Function at 0x427440
Capabilities:
Hide graphical window

Disassembly:
push ebp
sub esp, 0x60
mov eax, 0x66dd1e
call fcn.0062921c
sub esp, 0x90
push ebx
push esi
push edi
mov ebx, ecx
xor edi, edi
push edi
push dword [ebp + 0x6c]
mov dword [ebp + 0x5c], ebx
lea ecx, [ebx + 0x30]
call fcn.00585e12
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x55e
push dword [ebx + 4]
call esi
mov ebx, dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x691a1c
push eax
mov dword [ebp + 0x58], eax
call ebx
mov ecx, dword [ebp + 0x5c]
push 0x19
call fcn.0042cf7f
mov eax, dword [ebp + 0x5c]
push 0x55f
push dword [eax + 4]
call esi
push 1
push eax
mov dword [ebp + 0x60], eax
call dword [sym.imp.USER32.dll_EnableWindow]
imul edx, dword [ebp + 0x6c], 0x5c
mov eax, dword [ebp + 0x5c]
mov ecx, dword [eax + 0x8c]
mov esi, dword [edx + ecx + 0x4c]
cmp esi, 0x717
jne 0x4274fa
push 0x625
lea ecx, [eax + 0x30]
call fcn.0057def2
test al, al
jne 0x42756e
mov ecx, dword [ebp + 0x5c]
push 0x6db
lea ecx, [ecx + 0x30]
call fcn.0057def2
test al, al
jne 0x42756e
push edi
push dword [ebp + 0x60]
call dword [sym.imp.USER32.dll_EnableWindow]
cmp esi, 0xf0
jne 0x42750c
push 0x419
jmp 0x4275ad
cmp esi, 0x6e6
je 0x4275be
cmp esi, 0x170
je 0x4275be
cmp esi, 0x741
je 0x4275be
cmp esi, 0x746
je 0x4275be
cmp esi, 0x69d
je 0x4275be
cmp esi, 0x757
je 0x4275be
cmp esi, 0x21
je 0x4275be
cmp esi, 0x6ea
jne 0x42756e
mov esi, dword [ebp + 0x60]
push str.Get_Paid
push esi
call ebx
push 0x691ab8
push dword [ebp + 0x58]
jmp 0x4275b7
push dword [ebp + 0x6c]
mov ecx, dword [ebp + 0x5c]
call fcn.00435644
cmp eax, 0xffffffff
jne 0x4275a8
push 0x420
call fcn.0057b788
mov esi, dword [ebp + 0x60]
push eax
push esi
call ebx
cmp byte [0x748045], 0
jne 0x427879
push 0x429
call fcn.0057b788
jmp 0x4275b5
push 0x423
call fcn.0057b788
mov esi, dword [ebp + 0x60]
push eax
push esi
call ebx
jmp 0x427879
sub esi, 0x21
je 0x427712
sub esi, 0x14f
je 0x4276e7
sub esi, 0x52d
je 0x4276c5
sub esi, 0x49
je 0x427660
sub esi, 0x5b
je 0x42763e
sub esi, 5
je 0x42761c
sub esi, 0x11
jne 0x427861
push str.spigot_yandex
lea ecx, [ebp + 0x18]
call fcn.0040a58f
lea eax, [ebp + 0x18]
mov dword [ebp - 4], 5
push eax
call fcn.0042a790
lea ecx, [ebp + 0x18]
jmp 0x4276b2
push str.ask_surf
lea ecx, [ebp]
call fcn.0040a58f
lea eax, [ebp]
mov dword [ebp - 4], 4
push eax
call fcn.0042a790
lea ecx, [ebp]
jmp 0x4276b2
push str.imesh
lea ecx, [ebp - 0x24]
call fcn.0040a58f
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 3
push eax
call fcn.0042a790
lea ecx, [ebp - 0x24]
jmp 0x4276b2
push str.spigot
lea ecx, [ebp - 0x3c]
call fcn.0040a58f
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], edi
push eax
call fcn.0042a790
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
push edi
push 1
mov esi, eax
call fcn.0040abbf
test esi, esi
jne 0x427792
push str.conduit_search
lea ecx, [ebp - 0x54]
call fcn.0040a58f
lea eax, [ebp - 0x54]
mov dword [ebp - 4], 1
push eax
call fcn.0042a790
lea ecx, [ebp - 0x54]
or dword [ebp - 4], 0xffffffff
mov esi, eax
push edi
push 1
call fcn.0040abbf
jmp 0x42778a
push str.conduit_google
lea ecx, [ebp - 0x6c]
call fcn.0040a58f
lea eax, [ebp - 0x6c]
mov dword [ebp - 4], 8
push eax
call fcn.0042a790
lea ecx, [ebp - 0x6c]
jmp 0x4276b2
push 0x68ed74
lea ecx, [ebp - 0x84]
call fcn.0040a58f
lea eax, [ebp - 0x84]
mov dword [ebp - 4], 2
push eax
call fcn.0042a790
lea ecx, [ebp - 0x84]
jmp 0x4276b2
push 0x68eda4
lea ecx, [ebp - 0x9c]
call fcn.0040a58f
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 6
push eax
call fcn.0042a790
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
push edi
push 1
mov esi, eax
call fcn.0040abbf
sub esp, 0x18
mov ecx, esi
mov eax, esp
mov dword [ebp + 0x48], esp
push edi
push str.subtitle
push eax
call fcn.00459834
sub esp, 0x18
mov dword [ebp - 4], 7
mov eax, esp
mov ecx, esi
push edi
push str.title
push eax
call fcn.00459834
mov ecx, dword [ebp + 0x5c]
or dword [ebp - 4], 0xffffffff
push str.offer_ask
call fcn.0043bccf
test esi, esi
je 0x427861
push 0xffffffffffffffff
push str.buttons
mov ecx, esi
call fcn.00459645
mov edx, eax
mov ecx, edi
mov dword [ebp + 0x54], edx
mov dword [ebp + 0x4c], ecx
test edx, edx
je 0x4277bd
mov ecx, edx
call fcn.0045952c
mov edx, dword [ebp + 0x54]
mov ecx, eax
mov dword [ebp + 0x4c], ecx
mov eax, edi
mov dword [ebp + 0x50], eax
test ecx, ecx
jle 0x427876
push eax
mov ecx, edx
call fcn.00459564
mov esi, eax
push edi
push str.ordinal
mov ecx, esi
call fcn.00459601
push edi
mov dword [ebp + 0x48], eax
mov ecx, esi
push 0x691a3c
lea eax, [ebp + 0x30]
push eax
call fcn.00459834
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x427801
lea eax, [ebp + 0x30]
push eax
push str.button_label:__s
call fcn.00409944
mov eax, dword [ebp + 0x48]
add esp, 8
sub eax, edi
je 0x42784c
sub eax, 1
jne 0x42782d
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x427827
lea eax, [ebp + 0x30]
push eax
push dword [ebp + 0x58]
call ebx
mov esi, dword [ebp + 0x60]
push edi
push 1
lea ecx, [ebp + 0x30]
call fcn.0042386b
mov eax, dword [ebp + 0x50]
mov edx, dword [ebp + 0x54]
inc eax
mov dword [ebp + 0x50], eax
cmp eax, dword [ebp + 0x4c]
jl 0x4277ca
jmp 0x427879
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
jae 0x427858
lea eax, [ebp + 0x30]
mov esi, dword [ebp + 0x60]
push eax
push esi
call ebx
jmp 0x427830
mov esi, dword [ebp + 0x60]
push str.Accept_Offer
push esi
call ebx
push str.Decline_Offer
jmp 0x427569
mov esi, dword [ebp + 0x60]
push dword [ebp + 0x6c]
mov ebx, dword [ebp + 0x5c]
mov ecx, ebx
call fcn.0043afd5
xor ecx, ecx
test eax, eax
setns cl
push ecx
push dword [ebp + 0x58]
call dword [sym.imp.USER32.dll_EnableWindow]
push dword [ebp + 0x6c]
mov ecx, ebx
call fcn.0043afd5
test eax, eax
js 0x4278a8
push 5
pop edi
push edi
push dword [ebp + 0x58]
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push esi
push 0x28
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x64]
pop ebp
ret 4