Function at 0x4293be
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x290
mov eax, 0x64c7a0
call fcn.005b47af
mov edi, ecx
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0xac]
push 2
call fcn.0053f192
lea eax, [ebp - 0x70]
xor ebx, ebx
push esi
push eax
mov dword [ebp - 4], ebx
call fcn.00414282
pop ecx
pop ecx
push ebx
push dword [ebp - 0x60]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], ebx
mov byte [ebp - 0x58], bl
call fcn.0040ea58
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0xac]
call fcn.0053f84c
lea ecx, [ebp - 0x120]
call fcn.005366a0
push ebx
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 3
call fcn.00539837
mov byte [ebp - 4], 4
cmp dword [ebp - 0x48], ebx
jne 0x4294ba
push 1
push 3
lea ecx, [ebp - 0x1ec]
call fcn.004078ff
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 5
jb 0x429463
mov esi, dword [esi]
push str.__file_read_error
push esi
lea eax, [ebp - 0x1dc]
push str.Cant_read_config_file
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.0040710b
pop ecx
pop ecx
lea eax, [ebp - 0x1ec]
push eax
push str.UserSettings::readFromJson
push 0x87
push str.D:_build6c589d3ff8507062_srccommonUserSettings.cpp
push ebx
call fcn.0040b02b
mov ecx, eax
call fcn.0041875b
lea ecx, [ebp - 0x1ec]
jmp 0x4295ab
push ebx
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x120]
call fcn.00537d37
test al, al
jne 0x4295b5
push ebx
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x120]
call fcn.00537d37
test al, al
jne 0x4295b5
push 1
push 3
lea ecx, [ebp - 0x29c]
call fcn.004078ff
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x120]
call fcn.005378d9
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 7
push eax
call fcn.00410293
pop ecx
pop ecx
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 8
jb 0x429536
mov esi, dword [esi]
push eax
push str.__file_parse_error:
push esi
lea eax, [ebp - 0x28c]
push str.Cant_read_config_file
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.0040710b
pop ecx
pop ecx
push eax
call fcn.00410ade
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.00409de7
push ebx
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.00409d92
lea eax, [ebp - 0x29c]
push eax
push str.UserSettings::readFromJson
push 0x91
push str.D:_build6c589d3ff8507062_srccommonUserSettings.cpp
push ebx
call fcn.0040b02b
mov ecx, eax
call fcn.0041875b
lea ecx, [ebp - 0x29c]
call fcn.0040843a
jmp 0x429e1d
mov al, byte [edi + 0x25]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 9
push eax
push str.service_enable
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.0053a442
movzx eax, al
mov ecx, edi
push eax
call fcn.0042a616
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x26]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
push str.protection_enable
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.0053a442
movzx eax, al
mov ecx, edi
push eax
call fcn.0042a5fa
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x27]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xd
push eax
push str.autorun
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0053a442
movzx eax, al
mov ecx, edi
push eax
call fcn.0042a533
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push 1
lea ecx, [ebp - 0x28]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
push str.minimizeToTray
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x28], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x29]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push eax
push str.autoScan
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.0053a442
movzx eax, al
mov ecx, edi
push eax
call fcn.0042a517
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x2a]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
push str.autoClean
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.0053a442
movzx eax, al
mov ecx, edi
push eax
call fcn.0042a4fb
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x48]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
push str.yandexHpMon
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x48], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x49]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
push str.yandexSsMon
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x49], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push ebx
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push eax
push str.yandexHpMonBr
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x4c], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push ebx
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
push eax
push str.yandexSsMonBr
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x50], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x7c]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
push str.yandexBrOffer
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x7c], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x7d]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
push str.yandexOfferDlg
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x7d], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push ebx
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
push str.paymentNumber
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x22
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x2c], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push ebx
lea ecx, [ebp - 0x28]
call fcn.00539721
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x28]
push eax
push str.emailOfferNumber
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x34], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push ebx
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
push str.yandexNumber
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x26
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x3c], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push ebx
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
push str.yandexShowNumber
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x28
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x44], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x55]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x29
push eax
push str.scanSchedulerEnabled
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.0053a442
mov byte [edi + 0x55], al
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push dword [edi + 0x58]
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
push eax
push str.scanSchedulerType
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x2c
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x58], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push dword [edi + 0x5c]
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2d
push eax
push str.scanSchedulerHourPeriod
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x5c], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push dword [edi + 0x60]
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
push eax
push str.scanSchedulerDailyTime
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x60], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x64]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
push str.scanSchedulerAutoClean
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x64], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push dword [edi + 0x68]
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x33
push eax
push str.updateSchedulerType
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x68], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push dword [edi + 0x6c]
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x35
push eax
push str.updateSchedulerHourPeriod
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x6c], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push dword [edi + 0x70]
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x37
push eax
push str.updateSchedulerDailyTime
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x38
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x70], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x74]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
lea ecx, [ebp - 0x28]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x39
push eax
push str.quarantineEnabled
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x3a
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x74], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
mov al, byte [edi + 0x75]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x124], al
push dword [ebp - 0x124]
call fcn.005398f9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3b
push eax
push str.quarantineRemoveEnabled
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.0053a442
lea ecx, [ebp - 0x40]
mov byte [edi + 0x75], al
call fcn.00539a16
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00539a16
push dword [edi + 0x78]
lea ecx, [ebp - 0x28]
call fcn.00539721
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
push eax
push str.quarantineRemovePeriod
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x13c]
call fcn.0053ae8b
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.0053a60f
lea ecx, [ebp - 0x40]
mov dword [edi + 0x78], eax
call fcn.00539a16
lea ecx, [ebp - 0x28]
call fcn.00539a16
mov bl, 1
lea ecx, [ebp - 0x13c]
call fcn.00539a16
lea ecx, [ebp - 0x120]
call fcn.0040c0cd
push 0
push 1
lea ecx, [ebp - 0x58]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.00409d92
lea ecx, [ebp - 0xac]
call fcn.0053f21c
mov al, bl
call fcn.005b4759
ret 4