Function at 0x41e604
Capabilities:
Authenticate hmac
Encode data using base64
Log keystrokes
Log keystrokes via polling
Open clipboard
Parse pe header
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 3
add esp, 0xfffff004
push eax
dec eax
jne 0x41e60d
mov eax, dword [ebp - 4]
add esp, 0xfffffff0
push ebx
push esi
push edi
mov eax, dword [ebp + 0xc]
cmp eax, 0x201
jg 0x41e6be
je 0x41e78c
cmp eax, 0xa4
jg 0x41e67a
je 0x41e771
cmp eax, 0x20
jg 0x41e663
je 0x42060f
sub eax, 2
je 0x41e764
sub eax, 0xd
je 0x425df1
jmp case.0x41e711.1136
sub eax, 0x47
je 0x41e7c7
sub eax, 0x5a
je 0x41e771
jmp case.0x41e711.1136
cmp eax, 0x104
jg 0x41e6a0
je case.0x41e711.1146
sub eax, 0x100
je case.0x41e711.1145
sub eax, 2
je 0x4200ac
jmp case.0x41e711.1136
add eax, 0xfffffeed
sub eax, 3
jb 0x41e7a3
sub eax, 0xea
je 0x41e7a3
jmp case.0x41e711.1136
cmp eax, 0x468
jge 0x41e703
cmp eax, 0x206
jg 0x41e6ec
je 0x41e78c
sub eax, 0x202
je 0x41e7a3
dec eax
sub eax, 2
jb 0x41e78c
jmp case.0x41e711.1136
sub eax, 0x465
je 0x42062c
dec eax
je 0x41e7a3
jmp case.0x41e711.1136
add eax, 0xfffffb98
cmp eax, 0x12
ja case.0x41e711.1136
jmp dword [eax*4 + 0x41e718]
xor edx, edx
mov dword [0x4cd6a8], edx
jmp case.0x41e711.1136
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0x471
mov eax, dword [0x4cd6a0]
push eax
call fcn.0041d1dc
jmp case.0x41e711.1136
mov edx, dword [ebp + 8]
push edx
push 0
push 0x471
mov ecx, dword [0x4cd6a0]
push ecx
call fcn.0041d1dc
mov eax, dword [ebp + 0x14]
push eax
mov edx, dword [ebp + 0x10]
push edx
mov ecx, dword [ebp + 0xc]
push ecx
mov eax, dword [ebp + 8]
push eax
push 0x4cd6a8
call sym.Cari___.exe__Tablefunction
add esp, 0x14
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp + 0x10]
push ecx
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
push 0x4cd6a8
call sym.Cari___.exe__Tablefunction
add esp, 0x14
jmp 0x425e37
test byte [0x4cd8ff], 1
je 0x41e7f9
xor eax, eax
jmp 0x425e37
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x18]
push edx
push ecx
mov eax, dword [ebp + 0x14]
push eax
mov edx, dword [ebp + 0xc]
push edx
call fcn.004582f0
add esp, 0x10
cmp dword [ebp + 0x10], 0x76
jne 0x41e8ba
cmp dword [0x4de6d8], 0
jne 0x41e850
cmp dword [0x4de6e8], 0
je 0x41e850
mov ecx, dword [0x4de6e8]
mov eax, dword [ecx]
cmp eax, dword [0x4cda2d]
je 0x41e850
lea edx, [ebp - 0x6c]
push edx
push 0
call sym.Cari___.exe__Walkreferenceex
add esp, 8
mov dword [ebp - 0x3c], eax
jmp 0x41e861
lea ecx, [ebp - 0x6c]
push ecx
push 0xffffffffffffffff
call sym.Cari___.exe__Walkreferenceex
add esp, 8
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x41e888
cmp dword [0x4de6d0], 0
jne 0x41e877
mov eax, 0x4b3a19
jmp 0x41e87c
mov eax, 0x4b3a27
push eax
call sym.Cari___.exe__Flash
pop ecx
jmp 0x41eaeb
push 4
push 0
push 0
mov edx, dword [ebp - 0x3c]
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
cmp dword [ebp - 0x6c], 1
jbe 0x41eaeb
mov ecx, dword [0x4cda2d]
add ecx, dword [ebp - 0x6c]
mov dword [0x4cda31], ecx
jmp 0x41eaeb
cmp dword [ebp + 0x10], 0x77
jne 0x41e97c
cmp dword [0x4de6d0], 0
jle 0x41e912
cmp dword [0x4de6e8], 0
je 0x41e912
mov eax, dword [0x4de6d0]
dec eax
cmp eax, dword [0x4de6d8]
jne 0x41e912
mov edx, dword [0x4de6d0]
shl edx, 4
mov ecx, dword [0x4de6e8]
mov eax, dword [ecx + edx - 0x10]
cmp eax, dword [0x4cda2d]
je 0x41e912
lea edx, [ebp - 0x6c]
push edx
push 0
call sym.Cari___.exe__Walkreferenceex
add esp, 8
mov dword [ebp - 0x3c], eax
jmp 0x41e923
lea ecx, [ebp - 0x6c]
push ecx
push 1
call sym.Cari___.exe__Walkreferenceex
add esp, 8
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x41e94a
cmp dword [0x4de6d0], 0
jne 0x41e939
mov eax, 0x4b3a19
jmp 0x41e93e
mov eax, 0x4b3a37
push eax
call sym.Cari___.exe__Flash
pop ecx
jmp 0x41eaeb
push 4
push 0
push 0
mov edx, dword [ebp - 0x3c]
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
cmp dword [ebp - 0x6c], 1
jbe 0x41eaeb
mov ecx, dword [0x4cda2d]
add ecx, dword [ebp - 0x6c]
mov dword [0x4cda31], ecx
jmp 0x41eaeb
cmp dword [ebp + 0x10], 8
jne 0x41ea9e
cmp dword [0x4cda4d], 0
je 0x41eaeb
cmp dword [0x4cda21], 0
jbe 0x41eaeb
mov eax, dword [0x4cda2d]
cmp eax, dword [0x4cda31]
jae 0x41eaeb
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda1d]
jb 0x41eaeb
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
cmp ecx, dword [0x4cda31]
jb 0x41eaeb
mov dword [ebp - 0x2c], 1
mov eax, dword [0x4cda31]
sub eax, dword [0x4cda2d]
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
push edx
push 0
call sub.KERNEL32.DLL_GlobalAlloc
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x41ea55
push 3
mov eax, dword [0x4cda2d]
mov ecx, dword [ebp - 0x54]
push ecx
push eax
mov edx, dword [ebp - 0x7c]
push edx
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
jne 0x41ea4c
mov eax, dword [0x4cda4d]
mov ecx, dword [ebp - 0x54]
add eax, dword [0x4cda2d]
push ecx
sub eax, dword [0x4cda1d]
push eax
mov edx, dword [ebp - 0x7c]
push edx
call fcn.004a37d4
add esp, 0xc
test eax, eax
jne 0x41ea4c
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x7c]
push eax
call sub.KERNEL32.DLL_GlobalFree
cmp dword [ebp - 0x2c], 0
je 0x41ea8b
mov edx, dword [0x4cda31]
mov eax, dword [0x4cda4d]
sub edx, dword [0x4cda2d]
add eax, dword [0x4cda2d]
push 5
push edx
sub eax, dword [0x4cda1d]
mov ecx, dword [0x4cda2d]
push ecx
push eax
call sym.Cari___.exe__Writememory
add esp, 0x10
push 0
push 0
push 0x474
call sym.Cari___.exe__Broadcast
add esp, 0xc
jmp 0x41eaeb
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp + 0x10]
push ecx
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
push 0x4cd6a8
call sym.Cari___.exe__Tablefunction
add esp, 0x14
test eax, eax
je 0x41eac9
mov eax, 1
jmp 0x425e37
push 0x4cd6a8
mov edx, dword [ebp + 0x10]
push edx
mov ecx, dword [ebp - 0x18]
push ecx
push 1
mov eax, dword [ebp - 0x1c]
push eax
push 0x1f
call fcn.00496e98
add esp, 0x18
jmp 0x425e37
mov eax, 1
jmp 0x425e37
test byte [0x4cd8ff], 1
je 0x41eb18
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp + 0x10]
push ecx
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0044e618
jmp 0x425e37
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x10]
push eax
push 3
push 0x4cd6a8
call fcn.00447598
add esp, 0x10
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push ecx
mov eax, dword [ebp + 0x14]
push eax
mov edx, dword [ebp + 0xc]
push edx
call fcn.004582f0
add esp, 0x10
cmp dword [ebp + 0x10], 0x1b
jne 0x41eb72
cmp dword [ebp - 0x1c], 0
jne 0x41eb72
push 0x4000
push 0
push 0
push 0
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 9
jne 0x41eba9
cmp dword [ebp - 0x18], 0
je 0x41eb86
mov edx, dword [0x4ce20f]
jmp 0x41eb8c
mov edx, dword [0x4cedbc]
push edx
push 0
push 0x471
mov eax, dword [0x4cd6a0]
push eax
call fcn.0041d1dc
mov eax, 1
jmp 0x425e37
cmp dword [0x4cda21], 0
jne 0x41ebb9
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4cda25]
mov dword [ebp - 0x3c], edx
mov ecx, dword [0x4cda2d]
mov dword [ebp - 0x44], ecx
mov eax, dword [0x4cda31]
mov dword [ebp - 0x48], eax
xor edx, edx
mov dword [ebp - 0x28], edx
lea ecx, [ebp - 0x2874]
push ecx
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_GetClientRect
cmp dword [0x4cd8d5], 1
jne 0x41ec07
mov edx, dword [0x4cd7e8]
mov ecx, dword [edx*4 + 0x4d4920]
add ecx, 4
mov dword [ebp - 0x2870], ecx
mov edx, dword [0x4cd8e1]
mov eax, dword [ebp - 0x2868]
sub eax, dword [ebp - 0x2870]
mov ecx, dword [edx*4 + 0x4d4920]
cdq
idiv ecx
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x41ec34
mov dword [ebp - 4], 1
push 2
mov eax, dword [ebp + 0x10]
push eax
call sub.USER32.DLL_MapVirtualKeyA
cmp eax, 0x2a
jne 0x41ee00
cmp dword [ebp - 0x1c], 0
je 0x41ee00
mov eax, dword [0x4cd8f9]
push eax
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [0x4d5a5c], 4
je 0x41ffbf
cmp dword [ebp - 0x80], 0
je 0x41ffbf
mov edx, dword [ebp - 0x80]
cmp dword [edx + 0x482], 0
je 0x41ffbf
mov ecx, dword [ebp - 0x80]
mov eax, dword [ecx + 0x318]
cmp eax, dword [0x4cda2d]
je 0x41ffbf
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda1d]
jb 0x41ffbf
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
cmp ecx, dword [0x4cda2d]
jbe 0x41ffbf
lea eax, [ebp - 0x60]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x41ed43
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov al, byte [ecx]
and eax, 0x1f
cmp eax, 0x1d
je 0x41ed43
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
cmp ecx, 0x1e
je 0x41ed43
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
cmp edx, 0x1f
je 0x41ed43
mov ecx, dword [ebp - 0x78]
cmp byte [ecx], 0
je 0x41ed43
push 0x2024
push 0x4b3b02
push 0x4b3a46
mov eax, dword [0x4d3b7c]
push eax
call sub.USER32.DLL_MessageBoxA
mov edi, eax
cmp edi, 6
je 0x41ed43
mov eax, 1
jmp 0x425e37
mov edx, dword [0x4cda1d]
push edx
call sym.Cari___.exe__Findmodule
pop ecx
mov esi, eax
test esi, esi
je 0x41ed6e
mov eax, dword [0x4cda2d]
cmp eax, dword [esi + 0xc]
jb 0x41ed6e
mov edx, dword [esi + 0xc]
add edx, dword [esi + 0x10]
cmp edx, dword [0x4cda2d]
ja 0x41ed9a
push 0x2024
push 0x4b3b02
push 0x4b3b20
mov ecx, dword [0x4d3b7c]
push ecx
call sub.USER32.DLL_MessageBoxA
mov edi, eax
cmp edi, 6
je 0x41ed9a
mov eax, 1
jmp 0x425e37
mov edx, dword [ebp - 0x80]
cmp dword [edx + 0x2f0], 0
jne 0x41edce
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
lea esi, [ecx + 0x2ec]
lea edi, [eax + 0x486]
mov ecx, 0x65
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x80]
mov dword [eax + 0x2f0], 1
mov edx, dword [ebp - 0x80]
mov ecx, dword [0x4cda2d]
mov dword [edx + 0x318], ecx
mov eax, dword [ebp - 0x80]
mov dword [eax + 0x2ec], 1
push 0
push 0
push 0x476
call sym.Cari___.exe__Broadcast
add esp, 0xc
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x26
jne 0x41ee8d
cmp dword [ebp - 0x1c], 0
jne 0x41ee8d
push 1
mov edx, dword [0x4cda35]
push 1
push edx
mov ecx, dword [0x4cda21]
mov eax, dword [0x4cda1d]
push ecx
push eax
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov edi, eax
mov eax, dword [0x4cda21]
mov edx, dword [0x4cda1d]
push 1
push 1
push edi
push eax
push edx
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x18], 0
jne 0x41ee6a
mov dword [0x4cda2d], edi
mov ecx, dword [ebp - 0x4c]
mov dword [0x4cda31], ecx
jmp 0x41ee82
cmp edi, dword [0x4cda2d]
jae 0x41ee7a
mov dword [0x4cda2d], edi
jmp 0x41ee82
mov eax, dword [ebp - 0x4c]
mov dword [0x4cda31], eax
mov dword [0x4cda35], edi
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x28
jne 0x41ef5e
cmp dword [ebp - 0x1c], 0
jne 0x41ef5e
push 1
mov edx, dword [0x4cda35]
push 1
push edx
mov ecx, dword [0x4cda21]
mov eax, dword [0x4cda1d]
push ecx
push eax
push 0
call sym.Cari___.exe__Disassembleforward
mov edi, eax
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
add esp, 0x18
cmp edi, eax
jb 0x41eef3
push 1
push 1
push edi
mov edx, dword [0x4cda21]
push edx
mov ecx, dword [0x4cda1d]
push ecx
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov edi, eax
push 1
push 1
push edi
mov eax, dword [0x4cda21]
push eax
mov edx, dword [0x4cda1d]
push edx
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x18], 0
jne 0x41ef29
mov dword [0x4cda2d], edi
mov ecx, dword [ebp - 0x4c]
mov dword [0x4cda31], ecx
jmp 0x41ef53
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x4cda31]
jbe 0x41ef3f
mov edx, dword [ebp - 0x4c]
mov dword [0x4cda31], edx
jmp 0x41ef53
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda35]
jne 0x41ef53
mov dword [0x4cda2d], edi
mov dword [0x4cda35], edi
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x21
jne 0x41f01a
cmp dword [ebp - 0x1c], 0
jne 0x41f01a
push 1
mov edx, dword [0x4cda25]
mov eax, dword [ebp - 4]
mov ecx, dword [0x4cda21]
push eax
push edx
push ecx
mov eax, dword [0x4cda1d]
push eax
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov dword [0x4cda25], eax
mov ecx, dword [0x4cda35]
mov eax, dword [0x4cda21]
push 1
mov edx, dword [ebp - 4]
push edx
push ecx
push eax
mov edx, dword [0x4cda1d]
push edx
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov edi, eax
mov eax, dword [0x4cda21]
mov edx, dword [0x4cda1d]
push 1
push 1
push edi
push eax
push edx
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x18], 0
jne 0x41eff7
mov dword [0x4cda2d], edi
mov ecx, dword [ebp - 0x4c]
mov dword [0x4cda31], ecx
jmp 0x41f00f
cmp edi, dword [0x4cda2d]
jae 0x41f007
mov dword [0x4cda2d], edi
jmp 0x41f00f
mov eax, dword [ebp - 0x4c]
mov dword [0x4cda31], eax
mov dword [0x4cda35], edi
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x22
jne 0x41f151
cmp dword [ebp - 0x1c], 0
jne 0x41f151
push 1
mov ecx, dword [0x4cda25]
mov edx, dword [ebp - 4]
mov eax, dword [0x4cda21]
push edx
push ecx
push eax
mov edx, dword [0x4cda1d]
push edx
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [0x4cda25], eax
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
cmp ecx, dword [0x4cda25]
ja 0x41f092
push 1
mov eax, dword [0x4cda25]
push 1
push eax
mov edx, dword [0x4cda21]
mov ecx, dword [0x4cda1d]
push edx
push ecx
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov dword [0x4cda25], eax
push 1
mov edx, dword [0x4cda35]
mov eax, dword [ebp - 4]
mov ecx, dword [0x4cda21]
push eax
push edx
push ecx
mov eax, dword [0x4cda1d]
push eax
push 0
call sym.Cari___.exe__Disassembleforward
mov edi, eax
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
add esp, 0x18
cmp edi, eax
jb 0x41f0e6
push 1
push 1
push edi
mov edx, dword [0x4cda21]
push edx
mov ecx, dword [0x4cda1d]
push ecx
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov edi, eax
push 1
push 1
push edi
mov eax, dword [0x4cda21]
push eax
mov edx, dword [0x4cda1d]
push edx
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x18], 0
jne 0x41f11c
mov dword [0x4cda2d], edi
mov ecx, dword [ebp - 0x4c]
mov dword [0x4cda31], ecx
jmp 0x41f146
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x4cda31]
jbe 0x41f132
mov edx, dword [ebp - 0x4c]
mov dword [0x4cda31], edx
jmp 0x41f146
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda35]
jne 0x41f146
mov dword [0x4cda2d], edi
mov dword [0x4cda35], edi
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x24
je 0x41f163
cmp dword [ebp + 0x10], 0x21
jne 0x41f1bb
cmp dword [ebp - 0x1c], 0
je 0x41f1bb
mov eax, dword [0x4cda1d]
cmp dword [ebp - 0x18], 0
mov dword [0x4cda2d], eax
mov dword [0x4cda25], eax
mov dword [0x4cda35], eax
je 0x41f18f
mov edx, dword [0x4cda31]
cmp edx, dword [0x4cda1d]
ja 0x41ffbf
push 1
mov ecx, dword [0x4cda2d]
push 1
push ecx
mov eax, dword [0x4cda21]
mov edx, dword [0x4cda1d]
push eax
push edx
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [0x4cda31], eax
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x23
je 0x41f1d1
cmp dword [ebp + 0x10], 0x22
jne 0x41f24c
cmp dword [ebp - 0x1c], 0
je 0x41f24c
mov ecx, dword [0x4cda1d]
mov edx, dword [0x4cda21]
add ecx, dword [0x4cda21]
mov dword [ebp - 0x4c], ecx
push 1
push 1
mov ecx, dword [0x4cda1d]
mov eax, dword [ebp - 0x4c]
push eax
push edx
push ecx
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov edi, eax
cmp dword [ebp - 0x18], 0
jne 0x41f218
mov dword [0x4cda2d], edi
mov eax, dword [ebp - 0x4c]
mov dword [0x4cda31], eax
jmp 0x41f241
mov edx, dword [ebp - 0x4c]
cmp edx, dword [0x4cda31]
jbe 0x41f22e
mov ecx, dword [ebp - 0x4c]
mov dword [0x4cda31], ecx
jmp 0x41f241
mov eax, dword [0x4cda2d]
cmp eax, dword [0x4cda35]
jne 0x41f241
mov dword [0x4cda2d], edi
mov dword [0x4cda35], edi
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0xd
jne 0x41f3c9
cmp dword [ebp - 0x1c], 0
jne 0x41f3c9
call fcn.0041ba84
mov edx, dword [0x4cda1d]
add edx, dword [0x4cda21]
sub edx, dword [ebp - 0x44]
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0x10
jbe 0x41f284
mov dword [ebp - 0x54], 0x10
push 3
mov ecx, dword [ebp - 0x54]
push ecx
mov eax, dword [ebp - 0x44]
push eax
lea edx, [ebp - 0x11fc]
push edx
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
jne 0x41f3bf
lea ecx, [ebp - 0x60]
push ecx
mov eax, dword [ebp - 0x44]
push eax
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x54]
jae 0x41f2c6
xor ecx, ecx
mov dword [ebp - 0x78], ecx
cmp dword [0x4cda51], 0
jle 0x41f2fe
mov eax, dword [0x4cda51]
lea edx, [ebp - 0x1c5c]
push eax
push 6
push edx
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x11fc]
mov eax, dword [ebp - 0x44]
push eax
mov edx, dword [ebp - 0x54]
push edx
push ecx
call sym.Cari___.exe__Disasm
add esp, 0x1c
mov dword [ebp - 0x5c], eax
jmp 0x41f32b
mov eax, dword [0x4cd8f9]
lea edx, [ebp - 0x1c5c]
push eax
push 5
push edx
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x11fc]
mov eax, dword [ebp - 0x44]
push eax
mov edx, dword [ebp - 0x54]
push edx
push ecx
call sym.Cari___.exe__Disasm
add esp, 0x1c
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jbe 0x41f364
cmp dword [ebp - 0x1624], 0
jne 0x41f364
mov eax, dword [ebp - 0x162c]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x41f364
push 5
push 0
push 0
mov edx, dword [ebp - 0x162c]
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x41f3bf
lea ecx, [ebp - 0x10ec]
push ecx
push 0x3a
mov eax, dword [ebp - 0x44]
push eax
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
je 0x41f3bf
push 0xa
push 0x4b3bd8
lea edx, [ebp - 0x10ec]
push edx
call fcn.004a37d4
add esp, 0xc
test eax, eax
jne 0x41f3bf
mov ecx, dword [ebp - 0x163c]
push ecx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x41f3bf
push 5
push 0
push 0
mov eax, dword [ebp - 0x163c]
push eax
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 8
jne 0x41f580
cmp dword [ebp - 0x1c], 0
jne 0x41f580
cmp dword [0x4cda21], 0
jbe 0x41f580
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda31]
jae 0x41f580
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda1d]
jb 0x41f580
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [0x4cda31]
jb 0x41f580
push 0x3a
mov edx, dword [0x4cda31]
push edx
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Deletenamerange
add esp, 0xc
push 0x39
mov eax, dword [0x4cda31]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Deletenamerange
add esp, 0xc
push 0x3e
mov ecx, dword [0x4cda31]
push ecx
mov eax, dword [0x4cda2d]
push eax
call sym.Cari___.exe__Deletenamerange
add esp, 0xc
push 0x3f
mov edx, dword [0x4cda31]
push edx
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Deletenamerange
add esp, 0xc
mov eax, dword [0x4cda31]
push eax
mov edx, dword [0x4cda2d]
push edx
push 0x4dc8cd
call sym.Cari___.exe__Deletesorteddatarange
add esp, 0xc
mov ecx, dword [0x4cda31]
push ecx
mov eax, dword [0x4cda2d]
push eax
push 0x4dca05
call sym.Cari___.exe__Deletesorteddatarange
add esp, 0xc
mov edx, dword [0x4cda31]
push edx
mov ecx, dword [0x4cda2d]
push ecx
call fcn.0049b12c
add esp, 8
lea eax, [ebp - 0x60]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x41f516
xor ecx, ecx
mov dword [ebp - 0x58], ecx
jmp 0x41f4fd
mov eax, dword [ebp - 0x78]
mov edx, dword [ebp - 0x58]
mov byte [eax + edx], 0
inc dword [ebp - 0x58]
mov ecx, dword [0x4cda31]
sub ecx, dword [0x4cda2d]
cmp ecx, dword [ebp - 0x58]
jbe 0x41f516
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x60]
jb 0x41f4f0
mov edx, dword [0x4cda1d]
push edx
call sym.Cari___.exe__Findmodule
pop ecx
mov esi, eax
test esi, esi
je 0x41f549
cmp dword [esi + 0x174], 0
je 0x41f549
push 4
mov eax, dword [0x4cda31]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
test esi, esi
je 0x41f56a
cmp dword [esi + 0x17c], 0
je 0x41f56a
mov ecx, dword [esi + 0x17c]
push ecx
call sub.KERNEL32.DLL_GlobalFree
xor eax, eax
mov dword [esi + 0x17c], eax
push 0
push 0
push 0x474
call sym.Cari___.exe__Broadcast
add esp, 0xc
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x6d
je 0x41f58f
cmp dword [ebp + 0x10], 0xbd
jne 0x41f5f8
cmp dword [ebp - 0x1c], 0
je 0x41f5f8
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda31]
jae 0x41f5f8
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda1d]
jb 0x41f5f8
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [0x4cda31]
jb 0x41f5f8
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Findprevproc
pop ecx
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x41f5ee
push 5
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 0x6b
je 0x41f607
cmp dword [ebp + 0x10], 0xbb
jne 0x41f670
cmp dword [ebp - 0x1c], 0
je 0x41f670
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda31]
jae 0x41f670
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda1d]
jb 0x41f670
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [0x4cda31]
jb 0x41f670
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Findnextproc
pop ecx
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x41f666
push 5
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 0x70
jne 0x41f8cb
cmp dword [ebp - 0x1c], 0
je 0x41f8cb
cmp byte [0x4dcb44], 0
je 0x41f8cb
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x48]
jae 0x41f8cb
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x4cda1d]
jb 0x41f8cb
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [ebp - 0x44]
jbe 0x41f8cb
mov edx, dword [0x4cda1d]
add edx, dword [0x4cda21]
sub edx, dword [ebp - 0x44]
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0x10
jbe 0x41f6df
mov dword [ebp - 0x54], 0x10
push 3
mov ecx, dword [ebp - 0x54]
push ecx
mov eax, dword [ebp - 0x44]
push eax
lea edx, [ebp - 0x11fc]
push edx
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
jne 0x41f8c1
lea ecx, [ebp - 0x60]
push ecx
mov eax, dword [ebp - 0x44]
push eax
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x54]
jae 0x41f727
cmp dword [ebp - 0x60], 0x10
jae 0x41f727
xor ecx, ecx
mov dword [ebp - 0x78], ecx
cmp dword [0x4cda51], 0
jle 0x41f75c
mov eax, dword [0x4cda51]
lea edx, [ebp - 0x1c5c]
push eax
push 6
push edx
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x11fc]
mov eax, dword [ebp - 0x44]
push eax
mov edx, dword [ebp - 0x54]
push edx
push ecx
call sym.Cari___.exe__Disasm
add esp, 0x1c
jmp 0x41f786
mov eax, dword [0x4cd8f9]
lea edx, [ebp - 0x1c5c]
push eax
push 5
push edx
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x11fc]
mov eax, dword [ebp - 0x44]
push eax
mov edx, dword [ebp - 0x54]
push edx
push ecx
call sym.Cari___.exe__Disasm
add esp, 0x1c
cmp dword [ebp - 0x1624], 0
jne 0x41f8c1
xor eax, eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41f7c0
cmp dword [ebp - 0x1648], 0
je 0x41f7c0
lea edx, [ebp - 0x12fc]
push edx
mov ecx, dword [ebp - 0x1648]
push ecx
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41f7e8
cmp dword [ebp - 0x162c], 0
je 0x41f7e8
lea eax, [ebp - 0x12fc]
push eax
mov edx, dword [ebp - 0x162c]
push edx
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41f810
cmp dword [ebp - 0x1640], 0
je 0x41f810
lea ecx, [ebp - 0x12fc]
push ecx
mov eax, dword [ebp - 0x1640]
push eax
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41f838
cmp dword [ebp - 0x1604], 0
je 0x41f838
lea edx, [ebp - 0x12fc]
push edx
mov ecx, dword [ebp - 0x1604]
push ecx
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41f854
lea eax, [ebp - 0x12fc]
push eax
mov edx, dword [ebp - 0x44]
push edx
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jle 0x41f8c1
cmp dword [ebp - 0xc], 2
jle 0x41f8a4
mov ecx, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp + ecx - 0x12fe]
push eax
call fcn.004a7be8
pop ecx
test eax, eax
je 0x41f8a4
mov edx, dword [ebp - 0xc]
xor ecx, ecx
mov cl, byte [ebp + edx - 0x12fd]
cmp ecx, 0x41
je 0x41f899
mov eax, dword [ebp - 0xc]
xor edx, edx
mov dl, byte [ebp + eax - 0x12fd]
cmp edx, 0x57
jne 0x41f8a4
mov ecx, dword [ebp - 0xc]
mov byte [ebp + ecx - 0x12fd], 0
lea eax, [ebp - 0x12fc]
push eax
push 0x105
push 0x4dcb44
mov edx, dword [0x4d3b7c]
push edx
call sub.USER32.DLL_WinHelpA
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 0x71
jne 0x41f91d
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x48]
jae 0x41f91d
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x4cda1d]
jb 0x41f91d
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [ebp - 0x44]
jbe 0x41f91d
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x10]
push ecx
mov eax, dword [0x4cd8e1]
push eax
push 0
mov edx, dword [ebp - 0x18]
push edx
mov ecx, dword [ebp + 0x10]
push ecx
mov eax, dword [ebp - 0x44]
push eax
call fcn.00419974
add esp, 0x1c
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x73
jne 0x41f944
cmp dword [ebp - 0x18], 0
jne 0x41f944
push 1
mov edx, dword [ebp - 0x18]
push edx
push 1
mov ecx, dword [ebp - 0x44]
push ecx
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x73
jne 0x41f99e
cmp dword [ebp - 0x18], 0
je 0x41f99e
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x48]
jae 0x41f99e
mov edx, dword [ebp - 0x44]
cmp edx, dword [0x4cda1d]
jb 0x41f99e
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
cmp ecx, dword [ebp - 0x44]
jbe 0x41f99e
mov eax, dword [ebp - 0x14]
push eax
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [0x4cd8e1]
push ecx
push 0
mov eax, dword [ebp - 0x18]
push eax
mov edx, dword [ebp + 0x10]
push edx
mov ecx, dword [ebp - 0x44]
push ecx
call fcn.00419974
add esp, 0x1c
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x74
jne 0x41f9e0
cmp dword [ebp - 0x1c], 0
je 0x41f9e0
cmp dword [0x4cda21], 0
jbe 0x41f9d6
mov eax, dword [0x4cda2d]
cmp eax, dword [0x4cda31]
jae 0x41f9d6
push 1
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Showsourcefromaddress
add esp, 8
call fcn.0041ba84
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 0x41
jne 0x41fa3f
cmp dword [ebp - 0x1c], 0
je 0x41fa3f
cmp dword [ebp - 0x18], 0
jne 0x41fa3f
cmp dword [0x4cda21], 0
jbe 0x41fa3f
mov edx, dword [0x4cda1d]
push edx
call sym.Cari___.exe__Findmodule
pop ecx
mov esi, eax
test esi, esi
je 0x41fa35
mov eax, dword [0x4cda1d]
cmp eax, dword [esi + 0xc]
jb 0x41fa35
mov edx, dword [esi + 0xc]
add edx, dword [esi + 0x10]
cmp edx, dword [0x4cda1d]
jbe 0x41fa35
push esi
call sym.Cari___.exe__Analysecode
pop ecx
push 0
call fcn.0041b75c
pop ecx
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 0x42
jne 0x41fa65
cmp dword [ebp - 0x1c], 0
je 0x41fa65
cmp dword [0x4cda21], 0
jbe 0x41fa65
push 0
push 1
call fcn.0041bb24
add esp, 8
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x45
jne 0x41fc4b
cmp dword [ebp - 0x1c], 0
je 0x41fc4b
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda31]
jae 0x41fc4b
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda1d]
jb 0x41fc4b
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [0x4cda31]
jb 0x41fc4b
mov edx, dword [0x4cda2d]
mov dword [ebp - 0x3c], edx
mov ecx, dword [0x4cda31]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0x100
jbe 0x41fad9
mov dword [ebp - 0x54], 0x100
push 1
mov eax, dword [ebp - 0x54]
push eax
mov edx, dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x27bc]
push ecx
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
je 0x41fb01
mov eax, 1
jmp 0x425e37
mov edx, dword [ebp - 0x54]
lea ecx, [ebp - 0x26bc]
push edx
push 0xff
push ecx
call fcn.004a35a0
add esp, 0xc
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x27c0], eax
lea ecx, [ebp - 0x10ec]
mov edx, dword [ebp - 0x3c]
push edx
push 0x4b3be3
push ecx
call fcn.004a6c2c
add esp, 0xc
xor edi, edi
lea eax, [ebp - 0x60]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x54]
jae 0x41fb65
cmp dword [ebp - 0x60], 0x10
jae 0x41fb65
xor eax, eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x41fb90
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0xb
jne 0x41fb85
mov edi, 0x10
jmp 0x41fb90
cmp dword [ebp - 8], 0xc
jne 0x41fb90
mov edi, 0x20
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x4cd8e1]
push eax
lea eax, [ebp - 0x27c0]
mov edx, dword [ebp - 0x10]
push edx
push 0
push ecx
push edi
push eax
lea edx, [ebp - 0x10ec]
push edx
call sym.Cari___.exe__Gethexstringxy
add esp, 0x1c
test eax, eax
je 0x41fbc6
mov eax, 1
jmp 0x425e37
mov edx, dword [ebp - 0x3c]
push edx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x41fbfe
cmp dword [eax + 0x24], 0
jne 0x41fbfe
mov ecx, dword [eax]
cmp ecx, dword [0x4cda1d]
jne 0x41fbfe
mov eax, dword [eax + 4]
cmp eax, dword [0x4cda21]
jne 0x41fbfe
push 1
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
push 5
mov edx, dword [ebp - 0x27c0]
push edx
mov ecx, dword [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x27bc]
push eax
call sym.Cari___.exe__Writememory
add esp, 0x10
mov edx, dword [0x4cda2d]
mov ecx, dword [0x4cda21]
mov eax, dword [0x4cda1d]
push 1
push 1
push edx
push ecx
push eax
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [0x4cda31], eax
mov eax, 1
jmp 0x425e37
cmp dword [ebp + 0x10], 0x46
jne 0x41fc68
cmp dword [ebp - 0x1c], 0
je 0x41fc68
push 0
push 7
call fcn.0041bb24
add esp, 8
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x47
jne 0x41fce0
cmp dword [ebp - 0x1c], 0
je 0x41fce0
cmp dword [0x4cda21], 0
ja 0x41fc86
cmp dword [0x4d5a70], 0
je 0x41fce0
mov byte [ebp - 0x10ec], 0
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4cd8e1]
push edx
mov edx, dword [0x4cd8f9]
mov ecx, dword [ebp - 0x10]
push ecx
push eax
push edx
push 0x4b
lea ecx, [ebp - 0x10ec]
push 0
push ecx
push 0x4b3bf5
call fcn.004436e8
add esp, 0x20
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x41ffbf
push 5
push 0
push 0
mov eax, dword [ebp - 0x3c]
push eax
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x4a
jne 0x41fd2f
cmp dword [ebp - 0x1c], 0
je 0x41fd2f
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4cd8e1]
push edx
mov edx, dword [0x4cda2d]
mov ecx, dword [ebp - 0x10]
push ecx
push eax
push edx
call fcn.00446320
add esp, 0x10
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x41ffbf
push 5
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x4b
jne 0x41fda5
cmp dword [ebp - 0x1c], 0
je 0x41fda5
lea eax, [ebp - 0x60]
push eax
mov edx, dword [ebp - 0x44]
push edx
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x41fd5e
mov eax, 1
jmp 0x425e37
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
cmp ecx, 0x1f
jne 0x41fd83
mov eax, dword [ebp - 0x44]
push eax
call sym.Cari___.exe__Followcall
pop ecx
push eax
call fcn.0049ca58
pop ecx
jmp 0x41ffbf
mov edx, dword [ebp - 0x78]
test byte [edx], 0x60
je 0x41ffbf
mov ecx, dword [ebp - 0x44]
push ecx
call sym.Cari___.exe__Findprocbegin
pop ecx
push eax
call fcn.0049ca58
pop ecx
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x4c
jne 0x41fdc2
cmp dword [ebp - 0x1c], 0
je 0x41fdc2
push 0
push 0
call fcn.0041bb24
add esp, 8
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x4e
jne 0x41fdf0
cmp dword [ebp - 0x1c], 0
je 0x41fdf0
mov eax, dword [0x4cda1d]
push eax
call sym.Cari___.exe__Findmodule
pop ecx
mov esi, eax
test esi, esi
je 0x41ffbf
push esi
call fcn.00466efc
pop ecx
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x4f
jne 0x41fe27
cmp dword [ebp - 0x1c], 0
je 0x41fe27
cmp dword [0x4cda21], 0
jbe 0x41fe27
mov eax, dword [0x4cd8e1]
push eax
mov edx, dword [0x4cda1d]
push edx
call fcn.0046af40
add esp, 8
push 0
call fcn.0041b75c
pop ecx
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x52
jne 0x41ff5b
cmp dword [ebp - 0x1c], 0
je 0x41ff5b
mov ecx, dword [0x4cda1d]
cmp ecx, dword [0x4cda2d]
ja 0x41ffbf
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [0x4cda2d]
jbe 0x41ffbf
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda31]
jae 0x41ffbf
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Findmodule
pop ecx
mov esi, eax
test esi, esi
je 0x41fea0
cmp dword [0x4de818], 0
jne 0x41fea0
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x50], eax
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x54], edx
jmp 0x41feb1
mov ecx, dword [0x4cda1d]
mov eax, dword [0x4cda21]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
push 0x4b3c10
lea edx, [ebp - 0x10ec]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x10ec]
add ecx, dword [ebp - 0xc]
push ecx
mov eax, dword [ebp - 0x54]
push eax
mov edx, dword [ebp - 0x50]
push edx
call sym.Cari___.exe__Decoderange
add esp, 0xc
add dword [ebp - 0xc], eax
push 0x4b3c1f
lea ecx, [ebp - 0x10ec]
add ecx, dword [ebp - 0xc]
push ecx
call fcn.004a6c2c
add dword [ebp - 0xc], eax
add esp, 8
mov eax, 0x100
lea edx, [ebp - 0x10ec]
push 0
mov ecx, dword [0x4cda1d]
sub eax, dword [ebp - 0xc]
push eax
mov eax, dword [0x4cda2d]
add edx, dword [ebp - 0xc]
push edx
push 1
push ecx
push eax
call sym.Cari___.exe__Decodeaddress
add esp, 0x18
lea edx, [ebp - 0x10ec]
mov ecx, dword [0x4cda2d]
mov eax, dword [0x4cda2d]
push edx
push 0
push ecx
inc eax
push eax
mov edx, dword [0x4cda2d]
push edx
mov ecx, dword [ebp - 0x54]
push ecx
mov eax, dword [ebp - 0x50]
push eax
call sym.Cari___.exe__Findreferences
add esp, 0x1c
jmp 0x41ffbf
cmp dword [ebp + 0x10], 0x53
jne 0x41ff75
cmp dword [ebp - 0x1c], 0
je 0x41ff75
push 0
push 0xb
call fcn.0041bb24
add esp, 8
jmp 0x41ffbf
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp + 0x10]
push ecx
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0044e618
dec eax
jne 0x41ff97
mov eax, 1
jmp 0x425e37
push 0x4cd6a8
mov edx, dword [ebp + 0x10]
push edx
mov ecx, dword [ebp - 0x18]
push ecx
push 0
mov eax, dword [ebp - 0x1c]
push eax
push 0x1f
call fcn.00496e98
add esp, 0x18
test eax, eax
jne 0x41ffbf
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4cda35]
cmp edx, dword [0x4cda25]
jae 0x41ffdb
mov ecx, dword [0x4cda35]
mov dword [0x4cda25], ecx
jmp 0x420036
push 1
mov edx, dword [0x4cda25]
mov eax, dword [ebp - 4]
mov ecx, dword [0x4cda21]
push eax
push edx
push ecx
mov eax, dword [0x4cda1d]
push eax
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [ebp - 0x40], eax
mov edx, dword [0x4cda35]
cmp edx, dword [ebp - 0x40]
jbe 0x420036
push 1
mov eax, dword [0x4cda35]
mov ecx, dword [ebp - 4]
mov edx, dword [0x4cda21]
push ecx
push eax
push edx
mov ecx, dword [0x4cda1d]
push ecx
push 0
call sym.Cari___.exe__Disassembleback
add esp, 0x18
mov dword [0x4cda25], eax
cmp dword [ebp - 0x28], 0
jne 0x42005d
mov eax, dword [ebp - 0x3c]
cmp eax, dword [0x4cda25]
jne 0x42005d
mov edx, dword [ebp - 0x44]
cmp edx, dword [0x4cda2d]
jne 0x42005d
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [0x4cda31]
je 0x420083
cmp dword [0x4e2764], 0
je 0x420076
push 0xffffffffffffffff
mov eax, dword [0x4cda2d]
push eax
call sym.Cari___.exe__Showsourcefromaddress
add esp, 8
push 0
push 0
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_InvalidateRect
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x4cda2d]
je 0x4200a2
push 0x101
push 0
push 0
mov eax, dword [0x4ce20f]
push eax
call sub.USER32.DLL_RedrawWindow
mov eax, 1
jmp 0x425e37
test byte [0x4cd8ff], 1
je 0x4200bc
xor eax, eax
jmp 0x425e37
cmp dword [ebp + 0x10], 0x2a
jne 0x420105
mov edx, dword [0x4cd8f9]
push edx
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x4200fe
mov ecx, dword [ebp - 0x80]
cmp dword [ecx + 0x482], 0
je 0x4200fe
push 5
push 0
push 0
mov eax, dword [ebp - 0x80]
mov edx, dword [eax + 0x318]
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
xor eax, eax
jmp 0x425e37
cmp dword [ebp + 0x10], 0x2b
jne 0x42021d
call sym.Cari___.exe__Runtracesize
dec eax
jle 0x420160
cmp dword [0x4d3018], 0
je 0x420159
push 0x204
mov edx, dword [0x4cda51]
push 0
dec edx
push 0
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
push 1
call fcn.0041b75c
pop ecx
cmp dword [0x4d57e4], 0
je 0x420159
mov ecx, dword [0x4cda51]
push ecx
call sym.Cari___.exe__Scrollruntracewindow
pop ecx
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4d3010]
cmp edx, dword [0x4d300c]
jne 0x420175
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4d3010]
shl edx, 4
add edx, 0x4cf009
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx + 4]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x4201ab
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx + 8]
cmp ecx, dword [eax]
jae 0x4201b2
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx]
push ecx
call sym.Cari___.exe__Findthread
pop ecx
test eax, eax
jne 0x4201cc
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx + 4]
push 0
push 0
push 0
mov eax, dword [ebp - 0x84]
mov dword [0x4cda25], ecx
mov edx, dword [eax + 8]
push edx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx]
cmp eax, dword [0x4cd8f9]
jne 0x4201ff
xor edx, edx
jmp 0x420207
mov ecx, dword [ebp - 0x84]
mov edx, dword [ecx]
push edx
call sym.Cari___.exe__Setcpu
add esp, 0x14
inc dword [0x4d3010]
xor eax, eax
jmp 0x425e37
cmp dword [ebp + 0x10], 0x2d
jne 0x42034a
call sym.Cari___.exe__Runtracesize
dec eax
jle 0x42027f
cmp dword [0x4d3018], 0
jne 0x420240
xor ecx, ecx
mov dword [0x4cda51], ecx
push 0x204
mov eax, dword [0x4cda51]
push 0
inc eax
push 0
push eax
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
push 1
call fcn.0041b75c
pop ecx
cmp dword [0x4d57e4], 0
je 0x420278
mov edx, dword [0x4cda51]
push edx
call sym.Cari___.exe__Scrollruntracewindow
pop ecx
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4d3010]
cmp edx, dword [0x4d300c]
jne 0x420292
call fcn.0041ba84
cmp dword [0x4d3010], 2
jge 0x4202a2
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4d3010]
shl edx, 4
add edx, 0x4cefe9
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx + 4]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x4202d8
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx + 8]
cmp ecx, dword [eax]
jae 0x4202df
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx]
push ecx
call sym.Cari___.exe__Findthread
pop ecx
test eax, eax
jne 0x4202f9
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp - 0x84]
mov ecx, dword [edx + 4]
push 0
push 0
push 0
mov eax, dword [ebp - 0x84]
mov dword [0x4cda25], ecx
mov edx, dword [eax + 8]
push edx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx]
cmp eax, dword [0x4cd8f9]
jne 0x42032c
xor edx, edx
jmp 0x420334
mov ecx, dword [ebp - 0x84]
mov edx, dword [ecx]
push edx
call sym.Cari___.exe__Setcpu
add esp, 0x14
dec dword [0x4d3010]
xor eax, eax
jmp 0x425e37
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda31]
jae 0x420491
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x10]
push edx
push 3
push 0x4cd6a8
call fcn.00447598
add esp, 0x10
cmp dword [ebp + 0x10], 0x20
jne 0x42039a
mov dword [0x4e2734], 1
mov ecx, dword [ebp - 0x14]
push ecx
mov eax, dword [ebp - 0x10]
push eax
push 0
call fcn.0041ba24
add esp, 0xc
jmp 0x420491
cmp dword [ebp + 0x10], 0x3a
jne 0x4203c1
mov ecx, dword [ebp - 0x14]
xor edx, edx
push ecx
mov dword [0x4e2734], edx
mov eax, dword [ebp - 0x10]
push eax
push 0
push 0x31
call fcn.0041b8e8
add esp, 0x10
jmp 0x420491
cmp dword [ebp + 0x10], 0x3b
jne 0x4203ea
mov dword [0x4e2734], 2
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x10]
push ecx
push 0
push 0x36
call fcn.0041b8e8
add esp, 0x10
jmp 0x420491
mov eax, dword [ebp + 0x10]
push eax
call fcn.004a7b90
pop ecx
test eax, eax
je 0x420491
cmp dword [0x4e2744], 0
je 0x420417
cmp dword [0x4e2744], 3
jne 0x42042f
cmp dword [0x4e2734], 0
jne 0x42042f
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x10]
push ecx
mov al, byte [ebp + 0x10]
push eax
push 0x31
call fcn.0041b8e8
add esp, 0x10
jmp 0x420491
cmp dword [0x4e2744], 1
je 0x42044a
cmp dword [0x4e2744], 3
jne 0x420460
cmp dword [0x4e2734], 1
jne 0x420460
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x10]
push ecx
mov al, byte [ebp + 0x10]
push eax
call fcn.0041ba24
add esp, 0xc
jmp 0x420491
cmp dword [0x4e2744], 2
je 0x42047b
cmp dword [0x4e2744], 3
jne 0x420491
cmp dword [0x4e2734], 2
jne 0x420491
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x10]
push ecx
mov al, byte [ebp + 0x10]
push eax
push 0x36
call fcn.0041b8e8
add esp, 0x10
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4cda2d]
mov dword [ebp - 0x44], edx
mov ecx, dword [ebp + 0x14]
push ecx
mov eax, dword [ebp + 0x10]
push eax
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044e618
mov ebx, eax
mov eax, dword [0x4cda2d]
cmp eax, dword [ebp - 0x44]
je 0x4204ec
cmp dword [0x4e2764], 0
je 0x4204dc
push 0xffffffffffffffff
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Showsourcefromaddress
add esp, 8
push 0
push 0
mov ecx, dword [0x4ce20f]
push ecx
call sub.USER32.DLL_InvalidateRect
mov eax, ebx
jmp 0x425e37
test byte [0x4cd8ff], 1
jne 0x4205f5
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda1d]
jb 0x4205f5
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
cmp ecx, dword [0x4cda2d]
jbe 0x4205f5
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x10]
push edx
push 3
push 0x4cd6a8
call fcn.00447598
add esp, 0x10
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
test cx, cx
jne 0x420566
mov eax, dword [ebp + 0x14]
push eax
mov edx, dword [ebp + 0x10]
push edx
mov ecx, dword [ebp + 0xc]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0044e618
jmp 0x4205f5
mov edx, dword [ebp + 0x10]
shr edx, 0x10
cmp dx, 1
jne 0x4205ad
push 0x10
call sub.USER32.DLL_GetKeyState
movsx ecx, ax
and ecx, 0x8000
mov dword [ebp - 0x18], ecx
mov ecx, dword [0x4cd8e1]
mov eax, dword [ebp - 0x14]
push eax
mov edx, dword [ebp - 0x10]
push edx
push ecx
push 0
mov edx, dword [0x4cda2d]
mov eax, dword [ebp - 0x18]
push eax
push 0x71
push edx
call fcn.00419974
add esp, 0x1c
jmp 0x4205f5
mov ecx, dword [ebp + 0x10]
shr ecx, 0x10
cmp cx, 2
jne 0x4205d7
mov dword [0x4e2734], 1
mov eax, dword [ebp - 0x14]
push eax
mov edx, dword [ebp - 0x10]
push edx
push 0
call fcn.0041ba24
add esp, 0xc
jmp 0x4205f5
mov dword [0x4e2734], 2
mov ecx, dword [ebp - 0x14]
push ecx
mov eax, dword [ebp - 0x10]
push eax
push 0
push 0x36
call fcn.0041b8e8
add esp, 0x10
push 0
push 0
mov edx, dword [0x4ce20f]
push edx
call sub.USER32.DLL_InvalidateRect
mov eax, 1
jmp 0x425e37
mov dx, word [ebp + 0x14]
and dx, 0xffff
cmp dx, 1
jne case.0x41e711.1136
mov eax, 1
jmp 0x425e37
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x420647
xor eax, eax
jmp 0x425e37
xor edx, edx
xor eax, eax
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x94], edx
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
cmp dword [0x4cda21], 0
jbe 0x4206c7
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda31]
jae 0x4206c7
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Findmodule
pop ecx
mov esi, eax
jmp 0x4206c9
xor esi, esi
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
sub eax, dword [0x4cda2d]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x12fc], 0
cmp dword [ebp - 0x54], 0x10
jbe 0x4206f1
mov dword [ebp - 0x54], 0x10
push 3
mov ecx, dword [0x4cda2d]
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0x11fc]
push edx
push ecx
push eax
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
je 0x420737
xor edx, edx
mov dword [ebp - 0x78], edx
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
push 0x960
push 0
lea eax, [ebp - 0x1c5c]
push eax
call fcn.004a35a0
add esp, 0xc
jmp 0x4207ec
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x54]
jae 0x420760
cmp dword [ebp - 0x60], 0x10
jae 0x420760
xor edx, edx
mov dword [ebp - 0x78], edx
cmp dword [0x4cda51], 0
jle 0x42079c
mov ecx, dword [0x4cda51]
lea eax, [ebp - 0x1c5c]
push ecx
push 6
push eax
mov ecx, dword [0x4cda2d]
mov edx, dword [ebp - 0x78]
push edx
push ecx
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x11fc]
push eax
push edx
call sym.Cari___.exe__Disasm
add esp, 0x1c
mov dword [ebp - 0x5c], eax
jmp 0x4207cd
mov ecx, dword [0x4cd8f9]
lea eax, [ebp - 0x1c5c]
push ecx
push 5
push eax
mov ecx, dword [0x4cda2d]
mov edx, dword [ebp - 0x78]
push edx
push ecx
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x11fc]
push eax
push edx
call sym.Cari___.exe__Disasm
add esp, 0x1c
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x1624], 0
je 0x4207ec
push 0x960
push 0
lea ecx, [ebp - 0x1c5c]
push ecx
call fcn.004a35a0
add esp, 0xc
test byte [0x4cd8ff], 1
setne al
and eax, 1
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x88], ecx
cmp dword [0x4cda21], 0
jbe 0x420921
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0x94], eax
test eax, eax
je 0x420921
cmp dword [0x4cda4d], 0
je 0x42084d
cmp dword [ebp - 0x30], 0
jne 0x42084d
push 0x4b3c24
push 2
push 0
mov edx, dword [ebp - 0x94]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda4d], 0
je 0x420871
cmp dword [ebp - 0x30], 0
je 0x420871
push 0x4b3c31
push 3
push 0
mov ecx, dword [ebp - 0x94]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x30], 0
jne 0x420907
cmp dword [0x4cda4d], 0
jne 0x42088b
mov eax, 0x4b3c43
jmp 0x420890
mov eax, 0x4b3c52
push eax
push 4
push 0
mov edx, dword [ebp - 0x94]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda4d], 0
je 0x4208bf
push 0x4b3c61
push 5
push 0
mov ecx, dword [ebp - 0x94]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3c70
push 6
push 0
mov eax, dword [ebp - 0x94]
push eax
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda4d], 0
je 0x4208f2
push 0x4b3c87
push 7
push 0
mov edx, dword [ebp - 0x94]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3c9c
push 8
push 0
mov ecx, dword [ebp - 0x94]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3caf
mov eax, dword [ebp - 0x94]
push eax
push 0x10
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda21], 0
jbe 0x422398
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda31]
jae 0x422398
mov eax, dword [0x4cda2d]
cmp eax, dword [0x4cda1d]
jb 0x422398
mov edx, dword [0x4cda1d]
add edx, dword [0x4cda21]
cmp edx, dword [0x4cda31]
jb 0x422398
cmp dword [ebp - 0x30], 0
jne 0x422398
xor ecx, ecx
cmp dword [0x4cda4d], 0
mov dword [ebp - 0x2c], ecx
je 0x4209f6
mov eax, dword [0x4cda31]
sub eax, dword [0x4cda2d]
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
push edx
push 0
call sub.KERNEL32.DLL_GlobalAlloc
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x4209f6
push 3
mov eax, dword [0x4cda2d]
mov ecx, dword [ebp - 0x54]
push ecx
push eax
mov edx, dword [ebp - 0x7c]
push edx
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
jne 0x4209ed
mov eax, dword [0x4cda4d]
mov ecx, dword [ebp - 0x54]
add eax, dword [0x4cda2d]
push ecx
sub eax, dword [0x4cda1d]
push eax
mov edx, dword [ebp - 0x7c]
push edx
call fcn.004a37d4
add esp, 0xc
test eax, eax
je 0x4209ed
mov dword [ebp - 0x2c], 1
mov ecx, dword [ebp - 0x7c]
push ecx
call sub.KERNEL32.DLL_GlobalFree
mov eax, dword [0x4cd8f9]
push eax
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0x80], eax
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0x98], eax
test eax, eax
je 0x420acd
push 0x4b3cb7
push 0xa
push 0
mov edx, dword [ebp - 0x98]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3ccc
push 0xb
push 0
mov ecx, dword [ebp - 0x98]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0x98]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3cd5
push 0xc
push 0
mov edx, dword [ebp - 0x98]
push edx
call sub.USER32.DLL_AppendMenuA
lea ecx, [ebp - 0x40]
push ecx
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Getproclimits
add esp, 0xc
mov edi, eax
test edi, edi
jne 0x420a9a
mov eax, dword [ebp - 0x40]
cmp eax, dword [0x4cda31]
jae 0x420a9a
or edi, 0xffffffff
test edi, edi
jne 0x420ab3
push 0x4b3ce1
push 0xd
push 0
mov eax, dword [ebp - 0x98]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3cf3
mov edx, dword [ebp - 0x98]
push edx
push 0x10
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0x9c], eax
test eax, eax
je 0x420be1
push 0x4b3cf8
push 0x10
push 0
mov edx, dword [ebp - 0x9c]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3d05
push 0x11
push 0
mov ecx, dword [ebp - 0x9c]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3d15
push 0x12
push 0
mov eax, dword [ebp - 0x9c]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0x9c]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3d25
push 0x13
push 0
mov ecx, dword [ebp - 0x9c]
push ecx
call sub.USER32.DLL_AppendMenuA
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_OpenClipboard
push 1
call sub.USER32.DLL_GetClipboardData
test eax, eax
je 0x420b75
push 0x4b3d32
push 0x14
push 0
mov edx, dword [ebp - 0x9c]
push edx
call sub.USER32.DLL_AppendMenuA
call sub.USER32.DLL_CloseClipboard
mov ecx, dword [0x4cda2d]
push ecx
push esi
call sym.Cari___.exe__Findfixup
add esp, 8
mov edi, eax
test edi, edi
je 0x420bc7
mov eax, dword [edi]
cmp eax, dword [0x4cda31]
jae 0x420bc7
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0x9c]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3d40
push 0x15
push 0
mov ecx, dword [ebp - 0x9c]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3d59
mov eax, dword [ebp - 0x9c]
push eax
push 0x10
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x78], 0
je 0x420cac
mov ecx, dword [ebp - 0x78]
movzx edi, byte [ecx]
and edi, 0x1f
cmp edi, 1
je 0x420bfe
cmp edi, 0x11
jne 0x420c13
push 0x4b3d61
push 0x18
push 0
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
cmp edi, 2
je 0x420c1d
cmp edi, 4
jne 0x420c34
push 0x4b3d6d
push 0x18
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
jmp 0x420cac
cmp edi, 5
je 0x420c43
cmp edi, 7
je 0x420c43
cmp edi, 9
jne 0x420c5a
push str.Modify
push 0x18
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
jmp 0x420cac
cmp edi, 8
jne 0x420c76
push str.Modify_MMX
push 0x18
push 0
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
jmp 0x420cac
cmp edi, 0xd
jne 0x420c92
push str.Modify_3DNow_
push 0x18
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
jmp 0x420cac
cmp edi, 0xe
jne 0x420cac
push str.Modify_SSE
push 0x18
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x2c], 0
je 0x420cc7
push 0x4b3dad
push 0x19
push 0
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3dc6
push 0x1a
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
push 0
push 0x31
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
jne 0x420cfa
mov eax, 0x4b3dd6
jmp 0x420cff
mov eax, 0x4b3ddf
push eax
push 0x1b
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
push 0
push 0x36
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
jne 0x420d2e
mov eax, 0x4b3ded
jmp 0x420d33
mov eax, 0x4b3df8
push eax
push 0x1c
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xa0], eax
test eax, eax
je 0x420ffa
push 0x4b3e08
push 0x1e
push 0
mov edx, dword [ebp - 0xa0]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3e13
push 0x1f
push 0
mov ecx, dword [ebp - 0xa0]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3e29
push 0x20
push 0
mov eax, dword [ebp - 0xa0]
push eax
call sub.USER32.DLL_AppendMenuA
lea edx, [ebp - 0x10ec]
mov ecx, dword [0x4cda2d]
push edx
push 0x3c
push ecx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
je 0x420ddb
lea eax, [ebp - 0x10ec]
mov edx, 0x4b3e43
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x420dd9
test cl, cl
je 0x420e20
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x420dd9
add eax, 2
add edx, 2
test cl, cl
jne 0x420dbd
je 0x420e20
lea eax, [ebp - 0x10ec]
mov edx, dword [0x4cda2d]
push eax
push 0x3d
push edx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
je 0x420e35
lea eax, [ebp - 0x10ec]
mov edx, 0x4b3e43
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x420e35
test cl, cl
je 0x420e1e
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x420e35
add eax, 2
add edx, 2
test cl, cl
jne 0x420e02
jne 0x420e35
push 0x4b3e4d
push 0x21
push 0
mov eax, dword [ebp - 0xa0]
push eax
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x80], 0
je 0x420e58
mov edx, dword [ebp - 0x80]
cmp dword [edx + 0x482], 0
je 0x420e58
mov ecx, dword [ebp - 0x80]
mov eax, dword [ecx + 0x318]
cmp eax, dword [0x4cda2d]
je 0x420e6d
push 0x4b3e6b
push 0x22
push 0
mov edx, dword [ebp - 0xa0]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov ecx, dword [ebp - 0xa0]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3e80
push 0x23
push 0
mov eax, dword [ebp - 0xa0]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3e93
push 0x24
push 0
mov edx, dword [ebp - 0xa0]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4d8140], 0
je 0x420eed
cmp dword [0x4d8138], 0
je 0x420ed8
push 0x4b3ea5
push 0x25
push 0
mov ecx, dword [ebp - 0xa0]
push ecx
call sub.USER32.DLL_AppendMenuA
jmp 0x420eed
push 0x4b3ec3
push 0x25
push 0
mov eax, dword [ebp - 0xa0]
push eax
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4d375c], 0
je 0x420f7d
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0xa0]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3edd
push 0x26
push 0
mov ecx, dword [ebp - 0xa0]
push ecx
call sub.USER32.DLL_AppendMenuA
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xe0], 0x4d8d70
mov edx, dword [ebp - 0xe0]
mov ecx, dword [edx]
cmp ecx, dword [0x4cda2d]
jne 0x420f52
mov eax, dword [ebp - 0xe0]
cmp dword [eax + 8], 1
je 0x420f62
inc dword [ebp - 0x38]
add dword [ebp - 0xe0], 0x1c
cmp dword [ebp - 0x38], 4
jl 0x420f36
cmp dword [ebp - 0x38], 4
jge 0x420f7d
push 0x4b3ef5
push 0x27
push 0
mov edx, dword [ebp - 0xa0]
push edx
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x420fe0
mov ecx, dword [esi + 0x28]
cmp ecx, dword [esi + 0xc]
jb 0x420fb3
mov eax, dword [esi + 0xc]
add eax, dword [esi + 0x3e9]
cmp eax, dword [esi + 0x28]
ja 0x420fe0
mov edx, dword [esi + 0xc]
cmp edx, dword [0x4cda2d]
ja 0x420fe0
mov ecx, dword [esi + 0xc]
add ecx, dword [esi + 0x3e9]
cmp ecx, dword [0x4cda2d]
jbe 0x420fe0
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xa0]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3f10
push 0x28
push 0
mov edx, dword [ebp - 0xa0]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3f28
mov ecx, dword [ebp - 0xa0]
push ecx
push 0x10
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x421140
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Finddecode
add esp, 8
test eax, eax
je 0x421140
mov eax, dword [0x4cda31]
sub eax, dword [0x4cda2d]
cmp eax, dword [ebp - 0x60]
ja 0x421140
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xa8], eax
test eax, eax
je 0x421140
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp - 0x3c]
push ecx
mov eax, dword [0x4cda2d]
push eax
call sym.Cari___.exe__Getproclimits
add esp, 0xc
mov edi, eax
test edi, edi
jne 0x42106e
mov eax, dword [ebp - 0x40]
cmp eax, dword [0x4cda31]
jae 0x42106e
or edi, 0xffffffff
push 0x4b3f34
push 0x29
push 0
mov eax, dword [ebp - 0xa8]
push eax
call sub.USER32.DLL_AppendMenuA
test edi, edi
jne 0x42109c
push 0x4b3f43
push 0x2a
push 0
mov edx, dword [ebp - 0xa8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3f52
push 0x2b
push 0
mov ecx, dword [ebp - 0xa8]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [esi + 0x174], 0
je 0x421126
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xa8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3f71
push 0x2c
push 0
mov edx, dword [ebp - 0xa8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3f88
push 0x2d
push 0
mov ecx, dword [ebp - 0xa8]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3f9c
push 0x2e
push 0
mov eax, dword [ebp - 0xa8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3fba
push 0x2f
push 0
mov edx, dword [ebp - 0xa8]
push edx
call sub.USER32.DLL_AppendMenuA
push str.HIT
mov ecx, dword [ebp - 0xa8]
push ecx
push 0x10
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x4212fb
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xac], eax
test eax, eax
je 0x4212fb
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp - 0x3c]
push ecx
mov eax, dword [0x4cda2d]
push eax
call sym.Cari___.exe__Getproclimits
add esp, 0xc
mov edi, eax
test edi, edi
jne 0x421185
mov eax, dword [ebp - 0x40]
cmp eax, dword [0x4cda31]
jae 0x421185
or edi, 0xffffffff
lea eax, [ebp - 0x60]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Finddecode
add esp, 8
test eax, eax
je 0x421221
mov ecx, dword [0x4cda31]
sub ecx, dword [0x4cda2d]
cmp ecx, dword [ebp - 0x60]
ja 0x421221
push 0x4b3f34
push 0x33
push 0
mov eax, dword [ebp - 0xac]
push eax
call sub.USER32.DLL_AppendMenuA
test edi, edi
jne 0x4211f4
push 0x4b3f43
push 0x34
push 0
mov edx, dword [ebp - 0xac]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3fdf
push 0x35
push 0
mov ecx, dword [ebp - 0xac]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3ffa
push 0x36
push 0
mov eax, dword [ebp - 0xac]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0xac]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [esi + 0xc]
cmp ecx, dword [0x4cda2d]
ja 0x42124f
mov eax, dword [esi + 0xc]
add eax, dword [esi + 0x10]
cmp eax, dword [0x4cda31]
jb 0x42124f
push 0x4b4019
push 0x37
push 0
mov edx, dword [ebp - 0xac]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b4036
push 0x38
push 0
mov ecx, dword [ebp - 0xac]
push ecx
call sub.USER32.DLL_AppendMenuA
call sym.Cari___.exe__Runtracesize
dec eax
jle 0x421296
push 0x4b404c
push 0x39
push 0
mov eax, dword [ebp - 0xac]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b4064
push 0x3a
push 0
mov edx, dword [ebp - 0xac]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [esi + 0x174], 0
je 0x4212e1
push 0x4b3899
push 0
push 0x800
mov ecx, dword [ebp - 0xac]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3f71
push 0x3b
push 0
mov eax, dword [ebp - 0xac]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3f88
push 0x3c
push 0
mov edx, dword [ebp - 0xac]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b4074
mov ecx, dword [ebp - 0xac]
push ecx
push 0x10
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x162c], 0
je 0x421342
mov ecx, dword [ebp - 0x162c]
push ecx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x421342
push 0x4b407e
push 0x47
push 0
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x4213bd
mov edx, dword [ebp - 0x163c]
cmp edx, dword [esi + 0xc]
jb 0x4213bd
mov ecx, dword [esi + 0xc]
add ecx, dword [esi + 0x10]
cmp ecx, dword [ebp - 0x163c]
jbe 0x4213bd
lea eax, [ebp - 0x60]
push eax
mov edx, dword [ebp - 0x163c]
push edx
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x4213a8
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov al, byte [ecx]
and eax, 0x1f
cmp eax, 0x1d
je 0x4213a8
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
cmp ecx, 0x1e
je 0x4213a8
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
cmp edx, 0x1f
jne 0x4213bd
push 0x4b408c
push 0x48
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
lea eax, [ebp - 0x10ec]
mov edx, dword [0x4cda2d]
push eax
push 0x3a
push edx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
je 0x421419
push 0xa
push 0x4b3bd8
lea ecx, [ebp - 0x10ec]
push ecx
call fcn.004a37d4
add esp, 0xc
test eax, eax
jne 0x421419
mov eax, dword [ebp - 0x163c]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x421419
push 0x4b40a6
push 0x49
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4d5a5c], 4
je 0x42145a
cmp dword [ebp - 0x80], 0
je 0x42145a
mov ecx, dword [ebp - 0x80]
cmp dword [ecx + 0x482], 0
je 0x42145a
mov eax, dword [ebp - 0x80]
mov edx, dword [eax + 0x318]
cmp edx, dword [0x4cda2d]
je 0x42145a
push 0x4b40bf
push 0x4a
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x421588
lea eax, [ebp - 0x10ec]
mov edx, dword [0x4cda2d]
push eax
push 0x3a
push edx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
je 0x421588
push 0xb
push str.Call_switch
lea ecx, [ebp - 0x10ec]
push ecx
call fcn.004a37d4
add esp, 0xc
test eax, eax
je 0x421508
push 0xb
push str.Index_table
lea eax, [ebp - 0x10ec]
push eax
call fcn.004a37d4
add esp, 0xc
test eax, eax
je 0x421508
push 0xc
push 0x4b40f3
lea edx, [ebp - 0x10ec]
push edx
call fcn.004a37d4
add esp, 0xc
test eax, eax
je 0x421508
push 4
push 0x4b4100
lea ecx, [ebp - 0x10ec]
push ecx
call fcn.004a37d4
add esp, 0xc
test eax, eax
je 0x421508
push 7
push 0x4b4105
lea eax, [ebp - 0x10ec]
push eax
call fcn.004a37d4
add esp, 0xc
test eax, eax
jne 0x421588
lea ebx, [ebp - 0x10ec]
jmp 0x421511
inc ebx
xor eax, eax
mov al, byte [ebx]
cmp eax, 0x3c
je 0x42151f
cmp byte [ebx], 0
jne 0x421510
xor edx, edx
mov dl, byte [ebx]
cmp edx, 0x3c
jne 0x421588
inc ebx
xor ecx, ecx
mov cl, byte [ebx]
cmp ecx, 0x2b
jne 0x421533
inc ebx
xor eax, eax
mov dword [ebp - 0x70], eax
jmp 0x421574
xor edx, edx
mov dl, byte [ebx]
cmp edx, 0x39
jg 0x42154c
xor ecx, ecx
mov cl, byte [ebx]
add ecx, 0xffffffd0
jmp 0x421568
xor eax, eax
mov al, byte [ebx]
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 0xd4]
push edx
call fcn.004a98c8
pop ecx
mov ecx, eax
add ecx, 0xffffffc9
mov eax, dword [ebp - 0x70]
shl eax, 4
add ecx, eax
inc ebx
mov dword [ebp - 0x70], ecx
xor edx, edx
mov dl, byte [ebx]
push edx
call fcn.004a7c50
pop ecx
test eax, eax
jne 0x42153a
mov ecx, dword [esi]
add dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0
je 0x421593
mov eax, dword [ebp - 0x70]
jmp 0x421598
mov eax, dword [0x4cda2d]
push eax
push 0x4dca05
call sym.Cari___.exe__Findsorteddata
add esp, 8
mov dword [ebp - 0x88], eax
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xa4], eax
test eax, eax
je 0x421bec
cmp dword [0x4d3010], 0
jle 0x4215dd
mov edx, dword [0x4d3010]
shl edx, 4
add edx, 0x4ceff9
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x80], 0
je 0x421615
mov ecx, dword [ebp - 0x80]
cmp dword [ecx + 0x482], 0
je 0x421615
mov eax, dword [ebp - 0x80]
mov edx, dword [eax + 0x318]
cmp edx, dword [0x4cda2d]
je 0x421615
push str.EIP_t
push 0x4b
push 0
mov ecx, dword [ebp - 0xa4]
push ecx
call sub.USER32.DLL_AppendMenuA
call sym.Cari___.exe__Runtracesize
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jle 0x421668
mov eax, dword [ebp - 0xc]
dec eax
cmp eax, dword [0x4cda51]
jle 0x421644
push 0x4b4117
push 0x4c
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda51], 0
jle 0x4216d3
push 0x4b4138
push 0x4d
push 0
mov ecx, dword [ebp - 0xa4]
push ecx
call sub.USER32.DLL_AppendMenuA
jmp 0x4216d3
cmp dword [0x4d3010], 1
jg 0x42169b
cmp dword [0x4d3010], 0
jle 0x4216b0
mov eax, dword [ebp - 0x84]
mov edx, dword [eax]
cmp edx, dword [0x4cd8f9]
jne 0x42169b
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx + 8]
cmp eax, dword [0x4cda2d]
je 0x4216b0
push 0x4b4154
push 0x4e
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [0x4d3010]
cmp ecx, dword [0x4d300c]
jge 0x4216d3
push 0x4b4164
push 0x4f
push 0
mov eax, dword [ebp - 0xa4]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b416f
push 0x51
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x78], 0
je 0x421730
push 0x4b3899
push 0
push 0x800
mov ecx, dword [ebp - 0xa4]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b4182
push 0x52
push 0
mov eax, dword [ebp - 0xa4]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b41a0
push 0x53
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4de6d0], 0
je 0x4217da
cmp dword [0x4de6e8], 0
je 0x4217da
cmp dword [0x4de6d8], 0
jg 0x421772
mov ecx, dword [0x4de6e8]
mov eax, dword [ecx]
cmp eax, dword [0x4cda2d]
jne 0x421772
mov edx, dword [0x4de6d0]
dec edx
cmp edx, dword [0x4de6d8]
jle 0x4217da
push 0x4b3899
push 0
push 0x800
mov ecx, dword [ebp - 0xa4]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4de6d8], 0
jg 0x4217a2
mov eax, dword [0x4de6e8]
mov edx, dword [eax]
cmp edx, dword [0x4cda2d]
je 0x4217b7
push 0x4b41b9
push 0x54
push 0
mov ecx, dword [ebp - 0xa4]
push ecx
call sub.USER32.DLL_AppendMenuA
mov eax, dword [0x4de6d0]
dec eax
cmp eax, dword [0x4de6d8]
jle 0x4217da
push 0x4b41d3
push 0x55
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Getlinefromaddress
pop ecx
test eax, eax
je 0x421800
push 0x4b41e9
push 0x56
push 0
mov eax, dword [ebp - 0xa4]
push eax
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x42192c
cmp dword [ebp - 0x88], 0
je 0x42192c
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx]
cmp eax, dword [0x4cda2d]
je 0x421852
push 0x4b41fe
push 0x57
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [ebp - 0x88]
cmp dword [ecx + 0x14], 0
je 0x421884
mov eax, dword [ebp - 0x88]
mov edx, dword [eax + 0x14]
cmp edx, dword [0x4cda2d]
je 0x421884
push 0x4b420a
push 0x58
push 0
mov ecx, dword [ebp - 0xa4]
push ecx
call sub.USER32.DLL_AppendMenuA
mov eax, dword [ebp - 0x88]
cmp dword [eax + 0x18], 0xc
jge 0x42189e
mov edx, dword [ebp - 0x88]
mov ecx, dword [edx + 0x18]
mov dword [ebp - 0xc], ecx
jmp 0x4218a5
mov dword [ebp - 0xc], 0xa
xor ebx, ebx
cmp ebx, dword [ebp - 0xc]
jge 0x42190c
lea eax, [ebp - 0x11ec]
push eax
push 0x3f
mov edx, dword [ebp - 0x88]
mov ecx, dword [edx + 0x1c]
add ecx, dword [esi]
add ecx, ebx
push ecx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
je 0x421906
lea eax, [ebp - 0x11e3]
lea edx, [ebp - 0x10ec]
push eax
push str.Case__s
push edx
call fcn.004a6c2c
add esp, 0xc
lea ecx, [ebp - 0x10ec]
push ecx
lea eax, [ebx + 0xd000]
push eax
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
inc ebx
cmp ebx, dword [ebp - 0xc]
jl 0x4218ac
mov ecx, dword [ebp - 0x88]
cmp ebx, dword [ecx + 0x18]
jge 0x42192c
push 0x4b421f
push 0x59
push 0
mov eax, dword [ebp - 0xa4]
push eax
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x42195d
cmp dword [esi + 0xc], 0
je 0x42195d
cmp dword [esi + 0x421], 0
je 0x42195d
mov edx, dword [0x4cda2d]
sub edx, dword [esi + 0xc]
mov dword [ebp - 0x58], edx
mov ecx, dword [ebp - 0x58]
push ecx
push esi
call fcn.0047f200
add esp, 8
mov dword [ebp - 0x34], eax
jmp 0x421964
mov dword [ebp - 0x34], 0xffffffff
cmp dword [ebp - 0x34], 0
jl 0x421bd2
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xa4]
push eax
call sub.USER32.DLL_AppendMenuA
xor ebx, ebx
jmp 0x421b85
mov eax, dword [ebp - 0x34]
add eax, ebx
lea edx, [eax + eax*8]
mov ecx, dword [esi + 0x421]
mov eax, dword [ecx + edx + 5]
cmp eax, dword [ebp - 0x58]
jne 0x421b9b
mov edx, dword [ebp - 0x34]
add edx, ebx
lea ecx, [edx + edx*8]
mov eax, dword [esi + 0x421]
mov edx, dword [eax + ecx + 1]
add edx, dword [esi + 0xc]
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x34]
add ecx, ebx
lea eax, [ecx + ecx*8]
mov edx, dword [esi + 0x421]
xor ecx, ecx
mov cl, byte [edx + eax]
cmp ecx, 3
jne 0x4219f4
push str.CALL_4
lea eax, [ebp - 0x10ec]
push eax
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 8], eax
jmp 0x421afa
mov edx, dword [ebp - 0x34]
add edx, ebx
lea ecx, [edx + edx*8]
mov eax, dword [esi + 0x421]
xor edx, edx
mov dl, byte [eax + ecx]
cmp edx, 2
jne 0x421a28
push str.JMP_____4
lea ecx, [ebp - 0x10ec]
push ecx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 8], eax
jmp 0x421afa
lea eax, [ebp - 0x11fc]
push eax
mov edx, dword [ebp - 0x3c]
push edx
call sym.Cari___.exe__Readcommand
add esp, 8
mov dword [ebp - 0x54], eax
test eax, eax
jne 0x421a5e
push 0x4b4247
lea edx, [ebp - 0x10ec]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 8], eax
jmp 0x421afa
push 0
push 3
lea ecx, [ebp - 0x25bc]
push ecx
push 0
mov eax, dword [ebp - 0x3c]
push eax
mov edx, dword [ebp - 0x54]
push edx
lea ecx, [ebp - 0x11fc]
push ecx
call sym.Cari___.exe__Disasm
add esp, 0x1c
xor eax, eax
mov dword [ebp - 8], eax
lea edx, [ebp - 0x10ec]
mov dword [ebp - 0xe8], edx
lea ecx, [ebp - 0x24b8]
mov dword [ebp - 0xe4], ecx
jmp 0x421ac0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe8]
mov dl, byte [eax]
mov byte [ecx], dl
inc dword [ebp - 8]
inc dword [ebp - 0xe8]
inc dword [ebp - 0xe4]
cmp dword [ebp - 8], 0x40
jge 0x421ae0
mov eax, dword [ebp - 0xe4]
xor edx, edx
mov dl, byte [eax]
cmp edx, 0x20
je 0x421ae0
mov ecx, dword [ebp - 0xe4]
cmp byte [ecx], 0
jne 0x421aa1
push 0x4b4232
lea eax, [ebp - 0x10ec]
add eax, dword [ebp - 8]
push eax
call fcn.004a6c2c
add esp, 8
add dword [ebp - 8], eax
push 0
mov edx, 0x100
sub edx, dword [ebp - 8]
push edx
lea ecx, [ebp - 0x10ec]
add ecx, dword [ebp - 8]
push ecx
push 0x32
mov eax, dword [esi]
push eax
mov edx, dword [ebp - 0x3c]
push edx
call sym.Cari___.exe__Decodeaddress
add esp, 0x18
mov edi, eax
test edi, edi
jne 0x421b49
mov eax, 0x100
sub eax, dword [ebp - 8]
push eax
lea edx, [ebp - 0x10ec]
add edx, dword [ebp - 8]
push edx
push 2
mov ecx, dword [ebp - 0x3c]
push ecx
call sym.Cari___.exe__Decoderelativeoffset
add esp, 0x10
mov edi, eax
test edi, edi
jne 0x421b68
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x10ec]
push eax
push 0x4b399e
add edx, dword [ebp - 8]
push edx
call fcn.004a6c2c
add esp, 0xc
lea ecx, [ebp - 0x10ec]
push ecx
lea eax, [ebx + 0xd080]
push eax
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
inc ebx
cmp ebx, 0xa
jge 0x421b9b
mov ecx, dword [ebp - 0x34]
add ecx, ebx
cmp ecx, dword [esi + 0x425]
jl 0x42198d
mov eax, dword [ebp - 0x34]
add eax, ebx
cmp eax, dword [esi + 0x425]
jge 0x421bd2
add ebx, dword [ebp - 0x34]
lea edx, [ebx + ebx*8]
mov ecx, dword [esi + 0x421]
mov eax, dword [ecx + edx + 5]
cmp eax, dword [ebp - 0x58]
jne 0x421bd2
push 0x4b4252
push 0x5a
push 0
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b4272
mov ecx, dword [ebp - 0xa4]
push ecx
push 0x10
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4d6ea0], 0
je 0x421c91
test esi, esi
je 0x421c91
mov edx, dword [esi]
cmp edx, dword [0x4d6ea4]
jne 0x421c91
cmp dword [ebp - 0x78], 0
je 0x421c91
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov al, byte [ecx]
and eax, 0x1f
cmp eax, 0x1d
je 0x421c42
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
cmp ecx, 0x1e
je 0x421c42
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
cmp edx, 0x1f
jne 0x421c91
cmp dword [0x4d5a5c], 4
je 0x421c91
push 0
push 0x32
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Findname
add esp, 0xc
test eax, eax
je 0x421c91
lea eax, [ebp - 0x2858]
push eax
call fcn.0049fc10
pop ecx
test eax, eax
je 0x421c91
cmp dword [ebp - 0x2828], 0
jne 0x421c91
push 0x4b4278
push 0x5b
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4d7d98], 1
jle 0x421d3a
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xb0], eax
test eax, eax
je 0x421d3a
xor ebx, ebx
jmp 0x421d18
lea eax, [ebx + ebx*2]
lea eax, [ebx + eax*4]
shl eax, 3
sub eax, ebx
shl eax, 2
sub eax, ebx
mov edx, dword [0x4d7db0]
mov ecx, dword [edx + eax*4]
mov dword [ebp - 0x74], ecx
push 0x400
mov eax, dword [ebp - 0x74]
push eax
lea edx, [ebp - 0x10ec]
push edx
call sym.Cari___.exe__Decodethreadname
add esp, 0xc
lea ecx, [ebp - 0x10ec]
lea eax, [ebx + 0x300]
mov edx, 8
push ecx
mov ecx, dword [0x4cd8f9]
push eax
cmp ecx, dword [ebp - 0x74]
je 0x421d0a
add edx, 0xfffffff8
push edx
mov eax, dword [ebp - 0xb0]
push eax
call sub.USER32.DLL_AppendMenuA
inc ebx
cmp ebx, dword [0x4d7d98]
jl 0x421cb5
push 0x4b4288
mov edx, dword [ebp - 0xb0]
push edx
push 0x10
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xb4], eax
test eax, eax
je 0x421f85
push 0x4b428f
push 0x5c
push 0
mov edx, dword [ebp - 0xb4]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [ebp - 0x1640]
cmp ecx, dword [ebp - 0x15f8]
je 0x421dc9
mov eax, dword [ebp - 0x1640]
cmp eax, dword [ebp - 0x15f4]
je 0x421dc9
mov edx, dword [ebp - 0x1640]
push edx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x421dc9
mov ecx, dword [ebp - 0x163c]
cmp ecx, dword [ebp - 0x1640]
jne 0x421db4
push 0x4b429a
push 0x5d
push 0
mov eax, dword [ebp - 0xb4]
push eax
call sub.USER32.DLL_AppendMenuA
jmp 0x421dc9
push 0x4b42a4
push 0x5d
push 0
mov edx, dword [ebp - 0xb4]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [ebp - 0x163c]
cmp ecx, dword [ebp - 0x1640]
je 0x421dfd
mov eax, dword [ebp - 0x163c]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x421dfd
push 0x4b42b6
push 0x5e
push 0
mov edx, dword [ebp - 0xb4]
push edx
call sub.USER32.DLL_AppendMenuA
mov ecx, dword [ebp - 0x15f8]
push ecx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
jne 0x421e60
mov eax, dword [ebp - 0x15f4]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x421f6b
cmp byte [ebp - 0x1456], 0
je 0x421e46
push 0x4b42ca
push 0x60
push 0
mov edx, dword [ebp - 0xb4]
push edx
call sub.USER32.DLL_AppendMenuA
jmp 0x421f6b
push 0x4b42e2
push 0x60
push 0
mov ecx, dword [ebp - 0xb4]
push ecx
call sub.USER32.DLL_AppendMenuA
jmp 0x421f6b
mov eax, dword [ebp - 0x15f4]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
jne 0x421ec3
mov edx, dword [ebp - 0x15f8]
push edx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x421f6b
cmp byte [ebp - 0x1457], 0
je 0x421ea9
push 0x4b42ca
push 0x5f
push 0
mov ecx, dword [ebp - 0xb4]
push ecx
call sub.USER32.DLL_AppendMenuA
jmp 0x421f6b
push 0x4b42e2
push 0x5f
push 0
mov eax, dword [ebp - 0xb4]
push eax
call sub.USER32.DLL_AppendMenuA
jmp 0x421f6b
cmp byte [ebp - 0x1457], 0
jne 0x421ed5
cmp byte [ebp - 0x1456], 0
je 0x421f41
cmp byte [ebp - 0x1457], 0
je 0x421ef5
push 0x4b42f2
push 0x5f
push 0
mov edx, dword [ebp - 0xb4]
push edx
call sub.USER32.DLL_AppendMenuA
jmp 0x421f0a
push 0x4b4309
push 0x5f
push 0
mov ecx, dword [ebp - 0xb4]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp byte [ebp - 0x1456], 0
je 0x421f2a
push 0x4b42f2
push 0x60
push 0
mov eax, dword [ebp - 0xb4]
push eax
call sub.USER32.DLL_AppendMenuA
jmp 0x421f6b
push 0x4b42e2
push 0x60
push 0
mov edx, dword [ebp - 0xb4]
push edx
call sub.USER32.DLL_AppendMenuA
jmp 0x421f6b
push 0x4b4318
push 0x5f
push 0
mov ecx, dword [ebp - 0xb4]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b4327
push 0x60
push 0
mov eax, dword [ebp - 0xb4]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b4337
mov edx, dword [ebp - 0xb4]
push edx
push 0x10
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x78], 0
je 0x421fb7
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
cmp edx, 0x1f
je 0x421fa2
mov ecx, dword [ebp - 0x78]
test byte [ecx], 0x60
je 0x421fb7
push 0x4b4346
push 0x61
push 0
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xb8], eax
test eax, eax
je 0x422201
test esi, esi
je 0x421ffb
push 0x4b435c
push 0x65
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b4382
push 0x66
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b4396
push 0x67
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b43a6
push 0x68
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b43c3
push 0x69
push 0
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b43cd
push 0x6a
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda4d], 0
je 0x42209a
push 0x4b43e3
push 0x6b
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x4220bc
cmp dword [esi + 0x174], 0
je 0x4220bc
push 0x4b43f5
push 0x6c
push 0
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4deb80], 0
je 0x4220da
push 0x4b4400
push 0x6d
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b440d
push 0x6e
push 0
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b4424
push 0x6f
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b4431
push 0x70
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b443f
push 0x71
push 0
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b444d
push 0x72
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b445a
push 0x73
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b4476
push 0x74
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b4489
push 0x75
push 0
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.USER32.DLL_AppendMenuA
call sym.Cari___.exe__Runtracesize
dec eax
jle 0x4221e7
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b449e
push 0x76
push 0
mov edx, dword [ebp - 0xb8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b44b7
mov ecx, dword [ebp - 0xb8]
push ecx
push 0x10
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xbc], eax
test eax, eax
je 0x422398
mov edx, dword [0x4cda2d]
add edx, dword [ebp - 0x5c]
cmp edx, dword [0x4cda31]
jne 0x422286
cmp dword [ebp - 0x78], 0
je 0x422258
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov al, byte [ecx]
and eax, 0x1f
cmp eax, 0x1d
je 0x422258
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
cmp ecx, 0x1e
je 0x422258
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
cmp edx, 0x1f
jne 0x42226f
push 0x4b44c3
push 0x7a
push 0
mov ecx, dword [ebp - 0xbc]
push ecx
call sub.USER32.DLL_AppendMenuA
jmp 0x42229b
push 0x4b44dc
push 0x7a
push 0
mov eax, dword [ebp - 0xbc]
push eax
call sub.USER32.DLL_AppendMenuA
jmp 0x42229b
push 0x4b44f5
push 0x7b
push 0
mov edx, dword [ebp - 0xbc]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x163c], 0
je 0x4222b9
push 0x4b42b6
push 0x7c
push 0
mov ecx, dword [ebp - 0xbc]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x1640], 0
je 0x4222e5
mov eax, dword [ebp - 0x1640]
cmp eax, dword [ebp - 0x163c]
je 0x4222e5
push 0x4b4505
push 0x7d
push 0
mov edx, dword [ebp - 0xbc]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x162c], 0
je 0x42232b
mov ecx, dword [ebp - 0x1658]
and ecx, 0xf0
cmp ecx, 0x70
jne 0x422316
push 0x4b4517
push 0x7e
push 0
mov eax, dword [ebp - 0xbc]
push eax
call sub.USER32.DLL_AppendMenuA
jmp 0x42232b
push 0x4b4529
push 0x7e
push 0
mov edx, dword [ebp - 0xbc]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x1648], 0
je 0x42237e
mov ecx, dword [ebp - 0x1648]
cmp ecx, dword [ebp - 0x162c]
je 0x42237e
mov eax, dword [ebp - 0x1658]
and eax, 0xf0
cmp eax, 0x70
jne 0x422369
push 0x4b453b
push 0x7f
push 0
mov edx, dword [ebp - 0xbc]
push edx
call sub.USER32.DLL_AppendMenuA
jmp 0x42237e
push 0x4b4549
push 0x7f
push 0
mov ecx, dword [ebp - 0xbc]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b4557
mov eax, dword [ebp - 0xbc]
push eax
push 0x10
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4d57cc], 3
jne 0x4223bb
push 0x4b456b
push 0x83
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
jmp 0x422408
cmp dword [0x4d57cc], 6
je 0x4223cd
cmp dword [0x4d57cc], 7
jne 0x4223e7
push 0x4b4580
push 0x83
push 0
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
jmp 0x422408
cmp dword [0x4d57cc], 0
je 0x422408
push 0x4b4591
push 0x83
push 0
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x422614
cmp dword [ebp - 0x30], 0
jne 0x422614
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xc0], eax
test eax, eax
je 0x422614
mov edx, dword [0x4cda31]
cmp edx, dword [0x4cda2d]
jbe 0x422485
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda1d]
jb 0x422485
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [0x4cda31]
jb 0x422485
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Getlinefromaddress
pop ecx
test eax, eax
je 0x422485
push 0x4b45a4
push 0x84
push 0
mov ecx, dword [ebp - 0xc0]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cd915], 0
je 0x4224a6
push 0x4b45b8
push 0x85
push 0
mov eax, dword [ebp - 0xc0]
push eax
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cd915], 1
je 0x4224d0
call fcn.004918d4
test eax, eax
je 0x4224d0
push 0x4b45ca
push 0x86
push 0
mov edx, dword [ebp - 0xc0]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cd915], 2
je 0x4224f9
call sym.Cari___.exe__Runtracesize
dec eax
jle 0x4224f9
push 0x4b45dd
push 0x87
push 0
mov ecx, dword [ebp - 0xc0]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b45f1
push 0x88
push 0
mov eax, dword [ebp - 0xc0]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0xc0]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda3d], 0
je 0x42254a
push 0x4b4602
push 0x89
push 0
mov ecx, dword [ebp - 0xc0]
push ecx
call sub.USER32.DLL_AppendMenuA
mov eax, dword [0x4cda3d]
cmp eax, dword [0x4cda2d]
je 0x42256f
push 0x4b4613
push 0x8a
push 0
mov edx, dword [ebp - 0xc0]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov ecx, dword [ebp - 0xc0]
push ecx
call sub.USER32.DLL_AppendMenuA
xor ebx, ebx
jmp 0x4225f2
lea eax, [ebx + ebx*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*8]
add eax, dword [0x4d7218]
cmp esi, eax
je 0x4225f1
lea edx, [ebx + ebx*4]
lea edx, [edx + edx*4]
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x4d7218]
add edx, 0x48
push edx
push 8
push 0x4b4624
lea ecx, [ebp - 0x10ec]
push ecx
call fcn.004a6c2c
add esp, 0x10
mov edx, dword [0x4d7d98]
add edx, ebx
lea eax, [ebp - 0x10ec]
push eax
add edx, 0x300
push edx
push 0
mov ecx, dword [ebp - 0xc0]
push ecx
call sub.USER32.DLL_AppendMenuA
inc ebx
cmp ebx, dword [0x4d7200]
jl 0x42258b
push 0x4b4632
mov eax, dword [ebp - 0xc0]
push eax
push 0x10
mov edx, dword [ebp - 0x90]
push edx
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x422695
cmp dword [ebp - 0x30], 0
jne 0x422695
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x422695
push 0x4b4290
push 0x8c
push 0
mov edx, dword [ebp - 0xc4]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda4d], 0
je 0x42267b
mov ecx, dword [0x4cda1d]
cmp ecx, dword [esi + 0xc]
jne 0x42267b
mov eax, dword [0x4cda21]
cmp eax, dword [esi + 0x10]
jne 0x42267b
push 0x4b4637
push 0x8d
push 0
mov edx, dword [ebp - 0xc4]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b4649
mov ecx, dword [ebp - 0xc4]
push ecx
push 0x10
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_AppendMenuA
cmp dword [0x4cda21], 0
jbe 0x422a71
cmp dword [ebp - 0x30], 0
jne 0x422a71
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xc8], eax
test eax, eax
je 0x422a71
xor edx, edx
test esi, esi
mov dword [ebp - 0x24], edx
je 0x4226f9
mov ecx, dword [0x4cda1d]
cmp ecx, dword [esi + 0xc]
jb 0x4226f9
mov eax, dword [esi + 0xc]
add eax, dword [esi + 0x10]
cmp eax, dword [0x4cda1d]
jbe 0x4226f9
push 0x4b465c
push 0x8e
push 0
mov edx, dword [ebp - 0xc8]
push edx
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x42271b
cmp dword [ebp - 0x78], 0
je 0x42271b
push 0x4b4671
push 0x8f
push 0
mov ecx, dword [ebp - 0xc8]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b468d
push 0x91
push 0
mov eax, dword [ebp - 0xc8]
push eax
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x42274f
push 0x4b46a7
push 0x92
push 0
mov edx, dword [ebp - 0xc8]
push edx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x5c], 0
jbe 0x4227bf
cmp dword [ebp - 0x78], 0
je 0x4227bf
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov al, byte [ecx]
and eax, 0x1f
cmp eax, 0x1d
je 0x422788
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
cmp ecx, 0x1e
je 0x422788
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
cmp edx, 0x1f
jne 0x4227bf
push 0x4b3899
push 0
push 0x800
mov ecx, dword [ebp - 0xc8]
push ecx
call sub.USER32.DLL_AppendMenuA
mov dword [ebp - 0x24], 1
push 0x4b46c6
push 0x93
push 0
mov eax, dword [ebp - 0xc8]
push eax
call sub.USER32.DLL_AppendMenuA
test esi, esi
je 0x422835
cmp dword [ebp - 0x78], 0
je 0x422835
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda31]
jae 0x422835
mov ecx, dword [0x4cda2d]
cmp ecx, dword [0x4cda1d]
jb 0x422835
mov eax, dword [0x4cda1d]
add eax, dword [0x4cda21]
cmp eax, dword [0x4cda31]
jb 0x422835
cmp dword [ebp - 0x24], 0
jne 0x422816
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0xc8]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b46d7
push 0x90
push 0
mov ecx, dword [ebp - 0xc8]
push ecx
call sub.USER32.DLL_AppendMenuA
mov dword [ebp - 0x24], 1
test esi, esi
je 0x422a57
mov eax, dword [0x4cda2d]
cmp eax, dword [0x4cda31]
jae 0x422a57
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda1d]
jb 0x422a57
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
cmp ecx, dword [0x4cda31]
jb 0x422a57
call sub.USER32.DLL_CreatePopupMenu
mov dword [ebp - 0xcc], eax
test eax, eax
je 0x422a57
cmp dword [ebp - 0x24], 0
jne 0x4228a9
push 0x4b3899
push 0
push 0x800
mov edx, dword [ebp - 0xc8]
push edx
call sub.USER32.DLL_AppendMenuA
push str.Command
push 0x97
push 0
mov ecx, dword [ebp - 0xcc]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b4704
push 0x98
push 0
mov eax, dword [ebp - 0xcc]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b4709
push 0x99
push 0
mov edx, dword [ebp - 0xcc]
push edx
call sub.USER32.DLL_AppendMenuA
push str.Doubleword
push 0x9a
push 0
mov ecx, dword [ebp - 0xcc]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xcc]
push eax
call sub.USER32.DLL_AppendMenuA
push str.Commands
push 0x9b
push 0
mov edx, dword [ebp - 0xcc]
push edx
call sub.USER32.DLL_AppendMenuA
push str.Bytes
push 0x9c
push 0
mov ecx, dword [ebp - 0xcc]
push ecx
call sub.USER32.DLL_AppendMenuA
push str.Words
push 0x9d
push 0
mov eax, dword [ebp - 0xcc]
push eax
call sub.USER32.DLL_AppendMenuA
push str.Doublewords
push 0x9e
push 0
mov edx, dword [ebp - 0xcc]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b473a
push 0x9f
push 0
mov ecx, dword [ebp - 0xcc]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4b4745
push 0xa0
push 0
mov eax, dword [ebp - 0xcc]
push eax
call sub.USER32.DLL_AppendMenuA
mov edx, dword [0x4cda1d]
mov ecx, dword [0x4cda1d]
add edx, dword [0x4cda21]
push edx
push ecx
push 0x4d9034
call sym.Cari___.exe__Findsorteddatarange
add esp, 0xc
test eax, eax
je 0x422a3d
push 0x4b3899
push 0
push 0x800
mov eax, dword [ebp - 0xcc]
push eax
call sub.USER32.DLL_AppendMenuA
mov edx, dword [0x4cda31]
mov ecx, dword [0x4cda2d]
push edx
push ecx
push 0x4d9034
call sym.Cari___.exe__Findsorteddatarange
add esp, 0xc
test eax, eax
je 0x422a25
push 0x4b4752
push 0xa1
push 0
mov eax, dword [ebp - 0xcc]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b4769
push 0xa2
push 0
mov edx, dword [ebp - 0xcc]
push edx
call sub.USER32.DLL_AppendMenuA
push 0x4b477a
mov ecx, dword [ebp - 0xcc]
push ecx
push 0x10
mov eax, dword [ebp - 0xc8]
push eax
call sub.USER32.DLL_AppendMenuA
push 0x4b47a3
mov edx, dword [ebp - 0xc8]
push edx
push 0x10
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
cmp dword [ebp - 0x5c], 0
jbe 0x422c13
cmp byte [0x4dcb44], 0
je 0x422c13
cmp dword [0x4cda21], 0
jbe 0x422c13
mov eax, dword [0x4cda2d]
cmp eax, dword [0x4cda31]
jae 0x422c13
mov edx, dword [0x4cda2d]
cmp edx, dword [0x4cda1d]
jb 0x422c13
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
cmp ecx, dword [0x4cda31]
jb 0x422c13
cmp dword [ebp - 0x30], 0
jne 0x422c13
lea eax, [ebp - 0x12fc]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x422b1b
cmp dword [ebp - 0x1648], 0
je 0x422b1b
lea ecx, [ebp - 0x12fc]
push ecx
mov eax, dword [ebp - 0x1648]
push eax
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x422b43
cmp dword [ebp - 0x162c], 0
je 0x422b43
lea edx, [ebp - 0x12fc]
push edx
mov ecx, dword [ebp - 0x162c]
push ecx
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x422b6b
cmp dword [ebp - 0x1640], 0
je 0x422b6b
lea eax, [ebp - 0x12fc]
push eax
mov edx, dword [ebp - 0x1640]
push edx
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x422b93
cmp dword [ebp - 0x1604], 0
je 0x422b93
lea ecx, [ebp - 0x12fc]
push ecx
mov eax, dword [ebp - 0x1604]
push eax
call sym.Cari___.exe__Findsymbolicname
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jle 0x422c13
cmp dword [ebp - 0xc], 2
jle 0x422bfb
mov edx, dword [ebp - 0xc]
xor ecx, ecx
mov cl, byte [ebp + edx - 0x12fe]
mov dword [ebp - 0xd8], ecx
mov eax, dword [ebp - 0xd8]
push eax
call fcn.004a9874
pop ecx
mov edx, dword [ebp - 0xc]
xor ecx, ecx
mov cl, byte [ebp + edx - 0x12fe]
cmp eax, ecx
jne 0x422bfb
mov eax, dword [ebp - 0xc]
xor edx, edx
mov dl, byte [ebp + eax - 0x12fd]
cmp edx, 0x41
je 0x422bf0
mov ecx, dword [ebp - 0xc]
xor eax, eax
mov al, byte [ebp + ecx - 0x12fd]
cmp eax, 0x57
jne 0x422bfb
mov edx, dword [ebp - 0xc]
mov byte [ebp + edx - 0x12fd], 0
push 0x4b47ac
push 0xab
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call sub.USER32.DLL_AppendMenuA
push 0x4cd6a8
push 0x1f
mov eax, dword [ebp - 0x90]
push eax
call fcn.004964e8
add esp, 0xc
mov edx, dword [ebp - 0x90]
push edx
push 0
push 0x465
mov ecx, dword [ebp + 8]
push ecx
push 0x4cd6a8
call sym.Cari___.exe__Tablefunction
add esp, 0x14
mov ebx, eax
call fcn.0049659c
cmp dword [ebp - 0x94], 0
je 0x422c64
mov eax, dword [ebp - 0x94]
push eax
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0x98], 0
je 0x422c79
mov edx, dword [ebp - 0x98]
push edx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0x9c], 0
je 0x422c8e
mov ecx, dword [ebp - 0x9c]
push ecx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xa0], 0
je 0x422ca3
mov eax, dword [ebp - 0xa0]
push eax
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xa4], 0
je 0x422cb8
mov edx, dword [ebp - 0xa4]
push edx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xa8], 0
je 0x422ccd
mov ecx, dword [ebp - 0xa8]
push ecx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xac], 0
je 0x422ce2
mov eax, dword [ebp - 0xa8]
push eax
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xb0], 0
je 0x422cf7
mov edx, dword [ebp - 0xb0]
push edx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xb4], 0
je 0x422d0c
mov ecx, dword [ebp - 0xb4]
push ecx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xb8], 0
je 0x422d21
mov eax, dword [ebp - 0xb8]
push eax
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xbc], 0
je 0x422d36
mov edx, dword [ebp - 0xbc]
push edx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xc0], 0
je 0x422d4b
mov ecx, dword [ebp - 0xc0]
push ecx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xc4], 0
je 0x422d60
mov eax, dword [ebp - 0xc4]
push eax
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xcc], 0
je 0x422d75
mov edx, dword [ebp - 0xcc]
push edx
call sub.USER32.DLL_DestroyMenu
cmp dword [ebp - 0xc8], 0
je 0x422d8a
mov ecx, dword [ebp - 0xc8]
push ecx
call sub.USER32.DLL_DestroyMenu
mov eax, dword [ebp - 0x90]
push eax
call sub.USER32.DLL_DestroyMenu
cmp ebx, 0x2df
jle 0x422db4
cmp ebx, 0x2ff
jg 0x422db4
push ebx
call fcn.0041b7e0
pop ecx
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_UpdateWindow
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x10]
push eax
push 3
push 0x4cd6a8
call fcn.00447598
add esp, 0x10
cmp ebx, 2
jne 0x422ded
push 3
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
jmp 0x425ddc
cmp ebx, 3
jne 0x422e06
push 2
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
jmp 0x425ddc
cmp ebx, 4
jne 0x422e1f
push 1
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
jmp 0x425ddc
cmp ebx, 5
jne 0x422e4d
push 7
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
cmp dword [0x4deb80], 9
jne 0x425ddc
xor edx, edx
mov dword [0x4deb80], edx
jmp 0x425ddc
cmp ebx, 6
jne 0x422e66
push 4
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
jmp 0x425ddc
cmp ebx, 7
jne 0x422e7f
push 6
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
jmp 0x425ddc
cmp ebx, 8
jne 0x422e98
push 5
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
jmp 0x425ddc
cmp ebx, 0xa
jne 0x422ec0
mov ecx, dword [0x4cda31]
push ecx
mov eax, dword [0x4cda2d]
push eax
push 0x4cd6a8
mov edx, dword [ebp + 8]
push edx
call fcn.0044ae5c
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0xb
jne 0x422ee4
mov ecx, dword [0x4cda31]
mov eax, dword [0x4cda2d]
push ecx
push eax
push 0x4cd6a8
call fcn.0044aeb4
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0xc
jne 0x422f0c
mov edx, dword [0x4cda1d]
mov dword [0x4cda2d], edx
mov ecx, dword [0x4cda1d]
add ecx, dword [0x4cda21]
mov dword [0x4cda31], ecx
jmp 0x425ddc
cmp ebx, 0xd
jne 0x422f2e
push 0x4cda31
push 0x4cda2d
mov eax, dword [0x4cda2d]
push eax
call sym.Cari___.exe__Getproclimits
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x10
jne 0x423094
mov edx, dword [0x4cda2d]
mov dword [ebp - 0x3c], edx
mov ecx, dword [0x4cda31]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0x100
jbe 0x422f5c
mov dword [ebp - 0x54], 0x100
push 1
mov eax, dword [ebp - 0x54]
push eax
mov edx, dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x27bc]
push ecx
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
jne case.0x41e711.1136
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x26bc]
push eax
push 0xff
push edx
call fcn.004a35a0
add esp, 0xc
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x27c0], ecx
lea edx, [ebp - 0x10ec]
mov eax, dword [ebp - 0x3c]
push eax
push 0x4b3be3
push edx
call fcn.004a6c2c
add esp, 0xc
xor edi, edi
cmp dword [ebp - 0x78], 0
je 0x422fe4
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0xb
jne 0x422fd9
mov edi, 0x10
jmp 0x422fe4
cmp dword [ebp - 8], 0xc
jne 0x422fe4
mov edi, 0x20
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x4cd8e1]
push eax
lea eax, [ebp - 0x27c0]
mov edx, dword [ebp - 0x10]
push edx
push 0
push ecx
push edi
push eax
lea edx, [ebp - 0x10ec]
push edx
call sym.Cari___.exe__Gethexstringxy
add esp, 0x1c
test eax, eax
jne case.0x41e711.1136
mov ecx, dword [ebp - 0x3c]
push ecx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x42304c
cmp dword [eax + 0x24], 0
jne 0x42304c
mov edx, dword [eax]
cmp edx, dword [0x4cda1d]
jne 0x42304c
mov eax, dword [eax + 4]
cmp eax, dword [0x4cda21]
jne 0x42304c
push 1
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
push 5
mov ecx, dword [ebp - 0x27c0]
push ecx
mov eax, dword [ebp - 0x3c]
push eax
lea edx, [ebp - 0x27bc]
push edx
call sym.Cari___.exe__Writememory
add esp, 0x10
mov ecx, dword [0x4cda2d]
mov eax, dword [0x4cda21]
mov edx, dword [0x4cda1d]
push 1
push 1
push ecx
push eax
push edx
push 0
call sym.Cari___.exe__Disassembleforward
add esp, 0x18
mov dword [0x4cda31], eax
jmp 0x425ddc
cmp ebx, 0x11
je 0x4230a2
cmp ebx, 0x12
jne 0x423151
mov ecx, dword [0x4cda2d]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x4230e3
cmp dword [eax + 0x24], 0
jne 0x4230e3
mov edx, dword [eax]
cmp edx, dword [0x4cda1d]
jne 0x4230e3
mov ecx, dword [eax + 4]
cmp ecx, dword [0x4cda21]
jne 0x4230e3
push 1
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
push 0x1000
xor eax, eax
cmp ebx, 0x11
je 0x4230f4
add eax, 0x90
push eax
lea edx, [ebp - 0x10ec]
push edx
call fcn.004a35a0
add esp, 0xc
jmp 0x423141
mov ecx, dword [0x4cda31]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0x1000
jbe 0x423122
mov dword [ebp - 0x54], 0x1000
push 5
mov eax, dword [ebp - 0x54]
push eax
mov edx, dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x10ec]
push ecx
call sym.Cari___.exe__Writememory
add esp, 0x10
mov eax, dword [ebp - 0x54]
add dword [ebp - 0x3c], eax
mov edx, dword [0x4cda31]
cmp edx, dword [ebp - 0x3c]
ja 0x423106
jmp 0x425ddc
cmp ebx, 0x13
jne 0x4231dc
lea edi, [ebp - 0x2c44]
mov esi, 0x4cd6a8
mov ecx, 0xf3
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x29ef], 0x1201
mov eax, dword [ebp - 0x28bf]
xor edx, edx
mov dword [ebp - 0x28c7], eax
mov dword [ebp - 0x2b00], edx
mov ecx, dword [ebp - 0x2a0b]
mov eax, dword [ecx*4 + 0x4d48f4]
shl eax, 5
xor edx, edx
lea eax, [eax + eax*2]
mov dword [ebp - 0x2afc], eax
mov dword [ebp - 0x2af8], edx
mov dword [ebp - 0x2b08], 3
mov ecx, dword [ebp - 0x28bb]
lea edx, [ebp - 0x2c44]
push ecx
mov eax, dword [ebp - 0x28bf]
push eax
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044ae5c
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0x14
jne 0x4233ba
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_OpenClipboard
push 1
call sub.USER32.DLL_GetClipboardData
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x4233b0
mov edx, dword [ebp - 0xd0]
push edx
call sub.KERNEL32.DLL_GlobalLock
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x4233a4
mov ecx, dword [0x4cda2d]
mov dword [ebp - 0x3c], ecx
mov eax, dword [0x4cda31]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x3c]
push edx
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x423392
cmp dword [eax + 0x24], 0
jne 0x423392
mov ecx, dword [eax]
cmp ecx, dword [0x4cda1d]
jne 0x423392
mov eax, dword [eax + 4]
cmp eax, dword [0x4cda21]
jne 0x423392
push 1
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
jmp 0x423392
xor edx, edx
mov dword [ebp - 0xc], edx
jmp 0x42334a
mov ecx, dword [ebp - 0x7c]
movzx esi, byte [ecx]
inc dword [ebp - 0x7c]
push esi
call fcn.004a98c8
pop ecx
mov edi, eax
push edi
call fcn.004a7bbc
pop ecx
test eax, eax
je 0x4232b8
mov ebx, edi
shl ebx, 4
add ebx, 0xfffffd00
jmp 0x4232d8
push edi
call fcn.004a7c50
pop ecx
test eax, eax
je 0x4232d0
mov ebx, edi
shl ebx, 4
add ebx, 0xfffffc90
jmp 0x4232d8
mov eax, dword [ebp - 0x7c]
cmp byte [eax], 0
jne 0x42328e
mov edx, dword [ebp - 0xc]
lea ecx, [ebp + edx - 0x10ec]
mov dword [ebp - 0xec], ecx
jmp 0x423342
mov eax, dword [ebp - 0x7c]
movzx esi, byte [eax]
inc dword [ebp - 0x7c]
push esi
call fcn.004a98c8
pop ecx
mov edi, eax
push edi
call fcn.004a7bbc
pop ecx
test eax, eax
je 0x42331f
mov eax, dword [ebp - 0xec]
add edi, 0xffffffd0
add ebx, edi
mov byte [eax], bl
inc dword [ebp - 0xc]
inc dword [ebp - 0xec]
jmp 0x42334a
push edi
call fcn.004a7c50
pop ecx
test eax, eax
je 0x423342
mov eax, dword [ebp - 0xec]
add edi, 0xffffffc9
add ebx, edi
mov byte [eax], bl
inc dword [ebp - 0xc]
inc dword [ebp - 0xec]
jmp 0x42334a
mov edx, dword [ebp - 0x7c]
cmp byte [edx], 0
jne 0x4232ea
cmp dword [ebp - 0xc], 0x1000
jge 0x42335f
mov ecx, dword [ebp - 0x7c]
cmp byte [ecx], 0
jne 0x4232d0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x54]
jbe 0x42336d
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0xc], edx
push 5
mov ecx, dword [ebp - 0xc]
push ecx
mov eax, dword [ebp - 0x3c]
push eax
lea edx, [ebp - 0x10ec]
push edx
call sym.Cari___.exe__Writememory
add esp, 0x10
mov ecx, dword [ebp - 0xc]
add dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0xc]
sub dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jbe 0x4233a4
mov edx, dword [ebp - 0x7c]
cmp byte [edx], 0
jne 0x423282
mov ecx, dword [ebp - 0xd0]
push ecx
call sub.KERNEL32.DLL_GlobalUnlock
call sub.USER32.DLL_CloseClipboard
jmp 0x425ddc
cmp ebx, 0x15
jne 0x42345b
lea edi, [ebp - 0x3014]
mov esi, 0x4cd6a8
mov ecx, 0xf3
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x2dbf], 0x1201
mov eax, dword [ebp - 0x2c8f]
xor edx, edx
mov dword [ebp - 0x2c97], eax
mov dword [ebp - 0x2ed0], edx
mov ecx, dword [ebp - 0x2ddb]
mov edi, dword [0x4e2750]
mov eax, dword [ecx*4 + 0x4d48f4]
lea ecx, [ebp - 0x3014]
shl eax, 5
xor edx, edx
mov dword [0x4e2750], 2
lea eax, [eax + eax*2]
mov dword [ebp - 0x2ecc], eax
mov dword [ebp - 0x2ec8], edx
mov dword [ebp - 0x2ed8], 3
mov eax, dword [ebp - 0x2c8b]
push eax
mov edx, dword [ebp - 0x2c8f]
push edx
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0044ae5c
add esp, 0x10
mov dword [0x4e2750], edi
jmp 0x425ddc
cmp ebx, 0x18
jne 0x423703
mov edx, dword [0x4cda2d]
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x78]
movzx edi, byte [ecx]
and edi, 0x1f
cmp edi, 1
je 0x423480
cmp edi, 0x11
jne 0x423489
mov dword [ebp - 0x54], 1
jmp 0x4234d7
cmp edi, 2
jne 0x423497
mov dword [ebp - 0x54], 2
jmp 0x4234d7
cmp edi, 4
je 0x4234a1
cmp edi, 5
jne 0x4234aa
mov dword [ebp - 0x54], 4
jmp 0x4234d7
cmp edi, 7
je 0x4234b9
cmp edi, 8
je 0x4234b9
cmp edi, 0xd
jne 0x4234c2
mov dword [ebp - 0x54], 8
jmp 0x4234d7
cmp edi, 9
jne 0x4234d0
mov dword [ebp - 0x54], 0xa
jmp 0x4234d7
mov dword [ebp - 0x54], 0x10
push 0x10
push 0
lea eax, [ebp - 0x11fc]
push eax
call fcn.004a35a0
add esp, 0xc
push 1
mov edx, dword [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x11fc]
push eax
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, dword [ebp - 0x54]
jne case.0x41e711.1136
cmp edi, 1
je 0x423520
cmp edi, 0x11
je 0x423520
cmp edi, 2
je 0x423520
cmp edi, 4
jne 0x423588
mov edx, dword [ebp - 0x3c]
cmp edi, 1
push edx
je 0x42352e
cmp edi, 0x11
jne 0x423535
mov ecx, 0x4b3d68
jmp 0x423546
cmp edi, 2
jne 0x423541
mov ecx, 0x4b4714
jmp 0x423546
mov ecx, 0x4b47dc
push ecx
push 0x4b47ca
lea eax, [ebp - 0x10ec]
push eax
call fcn.004a6c2c
add esp, 0x10
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x11fc]
push edx
mov eax, dword [ebp - 0x10]
push eax
push 0
push 0
lea eax, [ebp - 0x10ec]
mov edx, dword [ebp - 0x54]
push edx
push ecx
push eax
call sym.Cari___.exe__Getlongxy
add esp, 0x1c
mov edi, eax
jmp 0x4236a5
cmp edi, 5
je 0x423597
cmp edi, 7
je 0x423597
cmp edi, 9
jne 0x4235dc
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x10ec]
push eax
push 0x4b47e2
push edx
call fcn.004a6c2c
add esp, 0xc
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x11fc]
mov eax, dword [ebp - 0x10]
push eax
push 0
push 0
lea eax, [ebp - 0x10ec]
mov edx, dword [ebp - 0x54]
push edx
push ecx
push eax
call sym.Cari___.exe__Getfloatxy
add esp, 0x1c
mov edi, eax
jmp 0x4236a5
cmp edi, 8
jne 0x423620
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x10ec]
push eax
push 0x4b47f7
push edx
call fcn.004a6c2c
add esp, 0xc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x11fc]
push ecx
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10ec]
push eax
push 0
push edx
push ecx
call sym.Cari___.exe__Getmmxxy
add esp, 0x14
mov edi, eax
jmp 0x4236a5
cmp edi, 0xd
jne 0x423661
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x10ec]
push eax
push 0x4b480f
push edx
call fcn.004a6c2c
add esp, 0xc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x11fc]
push ecx
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10ec]
push eax
push 0
push edx
push ecx
call sym.Cari___.exe__Get3dnowxy
add esp, 0x14
mov edi, eax
jmp 0x4236a5
cmp edi, 0xe
jne 0x4236a2
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x10ec]
push eax
push 0x4b482a
push edx
call fcn.004a6c2c
add esp, 0xc
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x11fc]
push ecx
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10ec]
push eax
push 0
push edx
push ecx
call fcn.00441478
add esp, 0x14
mov edi, eax
jmp 0x4236a5
or edi, 0xffffffff
test edi, edi
jne 0x425ddc
mov eax, dword [ebp - 0x3c]
push eax
call sym.Cari___.exe__Findmemory
pop ecx
test eax, eax
je 0x4236e5
cmp dword [eax + 0x24], 0
jne 0x4236e5
mov edx, dword [eax]
cmp edx, dword [0x4cda1d]
jne 0x4236e5
mov ecx, dword [eax + 4]
cmp ecx, dword [0x4cda21]
jne 0x4236e5
push 1
push 0x4cd6a8
call sym.Cari___.exe__Dumpbackup
add esp, 8
push 1
mov eax, dword [ebp - 0x54]
push eax
mov edx, dword [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x11fc]
push ecx
call sym.Cari___.exe__Writememory
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0x19
jne 0x42373d
mov eax, dword [0x4cda31]
mov ecx, dword [0x4cda4d]
sub eax, dword [0x4cda2d]
add ecx, dword [0x4cda2d]
push 5
push eax
sub ecx, dword [0x4cda1d]
mov edx, dword [0x4cda2d]
push edx
push ecx
call sym.Cari___.exe__Writememory
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0x1a
jne 0x423763
mov dword [0x4e2734], 1
mov eax, dword [ebp - 0x14]
push eax
mov edx, dword [ebp - 0x10]
push edx
push 0
call fcn.0041ba24
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x1b
jne 0x423789
mov eax, dword [ebp - 0x14]
xor ecx, ecx
push eax
mov dword [0x4e2734], ecx
mov edx, dword [ebp - 0x10]
push edx
push 0
push 0x31
call fcn.0041b8e8
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0x1c
jne 0x4237b1
mov dword [0x4e2734], 2
mov ecx, dword [ebp - 0x14]
push ecx
mov eax, dword [ebp - 0x10]
push eax
push 0
push 0x36
call fcn.0041b8e8
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0x1e
jne 0x4237de
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4cd8e1]
push edx
mov edx, dword [0x4cda2d]
mov ecx, dword [ebp - 0x10]
push ecx
push eax
push 0
push 0
push 0x71
push edx
call fcn.00419974
add esp, 0x1c
jmp 0x425ddc
cmp ebx, 0x1f
jne 0x42380c
mov ecx, dword [ebp - 0x14]
mov edx, dword [0x4cd8e1]
push ecx
mov ecx, dword [0x4cda2d]
mov eax, dword [ebp - 0x10]
push eax
push edx
push 0
push 1
push 0x71
push ecx
call fcn.00419974
add esp, 0x1c
jmp 0x425ddc
cmp ebx, 0x20
jne 0x423839
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x4cd8e1]
push eax
mov eax, dword [0x4cda2d]
mov edx, dword [ebp - 0x10]
push edx
push ecx
push 0
push 1
push 0x73
push eax
call fcn.00419974
add esp, 0x1c
jmp 0x425ddc
cmp ebx, 0x21
jne 0x4238b2
cmp dword [ebp - 0x80], 0
je 0x423883
mov edx, dword [ebp - 0x80]
cmp dword [edx + 0x482], 0
je 0x423883
mov ecx, dword [ebp - 0x80]
mov eax, dword [ecx + 0x318]
cmp eax, dword [0x4cda2d]
jne 0x423883
push 3
push 4
mov edx, dword [ebp - 0x80]
mov ecx, dword [edx + 0x308]
add ecx, 4
push ecx
lea eax, [ebp - 0x3c]
push eax
call sym.Cari___.exe__Readmemory
add esp, 0x10
cmp eax, 4
je 0x423888
xor edx, edx
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x14]
mov edx, dword [0x4cd8e1]
push ecx
mov eax, dword [ebp - 0x10]
push eax
push edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [0x4cda2d]
push ecx
push 0
push 0xffffffffffffffff
push eax
call fcn.00419974
add esp, 0x1c
jmp 0x425ddc
cmp ebx, 0x22
jne 0x4238d3
push 1
push 0
push 1
mov edx, dword [0x4cda2d]
push edx
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x23
jne 0x4238fa
mov ecx, dword [0x4cda31]
mov eax, dword [0x4cda2d]
sub ecx, dword [0x4cda2d]
push ecx
push eax
push 3
call sym.Cari___.exe__Setmembreakpoint
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x24
jne 0x423922
mov edx, dword [0x4cda31]
mov ecx, dword [0x4cda2d]
sub edx, dword [0x4cda2d]
push edx
push ecx
push 2
call sym.Cari___.exe__Setmembreakpoint
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x25
jne 0x42393a
push 0
push 0
push 0
call sym.Cari___.exe__Setmembreakpoint
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x26
jne 0x423956
push 1
push 1
mov eax, dword [0x4cda2d]
push eax
call sym.Cari___.exe__Sethardwarebreakpoint
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x27
jne 0x42396a
mov edx, dword [ebp - 0x38]
push edx
call sym.Cari___.exe__Deletehardwarebreakpoint
pop ecx
jmp 0x425ddc
cmp ebx, 0x28
jne 0x423980
mov ecx, dword [0x4cda2d]
mov dword [esi + 0x3e1], ecx
jmp 0x425ddc
cmp ebx, 0x29
jne 0x4239a1
push 1
mov eax, dword [0x4cda31]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x2a
jne 0x4239d4
lea ecx, [ebp - 0x40]
push ecx
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Getproclimits
add esp, 0xc
push 1
mov ecx, dword [ebp - 0x40]
push ecx
mov eax, dword [ebp - 0x3c]
push eax
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x2b
jne 0x4239f3
push 2
mov edx, dword [esi + 0xc]
add edx, dword [esi + 0x10]
push edx
mov ecx, dword [esi + 0xc]
push ecx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x2c
jne 0x423a14
push 4
mov eax, dword [0x4cda31]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x2d
jne 0x423a3a
push esi
call fcn.0041b4f8
pop ecx
cmp dword [0x4deb80], 0xa
jne 0x425ddc
xor ecx, ecx
mov dword [0x4deb80], ecx
jmp 0x425ddc
cmp ebx, 0x2e
jne 0x423a5b
push 3
mov eax, dword [0x4cda31]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x2f
jne 0x423a7a
push 3
mov ecx, dword [esi + 0xc]
add ecx, dword [esi + 0x10]
push ecx
mov eax, dword [esi + 0xc]
push eax
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x33
jne 0x423ae6
call sym.Cari___.exe__Runtracesize
test eax, eax
jne 0x423ac9
mov edx, dword [0x4cd8f9]
push edx
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je case.0x41e711.1136
mov ecx, dword [ebp - 0x80]
cmp dword [ecx + 0x482], 0
je case.0x41e711.1136
mov eax, dword [ebp - 0x80]
add eax, 0x2ec
push eax
call sym.Cari___.exe__Startruntrace
pop ecx
test eax, eax
jne case.0x41e711.1136
push 7
mov edx, dword [0x4cda31]
push edx
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x34
jne 0x423b63
call sym.Cari___.exe__Runtracesize
test eax, eax
jne 0x423b35
mov eax, dword [0x4cd8f9]
push eax
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je case.0x41e711.1136
mov edx, dword [ebp - 0x80]
cmp dword [edx + 0x482], 0
je case.0x41e711.1136
mov ecx, dword [ebp - 0x80]
add ecx, 0x2ec
push ecx
call sym.Cari___.exe__Startruntrace
pop ecx
test eax, eax
jne case.0x41e711.1136
lea eax, [ebp - 0x40]
push eax
lea edx, [ebp - 0x3c]
push edx
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Getproclimits
add esp, 0xc
push 7
mov eax, dword [ebp - 0x40]
push eax
mov edx, dword [ebp - 0x3c]
push edx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x35
jne 0x423be1
call sym.Cari___.exe__Runtracesize
test eax, eax
jne 0x423bb3
mov ecx, dword [0x4cd8f9]
push ecx
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je case.0x41e711.1136
mov eax, dword [ebp - 0x80]
cmp dword [eax + 0x482], 0
je case.0x41e711.1136
mov edx, dword [ebp - 0x80]
add edx, 0x2ec
push edx
call sym.Cari___.exe__Startruntrace
pop ecx
test eax, eax
jne case.0x41e711.1136
lea ecx, [ebp - 0x40]
push ecx
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Getproclimits
add esp, 0xc
push 8
mov ecx, dword [ebp - 0x40]
push ecx
mov eax, dword [ebp - 0x3c]
push eax
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x36
jne 0x423c53
call sym.Cari___.exe__Runtracesize
test eax, eax
jne 0x423c30
mov edx, dword [0x4cd8f9]
push edx
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je case.0x41e711.1136
mov ecx, dword [ebp - 0x80]
cmp dword [ecx + 0x482], 0
je case.0x41e711.1136
mov eax, dword [ebp - 0x80]
add eax, 0x2ec
push eax
call sym.Cari___.exe__Startruntrace
pop ecx
test eax, eax
jne case.0x41e711.1136
push 9
mov edx, dword [0x4cda1d]
add edx, dword [0x4cda21]
push edx
mov ecx, dword [0x4cda1d]
push ecx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x37
jne 0x423c74
push 0xb
mov eax, dword [0x4cda31]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x38
jne 0x423c8b
mov ecx, dword [0x4cd8e1]
push ecx
call fcn.00444cb4
pop ecx
jmp 0x425ddc
cmp ebx, 0x39
jne 0x423ca4
mov eax, dword [esi + 4]
push eax
mov edx, dword [esi]
push edx
call sym.Cari___.exe__Createprofilewindow
add esp, 8
jmp 0x425ddc
cmp ebx, 0x3a
jne 0x423cba
push 0xffffffffffffffff
push 0
call sym.Cari___.exe__Createprofilewindow
add esp, 8
jmp 0x425ddc
cmp ebx, 0x3b
jne 0x423cdb
push 0xa
mov ecx, dword [0x4cda31]
push ecx
mov eax, dword [0x4cda2d]
push eax
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x3c
jne 0x423d03
push 0xa
mov edx, dword [0x4cda1d]
add edx, dword [0x4cda21]
push edx
mov ecx, dword [0x4cda1d]
push ecx
call sym.Cari___.exe__Modifyhittrace
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x47
jne 0x423d24
push 5
push 0
push 0
mov eax, dword [ebp - 0x162c]
push eax
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x48
jne 0x423d45
push 5
push 0
push 0
mov edx, dword [ebp - 0x163c]
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x49
jne 0x423d66
push 5
push 0
push 0
mov ecx, dword [ebp - 0x163c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x4a
jne 0x423e93
lea eax, [ebp - 0x60]
push eax
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Finddecode
add esp, 8
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x423de8
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov al, byte [ecx]
and eax, 0x1f
cmp eax, 0x1d
je 0x423de8
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov cl, byte [edx]
and ecx, 0x1f
cmp ecx, 0x1e
je 0x423de8
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dl, byte [eax]
and edx, 0x1f
cmp edx, 0x1f
je 0x423de8
mov ecx, dword [ebp - 0x78]
cmp byte [ecx], 0
je 0x423de8
push 0x2024
push 0x4b3b02
push 0x4b3a46
mov eax, dword [0x4d3b7c]
push eax
call sub.USER32.DLL_MessageBoxA
mov edi, eax
cmp edi, 6
je 0x423de8
xor eax, eax
jmp 0x425e37
test esi, esi
je 0x423e05
mov edx, dword [0x4cda2d]
cmp edx, dword [esi + 0xc]
jb 0x423e05
mov ecx, dword [esi + 0xc]
add ecx, dword [esi + 0x10]
cmp ecx, dword [0x4cda2d]
ja 0x423e2d
push 0x2024
push 0x4b3b02
push 0x4b3b20
mov eax, dword [0x4d3b7c]
push eax
call sub.USER32.DLL_MessageBoxA
mov edi, eax
cmp edi, 6
je 0x423e2d
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp - 0x80]
cmp dword [edx + 0x2f0], 0
jne 0x423e61
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
lea esi, [ecx + 0x2ec]
lea edi, [eax + 0x486]
mov ecx, 0x65
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 0x80]
mov dword [eax + 0x2f0], 1
mov edx, dword [ebp - 0x80]
mov ecx, dword [0x4cda2d]
mov dword [edx + 0x318], ecx
mov eax, dword [ebp - 0x80]
mov dword [eax + 0x2ec], 1
push 0
push 0
push 0x476
call sym.Cari___.exe__Broadcast
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x4b
jne 0x423eaf
push 0
push 0x2a
push 0x102
mov edx, dword [ebp + 8]
push edx
call fcn.0041e604
jmp 0x425ddc
cmp ebx, 0x4c
jne 0x423eed
push 0x204
mov ecx, dword [0x4cda51]
push 0
inc ecx
push 0
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
cmp dword [0x4d57e4], 0
je 0x425ddc
mov eax, dword [0x4cda51]
push eax
call sym.Cari___.exe__Scrollruntracewindow
pop ecx
jmp 0x425ddc
cmp ebx, 0x4d
jne 0x423f2c
push 0x204
mov edx, dword [0x4cda51]
push 0
dec edx
push 0
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
cmp dword [0x4d57e4], 0
je 0x425ddc
mov ecx, dword [0x4cda51]
push ecx
call sym.Cari___.exe__Scrollruntracewindow
pop ecx
jmp 0x425ddc
cmp ebx, 0x4e
jne 0x423f48
push 0
push 0x2d
push 0x102
mov eax, dword [ebp + 8]
push eax
call fcn.0041e604
jmp 0x425ddc
cmp ebx, 0x4f
jne 0x423f64
push 0
push 0x2b
push 0x102
mov edx, dword [ebp + 8]
push edx
call fcn.0041e604
jmp 0x425ddc
cmp ebx, 0x51
jne 0x423fc4
mov byte [ebp - 0x10ec], 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [0x4cd8e1]
push ecx
mov ecx, dword [0x4cd8f9]
mov eax, dword [ebp - 0x10]
push eax
push edx
push ecx
push 0x4b
lea eax, [ebp - 0x10ec]
push 0
push eax
push 0x4b3bf5
call fcn.004436e8
add esp, 0x20
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x425ddc
push 5
push 0
push 0
mov edx, dword [ebp - 0x3c]
push edx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x52
jne 0x423ffc
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Findprevproc
pop ecx
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x425ddc
push 5
push 0
push 0
mov eax, dword [ebp - 0x3c]
push eax
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x53
jne 0x424034
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Findnextproc
pop ecx
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x425ddc
push 5
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x54
jne 0x42408f
lea eax, [ebp - 0x6c]
push eax
xor edx, edx
cmp dword [0x4de6d8], 0
je 0x424049
dec edx
push edx
call sym.Cari___.exe__Walkreferenceex
add esp, 8
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x425ddc
push 4
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
cmp dword [ebp - 0x6c], 1
jbe 0x425ddc
mov eax, dword [0x4cda2d]
add eax, dword [ebp - 0x6c]
mov dword [0x4cda31], eax
jmp 0x425ddc
cmp ebx, 0x55
jne 0x4240df
lea edx, [ebp - 0x6c]
push edx
push 1
call sym.Cari___.exe__Walkreferenceex
add esp, 8
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x425ddc
push 4
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
cmp dword [ebp - 0x6c], 1
jbe 0x425ddc
mov eax, dword [0x4cda2d]
add eax, dword [ebp - 0x6c]
mov dword [0x4cda31], eax
jmp 0x425ddc
cmp ebx, 0x56
jne 0x4240fa
push 1
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Showsourcefromaddress
add esp, 8
jmp 0x425ddc
cmp ebx, 0x57
jne 0x42411d
push 5
push 0
push 0
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx]
push eax
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x58
jne 0x424141
push 5
push 0
push 0
mov edx, dword [ebp - 0x88]
mov ecx, dword [edx + 0x14]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x59
jne 0x424193
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x4cd8e1]
push eax
mov edx, dword [ebp - 0x10]
push edx
push ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [0x4cda2d]
mov edx, dword [eax]
push edx
push ecx
call fcn.00445d7c
add esp, 0x14
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x425ddc
push 5
push 0
push 0
mov eax, dword [ebp - 0x3c]
push eax
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x5a
jne 0x4241db
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4cd8e1]
push edx
mov edx, dword [0x4cda2d]
mov ecx, dword [ebp - 0x10]
push ecx
push eax
push edx
call fcn.00446320
add esp, 0x10
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x425ddc
push 5
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x5b
jne 0x4241f1
mov eax, dword [0x4cda2d]
push eax
call fcn.004a1558
pop ecx
jmp 0x425ddc
cmp ebx, 0x5c
jne 0x424233
push 0xb0
push 0
mov edx, dword [0x4cda2d]
push edx
push 0
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
mov ecx, dword [0x4cda2d]
mov dword [0x4cddfa], ecx
mov eax, dword [0x4cda31]
push 1
mov dword [0x4cddfe], eax
call fcn.0041b75c
pop ecx
jmp 0x425ddc
cmp ebx, 0x5d
jne 0x424257
push 0xb0
push 0
mov edx, dword [ebp - 0x1640]
push edx
push 0
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x5e
jne 0x42427b
push 0xb0
push 0
mov ecx, dword [ebp - 0x163c]
push ecx
push 0
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x5f
jne 0x42429f
push 0xb0
push 0
mov eax, dword [ebp - 0x15f8]
push eax
push 0
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x60
jne 0x4242c3
push 0xb0
push 0
mov edx, dword [ebp - 0x15f4]
push edx
push 0
push 0
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x425ddc
cmp ebx, 0x61
jne 0x424308
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov al, byte [ecx]
and eax, 0x1f
cmp eax, 0x1f
jne 0x4242e9
mov edx, dword [0x4cda2d]
push edx
call sym.Cari___.exe__Followcall
pop ecx
mov dword [ebp - 0x3c], eax
jmp 0x4242f9
mov ecx, dword [0x4cda2d]
push ecx
call sym.Cari___.exe__Findprocbegin
pop ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
call fcn.0049ca58
pop ecx
jmp 0x425ddc
cmp ebx, 0x65
jne 0x424319
push esi
call fcn.00466efc
pop ecx
jmp 0x425ddc
cmp ebx, 0x66
jne 0x42432b
push 0
call fcn.00466efc
pop ecx
jmp 0x425ddc
cmp ebx, 0x67
jne 0x424341
push 0
push 7
call fcn.0041bb24
add esp, 8
jmp 0x425ddc
cmp ebx, 0x68
jne 0x424357
push 0
push 0xb
call fcn.0041bb24
add esp, 8
jmp 0x425ddc
cmp ebx, 0x69
jne 0x42436d
push 0
push 8
call fcn.0041bb24
add esp, 8
jmp 0x425ddc
cmp ebx, 0x6a
jne 0x424383
push 0
push 1
call fcn.0041bb24
add esp, 8
jmp 0x425ddc
cmp ebx, 0x6b
jne 0x424399
push 0
push 9
call fcn.0041bb24
add esp, 8
jmp 0x425ddc
cmp ebx, 0x6c
jne 0x4243af
push 0
push 0xa
call fcn.0041bb24
add esp, 8
jmp 0x425ddc
cmp ebx, 0x6d
jne 0x4243c5
push 0
push 0
call fcn.0041bb24
add esp, 8
jmp 0x425ddc
cmp ebx, 0x6e
jne 0x4243e8
push 0x4b4842
mov edx, dword [0x4cda2d]
push edx
push 0x4cd6a8
call sym.Cari___.exe__Findalldllcalls
add esp, 0xc
jmp 0x425ddc
cmp ebx, 0x6f
jne 0x424439
mov ecx, dword [ebp - 0x14]
push ecx
mov eax, dword [ebp - 0x10]
push eax
push 1
push 0
push 0x4deb88
call sym.Cari___.exe__Getasmfindmodelxy
add esp, 0x14
cmp dword [0x4deba8], 0
jne 0x424416
xor eax, eax
jmp 0x425e37
push 0x4b485b
mov edx, dword [0x4cda2d]
push edx
push 0x4deb88
push 0x4cd6a8
call sym.Cari___.exe__Findallcommands
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0x70
jne 0x424492
mov ecx, dword [ebp - 0x14]
push ecx
mov eax, dword [ebp - 0x10]
push eax
mov edx, dword [0x4cd8e1]
push edx
push 0x4dfd08
push 0x4ded08
call fcn.00443e64
add esp, 0x14
cmp dword [0x4dfd28], 0
jne 0x42446f
xor eax, eax
jmp 0x425e37
push 0x4b486a
mov edx, dword [0x4cda2d]
push edx
push 0x4dfd08
push 0x4cd6a8
call sym.Cari___.exe__Findallsequences
add esp, 0x10
jmp 0x425ddc
cmp ebx, 0x71
je 0x4244a0
cmp ebx, 0x7c
jne 0x4245d5
cmp ebx, 0x71
jne 0x4244db
mov ecx, dword [ebp - 0x14]
push ecx
mov eax, dword [ebp - 0x10]
push eax
push 0
push 0
push 4
push 0x4e1308
push 0x4b39cb
call sym.Cari___.exe__Getlongxy
add esp, 0x1c
test eax, eax
je 0x4244d0
xor eax, eax
jmp 0x425e37
mov edx, dword [0x4e1308]
mov dword [ebp - 0x3c], edx
jmp 0x4244e4
mov ecx, dword [ebp - 0x163c]
mov dword [ebp - 0x3c], ecx
test esi, esi
je 0x4244ff
cmp dword [0x4de818], 0
jne 0x4244ff
mov ecx, dword [0x4cda1d]
mov eax, dword [0x4cda21]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
push 0x4b3c10
lea edx, [ebp - 0x10ec]
push edx
call fcn.004a6c2c
add esp, 8
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x10ec]
add ecx, dword [ebp - 0xc]
push ecx
mov eax, dword [ebp - 0x54]
push eax
mov edx, dword [ebp - 0x50]
push edx
call sym.Cari___.exe__Decoderange
add esp, 0xc
add dword [ebp - 0xc], eax
push 0x4b487a
lea ecx, [ebp - 0x10ec]
add ecx, dword [ebp - 0xc]
push ecx
call fcn.004a6c2c
add esp, 8
add dword [ebp - 0xc], eax
cmp dword [ebp - 0x3c], 0
jge 0x42458c
cmp ebx, 0x72
jne 0x424661
test esi, esi
je 0x4245f9
cmp ebx, 0x73
jne 0x4246ea
test ebx, ebx
je 0x425ded
push 0
push 0
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_InvalidateRect
xor eax, eax
jmp 0x425e37
push fcn.00447748
push 0x4cd6a8
mov edx, dword [ebp + 8]
push edx
call sym.Cari___.exe__Painttable
add esp, 0xc
xor eax, eax
jmp 0x425e37
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp + 0x10]
push ecx
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0044e618
jmp 0x425e37
mov ecx, dword [ebp + 0x14]
push ecx
mov eax, dword [ebp + 0x10]
push eax
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_DefWindowProcA
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10