Function at 0x4036a0
Capabilities:
Contain obfuscated stackstrings
Reference google public dns server

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f10b7
mov eax, dword fs:[0]
push eax
push ecx
mov eax, dword [0x52c018]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 5
push str.0.5.9
mov ecx, 0x533990
mov dword [ebp - 0x10], 0x533990
mov dword [0x5339a0], 0
mov dword [0x5339a4], 0xf
mov byte [0x533990], 0
call fcn.00408530
mov dword [ebp - 4], 0
mov ecx, 0x5339a8
push 1
push 0x5126e0
mov dword [0x5339b8], 0
mov dword [0x5339bc], 0xf
mov byte [0x5339a8], 0
call fcn.00408530
mov byte [ebp - 4], 1
mov ecx, 0x5339c0
push 0
push 0x512695
mov dword [0x5339d0], 0
mov dword [0x5339d4], 0xf
mov byte [0x5339c0], 0
call fcn.00408530
mov byte [ebp - 4], 2
push 0
mov dword [0x5339d8], 0
call fcn.004ce4f6
push 0
mov dword [0x5339e0], eax
mov dword [0x5339e4], edx
call fcn.004ce4f6
add esp, 8
mov dword [0x5339e8], eax
mov ecx, 0x5339fc
mov dword [0x5339ec], edx
mov dword [0x5339f0], 0
mov dword [0x5339f4], 0
push 0xe
push str.app.spa.tec.br
mov dword [0x5339f8], 0
mov dword [0x533a0c], 0
mov dword [0x533a10], 0xf
mov byte [0x5339fc], 0
call fcn.00408530
mov byte [ebp - 4], 3
mov ecx, 0x533a14
push 0xe
push str.www.spa.tec.br
mov dword [0x533a24], 0
mov dword [0x533a28], 0xf
mov byte [0x533a14], 0
call fcn.00408530
mov byte [ebp - 4], 4
mov ecx, 0x533a2c
push 0x15
push str.S.P.A_Tecnologia_Ltda
mov dword [0x533a3c], 0
mov dword [0x533a40], 0xf
mov byte [0x533a2c], 0
call fcn.00408530
mov byte [ebp - 4], 5
mov ecx, 0x533a44
push 5
push str.S.P.A
mov dword [0x533a54], 0
mov dword [0x533a58], 0xf
mov byte [0x533a44], 0
call fcn.00408530
mov byte [ebp - 4], 6
mov dword [0x533a6c], 0
mov dword [0x533a70], 0xf
mov byte [0x533a5c], 0
push 0
push 0x512695
mov ecx, 0x533a5c
call fcn.00408530
mov byte [ebp - 4], 7
mov ecx, 0x533a74
push 0
push 0x512695
mov dword [0x533a84], 0
mov dword [0x533a88], 0xf
mov byte [0x533a74], 0
call fcn.00408530
mov byte [ebp - 4], 8
mov ecx, 0x533a8c
push 0
push 0x512695
mov dword [0x533a9c], 0
mov dword [0x533aa0], 0xf
mov byte [0x533a8c], 0
call fcn.00408530
mov byte [ebp - 4], 9
mov ecx, 0x533aa4
push 0
push 0x512695
mov dword [0x533ab4], 0
mov dword [0x533ab8], 0xf
mov byte [0x533aa4], 0
call fcn.00408530
mov byte [ebp - 4], 0xa
mov ecx, 0x533abc
push 0
push 0x512695
mov dword [0x533acc], 0
mov dword [0x533ad0], 0xf
mov byte [0x533abc], 0
call fcn.00408530
mov byte [ebp - 4], 0xb
mov ecx, 0x533ad4
push 7
push str.default
mov dword [0x533ae4], 0
mov dword [0x533ae8], 0xf
mov byte [0x533ad4], 0
call fcn.00408530
mov byte [ebp - 4], 0xc
mov ecx, 0x533aec
push 0
push 0x512695
mov dword [0x533afc], 0
mov dword [0x533b00], 0xf
mov byte [0x533aec], 0
call fcn.00408530
mov byte [ebp - 4], 0xd
mov ecx, 0x533b04
push 0x17
push str.sun.office.tec.br:21081
mov dword [0x533b14], 0
mov dword [0x533b18], 0xf
mov byte [0x533b04], 0
call fcn.00408530
mov byte [ebp - 4], 0xe
mov ecx, 0x533b1c
push 0
push 0x512695
mov dword [0x533b2c], 0
mov dword [0x533b30], 0xf
mov byte [0x533b1c], 0
call fcn.00408530
mov byte [ebp - 4], 0xf
mov dword [0x533b44], 0
mov dword [0x533b48], 0xf
mov byte [0x533b34], 0
push 0
push 0x512695
mov ecx, 0x533b34
call fcn.00408530
mov byte [ebp - 4], 0x10
mov ecx, 0x533b4c
push 0
push 0x512695
mov dword [0x533b5c], 0
mov dword [0x533b60], 0xf
mov byte [0x533b4c], 0
call fcn.00408530
mov byte [ebp - 4], 0x11
mov ecx, 0x533b68
push 7
push str.8.8.8.8
mov dword [0x533b64], 0
mov dword [0x533b78], 0
mov dword [0x533b7c], 0xf
mov byte [0x533b68], 0
call fcn.00408530
mov byte [ebp - 4], 0x12
mov ecx, 0x533b84
push 0
push 0x512695
mov dword [0x533b80], 0x1f4
mov dword [0x533b94], 0
mov dword [0x533b98], 0xf
mov byte [0x533b84], 0
call fcn.00408530
mov byte [ebp - 4], 0x13
mov ecx, 0x533b9c
push 0
push 0x512695
mov dword [0x533bac], 0
mov dword [0x533bb0], 0xf
mov byte [0x533b9c], 0
call fcn.00408530
mov byte [ebp - 4], 0x14
mov ecx, 0x533bb4
push 0
push 0x512695
mov dword [0x533bc4], 0
mov dword [0x533bc8], 0xf
mov byte [0x533bb4], 0
call fcn.00408530
mov byte [ebp - 4], 0x15
mov ecx, 0x533bcc
push 0
push 0x512695
mov dword [0x533bdc], 0
mov dword [0x533be0], 0xf
mov byte [0x533bcc], 0
call fcn.00408530
mov byte [ebp - 4], 0x16
mov ecx, 0x533be4
push 0
push 0x512695
mov dword [0x533bf4], 0
mov dword [0x533bf8], 0xf
mov byte [0x533be4], 0
call fcn.00408530
mov byte [ebp - 4], 0x17
mov ecx, 0x533bfc
push 0
push 0x512695
mov dword [0x533c0c], 0
mov dword [0x533c10], 0xf
mov byte [0x533bfc], 0
call fcn.00408530
mov byte [ebp - 4], 0x18
mov dword [0x533c24], 0
mov dword [0x533c38], 0
push 4
push str.main
mov ecx, 0x533c28
mov dword [0x533c3c], 0xf
mov byte [0x533c28], 0
call fcn.00408530
mov byte [ebp - 4], 0x19
xorps xmm0, xmm0
push 0
push 0x512695
mov ecx, 0x533c60
mov dword [0x533c54], 0
movups xmmword [0x533c44], xmm0
mov dword [0x533c58], 0
mov dword [0x533c5c], 0
mov dword [0x533c70], 0
mov dword [0x533c74], 0xf
mov byte [0x533c60], 0
call fcn.00408530
mov byte [ebp - 4], 0x1a
mov ecx, 0x533c78
push 0
push 0x512695
mov dword [0x533c88], 0
mov dword [0x533c8c], 0xf
mov byte [0x533c78], 0
call fcn.00408530
mov byte [ebp - 4], 0x1b
mov ecx, 0x533cb0
push 0
push 0x512695
mov dword [0x533ca4], 1
mov dword [0x533ca8], 0
mov dword [0x533cac], 0
mov dword [0x533cc0], 0
mov dword [0x533cc4], 0xf
mov byte [0x533cb0], 0
call fcn.00408530
mov byte [ebp - 4], 0x1c
mov ecx, 0x533cc8
push 0
push 0x512695
mov dword [0x533cd8], 0
mov dword [0x533cdc], 0xf
mov byte [0x533cc8], 0
call fcn.00408530
mov byte [ebp - 4], 0x1d
xorps xmm0, xmm0
movups xmmword [0x533ce0], xmm0
mov ecx, 0x533d18
mov dword [0x533d00], 0
movaps xmm0, xmmword [0x51ba40]
push 0
push 0x512695
movups xmmword [0x533cf0], xmm0
mov word [0x533d04], 0
mov byte [0x533d06], 0
mov dword [0x533d08], 0x3c
mov byte [0x533d0c], 0
mov byte [0x533d14], 0
mov dword [0x533d28], 0
mov dword [0x533d2c], 0xf
mov byte [0x533d18], 0
call fcn.00408530
mov byte [ebp - 4], 0x1e
mov ecx, 0x533d30
push 0
push 0x512695
mov dword [0x533d40], 0
mov dword [0x533d44], 0xf
mov byte [0x533d30], 0
call fcn.00408530
mov byte [ebp - 4], 0x1f
mov dword [0x533d58], 0
push 0
push 0x512695
mov ecx, 0x533d48
mov dword [0x533d5c], 0xf
mov byte [0x533d48], 0
call fcn.00408530
mov byte [ebp - 4], 0x20
mov ecx, 0x533d60
push 0
push 0x512695
mov dword [0x533d70], 0
mov dword [0x533d74], 0xf
mov byte [0x533d60], 0
call fcn.00408530
mov byte [ebp - 4], 0x21
push 0
mov dword [0x533d78], 0x10000
mov dword [0x533d7c], 0x1010100
call fcn.004ce4f6
add esp, 4
mov dword [0x533d80], eax
mov ecx, 0x533d88
mov dword [0x533d84], edx
mov dword [0x533d98], 0
mov dword [0x533d9c], 0xf
push 4
push str.NULL
mov byte [0x533d88], 0
call fcn.00408530
mov byte [ebp - 4], 0x22
mov ecx, 0x533da0
push 4
push str.NULL
mov dword [0x533db0], 0
mov dword [0x533db4], 0xf
mov byte [0x533da0], 0
call fcn.00408530
mov byte [ebp - 4], 0x23
mov ecx, 0x533db8
push 4
push str.NULL
mov dword [0x533dc8], 0
mov dword [0x533dcc], 0xf
mov byte [0x533db8], 0
call fcn.00408530
mov byte [ebp - 4], 0x24
mov ecx, 0x533dd0
push 4
push str.NULL
mov dword [0x533de0], 0
mov dword [0x533de4], 0xf
mov byte [0x533dd0], 0
call fcn.00408530
mov byte [ebp - 4], 0x25
mov ecx, 0x533de8
push 4
push str.NULL
mov dword [0x533df8], 0
mov dword [0x533dfc], 0xf
mov byte [0x533de8], 0
call fcn.00408530
mov byte [ebp - 4], 0x26
mov ecx, 0x533e00
push 4
push str.NULL
mov dword [0x533e10], 0
mov dword [0x533e14], 0xf
mov byte [0x533e00], 0
call fcn.00408530
mov byte [ebp - 4], 0x27
mov dword [0x533e28], 0
mov dword [0x533e2c], 0xf
mov byte [0x533e18], 0
push 0
push 0x512695
mov ecx, 0x533e18
call fcn.00408530
mov byte [ebp - 4], 0x28
mov ecx, 0x533e30
push 0
push 0x512695
mov dword [0x533e40], 0
mov dword [0x533e44], 0xf
mov byte [0x533e30], 0
call fcn.00408530
mov byte [ebp - 4], 0x29
xorps xmm0, xmm0
push 0
push 0x512695
mov ecx, 0x533e90
mov dword [0x533e48], 0
mov dword [0x533e4c], 0
mov dword [0x533e50], 0x100
mov word [0x533e54], 0
mov byte [0x533e56], 0
mov dword [0x533e58], 1
mov dword [0x533e5c], 0
mov byte [0x533e60], 0
mov dword [0x533e64], 0
mov byte [0x533e68], 0
movups xmmword [0x533e70], xmm0
mov dword [0x533ea0], 0
movups xmmword [0x533e80], xmm0
mov dword [0x533ea4], 0xf
mov byte [0x533e90], 0
call fcn.00408530
mov byte [ebp - 4], 0x2a
mov ecx, 0x533eac
push 0
push 0x512695
mov byte [0x533ea8], 0
mov dword [0x533ebc], 0
mov dword [0x533ec0], 0xf
mov byte [0x533eac], 0
call fcn.00408530
mov byte [ebp - 4], 0x2b
mov ecx, 0x533ec4
push 0
push 0x512695
mov dword [0x533ed4], 0
mov dword [0x533ed8], 0xf
mov byte [0x533ec4], 0
call fcn.00408530
mov byte [ebp - 4], 0x2c
mov ecx, 0x533edc
push 0
push 0x512695
mov dword [0x533eec], 0
mov dword [0x533ef0], 0xf
mov byte [0x533edc], 0
call fcn.00408530
mov byte [ebp - 4], 0x2d
mov ecx, 0x533ef4
push 0
push 0x512695
mov dword [0x533f04], 0
mov dword [0x533f08], 0xf
mov byte [0x533ef4], 0
call fcn.00408530
mov byte [ebp - 4], 0x2e
mov ecx, 0x533f0c
push 0
push 0x512695
mov dword [0x533f1c], 0
mov dword [0x533f20], 0xf
mov byte [0x533f0c], 0
call fcn.00408530
mov byte [ebp - 4], 0x2f
mov ecx, 0x533f24
push 5
push str.pt_BR
mov dword [0x533f34], 0
mov dword [0x533f38], 0xf
mov byte [0x533f24], 0
call fcn.00408530
mov byte [ebp - 4], 0x30
mov ecx, 0x533f3c
push 5
push str.pt_BR
mov dword [0x533f4c], 0
mov dword [0x533f50], 0xf
mov byte [0x533f3c], 0
call fcn.00408530
mov byte [ebp - 4], 0x31
mov ecx, 0x533f54
push 8
push str.poweroff
mov dword [0x533f64], 0
mov dword [0x533f68], 0xf
mov byte [0x533f54], 0
call fcn.00408530
mov byte [ebp - 4], 0x33
mov ecx, 0x533f78
push 0
mov byte [0x533f70], 0
call fcn.004088b0
mov byte [ebp - 4], 0x35
mov ecx, 0x533f88
push 0
mov byte [0x533f80], 0
call fcn.004088b0
mov byte [ebp - 4], 0x37
mov ecx, 0x533f98
push 0
mov byte [0x533f90], 0
call fcn.004088b0
mov byte [ebp - 4], 0x39
mov ecx, 0x533fa8
push 0
mov byte [0x533fa0], 0
call fcn.004088b0
mov byte [ebp - 4], 0x3b
mov ecx, 0x533fb8
push 0
mov byte [0x533fb0], 0
call fcn.004088b0
mov byte [ebp - 4], 0x3d
mov ecx, 0x533fc8
push 0
mov byte [0x533fc0], 0
call fcn.004088b0
mov byte [ebp - 4], 0x3f
mov ecx, 0x533fd8
push 0
mov byte [0x533fd0], 0
call fcn.004088b0
mov byte [ebp - 4], 0x41
mov byte [0x533fe0], 0
push 0
mov ecx, 0x533fe8
call fcn.004088b0
mov byte [ebp - 4], 0x42
mov ecx, 0x533ff4
push 4
push str.AUTO
mov word [0x533ff0], 0
mov dword [0x534004], 0
mov dword [0x534008], 0xf
mov byte [0x533ff4], 0
call fcn.00408530
mov byte [ebp - 4], 0x43
movaps xmm0, xmmword [0x51ba30]
push 0
mov dword [0x53400c], 0x1e
mov dword [0x534010], 0x294
mov byte [0x534014], 0
movups xmmword [0x534018], xmm0
mov dword [0x534028], 0
mov dword [0x53402c], 0
call fcn.004ce4f6
add esp, 4
mov dword [0x534034], 0xa
dec eax
mov dword [0x534038], 0
mov ecx, 0x534040
mov dword [0x534030], eax
mov byte [0x53403c], 0
push 4
push 0x512778
mov dword [0x534050], 0
mov dword [0x534054], 0xf
mov byte [0x534040], 0
call fcn.00408530
push 0
mov byte [ebp - 4], 0x44
call fcn.004ce4f6
push 0
mov dword [0x534058], eax
mov dword [0x53405c], edx
call fcn.004ce4f6
sub eax, 1
push 0
sbb edx, 0
mov dword [0x534060], eax
mov dword [0x534064], edx
call fcn.004ce4f6
sub eax, 1
push 0
sbb edx, 0
mov dword [0x534068], eax
mov dword [0x53406c], edx
call fcn.004ce4f6
sub eax, 1
push 0
sbb edx, 0
mov dword [0x534070], eax
mov dword [0x534074], edx
call fcn.004ce4f6
sub eax, 1
push 0
sbb edx, 0
mov dword [0x534078], eax
mov dword [0x53407c], edx
call fcn.004ce4f6
push 0
mov dword [0x534080], eax
mov dword [0x534084], edx
call fcn.004ce4f6
push 0
mov dword [0x534088], eax
mov dword [0x53408c], edx
call fcn.004ce4f6
push 0
mov dword [0x534090], eax
mov dword [0x534094], edx
call fcn.004ce4f6
mov dword [0x534098], eax
push 0
mov dword [0x53409c], edx
call fcn.004ce4f6
push 0
mov dword [0x5340a0], eax
mov dword [0x5340a4], edx
call fcn.004ce4f6
push 0
mov dword [0x5340a8], eax
mov dword [0x5340ac], edx
call fcn.004ce4f6
add esp, 0x30
mov dword [0x5340b0], eax
xorps xmm0, xmm0
mov dword [0x5340b4], edx
mov ecx, 0x5340c8
movlpd qword [0x5340b8], xmm0
mov dword [0x5340c0], 0
push 0
push 0x512695
mov dword [0x5340c4], 0
mov dword [0x5340d8], 0
mov dword [0x5340dc], 0xf
mov byte [0x5340c8], 0
call fcn.00408530
push 0
call fcn.004ce4f6
push 0
mov dword [0x5340e0], eax
mov dword [0x5340e4], edx
call fcn.004ce4f6
push 0
mov dword [0x5340e8], eax
mov dword [0x5340ec], edx
call fcn.004ce4f6
push 0
mov dword [0x5340f0], eax
mov dword [0x5340f4], edx
call fcn.004ce4f6
push 0
mov dword [0x5340f8], eax
mov dword [0x5340fc], edx
call fcn.004ce4f6
mov dword [0x534100], eax
add esp, 0x14
mov dword [0x534104], edx
mov eax, 0x533990
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret