Function at 0x3001f300
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x30215e88]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
push 0x3d
push ebx
mov dword [ebp - 0x24], ebx
call fcn.3015be70
add esp, 8
test eax, eax
je 0x3002284d
cmp byte [eax + 1], 0x24
lea edi, [eax + 1]
je 0x3002284d
mov edx, edi
mov byte [eax], 0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x3001f340
sub edx, ecx
mov eax, ebx
mov ecx, str.pipe
mov bl, byte [eax]
cmp bl, byte [ecx]
mov byte [ebp - 0x29], bl
mov ebx, dword [ebp - 0x24]
jne 0x3001f380
cmp byte [ebp - 0x29], 0
je 0x3001f37c
mov bl, byte [eax + 1]
cmp bl, byte [ecx + 1]
mov byte [ebp - 0x29], bl
mov ebx, dword [ebp - 0x24]
jne 0x3001f380
add eax, 2
add ecx, 2
cmp byte [ebp - 0x29], 0
jne 0x3001f350
xor eax, eax
jmp 0x3001f385
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f3b7
xor ecx, ecx
test edx, edx
je 0x3002283b
jmp 0x3001f3a0
movsx ax, byte [ecx + edi]
mov word [ecx*2 + 0x302697e0], ax
inc ecx
cmp ecx, edx
jb 0x3001f3a0
jmp 0x3002283b
mov ecx, str.logserver
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f3e0
test dl, dl
je 0x3001f3dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f3e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f3c0
xor eax, eax
jmp 0x3001f3e5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f401
push 0x104
push edi
push 0x302699e8
call fcn.301664c0
add esp, 0xc
jmp 0x3002283b
mov ecx, str.results
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f428
test dl, dl
je 0x3001f424
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f428
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f408
xor eax, eax
jmp 0x3001f42d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f47e
push 0x104
push eax
push 0x30269aec
call fcn.3015cdc0
add esp, 0xc
push 0x103
push edi
push 0x30269aec
call fcn.301664c0
add esp, 0xc
xor ecx, ecx
lea esp, [esp]
movsx ax, byte [ecx + 0x30269aec]
mov word [ecx*2 + 0x30269bf0], ax
inc ecx
cmp ecx, 0x104
jb 0x3001f460
jmp 0x3002283b
mov ecx, str.pythonpath
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f4a5
test dl, dl
je 0x3001f4a1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f4a5
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f485
xor eax, eax
jmp 0x3001f4aa
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f500
push 0x103
push edi
push 0x3026a104
call fcn.301664c0
add esp, 0xc
xor ecx, ecx
jmp 0x3001f4d0
movsx ax, byte [ecx + 0x3026a104]
mov word [ecx*2 + 0x3026a208], ax
inc ecx
cmp ecx, 0x104
jb 0x3001f4d0
push 0x3026a208
push str.Python_path_set_to__ws._n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
mov ecx, str.file_of_interest
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f527
test dl, dl
je 0x3001f523
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f527
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f507
xor eax, eax
jmp 0x3001f52c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f5c7
mov ecx, edi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x3001f540
sub ecx, edx
cmp ecx, 1
jbe 0x3002283b
cmp byte [edi + 1], 0x3a
jne 0x3001f5b6
lea ecx, [ebp - 0x1c]
call fcn.3002a210
push 0x104
push 8
push dword [0x3026d8b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.3002a240
mov edx, edi
mov ecx, esi
call fcn.3004e1e0
mov ecx, esi
call fcn.3004c590
lea ecx, [ebp - 0x10]
mov dword [0x3026a618], eax
call fcn.3002a210
push esi
push 0
push dword [0x3026d8b0]
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [ebp - 0x10]
call fcn.3002a240
jmp 0x3002283b
mov ecx, edi
call fcn.3004c590
mov dword [0x3026a61c], eax
jmp 0x3002283b
mov ecx, str.referrer
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f5f0
test dl, dl
je 0x3001f5ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f5f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f5d0
xor eax, eax
jmp 0x3001f5f5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f616
mov ecx, edi
call fcn.3004c590
mov ecx, edi
mov dword [0x3026a620], eax
call fcn.3001f260
mov dword [0x3026a624], eax
jmp 0x3002283b
mov ecx, str.analyzer
mov eax, ebx
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f640
test dl, dl
je 0x3001f63c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f640
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f620
xor eax, eax
jmp 0x3001f645
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f6fb
push 0x103
push edi
push 0x30269df8
call fcn.301664c0
add esp, 0xc
xor ecx, ecx
jmp 0x3001f670
movsx ax, byte [ecx + 0x30269df8]
mov word [ecx*2 + 0x30269efc], ax
inc ecx
cmp ecx, 0x104
jb 0x3001f670
mov ecx, 0x30269efc
mov edi, edi
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + 0x512], ax
test ax, ax
jne 0x3001f690
mov ecx, 0x3026a410
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x3001f6b0
sub ecx, edx
sar ecx, 1
cmp ecx, 0xff
jae 0x3002283b
mov ecx, 0x3026a410
add ecx, 0xfffffffe
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x3001f6d3
mov eax, dword [str.dll_]
mov dword [ecx], eax
mov eax, dword [0x301f7470]
mov dword [ecx + 4], eax
mov eax, dword [0x301f7474]
mov dword [ecx + 8], eax
jmp 0x3002283b
mov ecx, str.shutdown_mutex
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f722
test dl, dl
je 0x3001f71e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f722
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f702
xor eax, eax
jmp 0x3001f727
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f743
push 0x104
push edi
push 0x3026a628
call fcn.301664c0
add esp, 0xc
jmp 0x3002283b
mov ecx, str.first_process
mov eax, ebx
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f770
test dl, dl
je 0x3001f76c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f770
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f750
xor eax, eax
jmp 0x3001f775
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f789
cmp byte [edi], 0x31
sete al
mov dword [0x3026a830], eax
jmp 0x3002283b
mov ecx, str.startup_time
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f7b0
test dl, dl
je 0x3001f7ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f7b0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f790
xor eax, eax
jmp 0x3001f7b5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f7c9
push edi
call fcn.30165928
mov dword [0x3026a83c], eax
jmp 0x30022838
mov ecx, str.debug
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f7f0
test dl, dl
je 0x3001f7ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f7f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f7d0
xor eax, eax
jmp 0x3001f7f5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f809
push edi
call fcn.30165928
mov dword [0x3026a85c], eax
jmp 0x30022838
mov ecx, str.hook_type
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f830
test dl, dl
je 0x3001f82c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f830
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f810
xor eax, eax
jmp 0x3001f835
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f8fc
mov ecx, str.direct
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f864
test dl, dl
je 0x3001f860
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f864
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f844
xor eax, eax
jmp 0x3001f869
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f877
mov dword [0x3026a860], eax
jmp 0x3002283b
mov ecx, str.indirect
mov eax, edi
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f8a0
test dl, dl
je 0x3001f89c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f8a0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f880
xor eax, eax
jmp 0x3001f8a5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f8b8
mov dword [0x3026a860], 5
jmp 0x3002283b
mov eax, str.safe
lea ecx, [ecx]
mov cl, byte [edi]
cmp cl, byte [eax]
jne 0x3001f8e0
test cl, cl
je 0x3001f8dc
mov cl, byte [edi + 1]
cmp cl, byte [eax + 1]
jne 0x3001f8e0
add edi, 2
add eax, 2
test cl, cl
jne 0x3001f8c0
xor eax, eax
jmp 0x3001f8e5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3002283b
mov dword [0x3026a860], 0xd
jmp 0x3002283b
mov ecx, str.disable_hook_content
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f923
test dl, dl
je 0x3001f91f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f923
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f903
xor eax, eax
jmp 0x3001f928
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f93c
push edi
call fcn.30165928
mov dword [0x3026a864], eax
jmp 0x30022838
mov ecx, str.force_sleepskip
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f963
test dl, dl
je 0x3001f95f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f963
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f943
xor eax, eax
jmp 0x3001f968
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f97c
cmp byte [edi], 0x31
sete al
mov dword [0x3026a854], eax
jmp 0x3002283b
mov ecx, str.serial
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f9a3
test dl, dl
je 0x3001f99f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f9a3
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f983
xor eax, eax
jmp 0x3001f9a8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001f9c2
push 0x10
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a840], eax
jmp 0x3002283b
mov ecx, str.sysvol_ctimelow
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001f9f0
test dl, dl
je 0x3001f9ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001f9f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001f9d0
xor eax, eax
jmp 0x3001f9f5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fa0f
push 0x10
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a84c], eax
jmp 0x3002283b
mov ecx, str.sysvol_ctimehigh
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fa36
test dl, dl
je 0x3001fa32
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fa36
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fa16
xor eax, eax
jmp 0x3001fa3b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fa55
push 0x10
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a850], eax
jmp 0x3002283b
mov ecx, str.sys32_ctimelow
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fa80
test dl, dl
je 0x3001fa7c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fa80
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fa60
xor eax, eax
jmp 0x3001fa85
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fa9f
push 0x10
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a844], eax
jmp 0x3002283b
mov ecx, str.sys32_ctimehigh
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fac6
test dl, dl
je 0x3001fac2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fac6
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001faa6
xor eax, eax
jmp 0x3001facb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fae5
push 0x10
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a848], eax
jmp 0x3002283b
mov ecx, str.full_logs
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fb10
test dl, dl
je 0x3001fb0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fb10
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001faf0
xor eax, eax
jmp 0x3001fb15
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fb29
cmp byte [edi], 0x31
sete al
mov dword [0x3026a834], eax
jmp 0x3002283b
mov ecx, str.force_flush
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fb50
test dl, dl
je 0x3001fb4c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fb50
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fb30
xor eax, eax
jmp 0x3001fb55
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fb69
push edi
call fcn.30165928
mov dword [0x3026a858], eax
jmp 0x30022838
mov ecx, str.terminate_event
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fb90
test dl, dl
je 0x3001fb8c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fb90
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fb70
xor eax, eax
jmp 0x3001fb95
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fbb1
push 0x104
push edi
push 0x3026a72c
call fcn.301664c0
add esp, 0xc
jmp 0x3002283b
mov ecx, str.no_stealth
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fbd8
test dl, dl
je 0x3001fbd4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fbd8
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fbb8
xor eax, eax
jmp 0x3001fbdd
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fbf1
cmp byte [edi], 0x31
sete al
mov dword [0x3026a838], eax
jmp 0x3002283b
mov ecx, str.buffer_max
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fc18
test dl, dl
je 0x3001fc14
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fc18
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fbf8
xor eax, eax
jmp 0x3001fc1d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fc37
push 0xa
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3022ea30], eax
jmp 0x3002283b
mov ecx, str.large_buffer_max
mov eax, ebx
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fc60
test dl, dl
je 0x3001fc5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fc60
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fc40
xor eax, eax
jmp 0x3001fc65
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fc7f
push 0xa
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3022ea34], eax
jmp 0x3002283b
push str.log_exceptions
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3001fcb3
push edi
call fcn.30165928
add esp, 4
mov dword [0x3026b284], eax
test eax, eax
mov eax, str.Exception_logging_enabled._n
jne 0x3001fcad
mov eax, str.Exception_logging_disabled._n
push eax
jmp 0x30022833
push str.log_vexcept
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3001fce7
push edi
call fcn.30165928
add esp, 4
mov dword [0x3026b288], eax
test eax, eax
mov eax, str.Vectored_Exception_logging_enabled._n
jne 0x3001fce1
mov eax, str.Vectored_Exception_logging_disabled._n
push eax
jmp 0x30022833
push str.log_breakpoints
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x30022818
push str.log_bps
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x30022818
mov ecx, str.dropped_limit
mov eax, ebx
lea ebx, [ebx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fd40
test dl, dl
je 0x3001fd3c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fd40
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fd20
xor eax, eax
jmp 0x3001fd45
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fd6d
push 0xa
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a878], eax
push eax
push str.Dropped_file_limit_set_to__d._n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
mov ecx, str.ntdll_protect
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fd94
test dl, dl
je 0x3001fd90
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fd94
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fd74
xor eax, eax
jmp 0x3001fd99
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fdc2
push 0xa
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a870], eax
test eax, eax
mov eax, str.Config:_ntdll_write_protection_enabled.
jne 0x3001fdbc
mov eax, str.Config:_ntdll_write_protection_disabled.
push eax
jmp 0x30022833
mov ecx, str.ntdll_remap
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fdf0
test dl, dl
je 0x3001fdec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fdf0
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fdd0
xor eax, eax
jmp 0x3001fdf5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fe1e
push 0xa
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026a874], eax
test eax, eax
mov eax, str.Config:_ntdll_remap_protection_enabled.
jne 0x3001fe18
mov eax, str.Config:_ntdll_remap_protection_disabled.
push eax
jmp 0x30022833
mov ecx, str.standalone
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fe45
test dl, dl
je 0x3001fe41
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fe45
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fe25
xor eax, eax
jmp 0x3001fe4a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fe5e
cmp byte [edi], 0x31
sete al
mov dword [0x3026b2b8], eax
jmp 0x3002283b
mov ecx, str.exclude_apis
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001fe85
test dl, dl
je 0x3001fe81
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001fe85
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fe65
xor eax, eax
jmp 0x3001fe8a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001fedd
xor ecx, ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x200
jae 0x3002283b
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x3001feb3
mov byte [esi], 0
mov ecx, edi
call fcn.3001f260
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 0x3026a880], eax
add ecx, 4
mov dword [ebp - 0x24], ecx
test esi, esi
je 0x3002283b
lea edi, [esi + 1]
test edi, edi
jne 0x3001fe93
jmp 0x3002283b
mov ecx, str.exclude_dlls
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ff04
test dl, dl
je 0x3001ff00
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ff04
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fee4
xor eax, eax
jmp 0x3001ff09
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ff5c
xor ecx, ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x200
jae 0x3002283b
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x3001ff32
mov byte [esi], 0
mov ecx, edi
call fcn.3004c590
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 0x3026aa80], eax
add ecx, 4
mov dword [ebp - 0x24], ecx
test esi, esi
je 0x3002283b
lea edi, [esi + 1]
test edi, edi
jne 0x3001ff12
jmp 0x3002283b
mov ecx, str.base_on_api
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x3001ff83
test dl, dl
je 0x3001ff7f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x3001ff83
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001ff63
xor eax, eax
jmp 0x3001ff88
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3001ffea
mov dword [ebp - 0x28], eax
nop
cmp eax, 0x200
jae 0x3002283b
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x3001ffaf
mov byte [esi], 0
mov ecx, edi
call fcn.3001f260
mov ecx, dword [ebp - 0x28]
push edi
push str.Added__s_to_base_on_API_list._n
mov dword [ecx + 0x3026ac80], eax
add ecx, 4
mov dword [ebp - 0x28], ecx
call fcn.3000a0d0
add esp, 8
test esi, esi
je 0x3002283b
mov eax, dword [ebp - 0x28]
lea edi, [esi + 1]
test edi, edi
jne 0x3001ff90
jmp 0x3002283b
mov ecx, str.dump_on_api
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x30020011
test dl, dl
je 0x3002000d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x30020011
add eax, 2
add ecx, 2
test dl, dl
jne 0x3001fff1
xor eax, eax
jmp 0x30020016
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3002007a
mov dword [ebp - 0x28], eax
lea ecx, [ecx]
cmp eax, 0x200
jae 0x3002283b
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x3002003f
mov byte [esi], 0
mov ecx, edi
call fcn.3001f260
mov ecx, dword [ebp - 0x28]
push edi
push str.Added__s_to_dump_on_API_list._n
mov dword [ecx + 0x3026ae80], eax
add ecx, 4
mov dword [ebp - 0x28], ecx
call fcn.3000a0d0
add esp, 8
test esi, esi
je 0x3002283b
mov eax, dword [ebp - 0x28]
lea edi, [esi + 1]
test edi, edi
jne 0x30020020
jmp 0x3002283b
mov ecx, str.coverage_modules
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x300200a1
test dl, dl
je 0x3002009d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x300200a1
add eax, 2
add ecx, 2
test dl, dl
jne 0x30020081
xor eax, eax
jmp 0x300200a6
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3002010a
mov dword [ebp - 0x28], eax
lea ecx, [ecx]
cmp eax, 0x200
jae 0x3002283b
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x300200cf
mov byte [esi], 0
mov ecx, edi
call fcn.3004c590
mov ecx, dword [ebp - 0x28]
push edi
push str.Added__s_to_coverage_modules_list._n
mov dword [ecx + 0x3026b080], eax
add ecx, 4
mov dword [ebp - 0x28], ecx
call fcn.3000a0d0
add esp, 8
test esi, esi
je 0x3002283b
mov eax, dword [ebp - 0x28]
lea edi, [esi + 1]
test edi, edi
jne 0x300200b0
jmp 0x3002283b
mov ecx, str.dump_on_api_type
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x30020131
test dl, dl
je 0x3002012d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x30020131
add eax, 2
add ecx, 2
test dl, dl
jne 0x30020111
xor eax, eax
jmp 0x30020136
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3002014f
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b280], eax
jmp 0x3002283b
mov ecx, str.file_offsets
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x30020176
test dl, dl
je 0x30020172
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x30020176
add eax, 2
add ecx, 2
test dl, dl
jne 0x30020156
xor eax, eax
jmp 0x3002017b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x3002019a
cmp byte [edi], 0x31
sete al
mov dword [0x3026d5bc], eax
jne 0x3002283b
push str.Breakpoints_interpreted_as_file_offsets._n
jmp 0x30022833
push str.export
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300201cf
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x30269788], eax
push eax
push str.Config:_Export_address_set_to_0x_x
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.patch
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300202d0
push 0x3a
push edi
call fcn.3015be70
add esp, 8
test eax, eax
je 0x300202c6
push 0
lea esi, [eax + 1]
mov byte [eax], 0
push 0
push edi
mov dword [ebp - 0x24], esi
call fcn.30166144
add esp, 0xc
mov dword [ebp - 0x28], eax
push 0x2b
push esi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020249
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
add esp, 0xc
push eax
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
jmp 0x30020280
push 0x2d
push esi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x3002027d
push 0
lea ecx, [esi + 1]
push 0
push ecx
call fcn.30166144
add esp, 0xc
neg eax
push eax
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
add esp, 8
mov byte [esi], 0
mov esi, dword [ebp - 0x24]
push 0
push 0
push esi
call fcn.30166144
mov esi, eax
add esp, 0xc
test esi, esi
je 0x300202b3
push dword [ebp - 0x28]
push esi
push str.Config:_patching_address_0x_p_with_byte_0x_x
call fcn.3000a0d0
mov dl, byte [ebp - 0x28]
add esp, 0xc
mov ecx, esi
call fcn.30006690
jmp 0x3002283b
push edi
push str.Config:_patch_address_missing_invalid:__s
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.Config:_patch_byte_missing
jmp 0x30022833
push 0x301f6f58
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300203cd
mov eax, edi
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], ecx
cmp ecx, 0x400
jae 0x3002283b
push 0x3a
push eax
call fcn.3015be70
add esp, 8
test eax, eax
je 0x3002030e
mov byte [eax], 0
push 0x2b
push edi
mov dword [ebp - 0x28], 0
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x30020335
push 0
lea ecx, [esi + 1]
push 0
push ecx
call fcn.30166144
jmp 0x30020355
push 0x2d
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x3002036c
push 0
lea eax, [esi + 1]
push 0
push eax
call fcn.30166144
neg eax
add esp, 0xc
mov dword [ebp - 0x28], eax
push eax
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov byte [esi], 0
add esp, 8
push 0
push 0
push dword [ebp - 0x20]
call fcn.30166144
mov ecx, dword [ebp - 0x24]
add esp, 0xc
add eax, dword [ebp - 0x28]
mov dword [ecx + 0x3026b99c], eax
add ecx, 4
mov dword [ebp - 0x24], ecx
mov eax, dword [ecx + 0x3026b998]
test eax, eax
je 0x300203b2
push eax
push str.Config:_Added_0x_p_to_breakpoint_list._n
call fcn.3000a0d0
mov ecx, dword [ebp - 0x24]
add esp, 8
mov dword [0x3026b2d0], 1
test esi, esi
je 0x3002283b
lea eax, [esi + 1]
mov dword [ebp - 0x20], eax
test eax, eax
jne 0x300202f0
jmp 0x3002283b
push str.action
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002045b
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], ecx
jmp 0x300203f0
mov dword [ebp - 0x20], ecx
cmp eax, 0x400
jae 0x3002283b
push 0x7c
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x30020412
mov byte [esi], 0
mov ecx, edi
call fcn.3001f260
mov ecx, dword [ebp - 0x24]
inc dword [ebp - 0x28]
mov dword [ecx + 0x3026cd9c], eax
add ecx, 4
mov dword [ebp - 0x24], ecx
push dword [ecx + 0x3026cd98]
push dword [ebp - 0x20]
push str.Config:_Action__d_set_to__s.
call fcn.3000a0d0
add esp, 0xc
test esi, esi
je 0x3002283b
mov eax, dword [ebp - 0x24]
lea edi, [esi + 1]
mov ecx, dword [ebp - 0x28]
test edi, edi
jne 0x300203f0
jmp 0x3002283b
push 0x301f79e0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002070d
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x300205b2
cmp byte [esi + 1], 0x3a
jne 0x300205b2
push str.capemon
mov dword [0x3026b424], 0
push edi
mov word [esi], 0
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300204b8
mov eax, dword [0x30267724]
jmp 0x300204bf
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x20], eax
lea eax, [esi + 2]
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.3001f260
mov ecx, edi
mov dword [0x3026b314], eax
call fcn.3001f260
mov esi, dword [ebp - 0x20]
mov dword [0x3026b318], eax
test esi, esi
je 0x300204f9
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x3026b424], eax
jmp 0x3002050f
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.3000a0d0
mov eax, dword [0x3026b424]
add esp, 8
mov edi, dword [ebp - 0x24]
test eax, eax
je 0x30020546
push dword [0x3026b314]
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b478], 1
push eax
push str.Config:_bp0_set_to_0x_p___s::_s_._n
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
test esi, esi
je 0x3002283b
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
test eax, eax
je 0x30020599
push dword [0x3026b314]
add eax, esi
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b424], eax
push eax
push str.Config:_bp0_set_to_0x_p___s::_s_._n
mov dword [0x3026b478], 1
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
push edi
push dword [0x3026b318]
push str.Config:_Failed_to_get_address_for_function__s::_s_n
call fcn.3000a0d0
add esp, 0xc
jmp 0x3002283b
push 4
push str.zero
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
jne 0x300205dc
push str.Config:_bp0_set_to_zero._n
call fcn.3000a0d0
mov byte [0x3026b434], 1
jmp 0x30022838
push 2
push 0x301f7a90
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x300206fd
push 0xa
push str.entrypoint
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x300206fd
push 0x2b
push edi
xor esi, esi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3002062f
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.30166144
mov esi, eax
jmp 0x30020652
push 0x2d
push edi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020669
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
cmp eax, dword [0x3026b424]
je 0x3002283b
cmp eax, dword [0x3026b428]
je 0x3002283b
cmp eax, dword [0x3026b42c]
je 0x3002283b
cmp eax, dword [0x3026b430]
je 0x3002283b
mov dword [0x3026b424], eax
mov dword [0x3026b2d0], 1
cmp eax, 0xffffffff
jne 0x300206cc
push 0
push 0
push edi
call fcn.301660b2
add esp, 0xc
mov dword [0x3026b424], eax
test esi, esi
je 0x300206ea
push eax
push str.Config:_bp0_was_0x_p._n
call fcn.3000a0d0
mov eax, dword [0x3026b424]
add esp, 8
add eax, esi
mov dword [0x3026b424], eax
push eax
push str.Config:_bp0_set_to_0x_p._n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push dword [0x3026b424]
push str.Config:_bp0_set_to_entry_point._n
jmp 0x30020edf
push 0x301f7af8
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300209aa
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x3002084f
cmp byte [esi + 1], 0x3a
jne 0x3002084f
push str.capemon
mov dword [0x3026b428], 0
push edi
mov word [esi], 0
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002076a
mov eax, dword [0x30267724]
jmp 0x30020771
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x20], eax
lea eax, [esi + 2]
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.3001f260
mov ecx, edi
mov dword [0x3026b314], eax
call fcn.3001f260
mov esi, dword [ebp - 0x20]
mov dword [0x3026b318], eax
test esi, esi
je 0x300207ab
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x3026b428], eax
jmp 0x300207c1
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.3000a0d0
mov eax, dword [0x3026b428]
add esp, 8
mov edi, dword [ebp - 0x24]
test eax, eax
je 0x300207f8
push dword [0x3026b314]
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b47c], 1
push eax
push str.Config:_bp1_set_to_0x_p___s::_s_._n
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
test esi, esi
je 0x3002283b
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
test eax, eax
je 0x30020599
push dword [0x3026b314]
add eax, esi
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b428], eax
push eax
push str.Config:_bp1_set_to_0x_p___s::_s_._n
mov dword [0x3026b47c], 1
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
push 4
push str.zero
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
jne 0x30020879
push str.Config:_bp1_set_to_zero._n
call fcn.3000a0d0
mov byte [0x3026b435], 1
jmp 0x30022838
push 2
push 0x301f7a90
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x3002099a
push 0xa
push str.entrypoint
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x3002099a
push 0x2b
push edi
xor esi, esi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x300208cc
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.30166144
mov esi, eax
jmp 0x300208ef
push 0x2d
push edi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020906
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
cmp eax, dword [0x3026b424]
je 0x3002283b
cmp eax, dword [0x3026b428]
je 0x3002283b
cmp eax, dword [0x3026b42c]
je 0x3002283b
cmp eax, dword [0x3026b430]
je 0x3002283b
mov dword [0x3026b428], eax
mov dword [0x3026b2d0], 1
cmp eax, 0xffffffff
jne 0x30020969
push 0
push 0
push edi
call fcn.301660b2
add esp, 0xc
mov dword [0x3026b428], eax
test esi, esi
je 0x30020987
push eax
push str.Config:_bp1_was_0x_p._n
call fcn.3000a0d0
mov eax, dword [0x3026b428]
add esp, 8
add eax, esi
mov dword [0x3026b428], eax
push eax
push str.Config:_bp1_set_to_0x_p._n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push dword [0x3026b428]
push str.Config:_bp1_set_to_entry_point._n
jmp 0x30020edf
push 0x301f7b94
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30020c47
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x30020aec
cmp byte [esi + 1], 0x3a
jne 0x30020aec
push str.capemon
mov dword [0x3026b42c], 0
push edi
mov word [esi], 0
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30020a07
mov eax, dword [0x30267724]
jmp 0x30020a0e
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x20], eax
lea eax, [esi + 2]
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.3001f260
mov ecx, edi
mov dword [0x3026b314], eax
call fcn.3001f260
mov esi, dword [ebp - 0x20]
mov dword [0x3026b318], eax
test esi, esi
je 0x30020a48
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x3026b42c], eax
jmp 0x30020a5e
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.3000a0d0
mov eax, dword [0x3026b42c]
add esp, 8
mov edi, dword [ebp - 0x24]
test eax, eax
je 0x30020a95
push dword [0x3026b314]
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b480], 1
push eax
push str.Config:_bp2_set_to_0x_p___s::_s_._n
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
test esi, esi
je 0x3002283b
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
test eax, eax
je 0x30020599
push dword [0x3026b314]
add eax, esi
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b42c], eax
push eax
push str.Config:_bp2_set_to_0x_p___s::_s_._n
mov dword [0x3026b480], 1
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
push 4
push str.zero
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
jne 0x30020b16
push str.Config:_bp2_set_to_zero._n
call fcn.3000a0d0
mov byte [0x3026b436], 1
jmp 0x30022838
push 2
push 0x301f7a90
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x30020c37
push 0xa
push str.entrypoint
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x30020c37
push 0x2b
push edi
xor esi, esi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020b69
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.30166144
mov esi, eax
jmp 0x30020b8c
push 0x2d
push edi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020ba3
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
cmp eax, dword [0x3026b424]
je 0x3002283b
cmp eax, dword [0x3026b428]
je 0x3002283b
cmp eax, dword [0x3026b42c]
je 0x3002283b
cmp eax, dword [0x3026b430]
je 0x3002283b
mov dword [0x3026b42c], eax
mov dword [0x3026b2d0], 1
cmp eax, 0xffffffff
jne 0x30020c06
push 0
push 0
push edi
call fcn.301660b2
add esp, 0xc
mov dword [0x3026b42c], eax
test esi, esi
je 0x30020c24
push eax
push str.Config:_bp2_was_0x_p._n
call fcn.3000a0d0
mov eax, dword [0x3026b42c]
add esp, 8
add eax, esi
mov dword [0x3026b42c], eax
push eax
push str.Config:_bp2_set_to_0x_p._n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push dword [0x3026b42c]
push str.Config:_bp2_set_to_entry_point._n
jmp 0x30020edf
push 0x301f7c30
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30020f00
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x30020d89
cmp byte [esi + 1], 0x3a
jne 0x30020d89
push str.capemon
mov dword [0x3026b430], 0
push edi
mov word [esi], 0
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30020ca4
mov eax, dword [0x30267724]
jmp 0x30020cab
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x20], eax
lea eax, [esi + 2]
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.3001f260
mov ecx, edi
mov dword [0x3026b314], eax
call fcn.3001f260
mov esi, dword [ebp - 0x20]
mov dword [0x3026b318], eax
test esi, esi
je 0x30020ce5
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x3026b430], eax
jmp 0x30020cfb
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.3000a0d0
mov eax, dword [0x3026b430]
add esp, 8
mov edi, dword [ebp - 0x24]
test eax, eax
je 0x30020d32
push dword [0x3026b314]
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b484], 1
push eax
push str.Config:_bp3_set_to_0x_p___s::_s_._n
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
test esi, esi
je 0x3002283b
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
test eax, eax
je 0x30020599
push dword [0x3026b314]
add eax, esi
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b430], eax
push eax
push str.Config:_bp3_set_to_0x_p___s::_s_._n
mov dword [0x3026b484], 1
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
push 4
push str.zero
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
jne 0x30020db3
push str.Config:_bp3_set_to_zero._n
call fcn.3000a0d0
mov byte [0x3026b437], 1
jmp 0x30022838
push 2
push 0x301f7a90
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x30020ed4
push 0xa
push str.entrypoint
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
je 0x30020ed4
push 0x2b
push edi
xor esi, esi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020e06
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.30166144
mov esi, eax
jmp 0x30020e29
push 0x2d
push edi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30020e40
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
cmp eax, dword [0x3026b424]
je 0x3002283b
cmp eax, dword [0x3026b428]
je 0x3002283b
cmp eax, dword [0x3026b42c]
je 0x3002283b
cmp eax, dword [0x3026b430]
je 0x3002283b
mov dword [0x3026b430], eax
mov dword [0x3026b2d0], 1
cmp eax, 0xffffffff
jne 0x30020ea3
push 0
push 0
push edi
call fcn.301660b2
add esp, 0xc
mov dword [0x3026b430], eax
test esi, esi
je 0x30020ec1
push eax
push str.Config:_bp3_was_0x_p._n
call fcn.3000a0d0
mov eax, dword [0x3026b430]
add esp, 8
add eax, esi
mov dword [0x3026b430], eax
push eax
push str.Config:_bp3_set_to_0x_p._n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push dword [0x3026b430]
push str.Config:_bp3_set_to_entry_point._n
call fcn.3000a0d0
add esp, 8
mov dword [0x3026dfe4], 1
mov dword [0x3026b2d0], 1
jmp 0x3002283b
push 0x301f7ccc
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300210f5
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x30021042
cmp byte [esi + 1], 0x3a
jne 0x30021042
push str.capemon
mov dword [0x3026b438], 0
push edi
mov word [esi], 0
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30020f5d
mov eax, dword [0x30267724]
jmp 0x30020f64
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x20], eax
lea eax, [esi + 2]
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.3001f260
mov ecx, edi
mov dword [0x3026b314], eax
call fcn.3001f260
mov esi, dword [ebp - 0x20]
mov dword [0x3026b318], eax
test esi, esi
je 0x30020f9e
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x3026b438], eax
jmp 0x30020fb4
push eax
push str.Config:_Failed_to_get_base_for_module___s_._n
call fcn.3000a0d0
mov eax, dword [0x3026b438]
add esp, 8
mov edi, dword [ebp - 0x24]
test eax, eax
je 0x30020feb
push dword [0x3026b314]
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b478], 1
push eax
push str.Config:_br0_set_to_0x_p___s::_s_._n
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
test esi, esi
je 0x3002283b
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
test eax, eax
je 0x30020599
push dword [0x3026b314]
add eax, esi
mov dword [0x3026b2d0], 1
push dword [0x3026b318]
mov dword [0x3026b438], eax
push eax
push str.Config:_br0_set_to_0x_p___s::_s_._n
mov dword [0x3026b478], 1
call fcn.3000a0d0
add esp, 0x10
jmp 0x3002283b
push 0x2b
push edi
xor esi, esi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30021065
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.30166144
mov esi, eax
jmp 0x30021088
push 0x2d
push edi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3002109f
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b438], eax
test eax, eax
je 0x3002283b
mov dword [0x3026b2d0], 1
test esi, esi
je 0x300210e2
push esi
push eax
push str.Config:_br0_was_0x_x__delta_0x_x_._n
call fcn.3000a0d0
mov eax, dword [0x3026b438]
add esp, 0xc
add eax, esi
mov dword [0x3026b438], eax
push eax
push str.Config:_br0_set_to_0x_x__break_on_return__n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push 0x301f7d44
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300211be
push 0x2b
push edi
xor esi, esi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x3002112e
push esi
lea ecx, [eax + 1]
push esi
push ecx
call fcn.30166144
mov esi, eax
jmp 0x30021151
push 0x2d
push edi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x20], eax
test eax, eax
je 0x30021168
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
mov esi, eax
neg esi
add esp, 0xc
push esi
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x20]
add esp, 8
mov byte [eax], 0
push 0
push 0
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b43c], eax
test eax, eax
je 0x3002283b
mov dword [0x3026b2d0], 1
test esi, esi
je 0x300211ab
push esi
push eax
push str.Config:_br1_was_0x_x__delta_0x_x_._n
call fcn.3000a0d0
mov eax, dword [0x3026b43c]
add esp, 0xc
add eax, esi
mov dword [0x3026b43c], eax
push eax
push str.Config:_br1_set_to_0x_x__break_on_return__n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push 0x301f7d98
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021205
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b440], eax
test eax, eax
je 0x3002283b
push eax
push str.Config:_br2_set_to_0x_x__break_on_return__n
mov dword [0x3026b2d0], 1
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push 0x301f7dc8
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002124c
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b444], eax
test eax, eax
je 0x3002283b
push eax
push str.Config:_br3_set_to_0x_x__break_on_return__n
mov dword [0x3026b2d0], 1
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.sysbp
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002136e
xor esi, esi
mov dword [ebp - 0x20], edi
mov eax, edi
lea esp, [esp]
cmp esi, 0x400
jae 0x3002283b
push 0x3a
push eax
call fcn.3015be70
add esp, 8
test eax, eax
je 0x3002128e
mov byte [eax], 0
push 0x2b
push edi
mov dword [ebp - 0x24], 0
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x28], eax
test eax, eax
je 0x300212b6
push 0
lea ecx, [eax + 1]
push 0
push ecx
call fcn.30166144
jmp 0x300212d5
push 0x2d
push edi
call fcn.3015be70
add esp, 8
mov dword [ebp - 0x28], eax
test eax, eax
je 0x300212ef
push 0
inc eax
push 0
push eax
call fcn.30166144
neg eax
add esp, 0xc
mov dword [ebp - 0x24], eax
push eax
push str.Config:_Delta_0x_x._n
call fcn.3000a0d0
mov eax, dword [ebp - 0x28]
add esp, 8
mov byte [eax], 0
xor eax, eax
cmp dword [esi*4 + 0x3026bd9c], 0
je 0x30021327
inc esi
cmp dword [esi*4 + 0x3026bd9c], 0
je 0x30021327
inc esi
cmp dword [esi*4 + 0x3026bd9c], 0
je 0x30021327
inc esi
cmp dword [esi*4 + 0x3026bd9c], 0
je 0x30021327
add eax, 4
inc esi
cmp eax, 0x400
jb 0x300212f1
cmp esi, 0x400
jae 0x30021352
push 0
push 0
push dword [ebp - 0x20]
call fcn.30166144
add esp, 0xc
add eax, dword [ebp - 0x24]
mov dword [esi*4 + 0x3026bd9c], eax
mov dword [0x3026b2d0], 1
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x3002283b
add eax, 1
mov dword [ebp - 0x20], eax
jne 0x30021270
jmp 0x3002283b
push str.sysbpmode
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300213a4
push 0xa
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026d1a0], eax
push eax
push str.Syscall_breakpoint_mode_set_to__d._n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.count0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300213d9
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b448], eax
push eax
push str.Config:_Count_for_breakpoint_0_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.count1
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002140e
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b44c], eax
push eax
push str.Config:_Count_for_breakpoint_1_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.count2
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021443
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b450], eax
push eax
push str.Config:_Count_for_breakpoint_2_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.count3
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021478
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b454], eax
push eax
push str.Config:_Count_for_breakpoint_3_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push 0x301f7f00
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300214ad
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b458], eax
push eax
push str.Config:_Hit_count_for_breakpoint_0_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push 0x301f7f34
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300214e2
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b45c], eax
push eax
push str.Config:_Hit_count_for_breakpoint_1_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push 0x301f7f68
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021517
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b460], eax
push eax
push str.Config:_Hit_count_for_breakpoint_2_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push 0x301f7f9c
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002154c
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b464], eax
push eax
push str.Config:_Hit_count_for_breakpoint_3_set_to__d_n
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.depth
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300215ab
push 3
push 0x301f7fd8
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
jne 0x30021586
mov dword [0x3026dc74], 0x7fffffff
push str.Config:_Trace_depth_set_to_all
jmp 0x30022833
push 0xa
push 0
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026dc74], eax
push eax
push str.Config:_Trace_depth_set_to_0x_x
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.count
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002160a
push 3
push 0x301f7fd8
push edi
call fcn.301642c1
add esp, 0xc
test eax, eax
jne 0x300215e5
mov dword [0x3026d8f8], 0x7fffffff
push str.Config:_Trace_instruction_count_set_to_all
jmp 0x30022833
push 0xa
push 0
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026d8f8], eax
push eax
push str.Config:_Trace_instruction_count_set_to_0x_x
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.step_out
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002165b
push eax
push eax
push edi
mov dword [0x3026b2d0], 1
call fcn.30166144
add esp, 0xc
mov dword [0x3026b424], eax
test eax, eax
je 0x3002283b
push eax
push str.Config:_Step_out_breakpoint_set_to_0x_x._n
mov dword [0x3026d5b8], 0x31
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.dumpsize
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300216cf
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026dd90], eax
test eax, eax
je 0x30021694
push eax
push str.Config:_DumpSize_set_to_0x_x
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
mov ecx, edi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x300216a0
sub ecx, edx
push ecx
push edi
push 0x3026d920
call fcn.301664c0
add esp, 0xc
push 0x3026d920
push str.Config:_DumpSize_set_to_string___s_.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.action0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002172f
push 0x104
push eax
push 0x3026dc80
call fcn.3015cdc0
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021700
sub ecx, edx
push ecx
push edi
push 0x3026dc80
call fcn.301664c0
add esp, 0xc
push 0x3026dc80
push str.Config:_Action0_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.action1
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002178f
push 0x104
push eax
push 0x3026dee0
call fcn.3015cdc0
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021760
sub ecx, edx
push ecx
push edi
push 0x3026dee0
call fcn.301664c0
add esp, 0xc
push 0x3026dee0
push str.Config:_Action1_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.action2
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300217ef
push 0x104
push eax
push 0x3026da40
call fcn.3015cdc0
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x300217c0
sub ecx, edx
push ecx
push edi
push 0x3026da40
call fcn.301664c0
add esp, 0xc
push 0x3026da40
push str.Config:_Action2_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.action3
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x3002184f
push 0x104
push eax
push 0x3026ddc0
call fcn.3015cdc0
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021820
sub ecx, edx
push ecx
push edi
push 0x3026ddc0
call fcn.301664c0
add esp, 0xc
push 0x3026ddc0
push str.Config:_Action3_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.instruction0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x300227c4
push str.instr0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x300227c4
push str.instruction1
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x30022770
push str.instr1
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x30022770
push str.instruction2
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x30022714
push str.instr2
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x30022714
push str.instruction3
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x300226b8
push str.instr3
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
je 0x300226b8
push str.procname0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021968
lea ecx, [ebp - 0x10]
call fcn.3002a210
push 0x104
push 8
push dword [0x3026d8b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.3002a240
mov ecx, edi
mov dword [0x3026d8f4], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30021941
sub ecx, edx
push ecx
push edi
push esi
call fcn.301664c0
add esp, 0xc
push edi
push str.Config:_procname0_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
push str.break_on_return
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300219b5
push 0x104
push edi
push 0x3026b31c
mov dword [0x3026b2d0], 1
call fcn.301664c0
add esp, 0xc
push 0x3026b31c
push str.Config:_Break_on_return_set_to__s.
call fcn.3000a0d0
add esp, 8
mov byte [0x3026b420], 1
jmp 0x3002283b
push str.trace_all
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x300219f4
push 0xa
push eax
push edi
mov dword [0x3026b2d0], 1
call fcn.30166144
add esp, 0xc
mov dword [0x3026d5b4], eax
test eax, eax
je 0x3002283b
push str.Config:_Trace_all_enabled._n
jmp 0x30022833
push str.trace_into_api
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021a5f
xor ebx, ebx
cmp ebx, 0x200
jae 0x30021a4d
push 0x3a
push edi
call fcn.3015be70
mov esi, eax
add esp, 8
test esi, esi
je 0x30021a24
mov byte [esi], 0
mov ecx, edi
call fcn.3001f260
push edi
mov dword [ebx + 0x3026d5d0], eax
add ebx, 4
push str.Config:_Added__s_to_trace_into_API_list._n
call fcn.3000a0d0
add esp, 8
test esi, esi
je 0x30021a4d
lea edi, [esi + 1]
test edi, edi
jne 0x30021a08
mov ebx, dword [ebp - 0x24]
mov dword [0x3026b2d0], 1
jmp 0x3002283b
push str.dumptype0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021a86
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b468], eax
jmp 0x3002283b
push str.dumptype1
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021aad
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b46c], eax
jmp 0x3002283b
push str.dumptype2
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021ad4
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b470], eax
jmp 0x3002283b
push str.dumptype3
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021afb
push eax
push eax
push edi
call fcn.30166144
add esp, 0xc
mov dword [0x3026b474], eax
jmp 0x3002283b
push str.bpva0
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021b1d
cmp byte [edi], 0x31
sete al
mov dword [0x3026b478], eax
jmp 0x3002283b
push str.bpva1
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021b3f
cmp byte [edi], 0x31
sete al
mov dword [0x3026b47c], eax
jmp 0x3002283b
push str.bpva2
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021b61
cmp byte [edi], 0x31
sete al
mov dword [0x3026b480], eax
jmp 0x3002283b
push str.bpva3
push ebx
call fcn.3016475e
add esp, 8
test eax, eax
jne 0x30021b83
lea ecx, [ebp - 0x10]
call fcn.3002a210
push 0x104
push 8
push dword [0x3026d8b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.3002a240
mov ecx, edi
mov dword [0x3026dff0], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x300226e8
sub ecx, edx
push ecx
push edi
push dword [0x3026dd88]
call fcn.301664c0
add esp, 0xc
push edi
push str.Config:_Instruction3_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
lea ecx, [ebp - 0x10]
call fcn.3002a210
push 0x104
push 8
push dword [0x3026d8b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.3002a240
mov ecx, edi
mov dword [0x3026dff0], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30022744
sub ecx, edx
push ecx
push edi
push dword [0x3026dff4]
call fcn.301664c0
add esp, 0xc
push edi
push str.Config:_Instruction2_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
lea ecx, [ebp - 0x10]
call fcn.3002a210
push 0x104
push 8
push dword [0x3026d8b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.3002a240
mov ecx, edi
mov dword [0x3026dff0], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x300227a0
sub ecx, edx
push ecx
push edi
push esi
call fcn.301664c0
add esp, 0xc
push edi
push str.Config:_Instruction1_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
lea ecx, [ebp - 0x10]
call fcn.3002a210
push 0x104
push 8
push dword [0x3026d8b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.3002a240
mov ecx, edi
mov dword [0x3026dfec], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x300227f4
sub ecx, edx
push ecx
push edi
push esi
call fcn.301664c0
add esp, 0xc
push edi
push str.Config:_Instruction0_set_to__s.
call fcn.3000a0d0
add esp, 8
jmp 0x3002283b
xor eax, eax
cmp byte [edi], 0x31
sete al
mov dword [0x3026b2b0], eax
jne 0x3002282e
push str.Breakpoint_logging_to_behavior_log_enabled._n
jmp 0x30022833
push str.Breakpoint_logging_to_behavior_log_disabled._n
call fcn.3000a0d0
add esp, 4
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x30022840
sub ecx, edx
mov byte [ecx + ebx], 0x3d
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.30159c2d
mov esp, ebp
pop ebp
ret