Function at 0x42ebd0
Capabilities:
Check for software breakpoints
Suspend thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffff500
push ebx
push esi
push edi
mov esi, dword [0x4d571c]
push esi
call fcn.0042e44c
mov edi, eax
mov eax, dword [ebp + 8]
pop ecx
mov dword [eax], edi
mov edx, dword [0x4d5714]
cmp edx, 9
ja case.0x42ec06.0
jmp dword [edx*4 + 0x42ec0d]
mov ecx, dword [0x4e360c]
xor eax, eax
mov dword [ebp - 0x14], ecx
mov dword [0x4e360c], eax
mov dword [ebp - 0x5c], 0x4d5720
test edi, edi
jne 0x42ec5d
mov edx, dword [ebp - 0x5c]
xor ebx, ebx
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x28], ecx
jmp 0x42ec7f
mov eax, dword [edi + 0x2c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x14], 0
mov ebx, dword [edi + 0x10]
je 0x42ec7f
test byte [edi + 0x31], 1
je 0x42ec7f
and dword [edi + 0x30], 0xfffffeff
mov dword [edi], 1
mov eax, dword [ebp - 0x5c]
cmp dword [eax], 0x80000003
je 0x42ec91
xor edx, edx
mov dword [ebp - 0x24], edx
jmp 0x42ed0a
push 2
push 1
mov ecx, dword [ebp - 0x28]
dec ecx
push ecx
lea eax, [ebp - 0x45]
push eax
call sym.ollydbg.exe__Readmemory
add esp, 0x10
cmp eax, 1
je 0x42ecb2
xor edx, edx
mov dword [ebp - 0x24], edx
jmp 0x42ed0a
xor eax, eax
mov al, byte [ebp - 0x45]
cmp eax, 0xcc
jne 0x42ecc7
mov dword [ebp - 0x24], 1
jmp 0x42ed0a
cmp eax, 3
je 0x42ecd3
xor edx, edx
mov dword [ebp - 0x24], edx
jmp 0x42ed0a
push 2
push 1
mov ecx, dword [ebp - 0x28]
sub ecx, 2
push ecx
lea eax, [ebp - 0x45]
push eax
call sym.ollydbg.exe__Readmemory
add esp, 0x10
cmp eax, 1
jne 0x42ecfc
xor edx, edx
mov dl, byte [ebp - 0x45]
cmp edx, 0xcd
je 0x42ed03
xor ecx, ecx
mov dword [ebp - 0x24], ecx
jmp 0x42ed0a
mov dword [ebp - 0x24], 2
mov eax, dword [ebp - 0x24]
sub dword [ebp - 0x28], eax
mov edx, dword [0x4d5708]
cmp edx, dword [ebp - 0x28]
jne 0x42ed23
cmp ebx, dword [0x4d570c]
je 0x42ed39
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [0x4d5710], ecx
mov dword [0x4d5708], eax
mov dword [0x4d570c], ebx
mov edx, dword [ebp - 0x5c]
mov ecx, dword [edx]
cmp ecx, 0xc000008f
jg 0x42edaf
je 0x43078b
cmp ecx, 0xc000001d
jg 0x42ed87
je 0x430b2a
sub ecx, 0x80000001
je 0x430580
sub ecx, 2
je 0x42ee04
dec ecx
je 0x42fc6d
sub ecx, 0x40000001
je 0x42ff94
jmp 0x430c54
sub ecx, 0xc0000025
je 0x430bb5
sub ecx, 0x67
je 0x430649
dec ecx
je 0x4306b1
dec ecx
je 0x43071e
jmp 0x430c54
cmp ecx, 0xc0000094
jg 0x42ede3
je 0x4309ac
sub ecx, 0xc0000090
je 0x4307f8
dec ecx
je 0x430865
dec ecx
je 0x4308d2
dec ecx
je 0x43093f
jmp 0x430c54
sub ecx, 0xc0000095
je 0x430a37
dec ecx
je 0x430a9f
sub ecx, 0x67
je 0x430bec
jmp 0x430c54
or dword [0x4d5774], 0x10
xor edx, edx
mov eax, dword [0x4d5788]
mov dword [0x4d5788], edx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x42ee7e
call fcn.0045f36c
call sym.ollydbg.exe__Listmemory
mov ecx, dword [0x4d7218]
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0
je 0x42ee5b
xor ebx, ebx
jmp 0x42ee53
lea eax, [ebx + ebx*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
mov edx, dword [ebp - 0x54]
or dword [edx + eax + 8], 0x10
inc ebx
cmp ebx, dword [0x4d7200]
jl 0x42ee3e
cmp dword [0x4d77e0], 0
je 0x42ee74
push 0
push 0
mov ecx, dword [0x4d77e0]
push ecx
call sub.USER32.DLL_InvalidateRect
mov dword [0x4d5794], 1
cmp dword [0x4d6ea0], 0
je 0x42eed0
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Findmodule
pop ecx
mov dword [ebp - 0x54], eax
test eax, eax
je 0x42eed0
mov edx, dword [ebp - 0x54]
test byte [edx + 8], 4
je 0x42eed0
lea ecx, [ebp - 0x1b00]
push ecx
call fcn.0049fc10
pop ecx
test eax, eax
je 0x42eed0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1ae4]
jne 0x42eed0
call fcn.004a1694
test eax, eax
jne 0x42eed0
mov eax, 1
jmp 0x431425
lea edx, [ebp - 0x44]
push edx
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Getbreakpointtypecount
add esp, 8
mov dword [ebp - 0x40], eax
test edi, edi
jne 0x42ef14
mov eax, dword [ebp - 0x28]
push eax
push str.Unrecoverable_breakpoint_at__08lX
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Message
add esp, 0xc
mov ecx, dword [ebp - 0x28]
push ecx
push str.OllyDbg_is_unable_to_read_registers_and_update_EIP_for_breakpoint_at__possibly_invalid__address__08lX._This_usually_makes_correct_continuation_impossible._However__you_may_try_to_recover_and_continue_at_your_own_risk.
call sym.ollydbg.exe__Error
add esp, 8
xor eax, eax
jmp 0x431425
test byte [ebp - 0x40], 8
je 0x42ef36
cmp dword [ebp - 0x24], 0
jne 0x42ef36
mov edx, dword [ebp - 0x28]
mov dword [edi + 0x2c], edx
mov dword [edi], 1
mov eax, 1
jmp 0x431425
mov edx, dword [ebp - 0x28]
push edx
call fcn.0041b454
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x42ef53
mov dword [0x4e3b34], 1
cmp dword [0x4d6ea0], 0
je 0x42efcf
test byte [ebp - 0x3f], 8
je 0x42efcf
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Findmodule
pop ecx
mov dword [ebp - 0x54], eax
test eax, eax
je 0x42efcf
mov edx, dword [ebp - 0x54]
add edx, 0x50
push edx
push 0x4d5b80
call fcn.004a38bc
add esp, 8
test eax, eax
jne 0x42efcf
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x28]
cmp eax, dword [ebp - 0x28]
jne 0x42efcf
cmp dword [0x4d920c], 0
je 0x42efbe
push 0
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0xc]
push ecx
call sym.ollydbg.exe__Finddecode
add esp, 8
test eax, eax
jne 0x42efbe
mov eax, dword [ebp - 0x54]
push eax
call sym.ollydbg.exe__Analysecode
pop ecx
push str.Entry_point_of_debugged_DLL
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Message
add esp, 8
test byte [ebp - 0x3f], 6
je 0x42f552
or dword [0x4d5710], 4
mov ecx, dword [ebp - 0x28]
mov dword [edi + 0x2c], ecx
mov dword [edi], 1
lea eax, [ebp - 0x468]
push eax
push 0x3b
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Findname
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jle 0x42f050
xor ecx, ecx
mov ebx, 1
mov cl, byte [ebp - 0x468]
lea eax, [ebp - 0x467]
and ecx, 0x3f
mov dword [ebp - 4], ecx
jmp 0x42f036
xor edx, edx
mov dl, byte [eax]
cmp edx, 0xa
jne 0x42f034
mov byte [eax], 0
inc ebx
jmp 0x42f043
inc ebx
inc eax
cmp ebx, 0xff
jge 0x42f043
cmp byte [eax], 0
jne 0x42f025
lea ecx, [ebp - 0x468]
add ebx, ecx
mov dword [ebp - 0x50], ebx
jmp 0x42f060
mov byte [ebp - 0x467], 0
lea eax, [ebp - 0x467]
mov dword [ebp - 0x50], eax
lea edx, [ebp - 0x368]
push edx
push 0x38
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Findname
add esp, 0xc
mov dword [ebp - 8], eax
mov ebx, eax
test ebx, ebx
jle 0x42f12a
push 1
push esi
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x368]
push eax
lea edx, [ebp - 0x780]
push edx
call fcn.00407c08
mov ebx, eax
mov eax, dword [ebp - 0x77c]
and eax, 0x1f
add esp, 0x24
cmp eax, 4
jne 0x42f0c2
cmp dword [ebp - 0x778], 0
je 0x42f12a
xor ebx, ebx
jmp 0x42f12a
cmp dword [ebp - 0x77c], 9
jne 0x42f0e0
fld xword [ebp - 0x778]
fcomp dword [0x43142c]
fnstsw ax
sahf
je 0x42f12a
xor ebx, ebx
jmp 0x42f12a
cmp dword [ebp - 0x77c], 8
jne 0x42f0fb
mov eax, dword [ebp - 0x778]
or eax, dword [ebp - 0x774]
je 0x42f12a
xor ebx, ebx
jmp 0x42f12a
cmp dword [ebp - 0x780], 0xb
jne 0x42f111
cmp byte [ebp - 0x76e], 0
je 0x42f12a
xor ebx, ebx
jmp 0x42f12a
cmp dword [ebp - 0x780], 0xc
jne 0x42f128
cmp word [ebp - 0x76e], 0
je 0x42f12a
xor ebx, ebx
jmp 0x42f12a
xor ebx, ebx
test byte [ebp - 0x3f], 2
je 0x42f265
test ebx, ebx
jne 0x42f13e
test byte [ebp - 4], 2
jne 0x42f148
test byte [ebp - 4], 4
je 0x42f265
lea eax, [ebp - 0x268]
push eax
push 0x3c
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Findname
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp byte [ebp - 0x467], 0
je 0x42f222
cmp dword [ebp - 0xc], 0
jle 0x42f18d
push 0x4b6059
lea ecx, [ebp - 0x268]
add ecx, dword [ebp - 0xc]
push ecx
call fcn.004a6c2c
add esp, 8
add dword [ebp - 0xc], eax
push 1
push esi
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x467]
push eax
lea edx, [ebp - 0x780]
push edx
call fcn.00407c08
add esp, 0x24
lea ecx, [ebp - 0x76e]
push ecx
lea eax, [ebp - 0x268]
add eax, dword [ebp - 0xc]
push eax
call fcn.004a6c2c
add esp, 8
add dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x50]
cmp byte [edx], 0
je 0x42f222
mov ecx, dword [ebp - 0x77c]
and ecx, 0x1f
cmp ecx, 4
jne 0x42f222
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x268]
mov byte [ebp + eax - 0x268], 0x20
inc dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
mov byte [ebp + edx - 0x268], 0
push 0
push 0
add ecx, dword [ebp - 0xc]
push ecx
push 1
mov eax, dword [ebp - 0x778]
push eax
mov edx, dword [ebp - 0x50]
push edx
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Decodeknownargument
add esp, 0x1c
cmp dword [0x4d9e40], 0
je 0x42f246
lea eax, [ebp - 0x268]
mov edx, dword [0x4d9e40]
push eax
push str.____COND:__s_n
push edx
call fcn.004a53a0
add esp, 0xc
lea ecx, [ebp - 0x268]
push ecx
push 0xf8
push str.COND:__.s
push 1
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Addtolist
add esp, 0x14
test byte [ebp - 0x3f], 2
je 0x42f338
test ebx, ebx
jne 0x42f279
test byte [ebp - 4], 8
jne 0x42f283
test byte [ebp - 4], 0x10
je 0x42f338
push 1
mov edx, dword [edi + 0x1c]
push edx
push 0
mov ecx, dword [ebp - 0x28]
push ecx
lea eax, [ebp - 0xaa4]
push eax
call fcn.0040dde4
add esp, 0x14
test eax, eax
jne 0x42f338
cmp dword [ebp - 0x99c], 0
jne 0x42f2ce
lea edx, [ebp - 0xaa4]
push edx
push 0xf7
push str.CALL_to__.s
push 1
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Addtolist
add esp, 0x14
xor esi, esi
push 0
lea eax, [ebp - 0x268]
push 0
push eax
push esi
lea edx, [ebp - 0xaa4]
push edx
call fcn.0040e388
add esp, 0x14
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x42f338
test esi, esi
jne 0x42f318
cmp dword [ebp - 0x99c], 0
je 0x42f318
lea ecx, [ebp - 0x268]
push ecx
push 1
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Addtolist
add esp, 0xc
jmp 0x42f335
lea edx, [ebp - 0x268]
push edx
push 0xfd
push 0x4b6083
push 0
push 0
call sym.ollydbg.exe__Addtolist
add esp, 0x14
inc esi
jmp 0x42f2d0
test byte [ebp - 0x3f], 2
je 0x42f4fe
test ebx, ebx
jne 0x42f34c
test byte [ebp - 4], 1
je 0x42f356
test byte [ebp - 4], 0x20
je 0x42f4fe
cmp dword [ebp - 0x44], 0
jbe 0x42f388
mov ecx, dword [ebp - 0x28]
push ecx
push 0x4d7ee1
call sym.ollydbg.exe__Findsorteddata
add esp, 8
mov dword [ebp - 0x58], eax
test eax, eax
je 0x42f388
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x44]
dec edx
mov eax, 2
mov dword [ecx + 0xd], edx
jmp 0x431425
cmp dword [ebp - 8], 0
je 0x42f398
test byte [ebp - 4], 0x20
je 0x42f445
push str.Breakpoint_at
lea edx, [ebp - 0x268]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
push 0
mov ecx, 0x100
sub ecx, dword [ebp - 0xc]
push ecx
lea eax, [ebp - 0x268]
add eax, dword [ebp - 0xc]
push eax
push 0
push 0
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Decodeaddress
add dword [ebp - 0xc], eax
mov ecx, 0x100
sub ecx, dword [ebp - 0xc]
add esp, 0x18
add ecx, 0xfffffffc
lea eax, [ebp - 0x266]
push ecx
add eax, dword [ebp - 0xc]
push eax
push 0x1002
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Decoderelativeoffset
add esp, 0x10
mov esi, eax
test esi, esi
je 0x42f4d7
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x268], 0x20
inc dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
mov byte [ebp + edx - 0x268], 0x28
inc dword [ebp - 0xc]
add dword [ebp - 0xc], esi
mov ecx, dword [ebp - 0xc]
mov byte [ebp + ecx - 0x268], 0x29
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x268], 0
jmp 0x42f4d7
push str.Conditional_breakpoint_at
lea edx, [ebp - 0x268]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
push 0
mov ecx, 0x100
sub ecx, dword [ebp - 0xc]
push ecx
lea eax, [ebp - 0x268]
add eax, dword [ebp - 0xc]
push eax
push 0
push 0
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Decodeaddress
add esp, 0x18
add dword [ebp - 0xc], eax
cmp dword [ebp - 0x77c], 0
jne 0x42f4d7
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x268]
lea edi, [ebp - 0x76e]
mov byte [ebp + ecx - 0x268], 0x3a
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov byte [ebp + eax - 0x268], 0x20
inc dword [ebp - 0xc]
xor eax, eax
add edx, dword [ebp - 0xc]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edx
xchg edi, esi
mov edx, ecx
mov eax, edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x169], 0
lea eax, [ebp - 0x268]
push eax
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 8
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
test byte [ebp - 0x3f], 8
je 0x42f53b
push 0
push 0
mov ecx, dword [ebp - 0x40]
and ecx, 0xffffe7ff
or ecx, 0x4000
push ecx
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Setbreakpointext
add esp, 0x10
test byte [ebp - 0x40], 0x80
je 0x431423
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
inc dword [0x4e3b30]
or dword [0x4d5710], 4
mov eax, 2
jmp 0x431425
test byte [ebp - 0x3f], 8
je 0x42f7dc
mov edx, dword [ebp - 0x28]
mov dword [edi + 0x2c], edx
mov dword [edi], 1
mov ecx, dword [0x4d7364]
push ecx
call sym.ollydbg.exe__Findmodule
pop ecx
mov dword [ebp - 0x54], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x54], 0
je 0x42f5a7
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0x3dd]
cmp ecx, dword [ebp - 0x28]
jne 0x42f5a7
push str.Main_program
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 8
jmp 0x42f71b
cmp dword [ebp - 0x54], 0
je 0x42f6d9
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0x28]
cmp ecx, dword [ebp - 0x28]
jne 0x42f6d9
cmp dword [0x4d8d64], 0
je 0x42f6c6
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 0xc]
cmp edx, dword [ebp - 0x28]
ja 0x42f5f0
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x54]
mov eax, dword [ecx + 0xc]
add eax, dword [edx + 0x3e9]
cmp eax, dword [ebp - 0x28]
ja 0x42f6c6
xor ecx, ecx
xor eax, eax
mov dword [0x4d8150], ecx
xor edx, edx
mov dword [0x4d8154], eax
mov dword [0x4e3b48], edx
xor eax, eax
mov dword [0x4e3b40], edx
mov dword [0x4e3b4c], eax
mov dword [0x4e3b44], eax
cmp dword [0x4d8d68], 0
je 0x42f670
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov ecx, dword [edx + 0x3e1]
cmp ecx, dword [eax + 0xc]
jb 0x42f670
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0x54]
add ecx, dword [eax + 0x3e9]
cmp ecx, dword [edx + 0x3e1]
jbe 0x42f670
push 0x1000
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3e1]
and eax, 0xfffff000
push eax
push 0x1003
call sym.ollydbg.exe__Setmembreakpoint
add esp, 0xc
jmp 0x42f68e
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0x3e9]
push ecx
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 0xc]
push edx
push 0x1003
call sym.ollydbg.exe__Setmembreakpoint
add esp, 0xc
mov dword [ebp - 0x1c], 1
mov dword [0x4d8138], 1
push 0x101
push 0
push 0
push 0
push esi
call sym.ollydbg.exe__Setcpu
add esp, 0x14
push str.Starting_SFX_real_entry_tracing
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 8
jmp 0x42f71b
push str.Program_entry_point
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 8
jmp 0x42f71b
push esi
call sym.ollydbg.exe__Findthread
pop ecx
mov edi, eax
test edi, edi
je 0x42f71b
mov eax, dword [edi + 0x14]
cmp eax, dword [ebp - 0x28]
jne 0x42f71b
push 0x800
push esi
lea edx, [ebp - 0x268]
push edx
call sym.ollydbg.exe__Decodethreadname
add esp, 0xc
lea ecx, [ebp - 0x268]
push ecx
push str.Entry_point_of__s
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 0xc
cmp dword [0x4d8138], 0
jne 0x42f7a2
cmp dword [ebp - 0x54], 0
je 0x42f7a2
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0x3dd]
cmp ecx, dword [ebp - 0x28]
je 0x42f771
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 0x28]
cmp edx, dword [ebp - 0x28]
je 0x42f771
cmp dword [0x4d6ea0], 0
je 0x42f7a2
lea ecx, [ebp - 0x1b00]
push ecx
call fcn.0049fc10
pop ecx
test eax, eax
je 0x42f7a2
cmp dword [ebp - 0x1af0], 0
je 0x42f7a2
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1af0]
jne 0x42f7a2
cmp dword [0x4d920c], 0
je 0x42f7a2
mov edx, dword [ebp - 0x54]
test byte [edx + 8], 4
je 0x42f7a2
push 0
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0xc]
push eax
call sym.ollydbg.exe__Finddecode
add esp, 8
test eax, eax
jne 0x42f7a2
mov edx, dword [ebp - 0x54]
push edx
call sym.ollydbg.exe__Analysecode
pop ecx
push 0
mov ecx, dword [ebp - 0x28]
inc ecx
push ecx
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Deletebreakpoints
add esp, 0xc
cmp dword [ebp - 0x1c], 0
je 0x42f7c5
mov eax, 2
jmp 0x431425
test byte [ebp - 0x40], 0x80
je 0x431423
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
cmp dword [ebp - 0x18], 2
jne 0x42f810
or dword [0x4d5710], 4
mov edx, dword [ebp - 0x28]
mov dword [edi + 0x2c], edx
mov dword [edi], 1
push 0
push edi
call fcn.0048af18
add esp, 8
inc dword [0x4e3b30]
mov eax, 2
jmp 0x431425
test byte [ebp - 0x40], 8
jne 0x42f83f
mov edx, dword [ebp - 0x28]
mov dword [edi + 0x2c], edx
mov dword [edi], 1
push 0
mov ecx, dword [ebp - 0x28]
inc ecx
push ecx
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Deletebreakpoints
add esp, 0xc
mov eax, 1
jmp 0x431425
cmp dword [ebp - 0x10], 0
je 0x42fa5f
mov dword [0x4d5780], 1
call fcn.0045f36c
call sym.ollydbg.exe__Listmemory
xor edx, edx
mov dword [ebp - 8], edx
jmp 0x42f880
mov ecx, dword [ebp - 8]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*8]
mov eax, dword [0x4d7218]
and dword [eax + ecx + 8], 0xfffffffe
inc dword [ebp - 8]
mov edx, dword [ebp - 8]
cmp edx, dword [0x4d7200]
jge 0x42f894
cmp dword [0x4d7218], 0
jne 0x42f864
cmp dword [0x4d70f8], 0
je 0x42f8ad
push 0
push 0
mov ecx, dword [0x4d70f8]
push ecx
call sub.USER32.DLL_InvalidateRect
cmp dword [ebp - 0x10], 1
jne 0x42f9e4
mov eax, dword [0x4d7364]
push eax
call sym.ollydbg.exe__Findmodule
pop ecx
mov dword [ebp - 0x54], eax
and dword [edi + 0xe6], 0xfffffff0
mov dword [edi], 1
cmp dword [0x4d6ea0], 0
je 0x42f918
lea edx, [ebp - 0x1b00]
push edx
call fcn.0049fc10
pop ecx
test eax, eax
je 0x42f918
cmp dword [ebp - 0x1af0], 0
je 0x42f918
push 0
push 0
push 0x4880
mov ecx, dword [ebp - 0x1af0]
push ecx
call sym.ollydbg.exe__Setbreakpointext
add esp, 0x10
mov eax, 1
jmp 0x431425
cmp dword [0x4d734c], 0
je 0x42f93c
cmp dword [ebp - 0x54], 0
je 0x42f93c
mov edx, dword [ebp - 0x54]
cmp dword [edx + 0x28], 0
jne 0x42f97b
mov ecx, dword [ebp - 0x54]
cmp dword [ecx + 0x3dd], 0
jne 0x42f97b
cmp dword [ebp - 0x54], 0
je 0x42f963
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x28], 0
je 0x42f963
push 0
push 0
push 0x4880
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0x28]
push ecx
call sym.ollydbg.exe__Setbreakpointext
add esp, 0x10
push str.System_startup_breakpoint
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 8
xor eax, eax
jmp 0x431425
cmp dword [0x4d734c], 2
jne 0x42f9b5
mov edx, dword [ebp - 0x54]
cmp dword [edx + 0x3dd], 0
je 0x42f9b5
push 0
push 0
push 0x4880
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3dd]
push eax
call sym.ollydbg.exe__Setbreakpointext
add esp, 0x10
mov eax, 1
jmp 0x431425
mov edx, dword [ebp - 0x54]
cmp dword [edx + 0x28], 0
je 0x431423
push 0
push 0
push 0x4880
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x28]
push eax
call sym.ollydbg.exe__Setbreakpointext
add esp, 0x10
mov eax, 1
jmp 0x431425
cmp dword [0x4d578c], 0
je 0x42fa01
mov dword [0x4d56fc], 2
mov eax, 1
jmp 0x431425
mov dword [0x4d56fc], 2
push str.Attached_process_paused_at
lea edx, [ebp - 0x268]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
push 0
mov ecx, 0x100
sub ecx, dword [ebp - 0xc]
push ecx
lea eax, [ebp - 0x268]
add eax, dword [ebp - 0xc]
push eax
push 0
push 0
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Decodeaddress
add esp, 0x18
lea ecx, [ebp - 0x268]
push ecx
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 8
jmp 0x431423
cmp dword [ebp - 0x18], 1
jne 0x42faa3
mov edx, dword [ebp - 0x28]
mov dword [edi + 0x2c], edx
mov dword [edi], 1
cmp dword [ebp - 0x14], 2
jne 0x42fa99
push esi
call sym.ollydbg.exe__Findthread
pop ecx
mov edi, eax
test edi, edi
je 0x431423
or dword [edi + 0x2f4], 1
mov dword [0x4e360c], 2
mov eax, 1
jmp 0x431425
cmp dword [ebp - 0x18], 0
jne 0x431423
or dword [0x4d5774], 4
xor edx, edx
mov dword [ebp - 0x20], edx
test edi, edi
je 0x42fb9e
push 3
push 4
mov ecx, dword [edi + 0x1c]
push ecx
lea eax, [ebp - 0x2c]
push eax
call sym.ollydbg.exe__Readmemory
add esp, 0x10
cmp eax, 4
jne 0x42fb9e
mov edx, dword [ebp - 0x2c]
push edx
call sym.ollydbg.exe__Findmodule
pop ecx
mov dword [ebp - 0x54], eax
test eax, eax
je 0x42fb9e
lea edx, [ebp - 0x30]
push edx
mov ecx, dword [ebp - 0x2c]
push ecx
call sym.ollydbg.exe__Isretaddr
add esp, 8
mov dword [ebp - 0x34], eax
test eax, eax
je 0x42fb9e
cmp dword [ebp - 0x30], 0
je 0x42fb9e
mov byte [ebp - 0x268], 0
lea edx, [ebp - 0x268]
push edx
mov ecx, dword [ebp - 0x30]
push ecx
call sym.ollydbg.exe__Findlabel
add esp, 8
test eax, eax
jne 0x42fb56
mov eax, dword [ebp - 0x30]
push eax
call sym.ollydbg.exe__Followcall
pop ecx
mov dword [ebp - 0x30], eax
lea edx, [ebp - 0x268]
push edx
mov ecx, dword [ebp - 0x30]
push ecx
call sym.ollydbg.exe__Findlabel
add esp, 8
lea eax, [ebp - 0x268]
mov edx, str.DebugBreak
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x42fb9e
test cl, cl
je 0x42fb7d
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x42fb9e
add eax, 2
add edx, 2
test cl, cl
jne 0x42fb61
jne 0x42fb9e
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x268]
push eax
push str.DebugBreak_called_from__08X
push edx
call fcn.004a6c2c
add esp, 0xc
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], 0
jne 0x42fbe0
push str.INT3_command_at
lea ecx, [ebp - 0x268]
push ecx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
push 0
mov eax, 0x100
sub eax, dword [ebp - 0xc]
push eax
lea edx, [ebp - 0x268]
add edx, dword [ebp - 0xc]
push edx
push 0
push 0
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Decodeaddress
add esp, 0x18
lea eax, [ebp - 0x268]
push eax
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 8
mov dword [0x4d5784], 0x80000003
cmp dword [ebp - 0x20], 0
jne 0x42fc56
cmp dword [0x4d578c], 0
jne 0x42fc56
cmp dword [0x4d57a4], 0
jne 0x42fc2b
cmp dword [0x4d8138], 0
je 0x42fc27
cmp dword [0x4d8d6c], 0
jne 0x42fc2b
xor ecx, ecx
jmp 0x42fc30
mov ecx, 1
push ecx
push 0x80000003
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x42fc56
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
xor edx, edx
cmp dword [0x4d8d78], 0
mov dword [ebp - 0x3c], edx
je 0x42fc7f
or dword [ebp - 0x3c], 1
cmp dword [0x4d8d94], 0
je 0x42fc8c
or dword [ebp - 0x3c], 2
cmp dword [0x4d8db0], 0
je 0x42fc99
or dword [ebp - 0x3c], 4
cmp dword [0x4d8dcc], 0
je 0x42fca6
or dword [ebp - 0x3c], 8
test edi, edi
je 0x42fe56
mov ecx, dword [edi + 0xe6]
and ecx, dword [ebp - 0x3c]
je 0x42fe56
or dword [0x4d5774], 0x40
test byte [edi + 0xe6], 1
je 0x42fcd4
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x42fcff
test byte [edi + 0xe6], 2
je 0x42fce6
mov dword [ebp - 4], 1
jmp 0x42fcff
test byte [edi + 0xe6], 4
je 0x42fcf8
mov dword [ebp - 4], 2
jmp 0x42fcff
mov dword [ebp - 4], 3
mov ebx, dword [ebp - 4]
mov eax, ebx
shl ebx, 3
sub ebx, eax
cmp dword [ebx*4 + 0x4d8d78], 5
jne 0x42fd33
xor edx, edx
mov dword [ebx*4 + 0x4d8d70], edx
xor ecx, ecx
mov dword [ebx*4 + 0x4d8d74], ecx
xor eax, eax
mov dword [ebx*4 + 0x4d8d78], eax
jmp 0x42fe3d
cmp dword [ebx*4 + 0x4d8d78], 6
jne 0x42fd65
xor edx, edx
mov dword [ebx*4 + 0x4d8d70], edx
xor ecx, ecx
mov dword [ebx*4 + 0x4d8d74], ecx
xor eax, eax
mov dword [ebx*4 + 0x4d8d78], eax
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x42fe3d
cmp dword [ebx*4 + 0x4d8d78], 7
jne 0x42fda8
xor edx, edx
xor ecx, ecx
mov dword [ebx*4 + 0x4d8d70], edx
mov dword [ebx*4 + 0x4d8d74], ecx
xor eax, eax
mov dword [ebx*4 + 0x4d8d78], eax
mov eax, 1
and dword [edi + 0xe6], 0xfffffff0
mov dword [edi], 1
or dword [0x4d5710], 1
jmp 0x431425
cmp dword [ebx*4 + 0x4d8d78], 0
jne 0x42fdb9
or dword [0x4d5774], 4
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x268]
inc edx
push edx
push str.Hardware_breakpoint__i_at
push ecx
call fcn.004a6c2c
add esp, 0xc
mov dword [ebp - 0xc], eax
push 0
mov eax, 0x100
sub eax, dword [ebp - 0xc]
push eax
lea edx, [ebp - 0x268]
add edx, dword [ebp - 0xc]
push edx
push 0
push 0
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Decodeaddress
add esp, 0x18
add dword [ebp - 0xc], eax
cmp dword [ebx*4 + 0x4d8d78], 1
je 0x42fe22
lea eax, [ebp - 0x268]
add eax, dword [ebp - 0xc]
push edi
mov edi, eax
mov esi, str._EIP_points_to_next_instruction
mov eax, edi
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
pop edi
lea edx, [ebp - 0x268]
push edx
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 8
push 0
call sym.ollydbg.exe__Animate
pop ecx
and dword [edi + 0xe6], 0xfffffff0
mov dword [edi], 1
or dword [0x4d5710], 1
jmp 0x431423
or dword [0x4d5774], 0x80
test edi, edi
je 0x42fe7a
test byte [edi + 0xe6], 0xf
je 0x42fe7a
and dword [edi + 0xe6], 0xfffffff0
mov dword [edi], 1
cmp dword [ebp - 0x14], 2
jne 0x42fe9b
test edi, edi
je 0x42fe94
and dword [edi + 0xe6], 0xffffbfff
mov dword [edi], 1
xor eax, eax
jmp 0x431425
cmp dword [ebp - 0x14], 1
jne 0x42febf
test edi, edi
je 0x42feb5
and dword [edi + 0xe6], 0xffffbfff
mov dword [edi], 1
mov eax, 1
jmp 0x431425
or dword [0x4d5774], 4
mov dword [0x4d5784], 0x80000004
mov edx, dword [0x4d57a8]
push edx
push 0x80000004
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x42fefc
mov dword [0x4d56fc], 3
mov eax, 1
jmp 0x431425
mov dword [0x4d56fc], 2
push str.Single_step_event_at
lea edx, [ebp - 0x268]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
push 0
mov ecx, 0x100
sub ecx, dword [ebp - 0xc]
push ecx
lea eax, [ebp - 0x268]
add eax, dword [ebp - 0xc]
push eax
push 0
push 0
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Decodeaddress
add esp, 0x18
add dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xec
jge 0x42ff74
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
mov ecx, 0x100
sub ecx, dword [ebp - 0xc]
lea eax, [ebp - 0x268]
dec ecx
push ecx
push 0x4b59fc
add eax, dword [ebp - 0xc]
push eax
call fcn.004a6c2c
add esp, 0x10
lea edx, [ebp - 0x268]
push edx
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 8
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Findmodule
pop ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x5c]
cmp dword [eax + 0x10], 2
mov edi, dword [edx + 0x18]
jb 0x430419
cmp dword [0x4d8140], 0
je 0x430419
cmp dword [0x4d5700], 0
je 0x430419
cmp edi, dword [0x4d8144]
jb 0x430419
cmp edi, dword [0x4d8148]
jae 0x430419
or dword [0x4d5774], 0x20
lea edx, [ebp - 0x268]
push edx
or dword [0x4d5710], 2
mov ecx, dword [ebp - 0x28]
push ecx
call sym.ollydbg.exe__Readcommand
add esp, 8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jbe 0x430038
push esi
push 5
lea eax, [ebp - 0x1a80]
push eax
push 0
mov edx, dword [ebp - 0x28]
push edx
mov ecx, dword [ebp - 0x38]
push ecx
lea eax, [ebp - 0x268]
push eax
call sym.ollydbg.exe__Disasm
add esp, 0x1c
mov dword [ebp - 0xc], eax
jmp 0x43003d
xor edx, edx
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
jle 0x4301e1
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0xc]
cmp ecx, dword [0x4d813c]
jbe 0x4301e1
mov eax, dword [0x4d813c]
add eax, dword [0x4d8140]
cmp eax, dword [ebp - 0x28]
jbe 0x4301e1
cmp dword [0x4d8138], 0
je 0x4301bd
cmp dword [0x4d8d68], 0
je 0x4300fb
cmp dword [ebp - 0x54], 0
je 0x4300fb
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov ecx, dword [edx + 0x3e1]
cmp ecx, dword [eax + 0xc]
jb 0x4300fb
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0x54]
add ecx, dword [eax + 0x3e9]
cmp ecx, dword [edx + 0x3e1]
jbe 0x4300fb
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3e1]
cmp eax, dword [ebp - 0x28]
je 0x4300cc
mov eax, 2
jmp 0x431425
push 0x800d
push 0
push 0
mov edx, dword [ebp - 0x28]
push edx
push 0
call sym.ollydbg.exe__Setcpu
add esp, 0x14
call sym.ollydbg.exe__Redrawdisassembler
push str.Learned_entry_point_of_SFX_code
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 8
jmp 0x43012f
mov ebx, dword [ebp - 0x147c]
and ebx, 0xf0
cmp ebx, 0x80
je 0x430114
cmp ebx, 0x50
jne 0x43011e
mov eax, 2
jmp 0x431425
push str.Possible_entry_point_of_SFX_code
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 8
push 0
push 0
push 0
call sym.ollydbg.exe__Setmembreakpoint
add esp, 0xc
cmp dword [ebp - 0x54], 0
je 0x4301b4
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx]
cmp eax, dword [0x4d7364]
jne 0x4301b4
push 0
push 0
push 0
mov edx, dword [ebp - 0x54]
push edx
call fcn.0045e0f0
add esp, 0x10
mov ecx, dword [ebp - 0x54]
cmp dword [ecx + 0x3e1], 0
je 0x430177
cmp dword [0x4d8d68], 0
jne 0x430183
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x3e1], edx
cmp dword [0x4d920c], 0
je 0x4301b4
mov ecx, dword [ebp - 0x54]
test byte [ecx + 8], 4
je 0x4301b4
push 0
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 0xc]
push edx
call sym.ollydbg.exe__Finddecode
add esp, 8
test eax, eax
jne 0x4301b4
mov ecx, dword [ebp - 0x54]
push ecx
call sym.ollydbg.exe__Analysecode
pop ecx
xor eax, eax
mov dword [0x4d8138], eax
jmp 0x4301d2
mov edx, dword [ebp - 0x28]
push edx
push str.Memory_breakpoint_when_executing___08lX_
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 0xc
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
jmp 0x431425
xor ebx, ebx
lea eax, [ebp - 0x1434]
jmp 0x4303fa
cmp dword [eax], 0
je 0x4303f6
test byte [eax - 0xc], 0x20
jne 0x4303f6
mov edx, dword [eax + 0x18]
mov ecx, dword [0x4d813c]
add ecx, dword [0x4d8140]
cmp edx, ecx
jae 0x4303f6
add edx, dword [eax]
cmp edx, dword [0x4d813c]
jbe 0x4303f6
cmp dword [0x4d8138], 0
je 0x4303b8
cmp dword [0x4d8150], 0
je 0x430251
mov edx, dword [eax + 0x18]
and edx, 0xfffff000
cmp edx, dword [0x4d8150]
je 0x4303f6
cmp dword [0x4d8154], 0
je 0x430278
mov ecx, dword [ebp - 0x5c]
cmp dword [ecx + 0x14], 0
jne 0x430278
mov edx, dword [eax + 0x18]
and edx, 0xfffff000
cmp edx, dword [0x4d8154]
je 0x4303f6
mov ecx, dword [ebp - 0x5c]
cmp dword [ecx + 0x14], 0
jne 0x430295
mov eax, dword [eax + 0x18]
and eax, 0xfffff000
mov dword [0x4e3b40], eax
mov dword [0x4d8154], eax
jmp 0x4302aa
mov edx, dword [eax + 0x18]
and edx, 0xfffff000
mov dword [0x4e3b44], edx
mov dword [0x4d8150], edx
mov eax, dword [0x4e3b40]
cmp eax, dword [0x4e3b48]
jne 0x4302c9
mov ecx, dword [0x4e3b44]
cmp ecx, dword [0x4e3b4c]
je 0x430353
push str.Tracing_SFX:
lea eax, [ebp - 0x268]
push eax
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [0x4d8154], 0
je 0x43030a
mov edx, dword [0x4e3b40]
lea ecx, [ebp - 0x268]
push edx
push str._read_08X
add ecx, dword [ebp - 0xc]
push ecx
call fcn.004a6c2c
add esp, 0xc
add dword [ebp - 0xc], eax
cmp dword [0x4d8150], 0
je 0x430330
mov eax, dword [0x4e3b44]
lea edx, [ebp - 0x268]
push eax
push str._write_08X
add edx, dword [ebp - 0xc]
push edx
call fcn.004a6c2c
add esp, 0xc
lea ecx, [ebp - 0x268]
push ecx
call sym.ollydbg.exe__Infoline
pop ecx
mov eax, dword [0x4e3b40]
mov dword [0x4e3b48], eax
mov edx, dword [0x4e3b44]
mov dword [0x4e3b4c], edx
cmp dword [0x4d8d64], 2
je 0x43039f
cmp dword [0x4d8d64], 1
jne 0x4303ae
cmp dword [0x4d8d68], 0
je 0x4303ae
cmp dword [ebp - 0x54], 0
je 0x4303ae
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3e1]
cmp eax, dword [edx + 0xc]
jb 0x4303ae
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x54]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x54]
add eax, dword [edx + 0x3e9]
cmp eax, dword [ecx + 0x3e1]
jbe 0x4303ae
xor eax, eax
xor edx, edx
mov dword [0x4d8154], eax
mov dword [0x4d8150], edx
mov eax, 2
jmp 0x431425
mov edx, dword [ebp - 0x5c]
cmp dword [edx + 0x14], 0
jne 0x4303d5
push edi
push str.Memory_breakpoint_when_reading___08lX_
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 0xc
jmp 0x4303e7
push edi
push str.Memory_breakpoint_when_writing_to___08lX_
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 0xc
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
jmp 0x431425
inc ebx
add eax, 4
cmp ebx, 3
jge 0x430409
cmp dword [ebp - 0xc], 0
jg 0x4301ee
inc dword [0x4e3b30]
mov eax, 2
jmp 0x431425
cmp dword [0x4d8d5c], 0
je 0x43043b
or dword [0x4d5774], 0x20
xor edx, edx
mov dword [0x4d8d5c], edx
mov eax, 2
jmp 0x431425
or dword [0x4d5774], 0x204
cmp dword [0x4d57a0], 0
je 0x4304a0
mov edx, dword [ebp - 0x28]
push edx
call sym.ollydbg.exe__Findmodule
pop ecx
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x4304a0
push 8
push 0x4b62d6
mov ecx, dword [ebp - 0x54]
add ecx, 0x48
push ecx
call fcn.004a3954
add esp, 0xc
test eax, eax
jne 0x4304a0
push str.Access_violation_in_KERNEL32_ignored_on_request
mov eax, dword [ebp - 0x28]
push eax
call sym.ollydbg.exe__Message
add esp, 8
mov dword [0x4d56fc], 2
mov eax, 1
jmp 0x431425
mov edx, dword [ebp - 0x5c]
cmp dword [edx + 0x10], 2
jb 0x4304e7
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push edi
mov ecx, dword [ebp - 0x5c]
cmp dword [ecx + 0x14], 1
jne 0x4304bf
mov eax, str.writing_to
jmp 0x4304d0
cmp edi, dword [ebp - 0x28]
jne 0x4304cb
mov eax, str.executing
jmp 0x4304d0
mov eax, str.reading
push eax
push str.Access_violation_when__s___08lX__s
lea edx, [ebp - 0x268]
push edx
call fcn.004a6c2c
add esp, 0x14
jmp 0x430500
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Access_violation_s
lea ecx, [ebp - 0x268]
push ecx
call fcn.004a6c2c
add esp, 0xc
lea eax, [ebp - 0x268]
push eax
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 8
mov dword [0x4d5784], 0xc0000005
cmp dword [0x4d57ac], 0
jne 0x43053c
cmp dword [0x4d8138], 0
je 0x430538
cmp dword [0x4d8d6c], 0
jne 0x43053c
xor ecx, ecx
jmp 0x430541
mov ecx, 1
push ecx
push 0xc0000005
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430567
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
jmp 0x431425
or dword [0x4d5774], 0x400
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x5c]
cmp dword [eax + 0x10], 2
mov edi, dword [edx + 0x18]
jb 0x4305d2
push edi
mov edx, dword [ebp - 0x5c]
cmp dword [edx + 0x14], 1
jne 0x4305aa
mov ecx, str.writing_to
jmp 0x4305bb
cmp edi, dword [ebp - 0x28]
jne 0x4305b6
mov ecx, str.executing
jmp 0x4305bb
mov ecx, str.reading
push ecx
push str.Break_on_access_when__s___08lX_
lea eax, [ebp - 0x268]
push eax
call fcn.004a6c2c
add esp, 0x10
jmp 0x4305eb
push edi
mov esi, str.Access_to_guarded_page
lea edi, [ebp - 0x268]
mov eax, edi
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
lea edx, [ebp - 0x268]
push edx
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 8
push edi
call sym.ollydbg.exe__Findmemory
pop ecx
mov edi, eax
test edi, edi
je 0x43063c
push 0
mov eax, dword [edi + 4]
push eax
mov edx, dword [edi]
push edx
call sym.ollydbg.exe__Guardmemory
add esp, 0xc
and dword [edi + 8], 0xdfffffff
cmp dword [0x4d77e0], 0
je 0x43063c
push 0
push 0
mov ecx, dword [0x4d77e0]
push ecx
call sub.USER32.DLL_InvalidateRect
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Array_bounds_exceeded_s
or dword [0x4d5774], 0x104
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc000008c
push 0
push 0xc000008c
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x43069a
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Denormalized_floating_point_operand_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc000008d
mov ecx, dword [0x4d57b8]
push ecx
push 0xc000008d
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430707
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Floating_point_division_by_zero_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc000008e
mov ecx, dword [0x4d57b8]
push ecx
push 0xc000008e
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430774
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Inexact_floating_point_result_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc000008f
mov ecx, dword [0x4d57b8]
push ecx
push 0xc000008f
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x4307e1
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Invalid_floating_point_operation_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc0000090
mov ecx, dword [0x4d57b8]
push ecx
push 0xc0000090
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x43084e
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Floating_point_overflow_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc0000091
mov ecx, dword [0x4d57b8]
push ecx
push 0xc0000091
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x4308bb
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.FPU_stack_error_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc0000092
mov ecx, dword [0x4d57b8]
push ecx
push 0xc0000092
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430928
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Floating_point_underflow_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc0000093
mov ecx, dword [0x4d57b8]
push ecx
push 0xc0000093
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430995
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Integer_division_by_zero_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc0000094
cmp dword [0x4d57b0], 0
jne 0x4309f5
cmp dword [0x4d8138], 0
je 0x4309f1
cmp dword [0x4d8d6c], 0
jne 0x4309f5
xor ecx, ecx
jmp 0x4309fa
mov ecx, 1
push ecx
push 0xc0000094
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430a20
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Integer_overflow_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc0000095
push 0
push 0xc0000095
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430a88
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Privileged_instruction_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc0000096
cmp dword [0x4d57b4], 0
jne 0x430ae8
cmp dword [0x4d8138], 0
je 0x430ae4
cmp dword [0x4d8d6c], 0
jne 0x430ae8
xor ecx, ecx
jmp 0x430aed
mov ecx, 1
push ecx
push 0xc0000096
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430b13
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Illegal_instruction_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc000001d
cmp dword [0x4d57b4], 0
jne 0x430b73
cmp dword [0x4d8138], 0
je 0x430b6f
cmp dword [0x4d8d6c], 0
jne 0x430b73
xor ecx, ecx
jmp 0x430b78
mov ecx, 1
push ecx
push 0xc000001d
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430b9e
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Exception_is_not_continuable_s
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x28]
push edx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
push str.Stack_overflow_s
or dword [0x4d5774], 0x104
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 0xc
mov dword [0x4d5784], 0xc00000fd
push 0
push 0xc00000fd
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430c3d
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
or dword [0x4d5774], 0x104
mov edx, dword [ebp - 0x5c]
mov ecx, dword [edx]
push ecx
push 0
call fcn.0040f1e4
add esp, 8
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x430c95
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
push edx
push str.Exception__08X_s
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.0042e100
add esp, 0x10
jmp 0x430cb5
push str._use_ShiftF7_F8_F9_to_pass_exception_to_program
mov eax, dword [ebp - 0x4c]
push eax
mov edx, dword [ebp - 0x5c]
mov ecx, dword [edx]
push ecx
push str.Exception__08X___s__s
mov eax, dword [ebp - 0x28]
push eax
call fcn.0042e100
add esp, 0x14
mov edx, dword [ebp - 0x5c]
mov ecx, dword [edx]
push 0
mov eax, dword [ebp - 0x5c]
mov dword [0x4d5784], ecx
mov edx, dword [eax]
push edx
call fcn.0042eb78
add esp, 8
test eax, eax
je 0x430ce8
mov dword [0x4d56fc], 3
mov eax, 2
jmp 0x431425
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
mov dword [ebp - 0x1110], esi
xor edx, edx
mov dword [ebp - 0x110c], 1
mov dword [ebp - 0x1108], edx
mov ecx, dword [0x4d5720]
mov dword [ebp - 0x1104], ecx
mov eax, dword [0x4d5724]
mov dword [ebp - 0x1100], eax
mov edx, dword [0x4d5728]
xor ecx, ecx
mov dword [ebp - 0x10fc], edx
mov dword [ebp - 0xaf4], ecx
mov dword [ebp - 0xc8e], ecx
xor eax, eax
or edx, 0xffffffff
mov dword [ebp - 0xaf0], eax
mov dword [ebp - 0xae8], edx
mov dword [ebp - 0xaec], edx
lea eax, [ebp - 0x1110]
push eax
push 0x4d7c94
call sym.ollydbg.exe__Addsorteddata
add esp, 8
mov eax, dword [0x4d7c90]
test eax, eax
je 0x430d86
push 0
push 0
push eax
call sub.USER32.DLL_InvalidateRect
push esi
push str.New_thread_with_ID__08X_created
mov edx, dword [0x4d5728]
push edx
call sym.ollydbg.exe__Message
add esp, 0xc
cmp dword [0x4d7c88], 0
je 0x430dcd
cmp dword [ebp - 0x10fc], 0
je 0x430dcd
push 0
push 0
push 0x4800
mov ecx, dword [ebp - 0x10fc]
push ecx
call sym.ollydbg.exe__Setbreakpointext
add esp, 0x10
push 0
call sym.ollydbg.exe__Animate
pop ecx
mov eax, 1
jmp 0x431425
mov edx, dword [0x4d5720]
push edx
call sub.KERNEL32.DLL_CloseHandle
mov ecx, dword [0x4d5724]
mov dword [0x4d5a68], ecx
mov eax, dword [0x4d5a68]
test eax, eax
je 0x430dfd
cmp eax, 6
jne 0x430e12
cmp dword [0x4d5a60], 0
je 0x430e12
mov edx, dword [0x4d5a60]
mov dword [0x4d5a68], edx
mov ecx, dword [0x4d5728]
mov dword [0x4d5a6c], ecx
mov eax, dword [0x4d5a6c]
test eax, eax
je 0x430e2c
cmp eax, 6
jne 0x430e41
cmp dword [0x4d5a64], 0
je 0x430e41
mov edx, dword [0x4d5a64]
mov dword [0x4d5a6c], edx
mov dword [0x4d5a74], esi
mov dword [0x4d5704], esi
cmp dword [0x4d578c], 0
je 0x430e6c
mov ecx, dword [0x4d5790]
push ecx
call sub.KERNEL32.DLL_SetEvent
mov dword [0x4d5780], 1
mov dword [ebp - 0x1110], esi
mov eax, dword [0x4d5728]
mov dword [ebp - 0x110c], 1
mov dword [ebp - 0x1108], 4
mov dword [ebp - 0x1104], eax
mov edx, dword [0x4d5738]
mov dword [ebp - 0x1100], edx
mov ecx, dword [0x4d573c]
mov dword [ebp - 0x10fc], ecx
xor eax, eax
mov dword [ebp - 0xaf4], eax
mov dword [ebp - 0xc8e], eax
xor edx, edx
or ecx, 0xffffffff
mov dword [ebp - 0xaf0], edx
mov dword [ebp - 0xae8], ecx
mov dword [ebp - 0xaec], ecx
lea eax, [ebp - 0x1110]
push eax
push 0x4d7c94
call sym.ollydbg.exe__Addsorteddata
add esp, 8
mov eax, dword [0x4d7c90]
test eax, eax
je 0x430ef5
push 0
push 0
push eax
call sub.USER32.DLL_InvalidateRect
mov edx, dword [0x4d572c]
mov dword [0x4d7364], edx
mov ecx, dword [0x4d5718]
push ecx
push str.New_process_with_ID__08X_created
push 0
call fcn.0042e100
add esp, 0xc
mov eax, dword [0x4d573c]
push esi
push str.Main_thread_with_ID__08X_created
push eax
call sym.ollydbg.exe__Message
add esp, 0xc
mov dword [0x4d7348], 1
mov eax, 1
jmp 0x431425
cmp dword [0x4d7c7c], 0
je 0x430f4d
call sym.ollydbg.exe__Listmemory
mov edi, dword [0x4d7900]
xor ebx, ebx
jmp 0x430f80
test byte [edi + 0xb], 0xc
je 0x430f69
cmp esi, dword [edi + 0x18]
jne 0x430f69
and dword [edi + 8], 0xf3ffffff
mov eax, dword [0x4d77e0]
test eax, eax
je 0x430f7c
push 0
push 0
push eax
call sub.USER32.DLL_InvalidateRect
inc ebx
add edi, 0x48
cmp ebx, dword [0x4d78e8]
jl 0x430f57
push esi
push 0x4d7c94
call sym.ollydbg.exe__Deletesorteddata
add esp, 8
mov eax, dword [0x4d7c90]
test eax, eax
je 0x430fa9
push 0
push 0
push eax
call sub.USER32.DLL_InvalidateRect
mov ebx, dword [0x4d5720]
test ebx, ebx
jl 0x430fcb
cmp ebx, 9
jg 0x430fcb
push ebx
push esi
push str.Thread__08X_terminated__exit_code__X
push 0
call fcn.0042e100
add esp, 0x10
jmp 0x430fdd
push ebx
push ebx
push esi
push str.Thread__08X_terminated__exit_code__X___i._
push 0
call fcn.0042e100
add esp, 0x14
cmp dword [0x4d7c8c], 0
je 0x431005
push esi
push str.Break_on_thread__08X_termination
push 0
call sym.ollydbg.exe__Message
add esp, 0xc
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
jmp 0x431425
cmp dword [0x4d57cc], 0
je 0x43102d
push esi
push str.Thread__08X_terminated__trace_stopped
push 0
call sym.ollydbg.exe__Message
add esp, 0xc
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
jmp 0x431425
mov eax, 1
jmp 0x431425
xor edx, edx
push 0
mov dword [0x4d56fc], edx
call sym.ollydbg.exe__Animate
pop ecx
call fcn.0045f36c
call sym.ollydbg.exe__Listmemory
mov ebx, dword [0x4d5720]
cmp dword [0x4d6ea0], 0
je 0x4310ea
cmp ebx, 0x1001
jne 0x4310d8
lea eax, [ebp - 0x1b00]
push eax
call fcn.0049fc10
pop ecx
test eax, eax
je 0x4310d8
cmp dword [ebp - 0x1b00], 0
je 0x4310d8
push 3
push 0x40
mov edx, dword [ebp - 0x1b00]
push edx
lea ecx, [ebp - 0x268]
push ecx
call sym.ollydbg.exe__Readmemory
add esp, 0x10
cmp eax, 0x40
jne 0x4310d8
mov byte [ebp - 0x229], 0
lea eax, [ebp - 0x268]
push eax
push str.LOADDLL.EXE:__s
call sym.ollydbg.exe__Error
add esp, 8
lea edx, [ebp - 0x268]
push edx
push str.LOADDLL_terminated:__s
push 0
call fcn.0042e100
add esp, 0xc
jmp 0x431116
push ebx
push str.LOADDLL_terminated__exit_code__X
push 0
call fcn.0042e100
add esp, 0xc
jmp 0x431116
test ebx, ebx
jl 0x431105
cmp ebx, 9
jg 0x431105
push ebx
push str.Process_terminated__exit_code__X
push 0
call fcn.0042e100
add esp, 0xc
jmp 0x431116
push ebx
push ebx
push str.Process_terminated__exit_code__X___i._
push 0
call fcn.0042e100
add esp, 0x10
mov eax, dword [0x4d6ea8]
test eax, eax
je 0x431125
push eax
call sub.USER32.DLL_DestroyWindow
or eax, 0xffffffff
jmp 0x431425
cmp dword [0x4d5794], 0
je 0x431166
mov edi, dword [0x4d7db0]
test edi, edi
je 0x431166
xor ebx, ebx
jmp 0x431154
mov eax, dword [edi + 0xc]
push eax
call sub.KERNEL32.DLL_SuspendThread
inc ebx
add edi, 0x66c
cmp ebx, dword [0x4d7d98]
jl 0x431144
mov dword [0x4e3610], 1
mov edx, dword [0x4d5724]
xor ecx, ecx
mov dword [ebp - 0x1120], edx
mov eax, dword [0x4d5720]
mov dword [ebp - 0x111c], 1
mov dword [ebp - 0x1118], ecx
mov dword [ebp - 0x1114], eax
lea edx, [ebp - 0x1120]
push edx
push 0x4d6fc0
call sym.ollydbg.exe__Addsorteddata
add esp, 8
mov dword [0x4d7348], 1
mov eax, 1
jmp 0x431425
push esi
call sym.ollydbg.exe__Findthread
pop ecx
mov edi, eax
test edi, edi
je 0x4311d5
or dword [edi + 0x2f4], 1
mov dword [0x4e360c], 1
mov dword [0x4d7348], 1
cmp dword [0x4d7354], 0
je 0x43126c
mov eax, dword [0x4d7218]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x43124e
mov edx, dword [0x4d5720]
xor ebx, ebx
mov dword [ebp - 0x28], edx
jmp 0x431246
lea eax, [ebx + ebx*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + eax]
cmp ecx, dword [ebp - 0x28]
jne 0x431245
add eax, dword [ebp - 0x54]
add eax, 0x48
push eax
push 8
push str.Break_on_module__.s_being_unloaded
push 0
call fcn.0042e100
add esp, 0x10
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
jmp 0x431425
inc ebx
cmp ebx, dword [0x4d7200]
jl 0x431207
push str.Break_on_some_module_being_unloaded
push 0
call fcn.0042e100
add esp, 8
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
jmp 0x431425
mov eax, 1
jmp 0x431425
or dword [0x4d5774], 4
push str.Debug_string:
lea edx, [ebp - 0x268]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
movzx ebx, word [0x4d5726]
test ebx, ebx
jge 0x4312a9
mov eax, 1
jmp 0x431425
cmp word [0x4d5724], 0
je 0x43131e
mov edx, 0x100
sub edx, dword [ebp - 0xc]
dec edx
add edx, edx
cmp ebx, edx
jle 0x4312cd
mov ebx, 0x100
sub ebx, dword [ebp - 0xc]
dec ebx
add ebx, ebx
push 3
push ebx
mov eax, dword [0x4d5720]
push eax
lea edx, [ebp - 0x668]
push edx
call sym.ollydbg.exe__Readmemory
add esp, 0x10
cmp eax, ebx
je 0x4312f3
mov eax, 1
jmp 0x431425
mov edx, ebx
push 0
shr edx, 1
push 0
push edx
lea ecx, [ebp - 0x268]
add ecx, dword [ebp - 0xc]
lea eax, [ebp - 0x668]
shr ebx, 1
push ecx
push ebx
push eax
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
add dword [ebp - 0xc], eax
jmp 0x431360
mov edx, 0x100
sub edx, dword [ebp - 0xc]
dec edx
cmp ebx, edx
jle 0x431334
mov ebx, 0x100
sub ebx, dword [ebp - 0xc]
dec ebx
push 3
push ebx
mov eax, dword [0x4d5720]
push eax
lea edx, [ebp - 0x268]
add edx, dword [ebp - 0xc]
push edx
call sym.ollydbg.exe__Readmemory
jmp 0x4af644
je 0x43135d
mov eax, 1
jmp 0x431425
add dword [ebp - 0xc], ebx
mov edx, dword [ebp - 0xc]
lea eax, [ebp + edx - 0x269]
jmp 0x431370
dec dword [ebp - 0xc]
dec eax
cmp byte [eax], 0
je 0x43136c
xor edx, edx
mov dl, byte [eax]
cmp edx, 0xd
je 0x43136c
xor ecx, ecx
mov cl, byte [eax]
cmp ecx, 0xa
je 0x43136c
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x268]
test edi, edi
mov byte [ebp + eax - 0x268], 0
push edx
jne 0x4313a1
xor ecx, ecx
jmp 0x4313a4
mov ecx, dword [edi + 0x2c]
push ecx
call fcn.0042e100
add esp, 8
cmp dword [0x4d57bc], 0
je 0x4313c0
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
mov eax, 1
jmp 0x431425
or dword [0x4d5774], 4
mov edx, dword [0x4d5724]
push edx
mov eax, dword [0x4d5720]
push eax
push str.System_debugging_error__RIP_event___08lX__type__li._
push 0
call fcn.0042e100
add esp, 0x10
push 0
call sym.ollydbg.exe__Animate
pop ecx
jmp 0x431423
or dword [0x4d5774], 4
mov edx, dword [0x4d5714]
push edx
push str.Unknown_debugging_event__08lX
push 0
call fcn.0042e100
add esp, 0xc
mov dword [0x4d56fc], 2
push 0
call sym.ollydbg.exe__Animate
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ecx
push eax
push edi
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov eax, 0x25
repne scasb al, byte es:[edi]
cmp ecx, 0
je 0x4af661
mov byte [edi - 1], 0x20
jmp 0x4af654
pop edi
pop eax
pop ecx
add esp, 0x10
cmp eax, ebx
jmp 0x431351