Function at 0x42b779
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x69e06d
call fcn.006426c4
sub esp, 0x7f8
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
push 0x437
mov dword [ebp - 0x1c], edi
mov dword [edi + 0x90], ebx
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0x438
mov dword [ebp - 4], ebx
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00429d77
push 0x499
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push str.wk2warning
call fcn.0040f32f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
push 0x4329dc
call fcn.0042a351
sub esp, 0x18
mov dword [ebp - 4], 2
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], 7
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b819
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x43b
mov byte [ebp - 4], 3
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0xed
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push str.welcome
call fcn.0040f32f
push 0x4367c0
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 2
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b87f
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x821
mov byte [ebp - 4], 6
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0x71b
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
push 0x6c6804
call fcn.0040f32f
push 0x435e5c
lea ecx, [ebp - 0x74c]
mov byte [ebp - 4], 5
call fcn.0042a351
push 0x434
mov byte [ebp - 4], 8
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429d77
push 0x435
mov byte [ebp - 4], 9
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0x23
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push str.scamwarn
call fcn.0040f32f
push 0x436482
lea ecx, [ebp - 0x6f0]
mov byte [ebp - 4], 8
call fcn.0042a351
push 0x431
mov byte [ebp - 4], 0xb
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429d77
push 0x432
mov byte [ebp - 4], 0xc
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0xf0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
push 0x6c579c
call fcn.0040f32f
push 0x436166
lea ecx, [ebp - 0x694]
mov byte [ebp - 4], 0xb
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42b9aa
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x819
mov byte [ebp - 4], 0xf
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0x71c
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push 0x6c6814
call fcn.0040f32f
push 0x435e7e
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0xe
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42ba0d
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x81a
mov byte [ebp - 4], 0x12
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0x71d
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push 0x6c6b98
call fcn.0040f32f
push 0x435e6d
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x11
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42ba70
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x429
mov byte [ebp - 4], 0x15
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0x34
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
push str.basicsetup
call fcn.0040f32f
push 0x42b0bc
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0x14
call fcn.0042a351
push 0x42b
mov byte [ebp - 4], 0x17
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429d77
push 0x42c
mov byte [ebp - 4], 0x18
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0xf2
sub esp, 0x18
mov byte [ebp - 4], 0x19
mov ecx, esp
push str.filetypes
call fcn.0040f32f
push 0x436007
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x17
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42bb37
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42bb52
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x101
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
push str.firsttorrent
call fcn.0040f32f
push fcn.0042f784
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x1a
call fcn.0042a351
push 0x427
mov byte [ebp - 4], 0x1d
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00429d77
push 0x428
mov byte [ebp - 4], 0x1e
call fcn.0058dfbe
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00429d77
push 0x69f
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push str.autoupdate
call fcn.0040f32f
push 0x435d49
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x1d
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42bc00
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42bc1b
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x717
sub esp, 0x18
mov byte [ebp - 4], 0x22
mov ecx, esp
push 0x6c6e94
call fcn.0040f32f
push 0x4364cd
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x20
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42bc65
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42bc80
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x69d
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
push 0x6c6e40
call fcn.0040f32f
push fcn.00436028
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x23
call fcn.0042a351
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x42bcca
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], edx
call fcn.00428541
push 0x69e
sub esp, 0x18
mov byte [ebp - 4], 0x28
mov ecx, esp
push 0x6c6e50
call fcn.0040f32f
push 0x436458
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x26
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0xef
sub esp, 0x18
mov byte [ebp - 4], 0x2b
mov ecx, esp
push 0x6c6e64
call fcn.0040f32f
push 0x4368f3
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x29
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0x170
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, esp
push 0x6c6e74
call fcn.0040f32f
push 0x4368c9
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x2c
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0x6e6
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov ecx, esp
push 0x6c6e84
call fcn.0040f32f
push 0x4364a3
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x2f
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0x6ea
sub esp, 0x18
mov byte [ebp - 4], 0x34
mov ecx, esp
push 0x6c6eac
call fcn.0040f32f
push 0x43666b
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x32
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0x741
sub esp, 0x18
mov byte [ebp - 4], 0x37
mov ecx, esp
push 0x6c6ec8
call fcn.0040f32f
push 0x4360d9
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x35
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0x746
sub esp, 0x18
mov byte [ebp - 4], 0x3a
mov ecx, esp
push 0x6c6ed4
call fcn.0040f32f
push 0x436442
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x38
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0x21
sub esp, 0x18
mov byte [ebp - 4], 0x3d
mov ecx, esp
push 0x6c6efc
call fcn.0040f32f
push 0x435d33
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x3b
call fcn.0042a351
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004285f6
push 0x757
sub esp, 0x18
mov byte [ebp - 4], 0x40
mov ecx, esp
push 0x6c6ee8
call fcn.0040f32f
push 0x4367aa
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3e
call fcn.0042a351
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0x41
push eax
lea esi, [edi + 0x94]
lea eax, [ebp - 0x804]
mov dword [ebp - 0x10], esi
push eax
mov ecx, esi
call fcn.004293f3
or dword [ebp - 4], 0xffffffff
push fcn.0042a947
push 0x16
push 0x5c
pop eax
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.0064233d
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
inc eax
shl eax, 4
push eax
call fcn.00460621
mov dword [edi + 0x90], eax
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x42c058
mov ecx, ebx
mov edx, ebx
mov esi, dword [esi]
mov edi, dword [edi + 0x90]
add esi, 0x4c
add esi, edx
add edi, ecx
push 0x5c
inc ebx
add ecx, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x10]
pop edi
add edx, edi
mov dword [ebp - 0x14], edx
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv edi
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x1c]
cmp ebx, eax
jb 0x42c024
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret