Function at 0x523800
Capabilities:
Check os version
Get socket status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d4390
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x100
push ebx
push esi
push edi
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x10], esp
mov esi, ecx
xor ebx, ebx
push eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x48], ebx
call fcn.00592fdc
lea ecx, [ebp - 0x44]
push ecx
call fcn.00592fdc
mov eax, dword [esi + 0xac]
add esp, 8
cmp eax, ebx
jne 0x523862
cmp dword [esi + 0xbc], ebx
je 0x523872
cmp dword [esi + 0x10c], ebx
je 0x52387b
cmp dword [esi + 0x110], ebx
je 0x52387b
mov dword [ebp - 0x20], 1
jmp 0x52387e
mov dword [ebp - 0x20], ebx
mov ecx, esi
call fcn.0055a5c0
mov ecx, esi
call fcn.0055ace0
mov ecx, esi
call fcn.00559dc0
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov eax, dword [esi + 0x38]
mov ecx, esi
cmp eax, ebx
je 0x523905
call fcn.005244f0
lea ecx, [esi + 0x48]
call fcn.00511c40
mov edx, dword [esi + 0x150]
mov ecx, dword [esi + 0x154]
lea eax, [esi + 0x20]
mov dword [esi + 0x30], ebx
push eax
push 0x1471
mov dword [eax], edx
mov edx, dword [esi + 0x158]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x15c]
mov dword [esi + 0x28], edx
mov edx, dword [esi + 0x10]
mov dword [esi + 0x2c], ecx
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.005599d0
test al, al
mov byte [ebp - 0x24], al
je 0x52392f
lea ecx, [ebp - 0x68]
push ecx
call fcn.00592fdc
mov edx, dword [esi + 0x158]
mov eax, dword [esi + 0x15c]
add esp, 4
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x4c]
lea edx, [esi + 0x5f0]
push ecx
lea eax, [esi + 0x3ec]
push edx
lea ecx, [esi + 0x1e8]
push eax
push ecx
push ebx
call sub.WSOCK32.dll_select
mov edi, eax
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x52397c
mov ecx, esi
call fcn.005244f0
lea ecx, [esi + 0x48]
call fcn.00511c40
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x158]
mov ecx, dword [esi + 0x15c]
or eax, ecx
jne 0x5239c0
lea edx, [ebp - 0x44]
push edx
call fcn.00592fdc
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x8c]
sub eax, edx
add esp, 4
cmp eax, 0x12c
jle 0x5239c0
mov eax, 0x7532
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x523a1f
cmp edi, ebx
je 0x523a1f
xor edi, edi
cmp edi, dword [esi + 0x140]
jge 0x523a52
mov eax, edi
shl eax, 4
add eax, edi
lea ecx, [eax + eax*8]
lea eax, [edi + ecx*4]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1e4]
lea ecx, [eax + edx*8]
mov eax, dword [eax + edx*8 + 0x74]
cmp eax, ebx
je 0x523a1c
cmp dword [esi + 0x38], ebx
je 0x523a17
lea ecx, [esi + 0x48]
call fcn.00511c40
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0051ff60
inc edi
jmp 0x5239cb
xor edi, edi
cmp edi, dword [esi + 0x140]
jge 0x523a52
mov eax, edi
shl eax, 4
add eax, edi
lea ecx, [eax + eax*8]
lea eax, [edi + ecx*4]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1e4]
lea ecx, [eax + edx*8]
mov eax, dword [eax + edx*8 + 0x74]
cmp eax, ebx
je 0x523a4f
call fcn.0051f700
inc edi
jmp 0x523a21
mov ecx, dword [ebp - 0x24]
push ecx
push ebx
mov ecx, esi
call fcn.00559e90
lea edx, [ebp - 0x80]
push edx
call fcn.00592fdc
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x44]
sub eax, ecx
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x7c]
and ecx, 0xffff
lea eax, [eax + eax*4]
and edx, 0xffff
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
sub eax, ecx
add eax, edx
cmp eax, 0xfa
jl 0x523b20
lea eax, [ebp - 0x44]
push eax
call fcn.00592fdc
add esp, 4
xor ebx, ebx
cmp ebx, dword [esi + 0x140]
jge 0x523b20
mov eax, ebx
shl eax, 4
add eax, ebx
lea ecx, [eax + eax*8]
lea eax, [ebx + ecx*4]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1e4]
lea edi, [eax + edx*8]
mov eax, dword [eax + edx*8 + 0x74]
test eax, eax
je 0x523b1d
mov ecx, dword [edi + 0x90]
mov edx, dword [ecx]
cmp dword [edx], 0
je 0x523b1d
mov eax, dword [edi + 0x58]
mov ecx, dword [edi + 0x5c]
or eax, ecx
je 0x523b1d
lea eax, [edi + 0x2f0]
mov ecx, edi
push eax
call fcn.00516030
mov ecx, dword [edi + 0x90]
lea eax, [edi + 0x2f0]
push eax
push 0x13ef
mov edx, dword [ecx]
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x523aad
mov eax, dword [esi + 0x38]
test eax, eax
je 0x523b4c
mov ecx, esi
call fcn.005244f0
lea ecx, [esi + 0x48]
call fcn.00511c40
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x523be1
mov eax, dword [esi + 0x154]
test eax, eax
jg 0x523b79
jl 0x523b6d
mov eax, dword [esi + 0x150]
test eax, eax
ja 0x523b79
mov ecx, dword [esi + 0x1e4]
cmp dword [ecx + 0x7c], 6
jne 0x523be1
mov eax, dword [esi + 0x10c]
test eax, eax
je 0x523ba6
mov eax, dword [esi + 0x110]
test eax, eax
je 0x523ba6
mov edx, dword [esi + 0x114]
push 0
push edx
push 0x1407
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x523bc8
mov ecx, esi
call fcn.005244f0
lea ecx, [esi + 0x48]
call fcn.00511c40
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x814]
mov dword [ebp - 0x20], 0
mov dword [esi + 0x13c], eax
mov dword [esi + 0x1e0], eax
mov eax, dword [esi + 0xc]
mov cl, byte [eax + 0x2e0]
test cl, cl
je 0x523c45
mov al, byte [0x691c74]
test al, al
jne 0x523c45
mov eax, dword [esi + 0x154]
test eax, eax
jl 0x523c45
jg 0x523c0d
mov eax, dword [esi + 0x150]
test eax, eax
jbe 0x523c45
push str.Stop_downloading__wait_while_the_Start_btn_will_be_pressed_n
mov ecx, esi
call fcn.00559c60
mov ecx, esi
call fcn.005244f0
lea ecx, [esi + 0x48]
call fcn.00511c40
mov dword [esi + 0x38], 1
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp - 0x24]
test al, al
je 0x523e5b
mov ecx, dword [esi + 0x15c]
mov eax, dword [esi + 0x158]
test ecx, ecx
jl 0x523e5b
jg 0x523c71
cmp eax, 0x400
jbe 0x523e5b
mov ecx, esi
call fcn.00559990
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x2c], eax
push ecx
mov ebx, edx
call fcn.00592fdc
mov eax, dword [esi + 0x158]
mov edi, dword [ebp - 0x34]
mov ecx, dword [esi + 0x15c]
mov edx, dword [ebp - 0x30]
add esp, 4
sub eax, edi
sbb ecx, edx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ecx
js 0x523e5b
jg 0x523cb5
test eax, eax
jbe 0x523e5b
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
sub eax, edx
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x70]
and edx, 0xffff
lea eax, [eax + eax*4]
and ecx, 0xffff
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
sub eax, edx
add eax, ecx
mov dword [ebp - 0x1c], eax
jne 0x523ceb
mov dword [ebp - 0x1c], 1
fild qword [ebp - 0x5c]
fmul dword [0x5e6d6c]
fidiv dword [ebp - 0x1c]
call fcn.00591bf8
mov edi, edx
mov ecx, eax
cmp edi, ebx
jl 0x523e5b
jg 0x523d13
cmp ecx, dword [ebp - 0x2c]
jbe 0x523e5b
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
sub ecx, edx
cdq
sbb edi, ebx
push edx
push eax
push edi
push ecx
call fcn.00593f90
mov ecx, dword [ebp - 0x2c]
push ebx
push ecx
push edx
push eax
call fcn.00593520
mov edi, eax
mov eax, dword [esi + 0x160]
cdq
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x2c]
push 0
push 2
push ebx
push edx
mov dword [ebp - 0x18], eax
call fcn.00593520
cmp dword [ebp - 0x14], edx
jg 0x523d71
jl 0x523d5c
cmp dword [ebp - 0x18], eax
jae 0x523d71
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov edi, edx
jmp 0x523d9f
mov ecx, dword [ebp - 0x2c]
push 0
push 9
push ebx
push ecx
call fcn.00593f90
push 0
push 0xa
push edx
push eax
call fcn.00593520
cmp dword [ebp - 0x14], edx
jg 0x523d9f
jl 0x523d96
cmp dword [ebp - 0x18], eax
jae 0x523d9f
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp edi, 0x2ee0
jle 0x523dae
mov edi, 0x2ee0
jmp 0x523db6
test edi, edi
jle 0x523e5b
mov eax, dword [esi + 0x818]
cmp eax, 0xffffffff
je 0x523e54
lea ecx, [esi + 0x1e8]
lea ebx, [esi + 0x5f0]
mov dword [esi + 0x3ec], 0
mov dword [ecx], 0
mov dword [ebx], 0
mov dword [esi + 0x1ec], eax
mov eax, dword [ecx]
inc eax
mov dword [ecx], eax
mov eax, dword [ebx]
cmp eax, 0x80
jae 0x523e0d
mov edx, dword [esi + 0x818]
mov dword [esi + eax*4 + 0x5f4], edx
mov eax, dword [ebx]
inc eax
mov dword [ebx], eax
mov eax, 0x10624dd3
imul edi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [ebp - 0x54], edx
lea eax, [edx + edx*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 3
sub edi, edx
lea edx, [ebp - 0x54]
push edx
push ebx
lea eax, [edi + edi*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [ebp - 0x50], eax
lea eax, [esi + 0x3ec]
push eax
push ecx
push 0
call sub.WSOCK32.dll_select
jmp 0x523e5b
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.00524020
mov edi, eax
mov ecx, esi
test edi, edi
jne 0x523e7d
call fcn.00524660
mov ecx, esi
call fcn.0055ad10
xor ebx, ebx
jmp 0x523899
call fcn.005244f0
mov eax, dword [esi + 0x38]
test eax, eax
je 0x523ea7
lea ecx, [esi + 0x48]
call fcn.00511c40
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x753c
jne 0x523ed2
mov esi, dword [esi + 0xf8]
test esi, esi
mov eax, esi
jne 0x524005
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x524002
mov eax, dword [esi + 0x15c]
mov ecx, dword [esi + 0x158]
mov edx, dword [0x692ad0]
push eax
push ecx
lea eax, [ebp - 0x10c]
push edx
push eax
call fcn.005920ea
add esp, 0x10
lea ecx, [ebp - 0x10c]
push 1
push ecx
mov ecx, esi
call fcn.00559b40
xor ebx, ebx
cmp ebx, dword [esi + 0x140]
jge 0x523f84
mov eax, ebx
mov ecx, dword [esi + 0x1e4]
shl eax, 4
add eax, ebx
lea edx, [eax + eax*8]
lea eax, [ebx + edx*4]
lea eax, [eax + eax*2]
lea edi, [ecx + eax*8]
mov eax, dword [ecx + eax*8 + 0x74]
test eax, eax
je 0x523f81
mov edx, dword [edi + 0x90]
mov eax, dword [edx]
cmp dword [eax], 0
je 0x523f81
mov ecx, dword [edi + 0x58]
mov eax, dword [edi + 0x5c]
or ecx, eax
je 0x523f81
lea eax, [edi + 0x2f0]
mov ecx, edi
push eax
call fcn.00516030
mov edx, dword [edi + 0x90]
lea eax, [edi + 0x2f0]
push eax
push 0x13ef
mov eax, dword [edx]
push 0x111
mov ecx, dword [eax]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x523f11
mov edx, dword [esi + 0x158]
mov eax, dword [esi + 0x15c]
mov ecx, dword [esi + 0x150]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x154]
cmp edx, ecx
mov dword [ebp - 0x18], edx
jne 0x523fad
mov edx, dword [ebp - 0x14]
cmp edx, eax
je 0x523fd5
mov edx, ecx
or edx, eax
je 0x523fd5
cmp dword [ebp - 0x14], eax
jl 0x524002
jg 0x523fbf
cmp dword [ebp - 0x18], ecx
jbe 0x524002
mov eax, 0x7570
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.0055ad10
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret