Function at 0x516760
Capabilities:
Check os version
Get socket status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c0680
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x100
push ebx
push esi
push edi
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x10], esp
mov esi, ecx
xor ebx, ebx
push eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x48], ebx
call fcn.005801dc
lea ecx, [ebp - 0x44]
push ecx
call fcn.005801dc
mov eax, dword [esi + 0xac]
add esp, 8
cmp eax, ebx
jne 0x5167c2
cmp dword [esi + 0xbc], ebx
je 0x5167d2
cmp dword [esi + 0x10c], ebx
je 0x5167db
cmp dword [esi + 0x110], ebx
je 0x5167db
mov dword [ebp - 0x20], 1
jmp 0x5167de
mov dword [ebp - 0x20], ebx
mov ecx, esi
call fcn.00548990
mov ecx, esi
call fcn.005490a0
mov ecx, esi
call fcn.005481b0
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov eax, dword [esi + 0x38]
mov ecx, esi
cmp eax, ebx
je 0x516865
call fcn.005173f0
lea ecx, [esi + 0x48]
call fcn.00507640
mov edx, dword [esi + 0x140]
mov ecx, dword [esi + 0x144]
lea eax, [esi + 0x20]
mov dword [esi + 0x30], ebx
push eax
push 0x1471
mov dword [eax], edx
mov edx, dword [esi + 0x148]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x14c]
mov dword [esi + 0x28], edx
mov edx, dword [esi + 0x10]
mov dword [esi + 0x2c], ecx
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00547e60
test al, al
mov byte [ebp - 0x24], al
je 0x51688f
lea ecx, [ebp - 0x68]
push ecx
call fcn.005801dc
mov edx, dword [esi + 0x148]
mov eax, dword [esi + 0x14c]
add esp, 4
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x4c]
lea edx, [esi + 0x5e0]
push ecx
lea eax, [esi + 0x3dc]
push edx
lea ecx, [esi + 0x1d8]
push eax
push ecx
push ebx
call sub.WSOCK32.dll_select
mov edi, eax
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x5168dc
mov ecx, esi
call fcn.005173f0
lea ecx, [esi + 0x48]
call fcn.00507640
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x148]
mov ecx, dword [esi + 0x14c]
or eax, ecx
jne 0x516920
lea edx, [ebp - 0x44]
push edx
call fcn.005801dc
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x8c]
sub eax, edx
add esp, 4
cmp eax, 0x12c
jle 0x516920
mov eax, 0x7532
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x516982
cmp edi, ebx
je 0x516982
xor edi, edi
cmp edi, dword [esi + 0x130]
jge 0x5169b7
lea eax, [edi + edi*2]
lea ecx, [eax + eax*4]
lea eax, [edi + ecx*4]
mov ecx, dword [esi + 0x1d4]
lea edx, [eax + eax*4]
lea eax, [edi + edx*2]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
cmp dword [ecx + 0x54], ebx
je 0x51697f
cmp dword [esi + 0x38], ebx
je 0x51697a
lea ecx, [esi + 0x48]
call fcn.00507640
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00513500
inc edi
jmp 0x51692b
xor edi, edi
cmp edi, dword [esi + 0x130]
jge 0x5169b7
lea eax, [edi + edi*2]
lea edx, [eax + eax*4]
lea eax, [edi + edx*4]
mov edx, dword [esi + 0x1d4]
lea eax, [eax + eax*4]
lea eax, [edi + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
cmp eax, ebx
lea ecx, [edx + ecx*8]
je 0x5169b4
call fcn.00512e10
inc edi
jmp 0x516984
mov eax, dword [ebp - 0x24]
mov ecx, esi
push eax
push ebx
call fcn.00548280
lea ecx, [ebp - 0x80]
push ecx
call fcn.005801dc
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x44]
sub eax, ecx
mov ecx, dword [ebp - 0x7c]
and ecx, 0xffff
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x40]
shl edx, 3
and eax, 0xffff
sub edx, eax
add edx, ecx
cmp edx, 0xfa
jl 0x516a7d
lea edx, [ebp - 0x44]
push edx
call fcn.005801dc
add esp, 4
xor ebx, ebx
cmp ebx, dword [esi + 0x130]
jge 0x516a7d
lea eax, [ebx + ebx*2]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
lea ecx, [eax + eax*4]
lea eax, [ebx + ecx*2]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1d4]
lea edi, [eax + edx*8]
mov eax, dword [eax + edx*8 + 0x54]
test eax, eax
je 0x516a7a
mov ecx, dword [edi + 0x70]
mov edx, dword [ecx]
cmp dword [edx], 0
je 0x516a7a
mov eax, dword [edi + 0x38]
mov ecx, dword [edi + 0x3c]
or eax, ecx
je 0x516a7a
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.0050ace0
mov ecx, dword [edi + 0x70]
lea eax, [edi + 0x2d0]
push eax
push 0x13ef
mov edx, dword [ecx]
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x516a0e
mov eax, dword [esi + 0x38]
test eax, eax
je 0x516aa9
mov ecx, esi
call fcn.005173f0
lea ecx, [esi + 0x48]
call fcn.00507640
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x516b3e
mov eax, dword [esi + 0x144]
test eax, eax
jg 0x516ad6
jl 0x516aca
mov eax, dword [esi + 0x140]
test eax, eax
ja 0x516ad6
mov ecx, dword [esi + 0x1d4]
cmp dword [ecx + 0x5c], 6
jne 0x516b3e
mov eax, dword [esi + 0x10c]
test eax, eax
je 0x516b03
mov eax, dword [esi + 0x110]
test eax, eax
je 0x516b03
mov edx, dword [esi + 0x114]
push 0
push edx
push 0x1407
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x516b25
mov ecx, esi
call fcn.005173f0
lea ecx, [esi + 0x48]
call fcn.00507640
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x804]
mov dword [ebp - 0x20], 0
mov dword [esi + 0x12c], eax
mov dword [esi + 0x1d0], eax
mov eax, dword [esi + 0xc]
mov cl, byte [eax + 0x2c0]
test cl, cl
je 0x516ba2
mov al, byte [0x67a144]
test al, al
jne 0x516ba2
mov eax, dword [esi + 0x144]
test eax, eax
jl 0x516ba2
jg 0x516b6a
mov eax, dword [esi + 0x140]
test eax, eax
jbe 0x516ba2
push 0x66a8a0
mov ecx, esi
call fcn.00548070
mov ecx, esi
call fcn.005173f0
lea ecx, [esi + 0x48]
call fcn.00507640
mov dword [esi + 0x38], 1
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp - 0x24]
test al, al
je 0x516dbb
mov ecx, dword [esi + 0x14c]
mov eax, dword [esi + 0x148]
test ecx, ecx
jl 0x516dbb
jg 0x516bce
cmp eax, 0x400
jbe 0x516dbb
mov ecx, dword [0x679bb0]
mov ebx, dword [0x679bb4]
lea edx, [ebp - 0x74]
mov dword [ebp - 0x2c], ecx
push edx
call fcn.005801dc
mov eax, dword [esi + 0x148]
mov edi, dword [ebp - 0x34]
mov ecx, dword [esi + 0x14c]
mov edx, dword [ebp - 0x30]
add esp, 4
sub eax, edi
sbb ecx, edx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ecx
js 0x516dbb
jg 0x516c15
test eax, eax
jbe 0x516dbb
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
sub eax, edx
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x70]
and ecx, 0xffff
lea eax, [eax + eax*4]
and edx, 0xffff
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
sub eax, ecx
add eax, edx
mov dword [ebp - 0x1c], eax
jne 0x516c4b
mov dword [ebp - 0x1c], 1
fild qword [ebp - 0x5c]
fmul dword [0x5d1d84]
fidiv dword [ebp - 0x1c]
call fcn.0057edf8
mov edi, edx
mov ecx, eax
cmp edi, ebx
jl 0x516dbb
jg 0x516c73
cmp ecx, dword [ebp - 0x2c]
jbe 0x516dbb
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
sub ecx, edx
cdq
sbb edi, ebx
push edx
push eax
push edi
push ecx
call fcn.00581190
mov ecx, dword [ebp - 0x2c]
push ebx
push ecx
push edx
push eax
call fcn.00580720
mov edi, eax
mov eax, dword [esi + 0x150]
cdq
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x2c]
push 0
push 2
push ebx
push edx
mov dword [ebp - 0x18], eax
call fcn.00580720
cmp dword [ebp - 0x14], edx
jg 0x516cd1
jl 0x516cbc
cmp dword [ebp - 0x18], eax
jae 0x516cd1
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov edi, edx
jmp 0x516cff
mov ecx, dword [ebp - 0x2c]
push 0
push 9
push ebx
push ecx
call fcn.00581190
push 0
push 0xa
push edx
push eax
call fcn.00580720
cmp dword [ebp - 0x14], edx
jg 0x516cff
jl 0x516cf6
cmp dword [ebp - 0x18], eax
jae 0x516cff
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp edi, 0x2ee0
jle 0x516d0e
mov edi, 0x2ee0
jmp 0x516d16
test edi, edi
jle 0x516dbb
mov eax, dword [esi + 0x808]
cmp eax, 0xffffffff
je 0x516db4
lea ecx, [esi + 0x1d8]
lea ebx, [esi + 0x5e0]
mov dword [esi + 0x3dc], 0
mov dword [ecx], 0
mov dword [ebx], 0
mov dword [esi + 0x1dc], eax
mov eax, dword [ecx]
inc eax
mov dword [ecx], eax
mov eax, dword [ebx]
cmp eax, 0x80
jae 0x516d6d
mov edx, dword [esi + 0x808]
mov dword [esi + eax*4 + 0x5e4], edx
mov eax, dword [ebx]
inc eax
mov dword [ebx], eax
mov eax, 0x10624dd3
imul edi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [ebp - 0x54], edx
lea eax, [edx + edx*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 3
sub edi, edx
lea edx, [ebp - 0x54]
push edx
push ebx
lea eax, [edi + edi*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [ebp - 0x50], eax
lea eax, [esi + 0x3dc]
push eax
push ecx
push 0
call sub.WSOCK32.dll_select
jmp 0x516dbb
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.00516f80
mov edi, eax
mov ecx, esi
test edi, edi
jne 0x516ddd
call fcn.00517560
mov ecx, esi
call fcn.005490d0
xor ebx, ebx
jmp 0x5167f9
call fcn.005173f0
mov eax, dword [esi + 0x38]
test eax, eax
je 0x516e07
lea ecx, [esi + 0x48]
call fcn.00507640
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x753c
jne 0x516e32
mov esi, dword [esi + 0xf8]
test esi, esi
mov eax, esi
jne 0x516f61
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x516f5e
mov eax, dword [esi + 0x14c]
mov ecx, dword [esi + 0x148]
mov edx, dword [0x67af60]
push eax
push ecx
lea eax, [ebp - 0x10c]
push edx
push eax
call fcn.0057f2ea
add esp, 0x10
lea ecx, [ebp - 0x10c]
push 1
push ecx
mov ecx, esi
call fcn.00547f50
xor ebx, ebx
cmp ebx, dword [esi + 0x130]
jge 0x516ee0
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4]
lea eax, [ebx + edx*4]
mov edx, dword [esi + 0x1d4]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
test eax, eax
lea edi, [edx + ecx*8]
je 0x516edd
mov eax, dword [edi + 0x70]
mov ecx, dword [eax]
cmp dword [ecx], 0
je 0x516edd
mov edx, dword [edi + 0x38]
mov eax, dword [edi + 0x3c]
or edx, eax
je 0x516edd
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.0050ace0
lea eax, [edi + 0x2d0]
push eax
mov eax, dword [edi + 0x70]
push 0x13ef
push 0x111
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x516e71
mov edx, dword [esi + 0x148]
mov eax, dword [esi + 0x14c]
mov ecx, dword [esi + 0x140]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x144]
cmp edx, ecx
mov dword [ebp - 0x18], edx
jne 0x516f09
mov edx, dword [ebp - 0x14]
cmp edx, eax
je 0x516f31
mov edx, ecx
or edx, eax
je 0x516f31
cmp dword [ebp - 0x14], eax
jl 0x516f5e
jg 0x516f1b
cmp dword [ebp - 0x18], ecx
jbe 0x516f5e
mov eax, 0x7570
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.005490d0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret