Function at 0x429976
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x692fe0
call fcn.006375a8
sub esp, 0x7f8
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
push 0x42a
mov dword [ebp - 0x1c], edi
mov dword [edi + 0x88], ebx
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0x42b
mov dword [ebp - 4], ebx
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00427f43
push 0x499
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push str.wk2warning
call fcn.0040d4cf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
push 0x430c50
call fcn.0042851d
sub esp, 0x18
mov dword [ebp - 4], 2
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], 7
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429a16
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x42e
mov byte [ebp - 4], 3
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0xed
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push str.welcome
call fcn.0040d4cf
push 0x43497d
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 2
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429a7c
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x809
mov byte [ebp - 4], 6
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0x71b
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
push str.upgradewelcome
call fcn.0040d4cf
push 0x434019
lea ecx, [ebp - 0x74c]
mov byte [ebp - 4], 5
call fcn.0042851d
push 0x427
mov byte [ebp - 4], 8
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00427f43
push 0x428
mov byte [ebp - 4], 9
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0x23
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push str.scamwarn
call fcn.0040d4cf
push 0x43463f
lea ecx, [ebp - 0x6f0]
mov byte [ebp - 4], 8
call fcn.0042851d
push 0x424
mov byte [ebp - 4], 0xb
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00427f43
push 0x425
mov byte [ebp - 4], 0xc
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0xf0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
push 0x6b8474
call fcn.0040d4cf
push 0x434323
lea ecx, [ebp - 0x694]
mov byte [ebp - 4], 0xb
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429ba7
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x801
mov byte [ebp - 4], 0xf
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0x71c
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push str.seamlessupdating
call fcn.0040d4cf
push 0x43403b
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0xe
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429c0a
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x802
mov byte [ebp - 4], 0x12
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0x71d
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push str.welcomeseamless
call fcn.0040d4cf
push 0x43402a
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x11
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429c6d
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x41c
mov byte [ebp - 4], 0x15
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0x34
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
push str.basicsetup
call fcn.0040d4cf
push 0x4292b9
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0x14
call fcn.0042851d
push 0x41e
mov byte [ebp - 4], 0x17
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00427f43
push 0x41f
mov byte [ebp - 4], 0x18
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0xf2
sub esp, 0x18
mov byte [ebp - 4], 0x19
mov ecx, esp
push str.filetypes
call fcn.0040d4cf
push 0x4341c4
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x17
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429d34
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429d4f
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x101
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
push str.firsttorrent
call fcn.0040d4cf
push fcn.0042d97b
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x1a
call fcn.0042851d
push 0x41a
mov byte [ebp - 4], 0x1d
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00427f43
push 0x41b
mov byte [ebp - 4], 0x1e
call fcn.00588778
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00427f43
push 0x69f
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push str.autoupdate
call fcn.0040d4cf
push 0x433f06
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x1d
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429dfd
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429e18
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x717
sub esp, 0x18
mov byte [ebp - 4], 0x22
mov ecx, esp
push str.offer_spigot_special
call fcn.0040d4cf
push 0x43468a
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x20
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429e62
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429e7d
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x69d
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
push str.offer_google
call fcn.0040d4cf
push fcn.004341e5
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x23
call fcn.0042851d
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x429ec7
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], edx
call fcn.0042670d
push 0x69e
sub esp, 0x18
mov byte [ebp - 4], 0x28
mov ecx, esp
push str.offer_non_google
call fcn.0040d4cf
push 0x434615
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x26
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0xef
sub esp, 0x18
mov byte [ebp - 4], 0x2b
mov ecx, esp
push str.offer_yandex
call fcn.0040d4cf
push 0x434ab0
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x29
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0x170
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, esp
push str.yandex_search
call fcn.0040d4cf
push 0x434a86
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x2c
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0x6e6
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov ecx, esp
push str.offer_spigot
call fcn.0040d4cf
push 0x434660
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x2f
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0x6ea
sub esp, 0x18
mov byte [ebp - 4], 0x34
mov ecx, esp
push str.offer_accept_decline_spigot
call fcn.0040d4cf
push 0x434828
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x32
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0x741
sub esp, 0x18
mov byte [ebp - 4], 0x37
mov ecx, esp
push str.offer_imesh
call fcn.0040d4cf
push 0x434296
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x35
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0x746
sub esp, 0x18
mov byte [ebp - 4], 0x3a
mov ecx, esp
push str.offer_mediacaster
call fcn.0040d4cf
push 0x4345ff
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x38
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0x21
sub esp, 0x18
mov byte [ebp - 4], 0x3d
mov ecx, esp
push str.offer_ask
call fcn.0040d4cf
push 0x433ef0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x3b
call fcn.0042851d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.004267c2
push 0x757
sub esp, 0x18
mov byte [ebp - 4], 0x40
mov ecx, esp
push str.offer_spigotyandex
call fcn.0040d4cf
push 0x434967
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3e
call fcn.0042851d
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0x41
push eax
lea esi, [edi + 0x8c]
lea eax, [ebp - 0x804]
mov dword [ebp - 0x10], esi
push eax
mov ecx, esi
call fcn.004275bf
or dword [ebp - 4], 0xffffffff
push fcn.00486a5f
push 0x16
push 0x5c
pop eax
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.0063721e
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
inc eax
shl eax, 4
push eax
call fcn.0045e489
mov dword [edi + 0x88], eax
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x42a255
mov ecx, ebx
mov edx, ebx
mov esi, dword [esi]
mov edi, dword [edi + 0x88]
add esi, 0x4c
add esi, edx
add edi, ecx
push 0x5c
inc ebx
add ecx, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x10]
pop edi
add edx, edi
mov dword [ebp - 0x14], edx
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv edi
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x1c]
cmp ebx, eax
jb 0x42a221
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret