Function at 0x5c00f3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1c8
mov eax, 0x657de9
call fcn.0062856d
mov ebx, ecx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d0], ebx
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push 0xf
pop edi
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], edi
mov byte [ebx + 0xc], al
mov dword [ebx + 0x24], eax
mov dword [ebp - 4], eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], edi
mov byte [ebx + 0x24], al
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x4c], eax
mov dword [ebx + 0x50], edi
mov byte [ebx + 0x3c], al
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x68], edi
mov byte [ebx + 0x54], al
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x7c], eax
mov dword [ebx + 0x80], edi
mov byte [ebx + 0x6c], al
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x98], edi
mov byte [ebx + 0x84], al
push eax
mov dword [ebx + 0xa0], eax
mov esi, 0x1e9
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xac], eax
mov dword [ebx + 0xb0], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc0], eax
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0xc8], eax
mov dword [ebx + 0xcc], eax
lea eax, [ebx + 0xd0]
push esi
push eax
mov byte [ebp - 4], 5
mov dword [ebx + 0xb4], 0x1010101
call fcn.005a4fcc
add esp, 0xc
xor eax, eax
mov dword [ebx + 0xe8], esi
mov byte [ebx + 0xec], al
mov dword [ebx + 0xf0], eax
mov dword [ebx + 0x100], eax
mov dword [ebx + 0x104], edi
mov byte [ebx + 0xf0], al
mov dword [ebx + 0x108], eax
mov dword [ebx + 0x118], eax
mov dword [ebx + 0x11c], edi
mov byte [ebx + 0x108], al
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edi
mov byte [ebx + 0x120], al
mov dword [ebx + 0x138], eax
mov word [ebx + 0x13c], ax
mov dword [ebx + 0x140], eax
mov dword [ebx + 0x144], eax
mov dword [ebx + 0x148], eax
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x150], eax
mov dword [ebx + 0x160], eax
mov dword [ebx + 0x164], edi
mov byte [ebx + 0x150], al
mov dword [ebx + 0x168], eax
mov dword [ebx + 0x178], eax
mov dword [ebx + 0x17c], edi
mov byte [ebx + 0x168], al
mov dword [ebx + 0x180], eax
mov dword [ebx + 0x190], eax
mov dword [ebx + 0x194], edi
mov byte [ebx + 0x180], al
mov dword [ebx + 0x198], eax
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1ac], edi
mov byte [ebx + 0x198], al
mov dword [ebx + 0x1b0], eax
mov dword [ebx + 0x1c0], eax
mov dword [ebx + 0x1c4], edi
mov byte [ebx + 0x1b0], al
mov dword [ebx + 0x1c8], eax
mov dword [ebx + 0x1d8], eax
mov dword [ebx + 0x1dc], edi
mov byte [ebx + 0x1c8], al
mov dword [ebx + 0x1e0], eax
mov dword [ebx + 0x1f0], eax
mov dword [ebx + 0x1f4], edi
mov byte [ebx + 0x1e0], al
mov dword [ebx + 0x1f8], eax
mov dword [ebx + 0x208], eax
mov dword [ebx + 0x20c], edi
mov byte [ebx + 0x1f8], al
mov word [ebx + 0x210], ax
mov dword [ebx + 0x214], eax
mov dword [ebx + 0x218], eax
mov dword [ebx + 0x228], eax
mov dword [ebx + 0x22c], edi
mov byte [ebx + 0x218], al
mov dword [ebx + 0x230], eax
mov dword [ebx + 0x240], eax
mov dword [ebx + 0x244], edi
mov byte [ebx + 0x230], al
mov word [ebx + 0x248], ax
mov dword [ebx + 0x24c], eax
mov dword [ebx + 0x25c], eax
mov dword [ebx + 0x260], edi
mov byte [ebx + 0x24c], al
mov dword [ebx + 0x264], eax
mov dword [ebx + 0x274], eax
mov dword [ebx + 0x278], edi
mov byte [ebx + 0x264], al
mov dword [ebx + 0x27c], eax
mov dword [ebx + 0x28c], eax
mov dword [ebx + 0x290], edi
mov byte [ebx + 0x27c], al
push eax
mov esi, 0x2710
mov byte [ebp - 4], 0x16
push esi
push 1
lea ecx, [ebx + 0x298]
call fcn.005b170f
push 0
mov byte [ebp - 4], 0x17
push esi
push 2
lea ecx, [ebx + 0x3f8]
call fcn.005b170f
xor esi, esi
mov byte [ebp - 4], 0x18
push esi
push esi
push 3
lea ecx, [ebx + 0x558]
call fcn.005b170f
push esi
push esi
push 4
lea ecx, [ebx + 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.005b170f
push esi
push esi
push esi
lea ecx, [ebx + 0x818]
mov byte [ebp - 4], 0x1a
call fcn.005b170f
lea eax, [ebx + 0x97c]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0x994], ecx
mov dword [ebx + 0x9a4], ecx
mov dword [ebx + 0x9a8], edi
mov byte [ebx + 0x994], cl
mov dword [ebx + 0x9ac], ecx
mov dword [ebx + 0x9bc], ecx
mov dword [ebx + 0x9c0], edi
mov byte [ebx + 0x9ac], cl
mov dword [ebx + 0x9c4], ecx
mov dword [ebx + 0x9d4], ecx
mov dword [ebx + 0x9d8], edi
mov byte [ebx + 0x9c4], cl
mov dword [ebx + 0x9dc], ecx
mov dword [ebx + 0x9ec], ecx
mov dword [ebx + 0x9f0], edi
mov byte [ebx + 0x9dc], cl
mov dword [ebx + 0x9f4], ecx
mov dword [ebx + 0xa04], ecx
mov dword [ebx + 0xa08], edi
mov byte [ebx + 0x9f4], cl
mov dword [ebx + 0xa0c], ecx
mov dword [ebx + 0xa1c], ecx
mov dword [ebx + 0xa20], edi
mov byte [ebx + 0xa0c], cl
mov dword [ebx + 0xa24], ecx
mov dword [ebx + 0xa34], ecx
mov dword [ebx + 0xa38], edi
mov byte [ebx + 0xa24], cl
mov dword [ebx + 0xa3c], ecx
mov dword [ebx + 0xa4c], ecx
mov dword [ebx + 0xa50], edi
mov byte [ebx + 0xa3c], cl
mov dword [ebx + 0xa54], ecx
mov dword [ebx + 0xa64], ecx
mov dword [ebx + 0xa68], edi
mov byte [ebx + 0xa54], cl
mov dword [ebx + 0xa6c], ecx
mov dword [ebx + 0xa7c], ecx
mov dword [ebx + 0xa80], edi
mov byte [ebx + 0xa6c], cl
lea eax, [ebx + 0xa84]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
lea eax, [ebx + 0xa9c]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0xab4], ecx
mov dword [ebx + 0xac4], ecx
mov dword [ebx + 0xac8], edi
mov byte [ebx + 0xab4], cl
mov dword [ebx + 0xacc], ecx
mov dword [ebx + 0xadc], ecx
mov dword [ebx + 0xae0], edi
mov byte [ebx + 0xacc], cl
mov dword [ebx + 0xae4], ecx
mov dword [ebx + 0xaf4], ecx
mov dword [ebx + 0xaf8], edi
mov byte [ebx + 0xae4], cl
mov dword [ebx + 0xafc], ecx
mov dword [ebx + 0xb0c], ecx
mov dword [ebx + 0xb10], edi
mov byte [ebx + 0xafc], cl
mov byte [ebx + 0xb14], cl
mov dword [ebx + 0xb18], ecx
mov dword [ebx + 0xb28], ecx
mov dword [ebx + 0xb2c], edi
mov byte [ebx + 0xb18], cl
mov dword [ebx + 0xb30], ecx
mov byte [ebx + 0xb34], cl
mov dword [ebx + 0xb38], ecx
mov dword [ebx + 0xb48], ecx
mov dword [ebx + 0xb4c], edi
mov byte [ebx + 0xb38], cl
mov dword [ebx + 0xb50], ecx
mov dword [ebx + 0xb54], ecx
mov dword [ebx + 0xb64], ecx
mov dword [ebx + 0xb68], edi
mov byte [ebx + 0xb54], cl
mov dword [ebx + 0xb6c], ecx
mov dword [ebx + 0xb7c], ecx
mov dword [ebx + 0xb80], edi
mov byte [ebx + 0xb6c], cl
lea ecx, [ebx + 0xb84]
mov byte [ebp - 4], 0x30
call fcn.005a78f6
xor eax, eax
mov dword [ebx + 0xba0], edi
mov dword [ebx + 0xb8c], eax
mov dword [ebx + 0xb9c], eax
mov byte [ebx + 0xb8c], al
mov dword [ebx + 0xba4], eax
mov dword [ebx + 0xbb4], eax
mov dword [ebx + 0xbb8], edi
mov byte [ebx + 0xba4], al
mov dword [ebx + 0xbbc], eax
mov dword [ebx + 0xbcc], eax
mov dword [ebx + 0xbd0], edi
mov byte [ebx + 0xbbc], al
mov dword [ebx + 0xbd4], eax
mov dword [ebx + 0xbe4], eax
mov dword [ebx + 0xbe8], edi
mov byte [ebx + 0xbd4], al
push 1
lea ecx, [ebx + 0xbf8]
mov byte [ebp - 4], 0x35
mov dword [ebx + 0xbec], eax
mov dword [ebx + 0xbf0], eax
call fcn.005a1635
xor eax, eax
mov dword [ebx + 0xca4], edi
mov dword [ebx + 0xc90], eax
mov dword [ebx + 0xca0], eax
mov byte [ebx + 0xc90], al
mov dword [ebx + 0xca8], eax
mov dword [ebx + 0xcac], eax
mov dword [ebx + 0xcbc], eax
mov dword [ebx + 0xcc0], edi
mov byte [ebx + 0xcac], al
mov dword [ebx + 0xcc4], eax
mov dword [ebx + 0xcd4], eax
mov dword [ebx + 0xcd8], edi
mov byte [ebx + 0xcc4], al
mov dword [ebx + 0xcdc], eax
mov dword [ebx + 0xcec], eax
mov dword [ebx + 0xcf0], edi
mov byte [ebx + 0xcdc], al
mov dword [ebx + 0xcf4], eax
mov dword [ebx + 0xd04], eax
mov dword [ebx + 0xd08], edi
mov byte [ebx + 0xcf4], al
mov dword [ebx + 0xd0c], eax
mov dword [ebx + 0xd1c], eax
mov dword [ebx + 0xd20], edi
mov byte [ebx + 0xd0c], al
mov dword [ebx + 0xd24], eax
mov dword [ebx + 0xd34], eax
mov dword [ebx + 0xd38], edi
mov byte [ebx + 0xd24], al
mov esi, 0x114
mov byte [ebx + 0x13e], al
push esi
push eax
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x3d
push eax
call fcn.0062b760
add esp, 0xc
mov dword [ebp - 0x1cc], esi
lea eax, [ebp - 0x1cc]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x1c8]
push 0
push dword [ebp - 0x1c0]
mov dword [ebx + 0x978], eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
mov edi, eax
push 0
push dword [ebp - 0x1c4]
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3e
push eax
call fcn.005a4fcc
mov esi, eax
push 0
push dword [ebp - 0x1c8]
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x3f
push eax
call fcn.005a4fcc
push 0x65cb80
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x40
push eax
call fcn.005a0e4e
add esp, 0x30
push esi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.005a16fc
push 0x65cb80
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005a0e4e
add esp, 0xc
push edi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x43
call fcn.005a16fc
lea eax, [ebp - 0x58]
lea esi, [ebx + 0x97c]
push eax
mov ecx, esi
call fcn.005a1f05
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x88]
call fcn.00449330
lea ecx, [ebp - 0xa0]
call fcn.00449330
lea ecx, [ebp - 0xb8]
call fcn.00449330
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b73fa
test al, al
je 0x5c0894
mov edi, 0x666804
push edi
call fcn.0062f1c0
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00449070
call fcn.005b6ffa
push str.installId
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x44
push eax
call fcn.005ba553
push eax
mov esi, reloc.WS2_32.dll_accept
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b8b0c
add esp, 0x10
lea ecx, [ebx + 0xa84]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
push str.installId2
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x45
push eax
call fcn.005ba553
push eax
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b8b0c
add esp, 0x10
lea ecx, [ebx + 0xa9c]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b0b50
mov ecx, eax
call fcn.005b0b24
call fcn.005c25e4
mov eax, ebx
call fcn.0062851c
ret