Function at 0x474d60
Capabilities:
Check for time delay via gettickcount
Check if file exists
Check internet connectivity via wininet
Print debug messages
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x50ac70
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x5522c0]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
cmp byte [0x554092], 0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x474da2
call ebx
mov dword [0x55ad74], eax
mov esi, dword [ebp + 8]
push esi
call fcn.00489f30
cmp byte [0x554092], 0
je 0x474e20
call ebx
mov dword [0x55ad78], eax
sub eax, dword [0x55ad74]
mov edi, 0x55ae78
push eax
push 0x5200d0
push 0x5200e4
call fcn.004597f0
mov eax, dword [0x55ae78]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x55ad7c]
test eax, eax
je 0x474e10
mov ecx, dword [0x55ae78]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.004e84a4
mov ecx, dword [0x55ad7c]
push ecx
call fcn.004e59f8
add esp, 0x14
cmp byte [0x554092], 0
je 0x474e20
call ebx
mov dword [0x55ad74], eax
add esi, 0xb4
lea edx, [esp + 0x14]
push esi
push edx
mov ebx, 0x520110
call fcn.0045ce00
add esp, 8
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x474e6d
push 0xb
push str.__RegServer
lea ebx, [esp + 0x1c]
call fcn.0045b400
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00474ce0
add esp, 4
cmp byte [0x554092], 0
je 0x474ed6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x55ad78], eax
sub eax, dword [0x55ad74]
mov edi, 0x55ae78
push eax
push 0x520148
push 0x5200e4
call fcn.004597f0
mov edx, dword [0x55ae78]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x55ad7c]
test eax, eax
je 0x474ed6
mov ecx, dword [0x55ae78]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.004e84a4
mov eax, dword [0x55ad7c]
push eax
call fcn.004e59f8
add esp, 0x14
lea ecx, [esp + 0x18]
push esi
push ecx
mov ebx, 0x520110
call fcn.0045ce00
mov byte [esp + 0x30], 1
mov edx, dword [esp + 0x20]
xor ebx, ebx
push ebx
push edx
call fcn.00458900
mov byte [esp + 0x38], bl
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x474f1f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 1
call fcn.00458c80
add esp, 4
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.SensApi.dll_IsNetworkAlive]
test eax, eax
jne 0x474f72
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
je 0x474ffc
push ebx
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x474ffc
mov al, byte [esp + 0x18]
test al, 0x20
jne 0x474ffc
test al, 7
je 0x474ffc
cmp byte [0x554092], bl
je 0x474f85
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x55ad74], eax
mov ebx, dword [ebp + 8]
call fcn.00488c90
push ebx
call fcn.004893c0
cmp byte [0x554092], 0
je 0x474ffc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x55ad78], eax
sub eax, dword [0x55ad74]
mov edi, 0x55ae78
push eax
push 0x520174
push 0x5200e4
call fcn.004597f0
mov eax, dword [0x55ae78]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x55ad7c]
test eax, eax
je 0x474ffc
mov ecx, dword [0x55ae78]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.004e84a4
mov ecx, dword [0x55ad7c]
push ecx
call fcn.004e59f8
add esp, 0x14
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x475024
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4