Function at 0x42b41c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x69beb1
call fcn.00640244
sub esp, 0x7f8
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
push 0x436
mov dword [ebp - 0x1c], edi
mov dword [edi + 0x88], ebx
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0x437
mov dword [ebp - 4], ebx
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00429973
push 0x499
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push str.wk2warning
call fcn.0040eeff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
push 0x432676
call fcn.00429f4d
sub esp, 0x18
mov dword [ebp - 4], 2
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], 7
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b4bc
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x43a
mov byte [ebp - 4], 3
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0xed
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push str.welcome
call fcn.0040eeff
push 0x43645a
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 2
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b522
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x81e
mov byte [ebp - 4], 6
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0x71b
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
push str.upgradewelcome
call fcn.0040eeff
push 0x435af6
lea ecx, [ebp - 0x74c]
mov byte [ebp - 4], 5
call fcn.00429f4d
push 0x433
mov byte [ebp - 4], 8
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429973
push 0x434
mov byte [ebp - 4], 9
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0x23
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push str.scamwarn
call fcn.0040eeff
push 0x43611c
lea ecx, [ebp - 0x6f0]
mov byte [ebp - 4], 8
call fcn.00429f4d
push 0x430
mov byte [ebp - 4], 0xb
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429973
push 0x431
mov byte [ebp - 4], 0xc
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0xf0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
push 0x6c271c
call fcn.0040eeff
push 0x435e00
lea ecx, [ebp - 0x694]
mov byte [ebp - 4], 0xb
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b64d
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x816
mov byte [ebp - 4], 0xf
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0x71c
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push str.seamlessupdating
call fcn.0040eeff
push 0x435b18
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0xe
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b6b0
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x817
mov byte [ebp - 4], 0x12
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0x71d
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push str.welcomeseamless
call fcn.0040eeff
push 0x435b07
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x11
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b713
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x428
mov byte [ebp - 4], 0x15
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0x34
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
push str.basicsetup
call fcn.0040eeff
push 0x42ad5f
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0x14
call fcn.00429f4d
push 0x42a
mov byte [ebp - 4], 0x17
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429973
push 0x42b
mov byte [ebp - 4], 0x18
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0xf2
sub esp, 0x18
mov byte [ebp - 4], 0x19
mov ecx, esp
push str.filetypes
call fcn.0040eeff
push 0x435ca1
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x17
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b7da
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b7f5
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x101
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
push str.firsttorrent
call fcn.0040eeff
push fcn.0042f421
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x1a
call fcn.00429f4d
push 0x426
mov byte [ebp - 4], 0x1d
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429973
push 0x427
mov byte [ebp - 4], 0x1e
call fcn.0058c7b7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429973
push 0x69f
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push str.autoupdate
call fcn.0040eeff
push 0x4359e3
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x1d
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b8a3
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b8be
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x717
sub esp, 0x18
mov byte [ebp - 4], 0x22
mov ecx, esp
push str.offer_spigot_special
call fcn.0040eeff
push 0x436167
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x20
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b908
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b923
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x69d
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
push str.offer_google
call fcn.0040eeff
push fcn.00435cc2
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x23
call fcn.00429f4d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b96d
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], edx
call fcn.0042813d
push 0x69e
sub esp, 0x18
mov byte [ebp - 4], 0x28
mov ecx, esp
push str.offer_non_google
call fcn.0040eeff
push 0x4360f2
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x26
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0xef
sub esp, 0x18
mov byte [ebp - 4], 0x2b
mov ecx, esp
push str.offer_yandex
call fcn.0040eeff
push 0x43658d
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x29
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0x170
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, esp
push str.yandex_search
call fcn.0040eeff
push 0x436563
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x2c
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0x6e6
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov ecx, esp
push str.offer_spigot
call fcn.0040eeff
push 0x43613d
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x2f
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0x6ea
sub esp, 0x18
mov byte [ebp - 4], 0x34
mov ecx, esp
push str.offer_accept_decline_spigot
call fcn.0040eeff
push 0x436305
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x32
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0x741
sub esp, 0x18
mov byte [ebp - 4], 0x37
mov ecx, esp
push str.offer_imesh
call fcn.0040eeff
push 0x435d73
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x35
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0x746
sub esp, 0x18
mov byte [ebp - 4], 0x3a
mov ecx, esp
push str.offer_mediacaster
call fcn.0040eeff
push 0x4360dc
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x38
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0x21
sub esp, 0x18
mov byte [ebp - 4], 0x3d
mov ecx, esp
push str.offer_ask
call fcn.0040eeff
push 0x4359cd
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x3b
call fcn.00429f4d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004281f2
push 0x757
sub esp, 0x18
mov byte [ebp - 4], 0x40
mov ecx, esp
push str.offer_spigotyandex
call fcn.0040eeff
push 0x436444
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3e
call fcn.00429f4d
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0x41
push eax
lea esi, [edi + 0x8c]
lea eax, [ebp - 0x804]
mov dword [ebp - 0x10], esi
push eax
mov ecx, esi
call fcn.00428fef
or dword [ebp - 4], 0xffffffff
push fcn.00489cdc
push 0x16
push 0x5c
pop eax
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.0063febd
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
inc eax
shl eax, 4
push eax
call fcn.004600d6
mov dword [edi + 0x88], eax
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x42bcfb
mov ecx, ebx
mov edx, ebx
mov esi, dword [esi]
mov edi, dword [edi + 0x88]
add esi, 0x4c
add esi, edx
add edi, ecx
push 0x5c
inc ebx
add ecx, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x10]
pop edi
add edx, edi
mov dword [ebp - 0x14], edx
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv edi
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x1c]
cmp ebx, eax
jb 0x42bcc7
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret