Function at 0x5c01c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1c8
mov eax, 0x657ea6
call fcn.0062863d
mov ebx, ecx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d0], ebx
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push 0xf
pop edi
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], edi
mov byte [ebx + 0xc], al
mov dword [ebx + 0x24], eax
mov dword [ebp - 4], eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], edi
mov byte [ebx + 0x24], al
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x4c], eax
mov dword [ebx + 0x50], edi
mov byte [ebx + 0x3c], al
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x68], edi
mov byte [ebx + 0x54], al
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x7c], eax
mov dword [ebx + 0x80], edi
mov byte [ebx + 0x6c], al
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x98], edi
mov byte [ebx + 0x84], al
push eax
mov dword [ebx + 0xa0], eax
mov esi, 0x1ea
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xac], eax
mov dword [ebx + 0xb0], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc0], eax
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0xc8], eax
mov dword [ebx + 0xcc], eax
lea eax, [ebx + 0xd0]
push esi
push eax
mov byte [ebp - 4], 5
mov dword [ebx + 0xb4], 0x1010101
call fcn.005a4fcc
add esp, 0xc
xor eax, eax
mov dword [ebx + 0xe8], esi
mov byte [ebx + 0xec], al
mov dword [ebx + 0xf0], eax
mov dword [ebx + 0x100], eax
mov dword [ebx + 0x104], edi
mov byte [ebx + 0xf0], al
mov dword [ebx + 0x108], eax
mov dword [ebx + 0x118], eax
mov dword [ebx + 0x11c], edi
mov byte [ebx + 0x108], al
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edi
mov byte [ebx + 0x120], al
mov dword [ebx + 0x138], eax
mov word [ebx + 0x13c], ax
mov dword [ebx + 0x140], eax
mov dword [ebx + 0x144], eax
mov dword [ebx + 0x148], eax
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x150], eax
mov dword [ebx + 0x160], eax
mov dword [ebx + 0x164], edi
mov byte [ebx + 0x150], al
mov dword [ebx + 0x168], eax
mov dword [ebx + 0x178], eax
mov dword [ebx + 0x17c], edi
mov byte [ebx + 0x168], al
mov dword [ebx + 0x180], eax
mov dword [ebx + 0x190], eax
mov dword [ebx + 0x194], edi
mov byte [ebx + 0x180], al
mov dword [ebx + 0x198], eax
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1ac], edi
mov byte [ebx + 0x198], al
mov dword [ebx + 0x1b0], eax
mov dword [ebx + 0x1c0], eax
mov dword [ebx + 0x1c4], edi
mov byte [ebx + 0x1b0], al
mov dword [ebx + 0x1c8], eax
mov dword [ebx + 0x1d8], eax
mov dword [ebx + 0x1dc], edi
mov byte [ebx + 0x1c8], al
mov dword [ebx + 0x1e0], eax
mov dword [ebx + 0x1f0], eax
mov dword [ebx + 0x1f4], edi
mov byte [ebx + 0x1e0], al
mov dword [ebx + 0x1f8], eax
mov dword [ebx + 0x208], eax
mov dword [ebx + 0x20c], edi
mov byte [ebx + 0x1f8], al
mov word [ebx + 0x210], ax
mov dword [ebx + 0x214], eax
mov dword [ebx + 0x218], eax
mov dword [ebx + 0x228], eax
mov dword [ebx + 0x22c], edi
mov byte [ebx + 0x218], al
mov dword [ebx + 0x230], eax
mov dword [ebx + 0x240], eax
mov dword [ebx + 0x244], edi
mov byte [ebx + 0x230], al
mov word [ebx + 0x248], ax
mov dword [ebx + 0x24c], eax
mov dword [ebx + 0x25c], eax
mov dword [ebx + 0x260], edi
mov byte [ebx + 0x24c], al
mov dword [ebx + 0x264], eax
mov dword [ebx + 0x274], eax
mov dword [ebx + 0x278], edi
mov byte [ebx + 0x264], al
mov dword [ebx + 0x27c], eax
mov dword [ebx + 0x28c], eax
mov dword [ebx + 0x290], edi
mov byte [ebx + 0x27c], al
push eax
mov esi, 0x2710
mov byte [ebp - 4], 0x16
push esi
push 1
lea ecx, [ebx + 0x298]
call fcn.005b17e9
push 0
mov byte [ebp - 4], 0x17
push esi
push 2
lea ecx, [ebx + 0x3f8]
call fcn.005b17e9
xor esi, esi
mov byte [ebp - 4], 0x18
push esi
push esi
push 3
lea ecx, [ebx + 0x558]
call fcn.005b17e9
push esi
push esi
push 4
lea ecx, [ebx + 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.005b17e9
push esi
push esi
push esi
lea ecx, [ebx + 0x818]
mov byte [ebp - 4], 0x1a
call fcn.005b17e9
lea eax, [ebx + 0x97c]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0x994], ecx
mov dword [ebx + 0x9a4], ecx
mov dword [ebx + 0x9a8], edi
mov byte [ebx + 0x994], cl
mov dword [ebx + 0x9ac], ecx
mov dword [ebx + 0x9bc], ecx
mov dword [ebx + 0x9c0], edi
mov byte [ebx + 0x9ac], cl
mov dword [ebx + 0x9c4], ecx
mov dword [ebx + 0x9d4], ecx
mov dword [ebx + 0x9d8], edi
mov byte [ebx + 0x9c4], cl
mov dword [ebx + 0x9dc], ecx
mov dword [ebx + 0x9ec], ecx
mov dword [ebx + 0x9f0], edi
mov byte [ebx + 0x9dc], cl
mov dword [ebx + 0x9f4], ecx
mov dword [ebx + 0xa04], ecx
mov dword [ebx + 0xa08], edi
mov byte [ebx + 0x9f4], cl
mov dword [ebx + 0xa0c], ecx
mov dword [ebx + 0xa1c], ecx
mov dword [ebx + 0xa20], edi
mov byte [ebx + 0xa0c], cl
mov dword [ebx + 0xa24], ecx
mov dword [ebx + 0xa34], ecx
mov dword [ebx + 0xa38], edi
mov byte [ebx + 0xa24], cl
mov dword [ebx + 0xa3c], ecx
mov dword [ebx + 0xa4c], ecx
mov dword [ebx + 0xa50], edi
mov byte [ebx + 0xa3c], cl
mov dword [ebx + 0xa54], ecx
mov dword [ebx + 0xa64], ecx
mov dword [ebx + 0xa68], edi
mov byte [ebx + 0xa54], cl
mov dword [ebx + 0xa6c], ecx
mov dword [ebx + 0xa7c], ecx
mov dword [ebx + 0xa80], edi
mov byte [ebx + 0xa6c], cl
lea eax, [ebx + 0xa84]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
lea eax, [ebx + 0xa9c]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0xab4], ecx
mov dword [ebx + 0xac4], ecx
mov dword [ebx + 0xac8], edi
mov byte [ebx + 0xab4], cl
mov dword [ebx + 0xacc], ecx
mov dword [ebx + 0xadc], ecx
mov dword [ebx + 0xae0], edi
mov byte [ebx + 0xacc], cl
mov dword [ebx + 0xae4], ecx
mov dword [ebx + 0xaf4], ecx
mov dword [ebx + 0xaf8], edi
mov byte [ebx + 0xae4], cl
mov dword [ebx + 0xafc], ecx
mov dword [ebx + 0xb0c], ecx
mov dword [ebx + 0xb10], edi
mov byte [ebx + 0xafc], cl
mov byte [ebx + 0xb14], cl
mov dword [ebx + 0xb18], ecx
mov dword [ebx + 0xb28], ecx
mov dword [ebx + 0xb2c], edi
mov byte [ebx + 0xb18], cl
mov dword [ebx + 0xb30], ecx
mov byte [ebx + 0xb34], cl
mov dword [ebx + 0xb38], ecx
mov dword [ebx + 0xb48], ecx
mov dword [ebx + 0xb4c], edi
mov byte [ebx + 0xb38], cl
mov dword [ebx + 0xb50], ecx
mov dword [ebx + 0xb54], ecx
mov dword [ebx + 0xb64], ecx
mov dword [ebx + 0xb68], edi
mov byte [ebx + 0xb54], cl
mov dword [ebx + 0xb6c], ecx
mov dword [ebx + 0xb7c], ecx
mov dword [ebx + 0xb80], edi
mov byte [ebx + 0xb6c], cl
lea ecx, [ebx + 0xb84]
mov byte [ebp - 4], 0x30
call fcn.005a78f6
xor eax, eax
mov dword [ebx + 0xba0], edi
mov dword [ebx + 0xb8c], eax
mov dword [ebx + 0xb9c], eax
mov byte [ebx + 0xb8c], al
mov dword [ebx + 0xba4], eax
mov dword [ebx + 0xbb4], eax
mov dword [ebx + 0xbb8], edi
mov byte [ebx + 0xba4], al
mov dword [ebx + 0xbbc], eax
mov dword [ebx + 0xbcc], eax
mov dword [ebx + 0xbd0], edi
mov byte [ebx + 0xbbc], al
mov dword [ebx + 0xbd4], eax
mov dword [ebx + 0xbe4], eax
mov dword [ebx + 0xbe8], edi
mov byte [ebx + 0xbd4], al
push 1
lea ecx, [ebx + 0xbf8]
mov byte [ebp - 4], 0x35
mov dword [ebx + 0xbec], eax
mov dword [ebx + 0xbf0], eax
call fcn.005a1635
xor eax, eax
mov dword [ebx + 0xca4], edi
mov dword [ebx + 0xc90], eax
mov dword [ebx + 0xca0], eax
mov byte [ebx + 0xc90], al
mov dword [ebx + 0xca8], eax
mov dword [ebx + 0xcac], eax
mov dword [ebx + 0xcbc], eax
mov dword [ebx + 0xcc0], edi
mov byte [ebx + 0xcac], al
mov dword [ebx + 0xcc4], eax
mov dword [ebx + 0xcd4], eax
mov dword [ebx + 0xcd8], edi
mov byte [ebx + 0xcc4], al
mov dword [ebx + 0xcdc], eax
mov dword [ebx + 0xcec], eax
mov dword [ebx + 0xcf0], edi
mov byte [ebx + 0xcdc], al
mov dword [ebx + 0xcf4], eax
mov dword [ebx + 0xd04], eax
mov dword [ebx + 0xd08], edi
mov byte [ebx + 0xcf4], al
mov dword [ebx + 0xd0c], eax
mov dword [ebx + 0xd1c], eax
mov dword [ebx + 0xd20], edi
mov byte [ebx + 0xd0c], al
mov dword [ebx + 0xd24], eax
mov dword [ebx + 0xd34], eax
mov dword [ebx + 0xd38], edi
mov byte [ebx + 0xd24], al
mov esi, 0x114
mov byte [ebx + 0x13e], al
push esi
push eax
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x3d
push eax
call fcn.0062b820
add esp, 0xc
mov dword [ebp - 0x1cc], esi
lea eax, [ebp - 0x1cc]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x1c8]
push 0
push dword [ebp - 0x1c0]
mov dword [ebx + 0x978], eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
mov edi, eax
push 0
push dword [ebp - 0x1c4]
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3e
push eax
call fcn.005a4fcc
mov esi, eax
push 0
push dword [ebp - 0x1c8]
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x3f
push eax
call fcn.005a4fcc
push 0x65cb80
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x40
push eax
call fcn.005a0e4e
add esp, 0x30
push esi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.005a16fc
push 0x65cb80
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005a0e4e
add esp, 0xc
push edi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x43
call fcn.005a16fc
lea eax, [ebp - 0x58]
lea esi, [ebx + 0x97c]
push eax
mov ecx, esi
call fcn.005a1f05
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x88]
call fcn.00449330
lea ecx, [ebp - 0xa0]
call fcn.00449330
lea ecx, [ebp - 0xb8]
call fcn.00449330
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b74c8
test al, al
je 0x5c0961
mov edi, 0x66684c
push edi
call fcn.0062f280
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00449070
call fcn.005b70c8
push str.installId
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x44
push eax
call fcn.005ba620
push eax
mov esi, reloc.WS2_32.dll_accept
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b8bda
add esp, 0x10
lea ecx, [ebx + 0xa84]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
push str.installId2
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x45
push eax
call fcn.005ba620
push eax
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b8bda
add esp, 0x10
lea ecx, [ebx + 0xa9c]
push eax
call fcn.005a1f05
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
call fcn.00449330
call fcn.005b0c2a
mov ecx, eax
call fcn.005b0bfe
call fcn.005c26b1
mov eax, ebx
call fcn.006285ec
ret