Function at 0x412300
Capabilities:
Contain obfuscated stackstrings
Get common file path
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43435b
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x4d00
call fcn.00425d70
mov eax, dword [0x43f474]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x104
lea eax, [ebp - 0x1378]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea ecx, [ebp - 0x1378]
push ecx
push str._sPolicyCfg.ini
lea edx, [ebp - 0xa58]
push edx
call fcn.0041b225
add esp, 0xc
push 0x438720
movsx eax, byte [ebp - 0x1378]
push eax
push str._c:_s_binwindows_sectorManage.dll
lea ecx, [ebp - 0x1250]
push ecx
call fcn.0041b225
add esp, 0x10
lea edx, [ebp - 0xa58]
push edx
push str.PolicyCfg__s_n
push 1
push 0x182
push 0x438768
push 0x43878c
call fcn.00410db0
add esp, 0x18
lea ecx, [ebp - 0x958]
call fcn.0040fd50
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1250]
push eax
lea ecx, [ebp - 0x958]
call fcn.0040fde0
movzx ecx, al
test ecx, ecx
jne 0x412400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [ebp - 0x1250]
push edx
push str.Load__s_failed__err_d_n
push 1
push 0x187
push 0x4387b4
push 0x4387d8
call fcn.00410db0
add esp, 0x1c
push 0
lea eax, [ebp - 0xa58]
push eax
call fcn.0041bcc8
add esp, 8
cmp eax, 0xffffffff
je 0x412425
lea ecx, [ebp - 0xa58]
push ecx
call fcn.0041bd27
add esp, 4
push 0x4387e8
movsx edx, byte [ebp - 0x1378]
push edx
push str._c:_s_rescfg_staticCfg_W.ini
lea eax, [ebp - 0x578]
push eax
call fcn.0041b225
add esp, 0x10
lea ecx, [ebp - 0x1270]
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x578]
push ecx
lea ecx, [ebp - 0x30]
call fcn.00401790
mov byte [ebp - 4], 2
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x4c]
push eax
call fcn.00401390
add esp, 8
mov dword [ebp - 0x4968], eax
mov ecx, dword [ebp - 0x4968]
mov dword [ebp - 0x496c], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x496c]
call fcn.00401aa0
push eax
lea ecx, [ebp - 0x1144]
call fcn.00401940
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4c]
call fcn.00401a80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30]
call fcn.004018d0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x138c]
call fcn.00405220
mov dword [ebp - 0x4970], eax
mov byte [ebp - 4], 8
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4734], esp
lea edx, [ebp - 0x578]
push edx
call fcn.00401790
mov dword [ebp - 0x4974], eax
lea ecx, [ebp - 0x138c]
call fcn.004052e0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4738], esp
push str.type
call fcn.00401790
mov dword [ebp - 0x4978], eax
mov eax, dword [ebp - 0x4978]
mov dword [ebp - 0x497c], eax
mov byte [ebp - 4], 9
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x473c], esp
push str.NETWORK
call fcn.00401790
mov dword [ebp - 0x4980], eax
lea ecx, [ebp - 0x68]
push ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x138c]
call fcn.00405b90
mov dword [ebp - 0x4984], eax
mov edx, dword [ebp - 0x4984]
mov dword [ebp - 0x4988], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x4988]
push eax
lea ecx, [ebp - 0x1270]
call fcn.004018a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x68]
call fcn.004018d0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x138c]
call fcn.00405260
jmp 0x4125d6
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x1270]
call fcn.004018f0
push eax
call fcn.0041bcf6
add esp, 4
mov dword [ebp - 0xa5c], eax
lea ecx, [ebp - 0x478]
call fcn.0040fd50
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1254], 0
mov dword [ebp - 0x114c], 0
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x714], 0
mov byte [ebp - 0x170], 0
push 0x103
push 0
lea ecx, [ebp - 0x16f]
push ecx
call fcn.0041f760
add esp, 0xc
push 0x104
lea edx, [ebp - 0x170]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0x170]
add eax, 0xffffffff
mov dword [ebp - 0x498c], eax
mov ecx, dword [ebp - 0x498c]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x498d], dl
add dword [ebp - 0x498c], 1
cmp byte [ebp - 0x498d], 0
jne 0x41266c
mov edi, dword [ebp - 0x498c]
mov eax, dword [str._SecusbpolicyEX.dll]
mov dword [edi], eax
mov ecx, dword [0x438864]
mov dword [edi + 4], ecx
mov edx, dword [0x438868]
mov dword [edi + 8], edx
mov eax, dword [0x43886c]
mov dword [edi + 0xc], eax
mov ecx, dword [0x438870]
mov dword [edi + 0x10], ecx
lea edx, [ebp - 0x170]
push edx
lea ecx, [ebp - 0x478]
call fcn.0040fde0
movzx eax, al
test eax, eax
jne 0x412743
push str.pm_Load_SecusbpolicyEX.dll_failed
push 1
push 0x1ad
push 0x438898
push 0x4388bc
call fcn.00410db0
add esp, 0x14
mov byte [ebp - 0x473d], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x478]
call fcn.0040fda0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1144]
call fcn.00401a80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1270]
call fcn.004018d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x958]
call fcn.0040fda0
mov al, byte [ebp - 0x473d]
jmp 0x415371
lea ecx, [ebp - 0x170]
push ecx
push str.pm_GetPolicyInterface_SecusbpolicyEX.dll_path_s
push 1
push 0x1b1
push 0x438900
push 0x438924
call fcn.00410db0
add esp, 0x18
push str.GetPolicyInterface
lea ecx, [ebp - 0x478]
call fcn.0040fe50
mov dword [ebp - 0x1254], eax
push str.SetMode
lea ecx, [ebp - 0x478]
call fcn.0040fe50
mov dword [ebp - 0x114c], eax
push str.GetExtInfo
lea ecx, [ebp - 0x478]
call fcn.0040fe50
mov dword [ebp - 0x474], eax
push str.TrustVerify
lea ecx, [ebp - 0x478]
call fcn.0040fe50
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x1254], 0
jne 0x4127d4
lea ecx, [ebp - 0x478]
call fcn.0040fe20
cmp dword [ebp - 0x1254], 0
jne 0x41284c
push str.pm_GetPolicy__NULL
push 1
push 0x1be
push 0x43897c
push 0x4389a0
call fcn.00410db0
add esp, 0x14
mov byte [ebp - 0x473e], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x478]
call fcn.0040fda0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1144]
call fcn.00401a80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1270]
call fcn.004018d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x958]
call fcn.0040fda0
mov al, byte [ebp - 0x473e]
jmp 0x415371
lea ecx, [ebp - 0x710]
call fcn.004101b0
lea ecx, [ebp - 0x1128]
call fcn.004101e0
lea ecx, [ebp - 0x470]
call fcn.00411060
mov dword [ebp - 0x137c], 0
push str.GetUDiskSecureInfo
lea ecx, [ebp - 0x958]
call fcn.0040fe50
mov dword [ebp - 0x137c], eax
cmp dword [ebp - 0x137c], 0
je 0x4128cf
push 0
lea edx, [ebp - 0x710]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x137c]
add esp, 0xc
cmp eax, 1
je 0x4128cf
push str.GetUDiskSecureInfo_failed_n
push 1
push 0x1cd
push 0x4389e0
push 0x438a04
call fcn.00410db0
add esp, 0x14
mov dword [ebp - 0x1148], 0
push str.GetUDiskSecureInfoExEx
lea ecx, [ebp - 0x958]
call fcn.0040fe50
mov dword [ebp - 0x1148], eax
cmp dword [ebp - 0x1148], 0
je 0x412931
push 0
lea ecx, [ebp - 0x1128]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x1148]
add esp, 0xc
cmp eax, 1
je 0x412931
push str.GetUDiskSecureInfoExEx_failed_n
push 1
push 0x1d8
push 0x438a4c
push 0x438a70
call fcn.00410db0
add esp, 0x14
lea ecx, [ebp - 0x950]
call fcn.00410180
mov dword [ebp - 0x954], 0
push str.GetUDiskInfo
lea ecx, [ebp - 0x958]
call fcn.0040fe50
mov dword [ebp - 0x954], eax
cmp dword [ebp - 0x954], 0
je 0x41299c
lea eax, [ebp - 0x950]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 0x954]
add esp, 8
cmp eax, 1
je 0x41299c
push str.GetUDiskInfo_failed_n
push 1
push 0x1e5
push 0x438aa8
push 0x438acc
call fcn.00410db0
add esp, 0x14
cmp dword [ebp - 0xa5c], 1
jne 0x413e6c
mov dword [ebp - 0x1eac], 0xffffffff
cmp dword [ebp - 0x114c], 0
jne 0x4129d1
lea edx, [ebp - 0x710]
push edx
call dword [ebp - 0x1254]
mov dword [ebp - 0x1eac], eax
jmp 0x4129ec
push 1
call dword [ebp - 0x114c]
lea eax, [ebp - 0x1128]
push eax
call dword [ebp - 0x1254]
mov dword [ebp - 0x1eac], eax
cmp dword [ebp - 0x474], 0
je 0x412bf8
push 0x438adc
push 1
push 0x1f9
push 0x438af0
push 0x438b14
call fcn.00410db0
add esp, 0x14
lea ecx, [ebp - 0x470]
push ecx
call dword [ebp - 0x474]
lea edx, [ebp - 0x470]
push edx
push 0x438b24
push 1
push 0x1fb
push 0x438b48
push 0x438b6c
call fcn.00410db0
add esp, 0x18
mov eax, dword [ebp - 0x36c]
push eax
mov ecx, dword [ebp - 0x370]
push ecx
push 0x438b7c
push 1
push 0x1fc
push 0x438bb0
push 0x438bd4
call fcn.00410db0
add esp, 0x1c
mov edx, dword [ebp - 0x364]
push edx
mov eax, dword [ebp - 0x368]
push eax
push 0x438be4
push 1
push 0x1fd
push 0x438c18
push 0x438c3c
call fcn.00410db0
add esp, 0x1c
movzx ecx, byte [ebp - 0x360]
push ecx
push 0x438c4c
push 1
push 0x1fe
push 0x438c7c
push 0x438ca0
call fcn.00410db0
add esp, 0x18
movzx edx, byte [ebp - 0x35f]
push edx
push 0x438cb0
push 1
push 0x1ff
push 0x438ce0
push 0x438d04
call fcn.00410db0
add esp, 0x18
movzx eax, byte [ebp - 0x35e]
push eax
push 0x438d14
push 1
push 0x200
push 0x438d48
push 0x438d6c
call fcn.00410db0
add esp, 0x18
movzx ecx, byte [ebp - 0x35d]
push ecx
push 0x438d7c
push 1
push 0x201
push 0x438db0
push 0x438dd4
call fcn.00410db0
add esp, 0x18
movzx edx, byte [ebp - 0x35c]
push edx
push 0x438de4
push 1
push 0x202
push 0x438e14
push 0x438e38
call fcn.00410db0
add esp, 0x18
movzx eax, byte [ebp - 0x35b]
push eax
push 0x438e48
push 1
push 0x203
push 0x438e78
push 0x438e9c
call fcn.00410db0
add esp, 0x18
movzx ecx, byte [ebp - 0x35a]
push ecx
push 0x438eac
push 1
push 0x204
push 0x438edc
push 0x438f00
call fcn.00410db0
add esp, 0x18
movzx edx, byte [ebp - 0x359]
push edx
push 0x438f10
push 1
push 0x205
push 0x438f40
push 0x438f64
call fcn.00410db0
add esp, 0x18
lea eax, [ebp - 0x358]
push eax
push 0x438f74
push 1
push 0x207
push 0x438fa4
push 0x438fc8
call fcn.00410db0
add esp, 0x18
jmp 0x412c1d
lea ecx, [ebp - 0x470]
push ecx
push 0x438fd8
push 1
push 0x20c
push 0x439000
push 0x439024
call fcn.00410db0
add esp, 0x18
cmp dword [ebp - 0x114c], 0
jne 0x412c6d
movzx edx, byte [ebp - 0x5fd]
push edx
movzx eax, byte [ebp - 0x5fe]
push eax
movzx ecx, byte [ebp - 0x6d0]
push ecx
movzx edx, byte [ebp - 0x6cf]
push edx
mov eax, dword [ebp - 0x1eac]
push eax
push str.pm_GetPolicyInterface_vrvFlag_ret_d__encryptOutMode_d__exchangeOutMode_d_auditCopyIn_d_auditCopyOut_d
push 1
push 0x215
push 0x439034
push 0x4390c4
call fcn.00410db0
add esp, 0x28
jmp 0x412cb2
movzx ecx, byte [ebp - 0xee5]
push ecx
movzx edx, byte [ebp - 0xee6]
push edx
movzx eax, byte [ebp - 0x10c0]
push eax
movzx ecx, byte [ebp - 0x10bf]
push ecx
mov edx, dword [ebp - 0x1eac]
push edx
push str.pm_GetPolicyInterface_vrvFlagEx_ret_d__encryptOutMode_d__exchangeOutMode_d_auditCopyIn_d_auditCopyOut_d
push 1
push 0x219
push 0x4390d4
push 0x439168
call fcn.00410db0
add esp, 0x28
lea ecx, [ebp - 0x19a8]
call fcn.00405220
mov byte [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4744], esp
lea eax, [ebp - 0xa58]
push eax
call fcn.00401790
mov dword [ebp - 0x4994], eax
lea ecx, [ebp - 0x19a8]
call fcn.004052e0
push 1
push 3
lea ecx, [ebp - 0x2000]
call fcn.00416350
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x114c], 0
jne 0x412d1a
movzx ecx, byte [ebp - 0x6cf]
push ecx
lea ecx, [ebp - 0x1ff0]
call fcn.00415ff0
jmp 0x412d2d
movzx edx, byte [ebp - 0x10bf]
push edx
lea ecx, [ebp - 0x1ff0]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4748], esp
push eax
lea ecx, [ebp - 0x2000]
call fcn.00416480
mov dword [ebp - 0x4998], eax
mov ecx, dword [ebp - 0x4998]
mov dword [ebp - 0x499c], ecx
mov byte [ebp - 4], 0xf
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x474c], esp
push 0x439178
call fcn.00401790
mov dword [ebp - 0x49a0], eax
mov edx, dword [ebp - 0x49a0]
mov dword [ebp - 0x49a4], edx
mov byte [ebp - 4], 0x10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4750], esp
push str.encryptOutMode
call fcn.00401790
mov dword [ebp - 0x49a8], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1f58]
call fcn.00416350
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x114c], 0
jne 0x412de0
movzx eax, byte [ebp - 0x6d0]
push eax
lea ecx, [ebp - 0x1f48]
call fcn.00415ff0
jmp 0x412df3
movzx ecx, byte [ebp - 0x10c0]
push ecx
lea ecx, [ebp - 0x1f48]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4754], esp
push edx
lea ecx, [ebp - 0x1f58]
call fcn.00416480
mov dword [ebp - 0x49ac], eax
mov eax, dword [ebp - 0x49ac]
mov dword [ebp - 0x49b0], eax
mov byte [ebp - 4], 0x12
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4758], esp
push 0x439198
call fcn.00401790
mov dword [ebp - 0x49b4], eax
mov ecx, dword [ebp - 0x49b4]
mov dword [ebp - 0x49b8], ecx
mov byte [ebp - 4], 0x13
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x475c], esp
push str.exchangeOutMode
call fcn.00401790
mov dword [ebp - 0x49bc], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x15f0]
call fcn.00416350
mov byte [ebp - 4], 0x14
xor edx, edx
cmp dword [ebp - 0x1eac], 0
sete dl
push edx
lea ecx, [ebp - 0x15e0]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4760], esp
push eax
lea ecx, [ebp - 0x15f0]
call fcn.00416480
mov dword [ebp - 0x49c0], eax
mov ecx, dword [ebp - 0x49c0]
mov dword [ebp - 0x49c4], ecx
mov byte [ebp - 4], 0x15
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4764], esp
push 0x4391b8
call fcn.00401790
mov dword [ebp - 0x49c8], eax
mov edx, dword [ebp - 0x49c8]
mov dword [ebp - 0x49cc], edx
mov byte [ebp - 4], 0x16
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4768], esp
push 0x4391c0
call fcn.00401790
mov dword [ebp - 0x49d0], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x2150]
call fcn.00416350
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x114c], 0
jne 0x412f53
movzx eax, byte [ebp - 0x5fe]
push eax
lea ecx, [ebp - 0x2140]
call fcn.00415ff0
jmp 0x412f66
movzx ecx, byte [ebp - 0xee6]
push ecx
lea ecx, [ebp - 0x2140]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x476c], esp
push edx
lea ecx, [ebp - 0x2150]
call fcn.00416480
mov dword [ebp - 0x49d4], eax
mov eax, dword [ebp - 0x49d4]
mov dword [ebp - 0x49d8], eax
mov byte [ebp - 4], 0x18
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4770], esp
push 0x4391c8
call fcn.00401790
mov dword [ebp - 0x49dc], eax
mov ecx, dword [ebp - 0x49dc]
mov dword [ebp - 0x49e0], ecx
mov byte [ebp - 4], 0x19
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4774], esp
push str.auditCopyIn
call fcn.00401790
mov dword [ebp - 0x49e4], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1ea8]
call fcn.00416350
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x114c], 0
jne 0x413019
movzx edx, byte [ebp - 0x5fd]
push edx
lea ecx, [ebp - 0x1e98]
call fcn.00415ff0
jmp 0x41302c
movzx eax, byte [ebp - 0xee5]
push eax
lea ecx, [ebp - 0x1e98]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4778], esp
push ecx
lea ecx, [ebp - 0x1ea8]
call fcn.00416480
mov dword [ebp - 0x49e8], eax
mov edx, dword [ebp - 0x49e8]
mov dword [ebp - 0x49ec], edx
mov byte [ebp - 4], 0x1b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x477c], esp
push 0x4391e0
call fcn.00401790
mov dword [ebp - 0x49f0], eax
mov eax, dword [ebp - 0x49f0]
mov dword [ebp - 0x49f4], eax
mov byte [ebp - 4], 0x1c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4780], esp
push str.auditCopyOut
call fcn.00401790
mov dword [ebp - 0x49f8], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1c00]
call fcn.00416350
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x114c], 0
jne 0x4130df
movzx ecx, byte [ebp - 0x5fc]
push ecx
lea ecx, [ebp - 0x1bf0]
call fcn.00415ff0
jmp 0x4130f2
movzx edx, byte [ebp - 0xee4]
push edx
lea ecx, [ebp - 0x1bf0]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4784], esp
push eax
lea ecx, [ebp - 0x1c00]
call fcn.00416480
mov dword [ebp - 0x49fc], eax
mov ecx, dword [ebp - 0x49fc]
mov dword [ebp - 0x4a00], ecx
mov byte [ebp - 4], 0x1e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4788], esp
push 0x439200
call fcn.00401790
mov dword [ebp - 0x4a04], eax
mov edx, dword [ebp - 0x4a04]
mov dword [ebp - 0x4a08], edx
mov byte [ebp - 4], 0x1f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x478c], esp
push 0x439208
call fcn.00401790
mov dword [ebp - 0x4a0c], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x2348]
call fcn.00416350
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x114c], 0
jne 0x4131a5
movzx eax, byte [ebp - 0x5fb]
push eax
lea ecx, [ebp - 0x2338]
call fcn.00415ff0
jmp 0x4131b8
movzx ecx, byte [ebp - 0xee3]
push ecx
lea ecx, [ebp - 0x2338]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4790], esp
push edx
lea ecx, [ebp - 0x2348]
call fcn.00416480
mov dword [ebp - 0x4a10], eax
mov eax, dword [ebp - 0x4a10]
mov dword [ebp - 0x4a14], eax
mov byte [ebp - 4], 0x21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4794], esp
push 0x439210
call fcn.00401790
mov dword [ebp - 0x4a18], eax
mov ecx, dword [ebp - 0x4a18]
mov dword [ebp - 0x4a1c], ecx
mov byte [ebp - 4], 0x22
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4798], esp
push 0x43921c
call fcn.00401790
mov dword [ebp - 0x4a20], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x479c], esp
lea edx, [ebp - 0x470]
push edx
call fcn.00401790
mov dword [ebp - 0x4a24], eax
mov eax, dword [ebp - 0x4a24]
mov dword [ebp - 0x4a28], eax
mov byte [ebp - 4], 0x23
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47a0], esp
push 0x439228
call fcn.00401790
mov dword [ebp - 0x4a2c], eax
mov ecx, dword [ebp - 0x4a2c]
mov dword [ebp - 0x4a30], ecx
mov byte [ebp - 4], 0x24
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47a4], esp
push str.filter
call fcn.00401790
mov dword [ebp - 0x4a34], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
mov byte [ebp - 0x1498], 0
push 0x103
push 0
lea edx, [ebp - 0x1497]
push edx
call fcn.0041f760
add esp, 0xc
mov byte [ebp - 0x1998], 0
push 0x103
push 0
lea eax, [ebp - 0x1997]
push eax
call fcn.0041f760
add esp, 0xc
mov byte [ebp - 0x2450], 0
push 0x103
push 0
lea ecx, [ebp - 0x244f]
push ecx
call fcn.0041f760
add esp, 0xc
mov byte [ebp - 0x1b58], 0
push 0x103
push 0
lea edx, [ebp - 0x1b57]
push edx
call fcn.0041f760
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1498]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 0x1548], 0
lea ecx, [ebp - 0x1498]
push ecx
push 0x439238
lea edx, [ebp - 0x1998]
push edx
call fcn.0041b225
add esp, 0xc
lea eax, [ebp - 0x1498]
push eax
push 0x439248
lea ecx, [ebp - 0x2450]
push ecx
call fcn.0041b225
add esp, 0xc
lea edx, [ebp - 0x1498]
push edx
push 0x43925c
lea eax, [ebp - 0x1b58]
push eax
call fcn.0041b225
add esp, 0xc
lea ecx, [ebp - 0x1998]
push ecx
mov edx, dword [ebp - 0x714]
push edx
call fcn.00412220
add esp, 8
mov dword [ebp - 0x1eb0], eax
lea eax, [ebp - 0x2450]
push eax
mov ecx, dword [ebp - 0x714]
push ecx
call fcn.00412220
add esp, 8
mov dword [ebp - 0x1544], eax
lea edx, [ebp - 0x1b58]
push edx
mov eax, dword [ebp - 0x714]
push eax
call fcn.00412220
add esp, 8
mov dword [ebp - 0x1dfc], eax
push 1
push 3
lea ecx, [ebp - 0x1a50]
call fcn.00416350
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1eb0]
push ecx
lea ecx, [ebp - 0x1a40]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x47a8], esp
push edx
lea ecx, [ebp - 0x1a50]
call fcn.00416480
mov dword [ebp - 0x4a38], eax
mov eax, dword [ebp - 0x4a38]
mov dword [ebp - 0x4a3c], eax
mov byte [ebp - 4], 0x26
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47ac], esp
push 0x439270
call fcn.00401790
mov dword [ebp - 0x4a40], eax
mov ecx, dword [ebp - 0x4a40]
mov dword [ebp - 0x4a44], ecx
mov byte [ebp - 4], 0x27
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47b0], esp
push 0x439280
call fcn.00401790
mov dword [ebp - 0x4a48], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1ca8]
call fcn.00416350
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x1eb0]
push edx
lea ecx, [ebp - 0x1c98]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x47b4], esp
push eax
lea ecx, [ebp - 0x1ca8]
call fcn.00416480
mov dword [ebp - 0x4a4c], eax
mov ecx, dword [ebp - 0x4a4c]
mov dword [ebp - 0x4a50], ecx
mov byte [ebp - 4], 0x29
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47b8], esp
push 0x43928c
call fcn.00401790
mov dword [ebp - 0x4a54], eax
mov edx, dword [ebp - 0x4a54]
mov dword [ebp - 0x4a58], edx
mov byte [ebp - 4], 0x2a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47bc], esp
push 0x43929c
call fcn.00401790
mov dword [ebp - 0x4a5c], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1740]
call fcn.00416350
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x1eb0]
push eax
lea ecx, [ebp - 0x1730]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47c0], esp
push ecx
lea ecx, [ebp - 0x1740]
call fcn.00416480
mov dword [ebp - 0x4a60], eax
mov edx, dword [ebp - 0x4a60]
mov dword [ebp - 0x4a64], edx
mov byte [ebp - 4], 0x2c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47c4], esp
push 0x4392a8
call fcn.00401790
mov dword [ebp - 0x4a68], eax
mov eax, dword [ebp - 0x4a68]
mov dword [ebp - 0x4a6c], eax
mov byte [ebp - 4], 0x2d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47c8], esp
push 0x4392bc
call fcn.00401790
mov dword [ebp - 0x4a70], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1540]
call fcn.00416350
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x36c]
push ecx
mov edx, dword [ebp - 0x370]
push edx
lea ecx, [ebp - 0x1530]
call fcn.004161c0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x47cc], esp
push eax
lea ecx, [ebp - 0x1540]
call fcn.00416480
mov dword [ebp - 0x4a74], eax
mov ecx, dword [ebp - 0x4a74]
mov dword [ebp - 0x4a78], ecx
mov byte [ebp - 4], 0x2f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47d0], esp
push 0x4392c8
call fcn.00401790
mov dword [ebp - 0x4a7c], eax
mov edx, dword [ebp - 0x4a7c]
mov dword [ebp - 0x4a80], edx
mov byte [ebp - 4], 0x30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47d4], esp
push 0x4392d8
call fcn.00401790
mov dword [ebp - 0x4a84], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1df8]
call fcn.00416350
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x364]
push eax
mov ecx, dword [ebp - 0x368]
push ecx
lea ecx, [ebp - 0x1de8]
call fcn.004161c0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x47d8], esp
push edx
lea ecx, [ebp - 0x1df8]
call fcn.00416480
mov dword [ebp - 0x4a88], eax
mov eax, dword [ebp - 0x4a88]
mov dword [ebp - 0x4a8c], eax
mov byte [ebp - 4], 0x32
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47dc], esp
push 0x4392e4
call fcn.00401790
mov dword [ebp - 0x4a90], eax
mov ecx, dword [ebp - 0x4a90]
mov dword [ebp - 0x4a94], ecx
mov byte [ebp - 4], 0x33
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47e0], esp
push 0x4392f8
call fcn.00401790
mov dword [ebp - 0x4a98], eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1890]
call fcn.00416350
mov byte [ebp - 4], 0x34
movzx edx, byte [ebp - 0x360]
push edx
lea ecx, [ebp - 0x1880]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x47e4], esp
push eax
lea ecx, [ebp - 0x1890]
call fcn.00416480
mov dword [ebp - 0x4a9c], eax
mov ecx, dword [ebp - 0x4a9c]
mov dword [ebp - 0x4aa0], ecx
mov byte [ebp - 4], 0x35
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47e8], esp
push 0x439304
call fcn.00401790
mov dword [ebp - 0x4aa4], eax
mov edx, dword [ebp - 0x4aa4]
mov dword [ebp - 0x4aa8], edx
mov byte [ebp - 4], 0x36
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47ec], esp
push 0x439314
call fcn.00401790
mov dword [ebp - 0x4aac], eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x24f8]
call fcn.00416350
mov byte [ebp - 4], 0x37
movzx eax, byte [ebp - 0x35f]
push eax
lea ecx, [ebp - 0x24e8]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47f0], esp
push ecx
lea ecx, [ebp - 0x24f8]
call fcn.00416480
mov dword [ebp - 0x4ab0], eax
mov edx, dword [ebp - 0x4ab0]
mov dword [ebp - 0x4ab4], edx
mov byte [ebp - 4], 0x38
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47f4], esp
push 0x439320
call fcn.00401790
mov dword [ebp - 0x4ab8], eax
mov eax, dword [ebp - 0x4ab8]
mov dword [ebp - 0x4abc], eax
mov byte [ebp - 4], 0x39
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47f8], esp
push 0x439330
call fcn.00401790
mov dword [ebp - 0x4ac0], eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x22a0]
call fcn.00416350
mov byte [ebp - 4], 0x3a
movzx ecx, byte [ebp - 0x35e]
push ecx
lea ecx, [ebp - 0x2290]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x47fc], esp
push edx
lea ecx, [ebp - 0x22a0]
call fcn.00416480
mov dword [ebp - 0x4ac4], eax
mov eax, dword [ebp - 0x4ac4]
mov dword [ebp - 0x4ac8], eax
mov byte [ebp - 4], 0x3b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4800], esp
push 0x43933c
call fcn.00401790
mov dword [ebp - 0x4acc], eax
mov ecx, dword [ebp - 0x4acc]
mov dword [ebp - 0x4ad0], ecx
mov byte [ebp - 4], 0x3c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4804], esp
push 0x43934c
call fcn.00401790
mov dword [ebp - 0x4ad4], eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x17e8]
call fcn.00416350
mov byte [ebp - 4], 0x3d
movzx edx, byte [ebp - 0x35d]
push edx
lea ecx, [ebp - 0x17d8]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4808], esp
push eax
lea ecx, [ebp - 0x17e8]
call fcn.00416480
mov dword [ebp - 0x4ad8], eax
mov ecx, dword [ebp - 0x4ad8]
mov dword [ebp - 0x4adc], ecx
mov byte [ebp - 4], 0x3e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x480c], esp
push 0x439358
call fcn.00401790
mov dword [ebp - 0x4ae0], eax
mov edx, dword [ebp - 0x4ae0]
mov dword [ebp - 0x4ae4], edx
mov byte [ebp - 4], 0x3f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4810], esp
push 0x439368
call fcn.00401790
mov dword [ebp - 0x4ae8], eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1698]
call fcn.00416350
mov byte [ebp - 4], 0x40
movzx eax, byte [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x1688]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4814], esp
push ecx
lea ecx, [ebp - 0x1698]
call fcn.00416480
mov dword [ebp - 0x4aec], eax
mov edx, dword [ebp - 0x4aec]
mov dword [ebp - 0x4af0], edx
mov byte [ebp - 4], 0x41
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4818], esp
push 0x439374
call fcn.00401790
mov dword [ebp - 0x4af4], eax
mov eax, dword [ebp - 0x4af4]
mov dword [ebp - 0x4af8], eax
mov byte [ebp - 4], 0x42
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x481c], esp
push 0x439384
call fcn.00401790
mov dword [ebp - 0x4afc], eax
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x21f8]
call fcn.00416350
mov byte [ebp - 4], 0x43
movzx ecx, byte [ebp - 0x35b]
push ecx
lea ecx, [ebp - 0x21e8]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4820], esp
push edx
lea ecx, [ebp - 0x21f8]
call fcn.00416480
mov dword [ebp - 0x4b00], eax
mov eax, dword [ebp - 0x4b00]
mov dword [ebp - 0x4b04], eax
mov byte [ebp - 4], 0x44
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4824], esp
push 0x439390
call fcn.00401790
mov dword [ebp - 0x4b08], eax
mov ecx, dword [ebp - 0x4b08]
mov dword [ebp - 0x4b0c], ecx
mov byte [ebp - 4], 0x45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4828], esp
push 0x4393a0
call fcn.00401790
mov dword [ebp - 0x4b10], eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x20a8]
call fcn.00416350
mov byte [ebp - 4], 0x46
movzx edx, byte [ebp - 0x35a]
push edx
lea ecx, [ebp - 0x2098]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x482c], esp
push eax
lea ecx, [ebp - 0x20a8]
call fcn.00416480
mov dword [ebp - 0x4b14], eax
mov ecx, dword [ebp - 0x4b14]
mov dword [ebp - 0x4b18], ecx
mov byte [ebp - 4], 0x47
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4830], esp
push 0x4393ac
call fcn.00401790
mov dword [ebp - 0x4b1c], eax
mov edx, dword [ebp - 0x4b1c]
mov dword [ebp - 0x4b20], edx
mov byte [ebp - 4], 0x48
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4834], esp
push 0x4393bc
call fcn.00401790
mov dword [ebp - 0x4b24], eax
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x1d50]
call fcn.00416350
mov byte [ebp - 4], 0x49
movzx eax, byte [ebp - 0x359]
push eax
lea ecx, [ebp - 0x1d40]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4838], esp
push ecx
lea ecx, [ebp - 0x1d50]
call fcn.00416480
mov dword [ebp - 0x4b28], eax
mov edx, dword [ebp - 0x4b28]
mov dword [ebp - 0x4b2c], edx
mov byte [ebp - 4], 0x4a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x483c], esp
push 0x4393c8
call fcn.00401790
mov dword [ebp - 0x4b30], eax
mov eax, dword [ebp - 0x4b30]
mov dword [ebp - 0x4b34], eax
mov byte [ebp - 4], 0x4b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4840], esp
push 0x4393d8
call fcn.00401790
mov dword [ebp - 0x4b38], eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4844], esp
lea edx, [ebp - 0x358]
push edx
call fcn.00401790
mov dword [ebp - 0x4b3c], eax
mov eax, dword [ebp - 0x4b3c]
mov dword [ebp - 0x4b40], eax
mov byte [ebp - 4], 0x4c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4848], esp
push 0x4393e4
call fcn.00401790
mov dword [ebp - 0x4b44], eax
mov ecx, dword [ebp - 0x4b44]
mov dword [ebp - 0x4b48], ecx
mov byte [ebp - 4], 0x4d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x484c], esp
push 0x4393f4
call fcn.00401790
mov dword [ebp - 0x4b4c], eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x19a8]
call fcn.00405f50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4850], esp
lea edx, [ebp - 0xa58]
push edx
call fcn.00401790
mov dword [ebp - 0x4b50], eax
lea ecx, [ebp - 0x19a8]
call fcn.00405ce0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1d50]
call fcn.00415390
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x20a8]
call fcn.00415390
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x21f8]
call fcn.00415390
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1698]
call fcn.00415390
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x17e8]
call fcn.00415390
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x22a0]
call fcn.00415390
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x24f8]
call fcn.00415390
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1890]
call fcn.00415390
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1df8]
call fcn.00415390
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1540]
call fcn.00415390
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1740]
call fcn.00415390
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1ca8]
call fcn.00415390
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1a50]
call fcn.00415390
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2348]
call fcn.00415390
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1c00]
call fcn.00415390
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1ea8]
call fcn.00415390
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x2150]
call fcn.00415390
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x15f0]
call fcn.00415390
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1f58]
call fcn.00415390
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2000]
call fcn.00415390
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x19a8]
call fcn.00405260
jmp 0x415325
cmp dword [ebp - 0xa5c], 3
jne 0x415325
lea ecx, [ebp - 0x3778]
call fcn.00410210
push 0x101c
push 0
lea eax, [ebp - 0x3778]
push eax
call fcn.0041f760
add esp, 0xc
mov byte [ebp - 0x3e38], 0
xor ecx, ecx
mov dword [ebp - 0x3e37], ecx
mov word [ebp - 0x3e33], cx
mov byte [ebp - 0x3e31], cl
lea edx, [ebp - 0x3e38]
mov dword [ebp - 0x376c], edx
xor eax, eax
mov ecx, dword [ebp - 0x376c]
mov dword [ecx], eax
mov dword [ecx + 4], eax
movsx edx, byte [ebp - 0x89c]
push edx
push str.pm_hInfo.mode_c
push 1
push 0x2c6
push 0x439414
push 0x439438
call fcn.00410db0
add esp, 0x18
movsx eax, byte [ebp - 0x89c]
cmp eax, 0x41
jne 0x413f17
mov ecx, dword [ebp - 0x376c]
mov edx, dword [str.GA02_05]
mov dword [ecx], edx
mov eax, dword [0x43944c]
mov dword [ecx + 4], eax
movsx ecx, byte [ebp - 0x89c]
cmp ecx, 0x42
je 0x413f2f
movsx edx, byte [ebp - 0x89c]
cmp edx, 0x43
jne 0x413f46
mov eax, dword [ebp - 0x376c]
mov ecx, dword [str.GA02_03]
mov dword [eax], ecx
mov edx, dword [0x439454]
mov dword [eax + 4], edx
movsx eax, byte [ebp - 0x89c]
cmp eax, 0x53
jne 0x413f68
mov ecx, dword [ebp - 0x376c]
mov edx, dword [str.GA02_01]
mov dword [ecx], edx
mov eax, dword [0x43945c]
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x3778]
push ecx
call dword [ebp - 0x1254]
mov dword [ebp - 0x40e4], eax
mov edx, dword [ebp - 0x3764]
push edx
mov eax, dword [ebp - 0x3760]
push eax
mov ecx, dword [ebp - 0x3768]
push ecx
mov edx, dword [ebp - 0x3774]
push edx
mov eax, dword [ebp - 0x3770]
push eax
mov ecx, dword [ebp - 0x40e4]
push ecx
push str.pm_GA____GetPolicyInterface_ret_d__encryptOutMode_d__exchangeOutMode_d_ps.areaAudit__d_ps.ifExchangeCanFormat_d_ps.ifIntranetCanFormat_d
push 1
push 0x2d8
push 0x4394f0
push 0x439514
call fcn.00410db0
add esp, 0x2c
cmp dword [ebp - 0x474], 0
je 0x4141cf
push str.pm_GetExtInfo_ok
push 1
push 0x2dc
push 0x439538
push 0x43955c
call fcn.00410db0
add esp, 0x14
lea edx, [ebp - 0x470]
push edx
call dword [ebp - 0x474]
lea eax, [ebp - 0x470]
push eax
push str.pm_GetExtInfo_vrvExt.szFilter_s
push 1
push 0x2de
push 0x439590
push 0x4395b4
call fcn.00410db0
add esp, 0x18
mov ecx, dword [ebp - 0x36c]
push ecx
mov edx, dword [ebp - 0x370]
push edx
push str.pm_GetExtInfo_vrvExt.uploadCfg.sizeLessValue_lu
push 1
push 0x2e0
push 0x4395f8
push 0x43961c
call fcn.00410db0
add esp, 0x1c
mov eax, dword [ebp - 0x364]
push eax
mov ecx, dword [ebp - 0x368]
push ecx
push str.pm_GetExtInfo_vrvExt.uploadCfg.sizeGreaterValue_lu
push 1
push 0x2e1
push 0x439660
push 0x439684
call fcn.00410db0
add esp, 0x1c
movzx edx, byte [ebp - 0x360]
push edx
push str.pm_GetExtInfo_vrvExt.uploadCfg.enableUpload_d
push 1
push 0x2e2
push 0x4396c4
push 0x4396e8
call fcn.00410db0
add esp, 0x18
movzx eax, byte [ebp - 0x35f]
push eax
push str.pm_GetExtInfo_vrvExt.uploadCfg.fileSizeLimit_d
push 1
push 0x2e3
push 0x439728
push 0x43974c
call fcn.00410db0
add esp, 0x18
movzx ecx, byte [ebp - 0x35e]
push ecx
push str.pm_GetExtInfo_vrvExt.uploadCfg.sizeGreaterCond_d
push 1
push 0x2e4
push 0x439790
push 0x4397b4
call fcn.00410db0
add esp, 0x18
movzx edx, byte [ebp - 0x35d]
push edx
push str.pm_GetExtInfo_vrvExt.uploadCfg.sizeGreaterUnit_d
push 1
push 0x2e5
push 0x4397f8
push 0x43981c
call fcn.00410db0
add esp, 0x18
movzx eax, byte [ebp - 0x35c]
push eax
push str.pm_GetExtInfo_vrvExt.uploadCfg.sizeRelation_d
push 1
push 0x2e6
push 0x43985c
push 0x439880
call fcn.00410db0
add esp, 0x18
movzx ecx, byte [ebp - 0x35b]
push ecx
push str.pm_GetExtInfo_vrvExt.uploadCfg.sizeLessCond_d
push 1
push 0x2e7
push 0x4398c0
push 0x4398e4
call fcn.00410db0
add esp, 0x18
movzx edx, byte [ebp - 0x35a]
push edx
push str.pm_GetExtInfo_vrvExt.uploadCfg.sizeLessUnit_d
push 1
push 0x2e8
push 0x439924
push 0x439948
call fcn.00410db0
add esp, 0x18
movzx eax, byte [ebp - 0x359]
push eax
push str.pm_GetExtInfo_vrvExt.uploadCfg.fileTypeLimit_d
push 1
push 0x2e9
push 0x439988
push 0x4399ac
call fcn.00410db0
add esp, 0x18
lea ecx, [ebp - 0x358]
push ecx
push str.pm_GetExtInfo_vrvExt.uploadCfg.fileTypeMask_s
push 1
push 0x2ea
push 0x4399ec
push 0x439a10
call fcn.00410db0
add esp, 0x18
jmp 0x4141f4
lea edx, [ebp - 0x470]
push edx
push str.pm_GetExtInfo_err_vrvExt.szFilter_s
push 1
push 0x2ee
push 0x439a48
push str.SetPolicyCfg
call fcn.00410db0
add esp, 0x18
lea ecx, [ebp - 0x3b30]
call fcn.00405220
mov byte [ebp - 4], 0x4e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4854], esp
lea eax, [ebp - 0xa58]
push eax
call fcn.00401790
mov dword [ebp - 0x4b54], eax
lea ecx, [ebp - 0x3b30]
call fcn.004052e0
push 1
push 3
lea ecx, [ebp - 0x4238]
call fcn.00416350
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x3770]
push ecx
lea ecx, [ebp - 0x4228]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4858], esp
push edx
lea ecx, [ebp - 0x4238]
call fcn.00416480
mov dword [ebp - 0x4b58], eax
mov eax, dword [ebp - 0x4b58]
mov dword [ebp - 0x4b5c], eax
mov byte [ebp - 4], 0x50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x485c], esp
push str.intranetAreaMode
call fcn.00401790
mov dword [ebp - 0x4b60], eax
mov ecx, dword [ebp - 0x4b60]
mov dword [ebp - 0x4b64], ecx
mov byte [ebp - 4], 0x51
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4860], esp
push 0x439a90
call fcn.00401790
mov dword [ebp - 0x4b68], eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x4190]
call fcn.00416350
mov byte [ebp - 4], 0x52
mov edx, dword [ebp - 0x3774]
push edx
lea ecx, [ebp - 0x4180]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4864], esp
push eax
lea ecx, [ebp - 0x4190]
call fcn.00416480
mov dword [ebp - 0x4b6c], eax
mov ecx, dword [ebp - 0x4b6c]
mov dword [ebp - 0x4b70], ecx
mov byte [ebp - 4], 0x53
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4868], esp
push str.exchangeAreaMode
call fcn.00401790
mov dword [ebp - 0x4b74], eax
mov edx, dword [ebp - 0x4b74]
mov dword [ebp - 0x4b78], edx
mov byte [ebp - 4], 0x54
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x486c], esp
push 0x439ab0
call fcn.00401790
mov dword [ebp - 0x4b7c], eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x2758]
call fcn.00416350
mov byte [ebp - 4], 0x55
mov eax, dword [ebp - 0x3768]
push eax
lea ecx, [ebp - 0x2748]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4870], esp
push ecx
lea ecx, [ebp - 0x2758]
call fcn.00416480
mov dword [ebp - 0x4b80], eax
mov edx, dword [ebp - 0x4b80]
mov dword [ebp - 0x4b84], edx
mov byte [ebp - 4], 0x56
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4874], esp
push str.areaAudit
call fcn.00401790
mov dword [ebp - 0x4b88], eax
mov eax, dword [ebp - 0x4b88]
mov dword [ebp - 0x4b8c], eax
mov byte [ebp - 4], 0x57
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4878], esp
push 0x439ac8
call fcn.00401790
mov dword [ebp - 0x4b90], eax
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x4388]
call fcn.00416350
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x3760]
push ecx
lea ecx, [ebp - 0x4378]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x487c], esp
push edx
lea ecx, [ebp - 0x4388]
call fcn.00416480
mov dword [ebp - 0x4b94], eax
mov eax, dword [ebp - 0x4b94]
mov dword [ebp - 0x4b98], eax
mov byte [ebp - 4], 0x59
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4880], esp
push str.ifExchangeCanFormat
call fcn.00401790
mov dword [ebp - 0x4b9c], eax
mov ecx, dword [ebp - 0x4b9c]
mov dword [ebp - 0x4ba0], ecx
mov byte [ebp - 4], 0x5a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4884], esp
push 0x439ae8
call fcn.00401790
mov dword [ebp - 0x4ba4], eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x40e0]
call fcn.00416350
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x3764]
push edx
lea ecx, [ebp - 0x40d0]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4888], esp
push eax
lea ecx, [ebp - 0x40e0]
call fcn.00416480
mov dword [ebp - 0x4ba8], eax
mov ecx, dword [ebp - 0x4ba8]
mov dword [ebp - 0x4bac], ecx
mov byte [ebp - 4], 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x488c], esp
push str.ifIntranetCanFormat
call fcn.00401790
mov dword [ebp - 0x4bb0], eax
mov edx, dword [ebp - 0x4bb0]
mov dword [ebp - 0x4bb4], edx
mov byte [ebp - 4], 0x5d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4890], esp
push 0x439b08
call fcn.00401790
mov dword [ebp - 0x4bb8], eax
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x3d88]
call fcn.00416350
mov byte [ebp - 4], 0x5e
movsx eax, byte [ebp - 0x375c]
push eax
lea ecx, [ebp - 0x3d78]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4894], esp
push ecx
lea ecx, [ebp - 0x3d88]
call fcn.00416480
mov dword [ebp - 0x4bbc], eax
mov edx, dword [ebp - 0x4bbc]
mov dword [ebp - 0x4bc0], edx
mov byte [ebp - 4], 0x5f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4898], esp
push str.dlpCtrl
call fcn.00401790
mov dword [ebp - 0x4bc4], eax
mov eax, dword [ebp - 0x4bc4]
mov dword [ebp - 0x4bc8], eax
mov byte [ebp - 4], 0x60
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x489c], esp
push 0x439b1c
call fcn.00401790
mov dword [ebp - 0x4bcc], eax
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x4580]
call fcn.00416350
mov byte [ebp - 4], 0x61
xor ecx, ecx
cmp dword [ebp - 0x40e4], 0
sete cl
push ecx
lea ecx, [ebp - 0x4570]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x48a0], esp
push edx
lea ecx, [ebp - 0x4580]
call fcn.00416480
mov dword [ebp - 0x4bd0], eax
mov eax, dword [ebp - 0x4bd0]
mov dword [ebp - 0x4bd4], eax
mov byte [ebp - 4], 0x62
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48a4], esp
push str.policy
call fcn.00401790
mov dword [ebp - 0x4bd8], eax
mov ecx, dword [ebp - 0x4bd8]
mov dword [ebp - 0x4bdc], ecx
mov byte [ebp - 4], 0x63
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48a8], esp
push 0x439b30
call fcn.00401790
mov dword [ebp - 0x4be0], eax
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x3ce0]
call fcn.00416350
mov byte [ebp - 4], 0x64
movsx edx, byte [ebp - 0x375b]
push edx
lea ecx, [ebp - 0x3cd0]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x48ac], esp
push eax
lea ecx, [ebp - 0x3ce0]
call fcn.00416480
mov dword [ebp - 0x4be4], eax
mov ecx, dword [ebp - 0x4be4]
mov dword [ebp - 0x4be8], ecx
mov byte [ebp - 4], 0x65
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48b0], esp
push str.antiVirus
call fcn.00401790
mov dword [ebp - 0x4bec], eax
mov edx, dword [ebp - 0x4bec]
mov dword [ebp - 0x4bf0], edx
mov byte [ebp - 4], 0x66
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48b4], esp
push str.GAPolicy
call fcn.00401790
mov dword [ebp - 0x4bf4], eax
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
mov byte [ebp - 0x2600], 0
push 0x103
push 0
lea eax, [ebp - 0x25ff]
push eax
call fcn.0041f760
add esp, 0xc
mov byte [ebp - 0x3b20], 0
push 0x103
push 0
lea ecx, [ebp - 0x3b1f]
push ecx
call fcn.0041f760
add esp, 0xc
mov byte [ebp - 0x4688], 0
push 0x103
push 0
lea edx, [ebp - 0x4687]
push edx
call fcn.0041f760
add esp, 0xc
mov byte [ebp - 0x3c38], 0
push 0x103
push 0
lea eax, [ebp - 0x3c37]
push eax
call fcn.0041f760
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x2600]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 0x26b0], 0
lea edx, [ebp - 0x2600]
push edx
push str._sCheckLan.dll
lea eax, [ebp - 0x3b20]
push eax
call fcn.0041b225
add esp, 0xc
lea ecx, [ebp - 0x2600]
push ecx
push str._s_secUsbLog.dll
lea edx, [ebp - 0x4688]
push edx
call fcn.0041b225
add esp, 0xc
lea eax, [ebp - 0x2600]
push eax
push str._sSecusbpolicy.dll
lea ecx, [ebp - 0x3c38]
push ecx
call fcn.0041b225
add esp, 0xc
lea edx, [ebp - 0x3b20]
push edx
mov eax, dword [ebp - 0x714]
push eax
call fcn.00412220
add esp, 8
mov dword [ebp - 0x40e8], eax
lea ecx, [ebp - 0x4688]
push ecx
mov edx, dword [ebp - 0x714]
push edx
call fcn.00412220
add esp, 8
mov dword [ebp - 0x26ac], eax
lea eax, [ebp - 0x3c38]
push eax
mov ecx, dword [ebp - 0x714]
push ecx
call fcn.00412220
add esp, 8
mov dword [ebp - 0x4034], eax
push 1
push 3
lea ecx, [ebp - 0x3e30]
call fcn.00416350
mov byte [ebp - 4], 0x67
mov edx, dword [ebp - 0x40e8]
push edx
lea ecx, [ebp - 0x3e20]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x48b8], esp
push eax
lea ecx, [ebp - 0x3e30]
call fcn.00416480
mov dword [ebp - 0x4bf8], eax
mov ecx, dword [ebp - 0x4bf8]
mov dword [ebp - 0x4bfc], ecx
mov byte [ebp - 4], 0x68
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48bc], esp
push str.CheckLanTrust
call fcn.00401790
mov dword [ebp - 0x4c00], eax
mov edx, dword [ebp - 0x4c00]
mov dword [ebp - 0x4c04], edx
mov byte [ebp - 4], 0x69
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48c0], esp
push 0x439b9c
call fcn.00401790
mov dword [ebp - 0x4c08], eax
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x38c8]
call fcn.00416350
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0x40e8]
push eax
lea ecx, [ebp - 0x38b8]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48c4], esp
push ecx
lea ecx, [ebp - 0x38c8]
call fcn.00416480
mov dword [ebp - 0x4c0c], eax
mov edx, dword [ebp - 0x4c0c]
mov dword [ebp - 0x4c10], edx
mov byte [ebp - 4], 0x6b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48c8], esp
push str.SecUsbLogTrust
call fcn.00401790
mov dword [ebp - 0x4c14], eax
mov eax, dword [ebp - 0x4c14]
mov dword [ebp - 0x4c18], eax
mov byte [ebp - 4], 0x6c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48cc], esp
push 0x439bb8
call fcn.00401790
mov dword [ebp - 0x4c1c], eax
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x26a8]
call fcn.00416350
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x40e8]
push ecx
lea ecx, [ebp - 0x2698]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x48d0], esp
push edx
lea ecx, [ebp - 0x26a8]
call fcn.00416480
mov dword [ebp - 0x4c20], eax
mov eax, dword [ebp - 0x4c20]
mov dword [ebp - 0x4c24], eax
mov byte [ebp - 4], 0x6e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48d4], esp
push str.SecusbpolicyTrust
call fcn.00401790
mov dword [ebp - 0x4c28], eax
mov ecx, dword [ebp - 0x4c28]
mov dword [ebp - 0x4c2c], ecx
mov byte [ebp - 4], 0x6f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48d8], esp
push str.FileTrust
call fcn.00401790
mov dword [ebp - 0x4c30], eax
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x4030]
call fcn.00416350
mov byte [ebp - 4], 0x70
mov edx, dword [ebp - 0x36c]
push edx
mov eax, dword [ebp - 0x370]
push eax
lea ecx, [ebp - 0x4020]
call fcn.004161c0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48dc], esp
push ecx
lea ecx, [ebp - 0x4030]
call fcn.00416480
mov dword [ebp - 0x4c34], eax
mov edx, dword [ebp - 0x4c34]
mov dword [ebp - 0x4c38], edx
mov byte [ebp - 4], 0x71
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48e0], esp
push str.sizeLessValue
call fcn.00401790
mov dword [ebp - 0x4c3c], eax
mov eax, dword [ebp - 0x4c3c]
mov dword [ebp - 0x4c40], eax
mov byte [ebp - 4], 0x72
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48e4], esp
push 0x439bf4
call fcn.00401790
mov dword [ebp - 0x4c44], eax
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x3f88]
call fcn.00416350
mov byte [ebp - 4], 0x73
mov ecx, dword [ebp - 0x364]
push ecx
mov edx, dword [ebp - 0x368]
push edx
lea ecx, [ebp - 0x3f78]
call fcn.004161c0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x48e8], esp
push eax
lea ecx, [ebp - 0x3f88]
call fcn.00416480
mov dword [ebp - 0x4c48], eax
mov ecx, dword [ebp - 0x4c48]
mov dword [ebp - 0x4c4c], ecx
mov byte [ebp - 4], 0x74
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48ec], esp
push str.sizeGreaterValue
call fcn.00401790
mov dword [ebp - 0x4c50], eax
mov edx, dword [ebp - 0x4c50]
mov dword [ebp - 0x4c54], edx
mov byte [ebp - 4], 0x75
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48f0], esp
push 0x439c14
call fcn.00401790
mov dword [ebp - 0x4c58], eax
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x3a18]
call fcn.00416350
mov byte [ebp - 4], 0x76
movzx eax, byte [ebp - 0x360]
push eax
lea ecx, [ebp - 0x3a08]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48f4], esp
push ecx
lea ecx, [ebp - 0x3a18]
call fcn.00416480
mov dword [ebp - 0x4c5c], eax
mov edx, dword [ebp - 0x4c5c]
mov dword [ebp - 0x4c60], edx
mov byte [ebp - 4], 0x77
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48f8], esp
push str.enableUpload
call fcn.00401790
mov dword [ebp - 0x4c64], eax
mov eax, dword [ebp - 0x4c64]
mov dword [ebp - 0x4c68], eax
mov byte [ebp - 4], 0x78
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48fc], esp
push 0x439c30
call fcn.00401790
mov dword [ebp - 0x4c6c], eax
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x4730]
call fcn.00416350
mov byte [ebp - 4], 0x79
movzx ecx, byte [ebp - 0x35f]
push ecx
lea ecx, [ebp - 0x4720]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4900], esp
push edx
lea ecx, [ebp - 0x4730]
call fcn.00416480
mov dword [ebp - 0x4c70], eax
mov eax, dword [ebp - 0x4c70]
mov dword [ebp - 0x4c74], eax
mov byte [ebp - 4], 0x7a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4904], esp
push str.fileSizeLimit
call fcn.00401790
mov dword [ebp - 0x4c78], eax
mov ecx, dword [ebp - 0x4c78]
mov dword [ebp - 0x4c7c], ecx
mov byte [ebp - 4], 0x7b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4908], esp
push 0x439c4c
call fcn.00401790
mov dword [ebp - 0x4c80], eax
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x44d8]
call fcn.00416350
mov byte [ebp - 4], 0x7c
movzx edx, byte [ebp - 0x35e]
push edx
lea ecx, [ebp - 0x44c8]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x490c], esp
push eax
lea ecx, [ebp - 0x44d8]
call fcn.00416480
mov dword [ebp - 0x4c84], eax
mov ecx, dword [ebp - 0x4c84]
mov dword [ebp - 0x4c88], ecx
mov byte [ebp - 4], 0x7d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4910], esp
push str.sizeGreaterCond
call fcn.00401790
mov dword [ebp - 0x4c8c], eax
mov edx, dword [ebp - 0x4c8c]
mov dword [ebp - 0x4c90], edx
mov byte [ebp - 4], 0x7e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4914], esp
push 0x439c68
call fcn.00401790
mov dword [ebp - 0x4c94], eax
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x3970]
call fcn.00416350
mov byte [ebp - 4], 0x7f
movzx eax, byte [ebp - 0x35d]
push eax
lea ecx, [ebp - 0x3960]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4918], esp
push ecx
lea ecx, [ebp - 0x3970]
call fcn.00416480
mov dword [ebp - 0x4c98], eax
mov edx, dword [ebp - 0x4c98]
mov dword [ebp - 0x4c9c], edx
mov byte [ebp - 4], 0x80
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x491c], esp
push str.sizeGreaterUnit
call fcn.00401790
mov dword [ebp - 0x4ca0], eax
mov eax, dword [ebp - 0x4ca0]
mov dword [ebp - 0x4ca4], eax
mov byte [ebp - 4], 0x81
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4920], esp
push 0x439c84
call fcn.00401790
mov dword [ebp - 0x4ca8], eax
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x3820]
call fcn.00416350
mov byte [ebp - 4], 0x82
movzx ecx, byte [ebp - 0x35c]
push ecx
lea ecx, [ebp - 0x3810]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4924], esp
push edx
lea ecx, [ebp - 0x3820]
call fcn.00416480
mov dword [ebp - 0x4cac], eax
mov eax, dword [ebp - 0x4cac]
mov dword [ebp - 0x4cb0], eax
mov byte [ebp - 4], 0x83
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4928], esp
push str.sizeRelation
call fcn.00401790
mov dword [ebp - 0x4cb4], eax
mov ecx, dword [ebp - 0x4cb4]
mov dword [ebp - 0x4cb8], ecx
mov byte [ebp - 4], 0x84
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x492c], esp
push 0x439ca0
call fcn.00401790
mov dword [ebp - 0x4cbc], eax
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x4430]
call fcn.00416350
mov byte [ebp - 4], 0x85
movzx edx, byte [ebp - 0x35b]
push edx
lea ecx, [ebp - 0x4420]
call fcn.00415ff0
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4930], esp
push eax
lea ecx, [ebp - 0x4430]
call fcn.00416480
mov dword [ebp - 0x4cc0], eax
mov ecx, dword [ebp - 0x4cc0]
mov dword [ebp - 0x4cc4], ecx
mov byte [ebp - 4], 0x86
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4934], esp
push str.sizeLessCond
call fcn.00401790
mov dword [ebp - 0x4cc8], eax
mov edx, dword [ebp - 0x4cc8]
mov dword [ebp - 0x4ccc], edx
mov byte [ebp - 4], 0x87
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4938], esp
push 0x439cbc
call fcn.00401790
mov dword [ebp - 0x4cd0], eax
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x42e0]
call fcn.00416350
mov byte [ebp - 4], 0x88
movzx eax, byte [ebp - 0x35a]
push eax
lea ecx, [ebp - 0x42d0]
call fcn.00415ff0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x493c], esp
push ecx
lea ecx, [ebp - 0x42e0]
call fcn.00416480
mov dword [ebp - 0x4cd4], eax
mov edx, dword [ebp - 0x4cd4]
mov dword [ebp - 0x4cd8], edx
mov byte [ebp - 4], 0x89
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4940], esp
push str.sizeLessUnit
call fcn.00401790
mov dword [ebp - 0x4cdc], eax
mov eax, dword [ebp - 0x4cdc]
mov dword [ebp - 0x4ce0], eax
mov byte [ebp - 4], 0x8a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4944], esp
push 0x439cd8
call fcn.00401790
mov dword [ebp - 0x4ce4], eax
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
push 1
push 3
lea ecx, [ebp - 0x3ee0]
call fcn.00416350
mov byte [ebp - 4], 0x8b
movzx ecx, byte [ebp - 0x359]
push ecx
lea ecx, [ebp - 0x3ed0]
call fcn.00415ff0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x4948], esp
push edx
lea ecx, [ebp - 0x3ee0]
call fcn.00416480
mov dword [ebp - 0x4ce8], eax
mov eax, dword [ebp - 0x4ce8]
mov dword [ebp - 0x4cec], eax
mov byte [ebp - 4], 0x8c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x494c], esp
push str.fileTypeLimit
call fcn.00401790
mov dword [ebp - 0x4cf0], eax
mov ecx, dword [ebp - 0x4cf0]
mov dword [ebp - 0x4cf4], ecx
mov byte [ebp - 4], 0x8d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4950], esp
push 0x439cf4
call fcn.00401790
mov dword [ebp - 0x4cf8], eax
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4954], esp
lea edx, [ebp - 0x358]
push edx
call fcn.00401790
mov dword [ebp - 0x4cfc], eax
mov eax, dword [ebp - 0x4cfc]
mov dword [ebp - 0x4d00], eax
mov byte [ebp - 4], 0x8e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4958], esp
push str.fileTypeMask
call fcn.00401790
mov dword [ebp - 0x4d04], eax
mov ecx, dword [ebp - 0x4d04]
mov dword [ebp - 0x4d08], ecx
mov byte [ebp - 4], 0x8f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x495c], esp
push str.UpLoadCfg
call fcn.00401790
mov dword [ebp - 0x4d0c], eax
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x3b30]
call fcn.00405f50
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4960], esp
lea edx, [ebp - 0xa58]
push edx
call fcn.00401790
mov dword [ebp - 0x4d10], eax
lea ecx, [ebp - 0x3b30]
call fcn.00405ce0
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x3ee0]
call fcn.00415390
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x42e0]
call fcn.00415390
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x4430]
call fcn.00415390
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x3820]
call fcn.00415390
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x3970]
call fcn.00415390
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x44d8]
call fcn.00415390
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x4730]
call fcn.00415390
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x3a18]
call fcn.00415390
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x3f88]
call fcn.00415390
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x4030]
call fcn.00415390
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x26a8]
call fcn.00415390
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x38c8]
call fcn.00415390
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x3e30]
call fcn.00415390
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x3ce0]
call fcn.00415390
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x4580]
call fcn.00415390
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x3d88]
call fcn.00415390
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x40e0]
call fcn.00415390
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x4388]
call fcn.00415390
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x2758]
call fcn.00415390
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x4190]
call fcn.00415390
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x4238]
call fcn.00415390
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3b30]
call fcn.00405260
mov byte [ebp - 0x4961], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x478]
call fcn.0040fda0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1144]
call fcn.00401a80
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1270]
call fcn.004018d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x958]
call fcn.0040fda0
mov al, byte [ebp - 0x4961]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00419e3a
mov esp, ebp
pop ebp
ret