Function at 0x4c2880
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x863997
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a0
push ebx
mov ebx, ecx
push ebp
push esi
push edi
lea esi, [ebx + 0x50]
xor edi, edi
mov ecx, esi
mov dword [esp + 0x30], edi
call fcn.00636d30
test eax, eax
jbe 0x4c28c0
mov ecx, esi
call fcn.00637470
mov dword [esp + 0x30], eax
mov ebp, dword [esp + 0x1c0]
push str.SDPropData
mov ecx, ebp
call fcn.0063b170
mov eax, dword [ebx + 0x54]
push eax
push 0x933298
push 0x9357f8
push ebp
call fcn.0063b220
add esp, 0x10
mov ecx, ebp
push str.FileList
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x60]
cmp eax, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x68], ecx
mov dword [esp + 0x18], edi
jle 0x4c2ebf
mov dword [esp + 0x28], edi
push 0x932a84
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov edx, dword [esp + 0x18]
mov ecx, dword [ebx + 8]
lea edi, [edx*4]
mov eax, edi
add eax, ecx
lea ecx, [esp + 0x14]
push eax
call fcn.00831c58
push 0x5c
lea ecx, [esp + 0x18]
mov dword [esp + 0x1bc], 0
call fcn.00825d01
or esi, 0xffffffff
cmp eax, esi
jle 0x4c29b3
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx - 8]
dec ecx
cmp eax, ecx
jge 0x4c29b3
inc eax
lea edx, [esp + 0xa8]
push eax
push edx
mov edx, dword [ebx + 8]
mov ecx, edi
add ecx, edx
call fcn.00825b00
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1bc], 1
call fcn.00832032
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1b8], 0
call fcn.00831eeb
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x90]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov byte [esp + 0x1b8], 2
push ecx
push 0x932a7c
push 0x932a70
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x90]
mov byte [esp + 0x1b8], 0
call fcn.00617ec0
mov edx, dword [ebx + 8]
lea ecx, [esp + 0x9c]
mov eax, dword [edi + edx]
push eax
call fcn.00617650
mov eax, dword [eax]
mov byte [esp + 0x1b8], 3
push eax
push 0x932a7c
push str.Path
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x9c]
mov byte [esp + 0x1b8], 0
call fcn.00617ec0
mov ecx, dword [esp + 0x18]
mov eax, dword [ebx + 0x1c]
lea edi, [ecx*8]
mov edx, edi
add edx, eax
mov eax, dword [edx + 4]
push eax
mov ecx, dword [edx]
push ecx
push str._I64u
push str.Size
push ebp
call fcn.0063b220
mov edx, dword [ebx + 0x30]
add esp, 0x14
lea eax, [esp + 0x94]
lea ecx, [esp + 0x34]
fld qword [edx + edi]
push 0x92f11c
push eax
fstp qword [esp + 0x3c]
mov dword [esp + 0x44], 0
call fcn.005f19ce
mov eax, dword [eax]
lea ecx, [esp + 0xa0]
push eax
mov byte [esp + 0x1bc], 4
call fcn.00617650
mov ecx, dword [eax]
mov byte [esp + 0x1b8], 5
push ecx
push 0x932a7c
push str.Date
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0xa0]
mov byte [esp + 0x1b8], 4
call fcn.00617ec0
lea ecx, [esp + 0x94]
mov byte [esp + 0x1b8], 0
call fcn.00831eeb
mov edi, dword [esp + 0x18]
mov eax, dword [ebx + 0x88]
cmp edi, eax
jge 0x4c2b17
mov edx, dword [ebx + 0x84]
mov eax, dword [edx + edi*4]
push eax
push 0x933298
push str.Read
push ebp
call fcn.0063b220
add esp, 0x10
cmp edi, dword [ebx + 0x74]
jge 0x4c2baa
mov edx, dword [ebx + 0x70]
lea ecx, [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x2c]
add edx, ecx
push edx
call dword [sym.imp.ole32.dll_StringFromCLSID]
mov eax, dword [esp + 0x6c]
lea ecx, [esp + 0x2c]
push eax
call fcn.00831f5f
mov ecx, dword [esp + 0x6c]
mov byte [esp + 0x1b8], 6
push ecx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x98]
push edx
call fcn.00617650
mov eax, dword [eax]
mov byte [esp + 0x1b8], 7
push eax
push 0x932a7c
push str.FileHash
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x98]
mov byte [esp + 0x1b8], 6
call fcn.00617ec0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1b8], 0
call fcn.00831eeb
cmp edi, dword [ebx + 0x9c]
jge 0x4c2bfa
mov ecx, dword [ebx + 0x98]
mov eax, dword [ecx + edi*4]
lea ecx, [esp + 0xa4]
push eax
call fcn.00617650
mov edx, dword [eax]
mov byte [esp + 0x1b8], 8
push edx
push 0x932a7c
push str.RelativePath
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0xa4]
mov byte [esp + 0x1b8], 0
call fcn.00617ec0
cmp edi, dword [ebx + 0xb0]
jge 0x4c2c1f
mov eax, dword [ebx + 0xac]
mov ecx, dword [eax + edi*4]
push ecx
push 0x935780
push str.KeyDoc
push ebp
call fcn.0063b220
add esp, 0x10
mov eax, dword [esp + 0x68]
test eax, eax
jle 0x4c2d7e
push str.SecurityInfo
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
cmp eax, ecx
mov dword [esp + 0x64], eax
jge 0x4c2d77
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 2
mov dword [esp + 0x60], ecx
jmp 0x4c2c68
mov ecx, dword [esp + 0x60]
mov esi, dword [ebx + 0x5c]
mov edx, dword [esp + 0x18]
add esi, ecx
mov ecx, 7
lea edi, [esp + 0x40]
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0x54], edx
jne 0x4c2d68
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x4c2c95
push str.SettingRight
jmp 0x4c2c9a
push str.AccessRight
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x40]
push eax
push ecx
call dword [sym.imp.ole32.dll_StringFromCLSID]
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x24]
push edx
call fcn.00831f5f
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x1b8], 9
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov ecx, dword [esp + 0x24]
push ecx
lea ecx, [esp + 0x60]
call fcn.00617650
mov edx, dword [eax]
mov byte [esp + 0x1b8], 0xa
push edx
push 0x932a7c
push str.Region
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1b8], 9
call fcn.00617ec0
mov eax, dword [esp + 0x50]
push eax
push 0x933298
push str.Level
push ebp
call fcn.0063b220
add esp, 0x10
mov ecx, ebp
call fcn.0063c390
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b8], 0
call fcn.00831eeb
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x68]
inc eax
add edx, 0x1c
cmp eax, ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], edx
jl 0x4c2c64
jmp 0x4c2d70
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x20], ecx
mov edi, dword [esp + 0x18]
or esi, 0xffffffff
mov ecx, ebp
call fcn.0063c390
mov ecx, ebp
call fcn.0063c390
lea ecx, [esp + 0x14]
mov dword [esp + 0x1b8], esi
call fcn.00831eeb
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
inc edi
add ecx, 0x10
cmp edi, eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x28], ecx
jl 0x4c291f
xor edi, edi
mov eax, dword [ebx + 0x130]
cmp eax, edi
jle 0x4c2e61
push 0x9b5220
lea ecx, [esp + 0x18]
call fcn.00831f5f
mov edi, dword [ebx + 0x128]
mov dword [esp + 0x1b8], 0xb
test edi, edi
mov eax, 1
je 0x4c2e12
test eax, eax
jne 0x4c2dfb
push 0x933d50
lea ecx, [esp + 0x18]
call fcn.008322dc
mov eax, edi
mov edi, dword [edi]
add eax, 8
lea ecx, [esp + 0x14]
push eax
call fcn.00832318
xor eax, eax
test edi, edi
jne 0x4c2de9
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push edx
call fcn.00617650
mov eax, dword [eax]
mov byte [esp + 0x1b8], 0xc
push eax
push 0x932a7c
push str.BlockedFile
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b8], 0xb
call fcn.00617ec0
lea ecx, [esp + 0x14]
mov dword [esp + 0x1b8], esi
call fcn.00831eeb
xor edi, edi
mov ecx, ebp
call fcn.0063c390
cmp dword [esp + 0x30], edi
je 0x4c3643
push str.OutsendObject
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [esp + 0x30]
mov dword [esp + 0x40], 0x898650
mov dword [esp + 0x44], edi
mov dword [esp + 0x50], edi
mov esi, dword [eax + 0x68]
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], edi
cmp esi, edi
mov dword [esp + 0x1b8], 0xd
jne 0x4c2ec7
xor edx, edx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], edx
jmp 0x4c2f02
or esi, 0xffffffff
jmp 0x4c2db3
mov edi, esi
shl edi, 4
add edi, esi
shl edi, 4
push edi
call fcn.008325b4
mov edx, eax
mov ecx, edi
mov dword [esp + 0x48], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 4
and ecx, 3
mov dword [esp + 0x4c], esi
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x30]
mov dword [esp + 0x48], esi
mov edx, esi
mov ecx, esi
mov edi, dword [esp + 0x44]
shl ecx, 4
add ecx, esi
mov esi, dword [eax + 0x64]
shl ecx, 4
lea esi, [eax + esi*2 + 0x82]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [edx - 1]
test edi, edi
jl 0x4c2f7f
lea eax, [edi + 1]
mov esi, eax
shl esi, 4
add esi, eax
mov eax, dword [esp + 0x44]
shl esi, 4
add esi, eax
mov eax, dword [esi - 0x10]
test eax, eax
jbe 0x4c2f74
mov eax, edx
sub eax, edi
dec eax
je 0x4c2f6f
mov ecx, eax
lea edx, [esi - 0x110]
shl ecx, 4
add ecx, eax
shl ecx, 4
push ecx
push esi
push edx
call fcn.005fcc10
mov edx, dword [esp + 0x54]
add esp, 0xc
dec edx
mov dword [esp + 0x48], edx
dec edi
sub esi, 0x110
test edi, edi
jge 0x4c2f42
xor eax, eax
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
test edx, edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x18], eax
jle 0x4c3160
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
lea edi, [esp + 0x80]
lea esi, [esp + 0x70]
mov eax, dword [edx]
mov dword [esp + 0x70], eax
mov ecx, dword [edx + 4]
mov dword [esp + 0x74], ecx
mov eax, dword [edx + 8]
mov dword [esp + 0x78], eax
mov ecx, dword [edx + 0xc]
xor edx, edx
mov dword [esp + 0x7c], ecx
mov ecx, 4
repe cmpsd dword [esi], dword es:[edi]
je 0x4c30d5
mov eax, dword [esp + 0x18]
test eax, eax
jle 0x4c3004
mov ecx, ebp
call fcn.0063c390
mov ecx, ebp
call fcn.0063c390
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
lea ecx, [esp + 0x20]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x7c]
lea edx, [esp + 0x70]
push ecx
push edx
mov dword [esp + 0x94], eax
call dword [sym.imp.ole32.dll_StringFromCLSID]
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x24]
push eax
call fcn.00831f5f
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x1b8], 0xe
push ecx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push str.Object
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.00617650
mov eax, dword [eax]
mov byte [esp + 0x1b8], 0xf
push eax
push 0x932a7c
push str.GUID
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b8], 0xe
call fcn.00617ec0
push str.IDList
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b8], 0xd
call fcn.00831eeb
mov ecx, 0x3c
xor eax, eax
lea edi, [esp + 0xbe]
mov word [esp + 0xbc], 0
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
push 0x78
add ecx, 0x10
lea edx, [esp + 0xc0]
push ecx
push edx
call fcn.005fc3ce
add esp, 0xc
lea eax, [esp + 0xbc]
push eax
push 0x932a7c
push 0x9329d4
push ebp
call fcn.0063b220
mov ecx, dword [esp + 0x58]
mov esi, dword [esp + 0x28]
add esp, 0x10
lea eax, [ecx - 1]
cmp esi, eax
jne 0x4c3141
mov ecx, ebp
call fcn.0063c390
mov ecx, ebp
call fcn.0063c390
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x48]
inc esi
add ecx, 0x110
cmp esi, eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], ecx
jl 0x4c2fb5
mov ecx, ebp
call fcn.0063c390
push str.OutsendCustom
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [ebx + 0x104]
xor esi, esi
test eax, eax
jle 0x4c31c8
push str.Object
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov edx, dword [ebx + 0x100]
mov eax, dword [edx + esi*4]
push eax
push 0x932a7c
push 0x932a70
push ebp
call fcn.0063b220
add esp, 0x10
mov ecx, ebp
call fcn.0063c390
mov eax, dword [ebx + 0x104]
inc esi
cmp esi, eax
jl 0x4c3186
mov ecx, ebp
call fcn.0063c390
push str.OutsendConfig
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [ebx + 0x14c]
test eax, eax
jle 0x4c328c
push 0x9b5220
lea ecx, [esp + 0x18]
call fcn.00831f5f
mov esi, dword [ebx + 0x144]
mov byte [esp + 0x1b8], 0x10
test esi, esi
mov eax, 1
je 0x4c323e
test eax, eax
jne 0x4c3227
push 0x933d50
lea ecx, [esp + 0x18]
call fcn.008322dc
mov eax, esi
mov esi, dword [esi]
add eax, 8
lea ecx, [esp + 0x14]
push eax
call fcn.00832318
xor eax, eax
test esi, esi
jne 0x4c3215
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x14]
call fcn.00617650
mov edx, dword [eax]
mov byte [esp + 0x1b8], 0x11
push edx
push 0x932a7c
push str.ModifyField
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b8], 0x10
call fcn.00617ec0
lea ecx, [esp + 0x14]
mov byte [esp + 0x1b8], 0xd
call fcn.00831eeb
mov esi, dword [esp + 0x30]
xor eax, eax
mov edx, dword [esi + 0x20]
test edx, edx
sete al
push eax
push 0x933298
push str.Print
push ebp
call fcn.0063b220
mov edi, dword [esi + 0x1c]
add esp, 0x10
xor ecx, ecx
test edi, edi
sete cl
push ecx
push 0x933298
push str.VPrint
push ebp
call fcn.0063b220
mov eax, dword [esi + 0x14]
add esp, 0x10
xor edx, edx
test eax, eax
sete dl
push edx
push 0x933298
push str.Clipboard
push ebp
call fcn.0063b220
mov ecx, dword [esi + 0x2c]
add esp, 0x10
xor eax, eax
test ecx, ecx
sete al
push eax
push 0x933298
push str.Snapshot
push ebp
call fcn.0063b220
mov edx, dword [esi + 0x10]
add esp, 0x10
xor ecx, ecx
test edx, edx
sete cl
push ecx
push 0x933298
push str.Write
push ebp
call fcn.0063b220
mov edx, dword [esi + 0x3c]
add esp, 0x10
push edx
push 0x933298
push str.LimitOpenTimes
push ebp
call fcn.0063b220
mov eax, dword [esi + 0x3c]
add esp, 0x10
push eax
push 0x933298
push str.MaxOpenTimes
push ebp
call fcn.0063b220
mov ecx, dword [esi + 0x44]
add esp, 0x10
push ecx
push 0x933298
push str.SyncDate
push ebp
call fcn.0063b220
fld qword [esi + 0x48]
fcomp qword [0x894380]
mov eax, dword [esi + 0x4c]
mov edx, dword [esi + 0x48]
mov dword [esp + 0x48], eax
add esp, 0x10
mov dword [esp + 0x34], edx
mov dword [esp + 0x3c], 0
fnstsw ax
test ah, 0x40
je 0x4c3395
push 0
jmp 0x4c33c3
lea ecx, [esp + 0x34]
call fcn.005f12ab
lea eax, [eax + eax*4]
lea ecx, [esp + 0x34]
lea edi, [eax + eax*4]
call fcn.005f1307
lea eax, [eax + edi*4]
lea ecx, [esp + 0x34]
lea eax, [eax + eax*4]
lea edi, [eax + eax*4]
call fcn.005f1369
lea ecx, [eax + edi*4]
push ecx
push 0x933298
push str.BeginDate
push ebp
call fcn.0063b220
mov edx, dword [esi + 0x54]
mov eax, dword [esi + 0x50]
add esp, 0x10
lea ecx, [esp + 0x34]
push edx
push eax
call fcn.005f1526
fld qword [esi + 0x50]
fcomp qword [0x894380]
fnstsw ax
test ah, 0x40
je 0x4c33fb
push 0
jmp 0x4c3429
lea ecx, [esp + 0x34]
call fcn.005f12ab
lea eax, [eax + eax*4]
lea ecx, [esp + 0x34]
lea edi, [eax + eax*4]
call fcn.005f1307
lea eax, [eax + edi*4]
lea ecx, [esp + 0x34]
lea eax, [eax + eax*4]
lea edi, [eax + eax*4]
call fcn.005f1369
lea ecx, [eax + edi*4]
push ecx
push 0x933298
push str.EndDate
push ebp
call fcn.0063b220
mov edx, esi
add esp, 0x10
mov eax, dword [edx]
mov dword [esp + 0xac], eax
mov ecx, dword [edx + 4]
mov dword [esp + 0xb0], ecx
mov eax, dword [edx + 8]
mov dword [esp + 0xb4], eax
lea eax, [esp + 0xac]
mov ecx, dword [edx + 0xc]
lea edx, [esp + 0x1c]
push edx
push eax
mov dword [esp + 0xc0], ecx
call dword [sym.imp.ole32.dll_StringFromCLSID]
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x30]
call fcn.00831f5f
mov edx, dword [esp + 0x1c]
mov byte [esp + 0x1b8], 0x12
push edx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov byte [esp + 0x1b8], 0x13
push ecx
push 0x932a7c
push 0x94bb54
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b8], 0x12
call fcn.00617ec0
mov eax, dword [esi + 0x3c]
test eax, eax
ja 0x4c3501
fld qword [esi + 0x48]
fcomp qword [0x894380]
fnstsw ax
test ah, 0x41
je 0x4c3501
fld qword [esi + 0x50]
fcomp qword [0x894380]
fnstsw ax
test ah, 0x41
je 0x4c3501
push 0
jmp 0x4c3505
mov edx, dword [esi + 0x5c]
push edx
push 0x933298
push str.AutoDelete
push ebp
call fcn.0063b220
mov eax, dword [ebx + 0x4c]
add esp, 0x10
xor ecx, ecx
mov edi, dword [eax - 8]
test edi, edi
setne cl
push ecx
push 0x933298
push str.Filter
push ebp
call fcn.0063b220
mov eax, dword [ebx + 0x4c]
add esp, 0x10
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov edx, dword [eax]
mov byte [esp + 0x1b8], 0x14
push edx
push 0x932a7c
push str.FilterFile
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b8], 0x12
call fcn.00617ec0
mov eax, dword [ebx + 0x15c]
push eax
push 0x932a7c
push str.OutSendWatermark
push ebp
call fcn.0063b220
mov ecx, dword [ebx + 0x160]
add esp, 0x10
push ecx
push 0x932a7c
push str.OutSendWndTitle
push ebp
call fcn.0063b220
mov edx, dword [ebx + 0x164]
add esp, 0x10
push edx
push 0x932a7c
push str.OutSendFrame
push ebp
call fcn.0063b220
mov eax, dword [ebx + 0x168]
add esp, 0x10
push eax
push 0x935780
push 0x94ba44
push ebp
call fcn.0063b220
mov ecx, dword [esi + 0x7c]
add esp, 0x10
and ecx, 1
push ecx
push 0x933298
push str.Admin
push ebp
call fcn.0063b220
add esp, 0x10
mov ecx, ebp
call fcn.0063c390
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1b8], 0xd
call fcn.00831eeb
mov dword [esp + 0x40], 0x898650
mov eax, dword [esp + 0x44]
mov dword [esp + 0x1b8], 0x15
test eax, eax
je 0x4c3633
push eax
call fcn.008325dd
add esp, 4
or esi, 0xffffffff
mov dword [esp + 0x1b8], 0xffffffff
xor edi, edi
push str.ApplyInfo
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [ebx + 0xbc]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov edx, dword [eax]
mov dword [esp + 0x1b8], 0x16
push edx
push 0x932a7c
push str.Agent
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xc0]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov eax, dword [eax]
mov dword [esp + 0x1b8], 0x17
push eax
push 0x932a7c
push 0x94b960
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xc4]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov dword [esp + 0x1b8], 0x18
push ecx
push 0x932a7c
push 0x94b954
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xc8]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov edx, dword [eax]
mov dword [esp + 0x1b8], 0x19
push edx
push 0x932a7c
push 0x94b948
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xcc]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov eax, dword [eax]
mov dword [esp + 0x1b8], 0x1a
push eax
push 0x932a7c
push 0x94b938
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov ecx, ebp
call fcn.0063c390
push str.ApproveInfo
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [ebx + 0xd8]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov dword [esp + 0x1b8], 0x1b
push ecx
push 0x932a7c
push 0x94b948
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xd4]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov edx, dword [eax]
mov dword [esp + 0x1b8], 0x1c
push edx
push 0x932a7c
push 0x94b954
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xd0]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov eax, dword [eax]
mov dword [esp + 0x1b8], 0x1d
push eax
push 0x932a7c
push 0x94b918
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xdc]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov dword [esp + 0x1b8], 0x1e
push ecx
push 0x932a7c
push str.Memo
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xe0]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov dword [esp + 0x1b8], 0x1f
mov edx, dword [eax]
push edx
push 0x932a7c
push str.StateDetail
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xe4]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov eax, dword [eax]
mov dword [esp + 0x1b8], 0x20
push eax
push 0x932a7c
push str.History
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov eax, dword [ebx + 0xe8]
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov dword [esp + 0x1b8], 0x21
push ecx
push 0x932a7c
push str.Flow
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov ecx, ebp
call fcn.0063c390
push str.OutsendMethod
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov edx, dword [ebx + 0x40]
push edx
push 0x933298
push str.OutSendType
push ebp
call fcn.0063b220
mov eax, dword [ebx + 0x44]
add esp, 0x10
push eax
push 0x933298
push str.PackType
push ebp
call fcn.0063b220
mov eax, dword [ebx + 0x48]
add esp, 0x10
lea ecx, [esp + 0x10]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov dword [esp + 0x1b8], 0x22
push ecx
push 0x932a7c
push str.PackPath
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1b8], esi
call fcn.00617ec0
mov ecx, ebp
call fcn.0063c390
push str.CommonSecurity
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
mov eax, dword [ebx + 0x118]
cmp eax, edi
jle 0x4c3b29
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], eax
mov esi, dword [ebx + 0x114]
mov ecx, dword [esp + 0x28]
add esi, ecx
mov ecx, 7
lea edi, [esp + 0x40]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x4c3a58
push str.SettingRight
jmp 0x4c3a5d
push str.AccessRight
mov ecx, ebp
call fcn.0063b200
mov ecx, ebp
call fcn.0063c360
lea edx, [esp + 0x20]
lea eax, [esp + 0x40]
push edx
push eax
call dword [sym.imp.ole32.dll_StringFromCLSID]
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0x28]
call fcn.00831f5f
mov edx, dword [esp + 0x20]
mov dword [esp + 0x1b8], 0x23
push edx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x5c]
push eax
call fcn.00617650
mov ecx, dword [eax]
mov byte [esp + 0x1b8], 0x24
push ecx
push 0x932a7c
push str.Region
push ebp
call fcn.0063b220
add esp, 0x10
lea ecx, [esp + 0x5c]
mov byte [esp + 0x1b8], 0x23
call fcn.00617ec0
mov edx, dword [esp + 0x50]
push edx
push 0x933298
push str.Level
push ebp
call fcn.0063b220
add esp, 0x10
mov ecx, ebp
call fcn.0063c390
lea ecx, [esp + 0x24]
mov dword [esp + 0x1b8], 0xffffffff
call fcn.00831eeb
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
add ecx, 0x1c
dec eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x1c], eax
jne 0x4c3a32
mov ecx, ebp
call fcn.0063c390
mov ecx, dword [esp + 0x1b0]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x1ac
ret 4