Function at 0x42aec0
Capabilities:
Enumerate processes
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ffc42
mov eax, dword fs:[0]
push eax
sub esp, 0x32c
mov eax, dword [0x69def4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x32c]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x328], 0
call fcn.0043a9e0
mov dword [ebp - 0x32c], eax
mov dword [ebp - 4], 0
call fcn.0048bd60
test al, al
je 0x42af53
push edi
pop ecx
push esi
push ebx
push edi
push ebp
push ebp
push esp
pop eax
pop edi
pop ecx
pop ebp
pop ecx
pop esp
push esi
pop eax
pop ebp
push ebp
push ebp
push eax
pop edi
push edx
push eax
push eax
pop ebp
push ebx
pop edx
push ebp
pop esi
push 0x22c
lea eax, [ebp - 0x314]
push 0
push eax
call fcn.005d4b40
add esp, 0xc
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
jne 0x42af80
xor ebx, ebx
jmp 0x42ba7d
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0x22c
push eax
push esi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x42b0c2
nop
xor eax, eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
cmp word [ebp - 0x2f0], ax
jne 0x42afc1
xor ecx, ecx
jmp 0x42afdf
lea ecx, [ebp - 0x2f0]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42afd0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x58]
call fcn.004072f0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00433c50
add esp, 8
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 3
cmp eax, 8
jb 0x42b01f
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004073f0
xor eax, eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x48], 0
call fcn.00433360
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.0042c650
mov eax, dword [ebp - 0x74]
add esp, 0xc
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x42b0ad
mov ecx, dword [ebp - 0x88]
inc eax
cmp eax, 0x1000
jb 0x42b0a4
test cl, 0x1f
jne 0x42b1cd
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x42b1cd
sub ecx, eax
cmp ecx, 4
jb 0x42b1cd
cmp ecx, 0x23
ja 0x42b1cd
mov ecx, eax
push ecx
call fcn.005cabb7
add esp, 4
lea eax, [ebp - 0x314]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x42afa0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 7
xor eax, eax
mov dword [ebp - 0x74], 7
push 0x609b1c
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
call fcn.004072f0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00433c50
add esp, 8
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 6
cmp eax, 8
jb 0x42b12b
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.004073f0
xor eax, eax
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x78], 0
mov ebx, dword [eax]
mov dword [ebp - 0x318], ebx
cmp ebx, eax
je 0x42b464
call fcn.0048c070
test al, al
je 0x42b17e
pop edx
pop ebx
pop esi
push edi
pop edi
push ecx
pop edx
push ebp
pop eax
pop ebp
push edx
push eax
push eax
pop edx
push edi
pop esp
pop eax
push ebx
pop edi
pop edx
push edx
pop eax
push esi
mov ebx, dword [ebp - 0x318]
call fcn.0048bac0
test al, al
je 0x42b1a7
pop esp
push ebx
push eax
pop edi
pop ecx
pop edx
push ebp
push eax
pop ecx
push edi
pop eax
pop ebx
push edi
pop ecx
push ebx
pop edi
push eax
pop ecx
push edi
pop esp
push ebx
pop edi
push edx
pop edi
push edx
pop esi
mov ebx, dword [ebp - 0x318]
cmp dword [ebx + 0x24], 0x10
lea edx, [ebx + 0x10]
jb 0x42b1b2
mov edx, dword [edx]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp byte [edx], 0
jne 0x42b1d2
xor ecx, ecx
jmp 0x42b1e0
call fcn.005d9211
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42b1d7
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.00409100
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00408fd0
push 1
push 0x60bf54
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.00408ea0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x28]
call fcn.00408cf0
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42b261
mov eax, dword [ecx]
jmp 0x42b263
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00408fd0
lea eax, [ebp - 0x40]
push eax
call fcn.004311e0
add esp, 0x1c
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 9
mov esi, dword [eax]
cmp esi, dword [eax + 4]
je 0x42b395
cmp dword [esi + 0x14], 0x10
jb 0x42b29b
mov edx, dword [esi]
jmp 0x42b29d
mov edx, esi
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp byte [edx], 0
jne 0x42b2b8
xor eax, eax
jmp 0x42b2c9
mov eax, edx
lea edi, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42b2c0
sub eax, edi
push eax
push edx
lea ecx, [ebp - 0x70]
call fcn.00409100
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x70]
mov edi, eax
cmp dword [ebp - 0x2c], 0x10
mov byte [ebp - 4], 0xa
cmovae edx, dword [ebp - 0x40]
cmp dword [ebp - 0x30], eax
cmovb edi, dword [ebp - 0x30]
test edi, edi
je 0x42b355
sub edi, 4
jb 0x42b313
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x42b318
add edx, 4
add ecx, 4
sub edi, 4
jae 0x42b302
cmp edi, 0xfffffffc
je 0x42b34c
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x42b345
cmp edi, 0xfffffffd
je 0x42b34c
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x42b345
cmp edi, 0xfffffffe
je 0x42b34c
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x42b345
cmp edi, 0xffffffff
je 0x42b34c
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x42b34c
sbb eax, eax
or eax, 1
jmp 0x42b34e
xor eax, eax
test eax, eax
jne 0x42b36d
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x30]
cmp eax, ecx
jbe 0x42b361
or eax, 0xffffffff
jmp 0x42b365
sbb eax, eax
neg eax
test eax, eax
je 0x42b6f7
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 9
cmp eax, 0x10
jb 0x42b386
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004093e0
mov eax, dword [ebp + 0xc]
add esi, 0x18
cmp esi, dword [eax + 4]
jne 0x42b291
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x42b3aa
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004093e0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b3d1
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004093e0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x42b3fc
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004093e0
cmp byte [ebx + 0xd], 0
jne 0x42b458
mov eax, dword [ebx + 8]
cmp byte [eax + 0xd], 0
jne 0x42b432
mov ebx, eax
mov dword [ebp - 0x318], ebx
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
jne 0x42b458
nop dword [eax + eax]
mov ebx, eax
mov dword [ebp - 0x318], ebx
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
je 0x42b420
jmp 0x42b458
mov eax, dword [ebx + 4]
cmp byte [eax + 0xd], 0
jne 0x42b450
nop dword [eax + eax]
cmp ebx, dword [eax + 8]
jne 0x42b450
mov ebx, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x42b440
mov ebx, eax
mov dword [ebp - 0x318], ebx
cmp ebx, dword [ebp - 0x32c]
jne 0x42b158
xor ebx, ebx
call fcn.0048bd60
test al, al
je 0x42b48c
push edi
pop ecx
push esi
push ebx
push edi
push ebp
push ebp
push esp
pop eax
pop edi
pop ecx
pop ebp
pop ecx
pop esp
push esi
pop eax
pop ebp
push ebp
push ebp
push eax
pop edi
push edx
push eax
push eax
pop ebp
push ebx
pop edx
push ebp
pop esi
test ebx, ebx
jne 0x42ba44
lea ecx, [ebp - 0x324]
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.0043a9e0
mov dword [ebp - 0x324], eax
push 0x6097e8
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.00405d50
push 0x6097e8
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xd
call fcn.00405d50
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x318]
push eax
push 0x109
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_bind
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x318], ebx
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x42b529
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cd00
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 9
push 0
push 0x60baa0
push reloc.WS2_32.dll_bind
call edi
test eax, eax
jne 0x42b561
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cd00
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 9
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_accept
call edi
test eax, eax
jne 0x42b599
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cd00
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 0x109
push 0
push str.SoftwareMicrosoft_
push reloc.WS2_32.dll_bind
call edi
test eax, eax
jne 0x42b5d4
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cd00
add esp, 8
push dword [ebp - 0x318]
call esi
mov eax, dword [ebp - 0x324]
mov ebx, dword [eax]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x338], ebx
cmp ebx, eax
je 0x42b996
call fcn.0048be40
test al, al
je 0x42b614
push ebp
pop esi
pop edi
pop eax
push esp
pop edx
push ecx
pop ecx
pop ebx
push ecx
push eax
push esi
push esp
push ebp
push ebp
push edx
push edi
push edi
pop ecx
push esi
push esi
mov ebx, dword [ebp - 0x31c]
call fcn.0048bf90
test al, al
je 0x42b62d
pop eax
pop edi
pop ecx
push esp
push esp
push edi
push edi
pop esp
pop eax
pop esi
pop esi
pop ebp
pop esi
pop edi
push edi
pop esi
add ebx, 0x10
cmp dword [ebx + 0x14], 0x10
jb 0x42b638
mov ebx, dword [ebx]
push ebx
lea ecx, [ebp - 0x88]
call fcn.0040fec0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.00408fd0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x10
push eax
call fcn.00433360
add esp, 4
mov dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x40]
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x28], 0
push 0xffffffffffffffff
push 0
push eax
call fcn.00408fd0
push 1
push 0x60bf54
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00408ea0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x28]
call fcn.00408cf0
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42b7ff
mov eax, dword [ecx]
jmp 0x42b801
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00433020
add esp, 8
mov esi, eax
mov ebx, dword [ebp - 0x330]
cmp ebx, esi
je 0x42b751
cmp dword [ebx + 0x14], 8
jb 0x42b72a
mov eax, dword [ebx + 0x14]
mov ecx, ebx
inc eax
push eax
push dword [ebx]
call fcn.004073f0
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x42b742
mov eax, dword [ebx]
jmp 0x42b744
mov eax, ebx
xor ecx, ecx
mov word [eax], cx
mov ecx, ebx
push esi
call fcn.00406d00
mov eax, dword [ebp - 0x8c]
cmp eax, 8
jb 0x42b76f
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.004073f0
mov eax, dword [ebp - 0x5c]
mov ebx, 1
mov dword [ebp - 0x334], ebx
cmp eax, 0x10
jb 0x42b78f
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004093e0
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x42b7a4
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004093e0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b7cb
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004093e0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x42b466
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004093e0
jmp 0x42b466
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00408fd0
lea eax, [ebp - 0x70]
push eax
call fcn.004311e0
add esp, 0x1c
mov ebx, dword [ebp + 0x10]
mov byte [ebp - 4], 0x12
mov esi, dword [ebx]
mov dword [ebp - 0x31c], esi
cmp esi, dword [ebx + 4]
je 0x42b8df
call fcn.0048bcf0
test al, al
je 0x42b85f
pop eax
push edx
push edi
push esp
push ebp
pop ebp
pop eax
push eax
pop esi
push esi
pop eax
pop esp
push esi
push esi
push eax
push esp
push eax
push eax
pop ecx
push edx
pop esi
push edx
pop esp
pop eax
push esi
push ebp
push edx
mov esi, dword [ebp - 0x31c]
call fcn.0048c230
test al, al
je 0x42b883
pop esp
push ebx
pop esp
pop esp
pop esp
pop edi
pop eax
pop eax
push esi
push esi
pop eax
push esi
push ebx
push eax
push ebp
push ebp
push ebp
push edi
pop edi
pop ebp
pop esp
push ebx
push ebp
pop ebx
mov ebx, dword [ebp + 0x10]
cmp dword [esi + 0x14], 0x10
jb 0x42b88d
mov eax, dword [esi]
jmp 0x42b88f
mov eax, esi
push eax
lea ecx, [ebp - 0x58]
call fcn.0040fec0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00427d00
add esp, 8
test al, al
jne 0x42bad0
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x12
cmp eax, 0x10
jb 0x42b8cd
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004093e0
add esi, 0x18
mov dword [ebp - 0x31c], esi
cmp esi, dword [ebx + 4]
jne 0x42b835
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x42b8f4
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004093e0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x42b91b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004093e0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x42b942
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004093e0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0xe
cmp eax, 0x10
jb 0x42b973
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.004093e0
lea ecx, [ebp - 0x338]
call fcn.00413e30
mov ebx, dword [ebp - 0x338]
mov dword [ebp - 0x31c], ebx
cmp ebx, dword [ebp - 0x324]
jne 0x42b5f0
mov ebx, dword [ebp - 0x334]
mov eax, dword [ebp - 0xbc]
cmp eax, 8
jb 0x42b9ba
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.004073f0
xor eax, eax
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc0], 0
cmp eax, 8
jb 0x42b9f5
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.004073f0
xor eax, eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0x324]
lea ecx, [ebp - 0x324]
push eax
mov byte [ebp - 4], 0x14
push dword [eax]
lea eax, [ebp - 0x330]
push eax
call fcn.0041d700
push 1
push dword [ebp - 0x324]
lea ecx, [ebp - 0x324]
call fcn.0042c830
mov eax, dword [ebp - 0xa4]
cmp eax, 0x10
jb 0x42ba62
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.004093e0
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
mov eax, dword [ebp - 0x32c]
lea ecx, [ebp - 0x32c]
push eax
mov dword [ebp - 4], 0x15
push dword [eax]
lea eax, [ebp - 0x330]
push eax
call fcn.0041d700
push 1
push dword [ebp - 0x32c]
lea ecx, [ebp - 0x32c]
call fcn.0042c830
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005cabbc
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00433020
mov ecx, dword [ebp - 0x330]
add esp, 8
push eax
call fcn.00405ee0
mov eax, dword [ebp - 0xd4]
cmp eax, 8
jb 0x42bb10
inc eax
lea ecx, [ebp - 0xe8]
push eax
push dword [ebp - 0xe8]
call fcn.004073f0
mov eax, dword [ebp - 0x44]
mov ebx, 1
cmp eax, 0x10
jb 0x42bb2a
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004093e0
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x42bb3f
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004093e0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x42bb66
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004093e0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x42bb8d
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004093e0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b99c
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.004093e0
jmp 0x42b99c