Function at 0x5c087c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1c8
mov eax, 0x6587f7
call fcn.00628e3d
mov ebx, ecx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d0], ebx
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push 0xf
pop edi
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], edi
mov byte [ebx + 0xc], al
mov dword [ebx + 0x24], eax
mov dword [ebp - 4], eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], edi
mov byte [ebx + 0x24], al
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x4c], eax
mov dword [ebx + 0x50], edi
mov byte [ebx + 0x3c], al
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x68], edi
mov byte [ebx + 0x54], al
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x7c], eax
mov dword [ebx + 0x80], edi
mov byte [ebx + 0x6c], al
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x98], edi
mov byte [ebx + 0x84], al
push eax
mov dword [ebx + 0xa0], eax
mov esi, 0x1e3
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xac], eax
mov dword [ebx + 0xb0], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc0], eax
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0xc8], eax
mov dword [ebx + 0xcc], eax
lea eax, [ebx + 0xd0]
push esi
push eax
mov byte [ebp - 4], 5
mov dword [ebx + 0xb4], 0x1010101
call fcn.005a4fcc
add esp, 0xc
xor eax, eax
mov dword [ebx + 0xe8], esi
mov byte [ebx + 0xec], al
mov dword [ebx + 0xf0], eax
mov dword [ebx + 0x100], eax
mov dword [ebx + 0x104], edi
mov byte [ebx + 0xf0], al
mov dword [ebx + 0x108], eax
mov dword [ebx + 0x118], eax
mov dword [ebx + 0x11c], edi
mov byte [ebx + 0x108], al
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edi
mov byte [ebx + 0x120], al
mov dword [ebx + 0x138], eax
mov word [ebx + 0x13c], ax
mov dword [ebx + 0x140], eax
mov dword [ebx + 0x144], eax
mov dword [ebx + 0x148], eax
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x150], eax
mov dword [ebx + 0x160], eax
mov dword [ebx + 0x164], edi
mov byte [ebx + 0x150], al
mov dword [ebx + 0x168], eax
mov dword [ebx + 0x178], eax
mov dword [ebx + 0x17c], edi
mov byte [ebx + 0x168], al
mov dword [ebx + 0x180], eax
mov dword [ebx + 0x190], eax
mov dword [ebx + 0x194], edi
mov byte [ebx + 0x180], al
mov dword [ebx + 0x198], eax
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1ac], edi
mov byte [ebx + 0x198], al
mov dword [ebx + 0x1b0], eax
mov dword [ebx + 0x1c0], eax
mov dword [ebx + 0x1c4], edi
mov byte [ebx + 0x1b0], al
mov dword [ebx + 0x1c8], eax
mov dword [ebx + 0x1d8], eax
mov dword [ebx + 0x1dc], edi
mov byte [ebx + 0x1c8], al
mov dword [ebx + 0x1e0], eax
mov dword [ebx + 0x1f0], eax
mov dword [ebx + 0x1f4], edi
mov byte [ebx + 0x1e0], al
mov dword [ebx + 0x1f8], eax
mov dword [ebx + 0x208], eax
mov dword [ebx + 0x20c], edi
mov byte [ebx + 0x1f8], al
mov word [ebx + 0x210], ax
mov dword [ebx + 0x214], eax
mov dword [ebx + 0x218], eax
mov dword [ebx + 0x228], eax
mov dword [ebx + 0x22c], edi
mov byte [ebx + 0x218], al
mov dword [ebx + 0x230], eax
mov dword [ebx + 0x240], eax
mov dword [ebx + 0x244], edi
mov byte [ebx + 0x230], al
mov word [ebx + 0x248], ax
mov dword [ebx + 0x24c], eax
mov dword [ebx + 0x25c], eax
mov dword [ebx + 0x260], edi
mov byte [ebx + 0x24c], al
mov dword [ebx + 0x264], eax
mov dword [ebx + 0x274], eax
mov dword [ebx + 0x278], edi
mov byte [ebx + 0x264], al
mov dword [ebx + 0x27c], eax
mov dword [ebx + 0x28c], eax
mov dword [ebx + 0x290], edi
mov byte [ebx + 0x27c], al
push eax
mov esi, 0x2710
mov byte [ebp - 4], 0x16
push esi
push 1
lea ecx, [ebx + 0x298]
call fcn.005b1e9b
push 0
mov byte [ebp - 4], 0x17
push esi
push 2
lea ecx, [ebx + 0x3f8]
call fcn.005b1e9b
xor esi, esi
mov byte [ebp - 4], 0x18
push esi
push esi
push 3
lea ecx, [ebx + 0x558]
call fcn.005b1e9b
push esi
push esi
push 4
lea ecx, [ebx + 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.005b1e9b
push esi
push esi
push esi
lea ecx, [ebx + 0x818]
mov byte [ebp - 4], 0x1a
call fcn.005b1e9b
lea eax, [ebx + 0x97c]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0x994], ecx
mov dword [ebx + 0x9a4], ecx
mov dword [ebx + 0x9a8], edi
mov byte [ebx + 0x994], cl
mov dword [ebx + 0x9ac], ecx
mov dword [ebx + 0x9bc], ecx
mov dword [ebx + 0x9c0], edi
mov byte [ebx + 0x9ac], cl
mov dword [ebx + 0x9c4], ecx
mov dword [ebx + 0x9d4], ecx
mov dword [ebx + 0x9d8], edi
mov byte [ebx + 0x9c4], cl
mov dword [ebx + 0x9dc], ecx
mov dword [ebx + 0x9ec], ecx
mov dword [ebx + 0x9f0], edi
mov byte [ebx + 0x9dc], cl
mov dword [ebx + 0x9f4], ecx
mov dword [ebx + 0xa04], ecx
mov dword [ebx + 0xa08], edi
mov byte [ebx + 0x9f4], cl
mov dword [ebx + 0xa0c], ecx
mov dword [ebx + 0xa1c], ecx
mov dword [ebx + 0xa20], edi
mov byte [ebx + 0xa0c], cl
mov dword [ebx + 0xa24], ecx
mov dword [ebx + 0xa34], ecx
mov dword [ebx + 0xa38], edi
mov byte [ebx + 0xa24], cl
mov dword [ebx + 0xa3c], ecx
mov dword [ebx + 0xa4c], ecx
mov dword [ebx + 0xa50], edi
mov byte [ebx + 0xa3c], cl
mov dword [ebx + 0xa54], ecx
mov dword [ebx + 0xa64], ecx
mov dword [ebx + 0xa68], edi
mov byte [ebx + 0xa54], cl
mov dword [ebx + 0xa6c], ecx
mov dword [ebx + 0xa7c], ecx
mov dword [ebx + 0xa80], edi
mov byte [ebx + 0xa6c], cl
lea eax, [ebx + 0xa84]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
lea eax, [ebx + 0xa9c]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0xab4], ecx
mov dword [ebx + 0xac4], ecx
mov dword [ebx + 0xac8], edi
mov byte [ebx + 0xab4], cl
mov dword [ebx + 0xacc], ecx
mov dword [ebx + 0xadc], ecx
mov dword [ebx + 0xae0], edi
mov byte [ebx + 0xacc], cl
mov dword [ebx + 0xae4], ecx
mov dword [ebx + 0xaf4], ecx
mov dword [ebx + 0xaf8], edi
mov byte [ebx + 0xae4], cl
mov dword [ebx + 0xafc], ecx
mov dword [ebx + 0xb0c], ecx
mov dword [ebx + 0xb10], edi
mov byte [ebx + 0xafc], cl
mov byte [ebx + 0xb14], cl
mov dword [ebx + 0xb18], ecx
mov dword [ebx + 0xb28], ecx
mov dword [ebx + 0xb2c], edi
mov byte [ebx + 0xb18], cl
mov dword [ebx + 0xb30], ecx
mov byte [ebx + 0xb34], cl
mov dword [ebx + 0xb38], ecx
mov dword [ebx + 0xb48], ecx
mov dword [ebx + 0xb4c], edi
mov byte [ebx + 0xb38], cl
mov dword [ebx + 0xb50], ecx
mov dword [ebx + 0xb54], ecx
mov dword [ebx + 0xb64], ecx
mov dword [ebx + 0xb68], edi
mov byte [ebx + 0xb54], cl
mov dword [ebx + 0xb6c], ecx
mov dword [ebx + 0xb7c], ecx
mov dword [ebx + 0xb80], edi
mov byte [ebx + 0xb6c], cl
lea ecx, [ebx + 0xb84]
mov byte [ebp - 4], 0x30
call fcn.005a78f6
xor eax, eax
mov dword [ebx + 0xba0], edi
mov dword [ebx + 0xb8c], eax
mov dword [ebx + 0xb9c], eax
mov byte [ebx + 0xb8c], al
mov dword [ebx + 0xba4], eax
mov dword [ebx + 0xbb4], eax
mov dword [ebx + 0xbb8], edi
mov byte [ebx + 0xba4], al
mov dword [ebx + 0xbbc], eax
mov dword [ebx + 0xbcc], eax
mov dword [ebx + 0xbd0], edi
mov byte [ebx + 0xbbc], al
mov dword [ebx + 0xbd4], eax
mov dword [ebx + 0xbe4], eax
mov dword [ebx + 0xbe8], edi
mov byte [ebx + 0xbd4], al
push 1
lea ecx, [ebx + 0xbf8]
mov byte [ebp - 4], 0x35
mov dword [ebx + 0xbec], eax
mov dword [ebx + 0xbf0], eax
call fcn.005a1635
xor eax, eax
mov dword [ebx + 0xca4], edi
mov dword [ebx + 0xc90], eax
mov dword [ebx + 0xca0], eax
mov byte [ebx + 0xc90], al
mov dword [ebx + 0xca8], eax
mov dword [ebx + 0xcac], eax
mov dword [ebx + 0xcbc], eax
mov dword [ebx + 0xcc0], edi
mov byte [ebx + 0xcac], al
mov dword [ebx + 0xcc4], eax
mov dword [ebx + 0xcd4], eax
mov dword [ebx + 0xcd8], edi
mov byte [ebx + 0xcc4], al
mov dword [ebx + 0xcdc], eax
mov dword [ebx + 0xcec], eax
mov dword [ebx + 0xcf0], edi
mov byte [ebx + 0xcdc], al
mov dword [ebx + 0xcf4], eax
mov dword [ebx + 0xd04], eax
mov dword [ebx + 0xd08], edi
mov byte [ebx + 0xcf4], al
mov dword [ebx + 0xd0c], eax
mov dword [ebx + 0xd1c], eax
mov dword [ebx + 0xd20], edi
mov byte [ebx + 0xd0c], al
mov dword [ebx + 0xd24], eax
mov dword [ebx + 0xd34], eax
mov dword [ebx + 0xd38], edi
mov byte [ebx + 0xd24], al
mov esi, 0x114
mov byte [ebx + 0x13e], al
push esi
push eax
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x3d
push eax
call fcn.0062c020
add esp, 0xc
mov dword [ebp - 0x1cc], esi
lea eax, [ebp - 0x1cc]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x1c8]
push 0
push dword [ebp - 0x1c0]
mov dword [ebx + 0x978], eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
mov edi, eax
push 0
push dword [ebp - 0x1c4]
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3e
push eax
call fcn.005a4fcc
mov esi, eax
push 0
push dword [ebp - 0x1c8]
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x3f
push eax
call fcn.005a4fcc
push 0x65cb80
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x40
push eax
call fcn.005a0e4e
add esp, 0x30
push esi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.005a16fc
push 0x65cb80
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005a0e4e
add esp, 0xc
push edi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x43
call fcn.005a16fc
lea eax, [ebp - 0x58]
lea esi, [ebx + 0x97c]
push eax
mov ecx, esi
call fcn.005a1f05
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x88]
call fcn.00449330
lea ecx, [ebp - 0xa0]
call fcn.00449330
lea ecx, [ebp - 0xb8]
call fcn.00449330
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b7b88
test al, al
je 0x5c101d
mov edi, 0x6666bc
push edi
call fcn.0062fa80
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00449070
call fcn.005b7788
push str.installId
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x44
push eax
call fcn.005bace0
push eax
mov esi, reloc.WS2_32.dll_accept
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b929a
add esp, 0x10
lea ecx, [ebx + 0xa84]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
push str.installId2
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x45
push eax
call fcn.005bace0
push eax
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b929a
add esp, 0x10
lea ecx, [ebx + 0xa9c]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b1262
mov ecx, eax
call fcn.005b1236
call fcn.005c2d6d
mov eax, ebx
call fcn.00628dec
ret