Function at 0x506420
Capabilities:
Check os version
Get socket status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5acdb0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x100
push ebx
push esi
push edi
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x10], esp
mov esi, ecx
xor ebx, ebx
push eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x48], ebx
call fcn.0056dcfc
lea ecx, [ebp - 0x44]
push ecx
call fcn.0056dcfc
mov eax, dword [esi + 0xac]
add esp, 8
cmp eax, ebx
jne 0x506482
cmp dword [esi + 0xbc], ebx
je 0x506492
cmp dword [esi + 0x10c], ebx
je 0x50649b
cmp dword [esi + 0x110], ebx
je 0x50649b
mov dword [ebp - 0x20], 1
jmp 0x50649e
mov dword [ebp - 0x20], ebx
mov ecx, esi
call fcn.005380f0
mov ecx, esi
call fcn.00538810
mov ecx, esi
call fcn.00537910
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov eax, dword [esi + 0x38]
mov ecx, esi
cmp eax, ebx
je 0x506525
call fcn.005070b0
lea ecx, [esi + 0x48]
call fcn.004f73c0
mov edx, dword [esi + 0x140]
mov ecx, dword [esi + 0x144]
lea eax, [esi + 0x20]
mov dword [esi + 0x30], ebx
push eax
push 0x1389
mov dword [eax], edx
mov edx, dword [esi + 0x148]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x14c]
mov dword [esi + 0x28], edx
mov edx, dword [esi + 0x10]
mov dword [esi + 0x2c], ecx
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.005375d0
test al, al
mov byte [ebp - 0x24], al
je 0x50654f
lea ecx, [ebp - 0x68]
push ecx
call fcn.0056dcfc
mov edx, dword [esi + 0x148]
mov eax, dword [esi + 0x14c]
add esp, 4
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x4c]
lea edx, [esi + 0x5e0]
push ecx
lea eax, [esi + 0x3dc]
push edx
lea ecx, [esi + 0x1d8]
push eax
push ecx
push ebx
call sub.WSOCK32.dll_select
mov edi, eax
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x50659c
mov ecx, esi
call fcn.005070b0
lea ecx, [esi + 0x48]
call fcn.004f73c0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x148]
mov ecx, dword [esi + 0x14c]
or eax, ecx
jne 0x5065e0
lea edx, [ebp - 0x44]
push edx
call fcn.0056dcfc
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x8c]
sub eax, edx
add esp, 4
cmp eax, 0x12c
jle 0x5065e0
mov eax, 0x7532
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x506642
cmp edi, ebx
je 0x506642
xor edi, edi
cmp edi, dword [esi + 0x130]
jge 0x506677
lea eax, [edi + edi*2]
lea ecx, [eax + eax*4]
lea eax, [edi + ecx*4]
mov ecx, dword [esi + 0x1d4]
lea edx, [eax + eax*4]
lea eax, [edi + edx*2]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*8]
cmp dword [ecx + 0x54], ebx
je 0x50663f
cmp dword [esi + 0x38], ebx
je 0x50663a
lea ecx, [esi + 0x48]
call fcn.004f73c0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.005031a0
inc edi
jmp 0x5065eb
xor edi, edi
cmp edi, dword [esi + 0x130]
jge 0x506677
lea eax, [edi + edi*2]
lea edx, [eax + eax*4]
lea eax, [edi + edx*4]
mov edx, dword [esi + 0x1d4]
lea eax, [eax + eax*4]
lea eax, [edi + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
cmp eax, ebx
lea ecx, [edx + ecx*8]
je 0x506674
call fcn.00502ab0
inc edi
jmp 0x506644
mov eax, dword [ebp - 0x24]
mov ecx, esi
push eax
push ebx
call fcn.005379e0
lea ecx, [ebp - 0x80]
push ecx
call fcn.0056dcfc
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x44]
sub eax, ecx
mov ecx, dword [ebp - 0x7c]
and ecx, 0xffff
add esp, 4
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x40]
shl edx, 3
and eax, 0xffff
sub edx, eax
add edx, ecx
cmp edx, 0xfa
jl 0x50673d
lea edx, [ebp - 0x44]
push edx
call fcn.0056dcfc
add esp, 4
xor ebx, ebx
cmp ebx, dword [esi + 0x130]
jge 0x50673d
lea eax, [ebx + ebx*2]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
lea ecx, [eax + eax*4]
lea eax, [ebx + ecx*2]
lea edx, [eax + eax*2]
mov eax, dword [esi + 0x1d4]
lea edi, [eax + edx*8]
mov eax, dword [eax + edx*8 + 0x54]
test eax, eax
je 0x50673a
mov ecx, dword [edi + 0x70]
mov edx, dword [ecx]
cmp dword [edx], 0
je 0x50673a
mov eax, dword [edi + 0x38]
mov ecx, dword [edi + 0x3c]
or eax, ecx
je 0x50673a
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.004fa9e0
mov ecx, dword [edi + 0x70]
lea eax, [edi + 0x2d0]
push eax
push 0x13ef
mov edx, dword [ecx]
push 0x111
mov eax, dword [edx]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x5066ce
mov eax, dword [esi + 0x38]
test eax, eax
je 0x506769
mov ecx, esi
call fcn.005070b0
lea ecx, [esi + 0x48]
call fcn.004f73c0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x5067fe
mov eax, dword [esi + 0x144]
test eax, eax
jg 0x506796
jl 0x50678a
mov eax, dword [esi + 0x140]
test eax, eax
ja 0x506796
mov ecx, dword [esi + 0x1d4]
cmp dword [ecx + 0x5c], 6
jne 0x5067fe
mov eax, dword [esi + 0x10c]
test eax, eax
je 0x5067c3
mov eax, dword [esi + 0x110]
test eax, eax
je 0x5067c3
mov edx, dword [esi + 0x114]
push 0
push edx
push 0x1407
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x5067e5
mov ecx, esi
call fcn.005070b0
lea ecx, [esi + 0x48]
call fcn.004f73c0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x804]
mov dword [ebp - 0x20], 0
mov dword [esi + 0x12c], eax
mov dword [esi + 0x1d0], eax
mov eax, dword [esi + 0xc]
mov cl, byte [eax + 0x2c0]
test cl, cl
je 0x506862
mov al, byte [0x663774]
test al, al
jne 0x506862
mov eax, dword [esi + 0x144]
test eax, eax
jl 0x506862
jg 0x50682a
mov eax, dword [esi + 0x140]
test eax, eax
jbe 0x506862
push str.Stop_downloading__wait_while_the_Start_btn_will_be_pressed_n
mov ecx, esi
call fcn.004f8310
mov ecx, esi
call fcn.005070b0
lea ecx, [esi + 0x48]
call fcn.004f73c0
mov dword [esi + 0x38], 1
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp - 0x24]
test al, al
je 0x506a7b
mov ecx, dword [esi + 0x14c]
mov eax, dword [esi + 0x148]
test ecx, ecx
jl 0x506a7b
jg 0x50688e
cmp eax, 0x400
jbe 0x506a7b
mov ecx, dword [0x663310]
mov ebx, dword [0x663314]
lea edx, [ebp - 0x74]
mov dword [ebp - 0x2c], ecx
push edx
call fcn.0056dcfc
mov eax, dword [esi + 0x148]
mov edi, dword [ebp - 0x34]
mov ecx, dword [esi + 0x14c]
mov edx, dword [ebp - 0x30]
add esp, 4
sub eax, edi
sbb ecx, edx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ecx
js 0x506a7b
jg 0x5068d5
test eax, eax
jbe 0x506a7b
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
sub eax, edx
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x70]
and ecx, 0xffff
lea eax, [eax + eax*4]
and edx, 0xffff
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
sub eax, ecx
add eax, edx
mov dword [ebp - 0x1c], eax
jne 0x50690b
mov dword [ebp - 0x1c], 1
fild qword [ebp - 0x5c]
fmul dword [0x5bdd40]
fidiv dword [ebp - 0x1c]
call fcn.0056cb34
mov edi, edx
mov ecx, eax
cmp edi, ebx
jl 0x506a7b
jg 0x506933
cmp ecx, dword [ebp - 0x2c]
jbe 0x506a7b
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
sub ecx, edx
cdq
sbb edi, ebx
push edx
push eax
push edi
push ecx
call fcn.0056ee00
mov ecx, dword [ebp - 0x2c]
push ebx
push ecx
push edx
push eax
call fcn.0056e3a0
mov edi, eax
mov eax, dword [esi + 0x150]
cdq
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x2c]
push 0
push 2
push ebx
push edx
mov dword [ebp - 0x18], eax
call fcn.0056e3a0
cmp dword [ebp - 0x14], edx
jg 0x506991
jl 0x50697c
cmp dword [ebp - 0x18], eax
jae 0x506991
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov edi, edx
jmp 0x5069bf
mov ecx, dword [ebp - 0x2c]
push 0
push 9
push ebx
push ecx
call fcn.0056ee00
push 0
push 0xa
push edx
push eax
call fcn.0056e3a0
cmp dword [ebp - 0x14], edx
jg 0x5069bf
jl 0x5069b6
cmp dword [ebp - 0x18], eax
jae 0x5069bf
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov edi, eax
cmp edi, 0x2ee0
jle 0x5069ce
mov edi, 0x2ee0
jmp 0x5069d6
test edi, edi
jle 0x506a7b
mov eax, dword [esi + 0x808]
cmp eax, 0xffffffff
je 0x506a74
lea ecx, [esi + 0x1d8]
lea ebx, [esi + 0x5e0]
mov dword [esi + 0x3dc], 0
mov dword [ecx], 0
mov dword [ebx], 0
mov dword [esi + 0x1dc], eax
mov eax, dword [ecx]
inc eax
mov dword [ecx], eax
mov eax, dword [ebx]
cmp eax, 0x80
jae 0x506a2d
mov edx, dword [esi + 0x808]
mov dword [esi + eax*4 + 0x5e4], edx
mov eax, dword [ebx]
inc eax
mov dword [ebx], eax
mov eax, 0x10624dd3
imul edi
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [ebp - 0x54], edx
lea eax, [edx + edx*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 3
sub edi, edx
lea edx, [ebp - 0x54]
push edx
push ebx
lea eax, [edi + edi*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [ebp - 0x50], eax
lea eax, [esi + 0x3dc]
push eax
push ecx
push 0
call sub.WSOCK32.dll_select
jmp 0x506a7b
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.00506c40
mov edi, eax
mov ecx, esi
test edi, edi
jne 0x506a9d
call fcn.00507220
mov ecx, esi
call fcn.00538840
xor ebx, ebx
jmp 0x5064b9
call fcn.005070b0
mov eax, dword [esi + 0x38]
test eax, eax
je 0x506ac7
lea ecx, [esi + 0x48]
call fcn.004f73c0
mov eax, 0x7540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x753c
jne 0x506af2
mov esi, dword [esi + 0xf8]
test esi, esi
mov eax, esi
jne 0x506c21
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0xffffffff
je 0x506c1e
mov eax, dword [esi + 0x14c]
mov ecx, dword [esi + 0x148]
mov edx, dword [0x664558]
push eax
push ecx
lea eax, [ebp - 0x10c]
push edx
push eax
call fcn.0056d05a
add esp, 0x10
lea ecx, [ebp - 0x10c]
push 1
push ecx
mov ecx, esi
call fcn.005376c0
xor ebx, ebx
cmp ebx, dword [esi + 0x130]
jge 0x506ba0
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4]
lea eax, [ebx + edx*4]
mov edx, dword [esi + 0x1d4]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*2]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*8 + 0x54]
test eax, eax
lea edi, [edx + ecx*8]
je 0x506b9d
mov eax, dword [edi + 0x70]
mov ecx, dword [eax]
cmp dword [ecx], 0
je 0x506b9d
mov edx, dword [edi + 0x38]
mov eax, dword [edi + 0x3c]
or edx, eax
je 0x506b9d
lea eax, [edi + 0x2d0]
mov ecx, edi
push eax
call fcn.004fa9e0
lea eax, [edi + 0x2d0]
push eax
mov eax, dword [edi + 0x70]
push 0x13ef
push 0x111
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
inc ebx
jmp 0x506b31
mov edx, dword [esi + 0x148]
mov eax, dword [esi + 0x14c]
mov ecx, dword [esi + 0x140]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 0x144]
cmp edx, ecx
mov dword [ebp - 0x18], edx
jne 0x506bc9
mov edx, dword [ebp - 0x14]
cmp edx, eax
je 0x506bf1
mov edx, ecx
or edx, eax
je 0x506bf1
cmp dword [ebp - 0x14], eax
jl 0x506c1e
jg 0x506bdb
cmp dword [ebp - 0x18], ecx
jbe 0x506c1e
mov eax, 0x7570
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.00538840
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret