Function at 0x5c1476
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x124
mov eax, 0x658b37
call fcn.00628f7d
mov edi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x130]
push 1
mov dword [ebp - 0x74], ebx
call fcn.005c12b6
and dword [ebp - 4], 0
lea eax, [ebp - 0x130]
push str.__xml_version_1.0__encoding_UTF_8___
push eax
call fcn.005a0c96
cmp byte [ebp - 0x98], 0
pop ecx
pop ecx
je 0x5c14ca
lea eax, [ebp - 0x130]
push 0xa
push eax
call fcn.005c079b
pop ecx
pop ecx
push 0x6d93a4
lea ecx, [ebp - 0x58]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x130]
call fcn.005c64c3
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push str.action
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6d8440
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.file_name
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 5
call fcn.005b7162
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb50]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6452
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.redis_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x713740]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6452
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.server_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x713744]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6452
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.reseller_id
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xae4]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x667180
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb30]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6452
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi], 0
lea ecx, [ebp - 0x58]
mov eax, 0x6d7248
mov esi, 0x6d9908
cmove eax, esi
push eax
call fcn.00449380
push str.incomplete
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b7968
test al, al
mov ecx, esi
mov eax, 0x6d7248
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0xd
push str.already_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi + 0xec], 0
mov ecx, 0x6d7248
mov eax, esi
cmove eax, ecx
lea ecx, [ebp - 0x58]
push eax
call fcn.00449380
push str.already_run
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b78e3
test al, al
lea ecx, [ebp - 0x58]
mov eax, 0x6d7248
cmove esi, eax
push esi
call fcn.00449380
push str.clone_installed
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xbc]
mov esi, dword [edi + 0xb8]
test eax, eax
jl 0x5c181b
jg 0x5c180e
cmp esi, 0x270f
jbe 0x5c181b
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c181e
mov dword [ebp - 0x74], eax
push str.time_start
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6452
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xc4]
mov esi, dword [edi + 0xc0]
test eax, eax
jl 0x5c1872
jg 0x5c1865
cmp esi, 0x270f
jbe 0x5c1872
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c1875
mov dword [ebp - 0x74], eax
push str.time_download
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6452
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xcc]
mov esi, dword [edi + 0xc8]
test eax, eax
jl 0x5c18c9
jg 0x5c18bc
cmp esi, 0x270f
jbe 0x5c18c9
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c18cc
mov dword [ebp - 0x74], eax
push str.time_finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6452
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_default
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x16
call fcn.005d9bca
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005d8ffc
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_current
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x19
push eax
call fcn.005d94be
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x66721c
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x1b
call fcn.005a94a5
mov ecx, eax
call fcn.005a82e8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_proposed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
push eax
call fcn.005a94a5
mov ecx, eax
call fcn.005a9844
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_accepted
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
push eax
call fcn.005a94a5
mov ecx, eax
call fcn.005a7d39
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x20
push eax
call fcn.005a94a5
mov ecx, eax
call fcn.005a92c6
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x22
push eax
call fcn.005af95d
mov ecx, eax
call fcn.005aed92
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing_own
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x24
push eax
call fcn.005af95d
mov ecx, eax
call fcn.005af50e
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.error_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x130]
call fcn.005c64c3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xb6c]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c650f
push 1
lea ecx, [ebp - 0x130]
call fcn.005c637a
push str.error_download
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x130]
call fcn.005c64c3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xc90]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c650f
push 1
lea ecx, [ebp - 0x130]
call fcn.005c637a
push str.error_non_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x130]
call fcn.005c64c3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.005c2ed2
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.005c650f
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c637a
push str.last_shown_screen
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0x218]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x2b
push eax
call fcn.005cc470
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.system_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x2d
call fcn.005b894c
cdq
push edx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6672e0
lea ecx, [ebp - 0x58]
call fcn.00449380
push str.antivirus
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x30
push eax
call fcn.005b9e86
push eax
lea eax, [ebp - 0x40]
push 0x80000001
push eax
call fcn.005b947a
add esp, 0x10
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0x28c]
test eax, eax
je 0x5c1dea
push 1
dec eax
lea esi, [edi + 0x27c]
push eax
mov ecx, esi
call fcn.00448f20
push esi
lea eax, [ebp - 0x28]
push 0x6672f4
push eax
call fcn.005a0eb7
push 0x6672f0
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x32
push eax
call fcn.005a0e4e
push eax
lea eax, [edi + 0xbf8]
mov byte [ebp - 4], 0x33
push eax
call fcn.005a0c75
add esp, 0x20
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6dc6d4
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x130]
call fcn.005c64c3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0xbfc]
call fcn.005a54cf
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x130]
call fcn.005c650f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c637a
push str.download_type
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x36
push eax
mov ecx, edi
call fcn.005c50e0
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.download_url
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x130]
call fcn.005c64c3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
call fcn.005c5060
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x39
call fcn.005c650f
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c637a
push str.os_version
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x3a
lea eax, [edi + 0x97c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.parent_process
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0x3b
call fcn.005bcb5d
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.additional_parameters
lea ecx, [ebp - 0x40]
call fcn.00449380
lea eax, [edi + 0xd24]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6546
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 0
lea ecx, [ebp - 0x130]
call fcn.005c637a
cmp dword [ebp - 0x7c], 0
jne 0x5c1f8d
push ebx
lea ecx, [ebp - 0x12c]
call fcn.005a54cf
lea ecx, [ebp - 0x8c]
call fcn.005c1300
lea ecx, [ebp - 0x130]
call fcn.005a24bf
mov eax, ebx
call fcn.00628f2c
ret 4