Function at 0x426a6d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x66dc9c
call fcn.0062921c
sub esp, 0x7f8
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
push 0x42a
mov dword [ebp - 0x1c], edi
mov dword [edi + 0x88], ebx
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0x42b
mov dword [ebp - 4], ebx
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00424ff1
push 0x499
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push str.wk2warning
call fcn.0040a58f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
push 0x42dbc0
call fcn.004255ef
sub esp, 0x18
mov dword [ebp - 4], 2
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], 7
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426b0d
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x42e
mov byte [ebp - 4], 3
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0xed
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push str.welcome
call fcn.0040a58f
push 0x4318ee
lea ecx, [ebp - 0x7a8]
mov byte [ebp - 4], 2
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426b73
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x809
mov byte [ebp - 4], 6
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0x71b
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
push str.upgradewelcome
call fcn.0040a58f
push 0x430f8a
lea ecx, [ebp - 0x74c]
mov byte [ebp - 4], 5
call fcn.004255ef
push 0x427
mov byte [ebp - 4], 8
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424ff1
push 0x428
mov byte [ebp - 4], 9
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0x23
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push str.scamwarn
call fcn.0040a58f
push 0x4315b0
lea ecx, [ebp - 0x6f0]
mov byte [ebp - 4], 8
call fcn.004255ef
push 0x424
mov byte [ebp - 4], 0xb
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424ff1
push 0x425
mov byte [ebp - 4], 0xc
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0xf0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
push 0x69017c
call fcn.0040a58f
push 0x431294
lea ecx, [ebp - 0x694]
mov byte [ebp - 4], 0xb
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop esi
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426c9e
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x801
mov byte [ebp - 4], 0xf
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0x71c
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push str.seamlessupdating
call fcn.0040a58f
push 0x430fac
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0xe
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426d01
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x802
mov byte [ebp - 4], 0x12
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0x71d
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push str.welcomeseamless
call fcn.0040a58f
push 0x430f9b
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x11
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
mov dword [eax + 0x14], esi
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426d64
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x41c
mov byte [ebp - 4], 0x15
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0x34
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
push str.basicsetup
call fcn.0040a58f
push 0x4263b0
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0x14
call fcn.004255ef
push 0x41e
mov byte [ebp - 4], 0x17
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424ff1
push 0x41f
mov byte [ebp - 4], 0x18
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0xf2
sub esp, 0x18
mov byte [ebp - 4], 0x19
mov ecx, esp
push str.filetypes
call fcn.0040a58f
push 0x431135
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x17
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426e2b
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426e46
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x101
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
push str.firsttorrent
call fcn.0040a58f
push fcn.0042a9fa
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x1a
call fcn.004255ef
push 0x41a
mov byte [ebp - 4], 0x1d
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.00424ff1
push 0x41b
mov byte [ebp - 4], 0x1e
call fcn.0057b788
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00424ff1
push 0x69f
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push str.autoupdate
call fcn.0040a58f
push 0x430e77
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x1d
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426ef4
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426f0f
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x717
sub esp, 0x18
mov byte [ebp - 4], 0x22
mov ecx, esp
push str.offer_spigot_special
call fcn.0040a58f
push 0x4315fb
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x20
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426f59
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x14], esp
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426f74
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
push 0x69d
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
push str.offer_google
call fcn.0040a58f
push fcn.00431156
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x23
call fcn.004255ef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x18], esp
push 7
pop edx
mov dword [eax + 0x14], edx
cmp dword [eax + 0x14], 8
mov dword [eax + 0x10], ebx
jb 0x426fbe
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], edx
call fcn.004237b6
push 0x69e
sub esp, 0x18
mov byte [ebp - 4], 0x28
mov ecx, esp
push str.offer_non_google
call fcn.0040a58f
push 0x431586
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x26
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0xef
sub esp, 0x18
mov byte [ebp - 4], 0x2b
mov ecx, esp
push str.offer_yandex
call fcn.0040a58f
push 0x431a21
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x29
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0x170
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, esp
push str.yandex_search
call fcn.0040a58f
push 0x4319f7
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0x2c
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0x6e6
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov ecx, esp
push str.offer_spigot
call fcn.0040a58f
push 0x4315d1
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x2f
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0x6ea
sub esp, 0x18
mov byte [ebp - 4], 0x34
mov ecx, esp
push str.offer_accept_decline_spigot
call fcn.0040a58f
push 0x431799
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x32
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0x741
sub esp, 0x18
mov byte [ebp - 4], 0x37
mov ecx, esp
push str.offer_imesh
call fcn.0040a58f
push 0x431207
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x35
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0x746
sub esp, 0x18
mov byte [ebp - 4], 0x3a
mov ecx, esp
push str.offer_mediacaster
call fcn.0040a58f
push 0x431570
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x38
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0x21
sub esp, 0x18
mov byte [ebp - 4], 0x3d
mov ecx, esp
push str.offer_ask
call fcn.0040a58f
push 0x430e61
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x3b
call fcn.004255ef
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0042386b
push 0x757
sub esp, 0x18
mov byte [ebp - 4], 0x40
mov ecx, esp
push str.offer_spigotyandex
call fcn.0040a58f
push 0x4318d8
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3e
call fcn.004255ef
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0x41
push eax
lea esi, [edi + 0x8c]
lea eax, [ebp - 0x804]
mov dword [ebp - 0x10], esi
push eax
mov ecx, esi
call fcn.0042468f
or dword [ebp - 4], 0xffffffff
push fcn.0048375f
push 0x16
push 0x5c
pop eax
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.0062923c
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
inc eax
shl eax, 4
push eax
call fcn.0045b411
mov dword [edi + 0x88], eax
mov eax, dword [esi + 4]
sub eax, dword [esi]
push 0x5c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x42734c
mov ecx, ebx
mov edx, ebx
mov esi, dword [esi]
mov edi, dword [edi + 0x88]
add esi, 0x4c
add esi, edx
add edi, ecx
push 0x5c
inc ebx
add ecx, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x10]
pop edi
add edx, edi
mov dword [ebp - 0x14], edx
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv edi
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x1c]
cmp ebx, eax
jb 0x427318
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret