Function at 0x42aa10
Capabilities:
Enumerate processes
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ffa72
mov eax, dword fs:[0]
push eax
sub esp, 0x32c
mov eax, dword [0x69def4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x32c]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x328], 0
call fcn.0041d020
mov dword [ebp - 0x32c], eax
mov dword [ebp - 4], 0
call fcn.0048bbe0
test al, al
je 0x42aaa3
push edi
pop ecx
push esi
push ebx
push edi
push ebp
push ebp
push esp
pop eax
pop edi
pop ecx
pop ebp
pop ecx
pop esp
push esi
pop eax
pop ebp
push ebp
push ebp
push eax
pop edi
push edx
push eax
push eax
pop ebp
push ebx
pop edx
push ebp
pop esi
push 0x22c
lea eax, [ebp - 0x314]
push 0
push eax
call fcn.005d4960
add esp, 0xc
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
jne 0x42aad0
xor ebx, ebx
jmp 0x42b5cd
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0x22c
push eax
push esi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x42ac12
nop
xor eax, eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
cmp word [ebp - 0x2f0], ax
jne 0x42ab11
xor ecx, ecx
jmp 0x42ab2f
lea ecx, [ebp - 0x2f0]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42ab20
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x58]
call fcn.00407210
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00430140
add esp, 8
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 3
cmp eax, 8
jb 0x42ab6f
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00407310
xor eax, eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x48], 0
call fcn.004330a0
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.0042c1a0
mov eax, dword [ebp - 0x74]
add esp, 0xc
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x42abfd
mov ecx, dword [ebp - 0x88]
inc eax
cmp eax, 0x1000
jb 0x42abf4
test cl, 0x1f
jne 0x42ad1d
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x42ad1d
sub ecx, eax
cmp ecx, 4
jb 0x42ad1d
cmp ecx, 0x23
ja 0x42ad1d
mov ecx, eax
push ecx
call fcn.005caa57
add esp, 4
lea eax, [ebp - 0x314]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x42aaf0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 7
xor eax, eax
mov dword [ebp - 0x74], 7
push 0x609b1c
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
call fcn.00407210
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00430140
add esp, 8
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 6
cmp eax, 8
jb 0x42ac7b
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00407310
xor eax, eax
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x78], 0
mov ebx, dword [eax]
mov dword [ebp - 0x318], ebx
cmp ebx, eax
je 0x42afb4
call fcn.0048bef0
test al, al
je 0x42acce
pop edx
pop ebx
pop esi
push edi
pop edi
push ecx
pop edx
push ebp
pop eax
pop ebp
push edx
push eax
push eax
pop edx
push edi
pop esp
pop eax
push ebx
pop edi
pop edx
push edx
pop eax
push esi
mov ebx, dword [ebp - 0x318]
call fcn.0048b940
test al, al
je 0x42acf7
pop esp
push ebx
push eax
pop edi
pop ecx
pop edx
push ebp
push eax
pop ecx
push edi
pop eax
pop ebx
push edi
pop ecx
push ebx
pop edi
push eax
pop ecx
push edi
pop esp
push ebx
pop edi
push edx
pop edi
push edx
pop esi
mov ebx, dword [ebp - 0x318]
cmp dword [ebx + 0x24], 0x10
lea edx, [ebx + 0x10]
jb 0x42ad02
mov edx, dword [edx]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp byte [edx], 0
jne 0x42ad22
xor ecx, ecx
jmp 0x42ad30
call fcn.005d9031
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42ad27
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.00408c90
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00408b60
push 1
push 0x60bf54
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.00408a30
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x28]
call fcn.00408880
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42adb1
mov eax, dword [ecx]
jmp 0x42adb3
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00408b60
lea eax, [ebp - 0x40]
push eax
call fcn.00431200
add esp, 0x1c
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 9
mov esi, dword [eax]
cmp esi, dword [eax + 4]
je 0x42aee5
cmp dword [esi + 0x14], 0x10
jb 0x42adeb
mov edx, dword [esi]
jmp 0x42aded
mov edx, esi
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp byte [edx], 0
jne 0x42ae08
xor eax, eax
jmp 0x42ae19
mov eax, edx
lea edi, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42ae10
sub eax, edi
push eax
push edx
lea ecx, [ebp - 0x70]
call fcn.00408c90
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x70]
mov edi, eax
cmp dword [ebp - 0x2c], 0x10
mov byte [ebp - 4], 0xa
cmovae edx, dword [ebp - 0x40]
cmp dword [ebp - 0x30], eax
cmovb edi, dword [ebp - 0x30]
test edi, edi
je 0x42aea5
sub edi, 4
jb 0x42ae63
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x42ae68
add edx, 4
add ecx, 4
sub edi, 4
jae 0x42ae52
cmp edi, 0xfffffffc
je 0x42ae9c
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x42ae95
cmp edi, 0xfffffffd
je 0x42ae9c
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x42ae95
cmp edi, 0xfffffffe
je 0x42ae9c
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x42ae95
cmp edi, 0xffffffff
je 0x42ae9c
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x42ae9c
sbb eax, eax
or eax, 1
jmp 0x42ae9e
xor eax, eax
test eax, eax
jne 0x42aebd
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x30]
cmp eax, ecx
jbe 0x42aeb1
or eax, 0xffffffff
jmp 0x42aeb5
sbb eax, eax
neg eax
test eax, eax
je 0x42b247
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 9
cmp eax, 0x10
jb 0x42aed6
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00408f70
mov eax, dword [ebp + 0xc]
add esi, 0x18
cmp esi, dword [eax + 4]
jne 0x42ade1
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x42aefa
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00408f70
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42af21
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00408f70
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x42af4c
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00408f70
cmp byte [ebx + 0xd], 0
jne 0x42afa8
mov eax, dword [ebx + 8]
cmp byte [eax + 0xd], 0
jne 0x42af82
mov ebx, eax
mov dword [ebp - 0x318], ebx
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
jne 0x42afa8
nop dword [eax + eax]
mov ebx, eax
mov dword [ebp - 0x318], ebx
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
je 0x42af70
jmp 0x42afa8
mov eax, dword [ebx + 4]
cmp byte [eax + 0xd], 0
jne 0x42afa0
nop dword [eax + eax]
cmp ebx, dword [eax + 8]
jne 0x42afa0
mov ebx, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x42af90
mov ebx, eax
mov dword [ebp - 0x318], ebx
cmp ebx, dword [ebp - 0x32c]
jne 0x42aca8
xor ebx, ebx
call fcn.0048bbe0
test al, al
je 0x42afdc
push edi
pop ecx
push esi
push ebx
push edi
push ebp
push ebp
push esp
pop eax
pop edi
pop ecx
pop ebp
pop ecx
pop esp
push esi
pop eax
pop ebp
push ebp
push ebp
push eax
pop edi
push edx
push eax
push eax
pop ebp
push ebx
pop edx
push ebp
pop esi
test ebx, ebx
jne 0x42b594
lea ecx, [ebp - 0x324]
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.0041d020
mov dword [ebp - 0x324], eax
push 0x6097e8
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.00405c70
push 0x6097e8
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xd
call fcn.00405c70
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x318]
push eax
push 0x109
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_bind
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x318], ebx
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x42b079
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042c850
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 9
push 0
push 0x60baa0
push reloc.WS2_32.dll_bind
call edi
test eax, eax
jne 0x42b0b1
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042c850
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 9
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_accept
call edi
test eax, eax
jne 0x42b0e9
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042c850
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 0x109
push 0
push str.SoftwareMicrosoft_
push reloc.WS2_32.dll_bind
call edi
test eax, eax
jne 0x42b124
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042c850
add esp, 8
push dword [ebp - 0x318]
call esi
mov eax, dword [ebp - 0x324]
mov ebx, dword [eax]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x338], ebx
cmp ebx, eax
je 0x42b4e6
call fcn.0048bcc0
test al, al
je 0x42b164
push ebp
pop esi
pop edi
pop eax
push esp
pop edx
push ecx
pop ecx
pop ebx
push ecx
push eax
push esi
push esp
push ebp
push ebp
push edx
push edi
push edi
pop ecx
push esi
push esi
mov ebx, dword [ebp - 0x31c]
call fcn.0048be10
test al, al
je 0x42b17d
pop eax
pop edi
pop ecx
push esp
push esp
push edi
push edi
pop esp
pop eax
pop esi
pop esi
pop ebp
pop esi
pop edi
push edi
pop esi
add ebx, 0x10
cmp dword [ebx + 0x14], 0x10
jb 0x42b188
mov ebx, dword [ebx]
push ebx
lea ecx, [ebp - 0x88]
call fcn.0040fa60
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.00408b60
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x10
push eax
call fcn.004330a0
add esp, 4
mov dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x40]
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x28], 0
push 0xffffffffffffffff
push 0
push eax
call fcn.00408b60
push 1
push 0x60bf54
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00408a30
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x28]
call fcn.00408880
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42b34f
mov eax, dword [ecx]
jmp 0x42b351
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.0042fc60
add esp, 8
mov esi, eax
mov ebx, dword [ebp - 0x330]
cmp ebx, esi
je 0x42b2a1
cmp dword [ebx + 0x14], 8
jb 0x42b27a
mov eax, dword [ebx + 0x14]
mov ecx, ebx
inc eax
push eax
push dword [ebx]
call fcn.00407310
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x42b292
mov eax, dword [ebx]
jmp 0x42b294
mov eax, ebx
xor ecx, ecx
mov word [eax], cx
mov ecx, ebx
push esi
call fcn.00406bc0
mov eax, dword [ebp - 0x8c]
cmp eax, 8
jb 0x42b2bf
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00407310
mov eax, dword [ebp - 0x5c]
mov ebx, 1
mov dword [ebp - 0x334], ebx
cmp eax, 0x10
jb 0x42b2df
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00408f70
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x42b2f4
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00408f70
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b31b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00408f70
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x42afb6
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00408f70
jmp 0x42afb6
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00408b60
lea eax, [ebp - 0x70]
push eax
call fcn.00431200
add esp, 0x1c
mov ebx, dword [ebp + 0x10]
mov byte [ebp - 4], 0x12
mov esi, dword [ebx]
mov dword [ebp - 0x31c], esi
cmp esi, dword [ebx + 4]
je 0x42b42f
call fcn.0048bb70
test al, al
je 0x42b3af
pop eax
push edx
push edi
push esp
push ebp
pop ebp
pop eax
push eax
pop esi
push esi
pop eax
pop esp
push esi
push esi
push eax
push esp
push eax
push eax
pop ecx
push edx
pop esi
push edx
pop esp
pop eax
push esi
push ebp
push edx
mov esi, dword [ebp - 0x31c]
call fcn.0048c0b0
test al, al
je 0x42b3d3
pop esp
push ebx
pop esp
pop esp
pop esp
pop edi
pop eax
pop eax
push esi
push esi
pop eax
push esi
push ebx
push eax
push ebp
push ebp
push ebp
push edi
pop edi
pop ebp
pop esp
push ebx
push ebp
pop ebx
mov ebx, dword [ebp + 0x10]
cmp dword [esi + 0x14], 0x10
jb 0x42b3dd
mov eax, dword [esi]
jmp 0x42b3df
mov eax, esi
push eax
lea ecx, [ebp - 0x58]
call fcn.0040fa60
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00427c30
add esp, 8
test al, al
jne 0x42b620
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x12
cmp eax, 0x10
jb 0x42b41d
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00408f70
add esi, 0x18
mov dword [ebp - 0x31c], esi
cmp esi, dword [ebx + 4]
jne 0x42b385
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x42b444
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00408f70
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x42b46b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00408f70
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x42b492
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00408f70
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0xe
cmp eax, 0x10
jb 0x42b4c3
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00408f70
lea ecx, [ebp - 0x338]
call fcn.00416ae0
mov ebx, dword [ebp - 0x338]
mov dword [ebp - 0x31c], ebx
cmp ebx, dword [ebp - 0x324]
jne 0x42b140
mov ebx, dword [ebp - 0x334]
mov eax, dword [ebp - 0xbc]
cmp eax, 8
jb 0x42b50a
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.00407310
xor eax, eax
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc0], 0
cmp eax, 8
jb 0x42b545
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00407310
xor eax, eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0x324]
lea ecx, [ebp - 0x324]
push eax
mov byte [ebp - 4], 0x14
push dword [eax]
lea eax, [ebp - 0x330]
push eax
call fcn.0041d2a0
push 1
push dword [ebp - 0x324]
lea ecx, [ebp - 0x324]
call fcn.0042c380
mov eax, dword [ebp - 0xa4]
cmp eax, 0x10
jb 0x42b5b2
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.00408f70
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
mov eax, dword [ebp - 0x32c]
lea ecx, [ebp - 0x32c]
push eax
mov dword [ebp - 4], 0x15
push dword [eax]
lea eax, [ebp - 0x330]
push eax
call fcn.0041d2a0
push 1
push dword [ebp - 0x32c]
lea ecx, [ebp - 0x32c]
call fcn.0042c380
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005caa5c
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.0042fc60
mov ecx, dword [ebp - 0x330]
add esp, 8
push eax
call fcn.00405e00
mov eax, dword [ebp - 0xd4]
cmp eax, 8
jb 0x42b660
inc eax
lea ecx, [ebp - 0xe8]
push eax
push dword [ebp - 0xe8]
call fcn.00407310
mov eax, dword [ebp - 0x44]
mov ebx, 1
cmp eax, 0x10
jb 0x42b67a
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00408f70
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x42b68f
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00408f70
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x42b6b6
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00408f70
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x42b6dd
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00408f70
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b4ec
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00408f70
jmp 0x42b4ec