Function at 0x5c0b07
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x124
mov eax, 0x65802d
call fcn.0062856d
mov edi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x130]
push 1
mov dword [ebp - 0x74], ebx
call fcn.005c0947
and dword [ebp - 4], 0
lea eax, [ebp - 0x130]
push str.__xml_version_1.0__encoding_UTF_8___
push eax
call fcn.005a0c96
cmp byte [ebp - 0x98], 0
pop ecx
pop ecx
je 0x5c0b5b
lea eax, [ebp - 0x130]
push 0xa
push eax
call fcn.005bfe2c
pop ecx
pop ecx
push str.response
lea ecx, [ebp - 0x58]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c19
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push str.action
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.version
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.file_name
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 5
call fcn.005b67f1
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb50]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ba8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.redis_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x713708]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ba8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.server_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x71370c]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ba8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.reseller_id
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xae4]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x667244
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb30]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ba8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi], 0
lea ecx, [ebp - 0x58]
mov eax, 0x6d72d8
mov esi, 0x6d9998
cmove eax, esi
push eax
call fcn.00449380
push str.incomplete
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b6ffa
test al, al
mov ecx, esi
mov eax, 0x6d72d8
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0xd
push str.already_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi + 0xec], 0
mov ecx, 0x6d72d8
mov eax, esi
cmove eax, ecx
lea ecx, [ebp - 0x58]
push eax
call fcn.00449380
push str.already_run
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b6f73
test al, al
lea ecx, [ebp - 0x58]
mov eax, 0x6d72d8
cmove esi, eax
push esi
call fcn.00449380
push str.clone_installed
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xbc]
mov esi, dword [edi + 0xb8]
test eax, eax
jl 0x5c0eac
jg 0x5c0e9f
cmp esi, 0x270f
jbe 0x5c0eac
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0eaf
mov dword [ebp - 0x74], eax
push str.time_start
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ba8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xc4]
mov esi, dword [edi + 0xc0]
test eax, eax
jl 0x5c0f03
jg 0x5c0ef6
cmp esi, 0x270f
jbe 0x5c0f03
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0f06
mov dword [ebp - 0x74], eax
push str.time_download
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ba8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xcc]
mov esi, dword [edi + 0xc8]
test eax, eax
jl 0x5c0f5a
jg 0x5c0f4d
cmp esi, 0x270f
jbe 0x5c0f5a
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0f5d
mov dword [ebp - 0x74], eax
push str.time_finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ba8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_default
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x16
call fcn.005d91e5
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005d8753
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_current
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x19
push eax
call fcn.005d8c15
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6672e0
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x1b
call fcn.005a9445
mov ecx, eax
call fcn.005a82e8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_proposed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a97e4
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_accepted
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a7d39
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x20
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a9266
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x22
push eax
call fcn.005af857
mov ecx, eax
call fcn.005aec46
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing_own
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x24
push eax
call fcn.005af857
mov ecx, eax
call fcn.005af3e5
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.error_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c19
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xb6c]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c65
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5ad0
push str.error_download
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c19
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xc90]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c65
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5ad0
push str.error_non_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c19
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.005c2563
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.005c5c65
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5ad0
push str.last_shown_screen
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0x218]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x2b
push eax
call fcn.005cbbc6
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.system_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x2d
call fcn.005b7fde
cdq
push edx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6673a4
lea ecx, [ebp - 0x58]
call fcn.00449380
push str.antivirus
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x30
push eax
call fcn.005b9518
push eax
lea eax, [ebp - 0x40]
push reloc.WS2_32.dll_accept
push eax
call fcn.005b8b0c
add esp, 0x10
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0x28c]
test eax, eax
je 0x5c147b
push 1
dec eax
lea esi, [edi + 0x27c]
push eax
mov ecx, esi
call fcn.00448f20
push esi
lea eax, [ebp - 0x28]
push 0x6673b8
push eax
call fcn.005a0eb7
push 0x6673b4
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x32
push eax
call fcn.005a0e4e
push eax
lea eax, [edi + 0xbf8]
mov byte [ebp - 4], 0x33
push eax
call fcn.005a0c75
add esp, 0x20
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.info
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c19
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0xbfc]
call fcn.005a54cf
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c65
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5ad0
push str.download_type
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x36
push eax
mov ecx, edi
call fcn.005c4836
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.download_url
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c19
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
call fcn.005c47b6
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x39
call fcn.005c5c65
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5ad0
push str.os_version
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x3a
lea eax, [edi + 0x97c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.parent_process
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0x3b
call fcn.005bc1ee
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.additional_parameters
lea ecx, [ebp - 0x40]
call fcn.00449380
lea eax, [edi + 0xd24]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c9c
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 0
lea ecx, [ebp - 0x130]
call fcn.005c5ad0
cmp dword [ebp - 0x7c], 0
jne 0x5c161e
push ebx
lea ecx, [ebp - 0x12c]
call fcn.005a54cf
lea ecx, [ebp - 0x8c]
call fcn.005c0991
lea ecx, [ebp - 0x130]
call fcn.005a24bf
mov eax, ebx
call fcn.0062851c
ret 4