Function at 0x51ba20
Capabilities:
Check os version
Get socket status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c6de0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x100
push ebx
push esi
push edi
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x10], esp
mov esi, ecx
xor ebx, ebx
push eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x48], ebx
call fcn.005860ec
lea ecx, [ebp - 0x44]
push ecx
call fcn.005860ec
mov eax, dword [esi + 0xac]
add esp, 8
cmp eax, ebx
jne 0x51ba82
cmp dword [esi + 0xbc], ebx
je 0x51ba92
cmp dword [esi + 0x10c], ebx
je 0x51ba9b
cmp dword [esi + 0x110], ebx
je 0x51ba9b
mov dword [ebp - 0x20], 1
jmp 0x51ba9e
mov dword [ebp - 0x20], ebx
mov ecx, esi
call fcn.0054de80
mov ecx, esi
call fcn.0054e590
mov ecx, esi
call fcn.0054d690
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov eax, dword [esi + 0x38]
mov ecx, esi
cmp eax, ebx
je 0x51bb25
call fcn.0051c6a0
lea ecx, [esi + 0x48]
call fcn.0050c900
mov edx, dword [esi + 0x150]
mov ecx, dword [esi + 0x154]
lea eax, [esi + 0x20]
mov dword [esi + 0x30], ebx
push eax
push 0x1471
mov dword [eax], edx
mov edx, dword [esi + 0x158]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x15c]
mov dword [esi + 0x28], edx
mov edx, dword [esi + 0x10]
mov dword [esi + 0x2c], ecx
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0054d2c0
test al, al
mov byte [ebp - 0x24], al
je 0x51bb4f
lea ecx, [ebp - 0x68]
push ecx
call fcn.005860ec
mov edx, dword [esi + 0x158]
mov eax, dword [esi + 0x15c]
add esp, 4
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x4c]
lea edx, [esi + 0x5f0]
push ecx
lea eax, [esi + 0x3ec]
push edx
lea ecx, [esi + 0x1e8]
push eax
push ecx
push ebx
call sub.WSOCK32.dll_select
mov edi, eax
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x51bb9c
mov ecx, esi
call fcn.0051c6a0
lea ecx, [esi + 0x48]
call fcn.0050c900
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x158]
mov ecx, dword [esi + 0x15c]
or eax, ecx
jne 0x51bbe0
lea edx, [ebp - 0x44]
push edx
call fcn.005860ec
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x8c]
sub eax, edx
add esp, 4
cmp eax, 0x12c
jle 0x51bbe0
mov eax, 0x7532
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x51bc42
cmp edi, ebx
je 0x51bc42
xor edi, edi
cmp edi, dword [esi + 0x140]
jge 0x51bc77
lea eax, [edi + edi*2]
lea ecx, [eax + eax*4]
lea eax, [edi + ecx*4]
mov ecx, dword [esi + 0x1e4]
lea edx, [eax + eax*4]
lea eax, [edi + edx*2]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
cmp dword [ecx + 0x54], ebx
je 0x51bc3f
cmp dword [esi + 0x38], ebx
je 0x51bc3a
lea ecx, [esi + 0x48]
call fcn.0050c900
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.005187c0
inc edi
jmp 0x51bbeb
xor edi, edi
cmp edi, dword [esi + 0x140]
jge 0x51bc77
lea eax, [edi + edi*2]
lea edx, [eax + eax*4]
lea eax, [edi + edx*4]
mov edx, dword [esi + 0x1e4]
lea eax, [eax + eax*4]
lea eax, [edi + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
cmp eax, ebx
lea ecx, [edx + ecx*8]
je 0x51bc74
call fcn.005180d0
inc edi
jmp 0x51bc44
mov eax, dword [ebp - 0x24]
mov ecx, esi
push eax
push ebx
call fcn.0054d760
lea ecx, [ebp - 0x80]
push ecx
call fcn.005860ec
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x44]
sub eax, ecx
mov ecx, dword [ebp - 0x7c]
and ecx, 0xffff
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x40]
shl edx, 3
and eax, 0xffff
sub edx, eax
add edx, ecx
cmp edx, 0xfa
jl 0x51bd3d
lea edx, [ebp - 0x44]
push edx
call fcn.005860ec
add esp, 4
xor ebx, ebx
cmp ebx, dword [esi + 0x140]
jge 0x51bd3d
lea eax, [ebx + ebx*2]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
lea ecx, [eax + eax*4]
lea eax, [ebx + ecx*2]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1e4]
lea edi, [eax + edx*8]
mov eax, dword [eax + edx*8 + 0x54]
test eax, eax
je 0x51bd3a
mov ecx, dword [edi + 0x70]
mov edx, dword [ecx]
cmp dword [edx], 0
je 0x51bd3a
mov eax, dword [edi + 0x38]
mov ecx, dword [edi + 0x3c]
or eax, ecx
je 0x51bd3a
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.0050ffa0
mov ecx, dword [edi + 0x70]
lea eax, [edi + 0x2d0]
push eax
push 0x13ef
mov edx, dword [ecx]
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x51bcce
mov eax, dword [esi + 0x38]
test eax, eax
je 0x51bd69
mov ecx, esi
call fcn.0051c6a0
lea ecx, [esi + 0x48]
call fcn.0050c900
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x51bdfe
mov eax, dword [esi + 0x154]
test eax, eax
jg 0x51bd96
jl 0x51bd8a
mov eax, dword [esi + 0x150]
test eax, eax
ja 0x51bd96
mov ecx, dword [esi + 0x1e4]
cmp dword [ecx + 0x5c], 6
jne 0x51bdfe
mov eax, dword [esi + 0x10c]
test eax, eax
je 0x51bdc3
mov eax, dword [esi + 0x110]
test eax, eax
je 0x51bdc3
mov edx, dword [esi + 0x114]
push 0
push edx
push 0x1407
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x51bde5
mov ecx, esi
call fcn.0051c6a0
lea ecx, [esi + 0x48]
call fcn.0050c900
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x814]
mov dword [ebp - 0x20], 0
mov dword [esi + 0x13c], eax
mov dword [esi + 0x1e0], eax
mov eax, dword [esi + 0xc]
mov cl, byte [eax + 0x2c0]
test cl, cl
je 0x51be62
mov al, byte [0x6826c4]
test al, al
jne 0x51be62
mov eax, dword [esi + 0x154]
test eax, eax
jl 0x51be62
jg 0x51be2a
mov eax, dword [esi + 0x150]
test eax, eax
jbe 0x51be62
push str.Stop_downloading__wait_while_the_Start_btn_will_be_pressed_n
mov ecx, esi
call fcn.0054d550
mov ecx, esi
call fcn.0051c6a0
lea ecx, [esi + 0x48]
call fcn.0050c900
mov dword [esi + 0x38], 1
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp - 0x24]
test al, al
je 0x51c078
mov ecx, dword [esi + 0x15c]
mov eax, dword [esi + 0x158]
test ecx, ecx
jl 0x51c078
jg 0x51be8e
cmp eax, 0x400
jbe 0x51c078
mov ecx, esi
call fcn.0054d280
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x2c], eax
push ecx
mov ebx, edx
call fcn.005860ec
mov eax, dword [esi + 0x158]
mov edi, dword [ebp - 0x34]
mov ecx, dword [esi + 0x15c]
mov edx, dword [ebp - 0x30]
add esp, 4
sub eax, edi
sbb ecx, edx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ecx
js 0x51c078
jg 0x51bed2
test eax, eax
jbe 0x51c078
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
sub eax, edx
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x70]
and edx, 0xffff
lea eax, [eax + eax*4]
and ecx, 0xffff
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
sub eax, edx
add eax, ecx
mov dword [ebp - 0x1c], eax
jne 0x51bf08
mov dword [ebp - 0x1c], 1
fild qword [ebp - 0x5c]
fmul dword [0x5d8d8c]
fidiv dword [ebp - 0x1c]
call fcn.00584d08
mov edi, edx
mov ecx, eax
cmp edi, ebx
jl 0x51c078
jg 0x51bf30
cmp ecx, dword [ebp - 0x2c]
jbe 0x51c078
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
sub ecx, edx
cdq
sbb edi, ebx
push edx
push eax
push edi
push ecx
call fcn.005870a0
mov ecx, dword [ebp - 0x2c]
push ebx
push ecx
push edx
push eax
call fcn.00586630
mov edi, eax
mov eax, dword [esi + 0x160]
cdq
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x2c]
push 0
push 2
push ebx
push edx
mov dword [ebp - 0x18], eax
call fcn.00586630
cmp dword [ebp - 0x14], edx
jg 0x51bf8e
jl 0x51bf79
cmp dword [ebp - 0x18], eax
jae 0x51bf8e
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov edi, edx
jmp 0x51bfbc
mov ecx, dword [ebp - 0x2c]
push 0
push 9
push ebx
push ecx
call fcn.005870a0
push 0
push 0xa
push edx
push eax
call fcn.00586630
cmp dword [ebp - 0x14], edx
jg 0x51bfbc
jl 0x51bfb3
cmp dword [ebp - 0x18], eax
jae 0x51bfbc
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp edi, 0x2ee0
jle 0x51bfcb
mov edi, 0x2ee0
jmp 0x51bfd3
test edi, edi
jle 0x51c078
mov eax, dword [esi + 0x818]
cmp eax, 0xffffffff
je 0x51c071
lea ecx, [esi + 0x1e8]
lea ebx, [esi + 0x5f0]
mov dword [esi + 0x3ec], 0
mov dword [ecx], 0
mov dword [ebx], 0
mov dword [esi + 0x1ec], eax
mov eax, dword [ecx]
inc eax
mov dword [ecx], eax
mov eax, dword [ebx]
cmp eax, 0x80
jae 0x51c02a
mov edx, dword [esi + 0x818]
mov dword [esi + eax*4 + 0x5f4], edx
mov eax, dword [ebx]
inc eax
mov dword [ebx], eax
mov eax, 0x10624dd3
imul edi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [ebp - 0x54], edx
lea eax, [edx + edx*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 3
sub edi, edx
lea edx, [ebp - 0x54]
push edx
push ebx
lea eax, [edi + edi*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [ebp - 0x50], eax
lea eax, [esi + 0x3ec]
push eax
push ecx
push 0
call sub.WSOCK32.dll_select
jmp 0x51c078
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.0051c230
mov edi, eax
mov ecx, esi
test edi, edi
jne 0x51c09a
call fcn.0051c810
mov ecx, esi
call fcn.0054e5c0
xor ebx, ebx
jmp 0x51bab9
call fcn.0051c6a0
mov eax, dword [esi + 0x38]
test eax, eax
je 0x51c0c4
lea ecx, [esi + 0x48]
call fcn.0050c900
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x753c
jne 0x51c0ef
mov esi, dword [esi + 0xf8]
test esi, esi
mov eax, esi
jne 0x51c21e
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x51c21b
mov eax, dword [esi + 0x15c]
mov ecx, dword [esi + 0x158]
mov edx, dword [0x683500]
push eax
push ecx
lea eax, [ebp - 0x10c]
push edx
push eax
call fcn.005851fa
add esp, 0x10
lea ecx, [ebp - 0x10c]
push 1
push ecx
mov ecx, esi
call fcn.0054d430
xor ebx, ebx
cmp ebx, dword [esi + 0x140]
jge 0x51c19d
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4]
lea eax, [ebx + edx*4]
mov edx, dword [esi + 0x1e4]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
test eax, eax
lea edi, [edx + ecx*8]
je 0x51c19a
mov eax, dword [edi + 0x70]
mov ecx, dword [eax]
cmp dword [ecx], 0
je 0x51c19a
mov edx, dword [edi + 0x38]
mov eax, dword [edi + 0x3c]
or edx, eax
je 0x51c19a
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.0050ffa0
lea eax, [edi + 0x2d0]
push eax
mov eax, dword [edi + 0x70]
push 0x13ef
push 0x111
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x51c12e
mov edx, dword [esi + 0x158]
mov eax, dword [esi + 0x15c]
mov ecx, dword [esi + 0x150]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x154]
cmp edx, ecx
mov dword [ebp - 0x18], edx
jne 0x51c1c6
mov edx, dword [ebp - 0x14]
cmp edx, eax
je 0x51c1ee
mov edx, ecx
or edx, eax
je 0x51c1ee
cmp dword [ebp - 0x14], eax
jl 0x51c21b
jg 0x51c1d8
cmp dword [ebp - 0x18], ecx
jbe 0x51c21b
mov eax, 0x7570
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.0054e5c0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret