Function at 0x4323d4
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffd30
push ebx
push esi
push edi
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
cmp eax, 0x111
jg 0x432455
je 0x433818
cmp eax, 0x10
jg 0x43242a
je 0x433462
dec eax
je 0x4324b4
dec eax
je 0x4324c7
sub eax, 3
je 0x43250b
sub eax, 0xa
je 0x432847
jmp 0x43422c
sub eax, 0x14
je 0x432501
sub eax, 0x10
je 0x43255a
sub eax, 0xdc
je 0x432570
sub eax, 4
je 0x432570
jmp 0x43422c
cmp eax, 0x202
jg 0x432490
je 0x43277c
sub eax, 0x116
je 0x4335ae
dec eax
je 0x433565
sub eax, 9
je 0x433548
add eax, 0xffffff20
sub eax, 2
jb 0x4325bb
jmp 0x43422c
sub eax, 0x203
je 0x4325bb
sub eax, 0x30
je 0x43350c
sub eax, 0x245
je 0x4325bb
jmp 0x43422c
push 1
mov edx, dword [0x4d3b7c]
push edx
call sub.SHELL32.DLL_DragAcceptFiles
jmp 0x434247
push 0
xor ecx, ecx
push 0
push 0x473
mov dword [0x4d54cc], ecx
call sym.Cari___.exe__Broadcast
add esp, 0xc
push 0
mov eax, dword [0x4d3b7c]
push eax
call sub.SHELL32.DLL_DragAcceptFiles
xor edx, edx
push 0
mov dword [0x4d3b7c], edx
call sub.USER32.DLL_PostQuitMessage
jmp 0x434247
mov eax, 1
jmp 0x434249
mov esi, 0x17
cmp dword [0x4d3b88], 0
jne 0x43251c
add esi, 0xffffffe9
push 1
mov ecx, dword [0x4e3604]
mov eax, dword [ebp + 0x14]
shr eax, 0x10
movzx edx, ax
sub edx, esi
sub edx, dword [ecx*4 + 0x4d4920]
mov ecx, dword [0x4d3b80]
add edx, 0xfffffff9
push edx
mov ax, word [ebp + 0x14]
and ax, 0xffff
movzx edx, ax
push edx
push esi
push 0
push ecx
call sub.USER32.DLL_MoveWindow
jmp 0x434247
mov eax, dword [ebp + 0x14]
mov dword [eax + 0x18], 0x140
mov dword [eax + 0x1c], 0xc8
jmp 0x434247
push 0x10
call sub.USER32.DLL_GetKeyState
movsx esi, ax
and esi, 0x8000
push 0x11
call sub.USER32.DLL_GetKeyState
movsx eax, ax
and eax, 0x8000
cmp dword [ebp + 0xc], 0x104
sete dl
and edx, 1
push 0
push ebx
push esi
push edx
push eax
push 0
call fcn.00496e98
add esp, 0x18
mov edi, eax
test edi, edi
setne al
and eax, 1
jmp 0x434249
cmp dword [0x4d3b88], 0
je 0x43275e
xor edi, edi
mov eax, dword [ebp + 0x14]
shr eax, 0x10
cmp ax, 2
jb 0x43266b
cmp ax, 0x12
jae 0x43266b
mov dword [ebp - 4], 2
cmp dword [0x4d3b8c], 0
je 0x43260f
mov edx, dword [0x4e3604]
mov ecx, dword [edx*4 + 0x4d48f4]
mov eax, ecx
lea ecx, [eax + ecx*2]
lea ecx, [eax + ecx*4]
add ecx, 2
add dword [ebp - 4], ecx
xor edi, edi
mov esi, 0x4b5708
jmp 0x432656
cmp byte [eax], 0
jne 0x432625
mov eax, dword [esi + 4]
add dword [ebp - 4], eax
jmp 0x432652
test byte [esi + 0xc], 0x10
je 0x432634
cmp dword [0x4d5a4c], 0
je 0x432652
mov ax, word [ebp + 0x14]
and ax, 0xffff
movzx eax, ax
cmp eax, dword [ebp - 4]
jl 0x43264e
mov edx, dword [ebp - 4]
add edx, 0x12
cmp eax, edx
jl 0x43265c
add dword [ebp - 4], 0x14
inc edi
add esi, 0x14
mov eax, dword [esi]
test eax, eax
jne 0x432618
lea edx, [edi + edi*4]
cmp dword [edx*4 + 0x4b5708], 0
jne 0x43266b
xor edi, edi
cmp dword [ebp + 0xc], 0x478
jne 0x43268a
lea eax, [edi + edi*4]
mov edx, dword [eax*4 + 0x4b5718]
push edx
call fcn.0043157c
pop ecx
jmp 0x43275e
cmp dword [ebp + 0xc], 0x200
jne 0x4326f7
call sub.USER32.DLL_GetCapture
cmp eax, dword [ebp + 8]
jne 0x4326f7
cmp edi, dword [0x4b59dc]
je 0x4326a7
xor edi, edi
cmp edi, dword [0x4b59d8]
je 0x43275e
mov dword [0x4b59d8], edi
lea eax, [ebp - 0x1264]
push eax
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_GetClientRect
mov ecx, 2
lea edx, [ebp - 0x1264]
mov dword [ebp - 0x1260], ecx
mov eax, dword [ebp - 0x1260]
add eax, 0x12
mov dword [ebp - 0x1258], eax
push 0
push edx
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_InvalidateRect
jmp 0x43275e
cmp dword [ebp + 0xc], 0x201
je 0x432709
cmp dword [ebp + 0xc], 0x203
jne 0x43275e
test edi, edi
je 0x43275e
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_SetCapture
lea eax, [ebp - 0x1264]
mov dword [0x4b59dc], edi
push eax
mov dword [0x4b59d8], edi
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_GetClientRect
mov ecx, 2
lea edx, [ebp - 0x1264]
mov dword [ebp - 0x1260], ecx
mov eax, dword [ebp - 0x1260]
add eax, 0x12
mov dword [ebp - 0x1258], eax
push 0
push edx
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_InvalidateRect
mov eax, dword [ebp + 0x14]
mov ecx, dword [0x4d3b80]
push eax
push ebx
mov edx, dword [ebp + 0xc]
push edx
push ecx
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_DefFrameProcA
jmp 0x434249
call sub.USER32.DLL_GetCapture
cmp eax, dword [ebp + 8]
jne 0x432829
call sub.USER32.DLL_ReleaseCapture
xor edx, edx
mov dword [0x4b59dc], edx
cmp dword [0x4b59d8], 0
je 0x432829
mov esi, dword [0x4b59d8]
lea edx, [ebp - 0x1264]
shl esi, 2
push edx
mov ecx, dword [ebp + 8]
push ecx
lea esi, [esi + esi*4]
add esi, 0x4b5708
xor eax, eax
mov dword [0x4b59d8], eax
call sub.USER32.DLL_GetClientRect
mov eax, 2
lea ecx, [ebp - 0x1264]
mov dword [ebp - 0x1260], eax
mov edx, dword [ebp - 0x1260]
add edx, 0x12
mov dword [ebp - 0x1258], edx
push 0
push ecx
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_InvalidateRect
mov edx, dword [esi + 0xc]
and edx, 2
push edx
mov ecx, dword [esi + 0xc]
and ecx, 1
push ecx
mov eax, dword [esi + 0xc]
and eax, 4
push eax
mov edx, dword [esi + 8]
push edx
mov ecx, 0x104
test byte [esi + 0xc], 4
jne 0x432820
add ecx, 0xfffffffc
push ecx
call fcn.00431b90
add esp, 0x14
mov eax, dword [ebp + 0x14]
mov ecx, dword [0x4d3b80]
push eax
push ebx
mov edx, dword [ebp + 0xc]
push edx
push ecx
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_DefFrameProcA
jmp 0x434249
lea edx, [ebp - 0x12a4]
push edx
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_BeginPaint
mov ebx, eax
lea eax, [ebp - 0x1264]
push eax
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_GetClientRect
mov ecx, dword [0x4e3604]
mov eax, dword [ecx*4 + 0x4d409c]
push eax
push ebx
call sub.GDI32.DLL_SelectObject
push 1
push ebx
call sub.GDI32.DLL_SetBkMode
cmp dword [0x4d3b88], 0
je 0x432ed5
lea esi, [ebp - 0x1264]
lea edi, [ebp - 0x1244]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x1240]
mov edx, dword [0x4d3c50]
add eax, 0x17
mov dword [ebp - 0x1238], eax
push edx
push ebx
call sub.GDI32.DLL_SelectObject
dec dword [ebp - 0x1238]
push 0
mov ecx, dword [ebp - 0x1238]
push ecx
mov eax, dword [ebp - 0x1244]
push eax
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1238]
push edx
mov ecx, dword [ebp - 0x123c]
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [0x4d3c70]
push eax
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov edx, dword [ebp - 0x1238]
add edx, 0xfffffffe
push edx
mov ecx, dword [ebp - 0x1244]
add ecx, 2
push ecx
push ebx
call sub.GDI32.DLL_MoveToEx
mov eax, dword [ebp - 0x1238]
add eax, 0xfffffffe
push eax
mov edx, dword [ebp - 0x123c]
add edx, 0xfffffffe
push edx
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [ebp - 0x1240]
push ecx
mov eax, dword [ebp - 0x123c]
add eax, 0xfffffffe
push eax
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [ebp - 0x1240]
push edx
mov ecx, dword [ebp - 0x1244]
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [ebp - 0x1238]
push eax
mov edx, dword [ebp - 0x1244]
push edx
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [0x4d3c54]
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov eax, dword [ebp - 0x1240]
push eax
mov edx, dword [ebp - 0x123c]
dec edx
push edx
push ebx
call sub.GDI32.DLL_MoveToEx
mov ecx, dword [ebp - 0x1238]
dec ecx
push ecx
mov eax, dword [ebp - 0x123c]
dec eax
push eax
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [ebp - 0x1238]
dec edx
push edx
mov ecx, dword [ebp - 0x1244]
inc ecx
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [ebp - 0x1240]
inc eax
push eax
mov edx, dword [ebp - 0x1244]
inc edx
push edx
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [ebp - 0x1240]
inc ecx
push ecx
mov eax, dword [ebp - 0x123c]
add eax, 0xfffffffe
push eax
push ebx
call sub.GDI32.DLL_LineTo
add dword [ebp - 0x1244], 2
sub dword [ebp - 0x123c], 2
add dword [ebp - 0x1240], 2
sub dword [ebp - 0x1238], 2
cmp dword [0x4d3b8c], 0
je 0x432b19
mov edx, dword [0x4e3604]
mov edi, dword [edx*4 + 0x4d48f4]
mov edx, dword [0x4d3c70]
mov eax, edi
push edx
push ebx
lea edi, [eax + edi*2]
lea edi, [eax + edi*4]
call sub.GDI32.DLL_SelectObject
push 0
mov ecx, dword [ebp - 0x1240]
dec ecx
push ecx
mov eax, dword [ebp - 0x1244]
add eax, edi
push eax
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1238]
push edx
mov ecx, dword [ebp - 0x1244]
add ecx, edi
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [0x4d3c54]
push eax
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov edx, dword [ebp - 0x1240]
push edx
mov ecx, dword [ebp - 0x1244]
add ecx, edi
inc ecx
push ecx
push ebx
call sub.GDI32.DLL_MoveToEx
mov eax, dword [ebp - 0x1238]
inc eax
push eax
mov edx, dword [ebp - 0x1244]
add edx, edi
inc edx
push edx
push ebx
call sub.GDI32.DLL_LineTo
push ebx
call fcn.004322b8
pop ecx
mov esi, eax
push esi
push edi
lea edi, [ebp - 0x1254]
lea esi, [ebp - 0x1244]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
mov eax, dword [ebp - 0x1254]
pop esi
add eax, edi
mov dword [ebp - 0x124c], eax
push 0
push esi
call fcn.004a36d4
pop ecx
push eax
push esi
lea edx, [ebp - 0x1254]
push edx
push 6
mov ecx, dword [0x4e3604]
mov eax, dword [ebp - 0x1248]
sub eax, dword [ecx*4 + 0x4d4920]
add eax, 0xfffffffd
push eax
mov edx, dword [ebp - 0x1254]
add edx, 3
push edx
push ebx
call sub.GDI32.DLL_ExtTextOutA
add edi, 2
add dword [ebp - 0x1244], edi
push ebx
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [ebp - 0x18], eax
xor edi, edi
mov esi, 0x4b5708
jmp 0x432e93
cmp byte [eax], 0
jne 0x432b7b
push esi
push edi
lea edi, [ebp - 0x1254]
lea esi, [ebp - 0x1244]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov eax, dword [ebp - 0x1244]
mov edx, dword [0x4d3c00]
add eax, dword [esi + 4]
lea ecx, [ebp - 0x1254]
mov dword [ebp - 0x124c], eax
push edx
push ecx
push ebx
call sub.USER32.DLL_FillRect
mov eax, dword [esi + 4]
add dword [ebp - 0x1244], eax
jmp 0x432e8f
test byte [esi + 0xc], 0x10
je 0x432b8e
cmp dword [0x4d5a4c], 0
je 0x432e8f
cmp edi, dword [0x4b59d8]
jne 0x432d17
mov edx, dword [0x4d3c34]
push edx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov ecx, dword [ebp - 0x1238]
add ecx, 0xfffffffe
push ecx
mov eax, dword [ebp - 0x1244]
push eax
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1240]
push edx
mov ecx, dword [ebp - 0x1244]
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [ebp - 0x1240]
push eax
mov edx, dword [ebp - 0x1244]
add edx, 0x11
push edx
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [0x4d3c70]
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov eax, dword [ebp - 0x1238]
dec eax
push eax
mov edx, dword [ebp - 0x1244]
push edx
push ebx
call sub.GDI32.DLL_MoveToEx
mov ecx, dword [ebp - 0x1238]
dec ecx
push ecx
mov eax, dword [ebp - 0x1244]
add eax, 0x11
push eax
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [ebp - 0x1240]
dec edx
push edx
mov ecx, dword [ebp - 0x1244]
add ecx, 0x11
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [esi]
push eax
mov edx, dword [0x4d3b78]
push edx
call sub.USER32.DLL_LoadBitmapA
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov eax, dword [ebp - 0x18]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x14], eax
push 0xcc0020
push 0
push 0
mov edx, dword [ebp - 0x18]
push edx
push 0x10
push 0x10
mov ecx, dword [ebp - 0x1240]
inc ecx
push ecx
mov eax, dword [ebp - 0x1244]
inc eax
push eax
push ebx
call sub.GDI32.DLL_BitBlt
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x18]
push ecx
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x10]
push eax
call sub.GDI32.DLL_DeleteObject
mov edx, dword [0x4d3c50]
push edx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov ecx, dword [ebp - 0x1240]
push ecx
mov eax, dword [ebp - 0x1244]
add eax, 0x12
push eax
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1238]
push edx
mov ecx, dword [ebp - 0x1244]
add ecx, 0x12
push ecx
push ebx
call sub.GDI32.DLL_LineTo
push 0
mov eax, dword [ebp - 0x1240]
push eax
mov edx, dword [ebp - 0x1244]
add edx, 0x13
push edx
push ebx
call sub.GDI32.DLL_MoveToEx
mov ecx, dword [ebp - 0x1238]
push ecx
mov eax, dword [ebp - 0x1244]
add eax, 0x13
push eax
push ebx
call sub.GDI32.DLL_LineTo
add dword [ebp - 0x1244], 0x14
jmp 0x432e8f
mov edx, dword [0x4d3c70]
push edx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov ecx, dword [ebp - 0x1238]
add ecx, 0xfffffffe
push ecx
mov eax, dword [ebp - 0x1244]
push eax
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1240]
push edx
mov ecx, dword [ebp - 0x1244]
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [ebp - 0x1240]
push eax
mov edx, dword [ebp - 0x1244]
add edx, 0x11
push edx
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [0x4d3c34]
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov eax, dword [ebp - 0x1238]
dec eax
push eax
mov edx, dword [ebp - 0x1244]
push edx
push ebx
call sub.GDI32.DLL_MoveToEx
mov ecx, dword [ebp - 0x1238]
dec ecx
push ecx
mov eax, dword [ebp - 0x1244]
add eax, 0x11
push eax
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [ebp - 0x1240]
dec edx
push edx
mov ecx, dword [ebp - 0x1244]
add ecx, 0x11
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [esi]
push eax
mov edx, dword [0x4d3b78]
push edx
call sub.USER32.DLL_LoadBitmapA
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov eax, dword [ebp - 0x18]
push eax
call sub.GDI32.DLL_SelectObject
mov dword [ebp - 0x14], eax
push 0xcc0020
push 1
push 1
mov edx, dword [ebp - 0x18]
push edx
push 0x10
push 0x10
mov ecx, dword [ebp - 0x1240]
inc ecx
push ecx
mov eax, dword [ebp - 0x1244]
inc eax
push eax
push ebx
call sub.GDI32.DLL_BitBlt
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x18]
push ecx
call sub.GDI32.DLL_SelectObject
mov eax, dword [ebp - 0x10]
push eax
call sub.GDI32.DLL_DeleteObject
mov edx, dword [0x4d3c50]
push edx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov ecx, dword [ebp - 0x1240]
push ecx
mov eax, dword [ebp - 0x1244]
add eax, 0x12
push eax
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1238]
push edx
mov ecx, dword [ebp - 0x1244]
add ecx, 0x12
push ecx
push ebx
call sub.GDI32.DLL_LineTo
push 0
mov eax, dword [ebp - 0x1240]
push eax
mov edx, dword [ebp - 0x1244]
add edx, 0x13
push edx
push ebx
call sub.GDI32.DLL_MoveToEx
mov ecx, dword [ebp - 0x1238]
push ecx
mov eax, dword [ebp - 0x1244]
add eax, 0x13
push eax
push ebx
call sub.GDI32.DLL_LineTo
add dword [ebp - 0x1244], 0x14
inc edi
add esi, 0x14
mov eax, dword [esi]
test eax, eax
je 0x432eab
mov edx, dword [ebp - 0x1244]
cmp edx, dword [ebp - 0x123c]
jl 0x432b2e
mov ecx, dword [ebp - 0x1244]
cmp ecx, dword [ebp - 0x123c]
jge 0x432ecc
mov eax, dword [0x4d3c00]
lea edx, [ebp - 0x1244]
push eax
push edx
push ebx
call sub.USER32.DLL_FillRect
mov ecx, dword [ebp - 0x18]
push ecx
call sub.GDI32.DLL_DeleteDC
mov eax, dword [0x4e3604]
mov edx, dword [ebp - 0x1258]
mov ecx, dword [0x4d3c70]
sub edx, dword [eax*4 + 0x4d4920]
add edx, 0xfffffff9
mov dword [ebp - 0x1260], edx
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov eax, dword [ebp - 0x1260]
push eax
push 0
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1260]
push edx
mov ecx, dword [ebp - 0x125c]
push ecx
push ebx
call sub.GDI32.DLL_LineTo
inc dword [ebp - 0x1260]
mov eax, dword [0x4d3c50]
push eax
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov edx, dword [ebp - 0x1260]
push edx
push 0
push ebx
call sub.GDI32.DLL_MoveToEx
mov ecx, dword [ebp - 0x1260]
push ecx
mov eax, dword [ebp - 0x125c]
dec eax
push eax
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [ebp - 0x1258]
dec edx
push edx
mov ecx, dword [ebp - 0x125c]
dec ecx
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [ebp - 0x1258]
dec eax
push eax
push 0
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [ebp - 0x1260]
push edx
push 0
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [0x4d3c70]
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov eax, dword [ebp - 0x1258]
add eax, 0xfffffffe
push eax
push 2
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1258]
add edx, 0xfffffffe
push edx
mov ecx, dword [ebp - 0x125c]
add ecx, 0xfffffffe
push ecx
push ebx
call sub.GDI32.DLL_LineTo
mov eax, dword [ebp - 0x1260]
push eax
mov edx, dword [ebp - 0x125c]
add edx, 0xfffffffe
push edx
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [0x4d3c54]
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov eax, dword [ebp - 0x1258]
dec eax
push eax
push 1
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1260]
inc edx
push edx
push 1
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [ebp - 0x1260]
inc ecx
push ecx
mov eax, dword [ebp - 0x125c]
dec eax
push eax
push ebx
call sub.GDI32.DLL_LineTo
add dword [ebp - 0x1264], 2
sub dword [ebp - 0x125c], 2
add dword [ebp - 0x1260], 2
sub dword [ebp - 0x1258], 2
xor edx, edx
cmp dword [0x4d3b8c], 0
jne 0x433050
add edx, 0xd
mov ecx, dword [0x4e3604]
add edx, 6
mov edi, dword [ebp - 0x125c]
imul edx, dword [ecx*4 + 0x4d48f4]
sub edi, edx
push 0
mov eax, dword [ebp - 0x1258]
dec eax
lea esi, [edi + 1]
push eax
push esi
push ebx
call sub.GDI32.DLL_MoveToEx
mov eax, dword [ebp - 0x1260]
dec eax
push eax
push esi
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [0x4d3c50]
push edx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov ecx, dword [ebp - 0x1258]
push ecx
push edi
push ebx
call sub.GDI32.DLL_MoveToEx
mov eax, dword [ebp - 0x1260]
add eax, 0xfffffffe
push eax
push edi
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [0x4d3c70]
push edx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
lea esi, [edi - 1]
mov ecx, dword [ebp - 0x1258]
push ecx
push esi
push ebx
call sub.GDI32.DLL_MoveToEx
mov eax, dword [ebp - 0x1260]
add eax, 0xfffffffe
push eax
push esi
push ebx
call sub.GDI32.DLL_LineTo
mov edx, dword [ebp - 0x125c]
mov dword [ebp - 4], edx
mov dword [ebp - 0x125c], esi
cmp dword [0x4e3918], 0
jne 0x433180
cmp dword [0x4e3a1c], 0
jne 0x433180
mov ecx, dword [0x4d3b94]
push ecx
push ebx
call sub.GDI32.DLL_SetTextColor
mov eax, dword [0x4d3bb0]
push eax
push ebx
call sub.GDI32.DLL_SetBkColor
push 0
cmp dword [0x4e3814], 0
je 0x433137
mov edx, 0x4e3714
jmp 0x43313c
mov edx, 0x4e3614
push edx
call fcn.004a36d4
pop ecx
push eax
cmp dword [0x4e3814], 0
je 0x433154
mov eax, 0x4e3714
jmp 0x433159
mov eax, 0x4e3614
push eax
lea edx, [ebp - 0x1264]
push edx
push 6
mov ecx, dword [ebp - 0x1260]
inc ecx
push ecx
mov eax, dword [ebp - 0x1264]
add eax, 3
push eax
push ebx
call sub.GDI32.DLL_ExtTextOutA
jmp 0x4332c8
cmp dword [0x4e3918], 0
jne 0x4331dc
mov edx, dword [0x4d3bc4]
push edx
push ebx
call sub.GDI32.DLL_SetTextColor
mov ecx, dword [0x4d3bcc]
push ecx
push ebx
call sub.GDI32.DLL_SetBkColor
push 0
push 0x4e391c
call fcn.004a36d4
pop ecx
push eax
push 0x4e391c
lea eax, [ebp - 0x1264]
push eax
push 6
mov edx, dword [ebp - 0x1260]
inc edx
push edx
mov ecx, dword [ebp - 0x1264]
add ecx, 3
push ecx
push ebx
call sub.GDI32.DLL_ExtTextOutA
jmp 0x4332c8
push edi
lea edi, [ebp - 0x1244]
lea esi, [ebp - 0x1264]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
mov eax, dword [0x4e3918]
push 0x3e8
push eax
mov edx, dword [ebp - 0x125c]
mov esi, dword [ebp - 0x1264]
sub edx, esi
push edx
call sub.KERNEL32.DLL_MulDiv
add eax, esi
mov esi, eax
mov eax, dword [0x4d3bd0]
mov dword [ebp - 0x123c], esi
push eax
push ebx
call sub.GDI32.DLL_SetTextColor
mov edx, dword [0x4d3b94]
push edx
push ebx
call sub.GDI32.DLL_SetBkColor
push 0
push 0x4e3818
call fcn.004a36d4
pop ecx
push eax
push 0x4e3818
lea ecx, [ebp - 0x1244]
push ecx
push 6
mov eax, dword [ebp - 0x1260]
inc eax
push eax
mov edx, dword [ebp - 0x1264]
add edx, 3
push edx
push ebx
call sub.GDI32.DLL_ExtTextOutA
mov dword [ebp - 0x1244], esi
mov eax, dword [0x4d3b94]
mov ecx, dword [ebp - 0x125c]
mov dword [ebp - 0x123c], ecx
push eax
push ebx
call sub.GDI32.DLL_SetTextColor
mov edx, dword [0x4d3bd0]
push edx
push ebx
call sub.GDI32.DLL_SetBkColor
push 0
push 0x4e3818
call fcn.004a36d4
pop ecx
push eax
push 0x4e3818
lea ecx, [ebp - 0x1244]
push ecx
push 6
mov eax, dword [ebp - 0x1260]
add eax, 2
push eax
mov edx, dword [ebp - 0x1264]
add edx, 3
push edx
push ebx
call sub.GDI32.DLL_ExtTextOutA
lea ecx, [edi + 2]
cmp dword [0x4d3b8c], 0
mov dword [ebp - 0x1264], ecx
jne 0x433390
mov eax, dword [0x4e3604]
mov edi, dword [ebp - 4]
mov edx, dword [eax*4 + 0x4d48f4]
mov eax, dword [0x4d3c54]
mov ecx, edx
push eax
push ebx
lea edx, [ecx + edx*2]
lea edx, [ecx + edx*4]
sub edi, edx
call sub.GDI32.DLL_SelectObject
push 0
lea ecx, [edi + 1]
mov edx, dword [ebp - 0x1258]
dec edx
push edx
push ecx
push ebx
call sub.GDI32.DLL_MoveToEx
mov eax, dword [ebp - 0x1260]
lea edx, [edi + 1]
dec eax
push eax
push edx
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [0x4d3c50]
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
mov eax, dword [ebp - 0x1258]
push eax
push edi
push ebx
call sub.GDI32.DLL_MoveToEx
mov edx, dword [ebp - 0x1260]
add edx, 0xfffffffe
push edx
push edi
push ebx
call sub.GDI32.DLL_LineTo
mov ecx, dword [0x4d3c70]
push ecx
push ebx
call sub.GDI32.DLL_SelectObject
push 0
lea esi, [edi - 1]
mov eax, dword [ebp - 0x1258]
push eax
push esi
push ebx
call sub.GDI32.DLL_MoveToEx
mov eax, dword [ebp - 0x1260]
add eax, 0xfffffffe
push eax
push esi
push ebx
call sub.GDI32.DLL_LineTo
mov dword [ebp - 0x125c], esi
jmp 0x433399
mov edx, dword [ebp - 4]
mov dword [ebp - 0x125c], edx
mov ecx, dword [0x4d3b94]
push ecx
push ebx
call sub.GDI32.DLL_SetTextColor
mov eax, dword [0x4d3bb0]
push eax
push ebx
call sub.GDI32.DLL_SetBkColor
push 0
mov edx, 3
cmp dword [0x4d54b0], 0
jne 0x4333c5
add edx, 0xfffffffd
push edx
cmp dword [0x4d54b0], 0
je 0x4333d6
mov ecx, 0x4b5d8a
jmp 0x4333db
mov ecx, 0x4b59ed
push ecx
lea eax, [ebp - 0x1264]
push eax
push 6
mov edx, dword [ebp - 0x1260]
inc edx
push edx
mov eax, dword [ebp - 0x1264]
add eax, 3
push eax
push ebx
call sub.GDI32.DLL_ExtTextOutA
cmp dword [0x4d3b8c], 0
jne 0x43344d
add edi, 2
mov dword [ebp - 0x1264], edi
mov eax, dword [ebp - 4]
mov dword [ebp - 0x125c], eax
push ebx
call fcn.004322b8
pop ecx
mov esi, eax
push 0
push esi
call fcn.004a36d4
pop ecx
push eax
push esi
lea eax, [ebp - 0x1264]
push eax
push 6
mov edx, dword [ebp - 0x1260]
inc edx
push edx
mov ecx, dword [ebp - 0x1264]
add ecx, 3
push ecx
push ebx
call sub.GDI32.DLL_ExtTextOutA
lea eax, [ebp - 0x12a4]
push eax
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_EndPaint
jmp 0x434247
push 0
push 0
push 0x467
call sym.Cari___.exe__Broadcast
add esp, 0xc
cmp eax, 0x1234
je 0x434247
call fcn.00496c74
test eax, eax
jne 0x434247
mov dword [ebp - 0x12d0], 0x2c
lea ecx, [ebp - 0x12d0]
push ecx
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_GetWindowPlacement
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_IsZoomed
push eax
mov ecx, dword [ebp - 0x12a8]
mov esi, dword [ebp - 0x12b0]
sub ecx, esi
push ecx
mov eax, dword [ebp - 0x12ac]
mov ebx, dword [ebp - 0x12b4]
sub eax, ebx
push eax
push esi
push ebx
push 0x4b5d8e
lea eax, [ebp - 0x121c]
push eax
call fcn.004a6c2c
add esp, 0x1c
push 0x4d53a4
lea edx, [ebp - 0x121c]
push edx
push str.OllyTest
push 0x4b5d9d
call sub.KERNEL32.DLL_WritePrivateProfileStringA
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_DestroyWindow
jmp 0x434247
push 0x104
lea eax, [ebp - 0x121c]
push eax
push 0
mov esi, ebx
push esi
call sub.SHELL32.DLL_DragQueryFileA
mov edi, eax
push esi
call sub.SHELL32.DLL_DragFinish
test edi, edi
je 0x434247
push 1
lea eax, [ebp - 0x121c]
push eax
call sym.Cari___.exe__OpenEXEfile
add esp, 8
jmp 0x434247
mov edx, dword [ebp + 0x14]
mov eax, dword [0x4d3b80]
push edx
push ebx
mov ecx, dword [ebp + 0xc]
push ecx
push eax
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_DefFrameProcA
jmp 0x434249
mov ecx, dword [ebp + 0x14]
shr ecx, 0x10
cmp cx, 1
jne 0x43358f
mov eax, dword [ebp + 0x14]
mov ecx, dword [0x4d3b80]
push eax
push ebx
mov edx, dword [ebp + 0xc]
push edx
push ecx
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_DefFrameProcA
jmp 0x434249
push 0
push ebx
call sub.USER32.DLL_GetMenuItemID
cmp eax, 0x7d1
jne 0x434247
push ebx
call fcn.00477110
pop ecx
jmp 0x434247
mov edx, 1
cmp dword [0x4d5a4c], 0
je 0x4335bd
dec edx
push edx
push 0x83b
push ebx
call sub.USER32.DLL_EnableMenuItem
mov ecx, 1
cmp dword [0x4d5a24], 0
je 0x4335fc
cmp dword [0x4d5a28], 0
je 0x4335fc
cmp dword [0x4d5a2c], 0
je 0x4335fc
cmp dword [0x4d5a30], 0
je 0x4335fc
cmp dword [0x4d5a34], 0
je 0x4335fc
dec ecx
push ecx
push 0x838
push ebx
call sub.USER32.DLL_EnableMenuItem
xor eax, eax
cmp dword [0x4d5a5c], 1
je 0x433614
inc eax
push eax
push 0x899
push ebx
call sub.USER32.DLL_EnableMenuItem
xor edx, edx
cmp dword [0x4d5a5c], 3
je 0x43362c
inc edx
push edx
push 0x89a
push ebx
call sub.USER32.DLL_EnableMenuItem
xor ecx, ecx
cmp byte [0x4d5b80], 0
jne 0x433644
inc ecx
push ecx
push 0x89b
push ebx
call sub.USER32.DLL_EnableMenuItem
mov eax, 1
cmp dword [0x4d5a5c], 0
je 0x43365f
dec eax
push eax
push 0x89c
push ebx
call sub.USER32.DLL_EnableMenuItem
xor edx, edx
cmp dword [0x4d5a5c], 1
je 0x433677
inc edx
push edx
push 0x89d
push ebx
call sub.USER32.DLL_EnableMenuItem
xor ecx, ecx
cmp dword [0x4d5a5c], 1
je 0x43368f
inc ecx
push ecx
push 0x89e
push ebx
call sub.USER32.DLL_EnableMenuItem
xor eax, eax
cmp dword [0x4d5a5c], 1
je 0x4336a7
inc eax
push eax
push 0x89f
push ebx
call sub.USER32.DLL_EnableMenuItem
xor edx, edx
cmp dword [0x4d5a5c], 1
je 0x4336bf
inc edx
push edx
push 0x8a0
push ebx
call sub.USER32.DLL_EnableMenuItem
xor ecx, ecx
cmp dword [0x4d5a5c], 1
je 0x4336d7
inc ecx
push ecx
push 0x8a1
push ebx
call sub.USER32.DLL_EnableMenuItem
xor eax, eax
cmp dword [0x4d5a5c], 1
je 0x4336ef
inc eax
push eax
push 0x8a2
push ebx
call sub.USER32.DLL_EnableMenuItem
xor edx, edx
mov eax, dword [0x4d5a5c]
test eax, eax
je 0x43370b
cmp eax, 4
jne 0x43370c
inc edx
push edx
push 0x8a3
push ebx
call sub.USER32.DLL_EnableMenuItem
xor edx, edx
cmp dword [0x4d5a5c], 1
je 0x433724
inc edx
push edx
push 0x8a4
push ebx
call sub.USER32.DLL_EnableMenuItem
xor ecx, ecx
cmp dword [0x4d5a5c], 1
je 0x43373c
inc ecx
push ecx
push 0x8a5
push ebx
call sub.USER32.DLL_EnableMenuItem
xor eax, eax
cmp dword [0x4d5a68], 0
jne 0x433754
inc eax
push eax
push 0x8a6
push ebx
call sub.USER32.DLL_EnableMenuItem
xor esi, esi
call sym.Cari___.exe__Runtracesize
test eax, eax
jg 0x43376c
inc esi
push esi
push 0x8a7
push ebx
call sub.USER32.DLL_EnableMenuItem
xor eax, eax
cmp byte [0x4d5a7c], 0
jne 0x433784
inc eax
push eax
push 0x8ab
push ebx
call sub.USER32.DLL_EnableMenuItem
xor edx, edx
cmp byte [0x4d5a7c], 0
je 0x4337a4
cmp dword [0x4d375c], 0
jne 0x4337a5
inc edx
push edx
push 0x8a8
push ebx
call sub.USER32.DLL_EnableMenuItem
xor ecx, ecx
cmp dword [0x4d6ea0], 0
je 0x4337ce
cmp dword [0x4d5a5c], 4
je 0x4337ce
cmp dword [0x4d6ea8], 0
je 0x4337cf
inc ecx
push ecx
push 0x8aa
push ebx
call sub.USER32.DLL_EnableMenuItem
mov eax, 8
cmp dword [0x4d54b0], 0
jne 0x4337ec
add eax, 0xfffffff8
push eax
push 0x961
push ebx
call sub.USER32.DLL_CheckMenuItem
mov edx, 1
cmp byte [0x4dcb44], 0
je 0x433807
dec edx
push edx
push 0x9c8
push ebx
call sub.USER32.DLL_EnableMenuItem
jmp 0x434247
mov ecx, ebx
shr ecx, 0x10
test cx, cx
jne 0x434212
mov eax, ebx
and ax, 0xffff
movzx edx, ax
cmp edx, 0x89f
jg 0x433945
je 0x433d5b
cmp edx, 0x840
jg 0x4338db
je 0x433b80
cmp edx, 0x839
jg 0x4338ad
je 0x433add
cmp edx, 0x835
jg 0x43388e
je 0x433abf
sub edx, 0x7d1
je 0x433a37
dec edx
je 0x433a98
dec edx
je 0x433aa2
jmp case.default.0x433962
sub edx, 0x836
je 0x433ac9
dec edx
je 0x433afb
dec edx
je 0x433b0f
jmp case.default.0x433962
add edx, 0xfffff7c6
cmp edx, 5
ja case.default.0x433962
jmp dword [edx*4 + 0x4338c3]
cmp edx, 0x847
jg 0x433917
je 0x433c4c
add edx, 0xfffff7bf
cmp edx, 5
ja case.default.0x433962
jmp dword [edx*4 + 0x4338ff]
add edx, 0xfffff767
cmp edx, 5
ja case.default.0x433962
jmp dword [edx*4 + 0x43392d]
cmp edx, 0x8ad
jg 0x43399d
je 0x434046
add edx, 0xfffff760
cmp edx, 0xc
ja case.default.0x433962
jmp dword [edx*4 + 0x433969]
cmp edx, 0x963
jg 0x4339f0
je 0x4340f1
cmp edx, 0x900
jg 0x4339d8
je 0x434088
sub edx, 0x8fd
je 0x434064
dec edx
je 0x434071
dec edx
je 0x43407e
jmp case.default.0x433962
sub edx, 0x961
je 0x434092
dec edx
je 0x4340d7
jmp case.default.0x433962
cmp edx, 0x9c6
jg 0x433a1f
je 0x434148
sub edx, 0x964
je 0x43410b
dec edx
je 0x434124
sub edx, 0x60
je 0x43413e
jmp case.default.0x433962
sub edx, 0x9c7
je 0x434162
dec edx
je 0x434180
jmp case.default.0x433962
xor eax, eax
or ecx, 0xffffffff
mov edi, 0x4d5b80
lea esi, [ebp - 0x121c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x121c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 1
push str..exe.dll
push eax
push 0x4b5a01
call sym.Cari___.exe__Browsefilename
add esp, 0x10
test eax, eax
je 0x434212
push 0
lea edx, [ebp - 0x121c]
push edx
call sym.Cari___.exe__OpenEXEfile
add esp, 8
jmp 0x434212
call fcn.0047868c
jmp 0x434212
push 1
call fcn.004758a4
pop ecx
dec eax
je 0x434212
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_DestroyWindow
jmp 0x434212
call sym.Cari___.exe__Createlistwindow
jmp 0x434212
call fcn.0045f36c
call sym.Cari___.exe__Listmemory
call fcn.0046044c
jmp 0x434212
call sym.Cari___.exe__Createthreadwindow
jmp 0x434212
call sym.Cari___.exe__Createwinwindow
jmp 0x434212
call fcn.0049e038
jmp 0x434212
call fcn.0045f36c
call sym.Cari___.exe__Listmemory
call fcn.00462bf0
jmp 0x434212
call fcn.0045f36c
call sym.Cari___.exe__Listmemory
call fcn.00463474
jmp 0x434212
mov eax, dword [0x4d571c]
push eax
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0xc], eax
push 1
push 0
push 0
push 0
cmp dword [ebp - 0xc], 0
jne 0x433b48
mov edx, dword [0x4d5a74]
jmp 0x433b4d
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
push edx
call sym.Cari___.exe__Setcpu
add esp, 0x14
jmp 0x434212
call fcn.004a1f90
jmp 0x434212
call sym.Cari___.exe__Createpatchwindow
jmp 0x434212
call sym.Cari___.exe__Getcputhreadid
push eax
call fcn.0049ad3c
pop ecx
jmp 0x434212
call fcn.0041aa34
jmp 0x434212
call sym.Cari___.exe__Createwatchwindow
jmp 0x434212
push 0
call fcn.00472eac
pop ecx
jmp 0x434212
call sym.Cari___.exe__Creatertracewindow
jmp 0x434212
push 1
push 0
push 0
call fcn.004951a8
add esp, 0xc
jmp 0x434212
call fcn.00495ea8
jmp 0x434212
push 0
push str..exe_.dll.obj_.lib
push 0x4d55f8
push str.View_file
call sym.Cari___.exe__Browsefilename
add esp, 0x10
test eax, eax
je 0x434212
mov dword [ebp - 0x1234], 0x1101
xor eax, eax
lea edx, [ebp - 0x1234]
mov dword [ebp - 0x1228], eax
mov dword [ebp - 0x122c], eax
mov dword [ebp - 0x1230], eax
push 0x4d55f8
push edx
push 0x472
call sym.Cari___.exe__Broadcast
add esp, 0xc
cmp eax, 0x1234
je 0x434212
push 0
mov ecx, dword [ebp - 0x1234]
push ecx
push 0
push 0
push 0
push 0x4d55f8
call sym.Cari___.exe__Createdumpwindow
add esp, 0x18
jmp 0x434212
push 0
push str..c_.cpp_.h_.hpp_.asm_.pas.c_.cpp.h_.hpp.asm.pas.txt.bak
push 0x4e2ced
push str.View_file
call sym.Cari___.exe__Browsefilename
add esp, 0x10
test eax, eax
je 0x434212
push 0x4e2ced
call fcn.00494724
pop ecx
jmp 0x434212
push 0
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 1
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
push 0
call sym.Cari___.exe__Animate
pop ecx
cmp dword [0x4d5a5c], 3
jne 0x434212
push 1
call sym.Cari___.exe__Suspendprocess
pop ecx
cmp dword [0x4de924], 0
je 0x433cc7
call fcn.00497bb0
cmp dword [0x4e2f10], 0
je 0x434212
call fcn.0049cd88
jmp 0x434212
push 0xffffffffffffffff
push 0x4d5b80
call sym.Cari___.exe__OpenEXEfile
add esp, 8
jmp 0x434212
push 1
call fcn.004758a4
pop ecx
test eax, eax
jne 0x434212
call fcn.0047540c
push 0
push 0
push 0x474
call sym.Cari___.exe__Broadcast
add esp, 0xc
jmp 0x434212
push 0
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 3
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
push 0
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 2
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
push 1
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 3
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
push 2
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 2
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
push 3
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 2
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
push 5
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 2
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
call sym.Cari___.exe__Getcputhreadid
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x433ded
mov eax, dword [0x4d5a74]
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
push edx
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x434212
mov ecx, dword [ebp - 0xc]
add ecx, 0x2ec
push ecx
call sym.Cari___.exe__Startruntrace
pop ecx
jmp 0x434212
call sym.Cari___.exe__Runtracesize
test eax, eax
jne 0x433e5b
call sym.Cari___.exe__Getcputhreadid
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x433e38
mov eax, dword [0x4d5a74]
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
push edx
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x433e5b
mov ecx, dword [ebp - 0xc]
add ecx, 0x2ec
push ecx
call sym.Cari___.exe__Startruntrace
pop ecx
call sym.Cari___.exe__Runtracesize
test eax, eax
jle 0x434212
push 6
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 3
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
call sym.Cari___.exe__Runtracesize
test eax, eax
jne 0x433ec9
call sym.Cari___.exe__Getcputhreadid
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x433ea6
mov eax, dword [0x4d5a74]
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
push edx
call sym.Cari___.exe__Findthread
pop ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x433ec9
mov ecx, dword [ebp - 0xc]
add ecx, 0x2ec
push ecx
call sym.Cari___.exe__Startruntrace
pop ecx
call sym.Cari___.exe__Runtracesize
test eax, eax
jle 0x434212
push 7
call sym.Cari___.exe__Animate
pop ecx
push 1
push 0
push 2
push 0
push 0
call sym.Cari___.exe__Go
add esp, 0x14
jmp 0x434212
mov eax, dword [0x4d5398]
push eax
call fcn.00444cb4
pop ecx
jmp 0x434212
cmp dword [0x4d57cc], 6
je 0x433f18
cmp dword [0x4d57cc], 7
jne 0x433f20
push 0
call sym.Cari___.exe__Animate
pop ecx
call sym.Cari___.exe__Deleteruntrace
push 0
push 0
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_InvalidateRect
jmp 0x434212
push 0
call sym.Cari___.exe__Hardbreakpoints
pop ecx
jmp 0x434212
mov byte [ebp - 0x121c], 0
call sym.Cari___.exe__Getcputhreadid
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
push ecx
push 0x4e3b24
push 0x4e3b20
lea eax, [ebp - 0x121c]
push eax
call fcn.00440b5c
add esp, 0x10
mov edi, eax
test edi, edi
jne 0x434212
cmp byte [ebp - 0x121c], 0
je 0x434212
mov eax, dword [ebp - 8]
mov edx, dword [0x4e3b24]
push eax
push edx
mov ecx, dword [0x4e3b20]
lea eax, [ebp - 0x121c]
push ecx
push eax
push 0
call fcn.0047aaa0
add esp, 0x14
jmp 0x434212
push 0
call fcn.004a1558
pop ecx
jmp 0x434212
xor eax, eax
or ecx, 0xffffffff
mov edi, 0x4d5d88
lea esi, [ebp - 0x121c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00441858
lea eax, [ebp - 0x121c]
mov edx, 0x4d5d88
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x434014
test cl, cl
je 0x434212
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x434014
add eax, 2
add edx, 2
test cl, cl
jne 0x433ff4
je 0x434212
push 0x30
push 0x4b5e95
push 0x4b5e15
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_MessageBoxA
jmp 0x434212
mov edx, dword [0x4d5398]
push edx
call fcn.0046ba50
pop ecx
jmp 0x434212
push 0x4e2990
push 0x4b5eb4
mov ecx, dword [0x4d3b7c]
push ecx
call fcn.00454c3c
add esp, 0xc
jmp 0x434212
push 1
call fcn.0046f5c0
pop ecx
jmp 0x434212
push 0
call fcn.0046f5c0
pop ecx
jmp 0x434212
call fcn.00442f14
jmp 0x434212
call fcn.00444fe4
jmp 0x434212
cmp dword [0x4d54b0], 0
push 3
sete al
and eax, 1
push 0
mov dword [0x4d54b0], eax
or edx, 0xffffffff
push 0
push 0
cmp dword [0x4d54b0], 0
push 0
jne 0x4340bb
dec edx
push edx
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_SetWindowPos
push 0
push 0
mov eax, dword [ebp + 8]
push eax
call sub.USER32.DLL_InvalidateRect
jmp 0x434212
push 0
push 2
push 0x227
mov edx, dword [0x4d3b80]
push edx
call sub.USER32.DLL_SendMessageA
jmp 0x434212
push 0
push 3
push 0x226
mov ecx, dword [0x4d3b80]
push ecx
call sub.USER32.DLL_SendMessageA
jmp 0x434212
push 0
push 2
push 0x226
mov eax, dword [0x4d3b80]
push eax
call sub.USER32.DLL_SendMessageA
jmp 0x434212
push 0
push 0
push 0x228
mov edx, dword [0x4d3b80]
push edx
call sub.USER32.DLL_SendMessageA
jmp 0x434212
call fcn.00440d18
jmp 0x434212
push 0
push 3
push str.Cari___.hlp
mov ecx, dword [0x4d3b7c]
push ecx
call sub.USER32.DLL_WinHelpA
jmp 0x434212
push 0
push 0x4b5a44
push 0x4dcb44
push str.Select_API_help_file
call sym.Cari___.exe__Browsefilename
add esp, 0x10
jmp 0x434212
push 0
push 3
push 0x4dcb44
mov eax, dword [0x4d3b7c]
push eax
call sub.USER32.DLL_WinHelpA
jmp 0x434212
mov edx, ebx
and dx, 0xffff
cmp dx, 0x7da
jb 0x4341ed
mov ecx, ebx
and cx, 0xffff
cmp cx, 0x7e0
jae 0x4341ed
push 0x4d5d88
lea eax, [ebp - 0x121c]
push eax
mov edx, ebx
and dx, 0xffff
movzx ecx, dx
push ecx
call fcn.00477084
add esp, 0xc
cmp byte [ebp - 0x121c], 0
je 0x434212
push 0xffffffffffffffff
lea eax, [ebp - 0x121c]
push eax
call sym.Cari___.exe__OpenEXEfile
add esp, 8
jmp 0x434212
mov edx, ebx
and dx, 0xffff
cmp dx, 0xe000
jb 0x434212
push 0
mov ecx, ebx
and cx, 0xffff
movzx eax, cx
push eax
push 0
call fcn.004965e4
add esp, 0xc
mov edx, dword [ebp + 0x14]
mov eax, dword [0x4d3b80]
push edx
push ebx
mov ecx, dword [ebp + 0xc]
push ecx
push eax
mov edx, dword [ebp + 8]
push edx
call sub.USER32.DLL_DefFrameProcA
jmp 0x434249
mov ecx, dword [ebp + 0x14]
mov edx, dword [0x4d3b80]
push ecx
push ebx
mov eax, dword [ebp + 0xc]
push eax
push edx
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.DLL_DefFrameProcA
jmp 0x434249
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10