Function at 0x429ea9
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
push dword [0xb7bc08]
push dword [0xb7bc04]
call fcn.0042ad05
mov dword [ebp - 8], eax
push 0xade409
push dword [ebp - 8]
call fcn.00401f57
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x429efb
push ebx
call fcn.0046c645
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x429f5e
call fcn.0042af59
call fcn.0042b07a
fild qword [0xb7bc0c]
fstp qword [ebp - 0xc]
fld qword [ebp - 0xc]
fadd qword [0xade415]
fstp qword [ebp - 0x14]
push 0xb7bc14
fld qword [ebp - 0x14]
call fcn.004010fc
push edx
push eax
call fcn.0042b21f
call fcn.0042c3f7
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [0xb7bc18]
push ebx
call fcn.0046c645
add esp, 4
pop eax
mov dword [0xb7bc18], eax
jmp 0x429f86
mov dword [0xb7bc1c], 0
mov dword [0xb7bc20], 0
mov dword [0xb7bc24], 0
mov dword [0xb7bc28], 0
mov ebx, dword [0xb7bba4]
add ebx, 0x110
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x429fab
call fcn.0042c72f
jmp 0x429fb0
call fcn.0042d576
mov ebx, dword [0xb7bba4]
add ebx, 0x1ac
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x429fd5
call fcn.0042d7fb
jmp 0x429fda
call fcn.0042d8c3
mov ebx, dword [0xb7bba4]
add ebx, 0x1a8
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x429fff
call fcn.0042d997
jmp 0x42a004
call fcn.0042dfbf
mov ebx, dword [0xb7bba4]
add ebx, 0x1a4
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a029
call fcn.0042e14c
jmp 0x42a02e
call fcn.0042e26c
mov ebx, dword [0xb7bba4]
add ebx, 0x1a0
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a053
call fcn.0042e26c
jmp 0x42a058
call fcn.0042e2ef
mov ebx, dword [0xb7bba4]
add ebx, 0x11c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a07d
call fcn.0042e372
jmp 0x42a082
call fcn.0042e562
mov ebx, dword [0xb7bba4]
add ebx, 0x11c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
jne 0x42a0d7
mov ebx, dword [0xb7bba4]
add ebx, 0x110
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
cmp dword [ebx], 0
jne 0x42a0d7
mov ebx, dword [0xb7bba4]
add ebx, 0x150
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x10]
cmp dword [ebx], 0
jne 0x42a0d7
xor eax, eax
jmp 0x42a0dc
mov eax, 1
test eax, eax
je 0x42a0ee
call fcn.0042e5ce
jmp 0x42a0f3
call fcn.0042e6df
mov ebx, dword [0xb7bba4]
add ebx, 0x18c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a118
call fcn.0042e75f
jmp 0x42a11d
call fcn.0042e7d3
mov ebx, dword [0xb7bba4]
add ebx, 0x1c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a13a
call fcn.0042e853
mov ebx, dword [0xb7bba4]
add ebx, 0x188
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a15f
call fcn.0042fa54
jmp 0x42a164
call fcn.0042fb28
mov ebx, dword [0xb7bba4]
add ebx, 0x12c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a189
call fcn.0042fbfc
jmp 0x42a18e
call fcn.0042fd24
mov ebx, dword [0xb7bba4]
add ebx, 0x19c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a1b3
call fcn.0042fe4c
jmp 0x42a1b8
call fcn.0042fff3
mov ebx, dword [0xb7bba4]
add ebx, 0xe4
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a1dd
call fcn.00430076
jmp 0x42a1e2
call fcn.0043028a
mov ebx, dword [0xb7bba4]
add ebx, 0x148
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a207
call fcn.0043041d
jmp 0x42a20c
call fcn.004304f1
mov ebx, dword [0xb7bba4]
add ebx, 0x17c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a231
call fcn.004305c5
jmp 0x42a236
call fcn.00430b77
mov ebx, dword [0xb7bba4]
add ebx, 0x160
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a25b
call fcn.00430dfc
jmp 0x42a260
call fcn.00430eae
mov ebx, dword [0xb7bba4]
add ebx, 0x15c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a285
call fcn.00430f60
jmp 0x42a28a
call fcn.00430fe3
mov ebx, dword [0xb7bba4]
add ebx, 0x124
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a2aa
call fcn.00431066
mov ebx, dword [0xb7bba4]
add ebx, 0x184
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a2ca
call fcn.004311ad
mov ebx, dword [0xb7bba4]
add ebx, 0xfc
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0xd8
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0xc]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0xdc
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x10]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0x104
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x14]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0x130
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0xe0
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0x14c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0x180
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], 0
jne 0x42a3c1
mov ebx, dword [0xb7bba4]
add ebx, 0x100
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
cmp dword [ebx], 0
jne 0x42a3c1
xor eax, eax
jmp 0x42a3c6
mov eax, 1
test eax, eax
je 0x42a3d3
call fcn.00431216
mov ebx, dword [0xb7bba4]
add ebx, 0xf4
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a3fd
call fcn.00431fee
call fcn.00432311
jmp 0x42a402
call fcn.004325b3
mov ebx, dword [0xb7bba4]
add ebx, 0x140
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a422
call fcn.00432695
mov ebx, dword [0xb7bba4]
add ebx, 0xf0
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a442
call fcn.00432866
mov ebx, dword [0xb7bba4]
add ebx, 0x128
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a467
call fcn.00432968
jmp 0x42a46c
call fcn.00432a7b
mov ebx, dword [0xb7bba4]
add ebx, 0x118
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a48c
call fcn.00432afe
mov ebx, dword [0xb7bba4]
add ebx, 0x144
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a4b1
call fcn.00432f89
jmp 0x42a4b6
call fcn.00433223
mov ebx, dword [0xb7bba4]
add ebx, 0x198
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a4db
call fcn.0043333c
jmp 0x42a4e0
call fcn.004333bc
mov ebx, dword [0xb7bba4]
add ebx, 0x150
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a505
call fcn.0043343c
jmp 0x42a50a
call fcn.00433cc4
mov ebx, dword [0xb7bba4]
add ebx, 0xec
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a52f
call fcn.00433d99
jmp 0x42a534
call fcn.00433f0f
mov ebx, dword [0xb7bba4]
add ebx, 0xf8
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a559
call fcn.00433f92
jmp 0x42a55e
call fcn.0043436e
mov ebx, dword [0xb7bba4]
add ebx, 0x108
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a583
call fcn.00434450
jmp 0x42a588
call fcn.00434569
mov ebx, dword [0xb7bba4]
add ebx, 0xc
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a5a5
call fcn.00434682
mov ebx, dword [0xb7bba4]
add ebx, 0x18
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a5c2
call fcn.00442e93
mov ebx, dword [0xb7bba4]
add ebx, 0x2c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a5df
call fcn.00443a58
mov ebx, dword [0xb7bba4]
add ebx, 0x7c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a5fc
call fcn.0044405b
cmp dword [ebp - 4], 0
jne 0x42a91f
mov ebx, dword [0xb7bba4]
add ebx, 0x6c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a623
call fcn.00445b4f
mov ebx, dword [0xb7bba4]
add ebx, 0x70
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a640
call fcn.00446047
mov ebx, dword [0xb7bba4]
add ebx, 0x50
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a65d
call fcn.004465dd
mov ebx, dword [0xb7bba4]
add ebx, 0x54
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a67a
call fcn.00446a57
mov ebx, dword [0xb7bba4]
add ebx, 0x58
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a697
call fcn.00446ed1
mov ebx, dword [0xb7bba4]
add ebx, 0x74
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a6b4
call fcn.0044734b
mov ebx, dword [0xb7bba4]
add ebx, 0x78
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a6d1
call fcn.004477f1
mov ebx, dword [0xb7bba4]
add ebx, 0x24
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a6ee
call fcn.00447fe8
mov ebx, dword [0xb7bba4]
add ebx, 0x80
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a70e
call fcn.004484f4
mov ebx, dword [0xb7bba4]
add ebx, 0x84
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a72e
call fcn.00448f4c
mov ebx, dword [0xb7bba4]
add ebx, 0x44
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a74b
call fcn.004498f3
mov ebx, dword [0xb7bba4]
add ebx, 0x28
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a768
call fcn.00449c51
mov ebx, dword [0xb7bba4]
add ebx, 0x20
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a785
call fcn.0044a50e
mov ebx, dword [0xb7bba4]
add ebx, 0x8c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a7a5
call fcn.0044b073
mov ebx, dword [0xb7bba4]
add ebx, 0x170
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a7c5
call fcn.0044bfe8
mov ebx, dword [0xb7bba4]
add ebx, 0x90
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a7e5
call fcn.0044c56f
mov ebx, dword [0xb7bba4]
add ebx, 0x94
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a805
call fcn.0044cba6
mov ebx, dword [0xb7bba4]
add ebx, 0x9c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a825
call fcn.0044d41a
mov ebx, dword [0xb7bba4]
add ebx, 0x64
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a842
call fcn.0044dd01
mov ebx, dword [0xb7bba4]
add ebx, 0x68
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a85f
call fcn.0044e680
mov ebx, dword [0xb7bba4]
add ebx, 0xa4
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a87f
call fcn.0044eef4
mov ebx, dword [0xb7bba4]
add ebx, 0xa8
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a89f
call fcn.0044f237
mov ebx, dword [0xb7bba4]
add ebx, 0xd4
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a8bf
call fcn.0044fa82
mov ebx, dword [0xb7bba4]
add ebx, 0x98
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a8df
call fcn.0044fdc5
mov ebx, dword [0xb7bba4]
add ebx, 0xa0
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a8ff
call fcn.0045030a
mov ebx, dword [0xb7bba4]
add ebx, 0x88
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a91f
call fcn.00450718
mov ebx, dword [0xb7bba4]
add ebx, 0x5c
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a960
fild dword [0xb7bbb4]
fstp dword [ebp - 8]
push dword [ebp - 8]
fild dword [0xb7bbb0]
fstp dword [ebp - 0xc]
push dword [ebp - 0xc]
push dword [0xb7bc30]
push dword [0xb7bc2c]
call fcn.00450dd7
mov ebx, dword [0xb7bba4]
add ebx, 0x30
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42a9d4
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xffffff
call fcn.0042992e
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
lea eax, [ebp - 0xc]
push eax
push 0x64
fld dword [0xb7bba8]
call fcn.004010fc
push eax
push dword [0xb7bba0]
push dword [0xb7bb9c]
call fcn.004523f0
mov ebx, dword [ebp - 0xc]
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [0xb7bba4]
add ebx, 0x34
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
cmp dword [ebx], 0
je 0x42aa3c
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push 0xffffff
call fcn.0042992e
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
lea eax, [ebp - 0xc]
push eax
push 0xa
push 4
push dword [0xb7bba0]
push dword [0xb7bb9c]
call fcn.00442653
mov ebx, dword [ebp - 0xc]
push ebx
call fcn.0046c645
add esp, 4
cmp dword [0xb7bc34], 0
je 0x42aaad
mov dword [ebp - 8], esp
push 0x71
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x42aa6d
push 6
call fcn.0046c633
add esp, 4
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0046eff0
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x42aaad
and dword [ebp - 4], 1
xor dword [ebp - 4], 1
mov dword [ebp - 8], esp
push 0x2d
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x42aad1
push 6
call fcn.0046c633
add esp, 4
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0046eff0
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x42ab26
cmp dword [0xb7bc38], 0
jne 0x42ab19
cmp dword [0xb7bc3c], 0
je 0x42ab26
mov eax, 1
jmp 0x42ab2b
mov eax, 0
test eax, eax
je 0x42abba
push 0xb7bc40
push 8
mov eax, 2
call fcn.0046d030
add esp, 8
mov edx, dword [0xb7bc3c]
mov eax, dword [0xb7bc38]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
mov ebx, dword [0xb7bc40]
mov dword [ebp - 0x10], ebx
call fcn.00401c78
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x10]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x42ab87
mov esi, ebx
shl ecx, 1
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14]
inc eax
shl eax, 3
add eax, 8
push eax
push dword [ebp - 0x10]
call fcn.0046c657
add esp, 8
mov dword [0xb7bc40], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x14]
shl eax, 3
add edi, eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov dword [edi], eax
mov dword [edi + 4], edx
mov dword [ebp - 8], esp
push 0x2e
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x42abde
push 6
call fcn.0046c633
add esp, 4
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0046eff0
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x42ac2f
mov ebx, dword [0xb7bc40]
push ebx
call fcn.0046c645
add esp, 4
mov eax, 0x4a43c7
mov dword [0xb7bc40], eax
mov dword [ebp - 8], esp
push 0x24
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x42ac53
push 6
call fcn.0046c633
add esp, 4
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0046eff0
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x42aca0
mov ebx, dword [0xb7bba4]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
and dword [ebx], 1
mov ebx, dword [ebp - 8]
xor dword [ebx], 1
mov dword [ebp - 8], esp
push 0x23
xor eax, eax
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop
nop
cmp dword [ebp - 8], esp
je 0x42acc4
push 6
call fcn.0046c633
add esp, 4
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0xc4
call fcn.0046eff0
add esp, 0x1c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jne 0x42ad01
call fcn.004524c9
mov esp, ebp
pop ebp
ret