Function at 0x42acd0
Capabilities:
Enumerate processes
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ff692
mov eax, dword fs:[0]
push eax
sub esp, 0x32c
mov eax, dword [0x69cef4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x32c]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x328], 0
call fcn.0043a4a0
mov dword [ebp - 0x32c], eax
mov dword [ebp - 4], 0
call fcn.0048b740
test al, al
je 0x42ad63
push edi
pop ecx
push esi
push ebx
push edi
push ebp
push ebp
push esp
pop eax
pop edi
pop ecx
pop ebp
pop ecx
pop esp
push esi
pop eax
pop ebp
push ebp
push ebp
push eax
pop edi
push edx
push eax
push eax
pop ebp
push ebx
pop edx
push ebp
pop esi
push 0x22c
lea eax, [ebp - 0x314]
push 0
push eax
call fcn.005d4520
add esp, 0xc
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
jne 0x42ad90
xor ebx, ebx
jmp 0x42b88d
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0x22c
push eax
push esi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x42aed2
nop
xor eax, eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], 0
mov word [ebp - 0x58], ax
cmp word [ebp - 0x2f0], ax
jne 0x42add1
xor ecx, ecx
jmp 0x42adef
lea ecx, [ebp - 0x2f0]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42ade0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x58]
call fcn.00407280
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00433730
add esp, 8
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 3
cmp eax, 8
jb 0x42ae2f
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00407380
xor eax, eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x48], 0
call fcn.00433100
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.0042c460
mov eax, dword [ebp - 0x74]
add esp, 0xc
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x42aebd
mov ecx, dword [ebp - 0x88]
inc eax
cmp eax, 0x1000
jb 0x42aeb4
test cl, 0x1f
jne 0x42afdd
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x42afdd
sub ecx, eax
cmp ecx, 4
jb 0x42afdd
cmp ecx, 0x23
ja 0x42afdd
mov ecx, eax
push ecx
call fcn.005ca597
add esp, 4
lea eax, [ebp - 0x314]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x42adb0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 7
xor eax, eax
mov dword [ebp - 0x74], 7
push 0x608b1c
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
call fcn.00407280
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00433730
add esp, 8
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 6
cmp eax, 8
jb 0x42af3b
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00407380
xor eax, eax
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x78], 0
mov ebx, dword [eax]
mov dword [ebp - 0x318], ebx
cmp ebx, eax
je 0x42b274
call fcn.0048ba50
test al, al
je 0x42af8e
pop edx
pop ebx
pop esi
push edi
pop edi
push ecx
pop edx
push ebp
pop eax
pop ebp
push edx
push eax
push eax
pop edx
push edi
pop esp
pop eax
push ebx
pop edi
pop edx
push edx
pop eax
push esi
mov ebx, dword [ebp - 0x318]
call fcn.0048b4a0
test al, al
je 0x42afb7
pop esp
push ebx
push eax
pop edi
pop ecx
pop edx
push ebp
push eax
pop ecx
push edi
pop eax
pop ebx
push edi
pop ecx
push ebx
pop edi
push eax
pop ecx
push edi
pop esp
push ebx
pop edi
push edx
pop edi
push edx
pop esi
mov ebx, dword [ebp - 0x318]
cmp dword [ebx + 0x24], 0x10
lea edx, [ebx + 0x10]
jb 0x42afc2
mov edx, dword [edx]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp byte [edx], 0
jne 0x42afe2
xor ecx, ecx
jmp 0x42aff0
call fcn.005d8c11
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42afe7
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.004090f0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00408fc0
push 1
push 0x60af54
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.00408e90
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x28]
call fcn.00408ce0
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42b071
mov eax, dword [ecx]
jmp 0x42b073
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00408fc0
lea eax, [ebp - 0x40]
push eax
call fcn.00430ff0
add esp, 0x1c
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 9
mov esi, dword [eax]
cmp esi, dword [eax + 4]
je 0x42b1a5
cmp dword [esi + 0x14], 0x10
jb 0x42b0ab
mov edx, dword [esi]
jmp 0x42b0ad
mov edx, esi
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp byte [edx], 0
jne 0x42b0c8
xor eax, eax
jmp 0x42b0d9
mov eax, edx
lea edi, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42b0d0
sub eax, edi
push eax
push edx
lea ecx, [ebp - 0x70]
call fcn.004090f0
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x70]
mov edi, eax
cmp dword [ebp - 0x2c], 0x10
mov byte [ebp - 4], 0xa
cmovae edx, dword [ebp - 0x40]
cmp dword [ebp - 0x30], eax
cmovb edi, dword [ebp - 0x30]
test edi, edi
je 0x42b165
sub edi, 4
jb 0x42b123
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x42b128
add edx, 4
add ecx, 4
sub edi, 4
jae 0x42b112
cmp edi, 0xfffffffc
je 0x42b15c
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x42b155
cmp edi, 0xfffffffd
je 0x42b15c
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x42b155
cmp edi, 0xfffffffe
je 0x42b15c
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x42b155
cmp edi, 0xffffffff
je 0x42b15c
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x42b15c
sbb eax, eax
or eax, 1
jmp 0x42b15e
xor eax, eax
test eax, eax
jne 0x42b17d
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x30]
cmp eax, ecx
jbe 0x42b171
or eax, 0xffffffff
jmp 0x42b175
sbb eax, eax
neg eax
test eax, eax
je 0x42b507
mov eax, dword [ebp - 0x5c]
mov byte [ebp - 4], 9
cmp eax, 0x10
jb 0x42b196
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.0043d0f0
mov eax, dword [ebp + 0xc]
add esi, 0x18
cmp esi, dword [eax + 4]
jne 0x42b0a1
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x42b1ba
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.0043d0f0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b1e1
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.0043d0f0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x42b20c
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.0043d0f0
cmp byte [ebx + 0xd], 0
jne 0x42b268
mov eax, dword [ebx + 8]
cmp byte [eax + 0xd], 0
jne 0x42b242
mov ebx, eax
mov dword [ebp - 0x318], ebx
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
jne 0x42b268
nop dword [eax + eax]
mov ebx, eax
mov dword [ebp - 0x318], ebx
mov eax, dword [ebx]
cmp byte [eax + 0xd], 0
je 0x42b230
jmp 0x42b268
mov eax, dword [ebx + 4]
cmp byte [eax + 0xd], 0
jne 0x42b260
nop dword [eax + eax]
cmp ebx, dword [eax + 8]
jne 0x42b260
mov ebx, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x42b250
mov ebx, eax
mov dword [ebp - 0x318], ebx
cmp ebx, dword [ebp - 0x32c]
jne 0x42af68
xor ebx, ebx
call fcn.0048b740
test al, al
je 0x42b29c
push edi
pop ecx
push esi
push ebx
push edi
push ebp
push ebp
push esp
pop eax
pop edi
pop ecx
pop ebp
pop ecx
pop esp
push esi
pop eax
pop ebp
push ebp
push ebp
push eax
pop edi
push edx
push eax
push eax
pop ebp
push ebx
pop edx
push ebp
pop esi
test ebx, ebx
jne 0x42b854
lea ecx, [ebp - 0x324]
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.0043a4a0
mov dword [ebp - 0x324], eax
push 0x6087e8
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.00405d50
push 0x6087e8
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xd
call fcn.00405d50
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x318]
push eax
push 0x109
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_bind
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x318], ebx
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x42b339
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cb10
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 9
push 0
push 0x60aaa0
push reloc.WS2_32.dll_bind
call edi
test eax, eax
jne 0x42b371
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cb10
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 9
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_accept
call edi
test eax, eax
jne 0x42b3a9
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cb10
add esp, 8
push dword [ebp - 0x318]
call esi
lea eax, [ebp - 0x318]
push eax
push 0x109
push 0
push str.SoftwareMicrosoft_
push reloc.WS2_32.dll_bind
call edi
test eax, eax
jne 0x42b3e4
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x318]
call fcn.0042cb10
add esp, 8
push dword [ebp - 0x318]
call esi
mov eax, dword [ebp - 0x324]
mov ebx, dword [eax]
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x338], ebx
cmp ebx, eax
je 0x42b7a6
call fcn.0048b820
test al, al
je 0x42b424
push ebp
pop esi
pop edi
pop eax
push esp
pop edx
push ecx
pop ecx
pop ebx
push ecx
push eax
push esi
push esp
push ebp
push ebp
push edx
push edi
push edi
pop ecx
push esi
push esi
mov ebx, dword [ebp - 0x31c]
call fcn.0048b970
test al, al
je 0x42b43d
pop eax
pop edi
pop ecx
push esp
push esp
push edi
push edi
pop esp
pop eax
pop esi
pop esi
pop ebp
pop esi
pop edi
push edi
pop esi
add ebx, 0x10
cmp dword [ebx + 0x14], 0x10
jb 0x42b448
mov ebx, dword [ebx]
push ebx
lea ecx, [ebp - 0x88]
call fcn.0040fe40
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.00408fc0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x10
push eax
call fcn.00433100
add esp, 4
mov dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x40]
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x28], 0
push 0xffffffffffffffff
push 0
push eax
call fcn.00408fc0
push 1
push 0x60af54
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00408e90
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x28]
call fcn.00408ce0
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x42b60f
mov eax, dword [ecx]
jmp 0x42b611
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00432e30
add esp, 8
mov esi, eax
mov ebx, dword [ebp - 0x330]
cmp ebx, esi
je 0x42b561
cmp dword [ebx + 0x14], 8
jb 0x42b53a
mov eax, dword [ebx + 0x14]
mov ecx, ebx
inc eax
push eax
push dword [ebx]
call fcn.00407380
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x42b552
mov eax, dword [ebx]
jmp 0x42b554
mov eax, ebx
xor ecx, ecx
mov word [eax], cx
mov ecx, ebx
push esi
call fcn.00406c30
mov eax, dword [ebp - 0x8c]
cmp eax, 8
jb 0x42b57f
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00407380
mov eax, dword [ebp - 0x5c]
mov ebx, 1
mov dword [ebp - 0x334], ebx
cmp eax, 0x10
jb 0x42b59f
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.0043d0f0
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x42b5b4
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.0043d0f0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b5db
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.0043d0f0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x42b276
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.0043d0f0
jmp 0x42b276
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.00408fc0
lea eax, [ebp - 0x70]
push eax
call fcn.00430ff0
add esp, 0x1c
mov ebx, dword [ebp + 0x10]
mov byte [ebp - 4], 0x12
mov esi, dword [ebx]
mov dword [ebp - 0x31c], esi
cmp esi, dword [ebx + 4]
je 0x42b6ef
call fcn.0048b6d0
test al, al
je 0x42b66f
pop eax
push edx
push edi
push esp
push ebp
pop ebp
pop eax
push eax
pop esi
push esi
pop eax
pop esp
push esi
push esi
push eax
push esp
push eax
push eax
pop ecx
push edx
pop esi
push edx
pop esp
pop eax
push esi
push ebp
push edx
mov esi, dword [ebp - 0x31c]
call fcn.0048bc10
test al, al
je 0x42b693
pop esp
push ebx
pop esp
pop esp
pop esp
pop edi
pop eax
pop eax
push esi
push esi
pop eax
push esi
push ebx
push eax
push ebp
push ebp
push ebp
push edi
pop edi
pop ebp
pop esp
push ebx
push ebp
pop ebx
mov ebx, dword [ebp + 0x10]
cmp dword [esi + 0x14], 0x10
jb 0x42b69d
mov eax, dword [esi]
jmp 0x42b69f
mov eax, esi
push eax
lea ecx, [ebp - 0x58]
call fcn.0040fe40
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00427870
add esp, 8
test al, al
jne 0x42b8e0
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x12
cmp eax, 0x10
jb 0x42b6dd
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.0043d0f0
add esi, 0x18
mov dword [ebp - 0x31c], esi
cmp esi, dword [ebx + 4]
jne 0x42b645
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x42b704
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.0043d0f0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x42b72b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.0043d0f0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x42b752
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.0043d0f0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0xe
cmp eax, 0x10
jb 0x42b783
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.0043d0f0
lea ecx, [ebp - 0x338]
call fcn.00413db0
mov ebx, dword [ebp - 0x338]
mov dword [ebp - 0x31c], ebx
cmp ebx, dword [ebp - 0x324]
jne 0x42b400
mov ebx, dword [ebp - 0x334]
mov eax, dword [ebp - 0xbc]
cmp eax, 8
jb 0x42b7ca
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.00407380
xor eax, eax
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc0], 0
cmp eax, 8
jb 0x42b805
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00407380
xor eax, eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0x324]
lea ecx, [ebp - 0x324]
push eax
mov byte [ebp - 4], 0x14
push dword [eax]
lea eax, [ebp - 0x330]
push eax
call fcn.0041d5c0
push 1
push dword [ebp - 0x324]
lea ecx, [ebp - 0x324]
call fcn.0042c640
mov eax, dword [ebp - 0xa4]
cmp eax, 0x10
jb 0x42b872
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.0043d0f0
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
mov eax, dword [ebp - 0x32c]
lea ecx, [ebp - 0x32c]
push eax
mov dword [ebp - 4], 0x15
push dword [eax]
lea eax, [ebp - 0x330]
push eax
call fcn.0041d5c0
push 1
push dword [ebp - 0x32c]
lea ecx, [ebp - 0x32c]
call fcn.0042c640
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005ca59c
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00432e30
mov ecx, dword [ebp - 0x330]
add esp, 8
push eax
call fcn.00405e70
mov eax, dword [ebp - 0xd4]
cmp eax, 8
jb 0x42b920
inc eax
lea ecx, [ebp - 0xe8]
push eax
push dword [ebp - 0xe8]
call fcn.00407380
mov eax, dword [ebp - 0x44]
mov ebx, 1
cmp eax, 0x10
jb 0x42b93a
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.0043d0f0
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x42b94f
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.0043d0f0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 0x10
jb 0x42b976
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.0043d0f0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x42b99d
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.0043d0f0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x42b7ac
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.0043d0f0
jmp 0x42b7ac