Function at 0x425e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x78bd58]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x40]
cmp eax, dword [ecx + 8]
jbe 0x4265dc
sub esp, 0xc0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00426e90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [0x78c700], eax
mov dword [0x78c704], ecx
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0xe0]
mov edx, dword [eax + 0xe4]
mov ebx, dword [esp + 0xc8]
sub ebx, ecx
mov dword [esp + 0x80], ebx
mov ecx, dword [esp + 0xcc]
sbb ecx, edx
mov dword [esp + 0x84], ecx
test ecx, ecx
setg dl
xchg ebp, ebx
sete bl
xchg ebp, ebx
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
and esi, ebp
or esi, edx
xchg esi, eax
mov byte [esp + 0x17], al
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x425ee6
movsd xmm1, qword [0x621a30]
jmp 0x425f7f
mov edx, eax
mov eax, ebx
mov ebp, dword [esp + 0xd0]
mov esi, edx
mul ebp
mov dword [esp + 0xa4], eax
mov edi, ebp
imul ebp, ecx
add edx, ebp
sar edi, 0x1f
imul edi, ebx
add edx, edi
mov dword [esp + 0xa0], edx
lea edi, [esi + 0xc0]
mov dword [esp], edi
call fcn.00406930
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00467be0
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00467be0
movsd xmm0, qword [esp + 0x98]
divsd xmm0, qword [esp + 8]
movsd xmm1, qword [0x621a30]
addsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd qword [esp + 0x60], xmm1
lea ecx, [eax + 0x68]
mov dword [esp + 0xbc], ecx
mov dword [esp], ecx
call fcn.00406ab0
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov ebx, dword [esp + 8]
cmp dword [esp + 4], ecx
setbe cl
cmp ebx, edx
sete dl
setb bl
and edx, ecx
or ebx, edx
test bl, bl
jne 0x4261cb
movzx ecx, byte [esp + 0x17]
test cl, cl
jne 0x425fd4
xorps xmm0, xmm0
jmp 0x42606d
mov ecx, eax
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0xd0]
mov ebx, edx
mov ebp, eax
mul edx
mov dword [esp + 0xa4], eax
mov esi, dword [esp + 0x84]
imul esi, ebx
add edx, esi
sar ebx, 0x1f
imul ebp, ebx
add edx, ebp
mov dword [esp + 0xa0], edx
lea ebx, [ecx + 0xd8]
mov dword [esp], ebx
call fcn.00406930
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00467be0
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00467be0
movsd xmm0, qword [esp + 0x98]
divsd xmm0, qword [esp + 8]
mov eax, dword [esp + 0xc4]
movsd xmm1, qword [esp + 0x60]
addsd xmm0, xmm1
movsd qword [esp + 0x98], xmm0
movsd xmm2, qword [0x621680]
subsd xmm2, xmm1
movsd qword [esp + 0x90], xmm2
lea ecx, [eax + 0xa0]
mov dword [esp + 0xb8], ecx
lea edx, [eax + 0xa8]
mov dword [esp + 0xb4], edx
lea ebx, [eax + 0xb0]
mov dword [esp + 0xb0], ebx
mov dword [esp], ecx
call fcn.00406930
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.00406930
mov eax, dword [esp + 4]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.00406930
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call fcn.00406ab0
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x34]
add esi, edi
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
adc edi, eax
mov eax, dword [esp + 0x30]
add esi, eax
mov dword [esp + 0x68], esi
mov eax, dword [esp + 0x54]
adc edi, eax
mov dword [esp + 0x6c], edi
sub ebx, ecx
mov dword [esp], ebx
sbb ebp, edx
mov dword [esp + 4], ebp
call fcn.00467cb0
movsd xmm0, qword [esp + 0x98]
mulsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.00467be0
movsd xmm0, qword [esp + 0x90]
mulsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0x98]
divsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd xmm0, qword [eax + 0x20]
movsd qword [eax + 0x20], xmm1
xor ecx, ecx
jmp 0x4261d3
add esp, 0xc0
ret
inc ecx
cmp ecx, 4
jge 0x4261f0
movsd xmm2, qword [eax + ecx*8 + 0x28]
movsd xmm3, qword [eax + 0x20]
ucomisd xmm2, xmm3
jbe 0x4261d2
movsd qword [eax + 0x20], xmm2
jmp 0x4261d2
movsd qword [esp + 0x78], xmm1
movsd qword [esp + 0x70], xmm0
lea ecx, [eax + 0x28]
mov dword [esp], ecx
lea ecx, [eax + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
call fcn.00470810
movsd xmm0, qword [esp + 0x78]
mov eax, dword [esp + 0xc4]
movsd qword [eax + 0x40], xmm0
mov ecx, dword [0x78c138]
test ecx, ecx
jle 0x4265d5
call fcn.0043fbd0
call fcn.0043fbd0
lea eax, [0x5dac5a]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00440440
movsd xmm0, qword [esp + 0x60]
movsd xmm1, qword [0x621aa8]
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00440260
lea eax, [0x5dac61]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00440440
mov dword [esp], 0x19
mov dword [esp + 4], 0
call fcn.00440260
lea eax, [0x5dbeaa]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00440440
call fcn.0043fc30
mov eax, dword [esp + 0xc4]
lea ecx, [eax + 0x80]
mov dword [esp + 0xac], ecx
lea edx, [eax + 0x90]
mov dword [esp + 0xa8], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
call fcn.00406930
mov eax, dword [esp + 4]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.00406930
mov eax, dword [esp + 4]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.00406930
mov eax, dword [esp + 4]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xac]
mov dword [esp], edx
call fcn.00406ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00406ab0
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x78]
mov dword [esp + 0xa4], ecx
mov edx, dword [eax + 0x7c]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x1c], ebx
mov ebp, dword [esp + 8]
mov dword [esp + 0x40], ebp
call fcn.0043fbd0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.00440260
lea eax, str.___SM____CZyi_____tvrRuUeEaAlLsS01bBoOxX_nNiIfFpP:_01__.2500xd__M___________n__s____Pn___n__n___n__t__LlLtLuMnCcCfCoCsLmLoMcMeNdNlNoPcPdPePfPiPoPsScSkSmSoZlZpZsYiip53_:____nid___q_vjsoreqgegtleltne_sif__dD_sSwWE:__inil01_______.__125625nanNaNSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecUTCEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614_mStdDltzeddiegdbkdbHxDdbghxdSAEmdbdbxtcpgetregNUL:_EOFintmapptr...finobjgc__:_gp___in__n___n_____P__MPC___end___and_:_npc__GHanLaoMroNkoVaicgodnsudpftpssh::1setadxaesshaavxfmanet_:_TTLlennot:_____.exe.lnkFPStrueeEpPopenreadfileseeksyncpipeStat3125Atoi_InfInfJuneJulyEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDT_as_hour_in_dumppeekhttpkgdbmdbgwmicpathname.com.bat.cmdboolint8uintchanfunccallkindArgs_on_Callallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp_gp_mp__mquitbindAhomChamKawiLisuMiaoModiNewaThaiTotoicmpigmpftpspop3smtpmdnsdial__r_t_nunix.ps1ermssse3avx2bmi1bmi2bitsNameTypehtmlelsewith__s___t_r_n_s_scap_____failErrorfalse_nil_svqxXchdirwritechmodchowncloseLstat1562578125MarchApril053004300545063003300845103012451345_0930monthLocaldnspyilspydebugILSpypizzacrackida__brutejamesproxymodelqueryvirusBrunoint16int32int64uint8arrayslice_and_kinddefersweeptestRtestWexecWexecRschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tab_top_...___fp:ntohsGreekAdlamBamumBatakBuhidDograKhmerLatinLimbuNushuOghamOriyaOsageRunicTakriTamilfileshttpsimap2imap3imapspop3shoststoastshort_FileInts:Ptrs:sse41sse42ssse3__at_no_IPClassbreak.eEpPindexprintblockrangeinputmatchrune_Hello_StringFormat__byte_for_stringreadatremove390625SundayMondayFridayAugustUTC_11UTC_02UTC_08UTC_09UTC12UTC13minutesecondx32dbgpc_retCentoswindbgdbgclrde4dotpepperghidrahackerx96dbgfolderprl_sfprl_tgMillergeorgevmwareERROR:exec:_uint16uint32uint64structchan____chan_Valuesysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_mnil_base_GetACPhangupkilledlistensocketCommonArabicBrahmiCarianChakmaCopticGothicHangulHatranHebrewKaithiKhojkiLepchaLycianLydianRejangSyriacTai_LeTangsaTangutTeluguThaanaWanchoYezidinetdnsdomaingophertelnet.localreturn.onionsendtoBypass__val_rdtscppopcntcmd_goheaderAnswerLengthprintf___
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00440440
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.00440260
lea eax, str.___SM____CZyi_____tvrRuUeEaAlLsS01bBoOxX_nNiIfFpP:_01__.2500xd__M___________n__s____Pn___n__n___n__t__LlLtLuMnCcCfCoCsLmLoMcMeNdNlNoPcPdPePfPiPoPsScSkSmSoZlZpZsYiip53_:____nid___q_vjsoreqgegtleltne_sif__dD_sSwWE:__inil01_______.__125625nanNaNSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecUTCEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614_mStdDltzeddiegdbkdbHxDdbghxdSAEmdbdbxtcpgetregNUL:_EOFintmapptr...finobjgc__:_gp___in__n___n_____P__MPC___end___and_:_npc__GHanLaoMroNkoVaicgodnsudpftpssh::1setadxaesshaavxfmanet_:_TTLlennot:_____.exe.lnkFPStrueeEpPopenreadfileseeksyncpipeStat3125Atoi_InfInfJuneJulyEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDT_as_hour_in_dumppeekhttpkgdbmdbgwmicpathname.com.bat.cmdboolint8uintchanfunccallkindArgs_on_Callallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp_gp_mp__mquitbindAhomChamKawiLisuMiaoModiNewaThaiTotoicmpigmpftpspop3smtpmdnsdial__r_t_nunix.ps1ermssse3avx2bmi1bmi2bitsNameTypehtmlelsewith__s___t_r_n_s_scap_____failErrorfalse_nil_svqxXchdirwritechmodchowncloseLstat1562578125MarchApril053004300545063003300845103012451345_0930monthLocaldnspyilspydebugILSpypizzacrackida__brutejamesproxymodelqueryvirusBrunoint16int32int64uint8arrayslice_and_kinddefersweeptestRtestWexecWexecRschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tab_top_...___fp:ntohsGreekAdlamBamumBatakBuhidDograKhmerLatinLimbuNushuOghamOriyaOsageRunicTakriTamilfileshttpsimap2imap3imapspop3shoststoastshort_FileInts:Ptrs:sse41sse42ssse3__at_no_IPClassbreak.eEpPindexprintblockrangeinputmatchrune_Hello_StringFormat__byte_for_stringreadatremove390625SundayMondayFridayAugustUTC_11UTC_02UTC_08UTC_09UTC12UTC13minutesecondx32dbgpc_retCentoswindbgdbgclrde4dotpepperghidrahackerx96dbgfolderprl_sfprl_tgMillergeorgevmwareERROR:exec:_uint16uint32uint64structchan____chan_Valuesysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_mnil_base_GetACPhangupkilledlistensocketCommonArabicBrahmiCarianChakmaCopticGothicHangulHatranHebrewKaithiKhojkiLepchaLycianLydianRejangSyriacTai_LeTangsaTangutTeluguThaanaWanchoYezidinetdnsdomaingophertelnet.localreturn.onionsendtoBypass__val_rdtscppopcntcmd_goheaderAnswerLengthprintf___
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00440440
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
call fcn.00440260
lea eax, [0x5db4aa]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00440440
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x44]
adc ecx, edx
mov edx, dword [esp + 0x1c]
add eax, edx
mov dword [esp], eax
mov eax, dword [esp + 0x40]
adc ecx, eax
mov dword [esp + 4], ecx
call fcn.00440130
lea eax, [0x5db4b3]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00440440
call fcn.0043fc30
nop
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call fcn.00406ab0
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xa4], ecx
mov edx, dword [eax + 0x5c]
mov dword [esp + 0xa0], edx
mov ebx, dword [eax + 0x60]
mov dword [esp + 0x8c], ebx
mov eax, dword [eax + 0x64]
mov dword [esp + 0x88], eax
mov ebp, dword [esp + 4]
mov dword [esp + 0x18], ebp
mov esi, dword [esp + 8]
mov dword [esp + 0x3c], esi
call fcn.0043fbd0
lea eax, [0x5da2ce]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00440440
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], eax
call fcn.00440130
lea eax, [0x5da8e2]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00440440
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.00440130
lea eax, [0x5dc4ce]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00440440
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x8c]
sub eax, ecx
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x88]
sbb eax, ecx
mov dword [esp + 4], eax
call fcn.00440260
lea eax, [0x5dc4da]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00440440
movsd xmm0, qword [esp + 0x70]
movsd qword [esp], xmm0
call fcn.0043fe80
lea eax, [0x5da095]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00440440
call fcn.0043fc30
call fcn.0043fbd0
call fcn.0043fde0
call fcn.0043fc30
mov eax, dword [0x78bd58]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
movzx ecx, byte [eax + 0x8b]
lea edx, [ecx - 1]
nop
mov byte [eax + 0x8b], dl
cmp cl, 1
jne 0x4265d5
nop
nop
lea eax, [0x78bcd4]
mov dword [esp], eax
call fcn.0040ef00
add esp, 0xc0
ret
call fcn.0046eae0
jmp fcn.00425e40