Function at 0x42ec39
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x6693cb
call fcn.006313fc
sub esp, 0x254
push 1
call fcn.00429b50
push 0
mov dword [esp + 4], eax
call fcn.00429b50
mov ecx, dword [0x791908]
mov dword [esp + 8], eax
cmp ecx, 0xa4c2
je 0x42ec73
mov dword [0x73b058], ecx
push ebx
push ebp
push esi
push edi
push 0x804
call fcn.0045d923
mov ebp, eax
lea eax, [esp + 0x234]
push eax
call fcn.00592484
and dword [esp + 0x26c], 0
cmp dword [esp + 0x248], 0x10
mov eax, dword [esp + 0x234]
jae 0x42ecb0
lea eax, [esp + 0x234]
push eax
push 0x689848
push 0x7ff
push ebp
call fcn.00471605
add esp, 0x10
mov dword [ebp + 0x800], eax
call sub.KERNEL32.DLL_GetCurrentProcessId
mov ecx, dword [0x73b050]
xor ebx, ebx
cmp byte [0x73b002], bl
mov edi, eax
push 0xffffffffffffffff
push str.secondary_offers
mov dword [esp + 0x24], edi
sete bl
call fcn.0045bb6f
and dword [esp + 0x30], 0
mov esi, eax
mov dword [esp + 0x34], 0xf
mov byte [esp + 0x20], 0
mov byte [esp + 0x26c], 1
test esi, esi
je 0x42edc3
mov ecx, esi
call fcn.0045ba56
test eax, eax
je 0x42edc3
mov ecx, esi
xor edi, edi
call fcn.0045ba56
test eax, eax
je 0x42ed8c
push 0
push edi
mov ecx, esi
call fcn.0045bcde
push eax
lea eax, [esp + 0x250]
push 0x68c124
push eax
call fcn.00472228
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x278], 2
call fcn.00409c77
push 0
push 1
lea ecx, [esp + 0x254]
mov byte [esp + 0x274], 1
call fcn.0040a0e9
mov ecx, esi
inc edi
call fcn.0045ba56
cmp edi, eax
jb 0x42ed32
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x20]
dec eax
push eax
push 0
lea eax, [esp + 0x254]
push eax
call fcn.0043d015
push eax
lea ecx, [esp + 0x24]
call fcn.00409822
push 0
push 1
lea ecx, [esp + 0x254]
call fcn.0040a0e9
mov edi, dword [esp + 0x1c]
call fcn.00598955
cmp eax, 2
lea eax, [esp + 0x21c]
push 0
push eax
sete byte [esp + 0x1f]
call fcn.0046c95e
cmp dword [esp + 0x230], 0x10
mov eax, str.uTorrent
cdq
mov dword [esp + 0x3c], eax
mov eax, dword [0x746ee4]
mov dword [esp + 0x40], edx
cdq
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x21c]
mov byte [esp + 0x26c], 3
mov dword [esp + 0x38], str.cl_s
mov dword [esp + 0x44], str.v_Ld
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], str.h_s
jae 0x42ee33
lea eax, [esp + 0x21c]
cdq
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], str.w_X
call dword [sym.imp.KERNEL32.DLL_GetVersion]
and dword [esp + 0x64], 0
mov esi, 0x75efd8
mov ecx, dword [0x73b058]
mov dword [esp + 0x60], eax
xor eax, eax
cmp byte [esp + 0x17], al
mov dword [esp + 0x68], str.bu_Ld
setne al
mov dword [esp + 0x74], str.pr_Ld
cdq
mov dword [esp + 0x6c], eax
lea eax, [ecx - 0xa4c2]
neg eax
mov dword [esp + 0x70], edx
mov dword [esp + 0x80], str.cmp_Ld
sbb eax, eax
and eax, ecx
mov ecx, esi
cdq
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
call fcn.0046e26e
cdq
mov ecx, esi
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], edx
mov dword [esp + 0x8c], str.ocmp_Ld
call fcn.0046e37c
cdq
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x278]
mov dword [esp + 0x94], edx
push 0x150
mov dword [esp + 0x9c], 0x689848
mov eax, dword [eax*4 + 0x73b008]
cdq
mov dword [esp + 0xa0], eax
mov eax, edi
mov dword [esp + 0xa4], edx
cdq
mov dword [esp + 0xac], eax
mov eax, ebx
mov dword [esp + 0xb0], edx
xor ebx, ebx
cdq
mov dword [esp + 0xb8], eax
lea eax, [esp + 0xcc]
push ebx
push eax
mov dword [esp + 0xb0], str.pid_Ld
mov dword [esp + 0xbc], str.cau_Ld
mov dword [esp + 0xc4], edx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], ebx
call fcn.00635a30
add esp, 0xc
mov edi, ebx
cmp dword [esp + 0x38], ebx
je 0x42ef78
lea eax, [esp + 0x38]
lea eax, [eax + 0xc]
inc edi
cmp dword [eax], ebx
jne 0x42ef70
call fcn.004292fb
mov esi, eax
mov eax, dword [esp + 0x278]
cmp eax, 0x11
ja case.0x42ef8f.1
jmp dword [eax*4 + 0x42f479]
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.au_d
mov eax, dword [esp + 0x27c]
jmp 0x42f3c0
mov eax, dword [esp + 0x27c]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.installresult_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x280]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.exit_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x28c]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.au_u
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], ebx
jmp 0x42f3c9
imul esi, edi, 0xc
mov dword [esp + esi + 0x38], str.tbe_d
call fcn.0042d1bd
xor ebx, ebx
test al, al
setne bl
call fcn.0042dee7
mov ecx, dword [esp + 0x18]
movzx eax, al
neg eax
sbb eax, eax
or ecx, dword [esp + 0x10]
and eax, 2
and ecx, 1
shl ecx, 2
or eax, ecx
or eax, ebx
inc edi
cdq
mov dword [esp + esi + 0x3c], eax
mov eax, dword [esp + 0x10]
imul ecx, edi, 0xc
shl eax, 3
or eax, dword [esp + 0x18]
mov dword [esp + esi + 0x40], edx
cdq
mov dword [esp + ecx + 0x38], str.cd_d
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], edx
inc edi
xor ebx, ebx
jmp case.0x42ef8f.1
mov eax, dword [esp + 0x27c]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.tbofferresult_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x280]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + 0x10], edi
mov dword [esp + ecx + 0x38], str.exit_d
mov dword [esp + ecx + 0x3c], eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x3c]
mov dword [esp + ecx + 0x44], edx
push eax
call fcn.00425700
mov edi, dword [esp + 0x10]
imul ebx, edi, 0xc
mov dword [esp + ebx + 0x38], str.tb_s
test esi, esi
je 0x42f0db
push 0
push str.offer_id
mov ecx, esi
call fcn.0045bcaf
jmp 0x42f0e0
mov eax, 0x704768
cdq
mov dword [esp + ebx + 0x3c], eax
mov dword [esp + ebx + 0x40], edx
jmp 0x42f065
mov eax, dword [esp + 0x27c]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + 0x10], edi
mov dword [esp + ecx + 0x38], str.tbinstallresult_d
mov dword [esp + ecx + 0x3c], eax
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x3c]
mov dword [esp + ecx + 0x44], edx
push eax
call fcn.00425700
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x280]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.error_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x284]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
imul ebx, edi, 0xc
cdq
mov dword [esp + ecx + 0x38], str.msg_U
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], edx
mov dword [esp + ebx + 0x38], str.tb_s
test esi, esi
je 0x42f178
push 0
push str.offer_id
mov ecx, esi
call fcn.0045bcaf
jmp 0x42f17d
mov eax, 0x704768
inc edi
cdq
mov dword [esp + ebx + 0x3c], eax
mov eax, dword [esp + 0x288]
imul ecx, edi, 0xc
inc edi
mov dword [esp + ebx + 0x40], edx
xor ebx, ebx
cdq
mov dword [esp + ecx + 0x38], str.url_U
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x28c]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
mov dword [esp + ecx + 0x38], str.prog_u
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], ebx
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.t_U
mov eax, dword [esp + 0x290]
jmp 0x42f3c0
mov eax, dword [esp + 0x27c]
imul ecx, edi, 0xc
inc edi
imul esi, edi, 0xc
cdq
push ebx
push str.content_offer_id
mov dword [esp + ecx + 0x40], str.toroffer_d
mov dword [esp + ecx + 0x44], eax
mov dword [esp + ecx + 0x48], edx
mov ecx, dword [0x73b050]
mov dword [esp + esi + 0x40], str.torofferid_s
call fcn.0045bcaf
cdq
mov dword [esp + esi + 0x3c], eax
mov dword [esp + esi + 0x40], edx
jmp 0x42f3c9
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.shoffer_d
jmp 0x42efa1
mov eax, dword [esp + 0x284]
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.cancellastpage_U
jmp 0x42f3c0
mov eax, dword [esp + 0x27c]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.ServerOfferRetrieved_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
cmp dword [esp + 0x34], 0x10
mov dword [esp + ecx + 0x38], str.sec_offs_U
jae 0x42f3c0
lea eax, [esp + 0x20]
jmp 0x42f3c0
mov eax, dword [esp + 0x284]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.OfferError_U
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x288]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.OfferProvider_U
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.OfferType_U
jmp 0x42f1cb
mov eax, dword [esp + 0x288]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.OfferProvider_U
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x284]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.Offer_U
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.Accepted_d
jmp 0x42efa1
mov eax, dword [esp + 0x284]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.toroffername_s
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.torexecresult_d
jmp 0x42efa1
mov eax, dword [esp + 0x27c]
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.download_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x280]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.execute_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x284]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
cdq
mov dword [esp + ecx + 0x38], str.error_U
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x28c]
mov dword [esp + ecx + 0x40], edx
imul ecx, edi, 0xc
inc edi
mov dword [esp + ecx + 0x38], str.mismreturn_d
mov dword [esp + ecx + 0x3c], eax
mov eax, dword [esp + 0x288]
mov dword [esp + ecx + 0x40], ebx
imul ecx, edi, 0xc
mov dword [esp + ecx + 0x38], str.mismresult_U
cdq
mov dword [esp + ecx + 0x3c], eax
mov dword [esp + ecx + 0x40], edx
inc edi
imul ecx, edi, 0xc
mov eax, str.win32
cdq
inc edi
push 3
push edi
mov dword [esp + ecx + 0x40], str.view_s
mov dword [esp + ecx + 0x44], eax
lea eax, [esp + 0x40]
push eax
mov dword [esp + ecx + 0x4c], edx
mov eax, 0x800
mov ecx, dword [ebp + 0x800]
sub eax, ecx
push eax
lea eax, [ecx + ebp]
push eax
call fcn.0047f8c6
add dword [ebp + 0x800], eax
call fcn.0048215f
push ebp
call fcn.0042e0fc
lea eax, [esp + 0x218]
push eax
push ebx
push ebp
push 0x43066a
push ebx
push ebx
push str.InstallerStatsThread
call fcn.00466e60
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push ebx
push 1
lea ecx, [esp + 0x224]
call fcn.0040a0e9
push ebx
push 1
lea ecx, [esp + 0x28]
call fcn.0040a0e9
push ebx
push 1
lea ecx, [esp + 0x23c]
call fcn.0040a0e9
mov ecx, dword [esp + 0x264]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
leave
ret 0x1c