Function at 0x42864d
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
movzx eax, byte [ebp + 0x2c]
test eax, eax
je 0x42870d
lea eax, [ebp + 0x14]
mov dword [ebp - 0x134], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1b4]
movzx eax, byte [eax]
test eax, eax
je 0x4286b0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x12c], eax
push dword [ebp - 0x12c]
push 1
call fcn.0042948a
pop ecx
pop ecx
jmp 0x428708
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
movzx eax, byte [eax]
test eax, eax
je 0x428700
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x10c]
mov dword [ecx], eax
jmp 0x428708
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
jmp 0x429486
lea eax, [ebp + 0x38]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x154], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1d8], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x144], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x144]
movzx eax, byte [eax]
test eax, eax
je 0x428848
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x1bc]
movzx eax, byte [eax]
test eax, eax
je 0x42881f
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov dword [eax], 0x4bf9
xor eax, eax
inc eax
cmp eax, 0x4bf9
jae 0x4287f2
mov dword [ebp - 0x58], 1
jmp 0x4287f6
and dword [ebp - 0x58], 0
cmp dword [ebp - 0x58], 1
jne 0x428808
mov dword [ebp - 0x110], 1
jmp 0x42880f
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x110]
mov dword [eax], ecx
jmp 0x428843
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [eax], 0xfffffff7
jmp 0x429486
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
movzx eax, byte [eax]
test eax, eax
je 0x428967
mov dword [ebp - 0x1cc], 0x82eac453
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0x19c], 0x89b58331
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x124], 9
mov dword [ebp - 0x1a4], 0xc511ec1f
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x1b8], 0
push 1
push 0x4b2
push 0xc5c
push 0x37e8
push 1
push 0x6c4e
push 0x3b07
push 0x33e4
push 0xe5d
push 1
call fcn.004127cb
add esp, 0x28
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x194]
push eax
push 0x5322
push 0x14d1
push 0x2856
lea eax, [ebp - 0x1cc]
push eax
push 0
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1a4]
push eax
push 1
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004204eb
add esp, 0x38
jmp 0x429486
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 8], 0xe469ad59
mov dword [ebp - 0x30], 0
jmp 0x428996
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x4289a9
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc], 0x7f0a290b
jmp 0x42898f
push 0x1930
push 0x51bc
push 0x37e1
push 0
push 0x2d21
push 0x2b2f
push 1
push 0x6607
lea eax, [ebp - 8]
push eax
push 0x5f66
push 0x7ee1
push 1
push 0x42c4
call fcn.0042bf91
add esp, 0x34
mov dword [ebp - 8], 0xd
jmp 0x4289f8
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x13
jg 0x428f97
mov dword [ebp - 4], 0xa1220985
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x214], 0x9505c00d
mov dword [ebp - 0x210], 0x9505c00d
mov dword [ebp - 0x20c], 0x9505c00d
mov dword [ebp - 0x208], 0x9505c00d
lea ecx, [ebp - 0x3d]
call fcn.00432c0a
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x24c]
call fcn.00432c0d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f8]
call fcn.00432bb9
mov byte [ebp - 0x11], 0
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x428aa2
push 0x219
push 1
push 0x62f5
push 1
push 0x1ca4
push 0x1574
push 0x48a4
push 1
push 0x4ade
call fcn.004092ac
add esp, 0x24
mov dword [ebp - 4], 0
jmp 0x428ab2
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x428f87
mov dword [ebp - 0x24], 0xb56c
mov dword [ebp - 0x150], 0x17ea5ca4
mov eax, dword [ebp - 4]
cmp dword [ebp - 8], eax
jl 0x428ae1
cmp dword [ebp - 0x24], 0
jne 0x428ae1
and dword [ebp - 0x60], 0
jmp 0x428ae8
mov dword [ebp - 0x60], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x60], eax
jne 0x428afc
mov dword [ebp - 0x148], 1
jmp 0x428b03
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x24], 0
je 0x428b2e
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x428b2e
mov dword [ebp - 0xc0], 1
jmp 0x428b35
and dword [ebp - 0xc0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc0]
sub ecx, 0xcf0a
cmp dword [ebp + eax - 0xc], ecx
je 0x428b56
mov dword [ebp - 0x68], 1
jmp 0x428b5a
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x24]
cmp eax, 1
ja 0x428b71
mov dword [ebp - 0xf0], 1
jmp 0x428b78
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0xf0], eax
jg 0x428bac
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
jne 0x428bac
mov eax, 0xbf79
test eax, eax
jne 0x428bac
cmp dword [ebp - 4], 0
jne 0x428bac
and dword [ebp - 0x70], 0
jmp 0x428bb3
mov dword [ebp - 0x70], 1
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x70]
jl 0x428bc7
mov dword [ebp - 0xc8], 1
jmp 0x428bce
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xc8], eax
jle 0x428be8
mov eax, 0xc06e
test eax, eax
jne 0x428be8
and dword [ebp - 0x78], 0
jmp 0x428bef
mov dword [ebp - 0x78], 1
cmp dword [ebp - 0x78], 0xbec
jl 0x428c04
mov dword [ebp - 0x108], 1
jmp 0x428c0b
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x108], eax
jl 0x428c26
mov dword [ebp - 0x80], 1
jmp 0x428c2a
and dword [ebp - 0x80], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp eax, dword [ebp - 0x80]
jle 0x428c45
mov dword [ebp - 0xd0], 1
jmp 0x428c4c
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 8]
je 0x428f28
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x244], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 8]
cmp dword [ebp + eax - 0xc], ecx
je 0x428c97
mov dword [ebp - 0x88], 1
jmp 0x428c9e
and dword [ebp - 0x88], 0
imul eax, dword [ebp - 0x88], 0xfffc
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x428cc9
cmp dword [ebp - 0x18], 0
je 0x428cc9
cmp dword [ebp - 4], 0
je 0x428cc9
mov dword [ebp - 0xf8], 1
jmp 0x428cd0
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xd81c9193
jne 0x428ce2
cmp dword [ebp - 0x18], 0
jne 0x428cf4
mov eax, 0xd6e5
test eax, eax
jne 0x428cf4
and dword [ebp - 0x90], 0
jmp 0x428cfe
mov dword [ebp - 0x90], 1
cmp dword [ebp - 0x90], 0xffffffff
jbe 0x428d13
mov dword [ebp - 0xd8], 1
jmp 0x428d1a
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xd8]
jg 0x428d31
mov dword [ebp - 0x98], 1
jmp 0x428d38
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 4]
add eax, 0xb23f
cmp dword [ebp - 0x18], eax
jle 0x428d69
push 1
lea ecx, [ebp - 0x1f8]
call fcn.00432bfb
cmp dword [eax], 0
je 0x428d69
mov dword [ebp - 0x118], 1
jmp 0x428d70
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0
jb 0x428d85
mov dword [ebp - 0xa0], 1
jmp 0x428d8c
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 8
jne 0x428da1
mov dword [ebp - 0xe0], 1
jmp 0x428da8
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xe0]
jle 0x428dbf
mov dword [ebp - 0xa8], 1
jmp 0x428dc6
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xa8], eax
jne 0x428ddd
mov dword [ebp - 0x100], 1
jmp 0x428de4
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x18], 0
je 0x428e0d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x428e08
jmp 0x428f87
jmp 0x428f26
mov dword [ebp - 0x240], 0xba733a7a
mov dword [ebp - 0x38], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x238], eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.00432bfb
push 0
lea ecx, [ebp - 0x1f8]
call fcn.00432bfb
cmp dword [eax], 0
je 0x428e58
mov eax, 0xffc3eba4
test eax, eax
jne 0x428e6a
cmp dword [ebp - 0x150], 0
jne 0x428e6a
and dword [ebp - 0xb0], 0
jmp 0x428e74
mov dword [ebp - 0xb0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0xb0], eax
jl 0x428e92
mov dword [ebp - 0xe8], 1
jmp 0x428e99
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x158]
jne 0x428eb3
cmp dword [ebp - 0x38], 0
jne 0x428eb3
cmp dword [ebp - 0x38], 0
je 0x428ec4
xor eax, eax
inc eax
je 0x428ec4
mov dword [ebp - 0xb8], 1
jmp 0x428ecb
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0x54]
cmp eax, 0xac0d7489
je 0x428ee4
mov dword [ebp - 0x5c], 1
jmp 0x428ee8
and dword [ebp - 0x5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x5c], eax
jge 0x428f00
mov dword [ebp - 0x64], 1
jmp 0x428f04
and dword [ebp - 0x64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x64], eax
jne 0x428f1c
mov dword [ebp - 0x6c], 1
jmp 0x428f20
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x48], eax
jmp 0x428f82
push 0x4100
push 0x3aa
push 0x1c16
push 0xaee
push 0
push 0x2bce
push 0x7278
push 0x47dd
push 0x1421
push 0x1132
push 0x41c1
push 0
push 1
push 0x1363
push 0x278d
push 1
push 1
push 0x5f3c
push 0x5497
push 1
call fcn.0040ea7b
add esp, 0x50
jmp 0x428aab
lea ecx, [ebp - 0x1f8]
call fcn.00432bdf
jmp 0x4289f1
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 4]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x2c], 0xd72d7671
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x74], 0x97bc8b42
mov dword [ebp - 0x3c], 0x55073046
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xac], 0x9e63a5be
mov dword [ebp - 0x168], 0xb8f1fe3d
mov dword [ebp - 0x170], 0x6ed4bca9
mov dword [ebp - 0x34], 0
jmp 0x429001
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x429017
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x230], 0xfffffffe
jmp 0x428ffa
mov eax, dword [ebp - 0x28]
add eax, 0xffff
imul eax, eax, 0xf595
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x74], eax
jle 0x42903d
mov dword [ebp - 0x7c], 1
jmp 0x429041
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x7c], eax
jge 0x429055
mov dword [ebp - 0x160], 1
jmp 0x42905c
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
jge 0x429070
mov dword [ebp - 0x84], 1
jmp 0x429077
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x84], eax
jg 0x42908e
mov dword [ebp - 0x8c], 1
jmp 0x429095
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x8c]
imul eax, ecx
cmp dword [ebp - 0x2c], eax
jl 0x4290b6
mov dword [ebp - 0x94], 1
jmp 0x4290bd
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0
jle 0x4290d2
mov dword [ebp - 0x9c], 1
jmp 0x4290d9
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x44], eax
je 0x429114
mov dword [ebp - 0xb4], 1
jmp 0x42911b
and dword [ebp - 0xb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x230]
cmp dword [ebp - 0xb4], eax
jge 0x42913c
mov dword [ebp - 0xbc], 1
jmp 0x429143
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x168]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 5
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0xfffffff9
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x1c], 0xebd004dd
mov dword [ebp - 0x188], 0xb300
imul eax, dword [ebp - 0x4c], 0xd837
test eax, eax
je 0x4291e6
mov dword [ebp - 0x178], 0x9968cb66
push 0
push 0x182d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00429cc1
add esp, 0x14
push 0x4907
push 1
push 0
push 0x15b3
lea eax, [ebp - 0x178]
push eax
push 0x134d
call fcn.0041cfb5
add esp, 0x18
jmp 0x42926b
mov dword [ebp - 0x180], 1
push 0
push 0x5155
push 1
push 0x7c8a
push 0x5631
lea eax, [ebp - 0x180]
push eax
push 1
push 0x4dea
push 0x1c9c
push 0x43d
push 1
call fcn.00412331
add esp, 0x2c
mov dword [ebp - 0x1c], 0x1a
jmp 0x429235
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe6
jl 0x42926b
push 1
push 1
push 0x947
push 0x4681
push 0
push 0x5b31
push 0x7a5f
push 0x64ca
push 1
push 0x206b
call fcn.00416620
add esp, 0x28
jmp 0x42922e
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x2d7c
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
push 0x3fd1
call fcn.0041d6e8
add esp, 0x1c
mov eax, dword [ebp - 0x50]
cmp dword [eax + 4], 0
jbe 0x429486
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x198], 0x6364
mov dword [ebp - 0x1a8], 0xfffffffd
mov dword [ebp - 0x10], 0
jmp 0x4292cd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x4292e3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x104], 0xbd697e78
jmp 0x4292c6
mov dword [ebp - 0x10], 0
jmp 0x4292f3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x429309
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x200], 0x31e19e95
jmp 0x4292ec
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xd4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd4]
mov dword [ebp + eax - 0x200], ecx
cmp dword [ebp - 0xd4], 0
jl 0x429343
mov dword [ebp - 0xe4], 1
jmp 0x42934a
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xdc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp + eax - 0x104], ecx
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xe4]
je 0x429380
mov dword [ebp - 0xec], 1
jmp 0x429387
and dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0
jl 0x42939c
mov dword [ebp - 0x190], 1
jmp 0x4293a3
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x234], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x200], 0x2e40c18a
jne 0x4293d4
mov dword [ebp - 0xf4], 1
jmp 0x4293db
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0xc279
jge 0x4293f3
mov dword [ebp - 0xfc], 1
jmp 0x4293fa
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x198]
imul eax, dword [ebp - 0xfc]
test eax, eax
jne 0x42941d
mov eax, 0x4ea33a4d
test eax, eax
jne 0x42941d
and dword [ebp - 0x1a0], 0
jmp 0x429427
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x21c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x11c]
add ecx, dword [eax]
mov dword [ebp - 0x114], ecx
mov eax, dword [ebp - 0x114]
cmp dword [eax], 0
jbe 0x429486
push 0
push dword [ebp - 0x1b0]
push 0
lea eax, [ebp - 0x114]
push eax
push 0x6a96
lea eax, [ebp - 0x11c]
push eax
call fcn.00423df8
add esp, 0x18
jmp 0x429454
mov esp, ebp
pop ebp
ret