Function at 0x5be5ed
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1c8
mov eax, 0x655ec8
call fcn.00626aed
mov ebx, ecx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d0], ebx
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push 0xf
pop edi
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], edi
mov byte [ebx + 0xc], al
mov dword [ebx + 0x24], eax
mov dword [ebp - 4], eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], edi
mov byte [ebx + 0x24], al
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x4c], eax
mov dword [ebx + 0x50], edi
mov byte [ebx + 0x3c], al
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x64], eax
mov dword [ebx + 0x68], edi
mov byte [ebx + 0x54], al
mov dword [ebx + 0x6c], eax
mov dword [ebx + 0x7c], eax
mov dword [ebx + 0x80], edi
mov byte [ebx + 0x6c], al
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x98], edi
mov byte [ebx + 0x84], al
push eax
mov dword [ebx + 0xa0], eax
mov esi, 0x1d9
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xac], eax
mov dword [ebx + 0xb0], eax
mov dword [ebx + 0xb8], eax
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc0], eax
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0xc8], eax
mov dword [ebx + 0xcc], eax
lea eax, [ebx + 0xd0]
push esi
push eax
mov byte [ebp - 4], 5
mov dword [ebx + 0xb4], 0x1010101
call fcn.005a405c
add esp, 0xc
xor eax, eax
mov dword [ebx + 0xe8], esi
mov byte [ebx + 0xec], al
mov dword [ebx + 0xf0], eax
mov dword [ebx + 0x100], eax
mov dword [ebx + 0x104], edi
mov byte [ebx + 0xf0], al
mov dword [ebx + 0x108], eax
mov dword [ebx + 0x118], eax
mov dword [ebx + 0x11c], edi
mov byte [ebx + 0x108], al
mov dword [ebx + 0x120], eax
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edi
mov byte [ebx + 0x120], al
mov dword [ebx + 0x138], eax
mov word [ebx + 0x13c], ax
mov dword [ebx + 0x140], eax
mov dword [ebx + 0x144], eax
mov dword [ebx + 0x148], eax
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x150], eax
mov dword [ebx + 0x160], eax
mov dword [ebx + 0x164], edi
mov byte [ebx + 0x150], al
mov dword [ebx + 0x168], eax
mov dword [ebx + 0x178], eax
mov dword [ebx + 0x17c], edi
mov byte [ebx + 0x168], al
mov dword [ebx + 0x180], eax
mov dword [ebx + 0x190], eax
mov dword [ebx + 0x194], edi
mov byte [ebx + 0x180], al
mov dword [ebx + 0x198], eax
mov dword [ebx + 0x1a8], eax
mov dword [ebx + 0x1ac], edi
mov byte [ebx + 0x198], al
mov dword [ebx + 0x1b0], eax
mov dword [ebx + 0x1c0], eax
mov dword [ebx + 0x1c4], edi
mov byte [ebx + 0x1b0], al
mov dword [ebx + 0x1c8], eax
mov dword [ebx + 0x1d8], eax
mov dword [ebx + 0x1dc], edi
mov byte [ebx + 0x1c8], al
mov dword [ebx + 0x1e0], eax
mov dword [ebx + 0x1f0], eax
mov dword [ebx + 0x1f4], edi
mov byte [ebx + 0x1e0], al
mov dword [ebx + 0x1f8], eax
mov dword [ebx + 0x208], eax
mov dword [ebx + 0x20c], edi
mov byte [ebx + 0x1f8], al
mov word [ebx + 0x210], ax
mov dword [ebx + 0x214], eax
mov dword [ebx + 0x218], eax
mov dword [ebx + 0x228], eax
mov dword [ebx + 0x22c], edi
mov byte [ebx + 0x218], al
mov dword [ebx + 0x230], eax
mov dword [ebx + 0x240], eax
mov dword [ebx + 0x244], edi
mov byte [ebx + 0x230], al
mov word [ebx + 0x248], ax
mov dword [ebx + 0x24c], eax
mov dword [ebx + 0x25c], eax
mov dword [ebx + 0x260], edi
mov byte [ebx + 0x24c], al
mov dword [ebx + 0x264], eax
mov dword [ebx + 0x274], eax
mov dword [ebx + 0x278], edi
mov byte [ebx + 0x264], al
push eax
mov esi, 0x2710
mov byte [ebp - 4], 0x15
push esi
push 1
lea ecx, [ebx + 0x280]
call fcn.005b0117
push 0
push esi
push 2
lea ecx, [ebx + 0x3e0]
mov byte [ebp - 4], 0x16
call fcn.005b0117
mov byte [ebp - 4], 0x17
xor esi, esi
lea ecx, [ebx + 0x540]
push esi
push esi
push 3
call fcn.005b0117
push esi
push esi
push 4
lea ecx, [ebx + 0x6a0]
mov byte [ebp - 4], 0x18
call fcn.005b0117
push esi
push esi
push esi
lea ecx, [ebx + 0x800]
mov byte [ebp - 4], 0x19
call fcn.005b0117
lea eax, [ebx + 0x964]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0x97c], ecx
mov dword [ebx + 0x98c], ecx
mov dword [ebx + 0x990], edi
mov byte [ebx + 0x97c], cl
mov dword [ebx + 0x994], ecx
mov dword [ebx + 0x9a4], ecx
mov dword [ebx + 0x9a8], edi
mov byte [ebx + 0x994], cl
mov dword [ebx + 0x9ac], ecx
mov dword [ebx + 0x9bc], ecx
mov dword [ebx + 0x9c0], edi
mov byte [ebx + 0x9ac], cl
mov dword [ebx + 0x9c4], ecx
mov dword [ebx + 0x9d4], ecx
mov dword [ebx + 0x9d8], edi
mov byte [ebx + 0x9c4], cl
mov dword [ebx + 0x9dc], ecx
mov dword [ebx + 0x9ec], ecx
mov dword [ebx + 0x9f0], edi
mov byte [ebx + 0x9dc], cl
mov dword [ebx + 0x9f4], ecx
mov dword [ebx + 0xa04], ecx
mov dword [ebx + 0xa08], edi
mov byte [ebx + 0x9f4], cl
mov dword [ebx + 0xa0c], ecx
mov dword [ebx + 0xa1c], ecx
mov dword [ebx + 0xa20], edi
mov byte [ebx + 0xa0c], cl
mov dword [ebx + 0xa24], ecx
mov dword [ebx + 0xa34], ecx
mov dword [ebx + 0xa38], edi
mov byte [ebx + 0xa24], cl
mov dword [ebx + 0xa3c], ecx
mov dword [ebx + 0xa4c], ecx
mov dword [ebx + 0xa50], edi
mov byte [ebx + 0xa3c], cl
mov dword [ebx + 0xa54], ecx
mov dword [ebx + 0xa64], ecx
mov dword [ebx + 0xa68], edi
mov byte [ebx + 0xa54], cl
lea eax, [ebx + 0xa6c]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
lea eax, [ebx + 0xa84]
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edi
mov byte [eax], cl
mov dword [ebx + 0xa9c], ecx
mov dword [ebx + 0xaac], ecx
mov dword [ebx + 0xab0], edi
mov byte [ebx + 0xa9c], cl
mov dword [ebx + 0xab4], ecx
mov dword [ebx + 0xac4], ecx
mov dword [ebx + 0xac8], edi
mov byte [ebx + 0xab4], cl
mov dword [ebx + 0xacc], ecx
mov dword [ebx + 0xadc], ecx
mov dword [ebx + 0xae0], edi
mov byte [ebx + 0xacc], cl
mov dword [ebx + 0xae4], ecx
mov dword [ebx + 0xaf4], ecx
mov dword [ebx + 0xaf8], edi
mov byte [ebx + 0xae4], cl
mov byte [ebx + 0xafc], cl
mov dword [ebx + 0xb00], ecx
mov dword [ebx + 0xb10], ecx
mov dword [ebx + 0xb14], edi
mov byte [ebx + 0xb00], cl
mov dword [ebx + 0xb18], ecx
mov byte [ebx + 0xb1c], cl
mov dword [ebx + 0xb20], ecx
mov dword [ebx + 0xb30], ecx
mov dword [ebx + 0xb34], edi
mov byte [ebx + 0xb20], cl
mov dword [ebx + 0xb38], ecx
mov dword [ebx + 0xb3c], ecx
mov dword [ebx + 0xb4c], ecx
mov dword [ebx + 0xb50], edi
mov byte [ebx + 0xb3c], cl
mov dword [ebx + 0xb54], ecx
mov dword [ebx + 0xb64], ecx
mov dword [ebx + 0xb68], edi
mov byte [ebx + 0xb54], cl
lea ecx, [ebx + 0xb6c]
mov byte [ebp - 4], 0x2f
call fcn.005a6986
xor eax, eax
mov dword [ebx + 0xb88], edi
mov dword [ebx + 0xb74], eax
mov dword [ebx + 0xb84], eax
mov byte [ebx + 0xb74], al
mov dword [ebx + 0xb8c], eax
mov dword [ebx + 0xb9c], eax
mov dword [ebx + 0xba0], edi
mov byte [ebx + 0xb8c], al
mov dword [ebx + 0xba4], eax
mov dword [ebx + 0xbb4], eax
mov dword [ebx + 0xbb8], edi
mov byte [ebx + 0xba4], al
mov dword [ebx + 0xbbc], eax
mov dword [ebx + 0xbcc], eax
mov dword [ebx + 0xbd0], edi
mov byte [ebx + 0xbbc], al
mov byte [ebp - 4], 0x34
mov dword [ebx + 0xbd4], eax
mov dword [ebx + 0xbd8], eax
push 1
lea ecx, [ebx + 0xbe0]
call fcn.005a081d
xor eax, eax
mov dword [ebx + 0xc8c], edi
mov dword [ebx + 0xc78], eax
mov dword [ebx + 0xc88], eax
mov byte [ebx + 0xc78], al
mov dword [ebx + 0xc90], eax
mov dword [ebx + 0xc94], eax
mov dword [ebx + 0xca4], eax
mov dword [ebx + 0xca8], edi
mov byte [ebx + 0xc94], al
mov dword [ebx + 0xcac], eax
mov dword [ebx + 0xcbc], eax
mov dword [ebx + 0xcc0], edi
mov byte [ebx + 0xcac], al
mov dword [ebx + 0xcc4], eax
mov dword [ebx + 0xcd4], eax
mov dword [ebx + 0xcd8], edi
mov byte [ebx + 0xcc4], al
mov dword [ebx + 0xcdc], eax
mov dword [ebx + 0xcec], eax
mov dword [ebx + 0xcf0], edi
mov byte [ebx + 0xcdc], al
mov dword [ebx + 0xcf4], eax
mov dword [ebx + 0xd04], eax
mov dword [ebx + 0xd08], edi
mov byte [ebx + 0xcf4], al
mov dword [ebx + 0xd0c], eax
mov dword [ebx + 0xd1c], eax
mov dword [ebx + 0xd20], edi
mov byte [ebx + 0xd0c], al
mov esi, 0x114
mov byte [ebx + 0x13e], al
push esi
push eax
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x3c
push eax
call fcn.00629cd0
add esp, 0xc
mov dword [ebp - 0x1cc], esi
lea eax, [ebp - 0x1cc]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x1c8]
push 0
push dword [ebp - 0x1c0]
mov dword [ebx + 0x960], eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a405c
mov edi, eax
push 0
push dword [ebp - 0x1c4]
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3d
push eax
call fcn.005a405c
mov esi, eax
push 0
push dword [ebp - 0x1c8]
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x3e
push eax
call fcn.005a405c
push 0x65ab70
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.005a015e
add esp, 0x30
push esi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x40
call fcn.005a08e4
push 0x65ab70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005a015e
add esp, 0xc
push edi
push eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x42
call fcn.005a08e4
lea eax, [ebp - 0x58]
lea esi, [ebx + 0x964]
push eax
mov ecx, esi
call fcn.005a10d6
lea ecx, [ebp - 0x58]
call fcn.00448620
lea ecx, [ebp - 0x70]
call fcn.00448620
lea ecx, [ebp - 0x28]
call fcn.00448620
lea ecx, [ebp - 0x88]
call fcn.00448620
lea ecx, [ebp - 0xa0]
call fcn.00448620
lea ecx, [ebp - 0xb8]
call fcn.00448620
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3c
call fcn.00448620
call fcn.005b5a63
test al, al
je 0x5bed76
mov edi, 0x66426c
push edi
call fcn.0062d730
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00448360
call fcn.005b56c8
push str.installId
lea ecx, [ebp - 0x28]
call fcn.00448670
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x43
push eax
call fcn.005b89d0
push eax
mov esi, reloc.WS2_32.dll_accept
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b7176
add esp, 0x10
lea ecx, [ebx + 0xa6c]
push eax
call fcn.005a10d6
lea ecx, [ebp - 0x40]
call fcn.00448620
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
call fcn.00448620
push str.installId2
lea ecx, [ebp - 0x28]
call fcn.00448670
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x44
push eax
call fcn.005b89d0
push eax
lea eax, [ebp - 0x40]
push esi
push eax
call fcn.005b7176
add esp, 0x10
lea ecx, [ebx + 0xa84]
push eax
call fcn.005a10d6
lea ecx, [ebp - 0x40]
call fcn.00448620
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
call fcn.00448620
call fcn.005af519
mov ecx, eax
call fcn.005af4ed
call fcn.005c0c23
mov eax, ebx
call fcn.00626a9c
ret