0x400
jbe 0x5053bb
mov ecx, dword [0x661180]
mov ebx, dword [0x661184]
lea edx, [ebp - 0x74]
mov dword [ebp - 0x2c], ecx
push edx
call fcn.0056c17c
mov eax, dword [esi + 0x148]
mov edi, dword [ebp - 0x34]
mov ecx, dword [esi + 0x14c]
mov edx, dword [ebp - 0x30]
add esp, 4
sub eax, edi
sbb ecx, edx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ecx
js 0x5053bb
jg 0x505215
test eax, eax
jbe 0x5053bb
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
sub eax, edx
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x70]
and ecx, 0xffff
lea eax, [eax + eax*4]
and edx, 0xffff
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
sub eax, ecx
add eax, edx
mov dword [ebp - 0x1c], eax
jne 0x50524b
mov dword [ebp - 0x1c], 1
fild qword [ebp - 0x5c]
fmul dword [0x5bbd40]
fidiv dword [ebp - 0x1c]
call fcn.0056afb4
mov edi, edx
mov ecx, eax
cmp edi, ebx
jl 0x5053bb
jg 0x505273
cmp ecx, dword [ebp - 0x2c]
jbe 0x5053bb
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
sub ecx, edx
cdq
sbb edi, ebx
push edx
push eax
push edi
push ecx
call fcn.0056d280
mov ecx, dword [ebp - 0x2c]
push ebx
push ecx
push edx
push eax
call fcn.0056c820
mov edi, eax
mov eax, dword [esi + 0x150]
cdq
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x2c]
push 0
push 2
push ebx
push edx
mov dword [ebp - 0x18], eax
call fcn.0056c820
cmp dword [ebp - 0x14], edx
jg 0x5052d1
jl 0x5052bc
cmp dword [ebp - 0x18], eax
jae 0x5052d1
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov edi, edx
jmp 0x5052ff
mov ecx, dword [ebp - 0x2c]
push 0
push 9
push ebx
push ecx
call fcn.0056d280
push 0
push 0xa
push edx
push eax
call fcn.0056c820
cmp dword [ebp - 0x14], edx
jg 0x5052ff
jl 0x5052f6
cmp dword [ebp - 0x18], eax
jae 0x5052ff
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp edi, 0x2ee0
jle 0x50530e
mov edi, 0x2ee0
jmp 0x505316
test edi, edi
jle 0x5053bb
mov eax, dword [esi + 0x808]
cmp eax, 0xffffffff
je 0x5053b4
lea ecx, [esi + 0x1d8]
lea ebx, [esi + 0x5e0]
mov dword [esi + 0x3dc], 0
mov dword [ecx], 0
mov dword [ebx], 0
mov dword [esi + 0x1dc], eax
mov eax, dword [ecx]
inc eax
mov dword [ecx], eax
mov eax, dword [ebx]
cmp eax, 0x80
jae 0x50536d
mov edx, dword [esi + 0x808]
mov dword [esi + eax*4 + 0x5e4], edx
mov eax, dword [ebx]
inc eax
mov dword [ebx], eax
mov eax, 0x10624dd3
imul edi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [ebp - 0x54], edx
lea eax, [edx + edx*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 3
sub edi, edx
lea edx, [ebp - 0x54]
push edx
push ebx
lea eax, [edi + edi*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [ebp - 0x50], eax
lea eax, [esi + 0x3dc]
push eax
push ecx
push 0
call sub.WSOCK32.dll_select
jmp 0x5053bb
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.00505580
mov edi, eax
mov ecx, esi
test edi, edi
jne 0x5053dd
call fcn.00505b60
mov ecx, esi
call fcn.00536f70
xor ebx, ebx
jmp 0x504df9
call fcn.005059f0
mov eax, dword [esi + 0x38]
test eax, eax
je 0x505407
lea ecx, [esi + 0x48]
call fcn.004f5d10
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x753c
jne 0x505432
mov esi, dword [esi + 0xf8]
test esi, esi
mov eax, esi
jne 0x505561
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x50555e
mov eax, dword [esi + 0x14c]
mov ecx, dword [esi + 0x148]
mov edx, dword [0x6623c0]
push eax
push ecx
lea eax, [ebp - 0x10c]
push edx
push eax
call fcn.0056b4da
add esp, 0x10
lea ecx, [ebp - 0x10c]
push 1
push ecx
mov ecx, esi
call fcn.00535de0
xor ebx, ebx
cmp ebx, dword [esi + 0x130]
jge 0x5054e0
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4]
lea eax, [ebx + edx*4]
mov edx, dword [esi + 0x1d4]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
test eax, eax
lea edi, [edx + ecx*8]
je 0x5054dd
mov eax, dword [edi + 0x70]
mov ecx, dword [eax]
cmp dword [ecx], 0
je 0x5054dd
mov edx, dword [edi + 0x38]
mov eax, dword [edi + 0x3c]
or edx, eax
je 0x5054dd
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.004f9320
lea eax, [edi + 0x2d0]
push eax
mov eax, dword [edi + 0x70]
push 0x13ef
push 0x111
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x505471
mov edx, dword [esi + 0x148]
mov eax, dword [esi + 0x14c]
mov ecx, dword [esi + 0x140]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x144]
cmp edx, ecx
mov dword [ebp - 0x18], edx
jne 0x505509
mov edx, dword [ebp - 0x14]
cmp edx, eax
je 0x505531
mov edx, ecx
or edx, eax
je 0x505531
cmp dword [ebp - 0x14], eax
jl 0x50555e
jg 0x50551b
cmp dword [ebp - 0x18], ecx
jbe 0x50555e
mov eax, 0x7570
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.00536f70
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret