Function at 0x5c0a57
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x124
mov eax, 0x657f6a
call fcn.006284bd
mov edi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x130]
push 1
mov dword [ebp - 0x74], ebx
call fcn.005c0897
and dword [ebp - 4], 0
lea eax, [ebp - 0x130]
push str.__xml_version_1.0__encoding_UTF_8___
push eax
call fcn.005a0c96
cmp byte [ebp - 0x98], 0
pop ecx
pop ecx
je 0x5c0aab
lea eax, [ebp - 0x130]
push 0xa
push eax
call fcn.005bfd7c
pop ecx
pop ecx
push str.response
lea ecx, [ebp - 0x58]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5b6c
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push str.action
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.version
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.file_name
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 5
call fcn.005b6749
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb50]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5afb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.redis_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x713708]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5afb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.server_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x71370c]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5afb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.reseller_id
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xae4]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x66721c
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb30]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5afb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi], 0
lea ecx, [ebp - 0x58]
mov eax, 0x6d72b8
mov esi, 0x6d9978
cmove eax, esi
push eax
call fcn.00449380
push str.incomplete
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b6f48
test al, al
mov ecx, esi
mov eax, 0x6d72b8
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0xd
push str.already_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi + 0xec], 0
mov ecx, 0x6d72b8
mov eax, esi
cmove eax, ecx
lea ecx, [ebp - 0x58]
push eax
call fcn.00449380
push str.already_run
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b6ec3
test al, al
lea ecx, [ebp - 0x58]
mov eax, 0x6d72b8
cmove esi, eax
push esi
call fcn.00449380
push str.clone_installed
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xbc]
mov esi, dword [edi + 0xb8]
test eax, eax
jl 0x5c0dfc
jg 0x5c0def
cmp esi, 0x270f
jbe 0x5c0dfc
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0dff
mov dword [ebp - 0x74], eax
push str.time_start
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5afb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xc4]
mov esi, dword [edi + 0xc0]
test eax, eax
jl 0x5c0e53
jg 0x5c0e46
cmp esi, 0x270f
jbe 0x5c0e53
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0e56
mov dword [ebp - 0x74], eax
push str.time_download
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5afb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xcc]
mov esi, dword [edi + 0xc8]
test eax, eax
jl 0x5c0eaa
jg 0x5c0e9d
cmp esi, 0x270f
jbe 0x5c0eaa
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0ead
mov dword [ebp - 0x74], eax
push str.time_finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5afb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_default
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x16
call fcn.005d9137
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005d86a5
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_current
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x19
push eax
call fcn.005d8b67
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6672b8
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x1b
call fcn.005a9445
mov ecx, eax
call fcn.005a82e8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_proposed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a97e4
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_accepted
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a7d39
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x20
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a9266
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x22
push eax
call fcn.005af7b2
mov ecx, eax
call fcn.005aebe7
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing_own
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x24
push eax
call fcn.005af7b2
mov ecx, eax
call fcn.005af363
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.error_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5b6c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xb6c]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bb8
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5a23
push str.error_download
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5b6c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xc90]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bb8
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5a23
push str.error_non_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5b6c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.005c24b3
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.005c5bb8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5a23
push str.last_shown_screen
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0x218]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x2b
push eax
call fcn.005cbb19
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.system_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x2d
call fcn.005b7f2c
cdq
push edx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x66737c
lea ecx, [ebp - 0x58]
call fcn.00449380
push str.antivirus
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x30
push eax
call fcn.005b9469
push eax
lea eax, [ebp - 0x40]
push reloc.WS2_32.dll_accept
push eax
call fcn.005b8a5a
add esp, 0x10
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0x28c]
test eax, eax
je 0x5c13cb
push 1
dec eax
lea esi, [edi + 0x27c]
push eax
mov ecx, esi
call fcn.00448f20
push esi
lea eax, [ebp - 0x28]
push 0x667390
push eax
call fcn.005a0eb7
push 0x66738c
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x32
push eax
call fcn.005a0e4e
push eax
lea eax, [edi + 0xbf8]
mov byte [ebp - 4], 0x33
push eax
call fcn.005a0c75
add esp, 0x20
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.info
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5b6c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0xbfc]
call fcn.005a54cf
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bb8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5a23
push str.download_type
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x36
push eax
mov ecx, edi
call fcn.005c4786
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.download_url
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5b6c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
call fcn.005c4706
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x39
call fcn.005c5bb8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5a23
push str.os_version
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x3a
lea eax, [edi + 0x97c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.parent_process
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0x3b
call fcn.005bc13e
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.additional_parameters
lea ecx, [ebp - 0x40]
call fcn.00449380
lea eax, [edi + 0xd24]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5bef
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 0
lea ecx, [ebp - 0x130]
call fcn.005c5a23
cmp dword [ebp - 0x7c], 0
jne 0x5c156e
push ebx
lea ecx, [ebp - 0x12c]
call fcn.005a54cf
lea ecx, [ebp - 0x8c]
call fcn.005c08e1
lea ecx, [ebp - 0x130]
call fcn.005a24bf
mov eax, ebx
call fcn.0062846c
ret 4