Function at 0x5c0bd4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x124
mov eax, 0x6580ea
call fcn.0062863d
mov edi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x130]
push 1
mov dword [ebp - 0x74], ebx
call fcn.005c0a14
and dword [ebp - 4], 0
lea eax, [ebp - 0x130]
push str.__xml_version_1.0__encoding_UTF_8___
push eax
call fcn.005a0c96
cmp byte [ebp - 0x98], 0
pop ecx
pop ecx
je 0x5c0c28
lea eax, [ebp - 0x130]
push 0xa
push eax
call fcn.005bfef9
pop ecx
pop ecx
push str.response
lea ecx, [ebp - 0x58]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ce6
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push str.action
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.version
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.file_name
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 5
call fcn.005b68c8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb50]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c75
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.redis_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x713708]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c75
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.server_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x71370c]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c75
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.reseller_id
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xae4]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x66728c
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb30]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c75
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi], 0
lea ecx, [ebp - 0x58]
mov eax, 0x6d7328
mov esi, 0x6d99e8
cmove eax, esi
push eax
call fcn.00449380
push str.incomplete
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b70c8
test al, al
mov ecx, esi
mov eax, 0x6d7328
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0xd
push str.already_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi + 0xec], 0
mov ecx, 0x6d7328
mov eax, esi
cmove eax, ecx
lea ecx, [ebp - 0x58]
push eax
call fcn.00449380
push str.already_run
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b7043
test al, al
lea ecx, [ebp - 0x58]
mov eax, 0x6d7328
cmove esi, eax
push esi
call fcn.00449380
push str.clone_installed
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xbc]
mov esi, dword [edi + 0xb8]
test eax, eax
jl 0x5c0f79
jg 0x5c0f6c
cmp esi, 0x270f
jbe 0x5c0f79
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0f7c
mov dword [ebp - 0x74], eax
push str.time_start
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c75
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xc4]
mov esi, dword [edi + 0xc0]
test eax, eax
jl 0x5c0fd0
jg 0x5c0fc3
cmp esi, 0x270f
jbe 0x5c0fd0
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c0fd3
mov dword [ebp - 0x74], eax
push str.time_download
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c75
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xcc]
mov esi, dword [edi + 0xc8]
test eax, eax
jl 0x5c1027
jg 0x5c101a
cmp esi, 0x270f
jbe 0x5c1027
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c102a
mov dword [ebp - 0x74], eax
push str.time_finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5c75
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_default
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x16
call fcn.005d92b2
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005d8820
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_current
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x19
push eax
call fcn.005d8ce2
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x667328
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x1b
call fcn.005a9445
mov ecx, eax
call fcn.005a82e8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_proposed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a97e4
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_accepted
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a7d39
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x20
push eax
call fcn.005a9445
mov ecx, eax
call fcn.005a9266
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x22
push eax
call fcn.005af89d
mov ecx, eax
call fcn.005aec46
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing_own
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x24
push eax
call fcn.005af89d
mov ecx, eax
call fcn.005af408
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.error_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ce6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xb6c]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d32
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5b9d
push str.error_download
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ce6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xc90]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d32
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5b9d
push str.error_non_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ce6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.005c2630
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.005c5d32
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5b9d
push str.last_shown_screen
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0x218]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x2b
push eax
call fcn.005cbc93
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.system_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x2d
call fcn.005b80ac
cdq
push edx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6673ec
lea ecx, [ebp - 0x58]
call fcn.00449380
push str.antivirus
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x30
push eax
call fcn.005b95e6
push eax
lea eax, [ebp - 0x40]
push reloc.WS2_32.dll_accept
push eax
call fcn.005b8bda
add esp, 0x10
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0x28c]
test eax, eax
je 0x5c1548
push 1
dec eax
lea esi, [edi + 0x27c]
push eax
mov ecx, esi
call fcn.00448f20
push esi
lea eax, [ebp - 0x28]
push 0x667400
push eax
call fcn.005a0eb7
push 0x6673fc
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x32
push eax
call fcn.005a0e4e
push eax
lea eax, [edi + 0xbf8]
mov byte [ebp - 4], 0x33
push eax
call fcn.005a0c75
add esp, 0x20
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.info
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ce6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0xbfc]
call fcn.005a54cf
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d32
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5b9d
push str.download_type
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x36
push eax
mov ecx, edi
call fcn.005c4903
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.download_url
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5ce6
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
call fcn.005c4883
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x39
call fcn.005c5d32
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c5b9d
push str.os_version
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x3a
lea eax, [edi + 0x97c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.parent_process
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0x3b
call fcn.005bc2bb
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.additional_parameters
lea ecx, [ebp - 0x40]
call fcn.00449380
lea eax, [edi + 0xd24]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c5d69
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 0
lea ecx, [ebp - 0x130]
call fcn.005c5b9d
cmp dword [ebp - 0x7c], 0
jne 0x5c16eb
push ebx
lea ecx, [ebp - 0x12c]
call fcn.005a54cf
lea ecx, [ebp - 0x8c]
call fcn.005c0a5e
lea ecx, [ebp - 0x130]
call fcn.005a24bf
mov eax, ebx
call fcn.006285ec
ret 4