Function at 0x505ab0
Capabilities:
Get system information on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x639c25
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xda8
mov eax, dword [0x6a6040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd6c], ecx
mov dword [ebp - 0xd40], 0
mov dword [ebp - 4], 0
mov eax, dword [0x6af2bc]
nop
test al, 0x20
jne 0x505d3c
cmp byte [0x6ac39e], 0
jne 0x505d3c
mov byte [ebp - 0xd39], 1
mov esi, dword [0x6ac16c]
push 0xffffffffffffffff
push dword [esi]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x80
jne 0x505b4a
mov dword [esi + 8], 0
jmp 0x505b4e
test eax, eax
jne 0x505b57
inc dword [esi + 0xc]
inc dword [esi + 8]
inc dword [esi + 4]
mov ecx, dword [0x6a6e6c]
mov edi, dword [0x6a6e68]
mov esi, dword [0x6af2b8]
mov dword [ebp - 0xd44], ecx
nop
mov eax, 5
mov ecx, 0x6af2b8
xchg dword [ecx], eax
mov eax, dword [0x6af2bc]
mov dword [0x6a6e68], 0xaaff
mov dword [0x6a6e6c], 0xffffffff
nop
test al, 0x20
jne 0x505d52
cmp byte [0x6ac39e], 0
jne 0x505d52
lea eax, [ebx + 8]
mov dword [ebp - 0xd4c], 0
push eax
lea eax, [ebp - 0xd4c]
push str.Starting_task__S
push eax
call fcn.005abfb0
add esp, 0xc
cmp dword [ebx + 0xc], 0
je 0x505c5c
mov ecx, dword [ebx + 0x14]
test ecx, ecx
je 0x505c0b
lea eax, [ebp - 0xd48]
mov dword [ebp - 0xd48], 0
push eax
add ecx, 0x37
push 0x6ac9d0
call fcn.004aae40
mov eax, dword [ebp - 0xd48]
test eax, eax
je 0x505c0b
add eax, 0xc
jmp 0x505c10
mov eax, 0x6aefbc
mov eax, dword [eax]
test eax, eax
je 0x505c1b
lock inc dword [eax]
jmp 0x505c1d
xor eax, eax
mov dword [ebp - 0xd70], eax
lea eax, [ebp - 0xd70]
push eax
lea eax, [ebx + 8]
push eax
lea eax, [ebp - 0xd4c]
push str._S__from_crontab_id_S
push eax
call fcn.005abfb0
mov ecx, dword [ebp - 0xd70]
add esp, 0x10
test ecx, ecx
je 0x505c5c
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
jne 0x505c5c
push ecx
call fcn.005a47b0
lea eax, [ebp - 0xd4c]
push eax
push str._S..._n
push 0x6a6e70
call fcn.0042abc0
mov ecx, dword [ebp - 0xd4c]
add esp, 0xc
test ecx, ecx
je 0x505c8f
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
jne 0x505c8f
push ecx
call fcn.005a47b0
mov ecx, dword [ebp - 0xd44]
mov dword [0x6a6e68], edi
mov eax, 0x6af2b8
mov dword [0x6a6e6c], ecx
xchg dword [eax], esi
mov ecx, dword [0x6ac16c]
call fcn.005e0810
mov edi, dword [0x6ac16c]
mov dword [ebp - 0xd84], edi
mov dword [ebp - 0xd80], 0
mov byte [ebp - 0xd7c], 0
mov byte [ebp - 4], 5
mov esi, dword [ebx + 8]
mov edx, dword [0x6ac9e8]
cmp esi, edx
je 0x506bc8
test esi, esi
je 0x505d0c
test edx, edx
je 0x505d0c
mov eax, dword [esi + 4]
cmp eax, dword [edx + 4]
jne 0x505d0c
mov edx, dword [edx + 0xc]
mov ecx, dword [esi + 0xc]
push eax
call fcn.005a4c60
add esp, 4
test al, al
jne 0x506bc8
push 0x6ac9e0
lea ecx, [ebx + 8]
call fcn.005ac950
test al, al
je 0x505edc
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0xffffffffffffffff
push dword [edi]
call eax
cmp eax, 0x80
jne 0x505d6b
mov dword [edi + 8], 0
jmp 0x505d6f
mov edi, dword [ebp - 0xd64]
xor al, al
mov ecx, dword [ebp - 0xd64]
mov esi, dword [ebp - 0xd64]
jmp 0x505d5e
mov ecx, dword [ebp - 0xd44]
mov al, byte [ebp - 0xd39]
test al, al
je 0x505cb3
jmp 0x505c95
test eax, eax
jne 0x505d82
inc dword [edi + 0xc]
inc dword [edi + 8]
inc dword [edi + 4]
mov dword [ebp - 0xd80], 1
cmp dword [0x6ac684], 0
je 0x505e4d
mov ecx, dword [0x6ac9e0]
test ecx, ecx
je 0x505d9e
mov ecx, dword [ecx + 4]
jmp 0x505da0
xor ecx, ecx
mov eax, dword [ebx + 8]
test eax, eax
je 0x505db7
cmp ecx, dword [eax + 4]
jge 0x505db7
test ecx, ecx
js 0x505db7
mov eax, dword [eax + 0xc]
add eax, ecx
jmp 0x505dbc
mov eax, 0x651f40
mov cl, byte [eax]
mov al, cl
sub al, 0x31
cmp al, 3
ja 0x505e3d
movsx esi, cl
push ecx
mov ecx, esp
lea eax, [esi*4 + 0x6acc90]
push eax
call fcn.005a5bd0
push ecx
lea eax, [esi*4 + 0x6acc80]
mov ecx, esp
push eax
call fcn.005a5bd0
call fcn.0055b080
lea ecx, [ebp - 0xd84]
mov edi, eax
call fcn.0041d900
push 0
push 4
lea ecx, [ebp - 0xd60]
call fcn.0042af70
lea ecx, [ebp - 0xd60]
call fcn.0042b180
test al, al
je 0x505e2d
push edi
push esi
push str.Batch_set_time_limit__c_for__d_user_is_performed_by_cron_tab_n
push 0x6a6e70
call fcn.0042abc0
add esp, 0x10
lea ecx, [ebp - 0xd60]
call fcn.0042b120
jmp 0x5068c7
lea ecx, [ebp - 0xd84]
call fcn.0041d900
jmp 0x5068c7
lea ecx, [ebp - 0xd84]
call fcn.0041d900
push 0
push 1
lea ecx, [ebp - 0xd60]
call fcn.0042af70
cmp byte [ebp - 0xd50], 0
je 0x506d6c
mov edx, dword [0x6af2bc]
nop
mov ecx, dword [ebp - 0xd54]
mov eax, 1
shl eax, cl
test edx, eax
jne 0x505ea7
cmp byte [0x6ac39e], 0
jne 0x505ea7
push str.Error___config_object_is_null_n
push 0x6a6e70
call fcn.0042abc0
add esp, 8
cmp byte [ebp - 0xd50], 0
je 0x506d6c
mov eax, dword [ebp - 0xd60]
mov ecx, 0x6af2b8
mov dword [0x6a6e68], eax
mov eax, dword [ebp - 0xd5c]
mov dword [0x6a6e6c], eax
mov eax, dword [ebp - 0xd58]
xchg dword [ecx], eax
jmp 0x506d61
mov edx, dword [0x6ac9ec]
cmp esi, edx
je 0x506b35
test esi, esi
je 0x505f11
test edx, edx
je 0x505f11
mov eax, dword [esi + 4]
cmp eax, dword [edx + 4]
jne 0x505f11
mov edx, dword [edx + 0xc]
mov ecx, dword [esi + 0xc]
push eax
call fcn.005a4c60
add esp, 4
test al, al
jne 0x506b35
push 0x6ac9f0
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
je 0x506007
push 0
push 4
lea ecx, [ebp - 0xd60]
call fcn.0042af70
lea ecx, [ebp - 0xd60]
call fcn.0042b180
test al, al
je 0x505f56
push str.Initiating_the_system_reboot..._n
push 0x6a6e70
call fcn.0042abc0
add esp, 8
lea ecx, [ebp - 0xd60]
call fcn.0042b120
mov edx, 1
mov ecx, str.Initiating_the_system_reboot_from_RusRoute_firewall_cron_tab
call fcn.004669f0
test eax, eax
jne 0x506d6c
push 0x10
call fcn.00606edf
mov esi, eax
add esp, 4
mov dword [esi + 4], 1
mov dword [esi + 8], 0
mov dword [esi], vtable.XTOOGetLastErrorImp.0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, esi
mov dword [esi + 0xc], eax
call fcn.005d11f0
push 0x20
push str.Initiating_the_system_reboot_is_failed.
mov ecx, esi
call fcn.005d02c0
push 0
push 1
lea ecx, [ebp - 0xd60]
call fcn.0042af70
lea ecx, [ebp - 0xd60]
call fcn.0042b180
test al, al
je 0x505ff0
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0xc]
call eax
push eax
push 0x651d94
push 0x6a6e70
call fcn.0042abc0
add esp, 0xc
lea ecx, [ebp - 0xd60]
call fcn.0042b120
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
jmp 0x506d6c
push 0x6ac9f4
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
je 0x5060fa
push 0
push 4
lea ecx, [ebp - 0xd60]
call fcn.0042af70
lea ecx, [ebp - 0xd60]
call fcn.0042b180
test al, al
je 0x50604c
push str.Initiating_the_system_shutdown..._n
push 0x6a6e70
call fcn.0042abc0
add esp, 8
lea ecx, [ebp - 0xd60]
call fcn.0042b120
xor edx, edx
mov ecx, str.Initiating_the_system_shutdown_from_RusRoute_firewall_cron_tab
call fcn.004669f0
test eax, eax
jne 0x506d6c
push 0x10
call fcn.00606edf
mov esi, eax
add esp, 4
mov dword [esi + 4], 1
mov dword [esi + 8], 0
mov dword [esi], vtable.XTOOGetLastErrorImp.0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, esi
mov dword [esi + 0xc], eax
call fcn.005d11f0
push 0x20
push str.Initiating_the_system_shutdown_is_failed.
mov ecx, esi
call fcn.005d02c0
push 0
push 1
lea ecx, [ebp - 0xd60]
call fcn.0042af70
lea ecx, [ebp - 0xd60]
call fcn.0042b180
test al, al
je 0x5060e3
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0xc]
call eax
push eax
push 0x651d94
push 0x6a6e70
call fcn.0042abc0
add esp, 0xc
lea ecx, [ebp - 0xd60]
call fcn.0042b120
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
jmp 0x506d6c
push 0x6ac9f8
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
je 0x506202
push 0
push 4
lea ecx, [ebp - 0xd60]
call fcn.0042af70
lea ecx, [ebp - 0xd60]
call fcn.0042b180
test al, al
je 0x50613f
push str.Cancelling_the_system_shutdown_reboot..._n
push 0x6a6e70
call fcn.0042abc0
add esp, 8
lea ecx, [ebp - 0xd60]
call fcn.0042b120
call fcn.00466920
mov esi, eax
test esi, esi
jne 0x5061de
push 0x10
call fcn.00606edf
mov edi, eax
add esp, 4
mov dword [edi + 4], 1
mov dword [edi + 8], esi
mov dword [edi], vtable.XTOOGetLastErrorImp.0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, edi
mov dword [edi + 0xc], eax
call fcn.005d11f0
push 0x20
push str.Cancellation_the_system_shutdown_reboot_is_failed.
mov ecx, edi
call fcn.005d02c0
push esi
push 1
lea ecx, [ebp - 0xd60]
call fcn.0042af70
lea ecx, [ebp - 0xd60]
call fcn.0042b180
test al, al
je 0x5061cc
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0xc]
call eax
push eax
push 0x651d94
push 0x6a6e70
call fcn.0042abc0
add esp, 0xc
lea ecx, [ebp - 0xd60]
call fcn.0042b120
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp dword [ebx + 0xc], 0
jne 0x506d6c
mov ecx, dword [ebp - 0xd6c]
neg esi
sbb esi, esi
add esi, 2
push esi
push 0x30
call fcn.004ff730
jmp 0x506d6c
push 0x6ac9e4
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
je 0x5068e2
lea ecx, [ebp - 0xd84]
call fcn.0041d970
cmp dword [0x6ac5c8], 0
mov byte [ebp - 0xd39], 0
jne 0x5068af
mov esi, dword [0x6ac680]
test esi, esi
je 0x5068af
mov esi, dword [esi + 0xc48040]
lea ecx, [ebp - 0xd44]
lea eax, [esi + 0x109]
push eax
call fcn.005a5bd0
push 0x2d
lea ecx, [ebp - 0xd44]
mov byte [ebp - 4], 0xc
call fcn.005b0390
test eax, eax
js 0x5068a0
push 0xffffffffffffffff
push 0x2d
inc eax
lea ecx, [ebp - 0xd44]
push eax
call fcn.005b0300
test eax, eax
jle 0x5062b4
push eax
lea eax, [ebp - 0xd70]
push eax
lea ecx, [ebp - 0xd44]
call fcn.005ac5a0
push eax
lea ecx, [ebp - 0xd44]
call fcn.005a5c80
lea ecx, [ebp - 0xd70]
call fcn.004250c0
mov dword [ebp - 0xd70], 0
call fcn.005faa00
push 4
lea ecx, [ebp - 0xd70]
push ecx
mov ecx, eax
call fcn.005fa710
mov dword [ebp - 0xd4c], 0
mov byte [ebp - 4], 0xd
mov eax, dword [esi + 0xfd]
or eax, dword [esi + 0x101]
je 0x506380
push 0
call fcn.0060cd03
add esp, 4
sub eax, dword [esi + 0xfd]
mov ecx, eax
sbb edx, dword [esi + 0x101]
call fcn.00627530
divsd xmm0, qword [0x66fd88]
sub esp, 8
lea eax, [ebp - 0xd20]
movsd qword [esp], xmm0
push str._.2lf
push eax
call fcn.0041b2a0
add esp, 0xc
lea eax, [ebp - 0xd20]
mov ecx, esp
push eax
call fcn.005a5400
lea ecx, [ebp - 0xd48]
call fcn.004eb0c0
add esp, 4
mov eax, dword [eax]
test eax, eax
je 0x50635b
mov eax, dword [eax + 0xc]
jmp 0x506360
mov eax, 0x651f68
push eax
lea eax, [ebp - 0xd4c]
push str.w_s
push eax
call fcn.005abfb0
add esp, 0xc
lea ecx, [ebp - 0xd48]
call fcn.004250c0
mov byte [ebp - 0x418], 0
lea ecx, [ebp - 0xd38]
mov byte [ebp - 4], 0xe
call fcn.00604f70
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x5063bc
lea ecx, [ebp - 0xdb4]
push ecx
call eax
jmp 0x5063c9
lea eax, [ebp - 0xdb4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [ebp - 0xdb4]
mov ecx, 0x66fc64
cmp ax, 9
jne 0x5063f1
cmp byte [ebp - 0xc1e], 1
mov eax, 0x66fc60
cmovne eax, ecx
mov ecx, str.amd64
jmp 0x50642b
cmp ax, 6
mov eax, 0x66fc60
jne 0x50640d
cmp byte [ebp - 0xc1e], 1
cmovne eax, ecx
mov ecx, str.ia64
jmp 0x50642b
cmp byte [ebp - 0xc1e], 1
mov edx, 0x20
mov esi, str.unkproc
cmovne eax, ecx
cmp edx, edx
mov ecx, str.i386
cmovne ecx, esi
push dword [ebp - 0xd2c]
push eax
push dword [ebp - 0xd30]
lea eax, [ebp - 0xc18]
push dword [ebp - 0xd34]
push ecx
push str._s__d._d__s__d
push eax
call fcn.0041b2a0
lea ecx, [ebp - 0xc18]
add esp, 0x1c
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x506460
sub ecx, edx
lea eax, [ecx + 1]
cmp eax, 0x400
jg 0x506497
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ebp + ecx - 0xc18]
mov byte [ebp + ecx - 0x418], al
inc ecx
test al, al
jne 0x506480
mov al, 1
jmp 0x506499
xor al, al
mov byte [ebp - 4], 0xd
test al, al
je 0x506503
push ecx
lea eax, [ebp - 0x418]
mov ecx, esp
push eax
call fcn.005a5400
lea ecx, [ebp - 0xd48]
call fcn.004eb0c0
add esp, 4
mov ecx, dword [eax]
test ecx, ecx
je 0x5064c9
mov ecx, dword [ecx + 0xc]
jmp 0x5064ce
mov ecx, 0x651f68
mov eax, dword [ebp - 0xd4c]
test eax, eax
je 0x5064dd
mov eax, dword [eax + 0xc]
jmp 0x5064e2
mov eax, 0x651f68
push ecx
push eax
lea eax, [ebp - 0xd4c]
push str._spl_s
push eax
call fcn.005abfb0
add esp, 0x10
lea ecx, [ebp - 0xd48]
call fcn.004250c0
cmp dword [0x6ac660], 0
mov byte [ebp - 0x418], 0
je 0x506585
push ecx
lea eax, [ebp - 0x418]
push eax
sub esp, 0xc
call fcn.0046e0d0
push ecx
lea eax, [ebp - 0x418]
mov ecx, esp
push eax
call fcn.005a5400
lea ecx, [ebp - 0xd48]
call fcn.004eb0c0
add esp, 4
mov ecx, dword [eax]
test ecx, ecx
je 0x50654b
mov ecx, dword [ecx + 0xc]
jmp 0x506550
mov ecx, 0x651f68
mov eax, dword [ebp - 0xd4c]
test eax, eax
je 0x50655f
mov eax, dword [eax + 0xc]
jmp 0x506564
mov eax, 0x651f68
push ecx
push eax
lea eax, [ebp - 0xd4c]
push str._sdrv_s
push eax
call fcn.005abfb0
add esp, 0x10
lea ecx, [ebp - 0xd48]
call fcn.004250c0
cmp byte [0x6ac246], 0
jne 0x5065cc
lea ecx, [ebp - 0xd48]
call fcn.00603ba0
mov dword [ebp - 0xd40], 1
mov eax, dword [eax]
test eax, eax
je 0x5065ae
mov eax, dword [eax + 0xc]
jmp 0x5065b3
mov eax, 0x651f68
push str._PassThrough
push eax
call fcn.00608430
add esp, 8
mov byte [ebp - 0xd39], 0
test eax, eax
je 0x5065d3
mov byte [ebp - 0xd39], 1
test byte [ebp - 0xd40], 1
je 0x5065e7
lea ecx, [ebp - 0xd48]
call fcn.004250c0
cmp byte [ebp - 0xd39], 0
je 0x506650
push ecx
mov ecx, esp
push str.true
call fcn.005a5400
lea ecx, [ebp - 0xd40]
call fcn.004eb0c0
add esp, 4
mov ecx, dword [eax]
test ecx, ecx
je 0x506616
mov ecx, dword [ecx + 0xc]
jmp 0x50661b
mov ecx, 0x651f68
mov eax, dword [ebp - 0xd4c]
test eax, eax
je 0x50662a
mov eax, dword [eax + 0xc]
jmp 0x50662f
mov eax, 0x651f68
push ecx
push eax
lea eax, [ebp - 0xd4c]
push str._sdisabled_s
push eax
call fcn.005abfb0
add esp, 0x10
lea ecx, [ebp - 0xd40]
call fcn.004250c0
mov eax, dword [ebp - 0xd70]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0xd4c]
test eax, eax
je 0x506671
mov edi, dword [eax + 0xc]
mov dword [ebp - 0xd40], edi
jmp 0x50667b
mov dword [ebp - 0xd40], 0x651f68
push ecx
mov esi, esp
call fcn.0053c920
push eax
mov ecx, esi
call fcn.005a5400
lea ecx, [ebp - 0xd64]
call fcn.004eb0c0
add esp, 4
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
test eax, eax
je 0x5066a8
mov edi, dword [eax + 0xc]
jmp 0x5066ad
mov edi, 0x651f68
push ecx
lea eax, [ebp - 0xd44]
mov ecx, esp
push eax
call fcn.005a5bd0
lea ecx, [ebp - 0xd88]
call fcn.004eb0c0
add esp, 4
mov byte [ebp - 4], 0x10
mov eax, dword [eax]
test eax, eax
je 0x5066d9
mov esi, dword [eax + 0xc]
jmp 0x5066de
mov esi, 0x651f68
push ecx
mov ecx, esp
push str.2.8.9
call fcn.005a5400
lea ecx, [ebp - 0xd8c]
call fcn.004eb0c0
add esp, 4
mov eax, dword [eax]
test eax, eax
je 0x506704
mov eax, dword [eax + 0xc]
jmp 0x506709
mov eax, 0x651f68
push dword [ebp - 0xd48]
push dword [ebp - 0xd40]
push edi
push esi
push eax
lea eax, [ebp - 0xd44]
push str._cgi_bin_updates.cgi_pRusRoutev_sk_sl_s_srnd_08X
push eax
call fcn.005abfb0
add esp, 0x1c
lea ecx, [ebp - 0xd8c]
call fcn.004250c0
lea ecx, [ebp - 0xd88]
call fcn.004250c0
lea ecx, [ebp - 0xd64]
call fcn.004250c0
mov eax, dword [ebp - 0xd6c]
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0xd48], 0
mov dword [eax + 0x4d03], ecx
lea ecx, [eax + 0x4bd]
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0xd68]
push eax
call fcn.005c0ab0
push 0
push 0x6acf44
lea eax, [ebp - 0xd78]
push eax
lea ecx, [ebp - 0xd68]
call fcn.005bc070
mov ecx, dword [ebp - 0xd74]
test ecx, ecx
je 0x5067cc
lea eax, [ebp - 0xd40]
mov dword [ebp - 0xd40], 0
push eax
add ecx, 0x37
push 0x6acf80
call fcn.004aae40
mov eax, dword [ebp - 0xd40]
test eax, eax
je 0x5067cc
add eax, 0xc
jmp 0x5067d1
mov eax, 0x6aefbc
push eax
lea ecx, [ebp - 0xd48]
call fcn.005a5c40
lea ecx, [ebp - 0xd78]
call fcn.00405d60
lea ecx, [ebp - 0xd68]
call fcn.00405d60
lea ecx, [ebp - 0xd84]
call fcn.0041d900
push ecx
mov ecx, esp
mov dword [ebp - 0xd74], esp
push 0x657ed8
call fcn.005a5400
push ecx
lea eax, [ebp - 0xd48]
mov dword [ebp - 0xd64], esp
mov ecx, esp
push eax
call fcn.005a5bd0
push ecx
lea eax, [ebp - 0xd44]
mov dword [ebp - 0xd88], esp
mov ecx, esp
push eax
call fcn.005a5bd0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x14
push str.maasoftware.ru
call fcn.005a5400
mov edx, 0xa000
mov byte [ebp - 4], 0x11
mov ecx, 0xc
call fcn.004b8f00
add esp, 0x10
mov dword [0x6ac5c8], eax
test eax, eax
lea ecx, [ebp - 0xd84]
setne byte [ebp - 0xd39]
call fcn.0041d970
lea ecx, [ebp - 0xd48]
call fcn.004250c0
mov ecx, dword [ebp - 0xd4c]
test ecx, ecx
je 0x5068a0
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
jne 0x5068a0
push ecx
call fcn.005a47b0
lea ecx, [ebp - 0xd44]
mov byte [ebp - 4], 5
call fcn.004250c0
lea ecx, [ebp - 0xd84]
call fcn.0041d900
cmp byte [ebp - 0xd39], 0
je 0x506d6c
push ecx
mov ecx, dword [ebp - 0xd6c]
mov eax, esp
push 0x22
mov dword [eax], 0
call fcn.004ffda0
jmp 0x506d6c
push 0x6ac9fc
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
jne 0x506908
push 0x6aca00
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
je 0x506d6c
lea ecx, [ebp - 0xd84]
call fcn.0041d970
push 0x6ac9fc
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
mov ecx, 0x6ac5c0
mov esi, 0x6ac5c4
cmove esi, ecx
lea ecx, [ebx + 8]
push 0x6ac9fc
mov dword [ebp - 0xd88], esi
call fcn.005a5d60
test al, al
mov eax, dword [ebp - 0xd6c]
je 0x506953
add eax, 0x4d07
jmp 0x506958
add eax, 0x4d0b
push 0x6ac9fc
lea ecx, [ebx + 8]
mov dword [ebp - 0xd40], eax
call fcn.005a5d60
movzx edi, al
xor edi, 1
cmp dword [esi], 0
jne 0x506b25
cmp dword [0x6ac680], 0
je 0x506b25
push 0x6ac9fc
lea ecx, [ebx + 8]
call fcn.005a5d60
test al, al
mov edx, str.blackweb.tar.gz
mov ecx, str.rkn.tar.gz
cmove ecx, edx
push ecx
lea ecx, [ebp - 0xd44]
call fcn.005a5400
lea eax, [ebp - 0xd44]
push eax
push str._downloads__S
push eax
call fcn.005abfb0
mov eax, dword [ebp - 0xd40]
xor esi, esi
mov ecx, dword [ebx + 0xc]
add esp, 0xc
mov dword [ebp - 0xd64], esi
mov dword [eax], ecx
mov ecx, dword [ebp - 0xd6c]
lea eax, [ebp - 0xd90]
push eax
mov byte [ebp - 4], 0x16
lea ecx, [ecx + 0x4bd]
call fcn.005c0ab0
push esi
push 0x6acf44
lea eax, [ebp - 0xd78]
push eax
lea ecx, [ebp - 0xd90]
call fcn.005bc070
mov ecx, dword [ebp - 0xd74]
test ecx, ecx
je 0x506a3e
lea eax, [ebp - 0xd40]
mov dword [ebp - 0xd40], esi
push eax
add ecx, 0x37
push 0x6acf80
call fcn.004aae40
mov eax, dword [ebp - 0xd40]
test eax, eax
je 0x506a3e
add eax, 0xc
jmp 0x506a43
mov eax, 0x6aefbc
mov ecx, dword [eax]
mov dword [ebp - 0xd40], 0
test ecx, ecx
je 0x506a64
lock inc dword [ecx]
mov esi, dword [eax]
mov dword [ebp - 0xd64], esi
mov dword [ebp - 0xd40], esi
lea ecx, [ebp - 0xd78]
call fcn.00405d60
lea ecx, [ebp - 0xd90]
call fcn.00405d60
lea ecx, [ebp - 0xd84]
call fcn.0041d900
push ecx
mov ecx, esp
mov dword [ebp - 0xd74], esp
push 0x657ed8
call fcn.005a5400
cmp dword [ebp - 0xd40], 0
push ecx
mov dword [ebp - 0xd8c], esp
mov eax, esp
je 0x506ab1
lock inc dword [esi]
mov dword [eax], esi
jmp 0x506ab7
mov dword [eax], 0
push ecx
lea eax, [ebp - 0xd44]
mov dword [ebp - 0xd40], esp
mov ecx, esp
push eax
call fcn.005a5bd0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x19
push str.rusroute.ru
call fcn.005a5400
mov edx, 0x5000000
mov byte [ebp - 4], 0x16
lea ecx, [edi + 0x31]
call fcn.004b8f00
mov ecx, dword [ebp - 0xd88]
add esp, 0x10
mov dword [ecx], eax
lea ecx, [ebp - 0xd84]
call fcn.0041d970
test esi, esi
je 0x506b1a
or eax, 0xffffffff
lock xadd dword [esi], eax
dec eax
jne 0x506b1a
push ecx
mov ecx, esi
call fcn.005a47b0
lea ecx, [ebp - 0xd44]
call fcn.004250c0
lea ecx, [ebp - 0xd84]
call fcn.0041d900
jmp 0x506d6c
push 0
push 4
lea ecx, [ebp - 0xd60]
call fcn.0042af70
cmp byte [ebp - 0xd50], 0
je 0x5068c7
mov edx, dword [0x6af2bc]
nop
mov ecx, dword [ebp - 0xd54]
mov eax, 1
shl eax, cl
test edx, eax
jne 0x506b84
cmp byte [0x6ac39e], 0
jne 0x506b84
push str.Insertion_of_user_balances_into_disk_config_file_performed_by_cron_tab_n
push 0x6a6e70
call fcn.0042abc0
add esp, 8
cmp byte [ebp - 0xd50], 0
je 0x5068c7
mov eax, dword [ebp - 0xd60]
mov ecx, 0x6af2b8
mov dword [0x6a6e68], eax
mov eax, dword [ebp - 0xd5c]
mov dword [0x6a6e6c], eax
mov eax, dword [ebp - 0xd58]
xchg dword [ecx], eax
mov byte [ebp - 4], 5
mov ecx, dword [0x6ac16c]
call fcn.005e0810
jmp 0x5068c7
mov eax, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0xffffffffffffffff
push dword [edi]
call eax
cmp eax, 0x80
jne 0x506be3
mov dword [edi + 8], 0
jmp 0x506be7
test eax, eax
jne 0x506bfd
inc dword [edi + 0xc]
mov esi, 1
inc dword [edi + 8]
inc dword [edi + 4]
mov dword [ebp - 0xd80], esi
jmp 0x506bff
xor esi, esi
cmp dword [0x6ac684], 0
je 0x506ccf
call fcn.0055ae20
mov dword [ebp - 0xd64], eax
test esi, esi
jg 0x506c24
cmp dword [0x6ac6c4], 0
jne 0x506c32
dec esi
mov ecx, edi
mov dword [ebp - 0xd80], esi
call fcn.005e0810
push 0
push 4
lea ecx, [ebp - 0xd60]
mov byte [ebp - 4], 5
call fcn.0042af70
cmp byte [ebp - 0xd50], 0
je 0x5068c7
mov edx, dword [0x6af2bc]
nop
mov ecx, dword [ebp - 0xd54]
mov eax, 1
shl eax, cl
test edx, eax
jne 0x506c8b
cmp byte [0x6ac39e], 0
jne 0x506c8b
push dword [ebp - 0xd64]
push str.Batch_set_for__d_user_balances_is_performed_by_cron_tab_n
push 0x6a6e70
call fcn.0042abc0
add esp, 0xc
cmp byte [ebp - 0xd50], 0
je 0x5068c7
mov eax, dword [ebp - 0xd60]
mov ecx, 0x6af2b8
mov dword [0x6a6e68], eax
mov eax, dword [ebp - 0xd5c]
mov dword [0x6a6e6c], eax
mov eax, dword [ebp - 0xd58]
xchg dword [ecx], eax
mov byte [ebp - 4], 5
mov ecx, dword [0x6ac16c]
call fcn.005e0810
jmp 0x5068c7
test esi, esi
jg 0x506cdc
cmp dword [0x6ac6c4], 0
jne 0x506cea
dec esi
mov ecx, edi
mov dword [ebp - 0xd80], esi
call fcn.005e0810
push 0
push 1
lea ecx, [ebp - 0xd60]
call fcn.0042af70
cmp byte [ebp - 0xd50], 0
je 0x506d6c
mov edx, dword [0x6af2bc]
nop
mov ecx, dword [ebp - 0xd54]
mov eax, 1
shl eax, cl
test edx, eax
jne 0x506d35
cmp byte [0x6ac39e], 0
jne 0x506d35
push str.Error___config_object_is_null_n
push 0x6a6e70
call fcn.0042abc0
add esp, 8
cmp byte [ebp - 0xd50], 0
je 0x506d6c
mov eax, dword [ebp - 0xd60]
mov ecx, 0x6af2b8
mov dword [0x6a6e68], eax
mov eax, dword [ebp - 0xd5c]
mov dword [0x6a6e6c], eax
mov eax, dword [ebp - 0xd58]
xchg dword [ecx], eax
mov ecx, dword [0x6ac16c]
call fcn.005e0810
lea ecx, [ebp - 0xd84]
call fcn.0041d9b0
mov ecx, dword [ebx + 8]
or edx, 0xffffffff
test ecx, ecx
je 0x506d93
mov eax, edx
lock xadd dword [ecx], eax
dec eax
jne 0x506d93
push ecx
call fcn.005a47b0
or edx, 0xffffffff
mov eax, dword [ebx + 0x14]
mov dword [ebx + 0x10], vtable.CMaaXmlNode.0
test eax, eax
je 0x506dbe
lock xadd dword [eax + 8], edx
dec edx
jne 0x506dbe
mov esi, dword [ebx + 0x14]
test esi, esi
je 0x506dbe
mov ecx, esi
call fcn.005baee0
mov ecx, esi
call fcn.005bae00
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00606a47
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10