Function at 0x5c1290
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x124
mov eax, 0x658a3b
call fcn.00628e3d
mov edi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x130]
push 1
mov dword [ebp - 0x74], ebx
call fcn.005c10d0
and dword [ebp - 4], 0
lea eax, [ebp - 0x130]
push str.__xml_version_1.0__encoding_UTF_8___
push eax
call fcn.005a0c96
cmp byte [ebp - 0x98], 0
pop ecx
pop ecx
je 0x5c12e4
lea eax, [ebp - 0x130]
push 0xa
push eax
call fcn.005c05b5
pop ecx
pop ecx
push str.response
lea ecx, [ebp - 0x58]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x130]
call fcn.005c63bc
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push str.action
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x58]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.version
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.file_name
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 5
call fcn.005b6f7a
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb50]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x130]
call fcn.005c634b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.redis_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x713740]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c634b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.server_id
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [0x713744]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x130]
call fcn.005c634b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.reseller_id
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xae4]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x6670fc
lea ecx, [ebp - 0x28]
call fcn.00449380
push dword [edi + 0xb30]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x130]
call fcn.005c634b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi], 0
lea ecx, [ebp - 0x58]
mov eax, 0x6d71c8
mov esi, 0x6d9888
cmove eax, esi
push eax
call fcn.00449380
push str.incomplete
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b7788
test al, al
mov ecx, esi
mov eax, 0x6d71c8
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0xd
push str.already_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
cmp byte [edi + 0xec], 0
mov ecx, 0x6d71c8
mov eax, esi
cmove eax, ecx
lea ecx, [ebp - 0x58]
push eax
call fcn.00449380
push str.already_run
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
call fcn.005b7703
test al, al
lea ecx, [ebp - 0x58]
mov eax, 0x6d71c8
cmove esi, eax
push esi
call fcn.00449380
push str.clone_installed
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xbc]
mov esi, dword [edi + 0xb8]
test eax, eax
jl 0x5c1635
jg 0x5c1628
cmp esi, 0x270f
jbe 0x5c1635
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c1638
mov dword [ebp - 0x74], eax
push str.time_start
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x130]
call fcn.005c634b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xc4]
mov esi, dword [edi + 0xc0]
test eax, eax
jl 0x5c168c
jg 0x5c167f
cmp esi, 0x270f
jbe 0x5c168c
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c168f
mov dword [ebp - 0x74], eax
push str.time_download
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x130]
call fcn.005c634b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0xcc]
mov esi, dword [edi + 0xc8]
test eax, eax
jl 0x5c16e3
jg 0x5c16d6
cmp esi, 0x270f
jbe 0x5c16e3
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
mov esi, dword [ebp - 0x78]
jmp 0x5c16e6
mov dword [ebp - 0x74], eax
push str.time_finish
lea ecx, [ebp - 0x28]
call fcn.00449380
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x130]
call fcn.005c634b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_default
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x16
call fcn.005d9ac3
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005d8ef5
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_current
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0xd0c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.browser_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x19
push eax
call fcn.005d93b7
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x667198
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x1b
call fcn.005a94a5
mov ecx, eax
call fcn.005a82e8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_proposed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
push eax
call fcn.005a94a5
mov ecx, eax
call fcn.005a9844
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_accepted
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
push eax
call fcn.005a94a5
mov ecx, eax
call fcn.005a7d39
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_installed
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x20
push eax
call fcn.005a94a5
mov ecx, eax
call fcn.005a92c6
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x22
push eax
call fcn.005af87f
mov ecx, eax
call fcn.005aed48
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.bundle_existing_own
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x24
push eax
call fcn.005af87f
mov ecx, eax
call fcn.005af45b
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.error_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x130]
call fcn.005c63bc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xb6c]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6408
push 1
lea ecx, [ebp - 0x130]
call fcn.005c6273
push str.error_download
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x130]
call fcn.005c63bc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [edi + 0xc90]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6408
push 1
lea ecx, [ebp - 0x130]
call fcn.005c6273
push str.error_non_critical
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x130]
call fcn.005c63bc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.005c2cec
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x29
call fcn.005c6408
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c6273
push str.last_shown_screen
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [edi + 0x218]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.installer_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x2b
push eax
call fcn.005cc369
pop ecx
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.system_lang
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x2d
call fcn.005b876c
cdq
push edx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005a4fcc
add esp, 0xc
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 0x66725c
lea ecx, [ebp - 0x58]
call fcn.00449380
push str.antivirus
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
call fcn.00449380
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x30
push eax
call fcn.005b9ca6
push eax
lea eax, [ebp - 0x40]
push reloc.WS2_32.dll_accept
push eax
call fcn.005b929a
add esp, 0x10
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
call fcn.00449330
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
mov eax, dword [edi + 0x28c]
test eax, eax
je 0x5c1c04
push 1
dec eax
lea esi, [edi + 0x27c]
push eax
mov ecx, esi
call fcn.00448f20
push esi
lea eax, [ebp - 0x28]
push 0x667270
push eax
call fcn.005a0eb7
push 0x66726c
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x32
push eax
call fcn.005a0e4e
push eax
lea eax, [edi + 0xbf8]
mov byte [ebp - 4], 0x33
push eax
call fcn.005a0c75
add esp, 0x20
lea ecx, [ebp - 0x40]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.info
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x130]
call fcn.005c63bc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0xbfc]
call fcn.005a54cf
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x130]
call fcn.005c6408
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c6273
push str.download_type
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x36
push eax
mov ecx, edi
call fcn.005c4fc0
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x70]
call fcn.00449330
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.download_url
lea ecx, [ebp - 0x28]
call fcn.00449380
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x130]
call fcn.005c63bc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
call fcn.005c4f40
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x39
call fcn.005c6408
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00449330
push 1
lea ecx, [ebp - 0x130]
call fcn.005c6273
push str.os_version
lea ecx, [ebp - 0x28]
call fcn.00449380
mov byte [ebp - 4], 0x3a
lea eax, [edi + 0x97c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00449330
push str.parent_process
lea ecx, [ebp - 0x58]
call fcn.00449380
mov byte [ebp - 4], 0x3b
call fcn.005bc97e
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00449330
push str.additional_parameters
lea ecx, [ebp - 0x40]
call fcn.00449380
lea eax, [edi + 0xd24]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.005c643f
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00449330
push 0
lea ecx, [ebp - 0x130]
call fcn.005c6273
cmp dword [ebp - 0x7c], 0
jne 0x5c1da7
push ebx
lea ecx, [ebp - 0x12c]
call fcn.005a54cf
lea ecx, [ebp - 0x8c]
call fcn.005c111a
lea ecx, [ebp - 0x130]
call fcn.005a24bf
mov eax, ebx
call fcn.00628dec
ret 4