Function at 0x12ee99a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x13068950
push eax
mov dword fs:[0], esp
sub esp, 0xb8
push ebx
push esi
push edi
mov edi, dword [esp + 0xd4]
cmp edi, 2
je 0x12eea7a0
mov esi, dword [esp + 0xdc]
xor ebx, ebx
cmp esi, ebx
je 0x12eea7a0
cmp dword [esi], 2
jne 0x12eea7a0
push 0x131912a8
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x40], ebx
call fcn.12f46b50
push 0x131912a8
lea ecx, [esp + 0x14]
mov dword [esp + 0xd0], ebx
call fcn.12f46b50
push 0x131912a8
lea ecx, [esp + 0x20]
mov byte [esp + 0xd0], 1
call fcn.12f46b50
push 0x131912a8
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd0], 2
call fcn.12f46b50
lea ecx, [esp + 0x60]
mov byte [esp + 0xcc], 3
call fcn.12f55740
lea ecx, [esp + 0x74]
mov byte [esp + 0xcc], 4
call fcn.12f55740
lea eax, [esp + 0x74]
mov byte [esp + 0xcc], 5
push eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], ebx
call fcn.12ee98d0
lea ecx, [esp + 0x38]
lea edx, [esp + 0x78]
push ecx
push edx
mov dword [esp + 0x40], ebx
call fcn.12ee97a0
mov eax, dword [0x13199068]
add esp, 0xc
cmp eax, ebx
je 0x12ee9acb
mov eax, dword [esp + 0x78]
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_RedWhiteList___d_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x10
mov cx, word [esi + 0x1c]
mov eax, dword [esp + 0xd8]
push ebp
mov bp, word [esi + 6]
cmp edi, 5
mov word [esp + 0x50], cx
je 0x12eea2fd
cmp edi, 1
je 0x12ee9af3
cmp edi, 4
jne 0x12ee9aff
cmp bp, 4
je 0x12eea361
jmp 0x12ee9b09
cmp bp, 4
je 0x12eea3b9
cmp edi, 1
je 0x12ee9b17
cmp edi, 4
jne 0x12eea3b9
lea ecx, [esp + 0x10]
call fcn.12f47060
lea ecx, [esp + 0x14]
call fcn.12f47060
lea ecx, [esp + 0x88]
call fcn.12e9bf00
push 0x131912a8
lea ecx, [esp + 0x78]
mov byte [esp + 0xd4], 6
call fcn.12f46b50
lea ecx, [esp + 0x10]
mov byte [esp + 0xd0], 7
call fcn.12f47060
lea ecx, [esp + 0x14]
call fcn.12f47060
cmp dword [esi + 0x58], ebx
jbe 0x12ee9bad
mov ecx, esi
call fcn.12ee7df0
mov edx, dword [esi + 0x38]
mov ecx, dword [esi + 0x54]
mov edi, dword [esi + 0x50]
push 1
lea eax, [eax + edx*2 + 2]
mov edx, dword [esi + 0x4c]
add ecx, edi
mov edi, dword [esi + 0x48]
add ecx, edx
mov edx, dword [esi + 0x44]
add ecx, edi
mov edi, dword [esi + 0x40]
add ecx, edx
mov edx, dword [esi + 0x3c]
add ecx, edi
add ecx, edx
lea edx, [eax + ecx*2 + 0xe]
lea eax, [esp + 0x18]
push edx
push eax
call fcn.12ee96c0
add esp, 0xc
mov ax, word [esi + 4]
push 0x131912a8
and eax, 0xffdf
sub eax, 0x40
cmp ax, 0x1a
ja 0x12ee9c0b
lea ecx, [esp + 0x1c]
call fcn.12f46b50
xor ecx, ecx
lea edx, [esp + 0x18]
mov cx, word [esi + 4]
mov byte [esp + 0xd0], 8
push ecx
push str._c:
push edx
call fcn.12f4a270
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.12ee94e0
add esp, 0x14
mov byte [esp + 0xd0], 7
lea ecx, [esp + 0x18]
jmp 0x12ee9c54
lea ecx, [esp + 0x1c]
call fcn.12f46b50
mov byte [esp + 0xd0], 9
call fcn.12f7a370
and eax, 0xffff
lea edx, [esp + 0x18]
push eax
push str._c:
push edx
call fcn.12f4a270
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.12ee94e0
add esp, 0x14
mov byte [esp + 0xd0], 7
lea ecx, [esp + 0x18]
call fcn.12f472f0
cmp dword [0x13199068], ebx
je 0x12ee9c75
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_SysVol
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0x12ee9c91
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x64]
push edx
push ecx
push eax
call fcn.12ee9720
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.12f47060
lea ecx, [esp + 0x14]
call fcn.12f47060
cmp dword [esi + 0x58], ebx
jbe 0x12ee9ceb
mov ecx, esi
call fcn.12ee7df0
mov edx, dword [esi + 0x38]
mov ecx, dword [esi + 0x54]
mov edi, dword [esi + 0x50]
push 1
lea eax, [eax + edx*2 + 2]
mov edx, dword [esi + 0x4c]
add ecx, edi
mov edi, dword [esi + 0x48]
add ecx, edx
mov edx, dword [esi + 0x44]
add ecx, edi
mov edi, dword [esi + 0x40]
add ecx, edx
mov edx, dword [esi + 0x3c]
add ecx, edi
add ecx, edx
lea edx, [eax + ecx*2 + 0xe]
lea eax, [esp + 0x18]
push edx
push eax
call fcn.12ee96c0
add esp, 0xc
cmp dword [esi + 0x60], ebx
jbe 0x12ee9d33
mov ecx, esi
call fcn.12ee7e50
mov ecx, dword [esi + 0x40]
mov edx, dword [esi + 0x5c]
mov edi, dword [esi + 0x54]
push 1
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esi + 0x50]
add edx, edi
mov edi, dword [esi + 0x4c]
add edx, ecx
mov ecx, dword [esi + 0x48]
add edx, edi
mov edi, dword [esi + 0x44]
add edx, ecx
mov ecx, dword [esi + 0x58]
add edx, edi
add edx, ecx
lea ecx, [esp + 0x14]
lea eax, [eax + edx*2 + 0xe]
push eax
push ecx
call fcn.12ee96c0
add esp, 0xc
cmp dword [esi + 0x64], ebx
jbe 0x12ee9d7b
mov ecx, esi
call fcn.12ee7e80
mov edx, dword [esi + 0x44]
mov ecx, dword [esi + 0x5c]
mov edi, dword [esi + 0x54]
push 1
lea eax, [eax + edx*2 + 2]
mov edx, dword [esi + 0x50]
add ecx, edi
mov edi, dword [esi + 0x4c]
add ecx, edx
mov edx, dword [esi + 0x48]
add ecx, edi
mov edi, dword [esi + 0x58]
add ecx, edx
mov edx, dword [esi + 0x60]
add ecx, edi
add ecx, edx
lea edx, [eax + ecx*2 + 0xe]
lea eax, [esp + 0x18]
push edx
push eax
call fcn.12ee96c0
add esp, 0xc
cmp dword [0x13199068], ebx
je 0x12ee9d97
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_ProgramFilesDir
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0x12ee9db3
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x64]
push ecx
push edx
push eax
call fcn.12ee9720
add esp, 0xc
cmp bp, 1
je 0x12ee9dc3
cmp bp, 2
jne 0x12eea140
lea ecx, [esp + 0x10]
call fcn.12f47060
lea ecx, [esp + 0x14]
call fcn.12f47060
push 0x131912a8
lea ecx, [esp + 0x1c]
call fcn.12f46b50
push 0x131912a8
lea ecx, [esp + 0x28]
mov byte [esp + 0xd4], 0xa
call fcn.12f46b50
lea ecx, [esp + 0x54]
mov byte [esp + 0xd0], 0xb
call fcn.12f4cc70
mov eax, dword [esi + 0x28]
mov byte [esp + 0xd0], 0xc
cmp eax, ebx
jbe 0x12ee9ed6
mov eax, dword [esp + 0x50]
cmp ax, 2
je 0x12ee9e31
cmp ax, 3
jne 0x12ee9eba
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x24]
add eax, ecx
push 0x5e
lea eax, [esi + eax*2 + 0x6c]
push eax
call fcn.12f5d099
add esp, 8
test eax, eax
je 0x12ee9eba
mov edx, dword [esi + 0x20]
mov edi, dword [esi + 0x24]
add edx, edi
lea ecx, [esp + 0x54]
push ecx
push 0x130c6c74
lea eax, [esi + edx*2 + 0x6c]
push eax
call fcn.12f53760
mov eax, dword [esp + 0x64]
add esp, 0xc
xor edi, edi
cmp eax, ebx
jle 0x12ee9ed6
mov ebp, 2
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + edi*4]
cmp word [eax], 0x5e
jne 0x12ee9e9f
cmp dword [eax - 8], ebp
jl 0x12ee9e9f
add eax, 2
lea edx, [esp + 0x18]
push eax
push edx
call fcn.12ee94e0
add esp, 8
jmp 0x12ee9eaf
push 1
push eax
lea eax, [esp + 0x18]
push eax
call fcn.12ee96c0
add esp, 0xc
mov eax, dword [esp + 0x58]
inc edi
cmp edi, eax
jl 0x12ee9e7a
jmp 0x12ee9ed6
mov ecx, dword [esi + 0x24]
mov ebp, dword [esi + 0x20]
add ecx, ebp
push 1
lea eax, [esp + 0x14]
lea edx, [esi + ecx*2 + 0x6c]
push edx
push eax
call fcn.12ee96c0
add esp, 0xc
cmp dword [esi + 0x2c], ebx
jbe 0x12ee9fb2
mov eax, dword [esp + 0x50]
mov ebp, 2
cmp ax, bp
je 0x12ee9ef7
cmp ax, 3
jne 0x12ee9f91
mov ecx, dword [esi + 0x28]
mov edi, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
add ecx, edi
add ecx, edx
push 0x5e
lea eax, [esi + ecx*2 + 0x6e]
push eax
call fcn.12f5d099
add esp, 8
test eax, eax
je 0x12ee9f91
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x5c]
call fcn.12f4cce0
mov eax, dword [esi + 0x28]
mov ecx, dword [esi + 0x20]
mov edi, dword [esi + 0x24]
add eax, ecx
add eax, edi
lea edx, [esp + 0x54]
push edx
push 0x130c6c74
lea ecx, [esi + eax*2 + 0x6e]
push ecx
call fcn.12f53760
mov eax, dword [esp + 0x64]
add esp, 0xc
xor edi, edi
cmp eax, ebx
jle 0x12ee9fb2
mov edx, dword [esp + 0x54]
mov eax, dword [edx + edi*4]
cmp word [eax], 0x5e
jne 0x12ee9f76
cmp dword [eax - 8], ebp
jl 0x12ee9f76
add eax, 2
push eax
lea eax, [esp + 0x28]
push eax
call fcn.12ee94e0
add esp, 8
jmp 0x12ee9f86
push 1
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.12ee96c0
add esp, 0xc
mov eax, dword [esp + 0x58]
inc edi
cmp edi, eax
jl 0x12ee9f51
jmp 0x12ee9fb2
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x20]
mov ebp, dword [esi + 0x28]
add edx, eax
add edx, ebp
push 1
lea ecx, [esp + 0x18]
lea eax, [esi + edx*2 + 0x6e]
push eax
push ecx
call fcn.12ee96c0
add esp, 0xc
cmp dword [0x13199068], ebx
je 0x12ee9fce
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_PersonalDir
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0x12ee9fea
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x64]
push edx
push ecx
push eax
call fcn.12ee9720
add esp, 0xc
mov edx, dword [esp + 0x18]
cmp dword [edx - 8], ebx
je 0x12eea068
mov eax, dword [esp + 0x24]
cmp dword [eax - 8], ebx
je 0x12eea00a
push 0x130c6c74
lea ecx, [esp + 0x28]
call fcn.12f47f40
push str.Desktop.ini_.lnk
lea ecx, [esp + 0x28]
call fcn.12f47f40
mov eax, dword [esp + 0x18]
cmp dword [eax - 8], ebx
je 0x12eea03c
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x30]
push ecx
push edx
push eax
call fcn.12ebaa20
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x24]
add esp, 0xc
cmp dword [0x13199068], ebx
je 0x12eea068
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x30]
push ecx
push eax
mov eax, dword [esp + 0x30]
push edx
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_PersonalDir_ALONE___08x____d___r_n__s__r_n__s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
lea ecx, [esp + 0x10]
call fcn.12f47060
lea ecx, [esp + 0x14]
call fcn.12f47060
cmp dword [esi + 0x30], ebx
jbe 0x12eea0a5
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x20]
mov eax, dword [esi + 0x28]
mov ebp, dword [esi + 0x2c]
add ecx, edx
push 1
add ecx, eax
lea eax, [esp + 0x14]
add ecx, ebp
lea edx, [esi + ecx*2 + 0x70]
push edx
push eax
call fcn.12ee96c0
add esp, 0xc
cmp dword [esi + 0x34], ebx
jbe 0x12eea0d5
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x20]
mov edx, dword [esi + 0x28]
mov eax, dword [esi + 0x2c]
mov ebp, dword [esi + 0x30]
add ecx, edi
add ecx, edx
push 1
add ecx, eax
lea eax, [esp + 0x18]
add ecx, ebp
lea edx, [esi + ecx*2 + 0x72]
push edx
push eax
call fcn.12ee96c0
add esp, 0xc
cmp dword [0x13199068], ebx
je 0x12eea0f1
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_WindowsDir
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0x12eea10d
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x64]
push ecx
push edx
push eax
call fcn.12ee9720
add esp, 0xc
lea ecx, [esp + 0x54]
mov byte [esp + 0xd0], 0xb
call fcn.12f4cc80
lea ecx, [esp + 0x24]
mov byte [esp + 0xd0], 0xa
call fcn.12f472f0
lea ecx, [esp + 0x18]
mov byte [esp + 0xd0], 7
call fcn.12f472f0
lea ecx, [esp + 0x10]
call fcn.12f47060
lea ecx, [esp + 0x14]
call fcn.12f47060
cmp dword [esi + 0x38], ebx
jbe 0x12eea187
mov eax, dword [esi + 0x34]
mov edi, dword [esi + 0x30]
mov edx, dword [esi + 0x2c]
mov ecx, dword [esi + 0x28]
mov ebp, dword [esi + 0x24]
add eax, edi
mov edi, dword [esi + 0x20]
add eax, edx
add eax, ecx
push 1
add eax, ebp
lea edx, [esp + 0x14]
add eax, edi
lea ecx, [esi + eax*2 + 0x74]
push ecx
push edx
call fcn.12ee96c0
add esp, 0xc
cmp dword [esi + 0x3c], ebx
jbe 0x12eea1c1
mov eax, dword [esi + 0x34]
mov ebp, dword [esi + 0x30]
mov edi, dword [esi + 0x2c]
mov edx, dword [esi + 0x28]
mov ecx, dword [esi + 0x24]
add eax, ebp
mov ebp, dword [esi + 0x20]
add eax, edi
mov edi, dword [esi + 0x38]
add eax, edx
add eax, ecx
push 1
add eax, ebp
lea edx, [esp + 0x18]
add eax, edi
lea ecx, [esi + eax*2 + 0x76]
push ecx
push edx
call fcn.12ee96c0
add esp, 0xc
cmp dword [0x13199068], ebx
je 0x12eea1dd
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_IsolatedDir
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0x12eea1f9
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x64]
push ecx
push edx
push eax
call fcn.12ee9720
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.12f47060
lea ecx, [esp + 0x14]
call fcn.12f47060
cmp dword [esi + 0x40], ebx
jbe 0x12eea253
mov ecx, esi
call fcn.12ee7da0
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x34]
mov edi, dword [esi + 0x30]
mov ebp, dword [esi + 0x28]
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esi + 0x2c]
add edx, edi
mov edi, dword [esi + 0x24]
add edx, ecx
mov ecx, dword [esi + 0x3c]
add edx, ebp
mov ebp, dword [esi + 0x38]
add edx, edi
push 1
add edx, ecx
lea ecx, [esp + 0x14]
add edx, ebp
lea eax, [eax + edx*2 + 0xe]
push eax
push ecx
call fcn.12ee96c0
add esp, 0xc
cmp dword [esi + 0x44], ebx
jbe 0x12eea29b
mov ecx, esi
call fcn.12ee78d0
mov edx, dword [esi + 0x24]
mov ecx, dword [esi + 0x34]
mov ebp, dword [esi + 0x2c]
mov edi, dword [esi + 0x28]
lea eax, [eax + edx*2 + 2]
mov edx, dword [esi + 0x30]
add ecx, edx
mov edx, dword [esi + 0x3c]
add ecx, ebp
mov ebp, dword [esi + 0x40]
add ecx, edi
mov edi, dword [esi + 0x38]
add ecx, edx
push 1
add ecx, ebp
add ecx, edi
lea edx, [eax + ecx*2 + 0xe]
lea eax, [esp + 0x18]
push edx
push eax
call fcn.12ee96c0
add esp, 0xc
cmp dword [0x13199068], ebx
je 0x12eea2b7
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_RestoreDir
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [esp + 0x10]
cmp dword [eax - 8], ebx
je 0x12eea2d3
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x64]
push ecx
push edx
push eax
call fcn.12ee9720
add esp, 0xc
lea ecx, [esp + 0x74]
mov byte [esp + 0xd0], 6
call fcn.12f472f0
lea ecx, [esp + 0x88]
mov byte [esp + 0xd0], 5
call fcn.12e9c070
jmp 0x12eea3b9
cmp eax, 4
je 0x12eea313
cmp eax, 8
je 0x12eea313
lea eax, [esp + 0x20]
push 0x130c39d8
push eax
jmp 0x12eea31d
lea ecx, [esp + 0x20]
push str..sys
push ecx
call fcn.12ee94e0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x28]
add esp, 8
lea edx, [esp + 0x1c]
push edx
push eax
push ecx
call fcn.12ebaa20
mov ecx, dword [0x13199068]
add esp, 0xc
cmp ecx, ebx
mov dword [esp + 0x2c], eax
je 0x12eea3b9
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x20]
push ecx
push edx
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_Config2_1___lp___d__r_n__s__r_n__s_
jmp 0x12eea3aa
lea eax, [esp + 0x20]
push 0x130c39d8
push eax
call fcn.12ee94e0
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x24]
push ecx
push edx
push eax
call fcn.12ebaa20
mov ecx, dword [0x13199068]
add esp, 0x14
cmp ecx, ebx
mov dword [esp + 0x2c], eax
je 0x12eea3b9
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_Config2_2___lp___d__r_n__s__r_n__s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
lea edx, [esp + 0x34]
lea eax, [esp + 0x64]
push edx
push eax
mov dword [esp + 0x3c], ebx
call fcn.12ee97a0
lea ecx, [esp + 0x40]
lea edx, [esp + 0x80]
push ecx
push edx
mov ebp, eax
mov dword [esp + 0x48], ebx
call fcn.12ee97a0
mov esi, eax
mov eax, dword [0x131c4710]
add esp, 0x10
mov dword [esp + 0x18], esi
cmp dword [eax - 8], ebx
jne 0x12eea402
mov ecx, dword [0x131c4638]
cmp dword [ecx - 8], ebx
je 0x12eea47a
cmp ebp, ebx
je 0x12eea411
push ebp
call fcn.12f5c050
add esp, 4
xor ebp, ebp
cmp esi, ebx
je 0x12eea422
push ebp
call fcn.12f5c050
add esp, 4
mov dword [esp + 0x18], ebx
mov eax, dword [0x131c4638]
mov ecx, dword [0x131c4710]
lea edx, [esp + 0x34]
mov dword [esp + 0x34], ebx
push edx
push eax
push ecx
call fcn.12ebaa20
mov ebp, eax
mov eax, dword [0x13199068]
add esp, 0xc
cmp eax, ebx
je 0x12eea472
mov edx, dword [0x131c4638]
mov eax, dword [0x131c4710]
mov ecx, dword [esp + 0x34]
push edx
push eax
push ecx
push ebp
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_RedList_cfgfile____lp___d__r_n__s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
mov dword [esp + 0x4c], 1
mov edx, dword [0x131c4608]
cmp dword [edx - 8], ebx
jne 0x12eea48f
mov eax, dword [0x131c4610]
cmp dword [eax - 8], ebx
je 0x12eea4f4
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x12eea4a0
push eax
call fcn.12f5c050
add esp, 4
mov edx, dword [0x131c4610]
mov eax, dword [0x131c4608]
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], ebx
push ecx
push edx
push eax
call fcn.12ebaa20
mov ecx, dword [0x13199068]
add esp, 0xc
cmp ecx, ebx
mov dword [esp + 0x28], eax
je 0x12eea4f4
mov ecx, dword [0x131c4610]
mov edx, dword [0x131c4608]
push ecx
mov ecx, dword [esp + 0x34]
push edx
push ecx
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_CfgList_cfgfile____lp___d__r_n__s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
mov edx, dword [0x131c46a4]
cmp dword [edx - 8], ebx
jne 0x12eea509
mov eax, dword [0x131c46d4]
cmp dword [eax - 8], ebx
je 0x12eea56e
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x12eea51a
push eax
call fcn.12f5c050
add esp, 4
mov edx, dword [0x131c46d4]
mov eax, dword [0x131c46a4]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
push ecx
push edx
push eax
call fcn.12ebaa20
mov ecx, dword [0x13199068]
add esp, 0xc
cmp ecx, ebx
mov dword [esp + 0x2c], eax
je 0x12eea56e
mov ecx, dword [0x131c46d4]
mov edx, dword [0x131c46a4]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_CfgList2_cfgfile____lp___d__r_n__s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
mov eax, dword [0x131c46a0]
mov ecx, dword [eax - 8]
cmp ecx, ebx
mov ecx, dword [0x131c46e0]
jne 0x12eea585
cmp dword [ecx - 8], ebx
je 0x12eea5ce
lea edx, [esp + 0x40]
mov dword [esp + 0x40], ebx
push edx
push ecx
push eax
call fcn.12ebaa20
mov ecx, dword [0x13199068]
add esp, 0xc
cmp ecx, ebx
mov dword [esp + 0x48], eax
je 0x12eea5ce
mov ecx, dword [0x131c46e0]
mov edx, dword [0x131c46a0]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push ecx
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy_DenList_cfgfile____lp___d__r_n__s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
mov edx, dword [esp + 0x18]
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x8c]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xb0], edx
lea edx, [esp + 0x44]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x40]
push edx
lea eax, [esp + 0x8c]
push 0x40
push eax
mov dword [esp + 0x94], ebp
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ecx
mov dword [esp + 0xd0], ebx
call fcn.12ebaa50
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0xe8]
mov esi, eax
push ecx
push esi
push edx
call fcn.12ebaa80
mov ecx, dword [0x13199068]
add esp, 0x18
cmp ecx, ebx
je 0x12eea6c3
mov ecx, dword [esp + 0x44]
push ecx
push esi
push eax
push str.CTSecuDesktopStorageRuleMgr::SetSandboxProcessFilePolicy____dwRet___d___lp___d_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x18
cmp ebp, ebx
je 0x12eea6df
mov eax, dword [esp + 0x4c]
push ebp
cmp eax, ebx
je 0x12eea6d7
call fcn.12eba6b0
jmp 0x12eea6dc
call fcn.12f5c050
add esp, 4
mov eax, dword [esp + 0x18]
pop ebp
cmp eax, ebx
je 0x12eea6f1
push eax
call fcn.12f5c050
add esp, 4
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x12eea702
push eax
call fcn.12eba6b0
add esp, 4
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x12eea713
push eax
call fcn.12eba6b0
add esp, 4
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x12eea724
push eax
call fcn.12eba6b0
add esp, 4
cmp esi, ebx
je 0x12eea731
push esi
call fcn.12eba6b0
add esp, 4
lea ecx, [esp + 0x74]
mov byte [esp + 0xcc], 4
call fcn.12f55750
lea ecx, [esp + 0x60]
mov byte [esp + 0xcc], 3
call fcn.12f55750
lea ecx, [esp + 0x38]
mov byte [esp + 0xcc], 2
call fcn.12f472f0
lea ecx, [esp + 0x1c]
mov byte [esp + 0xcc], 1
call fcn.12f472f0
lea ecx, [esp + 0x10]
mov byte [esp + 0xcc], bl
call fcn.12f472f0
lea ecx, [esp + 0xc]
mov dword [esp + 0xcc], 0xffffffff
call fcn.12f472f0
mov eax, 1
jmp 0x12eea7a2
xor eax, eax
mov ecx, dword [esp + 0xc4]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xc4
ret