Function at 0x100625d0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
push 0x3d
mov eax, dword [ebp + 8]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x100625f8
mov ecx, dword [ebp - 0xc]
mov byte [ecx], 0
jmp 0x100625fd
jmp 0x10066430
mov dword [ebp - 0x16c], 0
mov edx, dword [ebp + 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 4], eax
push str.pipe
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062646
push 0x104
mov edx, dword [ebp - 4]
push edx
push 0x104f04d8
call fcn.10259620
add esp, 0xc
jmp 0x10066430
push str.logpipe
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062676
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f05dc
call fcn.10259620
add esp, 0xc
jmp 0x10066430
push str.shutdown_mutex
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100626a6
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0x104f06e0
call fcn.10259620
add esp, 0xc
jmp 0x10066430
push str.first_process
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100626f5
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100626db
mov dword [ebp - 0xa0], 1
jmp 0x100626e5
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [0x104f07e4], eax
jmp 0x10066430
push str.startup_time
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062724
push 0xa
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f07e8], eax
jmp 0x10066430
push str.force_sleepskip
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062774
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062759
mov dword [ebp - 0xa4], 1
jmp 0x10062763
mov dword [ebp - 0xa4], 0
mov edx, dword [ebp - 0xa4]
mov dword [0x104f07ec], edx
jmp 0x10066430
push str.hashes_path
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100627a4
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f07f0
call fcn.10259620
add esp, 0xc
jmp 0x10066430
push str.diffing_enable
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100627f4
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x100627d9
mov dword [ebp - 0xa8], 1
jmp 0x100627e3
mov dword [ebp - 0xa8], 0
mov ecx, dword [ebp - 0xa8]
mov dword [0x104f08f4], ecx
jmp 0x10066430
push str.track
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062844
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10062829
mov dword [ebp - 0xac], 1
jmp 0x10062833
mov dword [ebp - 0xac], 0
mov ecx, dword [ebp - 0xac]
mov dword [0x104f08f8], ecx
jmp 0x10066430
push str.mode
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006286f
mov eax, dword [ebp - 4]
push eax
call fcn.10062460
add esp, 4
mov dword [0x104f08fc], eax
jmp 0x10066430
push str.disguise_memory
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100628be
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100628a4
mov dword [ebp - 0xb0], 1
jmp 0x100628ae
mov dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [0x104f0900], eax
jmp 0x10066430
push str.disguise_cpu
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006290d
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100628f3
mov dword [ebp - 0xb4], 1
jmp 0x100628fd
mov dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [0x104f0904], eax
jmp 0x10066430
push str.disguise_sid
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006295c
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062942
mov dword [ebp - 0xb8], 1
jmp 0x1006294c
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [0x104f0908], eax
jmp 0x10066430
push str.disguise_drivername
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100629ab
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062991
mov dword [ebp - 0xbc], 1
jmp 0x1006299b
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [0x104f090c], eax
jmp 0x10066430
push str.disguise_hostname
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100629fa
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100629e0
mov dword [ebp - 0xc0], 1
jmp 0x100629ea
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [0x104f0910], eax
jmp 0x10066430
push str.pipe_pid
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062a49
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062a2f
mov dword [ebp - 0xc4], 1
jmp 0x10062a39
mov dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [0x104f0914], eax
jmp 0x10066430
push str.trigger
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062a79
push 0x114
push 0x104f0a20
mov edx, dword [ebp - 4]
push edx
call fcn.1007cbc0
add esp, 0xc
jmp 0x10066430
push str.set_language
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062aa6
push 0x20
push 0x104f0c48
mov ecx, dword [ebp - 4]
push ecx
call fcn.1007cbc0
add esp, 0xc
jmp 0x10066430
push str.hide_keyboard
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062ad6
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0x104f0918
call fcn.10259620
add esp, 0xc
jmp 0x10066430
push str.hide_python
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062b25
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062b0b
mov dword [ebp - 0xc8], 1
jmp 0x10062b15
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [0x104f0a1c], eax
jmp 0x10066430
push str.trap_dirname_count
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062b62
mov edx, 1
imul eax, edx, 0
add eax, dword [ebp - 4]
push eax
call fcn.1025b54f
add esp, 4
mov dword [0x104f0c88], eax
mov dword [0x104f0c90], 0
jmp 0x10066430
cmp dword [0x104f0c88], 0
jle 0x10062bb7
push str.ransomware_trap_dirname
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062bb7
cmp dword [0x104f0c90], 0x32
jge 0x10062bb2
push 0x104
imul edx, dword [0x104f0c90], 0x208
add edx, dword [0x104f0c8c]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.1007cbc0
add esp, 0xc
lock inc dword [0x104f0c90]
jmp 0x10066430
push str.results
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062c1a
push 0x103
mov edx, dword [ebp - 4]
push edx
push 0x104f1fc4
call fcn.10259620
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10062bf4
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x104
jae 0x10062c15
mov ecx, dword [ebp - 0x10]
movsx dx, byte [ecx + 0x104f1fc4]
mov eax, dword [ebp - 0x10]
mov word [eax*2 + 0x104f20c8], dx
jmp 0x10062beb
jmp 0x10066430
push str.pythonpath
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062c8f
push 0x103
mov edx, dword [ebp - 4]
push edx
push 0x104f25dc
call fcn.10259620
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10062c57
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x104
jae 0x10062c78
mov ecx, dword [ebp - 0x10]
movsx dx, byte [ecx + 0x104f25dc]
mov eax, dword [ebp - 0x10]
mov word [eax*2 + 0x104f26e0], dx
jmp 0x10062c4e
push 0x104f26e0
push str.Python_path_set_to__ws._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.referrer
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062ccb
mov edx, dword [ebp - 4]
push edx
call fcn.10073c70
add esp, 4
mov dword [0x104f28f0], eax
mov eax, dword [ebp - 4]
push eax
call fcn.10062410
add esp, 4
mov dword [0x104f28f4], eax
jmp 0x10066430
push str.analyzer
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062d6a
push 0x103
mov edx, dword [ebp - 4]
push edx
push 0x104f22d0
call fcn.10259620
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10062d0c
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x104
jae 0x10062d2d
mov ecx, dword [ebp - 0x10]
movsx dx, byte [ecx + 0x104f22d0]
mov eax, dword [ebp - 0x10]
mov word [eax*2 + 0x104f23d4], dx
jmp 0x10062d03
push 0x104f23d4
push 0x104f28f8
call fcn.1025952d
add esp, 8
push 0x104f28f8
call fcn.10251edf
add esp, 4
cmp eax, 0xff
jae 0x10062d65
push str.dll_
push 0x104f28f8
call fcn.1025c153
add esp, 8
jmp 0x10066430
push str.debug
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062d95
mov edx, dword [ebp - 4]
push edx
call fcn.1025b54f
add esp, 4
mov dword [0x104f2b00], eax
jmp 0x10066430
push str.disable_hook_content
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062dc0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025b54f
add esp, 4
mov dword [0x104f2b04], eax
jmp 0x10066430
push str.serial
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062def
push 0x10
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2b08], eax
jmp 0x10066430
push str.sysvol_ctimelow
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062e1e
push 0x10
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2b14], eax
jmp 0x10066430
push str.sysvol_ctimehigh
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062e4d
push 0x10
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2b18], eax
jmp 0x10066430
push str.sys32_ctimelow
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062e7c
push 0x10
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2b0c], eax
jmp 0x10066430
push str.sys32_ctimehigh
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062eab
push 0x10
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2b10], eax
jmp 0x10066430
push str.full_logs
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062efb
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062ee0
mov dword [ebp - 0xcc], 1
jmp 0x10062eea
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov dword [0x104f2b1c], edx
jmp 0x10066430
push str.force_flush
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062f26
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025b54f
add esp, 4
mov dword [0x104f2b20], eax
jmp 0x10066430
push str.terminate_event
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062f56
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0x104f2b24
call fcn.10259620
add esp, 0xc
jmp 0x10066430
push str.no_stealth
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062fa5
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062f8b
mov dword [ebp - 0xd0], 1
jmp 0x10062f95
mov dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [0x104f2c28], eax
jmp 0x10066430
push str.csharp
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062ff4
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062fda
mov dword [ebp - 0xd4], 1
jmp 0x10062fe4
mov dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [0x104f2c30], eax
jmp 0x10066430
push str.log_exceptions
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10063044
mov edx, dword [ebp - 4]
push edx
call fcn.1025b54f
add esp, 4
mov dword [0x104f16a8], eax
cmp dword [0x104f16a8], 0
je 0x10063032
push str.Exception_logging_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x1006303f
push str.Exception_logging_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.log_breakpoints
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100630b9
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10063079
mov dword [ebp - 0xd8], 1
jmp 0x10063083
mov dword [ebp - 0xd8], 0
mov edx, dword [ebp - 0xd8]
mov dword [0x104f16d8], edx
cmp dword [0x104f16d8], 0
je 0x100630a7
push str.Breakpoint_logging_to_behavior_log_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x100630b4
push str.Breakpoint_logging_to_behavior_log_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.dropped_limit
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100630fc
push 0xa
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f0c9c], eax
mov edx, dword [0x104f0c9c]
push edx
push str.Dropped_file_limit_set_to__d._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.ntdll_protect
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10063150
push 0xa
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f0c98], eax
cmp dword [0x104f0c98], 0
je 0x1006313e
push str.Config:_ntdll_write_protection_enabled.
call fcn.1003cfe0
add esp, 4
jmp 0x1006314b
push str.Config:_ntdll_write_protection_disabled.
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.standalone
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100631a0
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10063185
mov dword [ebp - 0xdc], 1
jmp 0x1006318f
mov dword [ebp - 0xdc], 0
mov ecx, dword [ebp - 0xdc]
mov dword [0x104f16e0], ecx
jmp 0x10066430
push str.exclude_apis
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10063225
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10063220
cmp dword [ebp - 0x58], 0x80
jae 0x10063220
push 0x3a
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x100631ee
mov edx, dword [ebp - 0x5c]
mov byte [edx], 0
mov eax, dword [ebp - 0xc]
push eax
call fcn.10062410
add esp, 4
mov ecx, dword [ebp - 0x58]
mov dword [ecx*4 + 0x104f0ca4], eax
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x5c], 0
jne 0x10063215
jmp 0x10063220
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x100631c2
jmp 0x10066430
push str.exclude_dlls
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100632a1
mov dword [ebp - 0x60], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x1006329c
cmp dword [ebp - 0x60], 0x80
jae 0x1006329c
push 0x3a
mov eax, dword [ebp - 0xc]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x10063273
mov ecx, dword [ebp - 0x64]
mov byte [ecx], 0
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0xc]
mov dword [edx*4 + 0x104f0ea4], eax
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x64], 0
jne 0x10063291
jmp 0x1006329c
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10063247
jmp 0x10066430
push str.base_on_api
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006333b
mov dword [ebp - 0x68], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x10063336
cmp dword [ebp - 0x68], 0x80
jae 0x10063336
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x100632f3
mov eax, dword [ebp - 0x6c]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10062410
add esp, 4
mov edx, dword [ebp - 0x68]
mov dword [edx*4 + 0x104f10a4], eax
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_base_on_API_list._n
call fcn.1003cfe0
add esp, 8
cmp dword [ebp - 0x6c], 0
jne 0x1006332b
jmp 0x10063336
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x100632c7
jmp 0x10066430
push str.dump_on_api
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100633d5
mov dword [ebp - 0x70], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x100633d0
cmp dword [ebp - 0x70], 0x80
jae 0x100633d0
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x1006338d
mov eax, dword [ebp - 0x74]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10062410
add esp, 4
mov edx, dword [ebp - 0x70]
mov dword [edx*4 + 0x104f12a4], eax
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_dump_on_API_list._n
call fcn.1003cfe0
add esp, 8
cmp dword [ebp - 0x74], 0
jne 0x100633c5
jmp 0x100633d0
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10063361
jmp 0x10066430
push str.coverage_modules
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006346f
mov dword [ebp - 0x78], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x1006346a
cmp dword [ebp - 0x78], 0x80
jae 0x1006346a
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x10063427
mov eax, dword [ebp - 0x7c]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10073c70
add esp, 4
mov edx, dword [ebp - 0x78]
mov dword [edx*4 + 0x104f14a4], eax
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_coverage_modules_list._n
call fcn.1003cfe0
add esp, 8
cmp dword [ebp - 0x7c], 0
jne 0x1006345f
jmp 0x1006346a
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x100633fb
jmp 0x10066430
push str.dump_on_api_type
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006349e
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f16a4], eax
jmp 0x10066430
push str.file_offsets
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10063504
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x100634d3
mov dword [ebp - 0xe0], 1
jmp 0x100634dd
mov dword [ebp - 0xe0], 0
mov ecx, dword [ebp - 0xe0]
mov dword [0x104f1db0], ecx
cmp dword [0x104f1db0], 0
je 0x100634ff
push str.Breakpoints_interpreted_as_file_offsets._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push 0x103e7744
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10063859
push 0x3a
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10063683
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x10063683
mov dword [0x104f183c], 0
mov eax, dword [ebp - 0x14]
mov byte [eax], 0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call fcn.10062410
add esp, 4
mov dword [0x104f172c], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.10062410
add esp, 4
mov dword [0x104f1730], eax
cmp dword [ebp - 0x80], 0
je 0x100635af
mov edx, dword [ebp - 0x14]
add edx, 2
push edx
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f183c], eax
jmp 0x100635c3
mov ecx, dword [0x104f1730]
push ecx
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.1003cfe0
add esp, 8
cmp dword [0x104f183c], 0
je 0x10063600
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov edx, dword [0x104f172c]
push edx
mov eax, dword [0x104f1730]
push eax
mov ecx, dword [0x104f183c]
push ecx
push str.Config:_bp0_set_to_0x_p___s::_s_._n
call fcn.1003cfe0
add esp, 0x10
jmp 0x1006367e
cmp dword [ebp - 0x80], 0
je 0x1006367e
push 0
push 0
mov edx, dword [ebp - 0x14]
add edx, 2
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x10063663
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0xe4]
mov dword [0x104f183c], eax
mov dword [0x104f16f4], 1
mov ecx, dword [0x104f172c]
push ecx
mov edx, dword [0x104f1730]
push edx
mov eax, dword [0x104f183c]
push eax
push 0x103e76cc
call fcn.1003cfe0
add esp, 0x10
jmp 0x1006367e
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
mov edx, dword [0x104f1730]
push edx
push str.Config:_Failed_to_get_address_for_function__s::_s_n
call fcn.1003cfe0
add esp, 0xc
jmp 0x10063854
push 4
push 0x103e7690
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100636b3
push str.Config:_bp0_set_to_zero._n
call fcn.1003cfe0
add esp, 4
mov byte [0x104f184c], 1
jmp 0x10063854
push 2
push 0x103e7670
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x100636e1
push 0xa
push str.entrypoint
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006370d
mov eax, dword [0x104f183c]
push eax
push str.Config:_bp0_set_to_entry_point._n
call fcn.1003cfe0
add esp, 8
mov dword [0x1065f904], 1
mov dword [0x104f16f4], 1
jmp 0x10063854
mov dword [ebp - 0x30], 0
push 0x2b
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x1006375a
push 0
push 0
mov edx, dword [ebp - 0x14]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
push str.Config:_Delta_0x_x._n
call fcn.1003cfe0
add esp, 8
mov ecx, dword [ebp - 0x14]
mov byte [ecx], 0
jmp 0x100637a0
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x100637a0
push 0
push 0
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x103e7610
call fcn.1003cfe0
add esp, 8
mov edx, dword [ebp - 0x14]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x104f183c]
je 0x10063854
mov edx, dword [ebp - 0x44]
cmp edx, dword [0x104f1840]
je 0x10063854
mov eax, dword [ebp - 0x44]
cmp eax, dword [0x104f1844]
je 0x10063854
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x104f1848]
je 0x10063854
mov edx, dword [ebp - 0x44]
mov dword [0x104f183c], edx
mov dword [0x104f16f4], 1
cmp dword [0x104f183c], 0xffffffff
jne 0x10063818
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f183c], eax
cmp dword [ebp - 0x30], 0
je 0x10063841
mov ecx, dword [0x104f183c]
push ecx
push str.Config:_bp0_was_0x_p._n
call fcn.1003cfe0
add esp, 8
mov edx, dword [0x104f183c]
add edx, dword [ebp - 0x30]
mov dword [0x104f183c], edx
mov eax, dword [0x104f183c]
push eax
push str.Config:_bp0_set_to_0x_p._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e75d8
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10063ba6
push 0x3a
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x100639d1
mov eax, dword [ebp - 0x18]
movsx ecx, byte [eax + 1]
cmp ecx, 0x3a
jne 0x100639d1
mov dword [0x104f1840], 0
mov edx, dword [ebp - 0x18]
mov byte [edx], 0
mov eax, dword [ebp - 0x18]
mov byte [eax + 1], 0
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xe8], eax
mov edx, dword [ebp - 0x18]
add edx, 2
push edx
call fcn.10062410
add esp, 4
mov dword [0x104f172c], eax
mov eax, dword [ebp - 4]
push eax
call fcn.10062410
add esp, 4
mov dword [0x104f1730], eax
cmp dword [ebp - 0xe8], 0
je 0x1006390d
mov ecx, dword [ebp - 0x18]
add ecx, 2
push ecx
mov edx, dword [ebp - 0xe8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1840], eax
jmp 0x10063920
mov eax, dword [0x104f1730]
push eax
push 0x103e75a8
call fcn.1003cfe0
add esp, 8
cmp dword [0x104f1840], 0
je 0x1006395d
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov ecx, dword [0x104f172c]
push ecx
mov edx, dword [0x104f1730]
push edx
mov eax, dword [0x104f1840]
push eax
push str.Config:_bp1_set_to_0x_p___s::_s_._n
call fcn.1003cfe0
add esp, 0x10
jmp 0x100639cc
push 0
push 0
mov ecx, dword [ebp - 0x18]
add ecx, 2
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1840], eax
cmp dword [0x104f1840], 0
je 0x100639b2
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov edx, dword [0x104f172c]
push edx
mov eax, dword [0x104f1730]
push eax
mov ecx, dword [0x104f1840]
push ecx
push 0x103e7560
call fcn.1003cfe0
add esp, 0x10
jmp 0x100639cc
mov edx, dword [0x104f172c]
push edx
mov eax, dword [0x104f1730]
push eax
push str.Config:_Failed_to_get_address_for_function__s::_s._n
call fcn.1003cfe0
add esp, 0xc
jmp 0x10063ba1
push 4
push 0x103e7524
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063a01
push str.Config:_bp1_set_to_zero._n
call fcn.1003cfe0
add esp, 4
mov byte [0x104f184d], 1
jmp 0x10063ba1
push 2
push 0x103e7504
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x10063a2f
push 0xa
push 0x103e74f8
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063a5c
mov ecx, dword [0x104f1840]
push ecx
push str.Config:_bp1_set_to_entry_point._n
call fcn.1003cfe0
add esp, 8
mov dword [0x1065f904], 1
mov dword [0x104f16f4], 1
jmp 0x10063ba1
mov dword [ebp - 0x34], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10063aa9
push 0
push 0
mov eax, dword [ebp - 0x18]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
push 0x103e74bc
call fcn.1003cfe0
add esp, 8
mov edx, dword [ebp - 0x18]
mov byte [edx], 0
jmp 0x10063aef
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10063aef
push 0
push 0
mov ecx, dword [ebp - 0x18]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x34]
push edx
push 0x103e74a4
call fcn.1003cfe0
add esp, 8
mov eax, dword [ebp - 0x18]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x48]
cmp edx, dword [0x104f183c]
je 0x10063ba1
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x104f1840]
je 0x10063ba1
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [0x104f1844]
je 0x10063ba1
mov edx, dword [ebp - 0x48]
cmp edx, dword [0x104f1848]
je 0x10063ba1
mov eax, dword [ebp - 0x48]
mov dword [0x104f1840], eax
mov dword [0x104f16f4], 1
cmp dword [0x104f1840], 0xffffffff
jne 0x10063b66
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1840], eax
cmp dword [ebp - 0x34], 0
je 0x10063b8d
mov edx, dword [0x104f1840]
push edx
push str.Config:_bp1_was_0x_p._n
call fcn.1003cfe0
add esp, 8
mov eax, dword [0x104f1840]
add eax, dword [ebp - 0x34]
mov dword [0x104f1840], eax
mov ecx, dword [0x104f1840]
push ecx
push str.Config:_bp1_set_to_0x_p._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e746c
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10063ef6
push 0x3a
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10063d1f
mov ecx, dword [ebp - 0x1c]
movsx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x10063d1f
mov dword [0x104f1844], 0
mov eax, dword [ebp - 0x1c]
mov byte [eax], 0
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x1c]
add eax, 2
push eax
call fcn.10062410
add esp, 4
mov dword [0x104f172c], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.10062410
add esp, 4
mov dword [0x104f1730], eax
cmp dword [ebp - 0xec], 0
je 0x10063c5a
mov edx, dword [ebp - 0x1c]
add edx, 2
push edx
mov eax, dword [ebp - 0xec]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1844], eax
jmp 0x10063c6e
mov ecx, dword [0x104f1730]
push ecx
push 0x103e743c
call fcn.1003cfe0
add esp, 8
cmp dword [0x104f1844], 0
je 0x10063cab
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov edx, dword [0x104f172c]
push edx
mov eax, dword [0x104f1730]
push eax
mov ecx, dword [0x104f1844]
push ecx
push str.Config:_bp2_set_to_0x_p___s::_s_._n
call fcn.1003cfe0
add esp, 0x10
jmp 0x10063d1a
push 0
push 0
mov edx, dword [ebp - 0x1c]
add edx, 2
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1844], eax
cmp dword [0x104f1844], 0
je 0x10063d00
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov eax, dword [0x104f172c]
push eax
mov ecx, dword [0x104f1730]
push ecx
mov edx, dword [0x104f1844]
push edx
push 0x103e73f4
call fcn.1003cfe0
add esp, 0x10
jmp 0x10063d1a
mov eax, dword [0x104f172c]
push eax
mov ecx, dword [0x104f1730]
push ecx
push 0x103e73c0
call fcn.1003cfe0
add esp, 0xc
jmp 0x10063ef1
push 4
push 0x103e73b8
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063d4f
push str.Config:_bp2_set_to_zero._n
call fcn.1003cfe0
add esp, 4
mov byte [0x104f184e], 1
jmp 0x10063ef1
push 2
push 0x103e7398
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x10063d7d
push 0xa
push 0x103e738c
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063daa
mov edx, dword [0x104f1844]
push edx
push str.Config:_bp2_set_to_entry_point._n
call fcn.1003cfe0
add esp, 8
mov dword [0x1065f904], 1
mov dword [0x104f16f4], 1
jmp 0x10063ef1
mov dword [ebp - 0x38], 0
push 0x2b
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10063df7
push 0
push 0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
push edx
push 0x103e7350
call fcn.1003cfe0
add esp, 8
mov eax, dword [ebp - 0x1c]
mov byte [eax], 0
jmp 0x10063e3d
push 0x2d
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10063e3d
push 0
push 0
mov edx, dword [ebp - 0x1c]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
push 0x103e7338
call fcn.1003cfe0
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov byte [ecx], 0
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x104f183c]
je 0x10063ef1
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [0x104f1840]
je 0x10063ef1
mov edx, dword [ebp - 0x4c]
cmp edx, dword [0x104f1844]
je 0x10063ef1
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x104f1848]
je 0x10063ef1
mov ecx, dword [ebp - 0x4c]
mov dword [0x104f1844], ecx
mov dword [0x104f16f4], 1
cmp dword [0x104f1844], 0xffffffff
jne 0x10063eb5
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1844], eax
cmp dword [ebp - 0x38], 0
je 0x10063edd
mov eax, dword [0x104f1844]
push eax
push str.Config:_bp2_was_0x_p._n
call fcn.1003cfe0
add esp, 8
mov ecx, dword [0x104f1844]
add ecx, dword [ebp - 0x38]
mov dword [0x104f1844], ecx
mov edx, dword [0x104f1844]
push edx
push str.Config:_bp2_set_to_0x_p._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e7300
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064246
push 0x3a
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10064070
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx + 1]
cmp eax, 0x3a
jne 0x10064070
mov dword [0x104f1848], 0
mov ecx, dword [ebp - 0x20]
mov byte [ecx], 0
mov edx, dword [ebp - 0x20]
mov byte [edx + 1], 0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x20]
add ecx, 2
push ecx
call fcn.10062410
add esp, 4
mov dword [0x104f172c], eax
mov edx, dword [ebp - 4]
push edx
call fcn.10062410
add esp, 4
mov dword [0x104f1730], eax
cmp dword [ebp - 0xf0], 0
je 0x10063faa
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
mov ecx, dword [ebp - 0xf0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1848], eax
jmp 0x10063fbe
mov edx, dword [0x104f1730]
push edx
push 0x103e72d0
call fcn.1003cfe0
add esp, 8
cmp dword [0x104f1848], 0
je 0x10063ffb
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov eax, dword [0x104f172c]
push eax
mov ecx, dword [0x104f1730]
push ecx
mov edx, dword [0x104f1848]
push edx
push str.Config:_bp3_set_to_0x_p___s::_s_._n
call fcn.1003cfe0
add esp, 0x10
jmp 0x1006406b
push 0
push 0
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1848], eax
cmp dword [0x104f1848], 0
je 0x10064050
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov ecx, dword [0x104f172c]
push ecx
mov edx, dword [0x104f1730]
push edx
mov eax, dword [0x104f1848]
push eax
push 0x103e7288
call fcn.1003cfe0
add esp, 0x10
jmp 0x1006406b
mov ecx, dword [0x104f172c]
push ecx
mov edx, dword [0x104f1730]
push edx
push 0x103e7254
call fcn.1003cfe0
add esp, 0xc
jmp 0x10064241
push 4
push 0x103e724c
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100640a0
push str.Config:_bp3_set_to_zero._n
call fcn.1003cfe0
add esp, 4
mov byte [0x104f184f], 1
jmp 0x10064241
push 2
push 0x103e722c
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x100640ce
push 0xa
push 0x103e7220
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100640fa
mov eax, dword [0x104f1848]
push eax
push str.Config:_bp3_set_to_entry_point._n
call fcn.1003cfe0
add esp, 8
mov dword [0x1065f904], 1
mov dword [0x104f16f4], 1
jmp 0x10064241
mov dword [ebp - 0x3c], 0
push 0x2b
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10064147
push 0
push 0
mov edx, dword [ebp - 0x20]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
push 0x103e71e4
call fcn.1003cfe0
add esp, 8
mov ecx, dword [ebp - 0x20]
mov byte [ecx], 0
jmp 0x1006418d
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x1006418d
push 0
push 0
mov eax, dword [ebp - 0x20]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
push ecx
push 0x103e71cc
call fcn.1003cfe0
add esp, 8
mov edx, dword [ebp - 0x20]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [0x104f183c]
je 0x10064241
mov edx, dword [ebp - 0x50]
cmp edx, dword [0x104f1840]
je 0x10064241
mov eax, dword [ebp - 0x50]
cmp eax, dword [0x104f1844]
je 0x10064241
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [0x104f1848]
je 0x10064241
mov edx, dword [ebp - 0x50]
mov dword [0x104f1848], edx
mov dword [0x104f16f4], 1
cmp dword [0x104f1848], 0xffffffff
jne 0x10064205
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1848], eax
cmp dword [ebp - 0x3c], 0
je 0x1006422e
mov ecx, dword [0x104f1848]
push ecx
push str.Config:_bp3_was_0x_p._n
call fcn.1003cfe0
add esp, 8
mov edx, dword [0x104f1848]
add edx, dword [ebp - 0x3c]
mov dword [0x104f1848], edx
mov eax, dword [0x104f1848]
push eax
push str.Config:_bp3_set_to_0x_p._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e7194
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064593
push 0x3a
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x100643be
mov eax, dword [ebp - 0x24]
movsx ecx, byte [eax + 1]
cmp ecx, 0x3a
jne 0x100643be
mov dword [0x104f1850], 0
mov edx, dword [ebp - 0x24]
mov byte [edx], 0
mov eax, dword [ebp - 0x24]
mov byte [eax + 1], 0
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xf4], eax
mov edx, dword [ebp - 0x24]
add edx, 2
push edx
call fcn.10062410
add esp, 4
mov dword [0x104f172c], eax
mov eax, dword [ebp - 4]
push eax
call fcn.10062410
add esp, 4
mov dword [0x104f1730], eax
cmp dword [ebp - 0xf4], 0
je 0x100642fa
mov ecx, dword [ebp - 0x24]
add ecx, 2
push ecx
mov edx, dword [ebp - 0xf4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1850], eax
jmp 0x1006430d
mov eax, dword [0x104f1730]
push eax
push 0x103e7164
call fcn.1003cfe0
add esp, 8
cmp dword [0x104f1850], 0
je 0x1006434a
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov ecx, dword [0x104f172c]
push ecx
mov edx, dword [0x104f1730]
push edx
mov eax, dword [0x104f1850]
push eax
push str.Config:_bp4_set_to_0x_p___s::_s_._n
call fcn.1003cfe0
add esp, 0x10
jmp 0x100643b9
push 0
push 0
mov ecx, dword [ebp - 0x24]
add ecx, 2
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1850], eax
cmp dword [0x104f1850], 0
je 0x1006439f
mov byte [0x104f1839], 1
mov dword [0x104f16f4], 1
mov edx, dword [0x104f172c]
push edx
mov eax, dword [0x104f1730]
push eax
mov ecx, dword [0x104f1850]
push ecx
push 0x103e711c
call fcn.1003cfe0
add esp, 0x10
jmp 0x100643b9
mov edx, dword [0x104f172c]
push edx
mov eax, dword [0x104f1730]
push eax
push 0x103e70e8
call fcn.1003cfe0
add esp, 0xc
jmp 0x1006458e
push 4
push 0x103e70e0
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100643ee
push str.Config:_bp4_set_to_zero._n
call fcn.1003cfe0
add esp, 4
mov byte [0x104f1860], 1
jmp 0x1006458e
push 2
push 0x103e70c0
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006441c
push 0xa
push 0x103e70b4
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10064449
mov ecx, dword [0x104f1850]
push ecx
push str.Config:_bp4_set_to_entry_point._n
call fcn.1003cfe0
add esp, 8
mov dword [0x1065f904], 1
mov dword [0x104f16f4], 1
jmp 0x1006458e
mov dword [ebp - 0x40], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x10064496
push 0
push 0
mov eax, dword [ebp - 0x24]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
push 0x103e7078
call fcn.1003cfe0
add esp, 8
mov edx, dword [ebp - 0x24]
mov byte [edx], 0
jmp 0x100644dc
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x100644dc
push 0
push 0
mov ecx, dword [ebp - 0x24]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x40]
push edx
push 0x103e7060
call fcn.1003cfe0
add esp, 8
mov eax, dword [ebp - 0x24]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
cmp edx, dword [0x104f183c]
je 0x1006458e
mov eax, dword [ebp - 0x54]
cmp eax, dword [0x104f1840]
je 0x1006458e
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [0x104f1844]
je 0x1006458e
mov edx, dword [ebp - 0x54]
cmp edx, dword [0x104f1848]
je 0x1006458e
mov eax, dword [ebp - 0x54]
mov dword [0x104f1850], eax
mov dword [0x104f16f4], 1
cmp dword [0x104f1850], 0xffffffff
jne 0x10064553
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1850], eax
cmp dword [ebp - 0x40], 0
je 0x1006457a
mov edx, dword [0x104f1850]
push edx
push str.Config:_bp4_was_0x_p._n
call fcn.1003cfe0
add esp, 8
mov eax, dword [0x104f1850]
add eax, dword [ebp - 0x40]
mov dword [0x104f1850], eax
mov ecx, dword [0x104f1850]
push ecx
push str.Config:_bp4_set_to_0x_p._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e7028
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100646ac
mov dword [ebp - 0x28], 0
push 0x2b
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x100645f9
push 0
push 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
push edx
push 0x103e7010
call fcn.1003cfe0
add esp, 8
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
jmp 0x1006463f
push 0x2d
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1006463f
push 0
push 0
mov edx, dword [ebp - 0xc]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
push 0x103e6ff8
call fcn.1003cfe0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov byte [ecx], 0
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1864], eax
cmp dword [0x104f1864], 0
je 0x100646a7
mov dword [0x104f16f4], 1
cmp dword [ebp - 0x28], 0
je 0x10064694
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [0x104f1864]
push ecx
push str.Config:_br0_was_0x_x__delta_0x_x_._n
call fcn.1003cfe0
add esp, 0xc
mov edx, dword [0x104f1864]
add edx, dword [ebp - 0x28]
mov dword [0x104f1864], edx
mov eax, dword [0x104f1864]
push eax
push str.Config:_br0_set_to_0x_x__break_on_return__n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e6fa4
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100647c5
mov dword [ebp - 0x2c], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064712
push 0
push 0
mov eax, dword [ebp - 0xc]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
push ecx
push 0x103e6f8c
call fcn.1003cfe0
add esp, 8
mov edx, dword [ebp - 0xc]
mov byte [edx], 0
jmp 0x10064758
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064758
push 0
push 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
push edx
push 0x103e6f74
call fcn.1003cfe0
add esp, 8
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1868], eax
cmp dword [0x104f1868], 0
je 0x100647c0
mov dword [0x104f16f4], 1
cmp dword [ebp - 0x2c], 0
je 0x100647ac
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [0x104f1868]
push eax
push str.Config:_br1_was_0x_x__delta_0x_x_._n
call fcn.1003cfe0
add esp, 0xc
mov ecx, dword [0x104f1868]
add ecx, dword [ebp - 0x2c]
mov dword [0x104f1868], ecx
mov edx, dword [0x104f1868]
push edx
push str.Config:_br1_set_to_0x_x__break_on_return__n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e6f20
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006481b
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f186c], eax
cmp dword [0x104f186c], 0
je 0x10064816
mov dword [0x104f16f4], 1
mov edx, dword [0x104f186c]
push edx
push str.Config:_br2_set_to_0x_x__break_on_return__n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e6ef0
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064871
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1870], eax
cmp dword [0x104f1870], 0
je 0x1006486c
mov dword [0x104f16f4], 1
mov edx, dword [0x104f1870]
push edx
push str.Config:_br3_set_to_0x_x__break_on_return__n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e6ec0
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100648b4
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1874], eax
mov edx, dword [0x104f1874]
push edx
push str.Config:_Hit_count_for_breakpoint_0_set_to__d_n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e6e8c
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100648f7
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1878], eax
mov edx, dword [0x104f1878]
push edx
push str.Config:_Hit_count_for_breakpoint_1_set_to__d_n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e6e58
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006493a
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f187c], eax
mov edx, dword [0x104f187c]
push edx
push str.Config:_Hit_count_for_breakpoint_2_set_to__d_n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push 0x103e6e24
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006497d
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1880], eax
mov edx, dword [0x104f1880]
push edx
push str.Config:_Hit_count_for_breakpoint_3_set_to__d_n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.depth
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100649ef
push 3
push 0x103e6de8
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100649c2
mov dword [0x1065f5b0], 0x7fffffff
push str.Config:_Trace_depth_set_to_all
call fcn.1003cfe0
add esp, 4
jmp 0x100649ea
push 0xa
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x1065f5b0], eax
mov eax, dword [0x1065f5b0]
push eax
push str.Config:_Trace_depth_set_to_0x_x
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.count
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064a62
push 3
push 0x103e6d9c
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10064a34
mov dword [0x1065f244], 0x7fffffff
push str.Config:_Trace_instruction_count_set_to_all
call fcn.1003cfe0
add esp, 4
jmp 0x10064a5d
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x1065f244], eax
mov ecx, dword [0x1065f244]
push ecx
push str.Config:_Trace_instruction_count_set_to_0x_x
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.step_out
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064ac2
mov dword [0x104f16f4], 1
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f183c], eax
cmp dword [0x104f183c], 0
je 0x10064abd
mov dword [0x104f1dac], 0x31
mov ecx, dword [0x104f183c]
push ecx
push str.Config:_Step_out_breakpoint_set_to_0x_x._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.dumpsize
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064b40
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x1065f6cc], eax
cmp dword [0x1065f6cc], 0
je 0x10064b0b
mov ecx, dword [0x1065f6cc]
push ecx
push str.Config:_DumpSize_set_to_0x_x
call fcn.1003cfe0
add esp, 8
jmp 0x10064b3b
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f260
call fcn.10259620
add esp, 0xc
push 0x1065f260
push str.Config:_DumpSize_set_to_string___s_.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.action0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064b9e
push 0x104
push 0
push 0x1065f5c0
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f5c0
call fcn.10259620
add esp, 0xc
push 0x1065f5c0
push str.Config:_Action0_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.action1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064bfc
push 0x104
push 0
push 0x1065f800
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f800
call fcn.10259620
add esp, 0xc
push 0x1065f800
push str.Config:_Action1_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.action2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064c5a
push 0x104
push 0
push 0x1065f380
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f380
call fcn.10259620
add esp, 0xc
push 0x1065f380
push str.Config:_Action2_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.action3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064cb8
push 0x104
push 0
push 0x1065f6e0
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f6e0
call fcn.10259620
add esp, 0xc
push 0x1065f6e0
push str.Config:_Action3_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.instruction0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064ce6
push str.instr0
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064d68
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100731a0
add esp, 4
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x10064d26
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x8c]
mov dword [0x1065f90c], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f90c]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction0_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.instruction1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064d96
push str.instr1
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064e18
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100731a0
add esp, 4
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x10064dd6
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x90]
mov dword [0x1065f910], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f910]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction1_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.instruction2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064e46
push str.instr2
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064ec8
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100731a0
add esp, 4
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x10064e86
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x94]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x94]
mov dword [0x1065f910], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f918]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction2_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.instruction3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064ef6
push str.instr3
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064f78
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100731a0
add esp, 4
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x10064f36
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x98]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x98]
mov dword [0x1065f910], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f6c4]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction3_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.procname0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065013
mov edx, 1
imul eax, edx, 0x104
push eax
call fcn.100731a0
add esp, 4
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x10064fd1
mov ecx, 1
imul edx, ecx, 0x104
push edx
push 0
mov eax, dword [ebp - 0x9c]
push eax
call fcn.1024a480
add esp, 0xc
mov ecx, dword [ebp - 0x9c]
mov dword [0x1065f240], ecx
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [0x1065f240]
push ecx
call fcn.10259620
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
push str.Config:_procname0_set_to__s.
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.break_on_return
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065066
mov dword [0x104f16f4], 1
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f1734
call fcn.10259620
add esp, 0xc
push 0x104f1734
push str.Config:_Break_on_return_set_to__s.
call fcn.1003cfe0
add esp, 8
mov byte [0x104f1838], 1
jmp 0x10066430
push str.trace_all
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100650b5
mov dword [0x104f16f4], 1
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1da8], eax
cmp dword [0x104f1da8], 0
je 0x100650b0
push str.Config:_Trace_all_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.trace_into_api
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006517e
mov dword [ebp - 0x84], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x1006516f
cmp dword [ebp - 0x84], 0x80
jae 0x1006516f
push 0x3a
mov eax, dword [ebp - 0xc]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x1006511a
mov ecx, dword [ebp - 0x88]
mov byte [ecx], 0
mov edx, dword [ebp - 0xc]
push edx
call fcn.10062410
add esp, 4
mov ecx, dword [ebp - 0x84]
mov dword [ecx*4 + 0x104f1dc4], eax
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0xc]
push eax
push str.Config:_Added__s_to_trace_into_API_list._n
call fcn.1003cfe0
add esp, 8
cmp dword [ebp - 0x88], 0
jne 0x1006515e
jmp 0x1006516f
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x100650de
mov dword [0x104f16f4], 1
jmp 0x10066430
push str.dumptype0
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100651ad
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1884], eax
jmp 0x10066430
push str.dumptype1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100651dc
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1888], eax
jmp 0x10066430
push str.dumptype2
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006520b
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f188c], eax
jmp 0x10066430
push str.dumptype3
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006523a
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1890], eax
jmp 0x10066430
push str.typestring
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065298
push 0x104
push 0
push 0x104f1894
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1894
call fcn.10259620
add esp, 0xc
push 0x104f1894
push str.Config:_typestring_set_to__s
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.typestring0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100652f6
push 0x104
push 0
push 0x104f1998
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1998
call fcn.10259620
add esp, 0xc
push 0x104f1998
push str.Config:_typestring0_set_to__s
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.typestring1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065354
push 0x104
push 0
push 0x104f1a9c
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1a9c
call fcn.10259620
add esp, 0xc
push 0x104f1a9c
push str.Config:_typestring1_set_to__s
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.typestring2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100653b2
push 0x104
push 0
push 0x104f1ba0
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1ba0
call fcn.10259620
add esp, 0xc
push 0x104f1ba0
push str.Config:_typestring2_set_to__s
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.typestring3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065410
push 0x104
push 0
push 0x104f1ca4
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1ca4
call fcn.10259620
add esp, 0xc
push 0x104f1ca4
push str.Config:_typestring3_set_to__s
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.type0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100654d3
push 1
push 0x103e696c
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065459
push str.Config:_Breakpoint_0_type_set_to_write__Type0__BP_WRITE_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f5a4], 1
jmp 0x100654ce
push 1
push 0x103e692c
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x10065487
push 2
push 0x103e6928
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100654a0
push str.Config:_Breakpoint_0_type_set_to_read_write__Type0__BP_READWRITE_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f5a4], 3
jmp 0x100654ce
push 1
push 0x103e68dc
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100654ce
push str.Config:_Breakpoint_0_type_set_to_execute__Type0__BP_EXEC_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f5a4], 0
jmp 0x10066430
push str.type1
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065596
push 1
push 0x103e6890
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006551c
push str.Config:_Breakpoint_1_type_set_to_write__Type1__BP_WRITE_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f23c], 1
jmp 0x10065591
push 1
push 0x103e6850
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006554a
push 2
push 0x103e6804
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065563
push str.Config:_Breakpoint_1_type_set_to_read_write__Type1__BP_READWRITE_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f23c], 3
jmp 0x10065591
push 1
push 0x103e6800
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065591
push str.Config:_Breakpoint_1_type_set_to_execute__Type1__BP_EXEC_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f23c], 0
jmp 0x10066430
push str.type2
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065659
push 1
push 0x103e67b4
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100655df
push str.Config:_Breakpoint_2_type_set_to_write__Type2__BP_WRITE_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f5a8], 1
jmp 0x10065654
push 1
push 0x103e6774
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006560d
push 2
push 0x103e6770
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065626
push str.Config:_Breakpoint_2_type_set_to_read_write__Type2__BP_READWRITE_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f5a8], 3
jmp 0x10065654
push 1
push 0x103e6724
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065654
push str.Config:_Breakpoint_2_type_set_to_execute__Type2__BP_EXEC_._n
call fcn.1003cfe0
add esp, 4
mov dword [0x1065f5a8], 0
jmp 0x10066430
push str.no_logs
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006569e
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
mov dword [0x104f1db4], edx
cmp dword [0x104f1db4], 0
je 0x10065699
push str.Config:_Debugger_log_diverted._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.disable_logging
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065704
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100656d3
mov dword [ebp - 0xf8], 1
jmp 0x100656dd
mov dword [ebp - 0xf8], 0
mov edx, dword [ebp - 0xf8]
mov dword [0x104f1db8], edx
cmp dword [0x104f1db8], 0
je 0x100656ff
push str.Config:_Logging_disabled__analysis_log_._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.base_on_alloc
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006576a
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065739
mov dword [ebp - 0xfc], 1
jmp 0x10065743
mov dword [ebp - 0xfc], 0
mov edx, dword [ebp - 0xfc]
mov dword [0x104f1dbc], edx
cmp dword [0x104f1dbc], 0
je 0x10065765
push str.Config:_Base_breakpoints_on_executable_memory_allocations._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.base_on_caller
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100657d0
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006579f
mov dword [ebp - 0x100], 1
jmp 0x100657a9
mov dword [ebp - 0x100], 0
mov edx, dword [ebp - 0x100]
mov dword [0x104f1dc0], edx
cmp dword [0x104f1dc0], 0
je 0x100657cb
push str.Config:_Base_breakpoints_on_new_calling_regions._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.fake_rdtsc
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065836
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065805
mov dword [ebp - 0x104], 1
jmp 0x1006580f
mov dword [ebp - 0x104], 0
mov edx, dword [ebp - 0x104]
mov dword [0x104f16f8], edx
cmp dword [0x104f16f8], 0
je 0x10065831
push str.Config:_Fake_RDTSC_enabled__Trace__n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.nop_rdtscp
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006589c
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006586b
mov dword [ebp - 0x108], 1
jmp 0x10065875
mov dword [ebp - 0x108], 0
mov edx, dword [ebp - 0x108]
mov dword [0x104f16fc], edx
cmp dword [0x104f16fc], 0
je 0x10065897
push str.Config:_RDTSCP_nop_enabled_n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.procdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065911
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100658d1
mov dword [ebp - 0x10c], 1
jmp 0x100658db
mov dword [ebp - 0x10c], 0
mov edx, dword [ebp - 0x10c]
mov dword [0x104f16c0], edx
cmp dword [0x104f16c0], 0
je 0x100658ff
push str.Process_dumps_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x1006590c
push str.Process_dumps_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.procmemdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100659aa
push 0x103e6548
mov ecx, dword [ebp - 4]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006594b
mov dword [0x104f16c4], 1
jmp 0x10065980
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x1006596b
mov dword [ebp - 0x110], 1
jmp 0x10065975
mov dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [0x104f16c4], eax
cmp dword [0x104f16c4], 0
je 0x10065998
push str.Full_process_memory_dumps_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x100659a5
push str.Full_process_memory_dumps_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.import_reconstruction
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065a1e
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100659df
mov dword [ebp - 0x114], 1
jmp 0x100659e9
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [0x104f16c8], eax
cmp dword [0x104f16c8], 0
je 0x10065a0c
push str.Import_reconstruction_of_process_dumps_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10065a19
push str.Import_reconstruction_of_process_dumps_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.terminate_processes
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065a92
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065a53
mov dword [ebp - 0x118], 1
jmp 0x10065a5d
mov dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [0x104f16cc], eax
cmp dword [0x104f16cc], 0
je 0x10065a80
push str.Terminate_processes_on_terminate_event_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10065a8d
push str.Terminate_processes_on_terminate_event_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.branch_trace
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065af7
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065ac7
mov dword [ebp - 0x11c], 1
jmp 0x10065ad1
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [0x104f16dc], eax
cmp dword [0x104f16dc], 0
je 0x10065af2
push str.Branch_tracing_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.compression
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065b5c
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065b2c
mov dword [ebp - 0x120], 1
jmp 0x10065b36
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [0x104f16ac], eax
cmp dword [0x104f16ac], 0
je 0x10065b57
push str.Capture_of_compressed_payloads_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.unpacker
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065bc1
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065b91
mov dword [ebp - 0x124], 1
jmp 0x10065b9b
mov dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [0x104f16b0], eax
cmp dword [0x104f16b0], 0
je 0x10065bbc
push str.Auto_unpacking_of_payloads_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.unpacker_bp_on_allocate
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065c26
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065bf6
mov dword [ebp - 0x128], 1
jmp 0x10065c00
mov dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [0x104f16b4], eax
cmp dword [0x104f16b4], 0
je 0x10065c21
push str.Auto_unpacking_of_payloads_and_set_breakpoints_on_allocate_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.injection
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065c8b
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065c5b
mov dword [ebp - 0x12c], 1
jmp 0x10065c65
mov dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [0x104f16b8], eax
cmp dword [0x104f16b8], 0
je 0x10065c86
push str.Capture_of_injected_payloads_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.combo
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065ce4
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065cdf
push str.Combined_payload_extractions_enabled._n
call fcn.1003cfe0
add esp, 4
mov dword [0x104f16ac], 1
mov dword [0x104f16b0], 1
mov dword [0x104f16b8], 1
jmp 0x10066430
push str.dump_config_region
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065d4a
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065d19
mov dword [ebp - 0x130], 1
jmp 0x10065d23
mov dword [ebp - 0x130], 0
mov edx, dword [ebp - 0x130]
mov dword [0x104f16d0], edx
cmp dword [0x104f16d0], 0
je 0x10065d45
push str.Dump_config_region_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.single_process
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065db0
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065d7f
mov dword [ebp - 0x134], 1
jmp 0x10065d89
mov dword [ebp - 0x134], 0
mov edx, dword [ebp - 0x134]
mov dword [0x104f16d4], edx
cmp dword [0x104f16d4], 0
je 0x10065dab
push str.Monitoring_child_processes_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push 0x103e6234
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065e29
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065de5
mov dword [ebp - 0x138], 1
jmp 0x10065def
mov dword [ebp - 0x138], 0
mov edx, dword [ebp - 0x138]
mov dword [0x104f1700], edx
cmp dword [0x104f1700], 0
je 0x10065e24
cmp dword [0x104f07e4], 0
je 0x10065e24
push str.PDF__Adobe__settings_enabled._n
call fcn.1003cfe0
add esp, 4
mov dword [0x104f0c94], 2
jmp 0x10066430
push str.api_rate_cap
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065e75
push 0xa
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f0c94], eax
cmp dword [0x104f0c94], 0
je 0x10065e70
mov edx, dword [0x104f0c94]
push edx
push str.API_spam_prevention_enabled___d_._n
call fcn.1003cfe0
add esp, 8
jmp 0x10066430
push str.dump_crypto
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065edb
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065eaa
mov dword [ebp - 0x13c], 1
jmp 0x10065eb4
mov dword [ebp - 0x13c], 0
mov edx, dword [ebp - 0x13c]
mov dword [0x104f16e4], edx
cmp dword [0x104f16e4], 0
je 0x10065ed6
push str.Dumping_of_crypto_API_buffers_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.caller_dump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065f41
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065f10
mov dword [ebp - 0x140], 1
jmp 0x10065f1a
mov dword [ebp - 0x140], 0
mov edx, dword [ebp - 0x140]
mov dword [0x104f16bc], edx
cmp dword [0x104f16bc], 0
jne 0x10065f3c
push str.Dumping_of_caller_regions_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push 0x103e6174
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065fa7
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065f76
mov dword [ebp - 0x144], 1
jmp 0x10065f80
mov dword [ebp - 0x144], 0
mov edx, dword [ebp - 0x144]
mov dword [0x104f16f0], edx
cmp dword [0x104f16f0], 0
je 0x10065fa2
push str.UPX_unpacker_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.yarascan
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006601c
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065fdc
mov dword [ebp - 0x148], 1
jmp 0x10065fe6
mov dword [ebp - 0x148], 0
mov edx, dword [ebp - 0x148]
mov dword [0x104f170c], edx
cmp dword [0x104f170c], 0
je 0x1006600a
push str.In_monitor_YARA_scans_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066017
push str.In_monitor_YARA_scans_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.amsidump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066091
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066051
mov dword [ebp - 0x14c], 1
jmp 0x1006605b
mov dword [ebp - 0x14c], 0
mov edx, dword [ebp - 0x14c]
mov dword [0x104f1710], edx
cmp dword [0x104f1710], 0
je 0x1006607f
push str.AMSI_dumping_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x1006608c
push str.AMSI_dumping_disabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.minihook
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100660f7
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100660c6
mov dword [ebp - 0x150], 1
jmp 0x100660d0
mov dword [ebp - 0x150], 0
mov edx, dword [ebp - 0x150]
mov dword [0x104f1714], edx
cmp dword [0x104f1714], 0
je 0x100660f2
push str.Minimal_hook_set_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.zerohook
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006615d
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006612c
mov dword [ebp - 0x154], 1
jmp 0x10066136
mov dword [ebp - 0x154], 0
mov edx, dword [ebp - 0x154]
mov dword [0x104f1718], edx
cmp dword [0x104f1718], 0
je 0x10066158
push str.All_hooks_disabled__except_essential__n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.tlsdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100661c3
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066192
mov dword [ebp - 0x158], 1
jmp 0x1006619c
mov dword [ebp - 0x158], 0
mov edx, dword [ebp - 0x158]
mov dword [0x104f1704], edx
cmp dword [0x104f1704], 0
je 0x100661be
push str.TLS_secret_dump_mode_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.regdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066229
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100661f8
mov dword [ebp - 0x15c], 1
jmp 0x10066202
mov dword [ebp - 0x15c], 0
mov edx, dword [ebp - 0x15c]
mov dword [0x104f1708], edx
cmp dword [0x104f1708], 0
je 0x10066224
push str.Registry_dump_mode_enabled._n
call fcn.1003cfe0
add esp, 4
jmp 0x10066430
push str.loaderlock
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006629e
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006625e
mov dword [ebp - 0x160], 1
jmp 0x10066268
mov dword [ebp - 0x160], 0
mov edx, dword [ebp - 0x160]
mov dword [0x104f1728], edx
cmp dword [0x104f1728], 0
je 0x1006628c
push str.plugx
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066304
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100662d3
push str.hancitor
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066390
mov esp, ebp
pop ebp
ret