Function at 0x10062510
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
push 0x3d
mov eax, dword [ebp + 8]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10062538
mov ecx, dword [ebp - 0xc]
mov byte [ecx], 0
jmp 0x1006253d
jmp 0x10066370
mov dword [ebp - 0x16c], 0
mov edx, dword [ebp + 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 4], eax
push str.pipe
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062586
push 0x104
mov edx, dword [ebp - 4]
push edx
push 0x104f04b8
call fcn.10259620
add esp, 0xc
jmp 0x10066370
push str.logpipe
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100625b6
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f05bc
call fcn.10259620
add esp, 0xc
jmp 0x10066370
push str.shutdown_mutex
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100625e6
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0x104f06c0
call fcn.10259620
add esp, 0xc
jmp 0x10066370
push str.first_process
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062635
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x1006261b
mov dword [ebp - 0xa0], 1
jmp 0x10062625
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [0x104f07c4], eax
jmp 0x10066370
push str.startup_time
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062664
push 0xa
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f07c8], eax
jmp 0x10066370
push str.force_sleepskip
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100626b4
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062699
mov dword [ebp - 0xa4], 1
jmp 0x100626a3
mov dword [ebp - 0xa4], 0
mov edx, dword [ebp - 0xa4]
mov dword [0x104f07cc], edx
jmp 0x10066370
push str.hashes_path
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100626e4
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f07d0
call fcn.10259620
add esp, 0xc
jmp 0x10066370
push str.diffing_enable
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062734
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10062719
mov dword [ebp - 0xa8], 1
jmp 0x10062723
mov dword [ebp - 0xa8], 0
mov ecx, dword [ebp - 0xa8]
mov dword [0x104f08d4], ecx
jmp 0x10066370
push str.track
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062784
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10062769
mov dword [ebp - 0xac], 1
jmp 0x10062773
mov dword [ebp - 0xac], 0
mov ecx, dword [ebp - 0xac]
mov dword [0x104f08d8], ecx
jmp 0x10066370
push str.mode
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100627af
mov eax, dword [ebp - 4]
push eax
call fcn.10062360
add esp, 4
mov dword [0x104f08dc], eax
jmp 0x10066370
push str.disguise_memory
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100627fe
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100627e4
mov dword [ebp - 0xb0], 1
jmp 0x100627ee
mov dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [0x104f08e0], eax
jmp 0x10066370
push str.disguise_cpu
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006284d
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062833
mov dword [ebp - 0xb4], 1
jmp 0x1006283d
mov dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [0x104f08e4], eax
jmp 0x10066370
push str.disguise_sid
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006289c
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062882
mov dword [ebp - 0xb8], 1
jmp 0x1006288c
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [0x104f08e8], eax
jmp 0x10066370
push str.disguise_drivername
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100628eb
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100628d1
mov dword [ebp - 0xbc], 1
jmp 0x100628db
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [0x104f08ec], eax
jmp 0x10066370
push str.disguise_hostname
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006293a
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062920
mov dword [ebp - 0xc0], 1
jmp 0x1006292a
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [0x104f08f0], eax
jmp 0x10066370
push str.pipe_pid
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062989
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x1006296f
mov dword [ebp - 0xc4], 1
jmp 0x10062979
mov dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [0x104f08f4], eax
jmp 0x10066370
push str.trigger
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100629b9
push 0x114
push 0x104f0a00
mov edx, dword [ebp - 4]
push edx
call fcn.1007cb20
add esp, 0xc
jmp 0x10066370
push str.set_language
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100629e6
push 0x20
push 0x104f0c28
mov ecx, dword [ebp - 4]
push ecx
call fcn.1007cb20
add esp, 0xc
jmp 0x10066370
push str.hide_keyboard
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062a16
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0x104f08f8
call fcn.10259620
add esp, 0xc
jmp 0x10066370
push str.hide_python
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062a65
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062a4b
mov dword [ebp - 0xc8], 1
jmp 0x10062a55
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [0x104f09fc], eax
jmp 0x10066370
push str.trap_dirname_count
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062aa2
mov edx, 1
imul eax, edx, 0
add eax, dword [ebp - 4]
push eax
call fcn.1025b54f
add esp, 4
mov dword [0x104f0c68], eax
mov dword [0x104f0c70], 0
jmp 0x10066370
cmp dword [0x104f0c68], 0
jle 0x10062af7
push str.ransomware_trap_dirname
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062af7
cmp dword [0x104f0c70], 0x32
jge 0x10062af2
push 0x104
imul edx, dword [0x104f0c70], 0x208
add edx, dword [0x104f0c6c]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.1007cb20
add esp, 0xc
lock inc dword [0x104f0c70]
jmp 0x10066370
push str.results
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062b5a
push 0x103
mov edx, dword [ebp - 4]
push edx
push 0x104f1fa4
call fcn.10259620
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10062b34
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x104
jae 0x10062b55
mov ecx, dword [ebp - 0x10]
movsx dx, byte [ecx + 0x104f1fa4]
mov eax, dword [ebp - 0x10]
mov word [eax*2 + 0x104f20a8], dx
jmp 0x10062b2b
jmp 0x10066370
push str.pythonpath
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062bcf
push 0x103
mov edx, dword [ebp - 4]
push edx
push 0x104f25bc
call fcn.10259620
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10062b97
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x104
jae 0x10062bb8
mov ecx, dword [ebp - 0x10]
movsx dx, byte [ecx + 0x104f25bc]
mov eax, dword [ebp - 0x10]
mov word [eax*2 + 0x104f26c0], dx
jmp 0x10062b8e
push 0x104f26c0
push str.Python_path_set_to__ws._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.referrer
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062c0b
mov edx, dword [ebp - 4]
push edx
call fcn.10073bb0
add esp, 4
mov dword [0x104f28d0], eax
mov eax, dword [ebp - 4]
push eax
call fcn.10062310
add esp, 4
mov dword [0x104f28d4], eax
jmp 0x10066370
push str.analyzer
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062caa
push 0x103
mov edx, dword [ebp - 4]
push edx
push 0x104f22b0
call fcn.10259620
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10062c4c
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x104
jae 0x10062c6d
mov ecx, dword [ebp - 0x10]
movsx dx, byte [ecx + 0x104f22b0]
mov eax, dword [ebp - 0x10]
mov word [eax*2 + 0x104f23b4], dx
jmp 0x10062c43
push 0x104f23b4
push 0x104f28d8
call fcn.1025952d
add esp, 8
push 0x104f28d8
call fcn.10251edf
add esp, 4
cmp eax, 0xff
jae 0x10062ca5
push str.dll_
push 0x104f28d8
call fcn.1025c153
add esp, 8
jmp 0x10066370
push str.debug
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062cd5
mov edx, dword [ebp - 4]
push edx
call fcn.1025b54f
add esp, 4
mov dword [0x104f2ae0], eax
jmp 0x10066370
push str.disable_hook_content
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062d00
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025b54f
add esp, 4
mov dword [0x104f2ae4], eax
jmp 0x10066370
push str.serial
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062d2f
push 0x10
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2ae8], eax
jmp 0x10066370
push str.sysvol_ctimelow
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062d5e
push 0x10
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2af4], eax
jmp 0x10066370
push str.sysvol_ctimehigh
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062d8d
push 0x10
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2af8], eax
jmp 0x10066370
push str.sys32_ctimelow
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062dbc
push 0x10
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2aec], eax
jmp 0x10066370
push str.sys32_ctimehigh
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062deb
push 0x10
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f2af0], eax
jmp 0x10066370
push str.full_logs
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062e3b
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062e20
mov dword [ebp - 0xcc], 1
jmp 0x10062e2a
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov dword [0x104f2afc], edx
jmp 0x10066370
push str.force_flush
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062e66
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025b54f
add esp, 4
mov dword [0x104f2b00], eax
jmp 0x10066370
push str.terminate_event
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062e96
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0x104f2b04
call fcn.10259620
add esp, 0xc
jmp 0x10066370
push str.no_stealth
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062ee5
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062ecb
mov dword [ebp - 0xd0], 1
jmp 0x10062ed5
mov dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [0x104f2c08], eax
jmp 0x10066370
push str.csharp
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10062f34
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062f1a
mov dword [ebp - 0xd4], 1
jmp 0x10062f24
mov dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [0x104f2c10], eax
jmp 0x10066370
push str.log_exceptions
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10062f84
mov edx, dword [ebp - 4]
push edx
call fcn.1025b54f
add esp, 4
mov dword [0x104f1688], eax
cmp dword [0x104f1688], 0
je 0x10062f72
push str.Exception_logging_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10062f7f
push str.Exception_logging_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.log_breakpoints
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10062ff9
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062fb9
mov dword [ebp - 0xd8], 1
jmp 0x10062fc3
mov dword [ebp - 0xd8], 0
mov edx, dword [ebp - 0xd8]
mov dword [0x104f16b8], edx
cmp dword [0x104f16b8], 0
je 0x10062fe7
push str.Breakpoint_logging_to_behavior_log_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10062ff4
push str.Breakpoint_logging_to_behavior_log_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.dropped_limit
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006303c
push 0xa
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f0c7c], eax
mov edx, dword [0x104f0c7c]
push edx
push str.Dropped_file_limit_set_to__d._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.ntdll_protect
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10063090
push 0xa
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f0c78], eax
cmp dword [0x104f0c78], 0
je 0x1006307e
push str.Config:_ntdll_write_protection_enabled.
call fcn.1003cfa0
add esp, 4
jmp 0x1006308b
push str.Config:_ntdll_write_protection_disabled.
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.standalone
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100630e0
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x100630c5
mov dword [ebp - 0xdc], 1
jmp 0x100630cf
mov dword [ebp - 0xdc], 0
mov ecx, dword [ebp - 0xdc]
mov dword [0x104f16c0], ecx
jmp 0x10066370
push str.exclude_apis
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10063165
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10063160
cmp dword [ebp - 0x58], 0x80
jae 0x10063160
push 0x3a
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x1006312e
mov edx, dword [ebp - 0x5c]
mov byte [edx], 0
mov eax, dword [ebp - 0xc]
push eax
call fcn.10062310
add esp, 4
mov ecx, dword [ebp - 0x58]
mov dword [ecx*4 + 0x104f0c84], eax
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x5c], 0
jne 0x10063155
jmp 0x10063160
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x10063102
jmp 0x10066370
push str.exclude_dlls
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100631e1
mov dword [ebp - 0x60], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x100631dc
cmp dword [ebp - 0x60], 0x80
jae 0x100631dc
push 0x3a
mov eax, dword [ebp - 0xc]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x100631b3
mov ecx, dword [ebp - 0x64]
mov byte [ecx], 0
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0xc]
mov dword [edx*4 + 0x104f0e84], eax
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x64], 0
jne 0x100631d1
jmp 0x100631dc
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10063187
jmp 0x10066370
push str.base_on_api
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x1006327b
mov dword [ebp - 0x68], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x10063276
cmp dword [ebp - 0x68], 0x80
jae 0x10063276
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x10063233
mov eax, dword [ebp - 0x6c]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10062310
add esp, 4
mov edx, dword [ebp - 0x68]
mov dword [edx*4 + 0x104f1084], eax
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_base_on_API_list._n
call fcn.1003cfa0
add esp, 8
cmp dword [ebp - 0x6c], 0
jne 0x1006326b
jmp 0x10063276
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10063207
jmp 0x10066370
push str.dump_on_api
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10063315
mov dword [ebp - 0x70], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x10063310
cmp dword [ebp - 0x70], 0x80
jae 0x10063310
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x100632cd
mov eax, dword [ebp - 0x74]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10062310
add esp, 4
mov edx, dword [ebp - 0x70]
mov dword [edx*4 + 0x104f1284], eax
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_dump_on_API_list._n
call fcn.1003cfa0
add esp, 8
cmp dword [ebp - 0x74], 0
jne 0x10063305
jmp 0x10063310
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x100632a1
jmp 0x10066370
push str.coverage_modules
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100633af
mov dword [ebp - 0x78], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x100633aa
cmp dword [ebp - 0x78], 0x80
jae 0x100633aa
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x10063367
mov eax, dword [ebp - 0x7c]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10073bb0
add esp, 4
mov edx, dword [ebp - 0x78]
mov dword [edx*4 + 0x104f1484], eax
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_coverage_modules_list._n
call fcn.1003cfa0
add esp, 8
cmp dword [ebp - 0x7c], 0
jne 0x1006339f
jmp 0x100633aa
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x1006333b
jmp 0x10066370
push str.dump_on_api_type
mov eax, dword [ebp - 8]
push eax
call fcn.10259550
add esp, 8
test eax, eax
jne 0x100633de
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1684], eax
jmp 0x10066370
push str.file_offsets
mov edx, dword [ebp - 8]
push edx
call fcn.10259550
add esp, 8
test eax, eax
jne 0x10063444
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10063413
mov dword [ebp - 0xe0], 1
jmp 0x1006341d
mov dword [ebp - 0xe0], 0
mov ecx, dword [ebp - 0xe0]
mov dword [0x104f1d90], ecx
cmp dword [0x104f1d90], 0
je 0x1006343f
push str.Breakpoints_interpreted_as_file_offsets._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push 0x103e7708
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10063799
push 0x3a
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x100635c3
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x100635c3
mov dword [0x104f181c], 0
mov eax, dword [ebp - 0x14]
mov byte [eax], 0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call fcn.10062310
add esp, 4
mov dword [0x104f170c], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.10062310
add esp, 4
mov dword [0x104f1710], eax
cmp dword [ebp - 0x80], 0
je 0x100634ef
mov edx, dword [ebp - 0x14]
add edx, 2
push edx
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f181c], eax
jmp 0x10063503
mov ecx, dword [0x104f1710]
push ecx
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.1003cfa0
add esp, 8
cmp dword [0x104f181c], 0
je 0x10063540
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov edx, dword [0x104f170c]
push edx
mov eax, dword [0x104f1710]
push eax
mov ecx, dword [0x104f181c]
push ecx
push str.Config:_bp0_set_to_0x_p___s::_s_._n
call fcn.1003cfa0
add esp, 0x10
jmp 0x100635be
cmp dword [ebp - 0x80], 0
je 0x100635be
push 0
push 0
mov edx, dword [ebp - 0x14]
add edx, 2
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x100635a3
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0xe4]
mov dword [0x104f181c], eax
mov dword [0x104f16d4], 1
mov ecx, dword [0x104f170c]
push ecx
mov edx, dword [0x104f1710]
push edx
mov eax, dword [0x104f181c]
push eax
push 0x103e7690
call fcn.1003cfa0
add esp, 0x10
jmp 0x100635be
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
mov edx, dword [0x104f1710]
push edx
push str.Config:_Failed_to_get_address_for_function__s::_s_n
call fcn.1003cfa0
add esp, 0xc
jmp 0x10063794
push 4
push 0x103e7654
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100635f3
push str.Config:_bp0_set_to_zero._n
call fcn.1003cfa0
add esp, 4
mov byte [0x104f182c], 1
jmp 0x10063794
push 2
push 0x103e7634
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x10063621
push 0xa
push str.entrypoint
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006364d
mov eax, dword [0x104f181c]
push eax
push str.Config:_bp0_set_to_entry_point._n
call fcn.1003cfa0
add esp, 8
mov dword [0x1065f8e4], 1
mov dword [0x104f16d4], 1
jmp 0x10063794
mov dword [ebp - 0x30], 0
push 0x2b
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x1006369a
push 0
push 0
mov edx, dword [ebp - 0x14]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
push str.Config:_Delta_0x_x._n
call fcn.1003cfa0
add esp, 8
mov ecx, dword [ebp - 0x14]
mov byte [ecx], 0
jmp 0x100636e0
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x100636e0
push 0
push 0
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x103e75d4
call fcn.1003cfa0
add esp, 8
mov edx, dword [ebp - 0x14]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x104f181c]
je 0x10063794
mov edx, dword [ebp - 0x44]
cmp edx, dword [0x104f1820]
je 0x10063794
mov eax, dword [ebp - 0x44]
cmp eax, dword [0x104f1824]
je 0x10063794
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x104f1828]
je 0x10063794
mov edx, dword [ebp - 0x44]
mov dword [0x104f181c], edx
mov dword [0x104f16d4], 1
cmp dword [0x104f181c], 0xffffffff
jne 0x10063758
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f181c], eax
cmp dword [ebp - 0x30], 0
je 0x10063781
mov ecx, dword [0x104f181c]
push ecx
push str.Config:_bp0_was_0x_p._n
call fcn.1003cfa0
add esp, 8
mov edx, dword [0x104f181c]
add edx, dword [ebp - 0x30]
mov dword [0x104f181c], edx
mov eax, dword [0x104f181c]
push eax
push str.Config:_bp0_set_to_0x_p._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e759c
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10063ae6
push 0x3a
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10063911
mov eax, dword [ebp - 0x18]
movsx ecx, byte [eax + 1]
cmp ecx, 0x3a
jne 0x10063911
mov dword [0x104f1820], 0
mov edx, dword [ebp - 0x18]
mov byte [edx], 0
mov eax, dword [ebp - 0x18]
mov byte [eax + 1], 0
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xe8], eax
mov edx, dword [ebp - 0x18]
add edx, 2
push edx
call fcn.10062310
add esp, 4
mov dword [0x104f170c], eax
mov eax, dword [ebp - 4]
push eax
call fcn.10062310
add esp, 4
mov dword [0x104f1710], eax
cmp dword [ebp - 0xe8], 0
je 0x1006384d
mov ecx, dword [ebp - 0x18]
add ecx, 2
push ecx
mov edx, dword [ebp - 0xe8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1820], eax
jmp 0x10063860
mov eax, dword [0x104f1710]
push eax
push 0x103e756c
call fcn.1003cfa0
add esp, 8
cmp dword [0x104f1820], 0
je 0x1006389d
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov ecx, dword [0x104f170c]
push ecx
mov edx, dword [0x104f1710]
push edx
mov eax, dword [0x104f1820]
push eax
push str.Config:_bp1_set_to_0x_p___s::_s_._n
call fcn.1003cfa0
add esp, 0x10
jmp 0x1006390c
push 0
push 0
mov ecx, dword [ebp - 0x18]
add ecx, 2
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1820], eax
cmp dword [0x104f1820], 0
je 0x100638f2
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov edx, dword [0x104f170c]
push edx
mov eax, dword [0x104f1710]
push eax
mov ecx, dword [0x104f1820]
push ecx
push 0x103e7524
call fcn.1003cfa0
add esp, 0x10
jmp 0x1006390c
mov edx, dword [0x104f170c]
push edx
mov eax, dword [0x104f1710]
push eax
push str.Config:_Failed_to_get_address_for_function__s::_s._n
call fcn.1003cfa0
add esp, 0xc
jmp 0x10063ae1
push 4
push 0x103e74e8
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063941
push str.Config:_bp1_set_to_zero._n
call fcn.1003cfa0
add esp, 4
mov byte [0x104f182d], 1
jmp 0x10063ae1
push 2
push 0x103e74c8
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006396f
push 0xa
push 0x103e74bc
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006399c
mov ecx, dword [0x104f1820]
push ecx
push str.Config:_bp1_set_to_entry_point._n
call fcn.1003cfa0
add esp, 8
mov dword [0x1065f8e4], 1
mov dword [0x104f16d4], 1
jmp 0x10063ae1
mov dword [ebp - 0x34], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x100639e9
push 0
push 0
mov eax, dword [ebp - 0x18]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
push 0x103e7480
call fcn.1003cfa0
add esp, 8
mov edx, dword [ebp - 0x18]
mov byte [edx], 0
jmp 0x10063a2f
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10063a2f
push 0
push 0
mov ecx, dword [ebp - 0x18]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x34]
push edx
push 0x103e7468
call fcn.1003cfa0
add esp, 8
mov eax, dword [ebp - 0x18]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x48]
cmp edx, dword [0x104f181c]
je 0x10063ae1
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x104f1820]
je 0x10063ae1
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [0x104f1824]
je 0x10063ae1
mov edx, dword [ebp - 0x48]
cmp edx, dword [0x104f1828]
je 0x10063ae1
mov eax, dword [ebp - 0x48]
mov dword [0x104f1820], eax
mov dword [0x104f16d4], 1
cmp dword [0x104f1820], 0xffffffff
jne 0x10063aa6
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1820], eax
cmp dword [ebp - 0x34], 0
je 0x10063acd
mov edx, dword [0x104f1820]
push edx
push str.Config:_bp1_was_0x_p._n
call fcn.1003cfa0
add esp, 8
mov eax, dword [0x104f1820]
add eax, dword [ebp - 0x34]
mov dword [0x104f1820], eax
mov ecx, dword [0x104f1820]
push ecx
push str.Config:_bp1_set_to_0x_p._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e7430
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10063e36
push 0x3a
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10063c5f
mov ecx, dword [ebp - 0x1c]
movsx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x10063c5f
mov dword [0x104f1824], 0
mov eax, dword [ebp - 0x1c]
mov byte [eax], 0
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x1c]
add eax, 2
push eax
call fcn.10062310
add esp, 4
mov dword [0x104f170c], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.10062310
add esp, 4
mov dword [0x104f1710], eax
cmp dword [ebp - 0xec], 0
je 0x10063b9a
mov edx, dword [ebp - 0x1c]
add edx, 2
push edx
mov eax, dword [ebp - 0xec]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1824], eax
jmp 0x10063bae
mov ecx, dword [0x104f1710]
push ecx
push 0x103e7400
call fcn.1003cfa0
add esp, 8
cmp dword [0x104f1824], 0
je 0x10063beb
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov edx, dword [0x104f170c]
push edx
mov eax, dword [0x104f1710]
push eax
mov ecx, dword [0x104f1824]
push ecx
push str.Config:_bp2_set_to_0x_p___s::_s_._n
call fcn.1003cfa0
add esp, 0x10
jmp 0x10063c5a
push 0
push 0
mov edx, dword [ebp - 0x1c]
add edx, 2
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1824], eax
cmp dword [0x104f1824], 0
je 0x10063c40
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov eax, dword [0x104f170c]
push eax
mov ecx, dword [0x104f1710]
push ecx
mov edx, dword [0x104f1824]
push edx
push 0x103e73b8
call fcn.1003cfa0
add esp, 0x10
jmp 0x10063c5a
mov eax, dword [0x104f170c]
push eax
mov ecx, dword [0x104f1710]
push ecx
push 0x103e7384
call fcn.1003cfa0
add esp, 0xc
jmp 0x10063e31
push 4
push 0x103e737c
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063c8f
push str.Config:_bp2_set_to_zero._n
call fcn.1003cfa0
add esp, 4
mov byte [0x104f182e], 1
jmp 0x10063e31
push 2
push 0x103e735c
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x10063cbd
push 0xa
push 0x103e7350
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063cea
mov edx, dword [0x104f1824]
push edx
push str.Config:_bp2_set_to_entry_point._n
call fcn.1003cfa0
add esp, 8
mov dword [0x1065f8e4], 1
mov dword [0x104f16d4], 1
jmp 0x10063e31
mov dword [ebp - 0x38], 0
push 0x2b
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10063d37
push 0
push 0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
push edx
push 0x103e7314
call fcn.1003cfa0
add esp, 8
mov eax, dword [ebp - 0x1c]
mov byte [eax], 0
jmp 0x10063d7d
push 0x2d
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10063d7d
push 0
push 0
mov edx, dword [ebp - 0x1c]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
push 0x103e72fc
call fcn.1003cfa0
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov byte [ecx], 0
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x104f181c]
je 0x10063e31
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [0x104f1820]
je 0x10063e31
mov edx, dword [ebp - 0x4c]
cmp edx, dword [0x104f1824]
je 0x10063e31
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x104f1828]
je 0x10063e31
mov ecx, dword [ebp - 0x4c]
mov dword [0x104f1824], ecx
mov dword [0x104f16d4], 1
cmp dword [0x104f1824], 0xffffffff
jne 0x10063df5
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1824], eax
cmp dword [ebp - 0x38], 0
je 0x10063e1d
mov eax, dword [0x104f1824]
push eax
push str.Config:_bp2_was_0x_p._n
call fcn.1003cfa0
add esp, 8
mov ecx, dword [0x104f1824]
add ecx, dword [ebp - 0x38]
mov dword [0x104f1824], ecx
mov edx, dword [0x104f1824]
push edx
push str.Config:_bp2_set_to_0x_p._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e72c4
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064186
push 0x3a
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10063fb0
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx + 1]
cmp eax, 0x3a
jne 0x10063fb0
mov dword [0x104f1828], 0
mov ecx, dword [ebp - 0x20]
mov byte [ecx], 0
mov edx, dword [ebp - 0x20]
mov byte [edx + 1], 0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x20]
add ecx, 2
push ecx
call fcn.10062310
add esp, 4
mov dword [0x104f170c], eax
mov edx, dword [ebp - 4]
push edx
call fcn.10062310
add esp, 4
mov dword [0x104f1710], eax
cmp dword [ebp - 0xf0], 0
je 0x10063eea
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
mov ecx, dword [ebp - 0xf0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1828], eax
jmp 0x10063efe
mov edx, dword [0x104f1710]
push edx
push 0x103e7294
call fcn.1003cfa0
add esp, 8
cmp dword [0x104f1828], 0
je 0x10063f3b
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov eax, dword [0x104f170c]
push eax
mov ecx, dword [0x104f1710]
push ecx
mov edx, dword [0x104f1828]
push edx
push str.Config:_bp3_set_to_0x_p___s::_s_._n
call fcn.1003cfa0
add esp, 0x10
jmp 0x10063fab
push 0
push 0
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1828], eax
cmp dword [0x104f1828], 0
je 0x10063f90
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov ecx, dword [0x104f170c]
push ecx
mov edx, dword [0x104f1710]
push edx
mov eax, dword [0x104f1828]
push eax
push 0x103e724c
call fcn.1003cfa0
add esp, 0x10
jmp 0x10063fab
mov ecx, dword [0x104f170c]
push ecx
mov edx, dword [0x104f1710]
push edx
push 0x103e7218
call fcn.1003cfa0
add esp, 0xc
jmp 0x10064181
push 4
push 0x103e7210
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10063fe0
push str.Config:_bp3_set_to_zero._n
call fcn.1003cfa0
add esp, 4
mov byte [0x104f182f], 1
jmp 0x10064181
push 2
push 0x103e71f0
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006400e
push 0xa
push 0x103e71e4
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006403a
mov eax, dword [0x104f1828]
push eax
push str.Config:_bp3_set_to_entry_point._n
call fcn.1003cfa0
add esp, 8
mov dword [0x1065f8e4], 1
mov dword [0x104f16d4], 1
jmp 0x10064181
mov dword [ebp - 0x3c], 0
push 0x2b
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10064087
push 0
push 0
mov edx, dword [ebp - 0x20]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
push 0x103e71a8
call fcn.1003cfa0
add esp, 8
mov ecx, dword [ebp - 0x20]
mov byte [ecx], 0
jmp 0x100640cd
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x100640cd
push 0
push 0
mov eax, dword [ebp - 0x20]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
push ecx
push 0x103e7190
call fcn.1003cfa0
add esp, 8
mov edx, dword [ebp - 0x20]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [0x104f181c]
je 0x10064181
mov edx, dword [ebp - 0x50]
cmp edx, dword [0x104f1820]
je 0x10064181
mov eax, dword [ebp - 0x50]
cmp eax, dword [0x104f1824]
je 0x10064181
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [0x104f1828]
je 0x10064181
mov edx, dword [ebp - 0x50]
mov dword [0x104f1828], edx
mov dword [0x104f16d4], 1
cmp dword [0x104f1828], 0xffffffff
jne 0x10064145
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1828], eax
cmp dword [ebp - 0x3c], 0
je 0x1006416e
mov ecx, dword [0x104f1828]
push ecx
push str.Config:_bp3_was_0x_p._n
call fcn.1003cfa0
add esp, 8
mov edx, dword [0x104f1828]
add edx, dword [ebp - 0x3c]
mov dword [0x104f1828], edx
mov eax, dword [0x104f1828]
push eax
push str.Config:_bp3_set_to_0x_p._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e7158
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100644d3
push 0x3a
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x100642fe
mov eax, dword [ebp - 0x24]
movsx ecx, byte [eax + 1]
cmp ecx, 0x3a
jne 0x100642fe
mov dword [0x104f1830], 0
mov edx, dword [ebp - 0x24]
mov byte [edx], 0
mov eax, dword [ebp - 0x24]
mov byte [eax + 1], 0
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xf4], eax
mov edx, dword [ebp - 0x24]
add edx, 2
push edx
call fcn.10062310
add esp, 4
mov dword [0x104f170c], eax
mov eax, dword [ebp - 4]
push eax
call fcn.10062310
add esp, 4
mov dword [0x104f1710], eax
cmp dword [ebp - 0xf4], 0
je 0x1006423a
mov ecx, dword [ebp - 0x24]
add ecx, 2
push ecx
mov edx, dword [ebp - 0xf4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f1830], eax
jmp 0x1006424d
mov eax, dword [0x104f1710]
push eax
push 0x103e7128
call fcn.1003cfa0
add esp, 8
cmp dword [0x104f1830], 0
je 0x1006428a
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov ecx, dword [0x104f170c]
push ecx
mov edx, dword [0x104f1710]
push edx
mov eax, dword [0x104f1830]
push eax
push str.Config:_bp4_set_to_0x_p___s::_s_._n
call fcn.1003cfa0
add esp, 0x10
jmp 0x100642f9
push 0
push 0
mov ecx, dword [ebp - 0x24]
add ecx, 2
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1830], eax
cmp dword [0x104f1830], 0
je 0x100642df
mov byte [0x104f1819], 1
mov dword [0x104f16d4], 1
mov edx, dword [0x104f170c]
push edx
mov eax, dword [0x104f1710]
push eax
mov ecx, dword [0x104f1830]
push ecx
push 0x103e70e0
call fcn.1003cfa0
add esp, 0x10
jmp 0x100642f9
mov edx, dword [0x104f170c]
push edx
mov eax, dword [0x104f1710]
push eax
push 0x103e70ac
call fcn.1003cfa0
add esp, 0xc
jmp 0x100644ce
push 4
push 0x103e70a4
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006432e
push str.Config:_bp4_set_to_zero._n
call fcn.1003cfa0
add esp, 4
mov byte [0x104f1840], 1
jmp 0x100644ce
push 2
push 0x103e7084
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006435c
push 0xa
push 0x103e7078
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10064389
mov ecx, dword [0x104f1830]
push ecx
push str.Config:_bp4_set_to_entry_point._n
call fcn.1003cfa0
add esp, 8
mov dword [0x1065f8e4], 1
mov dword [0x104f16d4], 1
jmp 0x100644ce
mov dword [ebp - 0x40], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x100643d6
push 0
push 0
mov eax, dword [ebp - 0x24]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
push 0x103e703c
call fcn.1003cfa0
add esp, 8
mov edx, dword [ebp - 0x24]
mov byte [edx], 0
jmp 0x1006441c
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x1006441c
push 0
push 0
mov ecx, dword [ebp - 0x24]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x40]
push edx
push 0x103e7024
call fcn.1003cfa0
add esp, 8
mov eax, dword [ebp - 0x24]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
cmp edx, dword [0x104f181c]
je 0x100644ce
mov eax, dword [ebp - 0x54]
cmp eax, dword [0x104f1820]
je 0x100644ce
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [0x104f1824]
je 0x100644ce
mov edx, dword [ebp - 0x54]
cmp edx, dword [0x104f1828]
je 0x100644ce
mov eax, dword [ebp - 0x54]
mov dword [0x104f1830], eax
mov dword [0x104f16d4], 1
cmp dword [0x104f1830], 0xffffffff
jne 0x10064493
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bc56
add esp, 0xc
mov dword [0x104f1830], eax
cmp dword [ebp - 0x40], 0
je 0x100644ba
mov edx, dword [0x104f1830]
push edx
push str.Config:_bp4_was_0x_p._n
call fcn.1003cfa0
add esp, 8
mov eax, dword [0x104f1830]
add eax, dword [ebp - 0x40]
mov dword [0x104f1830], eax
mov ecx, dword [0x104f1830]
push ecx
push str.Config:_bp4_set_to_0x_p._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6fec
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100645ec
mov dword [ebp - 0x28], 0
push 0x2b
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064539
push 0
push 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
push edx
push 0x103e6fd4
call fcn.1003cfa0
add esp, 8
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
jmp 0x1006457f
push 0x2d
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1006457f
push 0
push 0
mov edx, dword [ebp - 0xc]
add edx, 1
push edx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
push 0x103e6fbc
call fcn.1003cfa0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov byte [ecx], 0
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1844], eax
cmp dword [0x104f1844], 0
je 0x100645e7
mov dword [0x104f16d4], 1
cmp dword [ebp - 0x28], 0
je 0x100645d4
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [0x104f1844]
push ecx
push str.Config:_br0_was_0x_x__delta_0x_x_._n
call fcn.1003cfa0
add esp, 0xc
mov edx, dword [0x104f1844]
add edx, dword [ebp - 0x28]
mov dword [0x104f1844], edx
mov eax, dword [0x104f1844]
push eax
push str.Config:_br0_set_to_0x_x__break_on_return__n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6f68
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064705
mov dword [ebp - 0x2c], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064652
push 0
push 0
mov eax, dword [ebp - 0xc]
add eax, 1
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
push ecx
push 0x103e6f50
call fcn.1003cfa0
add esp, 8
mov edx, dword [ebp - 0xc]
mov byte [edx], 0
jmp 0x10064698
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064698
push 0
push 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
call fcn.1025bcaa
add esp, 0xc
neg eax
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
push edx
push 0x103e6f38
call fcn.1003cfa0
add esp, 8
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1848], eax
cmp dword [0x104f1848], 0
je 0x10064700
mov dword [0x104f16d4], 1
cmp dword [ebp - 0x2c], 0
je 0x100646ec
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [0x104f1848]
push eax
push str.Config:_br1_was_0x_x__delta_0x_x_._n
call fcn.1003cfa0
add esp, 0xc
mov ecx, dword [0x104f1848]
add ecx, dword [ebp - 0x2c]
mov dword [0x104f1848], ecx
mov edx, dword [0x104f1848]
push edx
push str.Config:_br1_set_to_0x_x__break_on_return__n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6ee4
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006475b
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f184c], eax
cmp dword [0x104f184c], 0
je 0x10064756
mov dword [0x104f16d4], 1
mov edx, dword [0x104f184c]
push edx
push str.Config:_br2_set_to_0x_x__break_on_return__n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6eb4
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100647b1
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1850], eax
cmp dword [0x104f1850], 0
je 0x100647ac
mov dword [0x104f16d4], 1
mov edx, dword [0x104f1850]
push edx
push str.Config:_br3_set_to_0x_x__break_on_return__n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6e84
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100647f4
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1854], eax
mov edx, dword [0x104f1854]
push edx
push str.Config:_Hit_count_for_breakpoint_0_set_to__d_n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6e50
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064837
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1858], eax
mov edx, dword [0x104f1858]
push edx
push str.Config:_Hit_count_for_breakpoint_1_set_to__d_n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6e1c
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006487a
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f185c], eax
mov edx, dword [0x104f185c]
push edx
push str.Config:_Hit_count_for_breakpoint_2_set_to__d_n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push 0x103e6de8
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100648bd
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1860], eax
mov edx, dword [0x104f1860]
push edx
push str.Config:_Hit_count_for_breakpoint_3_set_to__d_n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.depth
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006492f
push 3
push 0x103e6dac
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10064902
mov dword [0x1065f590], 0x7fffffff
push str.Config:_Trace_depth_set_to_all
call fcn.1003cfa0
add esp, 4
jmp 0x1006492a
push 0xa
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x1065f590], eax
mov eax, dword [0x1065f590]
push eax
push str.Config:_Trace_depth_set_to_0x_x
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.count
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100649a2
push 3
push 0x103e6d60
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10064974
mov dword [0x1065f224], 0x7fffffff
push str.Config:_Trace_instruction_count_set_to_all
call fcn.1003cfa0
add esp, 4
jmp 0x1006499d
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x1065f224], eax
mov ecx, dword [0x1065f224]
push ecx
push str.Config:_Trace_instruction_count_set_to_0x_x
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.step_out
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064a02
mov dword [0x104f16d4], 1
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f181c], eax
cmp dword [0x104f181c], 0
je 0x100649fd
mov dword [0x104f1d8c], 0x31
mov ecx, dword [0x104f181c]
push ecx
push str.Config:_Step_out_breakpoint_set_to_0x_x._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.dumpsize
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064a80
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x1065f6ac], eax
cmp dword [0x1065f6ac], 0
je 0x10064a4b
mov ecx, dword [0x1065f6ac]
push ecx
push str.Config:_DumpSize_set_to_0x_x
call fcn.1003cfa0
add esp, 8
jmp 0x10064a7b
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f240
call fcn.10259620
add esp, 0xc
push 0x1065f240
push str.Config:_DumpSize_set_to_string___s_.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.action0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064ade
push 0x104
push 0
push 0x1065f5a0
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f5a0
call fcn.10259620
add esp, 0xc
push 0x1065f5a0
push str.Config:_Action0_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.action1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064b3c
push 0x104
push 0
push 0x1065f7e0
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f7e0
call fcn.10259620
add esp, 0xc
push 0x1065f7e0
push str.Config:_Action1_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.action2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064b9a
push 0x104
push 0
push 0x1065f360
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f360
call fcn.10259620
add esp, 0xc
push 0x1065f360
push str.Config:_Action2_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.action3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064bf8
push 0x104
push 0
push 0x1065f6c0
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f6c0
call fcn.10259620
add esp, 0xc
push 0x1065f6c0
push str.Config:_Action3_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.instruction0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064c26
push str.instr0
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064ca8
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100730e0
add esp, 4
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x10064c66
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x8c]
mov dword [0x1065f8ec], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f8ec]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction0_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.instruction1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064cd6
push str.instr1
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064d58
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100730e0
add esp, 4
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x10064d16
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x90]
mov dword [0x1065f8f0], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f8f0]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction1_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.instruction2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064d86
push str.instr2
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064e08
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100730e0
add esp, 4
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x10064dc6
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x94]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x94]
mov dword [0x1065f8f0], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f8f8]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction2_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.instruction3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
je 0x10064e36
push str.instr3
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064eb8
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.100730e0
add esp, 4
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x10064e76
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x98]
push ecx
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 0x98]
mov dword [0x1065f8f0], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e180
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f6a4]
push edx
call fcn.10259620
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction3_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.procname0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064f53
mov edx, 1
imul eax, edx, 0x104
push eax
call fcn.100730e0
add esp, 4
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x10064f11
mov ecx, 1
imul edx, ecx, 0x104
push edx
push 0
mov eax, dword [ebp - 0x9c]
push eax
call fcn.1024a480
add esp, 0xc
mov ecx, dword [ebp - 0x9c]
mov dword [0x1065f220], ecx
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [0x1065f220]
push ecx
call fcn.10259620
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
push str.Config:_procname0_set_to__s.
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.break_on_return
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064fa6
mov dword [0x104f16d4], 1
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f1714
call fcn.10259620
add esp, 0xc
push 0x104f1714
push str.Config:_Break_on_return_set_to__s.
call fcn.1003cfa0
add esp, 8
mov byte [0x104f1818], 1
jmp 0x10066370
push str.trace_all
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10064ff5
mov dword [0x104f16d4], 1
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1d88], eax
cmp dword [0x104f1d88], 0
je 0x10064ff0
push str.Config:_Trace_all_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.trace_into_api
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100650be
mov dword [ebp - 0x84], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x100650af
cmp dword [ebp - 0x84], 0x80
jae 0x100650af
push 0x3a
mov eax, dword [ebp - 0xc]
push eax
call fcn.1024c3b0
add esp, 8
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x1006505a
mov ecx, dword [ebp - 0x88]
mov byte [ecx], 0
mov edx, dword [ebp - 0xc]
push edx
call fcn.10062310
add esp, 4
mov ecx, dword [ebp - 0x84]
mov dword [ecx*4 + 0x104f1da4], eax
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0xc]
push eax
push str.Config:_Added__s_to_trace_into_API_list._n
call fcn.1003cfa0
add esp, 8
cmp dword [ebp - 0x88], 0
jne 0x1006509e
jmp 0x100650af
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x1006501e
mov dword [0x104f16d4], 1
jmp 0x10066370
push str.dumptype0
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100650ed
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1864], eax
jmp 0x10066370
push str.dumptype1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006511c
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1868], eax
jmp 0x10066370
push str.dumptype2
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006514b
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f186c], eax
jmp 0x10066370
push str.dumptype3
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006517a
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f1870], eax
jmp 0x10066370
push str.typestring
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100651d8
push 0x104
push 0
push 0x104f1874
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1874
call fcn.10259620
add esp, 0xc
push 0x104f1874
push str.Config:_typestring_set_to__s
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.typestring0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065236
push 0x104
push 0
push 0x104f1978
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1978
call fcn.10259620
add esp, 0xc
push 0x104f1978
push str.Config:_typestring0_set_to__s
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.typestring1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065294
push 0x104
push 0
push 0x104f1a7c
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1a7c
call fcn.10259620
add esp, 0xc
push 0x104f1a7c
push str.Config:_typestring1_set_to__s
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.typestring2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100652f2
push 0x104
push 0
push 0x104f1b80
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1b80
call fcn.10259620
add esp, 0xc
push 0x104f1b80
push str.Config:_typestring2_set_to__s
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.typestring3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065350
push 0x104
push 0
push 0x104f1c84
call fcn.1024a480
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e180
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1c84
call fcn.10259620
add esp, 0xc
push 0x104f1c84
push str.Config:_typestring3_set_to__s
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.type0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065413
push 1
push 0x103e6930
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065399
push str.Config:_Breakpoint_0_type_set_to_write__Type0__BP_WRITE_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f584], 1
jmp 0x1006540e
push 1
push 0x103e68f0
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x100653c7
push 2
push 0x103e68a4
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100653e0
push str.Config:_Breakpoint_0_type_set_to_read_write__Type0__BP_READWRITE_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f584], 3
jmp 0x1006540e
push 1
push 0x103e68a0
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006540e
push str.Config:_Breakpoint_0_type_set_to_execute__Type0__BP_EXEC_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f584], 0
jmp 0x10066370
push str.type1
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100654d6
push 1
push 0x103e6854
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006545c
push str.Config:_Breakpoint_1_type_set_to_write__Type1__BP_WRITE_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f21c], 1
jmp 0x100654d1
push 1
push 0x103e6814
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006548a
push 2
push 0x103e6810
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100654a3
push str.Config:_Breakpoint_1_type_set_to_read_write__Type1__BP_READWRITE_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f21c], 3
jmp 0x100654d1
push 1
push 0x103e67c4
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x100654d1
push str.Config:_Breakpoint_1_type_set_to_execute__Type1__BP_EXEC_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f21c], 0
jmp 0x10066370
push str.type2
mov edx, dword [ebp - 8]
push edx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065599
push 1
push 0x103e6778
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x1006551f
push str.Config:_Breakpoint_2_type_set_to_write__Type2__BP_WRITE_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f588], 1
jmp 0x10065594
push 1
push 0x103e6738
mov ecx, dword [ebp - 4]
push ecx
call fcn.10259d26
add esp, 0xc
test eax, eax
je 0x1006554d
push 2
push 0x103e66ec
mov edx, dword [ebp - 4]
push edx
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065566
push str.Config:_Breakpoint_2_type_set_to_read_write__Type2__BP_READWRITE_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f588], 3
jmp 0x10065594
push 1
push 0x103e66e8
mov eax, dword [ebp - 4]
push eax
call fcn.10259d26
add esp, 0xc
test eax, eax
jne 0x10065594
push str.Config:_Breakpoint_2_type_set_to_execute__Type2__BP_EXEC_._n
call fcn.1003cfa0
add esp, 4
mov dword [0x1065f588], 0
jmp 0x10066370
push str.no_logs
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100655de
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
mov dword [0x104f1d94], edx
cmp dword [0x104f1d94], 0
je 0x100655d9
push str.Config:_Debugger_log_diverted._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.disable_logging
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065644
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065613
mov dword [ebp - 0xf8], 1
jmp 0x1006561d
mov dword [ebp - 0xf8], 0
mov edx, dword [ebp - 0xf8]
mov dword [0x104f1d98], edx
cmp dword [0x104f1d98], 0
je 0x1006563f
push str.Config:_Logging_disabled__analysis_log_._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.base_on_alloc
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100656aa
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065679
mov dword [ebp - 0xfc], 1
jmp 0x10065683
mov dword [ebp - 0xfc], 0
mov edx, dword [ebp - 0xfc]
mov dword [0x104f1d9c], edx
cmp dword [0x104f1d9c], 0
je 0x100656a5
push str.Config:_Base_breakpoints_on_executable_memory_allocations._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.base_on_caller
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065710
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100656df
mov dword [ebp - 0x100], 1
jmp 0x100656e9
mov dword [ebp - 0x100], 0
mov edx, dword [ebp - 0x100]
mov dword [0x104f1da0], edx
cmp dword [0x104f1da0], 0
je 0x1006570b
push str.Config:_Base_breakpoints_on_new_calling_regions._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.fake_rdtsc
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065776
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065745
mov dword [ebp - 0x104], 1
jmp 0x1006574f
mov dword [ebp - 0x104], 0
mov edx, dword [ebp - 0x104]
mov dword [0x104f16d8], edx
cmp dword [0x104f16d8], 0
je 0x10065771
push str.Config:_Fake_RDTSC_enabled__Trace__n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.nop_rdtscp
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100657dc
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100657ab
mov dword [ebp - 0x108], 1
jmp 0x100657b5
mov dword [ebp - 0x108], 0
mov edx, dword [ebp - 0x108]
mov dword [0x104f16dc], edx
cmp dword [0x104f16dc], 0
je 0x100657d7
push str.Config:_RDTSCP_nop_enabled_n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.procdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065851
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065811
mov dword [ebp - 0x10c], 1
jmp 0x1006581b
mov dword [ebp - 0x10c], 0
mov edx, dword [ebp - 0x10c]
mov dword [0x104f16a0], edx
cmp dword [0x104f16a0], 0
je 0x1006583f
push str.Process_dumps_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x1006584c
push str.Process_dumps_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.procmemdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100658ea
push 0x103e650c
mov ecx, dword [ebp - 4]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006588b
mov dword [0x104f16a4], 1
jmp 0x100658c0
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100658ab
mov dword [ebp - 0x110], 1
jmp 0x100658b5
mov dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [0x104f16a4], eax
cmp dword [0x104f16a4], 0
je 0x100658d8
push str.Full_process_memory_dumps_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x100658e5
push str.Full_process_memory_dumps_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.import_reconstruction
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006595e
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x1006591f
mov dword [ebp - 0x114], 1
jmp 0x10065929
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [0x104f16a8], eax
cmp dword [0x104f16a8], 0
je 0x1006594c
push str.Import_reconstruction_of_process_dumps_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10065959
push str.Import_reconstruction_of_process_dumps_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.terminate_processes
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100659d2
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065993
mov dword [ebp - 0x118], 1
jmp 0x1006599d
mov dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [0x104f16ac], eax
cmp dword [0x104f16ac], 0
je 0x100659c0
push str.Terminate_processes_on_terminate_event_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x100659cd
push str.Terminate_processes_on_terminate_event_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.branch_trace
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065a37
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065a07
mov dword [ebp - 0x11c], 1
jmp 0x10065a11
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [0x104f16bc], eax
cmp dword [0x104f16bc], 0
je 0x10065a32
push str.Branch_tracing_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.compression
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065a9c
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065a6c
mov dword [ebp - 0x120], 1
jmp 0x10065a76
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [0x104f168c], eax
cmp dword [0x104f168c], 0
je 0x10065a97
push str.Capture_of_compressed_payloads_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.unpacker
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065b01
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065ad1
mov dword [ebp - 0x124], 1
jmp 0x10065adb
mov dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [0x104f1690], eax
cmp dword [0x104f1690], 0
je 0x10065afc
push str.Auto_unpacking_of_payloads_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.unpacker_bp_on_allocate
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065b66
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065b36
mov dword [ebp - 0x128], 1
jmp 0x10065b40
mov dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [0x104f1694], eax
cmp dword [0x104f1694], 0
je 0x10065b61
push str.Auto_unpacking_of_payloads_and_set_breakpoints_on_allocate_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.injection
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065bcb
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065b9b
mov dword [ebp - 0x12c], 1
jmp 0x10065ba5
mov dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [0x104f1698], eax
cmp dword [0x104f1698], 0
je 0x10065bc6
push str.Capture_of_injected_payloads_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.combo
mov ecx, dword [ebp - 8]
push ecx
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065c24
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065c1f
push str.Combined_payload_extractions_enabled._n
call fcn.1003cfa0
add esp, 4
mov dword [0x104f168c], 1
mov dword [0x104f1690], 1
mov dword [0x104f1698], 1
jmp 0x10066370
push str.dump_config_region
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065c8a
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065c59
mov dword [ebp - 0x130], 1
jmp 0x10065c63
mov dword [ebp - 0x130], 0
mov edx, dword [ebp - 0x130]
mov dword [0x104f16b0], edx
cmp dword [0x104f16b0], 0
je 0x10065c85
push str.Dump_config_region_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.single_process
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065cf0
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065cbf
mov dword [ebp - 0x134], 1
jmp 0x10065cc9
mov dword [ebp - 0x134], 0
mov edx, dword [ebp - 0x134]
mov dword [0x104f16b4], edx
cmp dword [0x104f16b4], 0
je 0x10065ceb
push str.Monitoring_child_processes_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push 0x103e61f8
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065d69
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065d25
mov dword [ebp - 0x138], 1
jmp 0x10065d2f
mov dword [ebp - 0x138], 0
mov edx, dword [ebp - 0x138]
mov dword [0x104f16e0], edx
cmp dword [0x104f16e0], 0
je 0x10065d64
cmp dword [0x104f07c4], 0
je 0x10065d64
push str.PDF__Adobe__settings_enabled._n
call fcn.1003cfa0
add esp, 4
mov dword [0x104f0c74], 2
jmp 0x10066370
push str.api_rate_cap
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065db5
push 0xa
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025bcaa
add esp, 0xc
mov dword [0x104f0c74], eax
cmp dword [0x104f0c74], 0
je 0x10065db0
mov edx, dword [0x104f0c74]
push edx
push str.API_spam_prevention_enabled___d_._n
call fcn.1003cfa0
add esp, 8
jmp 0x10066370
push str.dump_crypto
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065e1b
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065dea
mov dword [ebp - 0x13c], 1
jmp 0x10065df4
mov dword [ebp - 0x13c], 0
mov edx, dword [ebp - 0x13c]
mov dword [0x104f16c4], edx
cmp dword [0x104f16c4], 0
je 0x10065e16
push str.Dumping_of_crypto_API_buffers_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.caller_dump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065e81
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065e50
mov dword [ebp - 0x140], 1
jmp 0x10065e5a
mov dword [ebp - 0x140], 0
mov edx, dword [ebp - 0x140]
mov dword [0x104f169c], edx
cmp dword [0x104f169c], 0
jne 0x10065e7c
push str.Dumping_of_caller_regions_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push 0x103e6138
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065ee7
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065eb6
mov dword [ebp - 0x144], 1
jmp 0x10065ec0
mov dword [ebp - 0x144], 0
mov edx, dword [ebp - 0x144]
mov dword [0x104f16d0], edx
cmp dword [0x104f16d0], 0
je 0x10065ee2
push str.UPX_unpacker_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.yarascan
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065f5c
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065f1c
mov dword [ebp - 0x148], 1
jmp 0x10065f26
mov dword [ebp - 0x148], 0
mov edx, dword [ebp - 0x148]
mov dword [0x104f16ec], edx
cmp dword [0x104f16ec], 0
je 0x10065f4a
push str.In_monitor_YARA_scans_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10065f57
push str.In_monitor_YARA_scans_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.amsidump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10065fd1
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065f91
mov dword [ebp - 0x14c], 1
jmp 0x10065f9b
mov dword [ebp - 0x14c], 0
mov edx, dword [ebp - 0x14c]
mov dword [0x104f16f0], edx
cmp dword [0x104f16f0], 0
je 0x10065fbf
push str.AMSI_dumping_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10065fcc
push str.AMSI_dumping_disabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.minihook
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066037
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066006
mov dword [ebp - 0x150], 1
jmp 0x10066010
mov dword [ebp - 0x150], 0
mov edx, dword [ebp - 0x150]
mov dword [0x104f16f4], edx
cmp dword [0x104f16f4], 0
je 0x10066032
push str.Minimal_hook_set_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.zerohook
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x1006609d
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006606c
mov dword [ebp - 0x154], 1
jmp 0x10066076
mov dword [ebp - 0x154], 0
mov edx, dword [ebp - 0x154]
mov dword [0x104f16f8], edx
cmp dword [0x104f16f8], 0
je 0x10066098
push str.All_hooks_disabled__except_essential__n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.tlsdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066103
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100660d2
mov dword [ebp - 0x158], 1
jmp 0x100660dc
mov dword [ebp - 0x158], 0
mov edx, dword [ebp - 0x158]
mov dword [0x104f16e4], edx
cmp dword [0x104f16e4], 0
je 0x100660fe
push str.TLS_secret_dump_mode_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.regdump
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066169
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066138
mov dword [ebp - 0x15c], 1
jmp 0x10066142
mov dword [ebp - 0x15c], 0
mov edx, dword [ebp - 0x15c]
mov dword [0x104f16e8], edx
cmp dword [0x104f16e8], 0
je 0x10066164
push str.Registry_dump_mode_enabled._n
call fcn.1003cfa0
add esp, 4
jmp 0x10066370
push str.loaderlock
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100661de
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006619e
mov dword [ebp - 0x160], 1
jmp 0x100661a8
mov dword [ebp - 0x160], 0
mov edx, dword [ebp - 0x160]
mov dword [0x104f1708], edx
cmp dword [0x104f1708], 0
je 0x100661cc
push str.plugx
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x10066244
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066213
push str.hancitor
mov eax, dword [ebp - 8]
push eax
call fcn.10251ce6
add esp, 8
test eax, eax
jne 0x100662d0
mov esp, ebp
pop ebp
ret