Function at 0x5bfd85
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1c8
mov eax, 0x657a73
call fcn.0062826d
mov ebx, ecx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d0], ebx
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push 0xf
pop edi
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], edi
mov byte [ebx + 0xc], al
mov dword [ebx + 0x24], eax
mov dword [ebp - 4], eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], edi
mov byte [ebx + 0x24], al
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x4c], eax
mov dword [ebx + 0x50], edi
mov byte [ebx + 0x3c], al
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x68], edi
mov byte [ebx + 0x54], al
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x7c], eax
mov dword [ebx + 0x80], edi
mov byte [ebx + 0x6c], al
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x98], edi
mov byte [ebx + 0x84], al
push eax
mov dword [ebx + 0xa0], eax
mov esi, 0x1de
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xac], eax
mov dword [ebx + 0xb0], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc0], eax
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0xc8], eax
mov dword [ebx + 0xcc], eax
lea eax, [ebx + 0xd0]
push esi
push eax
mov byte [ebp - 4], 5
mov dword [ebx + 0xb4], 0x1010101
call fcn.005a4fcc
add esp, 0xc
xor eax, eax
mov dword [ebx + 0xe8], esi
mov byte [ebx + 0xec], al
mov dword [ebx + 0xf0], eax
mov dword [ebx + 0x100], eax
mov dword [ebx + 0x104], edi
mov byte [ebx + 0xf0], al
mov dword [ebx + 0x108], eax
mov dword [ebx + 0x118], eax
mov dword [ebx + 0x11c], edi
mov byte [ebx + 0x108], al
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edi
mov byte [ebx + 0x120], al
mov dword [ebx + 0x138], eax
mov word [ebx + 0x13c], ax
mov dword [ebx + 0x140], eax
mov dword [ebx + 0x144], eax
mov dword [ebx + 0x148], eax
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x150], eax
mov dword [ebx + 0x160], eax
mov dword [ebx + 0x164], edi
mov byte [ebx + 0x150], al
mov dword [ebx + 0x168], eax
mov dword [ebx + 0x178], eax
mov dword [ebx + 0x17c], edi
mov byte [ebx + 0x168], al
mov dword [ebx + 0x180], eax
mov dword [ebx + 0x190], eax
mov dword [ebx + 0x194], edi
mov byte [ebx + 0x180], al
mov dword [ebx + 0x198], eax
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1ac], edi
mov byte [ebx + 0x198], al
mov dword [ebx + 0x1b0], eax
mov dword [ebx + 0x1c0], eax
mov dword [ebx + 0x1c4], edi
mov byte [ebx + 0x1b0], al
mov dword [ebx + 0x1c8], eax
mov dword [ebx + 0x1d8], eax
mov dword [ebx + 0x1dc], edi
mov byte [ebx + 0x1c8], al
mov dword [ebx + 0x1e0], eax
mov dword [ebx + 0x1f0], eax
mov dword [ebx + 0x1f4], edi
mov byte [ebx + 0x1e0], al
mov dword [ebx + 0x1f8], eax
mov dword [ebx + 0x208], eax
mov dword [ebx + 0x20c], edi
mov byte [ebx + 0x1f8], al
mov word [ebx + 0x210], ax
mov dword [ebx + 0x214], eax
mov dword [ebx + 0x218], eax
mov dword [ebx + 0x228], eax
mov dword [ebx + 0x22c], edi
mov byte [ebx + 0x218], al
mov dword [ebx + 0x230], eax
mov dword [ebx + 0x240], eax
mov dword [ebx + 0x244], edi
mov byte [ebx + 0x230], al
mov word [ebx + 0x248], ax
mov dword [ebx + 0x24c], eax
mov dword [ebx + 0x25c], eax
mov dword [ebx + 0x260], edi
mov byte [ebx + 0x24c], al
mov dword [ebx + 0x264], eax
mov dword [ebx + 0x274], eax
mov dword [ebx + 0x278], edi
mov byte [ebx + 0x264], al
mov dword [ebx + 0x27c], eax
mov dword [ebx + 0x28c], eax
mov dword [ebx + 0x290], edi
mov byte [ebx + 0x27c], al
push eax
mov esi, 0x2710
mov byte [ebp - 4], 0x16
push esi
push 1
lea ecx, [ebx + 0x298]
call fcn.005b1519
push 0
mov byte [ebp - 4], 0x17
push esi
push 2
lea ecx, [ebx + 0x3f8]
call fcn.005b1519
xor esi, esi
mov byte [ebp - 4], 0x18
push esi
push esi
push 3
lea ecx, [ebx + 0x558]
call fcn.005b1519
push esi
push esi
push 4
lea ecx, [ebx + 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.005b1519
push esi
push esi
push esi
lea ecx, [ebx + 0x818]
mov byte [ebp - 4], 0x1a
call fcn.005b1519
lea eax, [ebx + 0x97c]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0x994], ecx
mov dword [ebx + 0x9a4], ecx
mov dword [ebx + 0x9a8], edi
mov byte [ebx + 0x994], cl
mov dword [ebx + 0x9ac], ecx
mov dword [ebx + 0x9bc], ecx
mov dword [ebx + 0x9c0], edi
mov byte [ebx + 0x9ac], cl
mov dword [ebx + 0x9c4], ecx
mov dword [ebx + 0x9d4], ecx
mov dword [ebx + 0x9d8], edi
mov byte [ebx + 0x9c4], cl
mov dword [ebx + 0x9dc], ecx
mov dword [ebx + 0x9ec], ecx
mov dword [ebx + 0x9f0], edi
mov byte [ebx + 0x9dc], cl
mov dword [ebx + 0x9f4], ecx
mov dword [ebx + 0xa04], ecx
mov dword [ebx + 0xa08], edi
mov byte [ebx + 0x9f4], cl
mov dword [ebx + 0xa0c], ecx
mov dword [ebx + 0xa1c], ecx
mov dword [ebx + 0xa20], edi
mov byte [ebx + 0xa0c], cl
mov dword [ebx + 0xa24], ecx
mov dword [ebx + 0xa34], ecx
mov dword [ebx + 0xa38], edi
mov byte [ebx + 0xa24], cl
mov dword [ebx + 0xa3c], ecx
mov dword [ebx + 0xa4c], ecx
mov dword [ebx + 0xa50], edi
mov byte [ebx + 0xa3c], cl
mov dword [ebx + 0xa54], ecx
mov dword [ebx + 0xa64], ecx
mov dword [ebx + 0xa68], edi
mov byte [ebx + 0xa54], cl
mov dword [ebx + 0xa6c], ecx
mov dword [ebx + 0xa7c], ecx
mov dword [ebx + 0xa80], edi
mov byte [ebx + 0xa6c], cl
lea eax, [ebx + 0xa84]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
lea eax, [ebx + 0xa9c]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0xab4], ecx
mov dword [ebx + 0xac4], ecx
mov dword [ebx + 0xac8], edi
mov byte [ebx + 0xab4], cl
mov dword [ebx + 0xacc], ecx
mov dword [ebx + 0xadc], ecx
mov dword [ebx + 0xae0], edi
mov byte [ebx + 0xacc], cl
mov dword [ebx + 0xae4], ecx
mov dword [ebx + 0xaf4], ecx
mov dword [ebx + 0xaf8], edi
mov byte [ebx + 0xae4], cl
mov dword [ebx + 0xafc], ecx
mov dword [ebx + 0xb0c], ecx
mov dword [ebx + 0xb10], edi
mov byte [ebx + 0xafc], cl
mov byte [ebx + 0xb14], cl
mov dword [ebx + 0xb18], ecx
mov dword [ebx + 0xb28], ecx
mov dword [ebx + 0xb2c], edi
mov byte [ebx + 0xb18], cl
mov dword [ebx + 0xb30], ecx
mov byte [ebx + 0xb34], cl
mov dword [ebx + 0xb38], ecx
mov dword [ebx + 0xb48], ecx
mov dword [ebx + 0xb4c], edi
mov byte [ebx + 0xb38], cl
mov dword [ebx + 0xb50], ecx
mov dword [ebx + 0xb54], ecx
mov dword [ebx + 0xb64], ecx
mov dword [ebx + 0xb68], edi
mov byte [ebx + 0xb54], cl
mov dword [ebx + 0xb6c], ecx
mov dword [ebx + 0xb7c], ecx
mov dword [ebx + 0xb80], edi
mov byte [ebx + 0xb6c], cl
lea ecx, [ebx + 0xb84]
mov byte [ebp - 4], 0x30
call fcn.005a78f6
xor eax, eax
mov dword [ebx + 0xba0], edi
mov dword [ebx + 0xb8c], eax
mov dword [ebx + 0xb9c], eax
mov byte [ebx + 0xb8c], al
mov dword [ebx + 0xba4], eax
mov dword [ebx + 0xbb4], eax
mov dword [ebx + 0xbb8], edi
mov byte [ebx + 0xba4], al
mov dword [ebx + 0xbbc], eax
mov dword [ebx + 0xbcc], eax
mov dword [ebx + 0xbd0], edi
mov byte [ebx + 0xbbc], al
mov dword [ebx + 0xbd4], eax
mov dword [ebx + 0xbe4], eax
mov dword [ebx + 0xbe8], edi
mov byte [ebx + 0xbd4], al
push 1
lea ecx, [ebx + 0xbf8]
mov byte [ebp - 4], 0x35
mov dword [ebx + 0xbec], eax
mov dword [ebx + 0xbf0], eax
call fcn.005a1635
xor eax, eax
mov dword [ebx + 0xca4], edi
mov dword [ebx + 0xc90], eax
mov dword [ebx + 0xca0], eax
mov byte [ebx + 0xc90], al
mov dword [ebx + 0xca8], eax
mov dword [ebx + 0xcac], eax
mov dword [ebx + 0xcbc], eax
mov dword [ebx + 0xcc0], edi
mov byte [ebx + 0xcac], al
mov dword [ebx + 0xcc4], eax
mov dword [ebx + 0xcd4], eax
mov dword [ebx + 0xcd8], edi
mov byte [ebx + 0xcc4], al
mov dword [ebx + 0xcdc], eax
mov dword [ebx + 0xcec], eax
mov dword [ebx + 0xcf0], edi
mov byte [ebx + 0xcdc], al
mov dword [ebx + 0xcf4], eax
mov dword [ebx + 0xd04], eax
mov dword [ebx + 0xd08], edi
mov byte [ebx + 0xcf4], al
mov dword [ebx + 0xd0c], eax
mov dword [ebx + 0xd1c], eax
mov dword [ebx + 0xd20], edi
mov byte [ebx + 0xd0c], al
mov dword [ebx + 0xd24], eax
mov dword [ebx + 0xd34], eax
mov dword [ebx + 0xd38], edi
mov byte [ebx + 0xd24], al
mov esi, 0x114
mov byte [ebx + 0x13e], al
push esi
push eax
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x3d
push eax
call fcn.0062b450
add esp, 0xc
mov dword [ebp - 0x1cc], esi
lea eax, [ebp - 0x1cc]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x1c8]
push 0
push dword [ebp - 0x1c0]
mov dword [ebx + 0x978], eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
mov edi, eax
push 0
push dword [ebp - 0x1c4]
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3e
push eax
call fcn.005a4fcc
mov esi, eax
push 0
push dword [ebp - 0x1c8]
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x3f
push eax
call fcn.005a4fcc
push 0x65cb70
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x40
push eax
call fcn.005a0e4e
add esp, 0x30
push esi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.005a16fc
push 0x65cb70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005a0e4e
add esp, 0xc
push edi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x43
call fcn.005a16fc
lea eax, [ebp - 0x58]
lea esi, [ebx + 0x97c]
push eax
mov ecx, esi
call fcn.005a1f05
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x88]
call fcn.00449330
lea ecx, [ebp - 0xa0]
call fcn.00449330
lea ecx, [ebp - 0xb8]
call fcn.00449330
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b71a3
test al, al
je 0x5c0526
mov edi, 0x6663b4
push edi
call fcn.0062eeb0
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00449070
call fcn.005b6e08
push str.installId
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x44
push eax
call fcn.005ba1ec
push eax
mov esi, reloc.WS2_32.dll_accept
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b88b5
add esp, 0x10
lea ecx, [ebx + 0xa84]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
push str.installId2
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x45
push eax
call fcn.005ba1ec
push eax
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b88b5
add esp, 0x10
lea ecx, [ebx + 0xa9c]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b0916
mov ecx, eax
call fcn.005b08ea
call fcn.005c225a
mov eax, ebx
call fcn.0062821c
ret