Function at 0x427260
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x450184
mov eax, dword fs:[0]
push eax
sub esp, 0x304
mov eax, dword [0x4643c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2ec], esi
xor eax, eax
mov dword [ebp - 4], eax
mov ecx, 7
xor edx, edx
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x308], eax
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xfc], eax
mov word [ebp - 0x10c], dx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x8c], eax
mov word [ebp - 0x9c], dx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x134], eax
mov word [ebp - 0x144], dx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], eax
mov word [ebp - 0x48], dx
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe0], eax
mov word [ebp - 0xf0], dx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xc4], eax
mov word [ebp - 0xd4], dx
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov word [ebp - 0x160], dx
mov edx, vtable.HK::SetACL::SD.0
xor edi, edi
mov dword [ebp - 0x290], edx
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x264], eax
mov word [ebp - 0x274], di
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x24c], eax
mov byte [ebp - 0x248], al
mov dword [ebp - 0x2e0], edx
xor edx, edx
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 0x2b4], eax
mov word [ebp - 0x2c4], dx
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x29c], eax
mov byte [ebp - 0x298], al
mov byte [ebp - 4], 9
lea edx, [esi + 0x184]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x304], edx
mov dword [edx + 0x10], eax
cmp dword [edx + 0x14], 8
jb 0x427422
mov edx, dword [edx]
xor edi, edi
mov word [edx], di
mov dword [ebp - 0x114], ecx
xor ecx, ecx
push eax
lea edx, [ebp + 8]
mov dword [ebp - 0x118], eax
mov word [ebp - 0x128], cx
push edx
or eax, 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.004138c0
lea ebx, [ebp - 0x128]
mov byte [ebp - 4], 0xa
call fcn.00431ce0
push 0x45a054
lea ebx, [ebp - 0x240]
call fcn.00407f10
sub esi, 0xffffff80
push esi
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x2e4], esi
call fcn.0042c980
add esp, 4
mov ecx, eax
lea esi, [ebp - 0x2c]
call fcn.00408030
mov edi, eax
lea esi, [ebp - 0x144]
mov byte [ebp - 4], 0xc
call fcn.00407630
mov esi, 8
cmp dword [ebp - 0x18], esi
jb 0x4274b5
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0043644d
add esp, 4
lea edx, [ebp - 0x240]
xor ecx, ecx
mov edi, 7
xor ebx, ebx
push edx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], cx
mov byte [ebp - 4], 0xa
call fcn.00407140
mov eax, dword [ebp - 0x2ec]
cmp dword [eax + 0x124], ebx
jne 0x4276de
cmp dword [ebp - 0x114], esi
jb 0x427501
mov ecx, dword [ebp - 0x128]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
lea esi, [ebp - 0x2e0]
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x118], ebx
mov word [ebp - 0x128], dx
mov dword [ebp - method.HK::SetACL::SD.virtual_0], vtable.HK::SetACL::SD.0
call fcn.0042eb30
cmp dword [ebp - 0x2b0], 8
jb 0x427543
mov eax, dword [ebp - 0x2c4]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
lea esi, [ebp - 0x290]
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 0x2b4], ebx
mov word [ebp - 0x2c4], cx
mov dword [ebp - method.HK::SetACL::SD.virtual_0], vtable.HK::SetACL::SD.0
call fcn.0042eb30
mov esi, 8
cmp dword [ebp - 0x260], esi
jb 0x427589
mov edx, dword [ebp - 0x274]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x274], ax
cmp dword [ebp - 0x14c], esi
jb 0x4275b5
mov ecx, dword [ebp - 0x160]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0x14c], edi
mov dword [ebp - 0x150], ebx
mov word [ebp - 0x160], dx
cmp dword [ebp - 0xc0], esi
jb 0x4275e1
mov eax, dword [ebp - 0xd4]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xc4], ebx
mov word [ebp - 0xd4], cx
cmp dword [ebp - 0xdc], esi
jb 0x42760d
mov edx, dword [ebp - 0xf0]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe0], ebx
mov word [ebp - 0xf0], ax
cmp dword [ebp - 0x34], esi
jb 0x427633
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], dx
cmp dword [ebp - 0x130], esi
jb 0x427656
mov eax, dword [ebp - 0x144]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x134], ebx
mov word [ebp - 0x144], cx
cmp dword [ebp - 0x88], esi
jb 0x427682
mov edx, dword [ebp - 0x9c]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov word [ebp - 0x9c], ax
cmp dword [ebp - 0xf8], esi
jb 0x4276ae
mov ecx, dword [ebp - 0x10c]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0xfc], ebx
mov word [ebp - 0x10c], dx
cmp dword [ebp + 0x1c], esi
jb 0x4276d4
mov eax, dword [ebp + 8]
push eax
call fcn.0043644d
add esp, 4
mov eax, 0x1a
jmp 0x429553
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push ebx
lea eax, [ebp + 8]
xor edx, edx
push eax
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
or eax, 0xffffffff
mov word [ecx], dx
call fcn.004138c0
mov esi, dword [ebp - 0x2ec]
mov ebx, esi
call fcn.0041f8d0
test al, al
je 0x42798c
lea ecx, [ebp - 0x2c]
push str.Omitting_ACL_of:__
push ecx
lea ebx, [ebp - 0x128]
call fcn.00407830
sub esp, 0x14
mov bl, 0xd
mov byte [ebp - 4], bl
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push eax
mov eax, str.__because_a_filter_keyword_matched.
call fcn.00407910
sub esp, 0x18
mov esi, esp
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x304], esp
xor edx, edx
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], 0
push 6
mov eax, str.ListSD
mov word [esi], dx
call fcn.00413470
push 2
mov ecx, SysReAllocStringLen
mov byte [ebp - 4], bl
call fcn.00419f60
mov ebx, 8
add esp, 0x3c
cmp dword [ebp - 0x18], ebx
jb 0x427797
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0043644d
add esp, 4
cmp dword [ebp - 0x114], ebx
jb 0x4277ae
mov ecx, dword [ebp - 0x128]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
lea esi, [ebp - 0x2e0]
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x118], 0
mov word [ebp - 0x128], dx
mov dword [ebp - method.HK::SetACL::SD.virtual_0], vtable.HK::SetACL::SD.0
call fcn.0042eb30
cmp dword [ebp - 0x2b0], ebx
jb 0x4277f3
mov eax, dword [ebp - 0x2c4]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
lea esi, [ebp - 0x290]
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 0x2b4], 0
mov word [ebp - 0x2c4], cx
mov dword [ebp - method.HK::SetACL::SD.virtual_0], vtable.HK::SetACL::SD.0
call fcn.0042eb30
cmp dword [ebp - 0x260], ebx
jb 0x427838
mov edx, dword [ebp - 0x274]
push edx
call fcn.0043644d
add esp, 4
xor esi, esi
xor eax, eax
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x264], esi
mov word [ebp - 0x274], ax
cmp dword [ebp - 0x14c], ebx
jb 0x427866
mov ecx, dword [ebp - 0x160]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0x14c], edi
mov dword [ebp - 0x150], esi
mov word [ebp - 0x160], dx
cmp dword [ebp - 0xc0], ebx
jb 0x427892
mov eax, dword [ebp - 0xd4]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xc4], esi
mov word [ebp - 0xd4], cx
cmp dword [ebp - 0xdc], ebx
jb 0x4278be
mov edx, dword [ebp - 0xf0]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe0], esi
mov word [ebp - 0xf0], ax
cmp dword [ebp - 0x34], ebx
jb 0x4278e4
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], esi
mov word [ebp - 0x48], dx
cmp dword [ebp - 0x130], ebx
jb 0x427907
mov eax, dword [ebp - 0x144]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x134], esi
mov word [ebp - 0x144], cx
cmp dword [ebp - 0x88], ebx
jb 0x427933
mov edx, dword [ebp - 0x9c]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], esi
mov word [ebp - 0x9c], ax
cmp dword [ebp - 0xf8], ebx
jb 0x42795f
mov ecx, dword [ebp - 0x10c]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0xfc], esi
mov word [ebp - 0x10c], dx
cmp dword [ebp + 0x1c], ebx
jb 0x427985
mov eax, dword [ebp + 8]
push eax
call fcn.0043644d
add esp, 4
xor eax, eax
jmp 0x429553
mov eax, dword [esi + 0x124]
test al, 1
je 0x4279a7
mov ecx, 4
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x2f4], ecx
test al, 2
je 0x4279bc
mov ecx, 8
or dword [ebp - 0x2f0], ecx
or dword [ebp - 0x2f4], ecx
test al, 8
je 0x4279c7
or dword [ebp - 0x2f0], 2
test al, 4
je 0x4279d2
or dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov ebx, dword [ebp - 0x2e4]
mov edx, dword [ebx]
or ecx, 1
push ecx
push edx
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ebp - 0x2fc], esp
push eax
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], 0
lea edx, [ebp + 8]
mov word [ecx], ax
push edx
or eax, 0xffffffff
call fcn.004138c0
lea edi, [ebp - 0x290]
call fcn.0042ecb0
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x2e4], eax
mov dword [esi + 0x40], ecx
test eax, eax
jne 0x4292cc
mov eax, dword [ebp - 0x27c]
test eax, eax
jne 0x427ab2
mov ebx, dword [ebp - 0x2ec]
lea edx, [ebp - 0x2c]
push str.The_object__
add ebx, 0x64
push edx
mov esi, SysReAllocStringLen
call fcn.00407830
sub esp, 0x14
mov bl, 0xf
mov byte [ebp - 4], bl
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push eax
mov eax, str.__has_a_NULL_security_descriptor__granting_full_control_to_everyone__and_is_being_ignored.
call fcn.00407910
sub esp, 0x18
mov eax, str.ListSD
mov ecx, esp
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x304], esp
call fcn.00413560
push 2
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.00419f60
add esp, 0x3c
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
mov dword [ebp - 0x2e4], 0x2c
jmp 0x4292cc
lea ecx, [ebp - 0x310]
push ecx
lea edx, [ebp - 0x2e8]
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorControl]
test eax, eax
jne 0x427ae3
mov dword [ebp - 0x2e4], 0x11
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x40], eax
jmp 0x4292cc
mov ax, word [ebp - 0x2e8]
movzx ecx, ax
test ecx, 0x1000
je 0x427afc
and dword [ebp - 0x2f4], 0xfffffffb
movzx edx, ax
test edx, 0x2000
je 0x427b0e
and dword [ebp - 0x2f4], 0xfffffff7
cmp dword [ebp - 0x2f4], 0
je 0x427bae
mov edi, dword [ebx]
lea eax, [ebp - 0x160]
push eax
sub esp, 0x1c
lea ecx, [ebp + 8]
mov esi, esp
mov dword [ebp - 0x2fc], esp
call fcn.004139c0
mov ecx, edi
call fcn.00414630
add esp, 0x20
test al, al
je 0x427ba7
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebx]
push ecx
push edx
sub esp, 0x1c
lea ecx, [ebp - 0x160]
mov esi, esp
mov dword [ebp - 0x2fc], esp
call fcn.004139c0
lea edi, [ebp - 0x2e0]
call fcn.0042ecb0
mov ecx, dword [ebp - 0x2c8]
mov edi, dword [ebp - 0x2ec]
mov dword [ebp - 0x2e4], eax
mov dword [edi + 0x40], ecx
test eax, eax
jne 0x427b91
cmp dword [ebp - 0x2cc], eax
jne 0x427ba7
lea esi, [ebp - 0x2e0]
call fcn.0042eb30
xor eax, eax
mov dword [ebp - 0x2e4], eax
mov dword [edi + 0x40], eax
mov ax, word [ebp - 0x2e8]
test al, 4
je 0x427c7a
movzx edx, ax
test edx, 0x1000
je 0x427bd7
lea eax, [ebp - 0xf0]
push eax
mov eax, str._protected
call fcn.00407460
mov edi, dword [ebp + 0x24]
jmp 0x427c37
mov edi, dword [ebp + 0x24]
mov ecx, dword [ebp - 0x28c]
mov edx, dword [ebp - 0x2ec]
push edi
push ecx
mov ecx, dword [ebp - 0x284]
push edx
mov edx, dword [ebp - 0x2dc]
call fcn.0042ae60
test al, al
je 0x427c26
lea eax, [ebp - 0xf0]
push eax
mov eax, str._pseudo_protected
call fcn.00407460
lea esi, [ebp - 0x2e0]
call fcn.0042ebf0
mov dword [ebp - 0x2dc], 0
jmp 0x427c37
lea ecx, [ebp - 0xf0]
push ecx
mov eax, str._not_protected
call fcn.00407460
movzx edx, word [ebp - 0x2e8]
test edx, 0x400
je 0x427c60
lea eax, [ebp - 0xf0]
push eax
mov eax, str.auto_inherited_
call fcn.004084e0
mov ax, word [ebp - 0x2e8]
jmp 0x427c7d
lea ecx, [ebp - 0xf0]
push ecx
mov eax, 0x45792c
call fcn.004084e0
mov ax, word [ebp - 0x2e8]
jmp 0x427c7d
mov edi, dword [ebp + 0x24]
test al, 0x10
je 0x427d29
movzx edx, ax
test edx, 0x2000
je 0x427c9e
lea eax, [ebp - 0xd4]
push eax
mov eax, str._protected
jmp 0x427cf6
mov ecx, dword [ebp - 0x288]
mov edx, dword [ebp - 0x2ec]
push edi
push ecx
mov ecx, dword [ebp - 0x284]
push edx
mov edx, dword [ebp - 0x2d8]
call fcn.0042ae60
test al, al
je 0x427cea
lea eax, [ebp - 0xd4]
push eax
mov eax, str._pseudo_protected
call fcn.00407460
lea esi, [ebp - 0x2e0]
call fcn.0042ec20
mov dword [ebp - 0x2d8], 0
jmp 0x427cfb
lea ecx, [ebp - 0xd4]
push ecx
mov eax, str._not_protected
call fcn.00407460
movzx edx, word [ebp - 0x2e8]
test edx, 0x800
je 0x427d18
lea eax, [ebp - 0xd4]
push eax
mov eax, str.auto_inherited_
jmp 0x427d24
lea ecx, [ebp - 0xd4]
push ecx
mov eax, 0x45792c
call fcn.004084e0
mov esi, dword [ebp - 0x2ec]
mov eax, dword [esi + 0x120]
test eax, eax
jne 0x428050
mov ebx, dword [ebp - 0x2f0]
cmp byte [esi + 0x12c], al
jne 0x427e31
test bl, 4
je 0x427dc0
push 1
push 1
lea ecx, [ebp - 0x290]
call fcn.004308b0
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x4292cc
mov eax, dword [ebp - 0x2dc]
lea edx, [ebp - 0x30c]
push edx
push eax
push edi
mov ecx, 1
lea edx, [ebp - 0x290]
call fcn.00430760
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x4292cc
cmp dword [ebp - 0x2dc], eax
je 0x427dc0
cmp dword [ebp - 0x30c], eax
jne 0x427dc0
movzx ecx, word [ebp - 0x2e8]
test ecx, 0x1000
jne 0x427dc0
and ebx, 0xfffffffb
test bl, 8
je 0x427e31
push 1
push 2
lea ecx, [ebp - 0x290]
call fcn.004308b0
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x4292cc
mov eax, dword [ebp - 0x2d8]
lea edx, [ebp - 0x300]
push edx
push eax
push edi
mov ecx, 2
lea edx, [ebp - 0x290]
call fcn.00430760
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x4292cc
cmp dword [ebp - 0x2dc], eax
je 0x427e31
cmp dword [ebp - 0x300], eax
jne 0x427e31
movzx ecx, word [ebp - 0x2e8]
test ecx, 0x2000
jne 0x427e31
and ebx, 0xfffffff7
mov eax, dword [ebp - 0x27c]
push 0
lea edx, [ebp - 0x308]
push edx
push ebx
push 1
push eax
call dword [sym.imp.ADVAPI32.dll_ConvertSecurityDescriptorToStringSecurityDescriptorW]
test eax, eax
jne 0x427e66
mov dword [ebp - 0x2e4], 0x1b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x40], eax
jmp 0x4292cc
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x10c]
push ecx
call fcn.00407460
cmp dword [ebp - 0xfc], 0
je 0x42919d
lea edx, [ebp - 0x198]
push 0x45a1c4
push edx
lea ebx, [ebp - 0x10c]
call fcn.00407830
push eax
mov eax, 0x45a1c4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.00407910
add esp, 0xc
mov edi, eax
mov esi, ebx
mov byte [ebp - 4], 0x12
call fcn.00407630
lea esi, [ebp - 0x2c]
call fcn.0041c1b0
lea esi, [ebp - 0x198]
call fcn.0041c1b0
lea edi, [ebp - 0x300]
call fcn.00413ac0
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call 0x42bdf0
add esp, 4
mov ecx, edi
mov bl, al
mov byte [ebp - 4], 0xa
call fcn.00413a40
test bl, bl
je 0x427f9d
push 0x455f90
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0xb8]
push eax
call fcn.00408320
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x144]
lea ebx, [ebp - 0x17c]
mov byte [ebp - 4], 0x14
call fcn.004082e0
push eax
mov eax, 0x455f90
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x15
call fcn.00407910
add esp, 4
mov ecx, eax
lea eax, [ebp - 0x10c]
lea ebx, [ebp - 0x198]
mov byte [ebp - 4], 0x16
call fcn.004082e0
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x17
call fcn.00407630
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0x2c]
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x42919d
lea ecx, [ebp - 0x80]
push 0x45a1c4
push ecx
lea ebx, [ebp + 8]
call fcn.00407830
push eax
mov eax, 0x459798
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00407910
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x144]
lea ebx, [ebp - 0x198]
mov byte [ebp - 4], 0x19
call fcn.004082e0
push eax
mov eax, 0x455f90
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x1a
call fcn.00407910
add esp, 4
mov ecx, eax
lea eax, [ebp - 0x10c]
lea ebx, [ebp - 0xb8]
mov byte [ebp - 4], 0x1b
call fcn.004082e0
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x1c
call fcn.00407630
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
call fcn.0041c1b0
lea esi, [ebp - 0x198]
call fcn.0041c1b0
lea esi, [ebp - 0x2c]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x42919d
cmp eax, 1
jne 0x42897a
lea edi, [ebp - 0x300]
call fcn.00413ac0
lea edx, [ebp + 8]
push edx
mov ecx, eax
mov byte [ebp - 4], 0x1d
call 0x42bdf0
add esp, 4
mov ecx, edi
mov bl, al
mov byte [ebp - 4], 0xa
call fcn.00413a40
test bl, bl
je 0x4280f6
push 0x455f90
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x17c]
push ecx
call fcn.00408320
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x144]
lea ebx, [ebp - 0xb8]
mov byte [ebp - 4], 0x1e
call fcn.004082e0
push eax
mov eax, 0x455f90
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x1f
call fcn.00407910
add esp, 4
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x20
call fcn.00407630
lea esi, [ebp - 0x80]
call fcn.0041c1b0
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
jmp 0x42817f
lea edx, [ebp - 0x198]
push 0x45a1c4
push edx
lea ebx, [ebp + 8]
call fcn.00407830
push eax
mov eax, 0x459798
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x21
call fcn.00407910
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x144]
lea ebx, [ebp - 0xb8]
mov byte [ebp - 4], 0x22
call fcn.004082e0
push eax
mov eax, 0x455f90
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x23
call fcn.00407910
add esp, 4
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x24
call fcn.00407630
lea esi, [ebp - 0x80]
call fcn.0041c1b0
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
call fcn.0041c1b0
lea esi, [ebp - 0x198]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
mov edi, dword [ebp - 0x2ec]
test byte [edi + 0x124], 1
je 0x4283e6
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x42838c
mov edx, dword [ebp + 0x24]
lea ecx, [ebp - 0x2f8]
push ecx
push edx
mov edx, dword [ebp - 0x2dc]
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.00429ae0
mov byte [ebp - 4], 0x25
mov edx, dword [edi + 0x40]
test edx, edx
je 0x4282b7
lea ecx, [ebp - 0x64]
call fcn.00419240
mov esi, eax
lea eax, [ebp - 0x198]
push str.DACL
push eax
lea ebx, [ebp - 0xf0]
mov byte [ebp - 4], 0x26
call fcn.00407830
push eax
mov eax, 0x45a1c8
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x27
call fcn.00407910
add esp, 0xc
mov ecx, eax
mov eax, esi
lea ebx, [ebp - 0xb8]
mov byte [ebp - 4], 0x28
call fcn.004190d0
push eax
mov eax, 0x457930
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x29
call fcn.00407910
add esp, 4
mov edi, eax
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x2a
call fcn.00407630
lea esi, [ebp - 0x80]
call fcn.0041c1b0
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
call fcn.0041c1b0
lea esi, [ebp - 0x198]
call fcn.0041c1b0
lea esi, [ebp - 0x64]
call fcn.0041c1b0
mov eax, dword [ebp - 0x2ec]
xor ecx, ecx
cmp byte [eax + 0x44], cl
je 0x42829c
lea esi, [ebp - 0x2c]
mov dword [eax + 0x40], ecx
mov dword [ebp - 0x2e4], ecx
mov edi, eax
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x4283e6
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x2e4], 0x1c
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x4292cc
cmp dword [ebp - 0x2f8], 0
jne 0x42830d
cmp byte [edi + 0x1a1], 0
jne 0x42830d
lea ecx, [ebp - 0x80]
push str.DACL
push ecx
lea ebx, [ebp - 0xf0]
call fcn.00407830
push eax
mov eax, str.:_empty_
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x2b
call fcn.00407910
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x2c
call fcn.00407630
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
jmp 0x428373
cmp dword [ebp - 0x1c], 0
je 0x42837e
lea edx, [ebp - 0xb8]
push str.DACL
push edx
lea ebx, [ebp - 0xf0]
call fcn.00407830
push eax
mov eax, 0x45624c
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x2d
call fcn.00407910
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x2c]
lea ebx, [ebp - 0x64]
mov byte [ebp - 4], 0x2e
call fcn.004082e0
mov edi, eax
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.00407630
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
mov edi, dword [ebp - 0x2ec]
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x4283e6
cmp byte [edi + 0x1a1], 0
jne 0x4283e6
lea eax, [ebp - 0x80]
push str.DACL
push eax
lea ebx, [ebp - 0xf0]
call fcn.00407830
push eax
mov eax, str.:_NULL_
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x30
call fcn.00407910
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x31
call fcn.00407630
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
mov edi, dword [ebp - 0x2ec]
test byte [edi + 0x124], 2
je 0x428633
cmp dword [ebp - 0x38], 0
je 0x428407
lea ecx, [ebp - 0x48]
push ecx
mov eax, 0x455ed0
call fcn.004084e0
mov eax, dword [ebp - 0x288]
test eax, eax
je 0x4285db
mov ecx, dword [ebp + 0x24]
lea edx, [ebp - 0x2f8]
push edx
mov edx, dword [ebp - 0x2d8]
push ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.00429ae0
mov byte [ebp - 4], 0x32
mov edx, dword [edi + 0x40]
test edx, edx
je 0x428502
lea ecx, [ebp - 0x198]
call fcn.00419240
mov esi, eax
lea edx, [ebp - 0x17c]
push str.SACL
push edx
lea ebx, [ebp - 0xd4]
mov byte [ebp - 4], 0x33
call fcn.00407830
push eax
mov eax, 0x45a1c8
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x34
call fcn.00407910
add esp, 0xc
mov ecx, eax
mov eax, esi
lea ebx, [ebp - 0x80]
mov byte [ebp - 4], 0x35
call fcn.004190d0
push eax
mov eax, 0x457930
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x36
call fcn.00407910
add esp, 4
xor ebx, ebx
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x37
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
call fcn.0041c1b0
lea esi, [ebp - 0x198]
call fcn.0041c1b0
cmp byte [edi + 0x44], bl
je 0x42829c
mov dword [edi + 0x40], ebx
mov dword [ebp - 0x2e4], ebx
lea esi, [ebp - 0x2c]
jmp 0x42862a
cmp dword [ebp - 0x2f8], 0
jne 0x428567
cmp byte [edi + 0x1a1], 0
jne 0x428567
lea eax, [ebp - 0x80]
push str.SACL
push eax
lea ebx, [ebp - 0xd4]
call fcn.00407830
push eax
mov eax, str.:_empty_
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x38
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x39
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0x2c]
jmp 0x42862a
cmp dword [ebp - 0x1c], 0
je 0x4285d6
lea ecx, [ebp - 0xb8]
push str.SACL
push ecx
lea ebx, [ebp - 0xd4]
call fcn.00407830
push eax
mov eax, 0x45624c
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x3a
call fcn.00407910
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x2c]
lea ebx, [ebp - 0x64]
mov byte [ebp - 4], 0x3b
call fcn.004082e0
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x3c
call fcn.00408650
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
lea esi, [ebp - 0x2c]
jmp 0x42862a
cmp byte [edi + 0x1a1], 0
jne 0x428633
lea edx, [ebp - 0x80]
push str.SACL
push edx
lea ebx, [ebp - 0xd4]
call fcn.00407830
push eax
mov eax, str.:_NULL_
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3d
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x3e
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
test byte [edi + 0x124], 4
je 0x4287b0
xor ebx, ebx
cmp dword [ebp - 0x38], ebx
je 0x428655
lea eax, [ebp - 0x48]
push eax
mov eax, 0x455ed0
call fcn.004084e0
mov eax, dword [ebp - 0x284]
cmp eax, ebx
je 0x42879a
push eax
lea ecx, [ebp - 0x2c]
push ecx
xor ecx, ecx
mov edx, edi
call fcn.00429580
mov byte [ebp - 4], 0x3f
mov edx, dword [edi + 0x40]
cmp edx, ebx
je 0x428718
cmp byte [edi + 0x1a1], bl
je 0x428694
cmp edx, 0x534
je 0x428718
lea ecx, [ebp - 0xb8]
call fcn.00419240
push eax
mov edx, str.Owner:_error:
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x40
call fcn.00408410
add esp, 4
push eax
mov eax, 0x457930
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x41
call fcn.00407910
add esp, 4
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x42
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
cmp byte [edi + 0x44], bl
je 0x42829c
lea esi, [ebp - 0x2c]
mov dword [edi + 0x40], ebx
mov dword [ebp - 0x2e4], ebx
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x4287b0
cmp dword [ebp - 0x1c], ebx
jne 0x428741
cmp byte [edi + 0x1a1], bl
jne 0x428741
lea edx, [ebp - 0x48]
push edx
mov eax, str.Owner:_empty_
call fcn.004084e0
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x4287b0
mov al, byte [edi + 0x1a1]
cmp al, bl
je 0x428757
cmp al, 1
jne 0x42878c
cmp edx, 0x534
jne 0x42878c
lea eax, [ebp - 0x64]
push str.Owner:
push eax
lea ebx, [ebp - 0x2c]
call fcn.00407830
add esp, 8
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x43
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
mov dword [edi + 0x40], 0
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x4287b0
cmp byte [edi + 0x1a1], bl
jne 0x4287b0
lea ecx, [ebp - 0x48]
push ecx
mov eax, str.Owner:_NULL_
call fcn.004084e0
test byte [edi + 0x124], 8
je 0x42892d
xor ebx, ebx
cmp dword [ebp - 0x38], ebx
je 0x4287d2
lea edx, [ebp - 0x48]
push edx
mov eax, 0x455ed0
call fcn.004084e0
mov eax, dword [ebp - 0x280]
cmp eax, ebx
je 0x428917
push eax
lea eax, [ebp - 0x2c]
push eax
xor ecx, ecx
mov edx, edi
call fcn.00429580
mov byte [ebp - 4], 0x44
mov edx, dword [edi + 0x40]
cmp edx, ebx
je 0x428895
cmp byte [edi + 0x1a1], bl
je 0x428811
cmp edx, 0x534
je 0x428895
lea ecx, [ebp - 0xb8]
call fcn.00419240
push eax
mov edx, str.Group:_error:
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x45
call fcn.00408410
add esp, 4
push eax
mov eax, 0x457930
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x46
call fcn.00407910
add esp, 4
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x47
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
cmp byte [edi + 0x44], bl
je 0x42829c
lea esi, [ebp - 0x2c]
mov dword [edi + 0x40], ebx
mov dword [ebp - 0x2e4], ebx
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x42892d
cmp dword [ebp - 0x1c], ebx
jne 0x4288be
cmp byte [edi + 0x1a1], bl
jne 0x4288be
lea ecx, [ebp - 0x48]
push ecx
mov eax, str.Group:_empty_
call fcn.004084e0
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x42892d
mov al, byte [edi + 0x1a1]
cmp al, bl
je 0x4288d4
cmp al, 1
jne 0x428909
cmp edx, 0x534
jne 0x428909
lea edx, [ebp - 0x64]
push str.Group:
push edx
lea ebx, [ebp - 0x2c]
call fcn.00407830
add esp, 8
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x48
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
mov dword [edi + 0x40], 0
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
jmp 0x42892d
cmp byte [edi + 0x1a1], bl
jne 0x42892d
lea eax, [ebp - 0x48]
push eax
mov eax, str.Group:_NULL_
call fcn.004084e0
cmp dword [ebp - 0x38], 0
je 0x429192
lea ecx, [ebp - 0x80]
push 0x45a1c4
push ecx
lea ebx, [ebp - 0x48]
call fcn.00407830
push eax
mov eax, 0x45a1c4
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x49
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x4a
call fcn.00408650
lea esi, [ebp - 0x64]
jmp 0x42803a
cmp eax, 2
jne 0x42919d
push 0x456edc
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.00408320
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x4b
call fcn.00407630
mov bl, 0xa
lea esi, [ebp - 0x64]
mov byte [ebp - 4], bl
call fcn.0041c1b0
lea eax, [ebp - 0x48]
call fcn.00414940
mov edi, dword [ebp - 0x2ec]
test byte [edi + 0x124], 4
je 0x428b69
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x428b52
push eax
lea ecx, [ebp - 0x2c]
push ecx
xor ecx, ecx
mov edx, edi
call fcn.00429580
mov byte [ebp - 4], 0x4c
mov edx, dword [edi + 0x40]
test edx, edx
je 0x428ab1
cmp byte [edi + 0x1a1], 0
je 0x428a14
cmp edx, 0x534
je 0x428ab1
lea ecx, [ebp - 0xb8]
call fcn.00419240
push eax
mov edx, str._n___Owner:__error:
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x4d
call fcn.00408410
add esp, 4
push eax
mov eax, 0x45a2e0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x4e
call fcn.00407910
add esp, 4
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x4f
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
cmp byte [edi + 0x44], 0
je 0x428a97
xor eax, eax
lea esi, [ebp - 0x2c]
mov dword [edi + 0x40], eax
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428b69
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x2e4], 0x1c
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x4292cc
cmp dword [ebp - 0x1c], 0
jne 0x428ade
cmp byte [edi + 0x1a1], 0
jne 0x428ade
lea edx, [ebp - 0x48]
push edx
mov eax, str._n___Owner:__empty__n
call fcn.004084e0
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428b69
mov al, byte [edi + 0x1a1]
test al, al
je 0x428af4
cmp al, 1
jne 0x428b45
cmp edx, 0x534
jne 0x428b45
lea eax, [ebp - 0x80]
push str._n___Owner:
push eax
lea ebx, [ebp - 0x2c]
call fcn.00407830
push eax
mov eax, 0x456edc
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x50
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x51
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
mov dword [edi + 0x40], 0
mov bl, 0xa
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428b69
cmp byte [edi + 0x1a1], 0
jne 0x428b69
lea ecx, [ebp - 0x48]
push ecx
mov eax, str._n___Owner:__NULL__n
call fcn.004084e0
test byte [edi + 0x124], 8
je 0x428cf5
mov eax, dword [ebp - 0x280]
test eax, eax
je 0x428cde
push eax
lea edx, [ebp - 0x2c]
push edx
xor ecx, ecx
mov edx, edi
call fcn.00429580
mov byte [ebp - 4], 0x52
mov edx, dword [edi + 0x40]
test edx, edx
je 0x428c3d
cmp byte [edi + 0x1a1], 0
je 0x428bb6
cmp edx, 0x534
je 0x428c3d
lea ecx, [ebp - 0xb8]
call fcn.00419240
push eax
mov edx, str._n___Group:__error:
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x53
call fcn.00408410
add esp, 4
push eax
mov eax, 0x45a2e0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x54
call fcn.00407910
add esp, 4
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x55
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
cmp byte [edi + 0x44], 0
je 0x428a97
xor eax, eax
lea esi, [ebp - 0x2c]
mov dword [edi + 0x40], eax
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428cf5
cmp dword [ebp - 0x1c], 0
jne 0x428c6a
cmp byte [edi + 0x1a1], 0
jne 0x428c6a
lea eax, [ebp - 0x48]
push eax
mov eax, str._n___Group:__empty__n
call fcn.004084e0
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428cf5
mov al, byte [edi + 0x1a1]
test al, al
je 0x428c80
cmp al, 1
jne 0x428cd1
cmp edx, 0x534
jne 0x428cd1
lea ecx, [ebp - 0x80]
push str._n___Group:
push ecx
lea ebx, [ebp - 0x2c]
call fcn.00407830
push eax
mov eax, 0x456edc
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x56
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x57
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
mov dword [edi + 0x40], 0
mov bl, 0xa
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428cf5
cmp byte [edi + 0x1a1], 0
jne 0x428cf5
lea edx, [ebp - 0x48]
push edx
mov eax, str._n___Group:__NULL__n
call fcn.004084e0
test byte [edi + 0x124], 1
je 0x428f35
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x428edb
mov edx, dword [ebp + 0x24]
lea ecx, [ebp - 0x2f8]
push ecx
push edx
mov edx, dword [ebp - 0x2dc]
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.00429ae0
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x58
call fcn.0042be30
lea ecx, [ebp - 0x2c]
add esp, 4
push ecx
call fcn.0042be80
mov edx, dword [edi + 0x40]
add esp, 4
test edx, edx
je 0x428dd9
lea ecx, [ebp - 0xb8]
call fcn.00419240
push eax
mov edx, str._n___DACL:__error:
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x59
call fcn.00408410
add esp, 4
push eax
mov eax, 0x45a2e0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
call fcn.00407910
add esp, 4
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x5b
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
cmp byte [edi + 0x44], 0
je 0x428a97
xor eax, eax
lea esi, [ebp - 0x2c]
mov dword [edi + 0x40], eax
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428f35
cmp dword [ebp - 0x2f8], 0
jne 0x428e36
cmp byte [edi + 0x1a1], 0
jne 0x428e36
lea edx, [ebp - 0x80]
push str._n___DACL
push edx
lea ebx, [ebp - 0xf0]
call fcn.00407830
push eax
mov eax, str.:_n____empty__n
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x5d
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
jmp 0x428ec7
cmp dword [ebp - 0x1c], 0
je 0x428ece
lea eax, [ebp - 0x17c]
push str._n___DACL
push eax
lea ebx, [ebp - 0xf0]
call fcn.00407830
push eax
mov eax, str.:_n
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x5e
call fcn.00407910
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x2c]
lea ebx, [ebp - 0x80]
mov byte [ebp - 4], 0x5f
call fcn.004082e0
push eax
mov eax, 0x456edc
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x60
call fcn.00407910
add esp, 4
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x61
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
call fcn.0041c1b0
mov bl, 0xa
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0041c1b0
jmp 0x428f35
cmp byte [edi + 0x1a1], 0
jne 0x428f35
lea ecx, [ebp - 0x80]
push str._n___DACL
push ecx
lea ebx, [ebp - 0xf0]
call fcn.00407830
push eax
mov eax, str.:_n____NULL__n
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x62
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x63
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 0xa
call fcn.0041c1b0
mov bl, 0xa
test byte [edi + 0x124], 2
je 0x429176
mov eax, dword [ebp - 0x288]
test eax, eax
je 0x42911e
mov ecx, dword [ebp + 0x24]
lea edx, [ebp - 0x2f8]
push edx
mov edx, dword [ebp - 0x2d8]
push ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.00429ae0
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 0x64
call fcn.0042be30
lea eax, [ebp - 0x2c]
add esp, 4
push eax
call fcn.0042be80
mov edx, dword [edi + 0x40]
add esp, 4
test edx, edx
je 0x429014
lea ecx, [ebp - 0xb8]
call fcn.00419240
push eax
mov edx, str._n___SACL:__error:
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x65
call fcn.00408410
add esp, 4
push eax
mov eax, 0x45a2e0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x66
call fcn.00407910
add esp, 4
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x67
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
cmp byte [edi + 0x44], 0
je 0x428a97
xor eax, eax
mov dword [edi + 0x40], eax
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], bl
lea esi, [ebp - 0x2c]
jmp 0x429171
cmp dword [ebp - 0x2f8], 0
jne 0x42907e
cmp byte [edi + 0x1a1], 0
jne 0x42907e
lea ecx, [ebp - 0x80]
push str._n___SACL
push ecx
lea ebx, [ebp - 0xd4]
call fcn.00407830
push eax
mov eax, str.:_n____empty__n
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x68
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x69
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
mov bl, 0xa
mov byte [ebp - 4], bl
lea esi, [ebp - 0x2c]
jmp 0x429171
cmp dword [ebp - 0x1c], 0
je 0x429116
lea edx, [ebp - 0x17c]
push str._n___SACL
push edx
lea ebx, [ebp - 0xd4]
call fcn.00407830
push eax
mov eax, str.:_n
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x6a
call fcn.00407910
add esp, 0xc
mov ecx, eax
lea eax, [ebp - 0x2c]
lea ebx, [ebp - 0x80]
mov byte [ebp - 4], 0x6b
call fcn.004082e0
push eax
mov eax, 0x456edc
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x6c
call fcn.00407910
add esp, 4
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x6d
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
mov esi, ebx
call fcn.0041c1b0
lea esi, [ebp - 0xb8]
call fcn.0041c1b0
lea esi, [ebp - 0x17c]
call fcn.0041c1b0
mov bl, 0xa
mov byte [ebp - 4], bl
lea esi, [ebp - 0x2c]
jmp 0x429171
cmp byte [edi + 0x1a1], 0
jne 0x429176
lea eax, [ebp - 0x80]
push str._n___SACL
push eax
lea ebx, [ebp - 0xd4]
call fcn.00407830
push eax
mov eax, str.:_n____NULL__n
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x6e
call fcn.00407910
add esp, 0xc
push 0
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x6f
call fcn.00408650
lea esi, [ebp - 0x64]
call fcn.0041c1b0
mov byte [ebp - 4], 0xa
lea esi, [ebp - 0x80]
call fcn.0041c1b0
cmp dword [ebp - 0x38], 0
je 0x429192
push 0
lea ecx, [ebp - 0x48]
push ecx
or eax, 0xffffffff
lea esi, [ebp - 0x9c]
call fcn.00408650
jmp 0x42919d
lea eax, [ebp - 0x9c]
call fcn.00414940
mov ecx, dword [ebp - 0x304]
push 0
lea edx, [ebp - 0x9c]
push edx
or eax, 0xffffffff
call fcn.004138c0
cmp dword [ebp - 0x8c], 0
je 0x4292cc
mov eax, dword [ebp - 0x2ec]
cmp dword [eax + 0x134], 0
je 0x429288
mov eax, dword [eax + 0x134]
test eax, eax
je 0x42920b
cmp dword [ebp - 0x88], 8
mov ecx, dword [ebp - 0x9c]
jae 0x4291f3
lea ecx, [ebp - 0x9c]
push ecx
push 0x457ec0
push eax
call fcn.00449d6c
add esp, 0xc
test eax, eax
setns al
test al, al
jne 0x429288
lea esi, [ebp - 0x128]
call fcn.0041c1b0
lea ecx, [ebp - 0x2e0]
call fcn.0042eaf0
lea ecx, [ebp - 0x290]
call fcn.0042eaf0
lea esi, [ebp - 0x160]
call fcn.0041c1b0
lea esi, [ebp - 0xd4]
call fcn.0041c1b0
lea esi, [ebp - 0xf0]
call fcn.0041c1b0
lea esi, [ebp - 0x48]
call fcn.0041c1b0
lea esi, [ebp - 0x144]
call fcn.0041c1b0
lea esi, [ebp - 0x9c]
call fcn.0041c1b0
lea esi, [ebp - 0x10c]
call fcn.0041c1b0
lea esi, [ebp + 8]
call fcn.0041c1b0
mov eax, 0x24
jmp 0x429553
sub esp, 0x1c
lea ecx, [ebp - 0x9c]
mov esi, esp
mov edi, SysReAllocStringLen
mov dword [ebp - 0x2fc], esp
call fcn.004139c0
sub esp, 0x1c
mov eax, str.ListSD
mov ecx, esp
mov byte [ebp - 4], 0x70
mov dword [ebp - 0x304], esp
call fcn.00413560
push 2
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.00419f60
add esp, 0x3c
mov eax, dword [ebp - 0x2ec]
mov edx, dword [eax + 0x40]
test edx, edx
je 0x429390
lea ecx, [ebp - 0x80]
mov esi, SysReAllocStringLen
call fcn.00419240
mov edi, eax
lea ecx, [ebp - 0x64]
push str.Parsing_the_SD_of__
push ecx
lea ebx, [ebp - 0x128]
mov byte [ebp - 4], 0x71
call fcn.00407830
push eax
mov eax, str.__failed_with:
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x72
call fcn.00407910
mov ecx, eax
sub esp, 0x10
mov byte [ebp - 4], 0x73
mov eax, edi
mov ebx, esp
mov dword [ebp - 0x2fc], esp
call fcn.004190d0
sub esp, 0x1c
mov eax, str.ListSD
mov ecx, esp
mov byte [ebp - 4], 0x74
mov dword [ebp - 0x304], esp
call fcn.00413560
push 4
mov ecx, esi
mov byte [ebp - 4], 0x73
call fcn.00419f60
add esp, 0x3c
cmp dword [ebp - 0x18], 8
jb 0x429369
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov edi, 7
lea esi, [ebp - 0x64]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call fcn.0041c1b0
lea esi, [ebp - 0x80]
call fcn.0041c1b0
jmp 0x429395
mov edi, 7
mov eax, dword [ebp - 0x2ec]
cmp byte [eax + 0x44], 0
jne 0x4293aa
cmp dword [ebp - 0x2e4], 0x2c
jne 0x4293b7
xor esi, esi
mov dword [eax + 0x40], esi
mov dword [ebp - 0x2e4], esi
jmp 0x4293b9
xor esi, esi
mov eax, dword [ebp - 0x308]
cmp eax, esi
je 0x4293d0
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x308], esi
mov ebx, 8
cmp dword [ebp - 0x114], ebx
jb 0x4293ec
mov ecx, dword [ebp - 0x128]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x118], esi
mov word [ebp - 0x128], dx
call fcn.0042eaf0
lea ecx, [ebp - 0x290]
call fcn.0042eaf0
cmp dword [ebp - 0x14c], ebx
jb 0x42942e
mov eax, dword [ebp - 0x160]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x14c], edi
mov dword [ebp - 0x150], esi
mov word [ebp - 0x160], cx
cmp dword [ebp - 0xc0], ebx
jb 0x42945a
mov edx, dword [ebp - 0xd4]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xc4], esi
mov word [ebp - 0xd4], ax
cmp dword [ebp - 0xdc], ebx
jb 0x429486
mov ecx, dword [ebp - 0xf0]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe0], esi
mov word [ebp - 0xf0], dx
cmp dword [ebp - 0x34], ebx
jb 0x4294ac
mov eax, dword [ebp - 0x48]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], esi
mov word [ebp - 0x48], cx
cmp dword [ebp - 0x130], ebx
jb 0x4294cf
mov edx, dword [ebp - 0x144]
push edx
call fcn.0043644d
add esp, 4
xor eax, eax
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x134], esi
mov word [ebp - 0x144], ax
cmp dword [ebp - 0x88], ebx
jb 0x4294fb
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.0043644d
add esp, 4
xor edx, edx
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], esi
mov word [ebp - 0x9c], dx
cmp dword [ebp - 0xf8], ebx
jb 0x429527
mov eax, dword [ebp - 0x10c]
push eax
call fcn.0043644d
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0xfc], esi
mov word [ebp - 0x10c], cx
cmp dword [ebp + 0x1c], ebx
jb 0x42954d
mov edx, dword [ebp + 8]
push edx
call fcn.0043644d
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00436268
mov esp, ebp
pop ebp
ret 0x20