Function at 0x10062a90
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
push 0x3d
mov eax, dword [ebp + 8]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10062ab8
mov ecx, dword [ebp - 0xc]
mov byte [ecx], 0
jmp 0x10062abd
jmp 0x1006691c
mov dword [ebp - 0x168], 0
mov edx, dword [ebp + 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 4], eax
push str.pipe
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062b06
push 0x104
mov edx, dword [ebp - 4]
push edx
push 0x104f0658
call fcn.1025c470
add esp, 0xc
jmp 0x1006691c
push str.logpipe
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062b36
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f075c
call fcn.1025c470
add esp, 0xc
jmp 0x1006691c
push str.shutdown_mutex
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062b66
push 0x104
mov eax, dword [ebp - 4]
push eax
push 0x104f0860
call fcn.1025c470
add esp, 0xc
jmp 0x1006691c
push str.first_process
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062bb5
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062b9b
mov dword [ebp - 0xa0], 1
jmp 0x10062ba5
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [0x104f0964], eax
jmp 0x1006691c
push str.startup_time
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062be4
push 0xa
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f0968], eax
jmp 0x1006691c
push str.force_sleepskip
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062c34
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062c19
mov dword [ebp - 0xa4], 1
jmp 0x10062c23
mov dword [ebp - 0xa4], 0
mov edx, dword [ebp - 0xa4]
mov dword [0x104f096c], edx
jmp 0x1006691c
push str.hashes_path
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062c64
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f0970
call fcn.1025c470
add esp, 0xc
jmp 0x1006691c
push str.diffing_enable
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062cb4
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10062c99
mov dword [ebp - 0xa8], 1
jmp 0x10062ca3
mov dword [ebp - 0xa8], 0
mov ecx, dword [ebp - 0xa8]
mov dword [0x104f0a74], ecx
jmp 0x1006691c
push str.track
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062d04
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10062ce9
mov dword [ebp - 0xac], 1
jmp 0x10062cf3
mov dword [ebp - 0xac], 0
mov ecx, dword [ebp - 0xac]
mov dword [0x104f0a78], ecx
jmp 0x1006691c
push str.mode
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062d2f
mov eax, dword [ebp - 4]
push eax
call fcn.10062920
add esp, 4
mov dword [0x104f0a7c], eax
jmp 0x1006691c
push str.disguise_memory
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062d7e
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062d64
mov dword [ebp - 0xb0], 1
jmp 0x10062d6e
mov dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [0x104f0a80], eax
jmp 0x1006691c
push str.disguise_cpu
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062dcd
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062db3
mov dword [ebp - 0xb4], 1
jmp 0x10062dbd
mov dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [0x104f0a84], eax
jmp 0x1006691c
push str.disguise_sid
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062e1c
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062e02
mov dword [ebp - 0xb8], 1
jmp 0x10062e0c
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [0x104f0a88], eax
jmp 0x1006691c
push str.disguise_drivername
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062e6b
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10062e51
mov dword [ebp - 0xbc], 1
jmp 0x10062e5b
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [0x104f0a8c], eax
jmp 0x1006691c
push str.disguise_hostname
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062ea7
push 0xf
mov edx, dword [ebp - 4]
push edx
push 0x104f0a90
call fcn.1025c470
add esp, 0xc
mov eax, 1
imul ecx, eax, 0xf
mov byte [ecx + 0x104f0a90], 0
jmp 0x1006691c
push str.disguise_username
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062ee3
push 0x14
mov eax, dword [ebp - 4]
push eax
push 0x104f0aa0
call fcn.1025c470
add esp, 0xc
mov ecx, 1
imul edx, ecx, 0x14
mov byte [edx + 0x104f0aa0], 0
jmp 0x1006691c
push str.pipe_pid
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062f33
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062f18
mov dword [ebp - 0xc0], 1
jmp 0x10062f22
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 0xc0]
mov dword [0x104f0ab8], edx
jmp 0x1006691c
push str.trigger
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062f63
push 0x114
push 0x104f0bc4
mov ecx, dword [ebp - 4]
push ecx
call fcn.1007d050
add esp, 0xc
jmp 0x1006691c
push str.set_language
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062f90
push 0x20
push 0x104f0dec
mov eax, dword [ebp - 4]
push eax
call fcn.1007d050
add esp, 0xc
jmp 0x1006691c
push str.hide_keyboard
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10062fc0
push 0x104
mov edx, dword [ebp - 4]
push edx
push 0x104f0abc
call fcn.1025c470
add esp, 0xc
jmp 0x1006691c
push str.hide_python
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063010
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10062ff5
mov dword [ebp - 0xc4], 1
jmp 0x10062fff
mov dword [ebp - 0xc4], 0
mov edx, dword [ebp - 0xc4]
mov dword [0x104f0bc0], edx
jmp 0x1006691c
push str.trap_dirname_count
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x1006304d
mov ecx, 1
imul edx, ecx, 0
add edx, dword [ebp - 4]
push edx
call fcn.1025b92f
add esp, 4
mov dword [0x104f0e2c], eax
mov dword [0x104f0e34], 0
jmp 0x1006691c
cmp dword [0x104f0e2c], 0
jle 0x100630a2
push str.ransomware_trap_dirname
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100630a2
cmp dword [0x104f0e34], 0x32
jge 0x1006309d
push 0x104
imul ecx, dword [0x104f0e34], 0x208
add ecx, dword [0x104f0e30]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.1007d050
add esp, 0xc
lock inc dword [0x104f0e34]
jmp 0x1006691c
push str.results
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063105
push 0x103
mov ecx, dword [ebp - 4]
push ecx
push 0x104f2168
call fcn.1025c470
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x100630df
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 0x104
jae 0x10063100
mov eax, dword [ebp - 0x10]
movsx cx, byte [eax + 0x104f2168]
mov edx, dword [ebp - 0x10]
mov word [edx*2 + 0x104f226c], cx
jmp 0x100630d6
jmp 0x1006691c
push str.pythonpath
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x1006317a
push 0x103
mov ecx, dword [ebp - 4]
push ecx
push 0x104f2780
call fcn.1025c470
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10063142
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 0x104
jae 0x10063163
mov eax, dword [ebp - 0x10]
movsx cx, byte [eax + 0x104f2780]
mov edx, dword [ebp - 0x10]
mov word [edx*2 + 0x104f2884], cx
jmp 0x10063139
push 0x104f2884
push str.Python_path_set_to__ws._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.referrer
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100631b6
mov ecx, dword [ebp - 4]
push ecx
call fcn.10074100
add esp, 4
mov dword [0x104f2a94], eax
mov edx, dword [ebp - 4]
push edx
call fcn.100628d0
add esp, 4
mov dword [0x104f2a98], eax
jmp 0x1006691c
push str.analyzer
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063255
push 0x103
mov ecx, dword [ebp - 4]
push ecx
push 0x104f2474
call fcn.1025c470
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x100631f7
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 0x104
jae 0x10063218
mov eax, dword [ebp - 0x10]
movsx cx, byte [eax + 0x104f2474]
mov edx, dword [ebp - 0x10]
mov word [edx*2 + 0x104f2578], cx
jmp 0x100631ee
push 0x104f2578
push 0x104f2a9c
call fcn.10259a6d
add esp, 8
push 0x104f2a9c
call fcn.1025241f
add esp, 4
cmp eax, 0xff
jae 0x10063250
push str.dll_
push 0x104f2a9c
call fcn.1025c662
add esp, 8
jmp 0x1006691c
push str.debug
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063280
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025b92f
add esp, 4
mov dword [0x104f2ca4], eax
jmp 0x1006691c
push str.disable_hook_content
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100632ab
mov eax, dword [ebp - 4]
push eax
call fcn.1025b92f
add esp, 4
mov dword [0x104f2ca8], eax
jmp 0x1006691c
push str.serial
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100632da
push 0x10
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f2cac], eax
jmp 0x1006691c
push str.sysvol_ctimelow
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063309
push 0x10
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f2cb8], eax
jmp 0x1006691c
push str.sysvol_ctimehigh
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063338
push 0x10
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f2cbc], eax
jmp 0x1006691c
push str.sys32_ctimelow
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063367
push 0x10
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f2cb0], eax
jmp 0x1006691c
push str.sys32_ctimehigh
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063396
push 0x10
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f2cb4], eax
jmp 0x1006691c
push str.full_logs
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100633e6
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x100633cb
mov dword [ebp - 0xc8], 1
jmp 0x100633d5
mov dword [ebp - 0xc8], 0
mov ecx, dword [ebp - 0xc8]
mov dword [0x104f2cc0], ecx
jmp 0x1006691c
push str.force_flush
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063411
mov eax, dword [ebp - 4]
push eax
call fcn.1025b92f
add esp, 4
mov dword [0x104f2cc4], eax
jmp 0x1006691c
push str.terminate_event
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063441
push 0x104
mov edx, dword [ebp - 4]
push edx
push 0x104f2cc8
call fcn.1025c470
add esp, 0xc
jmp 0x1006691c
push str.no_stealth
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063491
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10063476
mov dword [ebp - 0xcc], 1
jmp 0x10063480
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov dword [0x104f2dcc], edx
jmp 0x1006691c
push str.csharp
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100634e1
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100634c6
mov dword [ebp - 0xd0], 1
jmp 0x100634d0
mov dword [ebp - 0xd0], 0
mov edx, dword [ebp - 0xd0]
mov dword [0x104f2dd4], edx
jmp 0x1006691c
push str.log_exceptions
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10063531
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025b92f
add esp, 4
mov dword [0x104f184c], eax
cmp dword [0x104f184c], 0
je 0x1006351f
push str.Exception_logging_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006352c
push str.Exception_logging_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.log_breakpoints
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100635a6
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x10063566
mov dword [ebp - 0xd4], 1
jmp 0x10063570
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
mov dword [0x104f187c], ecx
cmp dword [0x104f187c], 0
je 0x10063594
push str.Breakpoint_logging_to_behavior_log_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x100635a1
push str.Breakpoint_logging_to_behavior_log_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.dropped_limit
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100635e9
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f0e40], eax
mov ecx, dword [0x104f0e40]
push ecx
push str.Dropped_file_limit_set_to__d._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.ntdll_protect
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x1006363d
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f0e3c], eax
cmp dword [0x104f0e3c], 0
je 0x1006362b
push str.Config:_ntdll_write_protection_enabled.
call fcn.1003d460
add esp, 4
jmp 0x10063638
push str.Config:_ntdll_write_protection_disabled.
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.standalone
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x1006368c
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10063672
mov dword [ebp - 0xd8], 1
jmp 0x1006367c
mov dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [0x104f1884], eax
jmp 0x1006691c
push str.exclude_apis
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063711
mov dword [ebp - 0x58], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x1006370c
cmp dword [ebp - 0x58], 0x80
jae 0x1006370c
push 0x3a
mov eax, dword [ebp - 0xc]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x100636da
mov ecx, dword [ebp - 0x5c]
mov byte [ecx], 0
mov edx, dword [ebp - 0xc]
push edx
call fcn.100628d0
add esp, 4
mov ecx, dword [ebp - 0x58]
mov dword [ecx*4 + 0x104f0e48], eax
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x5c], 0
jne 0x10063701
jmp 0x1006370c
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x100636ae
jmp 0x1006691c
push str.exclude_dlls
mov ecx, dword [ebp - 8]
push ecx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x1006378d
mov dword [ebp - 0x60], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x10063788
cmp dword [ebp - 0x60], 0x80
jae 0x10063788
push 0x3a
mov eax, dword [ebp - 0xc]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x1006375f
mov ecx, dword [ebp - 0x64]
mov byte [ecx], 0
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0xc]
mov dword [edx*4 + 0x104f1048], eax
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x64], 0
jne 0x1006377d
jmp 0x10063788
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10063733
jmp 0x1006691c
push str.base_on_api
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x10063827
mov dword [ebp - 0x68], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x10063822
cmp dword [ebp - 0x68], 0x80
jae 0x10063822
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x100637df
mov eax, dword [ebp - 0x6c]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.100628d0
add esp, 4
mov edx, dword [ebp - 0x68]
mov dword [edx*4 + 0x104f1248], eax
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_base_on_API_list._n
call fcn.1003d460
add esp, 8
cmp dword [ebp - 0x6c], 0
jne 0x10063817
jmp 0x10063822
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x100637b3
jmp 0x1006691c
push str.dump_on_api
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100638c1
mov dword [ebp - 0x70], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x100638bc
cmp dword [ebp - 0x70], 0x80
jae 0x100638bc
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x10063879
mov eax, dword [ebp - 0x74]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.100628d0
add esp, 4
mov edx, dword [ebp - 0x70]
mov dword [edx*4 + 0x104f1448], eax
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_dump_on_API_list._n
call fcn.1003d460
add esp, 8
cmp dword [ebp - 0x74], 0
jne 0x100638b1
jmp 0x100638bc
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x1006384d
jmp 0x1006691c
push str.coverage_modules
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x1006395b
mov dword [ebp - 0x78], 0
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x10063956
cmp dword [ebp - 0x78], 0x80
jae 0x10063956
push 0x3a
mov edx, dword [ebp - 0xc]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x10063913
mov eax, dword [ebp - 0x7c]
mov byte [eax], 0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10074100
add esp, 4
mov edx, dword [ebp - 0x78]
mov dword [edx*4 + 0x104f1648], eax
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0xc]
push ecx
push str.Added__s_to_coverage_modules_list._n
call fcn.1003d460
add esp, 8
cmp dword [ebp - 0x7c], 0
jne 0x1006394b
jmp 0x10063956
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x100638e7
jmp 0x1006691c
push str.dump_on_api_type
mov eax, dword [ebp - 8]
push eax
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x1006398a
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1848], eax
jmp 0x1006691c
push str.file_offsets
mov edx, dword [ebp - 8]
push edx
call fcn.10259a90
add esp, 8
test eax, eax
jne 0x100639f0
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 4]
movsx eax, byte [edx + ecx]
cmp eax, 0x31
jne 0x100639bf
mov dword [ebp - 0xdc], 1
jmp 0x100639c9
mov dword [ebp - 0xdc], 0
mov ecx, dword [ebp - 0xdc]
mov dword [0x104f1f54], ecx
cmp dword [0x104f1f54], 0
je 0x100639eb
push str.Breakpoints_interpreted_as_file_offsets._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push 0x103e78d8
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10063d45
push 0x3a
mov eax, dword [ebp - 4]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10063b6f
mov ecx, dword [ebp - 0x14]
movsx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x10063b6f
mov dword [0x104f19e0], 0
mov eax, dword [ebp - 0x14]
mov byte [eax], 0
mov ecx, dword [ebp - 0x14]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x14]
add eax, 2
push eax
call fcn.100628d0
add esp, 4
mov dword [0x104f18d0], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.100628d0
add esp, 4
mov dword [0x104f18d4], eax
cmp dword [ebp - 0x80], 0
je 0x10063a9b
mov edx, dword [ebp - 0x14]
add edx, 2
push edx
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f19e0], eax
jmp 0x10063aaf
mov ecx, dword [0x104f18d4]
push ecx
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.1003d460
add esp, 8
cmp dword [0x104f19e0], 0
je 0x10063aec
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov edx, dword [0x104f18d0]
push edx
mov eax, dword [0x104f18d4]
push eax
mov ecx, dword [0x104f19e0]
push ecx
push str.Config:_bp0_set_to_0x_p___s::_s_._n
call fcn.1003d460
add esp, 0x10
jmp 0x10063b6a
cmp dword [ebp - 0x80], 0
je 0x10063b6a
push 0
push 0
mov edx, dword [ebp - 0x14]
add edx, 2
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x10063b4f
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0xe0]
mov dword [0x104f19e0], eax
mov dword [0x104f1898], 1
mov ecx, dword [0x104f18d0]
push ecx
mov edx, dword [0x104f18d4]
push edx
mov eax, dword [0x104f19e0]
push eax
push 0x103e7860
call fcn.1003d460
add esp, 0x10
jmp 0x10063b6a
mov ecx, dword [ebp - 0x14]
add ecx, 2
push ecx
mov edx, dword [0x104f18d4]
push edx
push str.Config:_Failed_to_get_address_for_function__s::_s_n
call fcn.1003d460
add esp, 0xc
jmp 0x10063d40
push 4
push 0x103e7824
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10063b9f
push str.Config:_bp0_set_to_zero._n
call fcn.1003d460
add esp, 4
mov byte [0x104f19f0], 1
jmp 0x10063d40
push 2
push 0x103e7804
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x10063bcd
push 0xa
push str.entrypoint
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10063bf9
mov eax, dword [0x104f19e0]
push eax
push str.Config:_bp0_set_to_entry_point._n
call fcn.1003d460
add esp, 8
mov dword [0x1065fae4], 1
mov dword [0x104f1898], 1
jmp 0x10063d40
mov dword [ebp - 0x30], 0
push 0x2b
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10063c46
push 0
push 0
mov edx, dword [ebp - 0x14]
add edx, 1
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
push str.Config:_Delta_0x_x._n
call fcn.1003d460
add esp, 8
mov ecx, dword [ebp - 0x14]
mov byte [ecx], 0
jmp 0x10063c8c
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10063c8c
push 0
push 0
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
call fcn.1025c08a
add esp, 0xc
neg eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x103e77a4
call fcn.1003d460
add esp, 8
mov edx, dword [ebp - 0x14]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x104f19e0]
je 0x10063d40
mov edx, dword [ebp - 0x44]
cmp edx, dword [0x104f19e4]
je 0x10063d40
mov eax, dword [ebp - 0x44]
cmp eax, dword [0x104f19e8]
je 0x10063d40
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x104f19ec]
je 0x10063d40
mov edx, dword [ebp - 0x44]
mov dword [0x104f19e0], edx
mov dword [0x104f1898], 1
cmp dword [0x104f19e0], 0xffffffff
jne 0x10063d04
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c036
add esp, 0xc
mov dword [0x104f19e0], eax
cmp dword [ebp - 0x30], 0
je 0x10063d2d
mov ecx, dword [0x104f19e0]
push ecx
push str.Config:_bp0_was_0x_p._n
call fcn.1003d460
add esp, 8
mov edx, dword [0x104f19e0]
add edx, dword [ebp - 0x30]
mov dword [0x104f19e0], edx
mov eax, dword [0x104f19e0]
push eax
push str.Config:_bp0_set_to_0x_p._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e776c
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064092
push 0x3a
mov edx, dword [ebp - 4]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10063ebd
mov eax, dword [ebp - 0x18]
movsx ecx, byte [eax + 1]
cmp ecx, 0x3a
jne 0x10063ebd
mov dword [0x104f19e4], 0
mov edx, dword [ebp - 0x18]
mov byte [edx], 0
mov eax, dword [ebp - 0x18]
mov byte [eax + 1], 0
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xe4], eax
mov edx, dword [ebp - 0x18]
add edx, 2
push edx
call fcn.100628d0
add esp, 4
mov dword [0x104f18d0], eax
mov eax, dword [ebp - 4]
push eax
call fcn.100628d0
add esp, 4
mov dword [0x104f18d4], eax
cmp dword [ebp - 0xe4], 0
je 0x10063df9
mov ecx, dword [ebp - 0x18]
add ecx, 2
push ecx
mov edx, dword [ebp - 0xe4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f19e4], eax
jmp 0x10063e0c
mov eax, dword [0x104f18d4]
push eax
push 0x103e773c
call fcn.1003d460
add esp, 8
cmp dword [0x104f19e4], 0
je 0x10063e49
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov ecx, dword [0x104f18d0]
push ecx
mov edx, dword [0x104f18d4]
push edx
mov eax, dword [0x104f19e4]
push eax
push str.Config:_bp1_set_to_0x_p___s::_s_._n
call fcn.1003d460
add esp, 0x10
jmp 0x10063eb8
push 0
push 0
mov ecx, dword [ebp - 0x18]
add ecx, 2
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f19e4], eax
cmp dword [0x104f19e4], 0
je 0x10063e9e
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov edx, dword [0x104f18d0]
push edx
mov eax, dword [0x104f18d4]
push eax
mov ecx, dword [0x104f19e4]
push ecx
push 0x103e76f4
call fcn.1003d460
add esp, 0x10
jmp 0x10063eb8
mov edx, dword [0x104f18d0]
push edx
mov eax, dword [0x104f18d4]
push eax
push str.Config:_Failed_to_get_address_for_function__s::_s._n
call fcn.1003d460
add esp, 0xc
jmp 0x1006408d
push 4
push 0x103e76b8
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10063eed
push str.Config:_bp1_set_to_zero._n
call fcn.1003d460
add esp, 4
mov byte [0x104f19f1], 1
jmp 0x1006408d
push 2
push 0x103e7698
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x10063f1b
push 0xa
push 0x103e768c
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10063f48
mov ecx, dword [0x104f19e4]
push ecx
push str.Config:_bp1_set_to_entry_point._n
call fcn.1003d460
add esp, 8
mov dword [0x1065fae4], 1
mov dword [0x104f1898], 1
jmp 0x1006408d
mov dword [ebp - 0x34], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10063f95
push 0
push 0
mov eax, dword [ebp - 0x18]
add eax, 1
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
push 0x103e7650
call fcn.1003d460
add esp, 8
mov edx, dword [ebp - 0x18]
mov byte [edx], 0
jmp 0x10063fdb
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10063fdb
push 0
push 0
mov ecx, dword [ebp - 0x18]
add ecx, 1
push ecx
call fcn.1025c08a
add esp, 0xc
neg eax
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x34]
push edx
push 0x103e7638
call fcn.1003d460
add esp, 8
mov eax, dword [ebp - 0x18]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x48]
cmp edx, dword [0x104f19e0]
je 0x1006408d
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x104f19e4]
je 0x1006408d
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [0x104f19e8]
je 0x1006408d
mov edx, dword [ebp - 0x48]
cmp edx, dword [0x104f19ec]
je 0x1006408d
mov eax, dword [ebp - 0x48]
mov dword [0x104f19e4], eax
mov dword [0x104f1898], 1
cmp dword [0x104f19e4], 0xffffffff
jne 0x10064052
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c036
add esp, 0xc
mov dword [0x104f19e4], eax
cmp dword [ebp - 0x34], 0
je 0x10064079
mov edx, dword [0x104f19e4]
push edx
push str.Config:_bp1_was_0x_p._n
call fcn.1003d460
add esp, 8
mov eax, dword [0x104f19e4]
add eax, dword [ebp - 0x34]
mov dword [0x104f19e4], eax
mov ecx, dword [0x104f19e4]
push ecx
push str.Config:_bp1_set_to_0x_p._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e7600
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100643e2
push 0x3a
mov eax, dword [ebp - 4]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x1006420b
mov ecx, dword [ebp - 0x1c]
movsx edx, byte [ecx + 1]
cmp edx, 0x3a
jne 0x1006420b
mov dword [0x104f19e8], 0
mov eax, dword [ebp - 0x1c]
mov byte [eax], 0
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x1c]
add eax, 2
push eax
call fcn.100628d0
add esp, 4
mov dword [0x104f18d0], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.100628d0
add esp, 4
mov dword [0x104f18d4], eax
cmp dword [ebp - 0xe8], 0
je 0x10064146
mov edx, dword [ebp - 0x1c]
add edx, 2
push edx
mov eax, dword [ebp - 0xe8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f19e8], eax
jmp 0x1006415a
mov ecx, dword [0x104f18d4]
push ecx
push 0x103e75d0
call fcn.1003d460
add esp, 8
cmp dword [0x104f19e8], 0
je 0x10064197
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov edx, dword [0x104f18d0]
push edx
mov eax, dword [0x104f18d4]
push eax
mov ecx, dword [0x104f19e8]
push ecx
push str.Config:_bp2_set_to_0x_p___s::_s_._n
call fcn.1003d460
add esp, 0x10
jmp 0x10064206
push 0
push 0
mov edx, dword [ebp - 0x1c]
add edx, 2
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f19e8], eax
cmp dword [0x104f19e8], 0
je 0x100641ec
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov eax, dword [0x104f18d0]
push eax
mov ecx, dword [0x104f18d4]
push ecx
mov edx, dword [0x104f19e8]
push edx
push 0x103e7588
call fcn.1003d460
add esp, 0x10
jmp 0x10064206
mov eax, dword [0x104f18d0]
push eax
mov ecx, dword [0x104f18d4]
push ecx
push 0x103e7554
call fcn.1003d460
add esp, 0xc
jmp 0x100643dd
push 4
push 0x103e754c
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x1006423b
push str.Config:_bp2_set_to_zero._n
call fcn.1003d460
add esp, 4
mov byte [0x104f19f2], 1
jmp 0x100643dd
push 2
push 0x103e752c
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x10064269
push 0xa
push 0x103e7520
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10064296
mov edx, dword [0x104f19e8]
push edx
push str.Config:_bp2_set_to_entry_point._n
call fcn.1003d460
add esp, 8
mov dword [0x1065fae4], 1
mov dword [0x104f1898], 1
jmp 0x100643dd
mov dword [ebp - 0x38], 0
push 0x2b
mov eax, dword [ebp - 4]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x100642e3
push 0
push 0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
push edx
push 0x103e74e4
call fcn.1003d460
add esp, 8
mov eax, dword [ebp - 0x1c]
mov byte [eax], 0
jmp 0x10064329
push 0x2d
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10064329
push 0
push 0
mov edx, dword [ebp - 0x1c]
add edx, 1
push edx
call fcn.1025c08a
add esp, 0xc
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
push 0x103e74cc
call fcn.1003d460
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov byte [ecx], 0
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x104f19e0]
je 0x100643dd
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [0x104f19e4]
je 0x100643dd
mov edx, dword [ebp - 0x4c]
cmp edx, dword [0x104f19e8]
je 0x100643dd
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x104f19ec]
je 0x100643dd
mov ecx, dword [ebp - 0x4c]
mov dword [0x104f19e8], ecx
mov dword [0x104f1898], 1
cmp dword [0x104f19e8], 0xffffffff
jne 0x100643a1
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c036
add esp, 0xc
mov dword [0x104f19e8], eax
cmp dword [ebp - 0x38], 0
je 0x100643c9
mov eax, dword [0x104f19e8]
push eax
push str.Config:_bp2_was_0x_p._n
call fcn.1003d460
add esp, 8
mov ecx, dword [0x104f19e8]
add ecx, dword [ebp - 0x38]
mov dword [0x104f19e8], ecx
mov edx, dword [0x104f19e8]
push edx
push str.Config:_bp2_set_to_0x_p._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e7494
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064732
push 0x3a
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x1006455c
mov edx, dword [ebp - 0x20]
movsx eax, byte [edx + 1]
cmp eax, 0x3a
jne 0x1006455c
mov dword [0x104f19ec], 0
mov ecx, dword [ebp - 0x20]
mov byte [ecx], 0
mov edx, dword [ebp - 0x20]
mov byte [edx + 1], 0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0x20]
add ecx, 2
push ecx
call fcn.100628d0
add esp, 4
mov dword [0x104f18d0], eax
mov edx, dword [ebp - 4]
push edx
call fcn.100628d0
add esp, 4
mov dword [0x104f18d4], eax
cmp dword [ebp - 0xec], 0
je 0x10064496
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f19ec], eax
jmp 0x100644aa
mov edx, dword [0x104f18d4]
push edx
push 0x103e7464
call fcn.1003d460
add esp, 8
cmp dword [0x104f19ec], 0
je 0x100644e7
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov eax, dword [0x104f18d0]
push eax
mov ecx, dword [0x104f18d4]
push ecx
mov edx, dword [0x104f19ec]
push edx
push str.Config:_bp3_set_to_0x_p___s::_s_._n
call fcn.1003d460
add esp, 0x10
jmp 0x10064557
push 0
push 0
mov eax, dword [ebp - 0x20]
add eax, 2
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f19ec], eax
cmp dword [0x104f19ec], 0
je 0x1006453c
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov ecx, dword [0x104f18d0]
push ecx
mov edx, dword [0x104f18d4]
push edx
mov eax, dword [0x104f19ec]
push eax
push 0x103e741c
call fcn.1003d460
add esp, 0x10
jmp 0x10064557
mov ecx, dword [0x104f18d0]
push ecx
mov edx, dword [0x104f18d4]
push edx
push 0x103e73e8
call fcn.1003d460
add esp, 0xc
jmp 0x1006472d
push 4
push 0x103e73e0
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x1006458c
push str.Config:_bp3_set_to_zero._n
call fcn.1003d460
add esp, 4
mov byte [0x104f19f3], 1
jmp 0x1006472d
push 2
push 0x103e73c0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x100645ba
push 0xa
push 0x103e73b4
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x100645e6
mov eax, dword [0x104f19ec]
push eax
push str.Config:_bp3_set_to_entry_point._n
call fcn.1003d460
add esp, 8
mov dword [0x1065fae4], 1
mov dword [0x104f1898], 1
jmp 0x1006472d
mov dword [ebp - 0x3c], 0
push 0x2b
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10064633
push 0
push 0
mov edx, dword [ebp - 0x20]
add edx, 1
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
push 0x103e7378
call fcn.1003d460
add esp, 8
mov ecx, dword [ebp - 0x20]
mov byte [ecx], 0
jmp 0x10064679
push 0x2d
mov edx, dword [ebp - 4]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x10064679
push 0
push 0
mov eax, dword [ebp - 0x20]
add eax, 1
push eax
call fcn.1025c08a
add esp, 0xc
neg eax
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
push ecx
push 0x103e7360
call fcn.1003d460
add esp, 8
mov edx, dword [ebp - 0x20]
mov byte [edx], 0
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [0x104f19e0]
je 0x1006472d
mov edx, dword [ebp - 0x50]
cmp edx, dword [0x104f19e4]
je 0x1006472d
mov eax, dword [ebp - 0x50]
cmp eax, dword [0x104f19e8]
je 0x1006472d
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [0x104f19ec]
je 0x1006472d
mov edx, dword [ebp - 0x50]
mov dword [0x104f19ec], edx
mov dword [0x104f1898], 1
cmp dword [0x104f19ec], 0xffffffff
jne 0x100646f1
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c036
add esp, 0xc
mov dword [0x104f19ec], eax
cmp dword [ebp - 0x3c], 0
je 0x1006471a
mov ecx, dword [0x104f19ec]
push ecx
push str.Config:_bp3_was_0x_p._n
call fcn.1003d460
add esp, 8
mov edx, dword [0x104f19ec]
add edx, dword [ebp - 0x3c]
mov dword [0x104f19ec], edx
mov eax, dword [0x104f19ec]
push eax
push str.Config:_bp3_set_to_0x_p._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e7328
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064a7f
push 0x3a
mov edx, dword [ebp - 4]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x100648aa
mov eax, dword [ebp - 0x24]
movsx ecx, byte [eax + 1]
cmp ecx, 0x3a
jne 0x100648aa
mov dword [0x104f19f4], 0
mov edx, dword [ebp - 0x24]
mov byte [edx], 0
mov eax, dword [ebp - 0x24]
mov byte [eax + 1], 0
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xf0], eax
mov edx, dword [ebp - 0x24]
add edx, 2
push edx
call fcn.100628d0
add esp, 4
mov dword [0x104f18d0], eax
mov eax, dword [ebp - 4]
push eax
call fcn.100628d0
add esp, 4
mov dword [0x104f18d4], eax
cmp dword [ebp - 0xf0], 0
je 0x100647e6
mov ecx, dword [ebp - 0x24]
add ecx, 2
push ecx
mov edx, dword [ebp - 0xf0]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x104f19f4], eax
jmp 0x100647f9
mov eax, dword [0x104f18d4]
push eax
push 0x103e72f8
call fcn.1003d460
add esp, 8
cmp dword [0x104f19f4], 0
je 0x10064836
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov ecx, dword [0x104f18d0]
push ecx
mov edx, dword [0x104f18d4]
push edx
mov eax, dword [0x104f19f4]
push eax
push str.Config:_bp4_set_to_0x_p___s::_s_._n
call fcn.1003d460
add esp, 0x10
jmp 0x100648a5
push 0
push 0
mov ecx, dword [ebp - 0x24]
add ecx, 2
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f19f4], eax
cmp dword [0x104f19f4], 0
je 0x1006488b
mov byte [0x104f19dd], 1
mov dword [0x104f1898], 1
mov edx, dword [0x104f18d0]
push edx
mov eax, dword [0x104f18d4]
push eax
mov ecx, dword [0x104f19f4]
push ecx
push 0x103e72b0
call fcn.1003d460
add esp, 0x10
jmp 0x100648a5
mov edx, dword [0x104f18d0]
push edx
mov eax, dword [0x104f18d4]
push eax
push 0x103e727c
call fcn.1003d460
add esp, 0xc
jmp 0x10064a7a
push 4
push 0x103e7274
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x100648da
push str.Config:_bp4_set_to_zero._n
call fcn.1003d460
add esp, 4
mov byte [0x104f1a04], 1
jmp 0x10064a7a
push 2
push 0x103e7254
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x10064908
push 0xa
push 0x103e7248
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10064935
mov ecx, dword [0x104f19f4]
push ecx
push str.Config:_bp4_set_to_entry_point._n
call fcn.1003d460
add esp, 8
mov dword [0x1065fae4], 1
mov dword [0x104f1898], 1
jmp 0x10064a7a
mov dword [ebp - 0x40], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x10064982
push 0
push 0
mov eax, dword [ebp - 0x24]
add eax, 1
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
push 0x103e720c
call fcn.1003d460
add esp, 8
mov edx, dword [ebp - 0x24]
mov byte [edx], 0
jmp 0x100649c8
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x100649c8
push 0
push 0
mov ecx, dword [ebp - 0x24]
add ecx, 1
push ecx
call fcn.1025c08a
add esp, 0xc
neg eax
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x40]
push edx
push 0x103e71f4
call fcn.1003d460
add esp, 8
mov eax, dword [ebp - 0x24]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
cmp edx, dword [0x104f19e0]
je 0x10064a7a
mov eax, dword [ebp - 0x54]
cmp eax, dword [0x104f19e4]
je 0x10064a7a
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [0x104f19e8]
je 0x10064a7a
mov edx, dword [ebp - 0x54]
cmp edx, dword [0x104f19ec]
je 0x10064a7a
mov eax, dword [ebp - 0x54]
mov dword [0x104f19f4], eax
mov dword [0x104f1898], 1
cmp dword [0x104f19f4], 0xffffffff
jne 0x10064a3f
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c036
add esp, 0xc
mov dword [0x104f19f4], eax
cmp dword [ebp - 0x40], 0
je 0x10064a66
mov edx, dword [0x104f19f4]
push edx
push str.Config:_bp4_was_0x_p._n
call fcn.1003d460
add esp, 8
mov eax, dword [0x104f19f4]
add eax, dword [ebp - 0x40]
mov dword [0x104f19f4], eax
mov ecx, dword [0x104f19f4]
push ecx
push str.Config:_bp4_set_to_0x_p._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e71bc
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064b98
mov dword [ebp - 0x28], 0
push 0x2b
mov eax, dword [ebp - 4]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064ae5
push 0
push 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
push edx
push 0x103e71a4
call fcn.1003d460
add esp, 8
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
jmp 0x10064b2b
push 0x2d
mov ecx, dword [ebp - 4]
push ecx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064b2b
push 0
push 0
mov edx, dword [ebp - 0xc]
add edx, 1
push edx
call fcn.1025c08a
add esp, 0xc
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
push 0x103e718c
call fcn.1003d460
add esp, 8
mov ecx, dword [ebp - 0xc]
mov byte [ecx], 0
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a08], eax
cmp dword [0x104f1a08], 0
je 0x10064b93
mov dword [0x104f1898], 1
cmp dword [ebp - 0x28], 0
je 0x10064b80
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [0x104f1a08]
push ecx
push str.Config:_br0_was_0x_x__delta_0x_x_._n
call fcn.1003d460
add esp, 0xc
mov edx, dword [0x104f1a08]
add edx, dword [ebp - 0x28]
mov dword [0x104f1a08], edx
mov eax, dword [0x104f1a08]
push eax
push str.Config:_br0_set_to_0x_x__break_on_return__n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e7138
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064cb1
mov dword [ebp - 0x2c], 0
push 0x2b
mov edx, dword [ebp - 4]
push edx
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064bfe
push 0
push 0
mov eax, dword [ebp - 0xc]
add eax, 1
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
push ecx
push 0x103e7120
call fcn.1003d460
add esp, 8
mov edx, dword [ebp - 0xc]
mov byte [edx], 0
jmp 0x10064c44
push 0x2d
mov eax, dword [ebp - 4]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10064c44
push 0
push 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
call fcn.1025c08a
add esp, 0xc
neg eax
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
push edx
push 0x103e7108
call fcn.1003d460
add esp, 8
mov eax, dword [ebp - 0xc]
mov byte [eax], 0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a0c], eax
cmp dword [0x104f1a0c], 0
je 0x10064cac
mov dword [0x104f1898], 1
cmp dword [ebp - 0x2c], 0
je 0x10064c98
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [0x104f1a0c]
push eax
push str.Config:_br1_was_0x_x__delta_0x_x_._n
call fcn.1003d460
add esp, 0xc
mov ecx, dword [0x104f1a0c]
add ecx, dword [ebp - 0x2c]
mov dword [0x104f1a0c], ecx
mov edx, dword [0x104f1a0c]
push edx
push str.Config:_br1_set_to_0x_x__break_on_return__n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e70b4
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064d07
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a10], eax
cmp dword [0x104f1a10], 0
je 0x10064d02
mov dword [0x104f1898], 1
mov edx, dword [0x104f1a10]
push edx
push str.Config:_br2_set_to_0x_x__break_on_return__n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e7084
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064d5d
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a14], eax
cmp dword [0x104f1a14], 0
je 0x10064d58
mov dword [0x104f1898], 1
mov edx, dword [0x104f1a14]
push edx
push str.Config:_br3_set_to_0x_x__break_on_return__n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e7054
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064da0
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a18], eax
mov edx, dword [0x104f1a18]
push edx
push str.Config:_Hit_count_for_breakpoint_0_set_to__d_n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e7020
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064de3
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a1c], eax
mov edx, dword [0x104f1a1c]
push edx
push str.Config:_Hit_count_for_breakpoint_1_set_to__d_n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e6fec
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064e26
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a20], eax
mov edx, dword [0x104f1a20]
push edx
push str.Config:_Hit_count_for_breakpoint_2_set_to__d_n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push 0x103e6fb8
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064e69
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a24], eax
mov edx, dword [0x104f1a24]
push edx
push str.Config:_Hit_count_for_breakpoint_3_set_to__d_n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.depth
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064edb
push 3
push 0x103e6f7c
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10064eae
mov dword [0x1065f790], 0x7fffffff
push str.Config:_Trace_depth_set_to_all
call fcn.1003d460
add esp, 4
jmp 0x10064ed6
push 0xa
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [0x1065f790], eax
mov eax, dword [0x1065f790]
push eax
push str.Config:_Trace_depth_set_to_0x_x
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.count
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064f4e
push 3
push 0x103e6f30
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10064f20
mov dword [0x1065f424], 0x7fffffff
push str.Config:_Trace_instruction_count_set_to_all
call fcn.1003d460
add esp, 4
jmp 0x10064f49
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x1065f424], eax
mov ecx, dword [0x1065f424]
push ecx
push str.Config:_Trace_instruction_count_set_to_0x_x
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.step_out
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10064fae
mov dword [0x104f1898], 1
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f19e0], eax
cmp dword [0x104f19e0], 0
je 0x10064fa9
mov dword [0x104f1f50], 0x31
mov ecx, dword [0x104f19e0]
push ecx
push str.Config:_Step_out_breakpoint_set_to_0x_x._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.dumpsize
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006502c
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x1065f8ac], eax
cmp dword [0x1065f8ac], 0
je 0x10064ff7
mov ecx, dword [0x1065f8ac]
push ecx
push str.Config:_DumpSize_set_to_0x_x
call fcn.1003d460
add esp, 8
jmp 0x10065027
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f440
call fcn.1025c470
add esp, 0xc
push 0x1065f440
push str.Config:_DumpSize_set_to_string___s_.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.action0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006508a
push 0x104
push 0
push 0x1065f7a0
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f7a0
call fcn.1025c470
add esp, 0xc
push 0x1065f7a0
push str.Config:_Action0_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.action1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100650e8
push 0x104
push 0
push 0x1065f9e0
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f9e0
call fcn.1025c470
add esp, 0xc
push 0x1065f9e0
push str.Config:_Action1_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.action2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065146
push 0x104
push 0
push 0x1065f560
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f560
call fcn.1025c470
add esp, 0xc
push 0x1065f560
push str.Config:_Action2_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.action3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100651a4
push 0x104
push 0
push 0x1065f8c0
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x1065f8c0
call fcn.1025c470
add esp, 0xc
push 0x1065f8c0
push str.Config:_Action3_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.instruction0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
je 0x100651d2
push str.instr0
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065254
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.10073630
add esp, 4
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x10065212
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 0x8c]
mov dword [0x1065faec], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e6c0
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065faec]
push edx
call fcn.1025c470
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction0_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.instruction1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
je 0x10065282
push str.instr1
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065304
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.10073630
add esp, 4
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x100652c2
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x90]
push ecx
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 0x90]
mov dword [0x1065faf0], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e6c0
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065faf0]
push edx
call fcn.1025c470
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction1_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.instruction2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
je 0x10065332
push str.instr2
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100653b4
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.10073630
add esp, 4
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x10065372
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x94]
push ecx
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 0x94]
mov dword [0x1065faf0], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e6c0
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065faf8]
push edx
call fcn.1025c470
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction2_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.instruction3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
je 0x100653e2
push str.instr3
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065464
mov eax, 1
imul ecx, eax, 0x104
push ecx
call fcn.10073630
add esp, 4
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x10065422
mov edx, 1
imul eax, edx, 0x104
push eax
push 0
mov ecx, dword [ebp - 0x98]
push ecx
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 0x98]
mov dword [0x1065faf0], edx
mov eax, dword [ebp - 4]
push eax
call fcn.1024e6c0
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [0x1065f8a4]
push edx
call fcn.1025c470
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
push str.Config:_Instruction3_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.procname0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100654ff
mov edx, 1
imul eax, edx, 0x104
push eax
call fcn.10073630
add esp, 4
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x100654bd
mov ecx, 1
imul edx, ecx, 0x104
push edx
push 0
mov eax, dword [ebp - 0x9c]
push eax
call fcn.1024a9c0
add esp, 0xc
mov ecx, dword [ebp - 0x9c]
mov dword [0x1065f420], ecx
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [0x1065f420]
push ecx
call fcn.1025c470
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
push str.Config:_procname0_set_to__s.
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.break_on_return
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065552
mov dword [0x104f1898], 1
push 0x104
mov ecx, dword [ebp - 4]
push ecx
push 0x104f18d8
call fcn.1025c470
add esp, 0xc
push 0x104f18d8
push str.Config:_Break_on_return_set_to__s.
call fcn.1003d460
add esp, 8
mov byte [0x104f19dc], 1
jmp 0x1006691c
push str.trace_all
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100655a1
mov dword [0x104f1898], 1
push 0xa
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1f4c], eax
cmp dword [0x104f1f4c], 0
je 0x1006559c
push str.Config:_Trace_all_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.trace_into_api
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006566a
mov dword [ebp - 0x84], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x1006565b
cmp dword [ebp - 0x84], 0x80
jae 0x1006565b
push 0x3a
mov eax, dword [ebp - 0xc]
push eax
call fcn.1024c8f0
add esp, 8
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x10065606
mov ecx, dword [ebp - 0x88]
mov byte [ecx], 0
mov edx, dword [ebp - 0xc]
push edx
call fcn.100628d0
add esp, 4
mov ecx, dword [ebp - 0x84]
mov dword [ecx*4 + 0x104f1f68], eax
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0xc]
push eax
push str.Config:_Added__s_to_trace_into_API_list._n
call fcn.1003d460
add esp, 8
cmp dword [ebp - 0x88], 0
jne 0x1006564a
jmp 0x1006565b
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x100655ca
mov dword [0x104f1898], 1
jmp 0x1006691c
push str.dumptype0
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065699
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a28], eax
jmp 0x1006691c
push str.dumptype1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100656c8
push 0
push 0
mov edx, dword [ebp - 4]
push edx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a2c], eax
jmp 0x1006691c
push str.dumptype2
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100656f7
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a30], eax
jmp 0x1006691c
push str.dumptype3
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065726
push 0
push 0
mov eax, dword [ebp - 4]
push eax
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f1a34], eax
jmp 0x1006691c
push str.typestring
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065784
push 0x104
push 0
push 0x104f1a38
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1a38
call fcn.1025c470
add esp, 0xc
push 0x104f1a38
push str.Config:_typestring_set_to__s
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.typestring0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100657e2
push 0x104
push 0
push 0x104f1b3c
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1b3c
call fcn.1025c470
add esp, 0xc
push 0x104f1b3c
push str.Config:_typestring0_set_to__s
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.typestring1
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065840
push 0x104
push 0
push 0x104f1c40
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1c40
call fcn.1025c470
add esp, 0xc
push 0x104f1c40
push str.Config:_typestring1_set_to__s
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.typestring2
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006589e
push 0x104
push 0
push 0x104f1d44
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1d44
call fcn.1025c470
add esp, 0xc
push 0x104f1d44
push str.Config:_typestring2_set_to__s
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.typestring3
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100658fc
push 0x104
push 0
push 0x104f1e48
call fcn.1024a9c0
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.1024e6c0
add esp, 4
push eax
mov eax, dword [ebp - 4]
push eax
push 0x104f1e48
call fcn.1025c470
add esp, 0xc
push 0x104f1e48
push str.Config:_typestring3_set_to__s
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.type0
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100659bf
push 1
push 0x103e6b00
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10065945
push str.Config:_Breakpoint_0_type_set_to_write__Type0__BP_WRITE_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f784], 1
jmp 0x100659ba
push 1
push 0x103e6ac0
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x10065973
push 2
push 0x103e6a74
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x1006598c
push str.Config:_Breakpoint_0_type_set_to_read_write__Type0__BP_READWRITE_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f784], 3
jmp 0x100659ba
push 1
push 0x103e6a70
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x100659ba
push str.Config:_Breakpoint_0_type_set_to_execute__Type0__BP_EXEC_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f784], 0
jmp 0x1006691c
push str.type1
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065a82
push 1
push 0x103e6a24
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10065a08
push str.Config:_Breakpoint_1_type_set_to_write__Type1__BP_WRITE_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f41c], 1
jmp 0x10065a7d
push 1
push 0x103e69e4
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x10065a36
push 2
push 0x103e69e0
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10065a4f
push str.Config:_Breakpoint_1_type_set_to_read_write__Type1__BP_READWRITE_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f41c], 3
jmp 0x10065a7d
push 1
push 0x103e6994
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10065a7d
push str.Config:_Breakpoint_1_type_set_to_execute__Type1__BP_EXEC_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f41c], 0
jmp 0x1006691c
push str.type2
mov edx, dword [ebp - 8]
push edx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065b45
push 1
push 0x103e6948
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10065acb
push str.Config:_Breakpoint_2_type_set_to_write__Type2__BP_WRITE_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f788], 1
jmp 0x10065b40
push 1
push 0x103e6908
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
je 0x10065af9
push 2
push 0x103e68bc
mov edx, dword [ebp - 4]
push edx
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10065b12
push str.Config:_Breakpoint_2_type_set_to_read_write__Type2__BP_READWRITE_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f788], 3
jmp 0x10065b40
push 1
push 0x103e68b8
mov eax, dword [ebp - 4]
push eax
call fcn.1025a0fe
add esp, 0xc
test eax, eax
jne 0x10065b40
push str.Config:_Breakpoint_2_type_set_to_execute__Type2__BP_EXEC_._n
call fcn.1003d460
add esp, 4
mov dword [0x1065f788], 0
jmp 0x1006691c
push str.no_logs
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065b8a
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
mov dword [0x104f1f58], edx
cmp dword [0x104f1f58], 0
je 0x10065b85
push str.Config:_Debugger_log_diverted._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.disable_logging
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065bf0
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065bbf
mov dword [ebp - 0xf4], 1
jmp 0x10065bc9
mov dword [ebp - 0xf4], 0
mov edx, dword [ebp - 0xf4]
mov dword [0x104f1f5c], edx
cmp dword [0x104f1f5c], 0
je 0x10065beb
push str.Config:_Logging_disabled__analysis_log_._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.base_on_alloc
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065c56
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065c25
mov dword [ebp - 0xf8], 1
jmp 0x10065c2f
mov dword [ebp - 0xf8], 0
mov edx, dword [ebp - 0xf8]
mov dword [0x104f1f60], edx
cmp dword [0x104f1f60], 0
je 0x10065c51
push str.Config:_Base_breakpoints_on_executable_memory_allocations._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.base_on_caller
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065cbc
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065c8b
mov dword [ebp - 0xfc], 1
jmp 0x10065c95
mov dword [ebp - 0xfc], 0
mov edx, dword [ebp - 0xfc]
mov dword [0x104f1f64], edx
cmp dword [0x104f1f64], 0
je 0x10065cb7
push str.Config:_Base_breakpoints_on_new_calling_regions._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.fake_rdtsc
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065d22
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065cf1
mov dword [ebp - 0x100], 1
jmp 0x10065cfb
mov dword [ebp - 0x100], 0
mov edx, dword [ebp - 0x100]
mov dword [0x104f189c], edx
cmp dword [0x104f189c], 0
je 0x10065d1d
push str.Config:_Fake_RDTSC_enabled__Trace__n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.nop_rdtscp
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065d88
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065d57
mov dword [ebp - 0x104], 1
jmp 0x10065d61
mov dword [ebp - 0x104], 0
mov edx, dword [ebp - 0x104]
mov dword [0x104f18a0], edx
cmp dword [0x104f18a0], 0
je 0x10065d83
push str.Config:_RDTSCP_nop_enabled_n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.procdump
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065dfd
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10065dbd
mov dword [ebp - 0x108], 1
jmp 0x10065dc7
mov dword [ebp - 0x108], 0
mov edx, dword [ebp - 0x108]
mov dword [0x104f1864], edx
cmp dword [0x104f1864], 0
je 0x10065deb
push str.Process_dumps_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x10065df8
push str.Process_dumps_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.procmemdump
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065e96
push 0x103e66dc
mov ecx, dword [ebp - 4]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065e37
mov dword [0x104f1868], 1
jmp 0x10065e6c
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065e57
mov dword [ebp - 0x10c], 1
jmp 0x10065e61
mov dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [0x104f1868], eax
cmp dword [0x104f1868], 0
je 0x10065e84
push str.Full_process_memory_dumps_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x10065e91
push str.Full_process_memory_dumps_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.import_reconstruction
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065f0a
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065ecb
mov dword [ebp - 0x110], 1
jmp 0x10065ed5
mov dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [0x104f186c], eax
cmp dword [0x104f186c], 0
je 0x10065ef8
push str.Import_reconstruction_of_process_dumps_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x10065f05
push str.Import_reconstruction_of_process_dumps_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.terminate_processes
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065f7e
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065f3f
mov dword [ebp - 0x114], 1
jmp 0x10065f49
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [0x104f1870], eax
cmp dword [0x104f1870], 0
je 0x10065f6c
push str.Terminate_processes_on_terminate_event_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x10065f79
push str.Terminate_processes_on_terminate_event_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.branch_trace
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10065fe3
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10065fb3
mov dword [ebp - 0x118], 1
jmp 0x10065fbd
mov dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [0x104f1880], eax
cmp dword [0x104f1880], 0
je 0x10065fde
push str.Branch_tracing_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.compression
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066048
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10066018
mov dword [ebp - 0x11c], 1
jmp 0x10066022
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [0x104f1850], eax
cmp dword [0x104f1850], 0
je 0x10066043
push str.Capture_of_compressed_payloads_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.unpacker
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100660ad
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x1006607d
mov dword [ebp - 0x120], 1
jmp 0x10066087
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [0x104f1854], eax
cmp dword [0x104f1854], 0
je 0x100660a8
push str.Auto_unpacking_of_payloads_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.unpacker_bp_on_allocate
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066112
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100660e2
mov dword [ebp - 0x124], 1
jmp 0x100660ec
mov dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [0x104f1858], eax
cmp dword [0x104f1858], 0
je 0x1006610d
push str.Auto_unpacking_of_payloads_and_set_breakpoints_on_allocate_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.injection
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066177
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x10066147
mov dword [ebp - 0x128], 1
jmp 0x10066151
mov dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [0x104f185c], eax
cmp dword [0x104f185c], 0
je 0x10066172
push str.Capture_of_injected_payloads_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.combo
mov ecx, dword [ebp - 8]
push ecx
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100661d0
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax]
cmp edx, 0x31
jne 0x100661cb
push str.Combined_payload_extractions_enabled._n
call fcn.1003d460
add esp, 4
mov dword [0x104f1850], 1
mov dword [0x104f1854], 1
mov dword [0x104f185c], 1
jmp 0x1006691c
push str.dump_config_region
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066236
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066205
mov dword [ebp - 0x12c], 1
jmp 0x1006620f
mov dword [ebp - 0x12c], 0
mov edx, dword [ebp - 0x12c]
mov dword [0x104f1874], edx
cmp dword [0x104f1874], 0
je 0x10066231
push str.Dump_config_region_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.single_process
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006629c
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006626b
mov dword [ebp - 0x130], 1
jmp 0x10066275
mov dword [ebp - 0x130], 0
mov edx, dword [ebp - 0x130]
mov dword [0x104f1878], edx
cmp dword [0x104f1878], 0
je 0x10066297
push str.Monitoring_child_processes_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push 0x103e63c8
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066315
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100662d1
mov dword [ebp - 0x134], 1
jmp 0x100662db
mov dword [ebp - 0x134], 0
mov edx, dword [ebp - 0x134]
mov dword [0x104f18a4], edx
cmp dword [0x104f18a4], 0
je 0x10066310
cmp dword [0x104f0964], 0
je 0x10066310
push str.PDF__Adobe__settings_enabled._n
call fcn.1003d460
add esp, 4
mov dword [0x104f0e38], 2
jmp 0x1006691c
push str.api_rate_cap
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066361
push 0xa
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1025c08a
add esp, 0xc
mov dword [0x104f0e38], eax
cmp dword [0x104f0e38], 0
je 0x1006635c
mov edx, dword [0x104f0e38]
push edx
push str.API_spam_prevention_enabled___d_._n
call fcn.1003d460
add esp, 8
jmp 0x1006691c
push str.dump_crypto
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100663c7
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066396
mov dword [ebp - 0x138], 1
jmp 0x100663a0
mov dword [ebp - 0x138], 0
mov edx, dword [ebp - 0x138]
mov dword [0x104f1888], edx
cmp dword [0x104f1888], 0
je 0x100663c2
push str.Dumping_of_crypto_API_buffers_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.caller_dump
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006642d
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100663fc
mov dword [ebp - 0x13c], 1
jmp 0x10066406
mov dword [ebp - 0x13c], 0
mov edx, dword [ebp - 0x13c]
mov dword [0x104f1860], edx
cmp dword [0x104f1860], 0
jne 0x10066428
push str.Dumping_of_caller_regions_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push 0x103e6308
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066493
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066462
mov dword [ebp - 0x140], 1
jmp 0x1006646c
mov dword [ebp - 0x140], 0
mov edx, dword [ebp - 0x140]
mov dword [0x104f1894], edx
cmp dword [0x104f1894], 0
je 0x1006648e
push str.UPX_unpacker_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.yarascan
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066508
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100664c8
mov dword [ebp - 0x144], 1
jmp 0x100664d2
mov dword [ebp - 0x144], 0
mov edx, dword [ebp - 0x144]
mov dword [0x104f18b0], edx
cmp dword [0x104f18b0], 0
je 0x100664f6
push str.In_monitor_YARA_scans_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x10066503
push str.In_monitor_YARA_scans_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.amsidump
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006657d
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006653d
mov dword [ebp - 0x148], 1
jmp 0x10066547
mov dword [ebp - 0x148], 0
mov edx, dword [ebp - 0x148]
mov dword [0x104f18b4], edx
cmp dword [0x104f18b4], 0
je 0x1006656b
push str.AMSI_dumping_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x10066578
push str.AMSI_dumping_disabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.minihook
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100665e3
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100665b2
mov dword [ebp - 0x14c], 1
jmp 0x100665bc
mov dword [ebp - 0x14c], 0
mov edx, dword [ebp - 0x14c]
mov dword [0x104f18b8], edx
cmp dword [0x104f18b8], 0
je 0x100665de
push str.Minimal_hook_set_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.zerohook
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066649
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x10066618
mov dword [ebp - 0x150], 1
jmp 0x10066622
mov dword [ebp - 0x150], 0
mov edx, dword [ebp - 0x150]
mov dword [0x104f18bc], edx
cmp dword [0x104f18bc], 0
je 0x10066644
push str.All_hooks_disabled__except_essential__n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.tlsdump
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100666af
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006667e
mov dword [ebp - 0x154], 1
jmp 0x10066688
mov dword [ebp - 0x154], 0
mov edx, dword [ebp - 0x154]
mov dword [0x104f18a8], edx
cmp dword [0x104f18a8], 0
je 0x100666aa
push str.TLS_secret_dump_mode_enabled._n
call fcn.1003d460
add esp, 4
jmp 0x1006691c
push str.regdump
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x10066715
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x100666e4
mov dword [ebp - 0x158], 1
jmp 0x100666ee
mov dword [ebp - 0x158], 0
mov edx, dword [ebp - 0x158]
mov dword [0x104f18ac], edx
cmp dword [0x104f18ac], 0
je 0x10066710
push str.loaderlock
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x1006678a
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx]
cmp ecx, 0x31
jne 0x1006674a
push str.plugx
mov eax, dword [ebp - 8]
push eax
call fcn.10252226
add esp, 8
test eax, eax
jne 0x100667f0
mov esp, ebp
pop ebp
ret