Function at 0x3001ea20
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x3021be88]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
push 0x3d
push ebx
mov dword [ebp - 0x28], ebx
call fcn.30161610
add esp, 8
test eax, eax
je 0x30021dad
cmp byte [eax + 1], 0x24
lea edi, [eax + 1]
je 0x30021dad
mov edx, edi
mov byte [eax], 0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x3001ea60
sub edx, ecx
mov eax, ebx
mov ecx, str.pipe
mov bl, byte [eax]
cmp bl, byte [ecx]
mov byte [ebp - 0x29], bl
mov ebx, dword [ebp - 0x28]
jne 0x3001eaa0
cmp byte [ebp - 0x29], 0
je 0x3001ea9c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
mov byte [ebp - 0x29], bl
mov ebx, dword [ebp - 0x28]
jne 0x3001eaa0
add eax, 2
add ecx, 2
cmp byte [ebp - 0x29], 0
jne 0x3001ea70
xor eax, eax
jmp 0x3001eaa5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ead7
xor ecx, ecx
test edx, edx
je 0x30021d9b
jmp 0x3001eac0
movsx ax, byte [ecx + edi]
mov word [ecx*2 + 0x3026e840], ax
inc ecx
cmp ecx, edx
jb 0x3001eac0
jmp 0x30021d9b
mov ecx, str.logserver
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001eb00
test dl, dl
je 0x3001eafc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001eb00
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001eae0
xor eax, eax
jmp 0x3001eb05
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001eb21
push 0x104
push edi
push 0x3026ea48
call fcn.3016bc70
add esp, 0xc
jmp 0x30021d9b
mov ecx, str.results
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001eb48
test dl, dl
je 0x3001eb44
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001eb48
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001eb28
xor eax, eax
jmp 0x3001eb4d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001eb9e
push 0x104
push eax
push 0x3026eb4c
call fcn.30162560
add esp, 0xc
push 0x103
push edi
push 0x3026eb4c
call fcn.3016bc70
add esp, 0xc
xor ecx, ecx
lea esp, [esp]
movsx ax, byte [ecx + 0x3026eb4c]
mov word [ecx*2 + 0x3026ec50], ax
inc ecx
cmp ecx, 0x104
jb 0x3001eb80
jmp 0x30021d9b
mov ecx, str.pythonpath
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ebc5
test dl, dl
je 0x3001ebc1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ebc5
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001eba5
xor eax, eax
jmp 0x3001ebca
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ec20
push 0x103
push edi
push 0x3026f164
call fcn.3016bc70
add esp, 0xc
xor ecx, ecx
jmp 0x3001ebf0
movsx ax, byte [ecx + 0x3026f164]
mov word [ecx*2 + 0x3026f268], ax
inc ecx
cmp ecx, 0x104
jb 0x3001ebf0
push 0x3026f268
push str.Python_path_set_to__ws._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
mov ecx, str.file_of_interest
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ec47
test dl, dl
je 0x3001ec43
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ec47
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ec27
xor eax, eax
jmp 0x3001ec4c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ece7
mov ecx, edi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x3001ec60
sub ecx, edx
cmp ecx, 1
jbe 0x30021d9b
cmp byte [edi + 1], 0x3a
jne 0x3001ecd6
lea ecx, [ebp - 0x1c]
call fcn.30029480
push 0x104
push 8
push dword [0x30272510]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.300294b0
mov edx, edi
mov ecx, esi
call fcn.3004cd00
mov ecx, esi
call fcn.3004b1b0
lea ecx, [ebp - 0x10]
mov dword [0x3026f678], eax
call fcn.30029480
push esi
push 0
push dword [0x30272510]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [ebp - 0x10]
call fcn.300294b0
jmp 0x30021d9b
mov ecx, edi
call fcn.3004b1b0
mov dword [0x3026f67c], eax
jmp 0x30021d9b
mov ecx, str.referrer
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ed10
test dl, dl
je 0x3001ed0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ed10
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ecf0
xor eax, eax
jmp 0x3001ed15
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ed36
mov ecx, edi
call fcn.3004b1b0
mov ecx, edi
mov dword [0x3026f680], eax
call fcn.3001e980
mov dword [0x3026f684], eax
jmp 0x30021d9b
mov ecx, str.analyzer
mov eax, ebx
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ed60
test dl, dl
je 0x3001ed5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ed60
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ed40
xor eax, eax
jmp 0x3001ed65
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ee1b
push 0x103
push edi
push 0x3026ee58
call fcn.3016bc70
add esp, 0xc
xor ecx, ecx
jmp 0x3001ed90
movsx ax, byte [ecx + 0x3026ee58]
mov word [ecx*2 + 0x3026ef5c], ax
inc ecx
cmp ecx, 0x104
jb 0x3001ed90
mov ecx, 0x3026ef5c
mov edi, edi
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + 0x512], ax
test ax, ax
jne 0x3001edb0
mov ecx, 0x3026f470
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x3001edd0
sub ecx, edx
sar ecx, 1
cmp ecx, 0xff
jae 0x30021d9b
mov ecx, 0x3026f470
add ecx, 0xfffffffe
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x3001edf3
mov eax, dword [str.dll_]
mov dword [ecx], eax
mov eax, dword [0x301fc3f8]
mov dword [ecx + 4], eax
mov eax, dword [0x301fc3fc]
mov dword [ecx + 8], eax
jmp 0x30021d9b
mov ecx, str.shutdown_mutex
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ee42
test dl, dl
je 0x3001ee3e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ee42
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ee22
xor eax, eax
jmp 0x3001ee47
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ee63
push 0x104
push edi
push 0x3026f688
call fcn.3016bc70
add esp, 0xc
jmp 0x30021d9b
mov ecx, str.first_process
mov eax, ebx
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ee90
test dl, dl
je 0x3001ee8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ee90
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ee70
xor eax, eax
jmp 0x3001ee95
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001eea9
cmp byte [edi], 0x31
sete al
mov dword [0x3026f890], eax
jmp 0x30021d9b
mov ecx, str.startup_time
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001eed0
test dl, dl
je 0x3001eecc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001eed0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001eeb0
xor eax, eax
jmp 0x3001eed5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001eee9
push edi
call fcn.3016af68
mov dword [0x3026f89c], eax
jmp 0x30021d98
mov ecx, str.debug
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ef10
test dl, dl
je 0x3001ef0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ef10
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001eef0
xor eax, eax
jmp 0x3001ef15
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ef29
push edi
call fcn.3016af68
mov dword [0x3026f8bc], eax
jmp 0x30021d98
mov ecx, str.hook_type
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ef50
test dl, dl
je 0x3001ef4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ef50
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ef30
xor eax, eax
jmp 0x3001ef55
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f01c
mov ecx, str.direct
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ef84
test dl, dl
je 0x3001ef80
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ef84
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ef64
xor eax, eax
jmp 0x3001ef89
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ef97
mov dword [0x3026f8c0], eax
jmp 0x30021d9b
mov ecx, str.indirect
mov eax, edi
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001efc0
test dl, dl
je 0x3001efbc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001efc0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001efa0
xor eax, eax
jmp 0x3001efc5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001efd8
mov dword [0x3026f8c0], 5
jmp 0x30021d9b
mov eax, str.safe
lea ecx, [ecx]
mov cl, byte [edi]
cmp cl, byte [eax]
jne 0x3001f000
test cl, cl
je 0x3001effc
mov cl, byte [edi + 1]
cmp cl, byte [eax + 1]
jne 0x3001f000
add edi, 2
add eax, 2
test cl, cl
jne 0x3001efe0
xor eax, eax
jmp 0x3001f005
sbb eax, eax
or eax, 1
test eax, eax
jne 0x30021d9b
mov dword [0x3026f8c0], 0xd
jmp 0x30021d9b
mov ecx, str.disable_hook_content
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f043
test dl, dl
je 0x3001f03f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f043
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f023
xor eax, eax
jmp 0x3001f048
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f05c
push edi
call fcn.3016af68
mov dword [0x3026f8c4], eax
jmp 0x30021d98
mov ecx, str.force_sleepskip
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f083
test dl, dl
je 0x3001f07f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f083
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f063
xor eax, eax
jmp 0x3001f088
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f09c
cmp byte [edi], 0x31
sete al
mov dword [0x3026f8b4], eax
jmp 0x30021d9b
mov ecx, str.serial
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f0c3
test dl, dl
je 0x3001f0bf
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f0c3
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f0a3
xor eax, eax
jmp 0x3001f0c8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f0e2
push 0x10
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8a0], eax
jmp 0x30021d9b
mov ecx, str.sysvol_ctimelow
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f110
test dl, dl
je 0x3001f10c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f110
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f0f0
xor eax, eax
jmp 0x3001f115
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f12f
push 0x10
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8ac], eax
jmp 0x30021d9b
mov ecx, str.sysvol_ctimehigh
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f156
test dl, dl
je 0x3001f152
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f156
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f136
xor eax, eax
jmp 0x3001f15b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f175
push 0x10
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8b0], eax
jmp 0x30021d9b
mov ecx, str.sys32_ctimelow
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f1a0
test dl, dl
je 0x3001f19c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f1a0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f180
xor eax, eax
jmp 0x3001f1a5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f1bf
push 0x10
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8a4], eax
jmp 0x30021d9b
mov ecx, str.sys32_ctimehigh
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f1e6
test dl, dl
je 0x3001f1e2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f1e6
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f1c6
xor eax, eax
jmp 0x3001f1eb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f205
push 0x10
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8a8], eax
jmp 0x30021d9b
mov ecx, str.full_logs
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f230
test dl, dl
je 0x3001f22c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f230
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f210
xor eax, eax
jmp 0x3001f235
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f249
cmp byte [edi], 0x31
sete al
mov dword [0x3026f894], eax
jmp 0x30021d9b
mov ecx, str.force_flush
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f270
test dl, dl
je 0x3001f26c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f270
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f250
xor eax, eax
jmp 0x3001f275
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f289
push edi
call fcn.3016af68
mov dword [0x3026f8b8], eax
jmp 0x30021d98
mov ecx, str.terminate_event
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f2b0
test dl, dl
je 0x3001f2ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f2b0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f290
xor eax, eax
jmp 0x3001f2b5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f2d1
push 0x104
push edi
push 0x3026f78c
call fcn.3016bc70
add esp, 0xc
jmp 0x30021d9b
mov ecx, str.no_stealth
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f2f8
test dl, dl
je 0x3001f2f4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f2f8
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f2d8
xor eax, eax
jmp 0x3001f2fd
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f311
cmp byte [edi], 0x31
sete al
mov dword [0x3026f898], eax
jmp 0x30021d9b
mov ecx, str.buffer_max
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f338
test dl, dl
je 0x3001f334
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f338
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f318
xor eax, eax
jmp 0x3001f33d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f357
push 0xa
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x30234670], eax
jmp 0x30021d9b
mov ecx, str.large_buffer_max
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f380
test dl, dl
je 0x3001f37c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f380
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f360
xor eax, eax
jmp 0x3001f385
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f39f
push 0xa
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x30234674], eax
jmp 0x30021d9b
push str.log_exceptions
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3001f3d3
push edi
call fcn.3016af68
add esp, 4
mov dword [0x302702e4], eax
test eax, eax
mov eax, str.Exception_logging_enabled._n
jne 0x3001f3cd
mov eax, str.Exception_logging_disabled._n
push eax
jmp 0x30021d93
push str.log_breakpoints
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021d78
push str.log_bps
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021d78
mov ecx, str.dropped_limit
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f426
test dl, dl
je 0x3001f422
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f426
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f406
xor eax, eax
jmp 0x3001f42b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f453
push 0xa
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8d8], eax
push eax
push str.Dropped_file_limit_set_to__d._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
mov ecx, str.ntdll_protect
mov eax, ebx
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f480
test dl, dl
je 0x3001f47c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f480
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f460
xor eax, eax
jmp 0x3001f485
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f4ae
push 0xa
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8d0], eax
test eax, eax
mov eax, str.Config:_ntdll_write_protection_enabled.
jne 0x3001f4a8
mov eax, str.Config:_ntdll_write_protection_disabled.
push eax
jmp 0x30021d93
mov ecx, str.ntdll_remap
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f4d5
test dl, dl
je 0x3001f4d1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f4d5
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f4b5
xor eax, eax
jmp 0x3001f4da
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f503
push 0xa
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026f8d4], eax
test eax, eax
mov eax, str.Config:_ntdll_remap_protection_enabled.
jne 0x3001f4fd
mov eax, str.Config:_ntdll_remap_protection_disabled.
push eax
jmp 0x30021d93
mov ecx, str.standalone
mov eax, ebx
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f530
test dl, dl
je 0x3001f52c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f530
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f510
xor eax, eax
jmp 0x3001f535
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f549
cmp byte [edi], 0x31
sete al
mov dword [0x30270314], eax
jmp 0x30021d9b
mov ecx, str.exclude_apis
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f570
test dl, dl
je 0x3001f56c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f570
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f550
xor eax, eax
jmp 0x3001f575
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f5ca
xor ecx, ecx
mov dword [ebp - 0x28], ecx
mov edi, edi
cmp ecx, 0x200
jae 0x30021d9b
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001f5a0
mov byte [esi], 0
mov ecx, edi
call fcn.3001e980
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 0x3026f8e0], eax
add ecx, 4
mov dword [ebp - 0x28], ecx
test esi, esi
je 0x30021d9b
lea edi, [esi + 1]
test edi, edi
jne 0x3001f580
jmp 0x30021d9b
mov ecx, str.exclude_dlls
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f5f1
test dl, dl
je 0x3001f5ed
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f5f1
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f5d1
xor eax, eax
jmp 0x3001f5f6
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f64a
xor ecx, ecx
mov dword [ebp - 0x28], ecx
nop
cmp ecx, 0x200
jae 0x30021d9b
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001f620
mov byte [esi], 0
mov ecx, edi
call fcn.3004b1b0
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 0x3026fae0], eax
add ecx, 4
mov dword [ebp - 0x28], ecx
test esi, esi
je 0x30021d9b
lea edi, [esi + 1]
test edi, edi
jne 0x3001f600
jmp 0x30021d9b
mov ecx, str.base_on_api
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f671
test dl, dl
je 0x3001f66d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f671
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f651
xor eax, eax
jmp 0x3001f676
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f6da
mov dword [ebp - 0x24], eax
lea ecx, [ecx]
cmp eax, 0x200
jae 0x30021d9b
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001f69f
mov byte [esi], 0
mov ecx, edi
call fcn.3001e980
mov ecx, dword [ebp - 0x24]
push edi
push str.Added__s_to_base_on_API_list._n
mov dword [ecx + 0x3026fce0], eax
add ecx, 4
mov dword [ebp - 0x24], ecx
call fcn.30009b40
add esp, 8
test esi, esi
je 0x30021d9b
mov eax, dword [ebp - 0x24]
lea edi, [esi + 1]
test edi, edi
jne 0x3001f680
jmp 0x30021d9b
mov ecx, str.dump_on_api
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f701
test dl, dl
je 0x3001f6fd
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f701
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f6e1
xor eax, eax
jmp 0x3001f706
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f76a
mov dword [ebp - 0x24], eax
lea ecx, [ecx]
cmp eax, 0x200
jae 0x30021d9b
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001f72f
mov byte [esi], 0
mov ecx, edi
call fcn.3001e980
mov ecx, dword [ebp - 0x24]
push edi
push str.Added__s_to_dump_on_API_list._n
mov dword [ecx + 0x3026fee0], eax
add ecx, 4
mov dword [ebp - 0x24], ecx
call fcn.30009b40
add esp, 8
test esi, esi
je 0x30021d9b
mov eax, dword [ebp - 0x24]
lea edi, [esi + 1]
test edi, edi
jne 0x3001f710
jmp 0x30021d9b
mov ecx, str.coverage_modules
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f791
test dl, dl
je 0x3001f78d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f791
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f771
xor eax, eax
jmp 0x3001f796
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f7fa
mov dword [ebp - 0x24], eax
lea ecx, [ecx]
cmp eax, 0x200
jae 0x30021d9b
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001f7bf
mov byte [esi], 0
mov ecx, edi
call fcn.3004b1b0
mov ecx, dword [ebp - 0x24]
push edi
push str.Added__s_to_coverage_modules_list._n
mov dword [ecx + 0x302700e0], eax
add ecx, 4
mov dword [ebp - 0x24], ecx
call fcn.30009b40
add esp, 8
test esi, esi
je 0x30021d9b
mov eax, dword [ebp - 0x24]
lea edi, [esi + 1]
test edi, edi
jne 0x3001f7a0
jmp 0x30021d9b
mov ecx, str.dump_on_api_type
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f821
test dl, dl
je 0x3001f81d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f821
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f801
xor eax, eax
jmp 0x3001f826
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f83f
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302702e0], eax
jmp 0x30021d9b
mov ecx, str.file_offsets
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f866
test dl, dl
je 0x3001f862
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f866
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f846
xor eax, eax
jmp 0x3001f86b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f88a
cmp byte [edi], 0x31
sete al
mov dword [0x30272208], eax
jne 0x30021d9b
push str.Breakpoints_interpreted_as_file_offsets._n
jmp 0x30021d93
push str.export
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3001f8bf
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3026e7c8], eax
push eax
push str.Config:_Export_address_set_to_0x_x
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.patch
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3001f9c0
push 0x3a
push edi
call fcn.30161610
add esp, 8
test eax, eax
je 0x3001f9b6
push 0
lea esi, [eax + 1]
mov byte [eax], 0
push 0
push edi
mov dword [ebp - 0x28], esi
call fcn.3016b8f2
add esp, 0xc
mov dword [ebp - 0x24], eax
push 0x2b
push esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3001f939
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
add esp, 0xc
push eax
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
jmp 0x3001f970
push 0x2d
push esi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001f96d
push 0
lea ecx, [esi + 1]
push 0
push ecx
call fcn.3016b8f2
add esp, 0xc
neg eax
push eax
push str.Config:_Delta_0x_x._n
call fcn.30009b40
add esp, 8
mov byte [esi], 0
mov esi, dword [ebp - 0x28]
push 0
push 0
push esi
call fcn.3016b8f2
mov esi, eax
add esp, 0xc
test esi, esi
je 0x3001f9a3
push dword [ebp - 0x24]
push esi
push str.Config:_patching_address_0x_p_with_byte_0x_x
call fcn.30009b40
mov dl, byte [ebp - 0x24]
add esp, 0xc
mov ecx, esi
call fcn.300060f0
jmp 0x30021d9b
push edi
push str.Config:_patch_address_missing_invalid:__s
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.Config:_patch_byte_missing
jmp 0x30021d93
push 0x301fc8bc
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3001fabd
mov eax, edi
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], ecx
cmp ecx, 0x400
jae 0x30021d9b
push 0x3a
push eax
call fcn.30161610
add esp, 8
test eax, eax
je 0x3001f9fe
mov byte [eax], 0
push 0x2b
push edi
mov dword [ebp - 0x24], 0
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001fa25
push 0
lea ecx, [esi + 1]
push 0
push ecx
call fcn.3016b8f2
jmp 0x3001fa45
push 0x2d
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001fa5c
push 0
lea eax, [esi + 1]
push 0
push eax
call fcn.3016b8f2
neg eax
add esp, 0xc
mov dword [ebp - 0x24], eax
push eax
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov byte [esi], 0
add esp, 8
push 0
push 0
push dword [ebp - 0x20]
call fcn.3016b8f2
mov ecx, dword [ebp - 0x28]
add esp, 0xc
add eax, dword [ebp - 0x24]
mov dword [ecx + 0x302709f8], eax
add ecx, 4
mov dword [ebp - 0x28], ecx
mov eax, dword [ecx + 0x302709f4]
test eax, eax
je 0x3001faa2
push eax
push str.Config:_Added_0x_p_to_breakpoint_list._n
call fcn.30009b40
mov ecx, dword [ebp - 0x28]
add esp, 8
mov dword [0x30270328], 1
test esi, esi
je 0x30021d9b
lea eax, [esi + 1]
mov dword [ebp - 0x20], eax
test eax, eax
jne 0x3001f9e0
jmp 0x30021d9b
push str.action
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3001fb4b
xor ecx, ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
jmp 0x3001fae0
mov dword [ebp - 0x20], ecx
cmp eax, 0x400
jae 0x30021d9b
push 0x7c
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001fb02
mov byte [esi], 0
mov ecx, edi
call fcn.3001e980
mov ecx, dword [ebp - 0x28]
inc dword [ebp - 0x24]
mov dword [ecx + 0x30271df8], eax
add ecx, 4
mov dword [ebp - 0x28], ecx
push dword [ecx + 0x30271df4]
push dword [ebp - 0x20]
push str.Config:_Action__d_set_to__s.
call fcn.30009b40
add esp, 0xc
test esi, esi
je 0x30021d9b
mov eax, dword [ebp - 0x28]
lea edi, [esi + 1]
mov ecx, dword [ebp - 0x24]
test edi, edi
jne 0x3001fae0
jmp 0x30021d9b
push 0x301fc910
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3001fda7
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001fc4c
cmp byte [esi + 1], 0x3a
jne 0x3001fc4c
mov dword [0x3027047c], 0
push edi
mov word [esi], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esi, 2
mov dword [ebp - 0x20], eax
mov ecx, esi
call fcn.3001e980
mov ecx, edi
mov dword [0x3027036c], eax
call fcn.3001e980
mov edi, dword [ebp - 0x20]
mov dword [0x30270370], eax
test edi, edi
je 0x3001fbca
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x3027047c], eax
jmp 0x3001fbdd
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.30009b40
mov eax, dword [0x3027047c]
add esp, 8
test eax, eax
je 0x3001fc11
mov byte [0x30270479], 1
push dword [0x3027036c]
push dword [0x30270370]
push eax
push str.Config:_bp0_set_to_0x_p___s::_s_._n
mov dword [0x30270328], 1
call fcn.30009b40
add esp, 0x10
jmp 0x30021d9b
test edi, edi
je 0x30021d9b
push 0
push 0
push esi
call fcn.3016b8f2
add esp, 0xc
test eax, eax
je 0x3001fc33
add eax, edi
mov dword [0x3027047c], eax
jmp 0x3001fbe8
push esi
push dword [0x30270370]
push str.Config:_Failed_to_get_address_for_function__s::_s_n
call fcn.30009b40
add esp, 0xc
jmp 0x30021d9b
push 4
push str.zero
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
jne 0x3001fc76
push str.Config:_bp0_set_to_zero._n
call fcn.30009b40
mov byte [0x3027048c], 1
jmp 0x30021d98
push 2
push 0x301fc9c0
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x3001fd97
push 0xa
push str.entrypoint
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x3001fd97
push 0x2b
push edi
xor esi, esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3001fcc9
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.3016b8f2
mov esi, eax
jmp 0x3001fcec
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3001fd03
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
cmp eax, dword [0x3027047c]
je 0x30021d9b
cmp eax, dword [0x30270480]
je 0x30021d9b
cmp eax, dword [0x30270484]
je 0x30021d9b
cmp eax, dword [0x30270488]
je 0x30021d9b
mov dword [0x3027047c], eax
mov dword [0x30270328], 1
cmp eax, 0xffffffff
jne 0x3001fd66
push 0
push 0
push edi
call fcn.3016b860
add esp, 0xc
mov dword [0x3027047c], eax
test esi, esi
je 0x3001fd84
push eax
push str.Config:_bp0_was_0x_p._n
call fcn.30009b40
mov eax, dword [0x3027047c]
add esp, 8
add eax, esi
mov dword [0x3027047c], eax
push eax
push str.Config:_bp0_set_to_0x_p._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push dword [0x3027047c]
push str.Config:_bp0_set_to_entry_point._n
jmp 0x300206a8
push 0x301fca28
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3001ffdc
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3001fe81
cmp byte [esi + 1], 0x3a
jne 0x3001fe81
mov dword [0x30270480], 0
push edi
mov word [esi], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esi, 2
mov dword [ebp - 0x20], eax
mov ecx, esi
call fcn.3001e980
mov ecx, edi
mov dword [0x3027036c], eax
call fcn.3001e980
mov edi, dword [ebp - 0x20]
mov dword [0x30270370], eax
test edi, edi
je 0x3001fe26
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x30270480], eax
jmp 0x3001fe39
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.30009b40
mov eax, dword [0x30270480]
add esp, 8
test eax, eax
je 0x3001fe5b
mov byte [0x30270479], 1
push dword [0x3027036c]
push dword [0x30270370]
push eax
push str.Config:_bp1_set_to_0x_p___s::_s_._n
jmp 0x3001fbfa
test edi, edi
je 0x30021d9b
push 0
push 0
push esi
call fcn.3016b8f2
add esp, 0xc
test eax, eax
je 0x3001fc33
add eax, edi
mov dword [0x30270480], eax
jmp 0x3001fe44
push 4
push str.zero
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
jne 0x3001feab
push str.Config:_bp1_set_to_zero._n
call fcn.30009b40
mov byte [0x3027048d], 1
jmp 0x30021d98
push 2
push 0x301fc9c0
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x3001ffcc
push 0xa
push str.entrypoint
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x3001ffcc
push 0x2b
push edi
xor esi, esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3001fefe
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.3016b8f2
mov esi, eax
jmp 0x3001ff21
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3001ff38
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
cmp eax, dword [0x3027047c]
je 0x30021d9b
cmp eax, dword [0x30270480]
je 0x30021d9b
cmp eax, dword [0x30270484]
je 0x30021d9b
cmp eax, dword [0x30270488]
je 0x30021d9b
mov dword [0x30270480], eax
mov dword [0x30270328], 1
cmp eax, 0xffffffff
jne 0x3001ff9b
push 0
push 0
push edi
call fcn.3016b860
add esp, 0xc
mov dword [0x30270480], eax
test esi, esi
je 0x3001ffb9
push eax
push str.Config:_bp1_was_0x_p._n
call fcn.30009b40
mov eax, dword [0x30270480]
add esp, 8
add eax, esi
mov dword [0x30270480], eax
push eax
push str.Config:_bp1_set_to_0x_p._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push dword [0x30270480]
push str.Config:_bp1_set_to_entry_point._n
jmp 0x300206a8
push 0x301fcac4
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020211
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x300200b6
cmp byte [esi + 1], 0x3a
jne 0x300200b6
mov dword [0x30270484], 0
push edi
mov word [esi], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esi, 2
mov dword [ebp - 0x20], eax
mov ecx, esi
call fcn.3001e980
mov ecx, edi
mov dword [0x3027036c], eax
call fcn.3001e980
mov edi, dword [ebp - 0x20]
mov dword [0x30270370], eax
test edi, edi
je 0x3002005b
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x30270484], eax
jmp 0x3002006e
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.30009b40
mov eax, dword [0x30270484]
add esp, 8
test eax, eax
je 0x30020090
mov byte [0x30270479], 1
push dword [0x3027036c]
push dword [0x30270370]
push eax
push str.Config:_bp2_set_to_0x_p___s::_s_._n
jmp 0x3001fbfa
test edi, edi
je 0x30021d9b
push 0
push 0
push esi
call fcn.3016b8f2
add esp, 0xc
test eax, eax
je 0x3001fc33
add eax, edi
mov dword [0x30270484], eax
jmp 0x30020079
push 4
push str.zero
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
jne 0x300200e0
push str.Config:_bp2_set_to_zero._n
call fcn.30009b40
mov byte [0x3027048e], 1
jmp 0x30021d98
push 2
push 0x301fc9c0
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x30020201
push 0xa
push str.entrypoint
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x30020201
push 0x2b
push edi
xor esi, esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020133
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.3016b8f2
mov esi, eax
jmp 0x30020156
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3002016d
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
cmp eax, dword [0x3027047c]
je 0x30021d9b
cmp eax, dword [0x30270480]
je 0x30021d9b
cmp eax, dword [0x30270484]
je 0x30021d9b
cmp eax, dword [0x30270488]
je 0x30021d9b
mov dword [0x30270484], eax
mov dword [0x30270328], 1
cmp eax, 0xffffffff
jne 0x300201d0
push 0
push 0
push edi
call fcn.3016b860
add esp, 0xc
mov dword [0x30270484], eax
test esi, esi
je 0x300201ee
push eax
push str.Config:_bp2_was_0x_p._n
call fcn.30009b40
mov eax, dword [0x30270484]
add esp, 8
add eax, esi
mov dword [0x30270484], eax
push eax
push str.Config:_bp2_set_to_0x_p._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push dword [0x30270484]
push str.Config:_bp2_set_to_entry_point._n
jmp 0x300206a8
push 0x301fcb60
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020466
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x3002030b
cmp byte [esi + 1], 0x3a
jne 0x3002030b
mov dword [0x30270488], 0
push edi
mov word [esi], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esi, 2
mov dword [ebp - 0x20], eax
mov ecx, esi
call fcn.3001e980
mov ecx, edi
mov dword [0x3027036c], eax
call fcn.3001e980
mov ecx, dword [ebp - 0x20]
mov dword [0x30270370], eax
test ecx, ecx
je 0x30020290
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x30270488], eax
jmp 0x300202a3
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.30009b40
mov eax, dword [0x30270488]
add esp, 8
test eax, eax
je 0x300202c5
push dword [0x3027036c]
mov byte [0x30270479], 1
push dword [0x30270370]
push eax
push str.Config:_bp3_set_to_0x_p___s::_s_._n
jmp 0x3001fbfa
push 0
push 0
push esi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x30270488], eax
push dword [0x3027036c]
push dword [0x30270370]
test eax, eax
je 0x300202f9
push eax
mov byte [0x30270479], 1
push str.Config:_bp3_set_to_0x_p___s::_s_._n
jmp 0x3001fbfa
push str.Config:_Failed_to_get_address_for_function__s::_s._n
call fcn.30009b40
add esp, 0xc
jmp 0x30021d9b
push 4
push str.zero
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
jne 0x30020335
push str.Config:_bp3_set_to_zero._n
call fcn.30009b40
mov byte [0x3027048f], 1
jmp 0x30021d98
push 2
push 0x301fc9c0
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x30020456
push 0xa
push str.entrypoint
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x30020456
push 0x2b
push edi
xor esi, esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020388
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.3016b8f2
mov esi, eax
jmp 0x300203ab
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x300203c2
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
cmp eax, dword [0x3027047c]
je 0x30021d9b
cmp eax, dword [0x30270480]
je 0x30021d9b
cmp eax, dword [0x30270484]
je 0x30021d9b
cmp eax, dword [0x30270488]
je 0x30021d9b
mov dword [0x30270488], eax
mov dword [0x30270328], 1
cmp eax, 0xffffffff
jne 0x30020425
push 0
push 0
push edi
call fcn.3016b860
add esp, 0xc
mov dword [0x30270488], eax
test esi, esi
je 0x30020443
push eax
push str.Config:_bp3_was_0x_p._n
call fcn.30009b40
mov eax, dword [0x30270488]
add esp, 8
add eax, esi
mov dword [0x30270488], eax
push eax
push str.Config:_bp3_set_to_0x_p._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push dword [0x30270488]
push str.Config:_bp3_set_to_entry_point._n
jmp 0x300206a8
push 0x301fcc30
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x300206c9
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x30020552
cmp byte [esi + 1], 0x3a
jne 0x30020552
mov dword [0x30270490], 0
push edi
mov word [esi], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esi, 2
mov dword [ebp - 0x20], eax
mov ecx, esi
call fcn.3001e980
mov ecx, edi
mov dword [0x3027036c], eax
call fcn.3001e980
mov ecx, dword [ebp - 0x20]
mov dword [0x30270370], eax
test ecx, ecx
je 0x300204e5
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x30270490], eax
jmp 0x300204f8
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.30009b40
mov eax, dword [0x30270490]
add esp, 8
test eax, eax
je 0x3002051a
push dword [0x3027036c]
mov byte [0x30270479], 1
push dword [0x30270370]
push eax
push str.Config:_bp4_set_to_0x_p___s::_s_._n
jmp 0x3001fbfa
push 0
push 0
push esi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x30270490], eax
push dword [0x3027036c]
push dword [0x30270370]
test eax, eax
je 0x300202f9
push eax
mov byte [0x30270479], 1
push str.Config:_bp4_set_to_0x_p___s::_s_._n
jmp 0x3001fbfa
push 4
push str.zero
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
jne 0x3002057c
push str.Config:_bp4_set_to_zero._n
call fcn.30009b40
mov byte [0x302704a0], 1
jmp 0x30021d98
push 2
push 0x301fc9c0
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x3002069d
push 0xa
push str.entrypoint
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
je 0x3002069d
push 0x2b
push edi
xor esi, esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x300205cf
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.3016b8f2
mov esi, eax
jmp 0x300205f2
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020609
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
cmp eax, dword [0x3027047c]
je 0x30021d9b
cmp eax, dword [0x30270480]
je 0x30021d9b
cmp eax, dword [0x30270484]
je 0x30021d9b
cmp eax, dword [0x30270488]
je 0x30021d9b
mov dword [0x30270490], eax
mov dword [0x30270328], 1
cmp eax, 0xffffffff
jne 0x3002066c
push 0
push 0
push edi
call fcn.3016b860
add esp, 0xc
mov dword [0x30270490], eax
test esi, esi
je 0x3002068a
push eax
push str.Config:_bp4_was_0x_p._n
call fcn.30009b40
mov eax, dword [0x30270490]
add esp, 8
add eax, esi
mov dword [0x30270490], eax
push eax
push str.Config:_bp4_set_to_0x_p._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push dword [0x30270490]
push str.Config:_bp4_set_to_entry_point._n
call fcn.30009b40
add esp, 8
mov dword [0x30272c44], 1
mov dword [0x30270328], 1
jmp 0x30021d9b
push 0x301fcccc
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020792
push 0x2b
push edi
xor esi, esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020702
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.3016b8f2
mov esi, eax
jmp 0x30020725
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3002073c
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704a4], eax
test eax, eax
je 0x30021d9b
mov dword [0x30270328], 1
test esi, esi
je 0x3002077f
push esi
push eax
push str.Config:_br0_was_0x_x__delta_0x_x_._n
call fcn.30009b40
mov eax, dword [0x302704a4]
add esp, 0xc
add eax, esi
mov dword [0x302704a4], eax
push eax
push str.Config:_br0_set_to_0x_x__break_on_return__n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push 0x301fcd20
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3002085b
push 0x2b
push edi
xor esi, esi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x300207cb
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.3016b8f2
mov esi, eax
jmp 0x300207ee
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020805
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704a8], eax
test eax, eax
je 0x30021d9b
mov dword [0x30270328], 1
test esi, esi
je 0x30020848
push esi
push eax
push str.Config:_br1_was_0x_x__delta_0x_x_._n
call fcn.30009b40
mov eax, dword [0x302704a8]
add esp, 0xc
add eax, esi
mov dword [0x302704a8], eax
push eax
push str.Config:_br1_set_to_0x_x__break_on_return__n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push 0x301fcd74
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x300208a2
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704ac], eax
test eax, eax
je 0x30021d9b
push eax
push str.Config:_br2_set_to_0x_x__break_on_return__n
mov dword [0x30270328], 1
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push 0x301fcda4
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x300208e9
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704b0], eax
test eax, eax
je 0x30021d9b
push eax
push str.Config:_br3_set_to_0x_x__break_on_return__n
mov dword [0x30270328], 1
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.sysbp
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020a0e
xor esi, esi
mov dword [ebp - 0x20], edi
mov eax, edi
jmp 0x30020910
cmp esi, 0x400
jae 0x30021d9b
push 0x3a
push eax
call fcn.30161610
add esp, 8
test eax, eax
je 0x3002092e
mov byte [eax], 0
push 0x2b
push edi
mov dword [ebp - 0x28], 0
call fcn.30161610
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
je 0x30020956
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.3016b8f2
jmp 0x30020975
push 0x2d
push edi
call fcn.30161610
add esp, 8
mov dword [ebp - 0x24], eax
test eax, eax
je 0x3002098f
push 0
inc eax
push 0
push eax
call fcn.3016b8f2
neg eax
add esp, 0xc
mov dword [ebp - 0x28], eax
push eax
push str.Config:_Delta_0x_x._n
call fcn.30009b40
mov eax, dword [ebp - 0x24]
add esp, 8
mov byte [eax], 0
xor eax, eax
cmp dword [esi*4 + 0x30270df8], 0
je 0x300209c7
inc esi
cmp dword [esi*4 + 0x30270df8], 0
je 0x300209c7
inc esi
cmp dword [esi*4 + 0x30270df8], 0
je 0x300209c7
inc esi
cmp dword [esi*4 + 0x30270df8], 0
je 0x300209c7
add eax, 4
inc esi
cmp eax, 0x400
jb 0x30020991
cmp esi, 0x400
jae 0x300209f2
push 0
push 0
push dword [ebp - 0x20]
call fcn.3016b8f2
add esp, 0xc
add eax, dword [ebp - 0x28]
mov dword [esi*4 + 0x30270df8], eax
mov dword [0x30270328], 1
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x30021d9b
add eax, 1
mov dword [ebp - 0x20], eax
jne 0x30020910
jmp 0x30021d9b
push str.sysbpmode
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020a44
push 0xa
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302721fc], eax
push eax
push str.Syscall_breakpoint_mode_set_to__d._n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.count0
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020a79
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704b4], eax
push eax
push str.Config:_Count_for_breakpoint_0_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.count1
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020aae
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704b8], eax
push eax
push str.Config:_Count_for_breakpoint_1_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.count2
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020ae3
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704bc], eax
push eax
push str.Config:_Count_for_breakpoint_2_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.count3
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020b18
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704c0], eax
push eax
push str.Config:_Count_for_breakpoint_3_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push 0x301fcedc
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020b4d
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704c4], eax
push eax
push str.Config:_Hit_count_for_breakpoint_0_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push 0x301fcf10
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020b82
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704c8], eax
push eax
push str.Config:_Hit_count_for_breakpoint_1_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push 0x301fcf44
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020bb7
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704cc], eax
push eax
push str.Config:_Hit_count_for_breakpoint_2_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push 0x301fcf78
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020bec
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704d0], eax
push eax
push str.Config:_Hit_count_for_breakpoint_3_set_to__d_n
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.depth
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020c4b
push 3
push 0x301fcfb4
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
jne 0x30020c26
mov dword [0x302728d4], 0x7fffffff
push str.Config:_Trace_depth_set_to_all
jmp 0x30021d93
push 0xa
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302728d4], eax
push eax
push str.Config:_Trace_depth_set_to_0x_x
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.count
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020caa
push 3
push 0x301fcfb4
push edi
call fcn.30169a61
add esp, 0xc
test eax, eax
jne 0x30020c85
mov dword [0x3027255c], 0x7fffffff
push str.Config:_Trace_instruction_count_set_to_all
jmp 0x30021d93
push 0xa
push 0
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3027255c], eax
push eax
push str.Config:_Trace_instruction_count_set_to_0x_x
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.step_out
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020cfb
push eax
push eax
push edi
mov dword [0x30270328], 1
call fcn.3016b8f2
add esp, 0xc
mov dword [0x3027047c], eax
test eax, eax
je 0x30021d9b
push eax
push str.Config:_Step_out_breakpoint_set_to_0x_x._n
mov dword [0x30272204], 0x31
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.dumpsize
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020d6f
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302729f0], eax
test eax, eax
je 0x30020d34
push eax
push str.Config:_DumpSize_set_to_0x_x
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
mov ecx, edi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30020d40
sub ecx, edx
push ecx
push edi
push 0x30272580
call fcn.3016bc70
add esp, 0xc
push 0x30272580
push str.Config:_DumpSize_set_to_string___s_.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.action0
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020dcf
push 0x104
push eax
push 0x302728e0
call fcn.30162560
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30020da0
sub ecx, edx
push ecx
push edi
push 0x302728e0
call fcn.3016bc70
add esp, 0xc
push 0x302728e0
push str.Config:_Action0_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.action1
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020e2f
push 0x104
push eax
push 0x30272b40
call fcn.30162560
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30020e00
sub ecx, edx
push ecx
push edi
push 0x30272b40
call fcn.3016bc70
add esp, 0xc
push 0x30272b40
push str.Config:_Action1_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.action2
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020e8f
push 0x104
push eax
push 0x302726a0
call fcn.30162560
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30020e60
sub ecx, edx
push ecx
push edi
push 0x302726a0
call fcn.3016bc70
add esp, 0xc
push 0x302726a0
push str.Config:_Action2_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.action3
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30020eef
push 0x104
push eax
push 0x30272a20
call fcn.30162560
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30020ec0
sub ecx, edx
push ecx
push edi
push 0x30272a20
call fcn.3016bc70
add esp, 0xc
push 0x30272a20
push str.Config:_Action3_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.instruction0
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021d24
push str.instr0
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021d24
push str.instruction1
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021ccc
push str.instr1
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021ccc
push str.instruction2
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021c6d
push str.instr2
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021c6d
push str.instruction3
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021c11
push str.instr3
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
je 0x30021c11
push str.procname0
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30021008
lea ecx, [ebp - 0x10]
call fcn.30029480
push 0x104
push 8
push dword [0x30272510]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.300294b0
mov ecx, edi
mov dword [0x30272558], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30020fe1
sub ecx, edx
push ecx
push edi
push esi
call fcn.3016bc70
add esp, 0xc
push edi
push str.Config:_procname0_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.break_on_return
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30021055
push 0x104
push edi
push 0x30270374
mov dword [0x30270328], 1
call fcn.3016bc70
add esp, 0xc
push 0x30270374
push str.Config:_Break_on_return_set_to__s.
call fcn.30009b40
add esp, 8
mov byte [0x30270478], 1
jmp 0x30021d9b
push str.trace_all
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30021094
push 0xa
push eax
push edi
mov dword [0x30270328], 1
call fcn.3016b8f2
add esp, 0xc
mov dword [0x30272200], eax
test eax, eax
je 0x30021d9b
push str.Config:_Trace_all_enabled._n
jmp 0x30021d93
push str.trace_into_api
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x300210ff
xor ebx, ebx
cmp ebx, 0x200
jae 0x300210ed
push 0x3a
push edi
call fcn.30161610
mov esi, eax
add esp, 8
test esi, esi
je 0x300210c4
mov byte [esi], 0
mov ecx, edi
call fcn.3001e980
push edi
mov dword [ebx + 0x3027221c], eax
add ebx, 4
push str.Config:_Added__s_to_trace_into_API_list._n
call fcn.30009b40
add esp, 8
test esi, esi
je 0x300210ed
lea edi, [esi + 1]
test edi, edi
jne 0x300210a8
mov ebx, dword [ebp - 0x28]
mov dword [0x30270328], 1
jmp 0x30021d9b
push str.dumptype0
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30021126
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704d4], eax
jmp 0x30021d9b
push str.dumptype1
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3002114d
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704d8], eax
jmp 0x30021d9b
push str.dumptype2
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x30021174
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704dc], eax
jmp 0x30021d9b
push str.dumptype3
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3002119b
push eax
push eax
push edi
call fcn.3016b8f2
add esp, 0xc
mov dword [0x302704e0], eax
jmp 0x30021d9b
push str.typestring
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x300211f4
push 0x104
push eax
push 0x302704e4
call fcn.30162560
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x300211c5
sub ecx, edx
push ecx
push edi
push 0x302704e4
call fcn.3016bc70
add esp, 0xc
push 0x302704e4
push str.Config:_typestring_set_to__s
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.typestring0
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3002124f
push 0x104
push eax
push 0x302705e8
call fcn.30162560
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021220
sub ecx, edx
push ecx
push edi
push 0x302705e8
call fcn.3016bc70
add esp, 0xc
push 0x302705e8
push str.Config:_typestring0_set_to__s
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
push str.typestring1
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x300212af
push 0x104
push eax
push 0x302706ec
call fcn.30162560
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021280
push str.typestring2
push ebx
call fcn.30169d90
add esp, 8
test eax, eax
jne 0x3002130f
lea ecx, [ebp - 0x10]
call fcn.30029480
push 0x104
push 8
push dword [0x30272510]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.300294b0
mov ecx, edi
mov dword [0x30272c50], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021c41
sub ecx, edx
push ecx
push edi
push dword [0x302729e8]
call fcn.3016bc70
add esp, 0xc
push edi
push str.Config:_Instruction3_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
lea ecx, [ebp - 0x10]
call fcn.30029480
push 0x104
push 8
push dword [0x30272510]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.300294b0
mov ecx, edi
mov dword [0x30272c50], esi
lea edx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021ca0
sub ecx, edx
push ecx
push edi
push dword [0x30272c54]
call fcn.3016bc70
add esp, 0xc
push edi
push str.Config:_Instruction2_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
lea ecx, [ebp - 0x10]
call fcn.30029480
push 0x104
push 8
push dword [0x30272510]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.300294b0
mov ecx, edi
mov dword [0x30272c50], esi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021d00
sub ecx, edx
push ecx
push edi
push esi
call fcn.3016bc70
add esp, 0xc
push edi
push str.Config:_Instruction1_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
lea ecx, [ebp - 0x10]
call fcn.30029480
push 0x104
push 8
push dword [0x30272510]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.300294b0
mov ecx, edi
mov dword [0x30272c4c], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021d54
sub ecx, edx
push ecx
push edi
push esi
call fcn.3016bc70
add esp, 0xc
push edi
push str.Config:_Instruction0_set_to__s.
call fcn.30009b40
add esp, 8
jmp 0x30021d9b
xor eax, eax
cmp byte [edi], 0x31
sete al
mov dword [0x3027030c], eax
jne 0x30021d8e
push str.Breakpoint_logging_to_behavior_log_enabled._n
jmp 0x30021d93
push str.Breakpoint_logging_to_behavior_log_disabled._n
call fcn.30009b40
add esp, 4
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021da0
sub ecx, edx
mov byte [ecx + ebx], 0x3d
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.3015f3bd
mov esp, ebp
pop ebp
ret