Function at 0x6e375d
Capabilities:
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x8383cc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x170
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x34], ebx
mov al, byte [esi + 0xf4]
test al, al
je 0x6e3a8f
push 0x20
call fcn.007d7320
mov edi, eax
add esp, 4
mov dword [esp + 0x10], edi
cmp edi, ebx
mov dword [esp + 0x188], ebx
je 0x6e37de
mov dword [edi + 4], 0x877820
mov dword [edi + 0x1c], vtable.IRefCountable.0
mov dword [esp + 0x34], 1
push ebx
push ebx
push ebx
mov ecx, edi
mov byte [esp + 0x194], 1
call fcn.006a2360
mov eax, dword [edi + 4]
mov dword [edi], 0x877810
mov dword [esp + 0x38], edi
mov ecx, dword [eax + 4]
mov dword [ecx + edi + 4], 0x877804
mov edx, dword [edi + 4]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x18]
mov dword [eax + edi], ecx
jmp 0x6e37e2
mov dword [esp + 0x38], ebx
mov ebx, str.The_name_of_the_virtual_account._If_there_is_a_Windows_account_of_the_same_name__it_will_be_shadowed_by_the_virtual_account._It_is_still_possible_to_log_into_a_shadowed_Windows_account_by_fully_qualifying_it_with_a_domain_name__domainuser_or_computeruser_.
or ebp, 0xffffffff
push ebx
mov dword [esp + 0x18c], ebp
call fcn.006d2d30
push ecx
mov edi, eax
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Virtual_account_name
call fcn.0069f610
mov edx, dword [esp + 0x40]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0069fa80
sub esp, 8
mov dword [esp + 0x19c], 2
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x951210
call fcn.0069f610
lea eax, [esi + 0xf8]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x34], esp
push str.virtAccount
call fcn.0069f610
lea ecx, [esp + 0x60]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x194], 4
call fcn.006a2080
mov ecx, eax
call fcn.006a2110
mov ecx, eax
call fcn.006a2150
mov dword [eax + 0x78], edi
mov edi, dword [esp + 0x190]
push eax
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 5
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.The_password_that_will_be_accepted_for_login_into_the_virtual_account.
push ebx
call fcn.006d2d30
add esp, 4
lea ecx, [esi + 0x108]
mov dword [esp + 0x1c], eax
push ecx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.virtPassword
call fcn.0069f610
lea ecx, [esp + 0x4c]
call fcn.006a1f60
mov dword [esp + 0x14], eax
sub esp, 8
mov dword [esp + 0x190], 6
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Virtual_account_password
call fcn.0069f610
mov ecx, dword [esp + 0x1c]
call fcn.006a2110
mov edx, dword [esp + 0x1c]
mov dword [eax + 0x74], ebx
push eax
mov ecx, edi
mov dword [eax + 0x78], edx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 7
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push 0x20
call fcn.007d7320
mov ebx, eax
add esp, 4
mov dword [esp + 0x10], ebx
test ebx, ebx
mov dword [esp + 0x188], 8
je 0x6e39c2
mov eax, dword [esp + 0x34]
mov dword [ebx + 4], 0x877820
or al, 2
mov dword [ebx + 0x1c], vtable.IRefCountable.0
mov dword [esp + 0x34], eax
push 0
push 0
push 0
mov ecx, ebx
mov byte [esp + 0x194], 9
call fcn.006a2360
mov eax, dword [ebx + 4]
mov dword [ebx], 0x877810
mov ecx, dword [eax + 4]
mov dword [ecx + ebx + 4], 0x877804
mov edx, dword [ebx + 4]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x18]
mov dword [eax + ebx], ecx
jmp 0x6e39c4
xor ebx, ebx
push str.The_virtual_group_of_which_this_virtual_account_is_a_member.
mov dword [esp + 0x18c], ebp
call fcn.006d2d30
push ecx
mov dword [esp + 0x24], eax
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Virtual_group
call fcn.0069f610
sub esp, 8
mov ecx, esp
mov dword [esp + 0x20], esp
push str._access.virtGroups.All.group
call fcn.0069f610
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.0069fa80
sub esp, 8
mov dword [esp + 0x1a4], 0xa
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x951210
call fcn.0069f610
lea edx, [esi + 0x1d8]
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.group
call fcn.0069f610
lea ecx, [esp + 0x68]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x19c], 0xc
call fcn.006a2080
mov ecx, eax
call fcn.006f4c60
mov ecx, eax
call fcn.006a2110
mov ecx, str.The_virtual_group_of_which_this_virtual_account_is_a_member.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x20]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov dword [esp + 0x188], 0xd
jmp 0x6e402d
mov edi, str.The_domain_name_of_the_Windows_account._For_local_accounts__leave_this_setting_empty.
push edi
call fcn.006d2d30
push ecx
mov ebx, eax
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x951210
call fcn.0069f610
lea edx, [esi + 0x1b4]
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push str.winDomain
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006f4b10
mov ebp, eax
sub esp, 8
mov dword [esp + 0x190], 0xe
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Windows_account_domain
call fcn.0069f610
mov ecx, ebp
call fcn.006a2110
mov ecx, eax
call fcn.006a2150
mov dword [eax + 0x74], edi
mov edi, dword [esp + 0x190]
push eax
mov ecx, edi
mov dword [eax + 0x78], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0xf
call fcn.0047c820
or ebp, 0xffffffff
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push 0x20
call fcn.007d7320
mov ebx, eax
add esp, 4
mov dword [esp + 0x10], ebx
test ebx, ebx
mov dword [esp + 0x188], 0x10
je 0x6e3bb0
mov dword [ebx + 4], 0x877820
mov dword [ebx + 0x1c], vtable.IRefCountable.0
mov dword [esp + 0x34], 4
push 0
push 0
push 0
mov ecx, ebx
mov byte [esp + 0x194], 0x11
call fcn.006a2360
mov eax, dword [ebx + 4]
mov dword [ebx], 0x877810
mov dword [esp + 0x38], ebx
mov ecx, dword [eax + 4]
mov dword [ecx + ebx + 4], 0x877804
mov edx, dword [ebx + 4]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x18]
mov dword [eax + ebx], ecx
jmp 0x6e3bb8
mov dword [esp + 0x38], 0
mov ebx, str.The_Windows_account_name__without_domain__to_impersonate_when_this_virtual_account_is_logged_in_to.
mov dword [esp + 0x188], ebp
push ebx
call fcn.006d2d30
push ecx
mov dword [esp + 0x24], eax
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Windows_account_name
call fcn.0069f610
mov edx, dword [esp + 0x40]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0069fa80
sub esp, 8
mov dword [esp + 0x19c], 0x12
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x951210
call fcn.0069f610
lea eax, [esi + 0x1c4]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x34], esp
push str.winAccount
call fcn.0069f610
lea ecx, [esp + 0x60]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x194], 0x14
call fcn.006a2080
mov ecx, eax
call fcn.006a2110
mov ecx, eax
call fcn.006a2150
mov ecx, dword [esp + 0x1c]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x15
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.If_enabled__the_user_will_be_treated_as_a_member_of_the_Windows_group_specified_here._As_far_as_WinSSHD_is_concerned__the_user_will_be_treated_as_a_member_of_the_specified_group_even_if_not_actually_its_member._n_nThis_setting_has_effect_only_if_the_specified_group_has_an_entry_in_WinSSHD_Settings___Access_Control___Windows_Groups._n_nIf_disabled__or_if_the_specified_group_does_not_have_a_WinSSHD_group_settings_entry__WinSSHD_will_try_to_find_settings_for_the_users_primary_group_as_specified_in_Active_Directory._Failing_that__WinSSHD_will_use_the_group_settings_entry_for_the_first_group__according_to_priority_order__of_which_the_user_is_a_member.
call fcn.006d2d30
add esp, 4
lea ebx, [esi + 0x1d4]
mov dword [esp + 0x1c], eax
push 0
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x20], esp
push str.specifyGroup
call fcn.0069f610
lea ecx, [esp + 0x50]
call fcn.006a19f0
mov dword [esp + 0x14], eax
sub esp, 8
mov dword [esp + 0x190], 0x16
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Specify_group
call fcn.0069f610
mov ecx, dword [esp + 0x1c]
call fcn.006a2110
mov edx, dword [esp + 0x1c]
mov ecx, str.If_enabled__the_user_will_be_treated_as_a_member_of_the_Windows_group_specified_here._As_far_as_WinSSHD_is_concerned__the_user_will_be_treated_as_a_member_of_the_specified_group_even_if_not_actually_its_member._n_nThis_setting_has_effect_only_if_the_specified_group_has_an_entry_in_WinSSHD_Settings___Access_Control___Windows_Groups._n_nIf_disabled__or_if_the_specified_group_does_not_have_a_WinSSHD_group_settings_entry__WinSSHD_will_try_to_find_settings_for_the_users_primary_group_as_specified_in_Active_Directory._Failing_that__WinSSHD_will_use_the_group_settings_entry_for_the_first_group__according_to_priority_order__of_which_the_user_is_a_member.
mov dword [eax + 0x74], ecx
push eax
mov ecx, edi
mov dword [eax + 0x78], edx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x17
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.See_Specify_group_help_text.
mov byte [esp + 0x26], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x24], eax
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Group_type
call fcn.0069f610
lea eax, [esp + 0x2a]
push 0
lea ecx, [esp + 0x4b]
push eax
lea edx, [esp + 0x3e]
push ecx
push edx
call fcn.00749ee0
add esp, 0xc
push eax
push ebx
call fcn.00749f00
add esp, 8
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00404320
mov dword [esp + 0x194], 0x18
lea ebx, [esi + 0x1d5]
call fcn.006f4580
push eax
push 0
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x34], esp
push str.groupType
call fcn.0069f610
lea ecx, [esp + 0x60]
call fcn.006a1d90
mov ecx, eax
mov byte [esp + 0x194], 0x1a
call fcn.006f4bd0
mov ecx, eax
call fcn.006a2110
mov ecx, str.See_Specify_group_help_text.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x20]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x1b
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push 0x20
call fcn.007d7320
mov ebx, eax
add esp, 4
mov dword [esp + 0x30], ebx
test ebx, ebx
mov dword [esp + 0x188], 0x1c
je 0x6e3ef5
push 0x20
call fcn.007d7320
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
je 0x6e3ea0
mov edx, dword [esp + 0x34]
mov ecx, eax
or edx, 8
mov dword [ecx + 4], 0x877820
mov dword [ecx + 0x1c], vtable.IRefCountable.0
mov dword [esp + 0x34], edx
push 0
push 0
push 0
mov byte [esp + 0x194], 0x1e
call fcn.006a2360
mov eax, dword [esp + 0x14]
mov dword [esp + 0x188], 0x1d
mov edx, dword [eax + 4]
mov dword [eax], 0x877810
mov ecx, dword [edx + 4]
mov dword [ecx + eax + 4], 0x877804
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
lea edx, [ecx - 0x18]
mov dword [ecx + eax], edx
jmp 0x6e3ea2
xor eax, eax
mov edx, dword [esp + 0x34]
mov dword [ebx + 4], 0x877844
or edx, 0x10
mov dword [ebx + 0x1c], vtable.IRefCountable.0
mov dword [esp + 0x34], edx
push 0
push 0
push eax
mov ecx, ebx
mov byte [esp + 0x194], 0x1f
call fcn.006a2360
mov eax, dword [ebx + 4]
mov dword [ebx], 0x877834
mov dword [esp + 0x14], ebx
mov ecx, dword [eax + 4]
mov dword [ecx + ebx + 4], 0x877828
mov edx, dword [ebx + 4]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x18]
mov dword [eax + ebx], ecx
jmp 0x6e3efd
mov dword [esp + 0x14], 0
mov ebx, str.Group_name__without_domain._Domain_name_is_implicit___the_domain_that_this_account_is_member_of__if_any._n_nSee_also_Specify_group_help_text.
mov dword [esp + 0x188], ebp
push ebx
mov byte [esp + 0x26], 0
mov dword [esp + 0x14], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x38], esp
push str.Group_name
call fcn.0069f610
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.0069fa80
lea eax, [esp + 0x2e]
push 0
lea ecx, [esp + 0x4f]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
mov dword [esp + 0x1a4], 0x20
call fcn.00749ee0
add esp, 0xc
push eax
lea eax, [esi + 0x1d4]
push eax
call fcn.00749f00
add esp, 0xc
lea ecx, [esp + 0x3a]
lea edx, [esp + 0xe8]
push eax
lea eax, [esp + 0x20]
push eax
push ecx
push edx
call fcn.00749990
add esp, 0xc
push eax
lea eax, [esi + 0x1d5]
push eax
call fcn.007499b0
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00404320
sub esp, 8
mov byte [esp + 0x1a0], 0x21
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x951210
call fcn.0069f610
lea eax, [esi + 0x1d8]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.group
call fcn.0069f610
lea ecx, [esp + 0x64]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x198], 0x23
call fcn.006f4bd0
mov ecx, eax
mov byte [esp + 0x194], 0x24
call fcn.006a2080
mov ecx, eax
call fcn.006a2110
mov ecx, dword [esp + 0x28]
mov dword [eax + 0x74], ebx
mov dword [eax + 0x78], ecx
push eax
mov ecx, edi
call fcn.00682b30
mov dword [esp + 0x188], 0x25
lea ecx, [esp + 0xa0]
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ecx, edi
call fcn.00682e20
mov al, byte [esi + 0xf4]
test al, al
je 0x6e43fb
push str.A_Windows_account_is_needed_to_provide_security_context_when_a_virtual_account_user_logs_in._This_setting_determines_whether_to_use_the_account_configured_in_group_settings_or_the_one_specified_here.
call fcn.006d2d30
add esp, 4
lea ebx, [esi + 0x1b0]
mov dword [esp + 0x28], eax
push 1
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push str.useDefaultWinAccount
call fcn.0069f610
lea ecx, [esp + 0x50]
call fcn.006a19f0
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x26
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Use_default_Windows_account
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov edx, dword [esp + 0x28]
mov ecx, str.A_Windows_account_is_needed_to_provide_security_context_when_a_virtual_account_user_logs_in._This_setting_determines_whether_to_use_the_account_configured_in_group_settings_or_the_one_specified_here.
mov dword [eax + 0x74], ecx
push eax
mov ecx, edi
mov dword [eax + 0x78], edx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x27
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.The_domain_name_of_the_Windows_account_to_impersonate_when_this_virtual_account_is_logged_in_to._For_local_accounts__leave_this_setting_empty.
mov byte [esp + 0x26], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Windows_account_domain
call fcn.0069f610
lea eax, [esp + 0x2a]
push 0
lea ecx, [esp + 0x3a]
push eax
lea edx, [esp + 0x48]
push ecx
push edx
call fcn.00749ee0
add esp, 0xc
push eax
push ebx
call fcn.00749680
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00404320
sub esp, 8
mov dword [esp + 0x19c], 0x28
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x951210
call fcn.0069f610
lea eax, [esi + 0x1b4]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x50], esp
push str.winDomain
call fcn.0069f610
lea ecx, [esp + 0x60]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x194], 0x2a
call fcn.006f4bd0
mov ecx, eax
call fcn.006a2110
mov ecx, str.The_domain_name_of_the_Windows_account_to_impersonate_when_this_virtual_account_is_logged_in_to._For_local_accounts__leave_this_setting_empty.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x2b
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push 0x20
call fcn.007d7320
mov ebx, eax
add esp, 4
mov dword [esp + 0x18], ebx
test ebx, ebx
mov dword [esp + 0x188], 0x2c
je 0x6e42d7
push 0x20
call fcn.007d7320
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
je 0x6e4282
mov edx, dword [esp + 0x34]
mov ecx, eax
or edx, 0x20
mov dword [ecx + 4], 0x877820
mov dword [ecx + 0x1c], vtable.IRefCountable.0
mov dword [esp + 0x34], edx
push 0
push 0
push 0
mov byte [esp + 0x194], 0x2e
call fcn.006a2360
mov eax, dword [esp + 0x14]
mov dword [esp + 0x188], 0x2d
mov edx, dword [eax + 4]
mov dword [eax], 0x877810
mov ecx, dword [edx + 4]
mov dword [ecx + eax + 4], 0x877804
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
lea edx, [ecx - 0x18]
mov dword [ecx + eax], edx
jmp 0x6e4284
xor eax, eax
mov edx, dword [esp + 0x34]
mov dword [ebx + 4], 0x877844
or edx, 0x40
mov dword [ebx + 0x1c], vtable.IRefCountable.0
mov dword [esp + 0x34], edx
push 0
push 0
push eax
mov ecx, ebx
mov byte [esp + 0x194], 0x2f
call fcn.006a2360
mov eax, dword [ebx + 4]
mov dword [ebx], 0x877834
mov dword [esp + 0x14], ebx
mov ecx, dword [eax + 4]
mov dword [ecx + ebx + 4], 0x877828
mov edx, dword [ebx + 4]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x18]
mov dword [eax + ebx], ecx
jmp 0x6e42df
mov dword [esp + 0x14], 0
mov ebx, str.The_Windows_account_name__without_domain__to_impersonate_when_this_virtual_account_is_logged_in_to._n_nThe_password_for_the_Windows_account_needs_to_be_set_in_the_WinSSHD_password_cache_before_the_virtual_account_can_be_used.
mov dword [esp + 0x188], ebp
push ebx
mov byte [esp + 0x26], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Windows_account_name
call fcn.0069f610
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0069fa80
lea eax, [esp + 0x2e]
push 0
lea ecx, [esp + 0x3e]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
mov dword [esp + 0x1a4], 0x30
call fcn.00749ee0
add esp, 0xc
push eax
lea eax, [esi + 0x1b0]
push eax
call fcn.00749680
add esp, 8
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00404320
sub esp, 8
mov byte [esp + 0x1a0], 0x31
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x951210
call fcn.0069f610
lea eax, [esi + 0x1c4]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x34], esp
push str.winAccount
call fcn.0069f610
lea ecx, [esp + 0x64]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x198], 0x33
call fcn.006f4bd0
mov ecx, eax
mov byte [esp + 0x194], 0x34
call fcn.006a2080
mov ecx, eax
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x35
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_login_is_allowed_for_this_user_by_WinSSHD.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4590
push eax
lea edx, [esi + 0x1e8]
push 0
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.loginAllowed
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x36
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Login_allowed
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x37
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov eax, dword [0x952b6c]
mov dword [esp + 0x14], 0x8522f8
test eax, eax
je 0x6e44b4
mov dword [esp + 0x14], eax
mov ebx, dword [0x952b70]
call fcn.006f4520
push eax
lea edx, [esi + 0x1e9]
push 0
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.logonType
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x38
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Logon_type
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x14]
push eax
mov dword [eax + 0x74], ecx
mov ecx, edi
mov dword [eax + 0x78], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x39
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov eax, dword [0x95667c]
mov dword [esp + 0x14], 0x8522f8
test eax, eax
je 0x6e4561
mov dword [esp + 0x14], eax
mov ebx, dword [0x956680]
call fcn.006f4540
push eax
lea eax, [esi + 0x1ea]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.limitSessions
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x3a
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Limit_concurrent_sessions
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov edx, dword [esp + 0x14]
push eax
mov ecx, edi
mov dword [eax + 0x74], edx
mov dword [eax + 0x78], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x3b
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push 0x28
call fcn.007d7320
mov ebx, eax
add esp, 4
mov dword [esp + 0x18], ebx
test ebx, ebx
mov dword [esp + 0x188], 0x3c
je 0x6e4675
mov eax, dword [esp + 0x34]
mov dword [ebx + 4], 0x87663c
or al, 0x80
mov dword [ebx + 0x24], vtable.IRefCountable.0
mov dword [esp + 0x34], eax
push 0
push 0
push 0
mov ecx, ebx
mov byte [esp + 0x194], 0x3d
call fcn.006a2360
mov eax, dword [ebx + 4]
mov dword [ebx + 0x18], 1
mov dword [ebx + 0x1c], 0x270f
mov dword [ebx], 0x87662c
mov ecx, dword [eax + 4]
mov dword [ecx + ebx + 4], 0x876620
mov edx, dword [ebx + 4]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x20]
mov dword [eax + ebx], ecx
jmp 0x6e4677
xor ebx, ebx
push str.For_members_of_this_group_whose_individual_settings_are_not_defined_differently__the_maximal_number_of_concurrent_SSH_sessions_each_user_can_establish_with_this_server._Note_that_if_this_limit_is_set_to_only_1__the_user_will_not_be_able_to_reconnect_if_broken_session_detection_fails_and_WinSSHD_believes_incorrectly_that_a_previous_session_is_still_in_progress.
mov dword [esp + 0x18c], ebp
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 1
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Maximal_concurrent_sessions
call fcn.0069f610
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.0069fa80
lea edx, [esp + 0x1c]
push 0
lea eax, [esp + 0x3e]
push edx
lea ecx, [esp + 0x4c]
push eax
push ecx
mov dword [esp + 0x1a4], 0x3e
call fcn.00749b00
add esp, 0xc
lea ebx, [esi + 0x1ea]
push eax
push ebx
call fcn.00749b20
add esp, 0xc
lea edx, [esp + 0x20]
lea ecx, [esp + 0x2e]
push eax
lea eax, [esp + 0x4f]
push edx
push eax
push ecx
call fcn.00749b00
add esp, 0xc
push eax
push ebx
call fcn.00749b20
add esp, 8
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00404320
lea edx, [esi + 0x1ec]
push 2
push edx
mov byte [esp + 0x1a0], 0x3f
sub esp, 8
mov ecx, esp
mov dword [esp + 0x54], esp
push str.maxSessions
call fcn.0069f610
lea ecx, [esp + 0x60]
call fcn.006a1af0
mov ecx, eax
mov byte [esp + 0x198], 0x41
call fcn.006f4bd0
mov ecx, eax
mov byte [esp + 0x194], 0x42
call fcn.006a2080
mov ecx, eax
call fcn.006a2110
mov ecx, str.For_members_of_this_group_whose_individual_settings_are_not_defined_differently__the_maximal_number_of_concurrent_SSH_sessions_each_user_can_establish_with_this_server._Note_that_if_this_limit_is_set_to_only_1__the_user_will_not_be_able_to_reconnect_if_broken_session_detection_fails_and_WinSSHD_believes_incorrectly_that_a_previous_session_is_still_in_progress.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov dword [esp + 0x188], 0x43
lea ecx, [esp + 0xa0]
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_password_authentication_is_disabled__allowed__or_required_for_this_user.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4570
push eax
lea edx, [esi + 0x1f0]
push 0
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.passwordAuth
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x44
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Password_authentication
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x45
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_public_key_authentication_is_disabled__allowed__or_required_for_this_user.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4570
push eax
lea edx, [esi + 0x1f1]
push 0
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.publicKeyAuth
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x46
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Public_key_authentication
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov dword [esp + 0x188], 0x47
lea ecx, [esp + 0xa0]
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.If_public_key_authentication_is_permitted__a_list_of_public_keys_that_the_user_can_use_to_log_in._At_least_one_users_public_key_needs_to_be_imported__either_here_or_for_all_members_of_this_group_in_group_settings__in_order_to_use_public_key_authentication.
push ebx
call fcn.006d2d30
add esp, 4
lea edx, [esi + 0x1f4]
mov dword [esp + 0x28], eax
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push str.keys
call fcn.0069f610
lea ecx, [esp + 0x4c]
call fcn.006a1f60
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x48
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Public_keys
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x49
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_remote_WinSSHD_administration_should_be_allowed_for_this_user._Remote_administration_includes_changing_WinSSHDs_settings__regenerating_WinSSHDs_keypair__viewing_or_clearing_WinSSHDs_event_log__etc._To_perform_WinSSHD_remote_administration__the_user_must_have_administrative_privileges_and_must_connect_with_client_software_that_implements_remote_administration._At_the_time_of_release__this_is_Bitvise_SSH_Client__Tunnelier_.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4590
push eax
lea edx, [esi + 0x304]
push 0
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.permitRemoteAdmin
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x4a
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Permit_remote_administration
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
lea ecx, [esp + 0xa0]
mov dword [esp + 0x188], 0x4b
call fcn.0047c820
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov al, byte [esi + 0xf4]
test al, al
mov eax, 0x9565a8
jne 0x6e4a4b
mov eax, 0x95680c
mov edx, dword [eax + 8]
mov eax, dword [eax + 4]
test eax, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 0x8522f8
je 0x6e4a65
mov dword [esp + 0x14], eax
call fcn.006f4590
push eax
lea eax, [esi + 0x305]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.mapRemoteHomeDir
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov ebx, eax
sub esp, 8
mov dword [esp + 0x190], 0x4c
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Map_remote_home_directory
call fcn.0069f610
mov ecx, ebx
call fcn.006a2110
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x74], ecx
push eax
mov ecx, edi
mov dword [eax + 0x78], edx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x4d
test eax, eax
je 0x6e4af4
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov al, byte [esi + 0xf4]
test al, al
mov eax, 0x9567fc
jne 0x6e4b1b
mov eax, 0x9566b8
mov ecx, dword [eax + 8]
mov eax, dword [eax + 4]
test eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0x8522f8
je 0x6e4b35
mov dword [esp + 0x14], eax
call fcn.006f4590
push eax
lea edx, [esi + 0x306]
push 0
push edx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.mapRememberedShares
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov ebx, eax
sub esp, 8
mov dword [esp + 0x190], 0x4e
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Map_remembered_shares
call fcn.0069f610
mov ecx, ebx
call fcn.006a2110
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [eax + 0x74], ecx
push eax
mov ecx, edi
mov dword [eax + 0x78], edx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x4f
test eax, eax
je 0x6e4bc4
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
lea ecx, [esi + 0x308]
test ecx, ecx
je 0x6e4bed
lea edx, [esi + 0x32c]
mov dword [esp + 0x14], edx
jmp 0x6e4bf5
mov dword [esp + 0x14], 0
mov ebx, str.A_list_of_remote_shared_directories_that_should_be_mapped_to_local_drives_for_this_user_on_login.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x14]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push str.shares
call fcn.0069f610
lea ecx, [esp + 0x4c]
call fcn.006a1f60
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x50
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Shares_to_map
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x51
test eax, eax
je 0x6e4c8c
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.If_configured__this_command_will_be_executed_immediately_after_the_user_is_authenticated_and_successfully_logged_in_and_before_any_other_SSH_session_activity_takes_place.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
lea eax, [esi + 0x6ec]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push str.onLogonCmd
call fcn.0069f610
lea ecx, [esp + 0x4c]
call fcn.006a1f60
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x52
mov ecx, esp
mov dword [esp + 0x20], esp
push str.On_logon_command
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x53
test eax, eax
je 0x6e4d38
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.If_configured__this_command_will_be_executed_immediately_after_the_user_disconnects_a_successfully_established_session.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
lea eax, [esi + 0x810]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push str.onLogoffCmd
call fcn.0069f610
lea ecx, [esp + 0x4c]
call fcn.006a1f60
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x54
mov ecx, esp
mov dword [esp + 0x20], esp
push str.On_logoff_command
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x55
test eax, eax
je 0x6e4de4
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_the_user_should_be_allowed_to_execute_programs_in_a_way_that_allows_them_to_continue_running_after_the_SSH_session_itself_has_ended._If_execution_of_such_programs_is_desired__this_option_should_be_enabled_and_the_programs_should_be_executed_using_the_bvRun_utility_supplied_with_WinSSHD__using_the__brj_parameter.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4590
push eax
lea eax, [esi + 0x934]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.allowSessionJobBreakaway
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x56
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Allow_session_job_breakaway
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x57
test eax, eax
je 0x6e4e98
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_the_user_should_be_permitted_access_to_terminal_shell._n_nNOTE:_if_you_deny_terminal_shell_access_for_security_reasons__you_should_normally_also_deny_exec_requests.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4590
push eax
lea eax, [esi + 0x935]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.permitTerminalShell
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x58
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Permit_terminal_shell
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x59
test eax, eax
je 0x6e4f4c
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.Whether_to_use_the_default_terminal_shell_as_configured_in_group_settings__or_the_terminal_shell_specified_here.
call fcn.006d2d30
add esp, 4
lea ebx, [esi + 0x936]
mov dword [esp + 0x28], eax
push 1
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push str.useDefaultTerminalShell
call fcn.0069f610
lea ecx, [esp + 0x50]
call fcn.006a19f0
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x5a
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Use_default_terminal_shell
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, str.Whether_to_use_the_default_terminal_shell_as_configured_in_group_settings__or_the_terminal_shell_specified_here.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x5b
test eax, eax
je 0x6e4ffe
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.What_program_to_use_as_the_terminal_shell._This_program_will_normally_be_a_command_processor__but_any_text_mode_program_can_be_used._Any_environment_strings__e.g.__USERNAME____USERDOMAIN____WINSSHDGROUP____VIRTUSER____VIRTGROUP___will_be_expanded_in_the_logged_on_users_context.
mov byte [esp + 0x26], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Terminal_shell
call fcn.0069f610
push 1
lea eax, [esp + 0x2e]
push 0
lea ecx, [esp + 0x3e]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
call fcn.00749ee0
add esp, 0xc
push eax
push ebx
call fcn.00749680
add esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00404320
sub esp, 8
mov dword [esp + 0x1a0], 0x5c
mov ecx, esp
mov dword [esp + 0x48], esp
push str.cmd.exe
call fcn.0069f610
lea eax, [esi + 0x938]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x54], esp
push str.terminalShell
call fcn.0069f610
lea ecx, [esp + 0x64]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x198], 0x5e
call fcn.006f4bd0
mov ecx, eax
call fcn.006f4c80
mov ecx, eax
call fcn.006a2110
mov ecx, str.What_program_to_use_as_the_terminal_shell._This_program_will_normally_be_a_command_processor__but_any_text_mode_program_can_be_used._Any_environment_strings__e.g.__USERNAME____USERDOMAIN____WINSSHDGROUP____VIRTUSER____VIRTGROUP___will_be_expanded_in_the_logged_on_users_context.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x5f
test eax, eax
je 0x6e5102
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.Whether_to_use_the_default_initial_directory_as_configured_in_group_settings__or_the_initial_directory_specified_here.
call fcn.006d2d30
add esp, 4
lea ebx, [esi + 0x948]
mov dword [esp + 0x28], eax
push 1
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push str.useDefaultInitDir
call fcn.0069f610
lea ecx, [esp + 0x50]
call fcn.006a19f0
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x60
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Use_default_initial_directory
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, str.Whether_to_use_the_default_initial_directory_as_configured_in_group_settings__or_the_initial_directory_specified_here.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x61
test eax, eax
je 0x6e51b4
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.What_initial_directory_to_use_for_terminal_shell__exec_requests_and_SFTP__unless_an_incompatible_SFTP_Root_Directory_setting_is_used_._Any_environment_strings__e.g.__USERNAME____USERDOMAIN____WINSSHDGROUP____VIRTUSER____VIRTGROUP___will_be_expanded_in_the_logged_on_users_context._If_an_empty_string_is_specified__WinSSHD_will_attempt_to_use_the_most_suitable_directory__e.g._the_users_home_directory.
mov byte [esp + 0x26], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Initial_directory
call fcn.0069f610
push 2
lea eax, [esp + 0x2e]
push 0
lea ecx, [esp + 0x3e]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
call fcn.00749ee0
add esp, 0xc
push eax
push ebx
call fcn.00749680
add esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00404320
sub esp, 8
mov dword [esp + 0x1a0], 0x62
mov ecx, esp
mov dword [esp + 0x48], esp
push 0x951210
call fcn.0069f610
lea eax, [esi + 0x94c]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x54], esp
push str.initDir
call fcn.0069f610
lea ecx, [esp + 0x64]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x198], 0x64
call fcn.006f4bd0
mov ecx, eax
call fcn.006f4c80
mov ecx, eax
call fcn.006a2110
mov ecx, str.What_initial_directory_to_use_for_terminal_shell__exec_requests_and_SFTP__unless_an_incompatible_SFTP_Root_Directory_setting_is_used_._Any_environment_strings__e.g.__USERNAME____USERDOMAIN____WINSSHDGROUP____VIRTUSER____VIRTGROUP___will_be_expanded_in_the_logged_on_users_context._If_an_empty_string_is_specified__WinSSHD_will_attempt_to_use_the_most_suitable_directory__e.g._the_users_home_directory.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x65
test eax, eax
je 0x6e52b8
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_exec_requests_should_be_allowed_for_this_user._An_exec_request_is_a_method_of_command_execution_that_is_more_appropriate_for_use_by_automated_clients_than_a_terminal_shell.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4590
push eax
lea eax, [esi + 0x95c]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.permitExecRequests
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x66
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Permit_exec_requests
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x67
test eax, eax
je 0x6e536c
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.Whether_to_use_the_default_exec_request_prefix_as_configured_in_group_settings__or_the_exec_request_prefix_specified_here.
call fcn.006d2d30
add esp, 4
lea ebx, [esi + 0x95d]
mov dword [esp + 0x28], eax
push 1
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push str.useDefaultExecReqPrefix
call fcn.0069f610
lea ecx, [esp + 0x50]
call fcn.006a19f0
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x68
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Use_default_exec_request_prefix
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, str.Whether_to_use_the_default_exec_request_prefix_as_configured_in_group_settings__or_the_exec_request_prefix_specified_here.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x69
test eax, eax
je 0x6e541e
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
push str.What_string_to_prefix_before_a_command_supplied_in_an_exec_request._If_empty__commands_like_dir_will_need_to_be_phrased_fully_as_cmd__c_dir_on_the_client.
mov byte [esp + 0x26], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Exec_request_prefix
call fcn.0069f610
lea eax, [esp + 0x2a]
push 0
lea ecx, [esp + 0x3a]
push eax
lea edx, [esp + 0x48]
push ecx
push edx
call fcn.00749ee0
add esp, 0xc
push eax
push ebx
call fcn.00749680
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00404320
sub esp, 8
mov dword [esp + 0x19c], 0x6a
mov ecx, esp
mov dword [esp + 0x44], esp
push str.cmd.exe__c
call fcn.0069f610
lea eax, [esi + 0x960]
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x50], esp
push str.execReqPrefix
call fcn.0069f610
lea ecx, [esp + 0x60]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x194], 0x6c
call fcn.006f4bd0
mov ecx, eax
call fcn.006a2110
mov ecx, str.What_string_to_prefix_before_a_command_supplied_in_an_exec_request._If_empty__commands_like_dir_will_need_to_be_phrased_fully_as_cmd__c_dir_on_the_client.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x6d
test eax, eax
je 0x6e5519
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
lea ecx, [esp + 0x9c]
mov dword [esp + 0x188], ebp
call fcn.0047c820
mov ebx, str.Whether_SCP_file_transfer_should_be_allowed_for_this_user._Note_that_when_Permit_exec_requests_is_enabled__SCP_is_also_enabled_implicitly.
mov dword [esp + 0x10], 1
push ebx
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Permit_SCP
call fcn.0069f610
lea eax, [esp + 0x18]
push 0
lea ecx, [esp + 0x3a]
push eax
lea edx, [esp + 0x48]
push ecx
push edx
call fcn.00749b00
add esp, 0xc
push eax
lea eax, [esi + 0x95c]
push eax
call fcn.00749b20
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00404320
mov dword [esp + 0x194], 0x6e
call fcn.006f4590
push eax
lea eax, [esi + 0x970]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x50], esp
push str.permitScp
call fcn.0069f610
lea ecx, [esp + 0x60]
call fcn.006a1d90
mov ecx, eax
mov byte [esp + 0x194], 0x70
call fcn.006f4bd0
mov ecx, eax
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x71
test eax, eax
je 0x6e560e
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e5631
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
push str.Whether_SFTP_file_access_should_be_allowed_for_this_user._The_availability_of_SCP_file_transfer_is_unaffected_by_this_setting___that_is_affected_by_Permit_exec_requests.
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
lea ebx, [esi + 0x971]
call fcn.006f4590
push eax
push 0
push ebx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.permitSftp
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x72
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Permit_SFTP
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, str.Whether_SFTP_file_access_should_be_allowed_for_this_user._The_availability_of_SCP_file_transfer_is_unaffected_by_this_setting___that_is_affected_by_Permit_exec_requests.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x73
test eax, eax
je 0x6e56d6
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e56f9
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
push str.Whether_to_use_the_default_SFTP_root_directory_as_configured_in_group_settings__or_the_SFTP_root_directory_specified_here.
mov dword [esp + 0x14], 2
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Use_default_SFTP_root_directory
call fcn.0069f610
lea ecx, [esp + 0x18]
push 0
lea edx, [esp + 0x3a]
push ecx
lea eax, [esp + 0x48]
push edx
push eax
call fcn.00749b00
add esp, 0xc
push eax
push ebx
call fcn.00749b20
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00404320
lea eax, [esi + 0x972]
push 1
push eax
mov dword [esp + 0x19c], 0x74
sub esp, 8
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.useDefaultSftpRootDir
call fcn.0069f610
lea ecx, [esp + 0x5c]
call fcn.006a19f0
mov ecx, eax
mov byte [esp + 0x194], 0x76
call fcn.006f4bd0
mov ecx, eax
call fcn.006a2110
mov ecx, str.Whether_to_use_the_default_SFTP_root_directory_as_configured_in_group_settings__or_the_SFTP_root_directory_specified_here.
push eax
mov dword [eax + 0x74], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x78], ecx
mov ecx, edi
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x77
test eax, eax
je 0x6e57d3
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e57f6
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
push str.The_root_directory_for_this_users_SFTP_file_access._n_nIf_an_SFTP_root_directory_is_set__the_user_will_not_be_able_to_use_SFTP_to_access_files_outside_of_this_directory_and_its_subdirectories._Any_environment_strings__e.g.__USERNAME____USERDOMAIN____WINSSHDGROUP____VIRTUSER____VIRTGROUP___will_be_expanded_in_the_logged_on_users_context._Specify__to_permit_access_to_all_drives._Specify_an_empty_string_to_use_the_initial_home_directory_as_the_SFTP_root_directory._n_nNOTE:_The_restriction_configured_here_ONLY_applies_to_SFTP_file_access._It_does_not_apply_to_SCP__nor_to_terminal_shells__nor_to_exec_requests._If_you_use_this_setting_as_a_security_measure__rather_than_only_as_a_convenience__you_must_also_prevent_access_to_terminal_shell__SCP_and_exec_requests._Otherwise__it_will_be_possible_to_use_those_means_to_access_files_outside_of_the_SFTP_root_directory.
mov dword [esp + 0x14], 2
mov byte [esp + 0x26], 0
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SFTP_root_directory
call fcn.0069f610
push 2
lea ecx, [esp + 0x1c]
push 0
lea edx, [esp + 0x3e]
push ecx
lea eax, [esp + 0x4c]
push edx
push eax
call fcn.00749b00
add esp, 0xc
push eax
push ebx
call fcn.00749b20
add esp, 0xc
lea ecx, [esp + 0x2e]
lea edx, [esp + 0x4b]
push eax
push ecx
lea eax, [esp + 0x48]
push edx
push eax
call fcn.00749ee0
add esp, 0xc
push eax
lea eax, [esi + 0x972]
push eax
call fcn.00749680
add esp, 8
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00404320
sub esp, 8
mov dword [esp + 0x1a0], 0x78
mov ecx, esp
mov dword [esp + 0x48], esp
push 0x91c31c
call fcn.0069f610
lea ecx, [esi + 0x974]
push ecx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x54], esp
push str.sftpRootDir
call fcn.0069f610
lea ecx, [esp + 0x64]
call fcn.006f4b10
mov ecx, eax
mov byte [esp + 0x198], 0x7a
call fcn.006f4bd0
mov ecx, eax
call fcn.006f4c80
mov ecx, eax
call fcn.006a2110
mov edx, dword [esp + 0x28]
mov ecx, str.The_root_directory_for_this_users_SFTP_file_access._n_nIf_an_SFTP_root_directory_is_set__the_user_will_not_be_able_to_use_SFTP_to_access_files_outside_of_this_directory_and_its_subdirectories._Any_environment_strings__e.g.__USERNAME____USERDOMAIN____WINSSHDGROUP____VIRTUSER____VIRTGROUP___will_be_expanded_in_the_logged_on_users_context._Specify__to_permit_access_to_all_drives._Specify_an_empty_string_to_use_the_initial_home_directory_as_the_SFTP_root_directory._n_nNOTE:_The_restriction_configured_here_ONLY_applies_to_SFTP_file_access._It_does_not_apply_to_SCP__nor_to_terminal_shells__nor_to_exec_requests._If_you_use_this_setting_as_a_security_measure__rather_than_only_as_a_convenience__you_must_also_prevent_access_to_terminal_shell__SCP_and_exec_requests._Otherwise__it_will_be_possible_to_use_those_means_to_access_files_outside_of_the_SFTP_root_directory.
mov dword [eax + 0x74], ecx
push eax
mov ecx, edi
mov dword [eax + 0x78], edx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x7b
test eax, eax
je 0x6e5917
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e593a
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
mov ebx, str.Whether_the_user_should_be_allowed_to_initiate_client_2_server_TCP_IP_connection_tunneling__or_port_forwarding_._The_rules_for_C2S_port_forwarding_can_be_further_restricted_via_Connect_rules.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4590
push eax
lea eax, [esi + 0x984]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.permitC2SForwarding
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x7c
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Permit_C2S_port_forwarding
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x7d
test eax, eax
je 0x6e59db
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e59fe
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
mov ebx, str.Whether_the_user_should_be_allowed_to_request_server_2_client_TCP_IP_connection_tunneling__or_port_forwarding_._The_rules_for_S2C_port_forwarding_can_be_further_restricted_via_Listening_rules.
push ebx
call fcn.006d2d30
add esp, 4
mov dword [esp + 0x28], eax
call fcn.006f4590
push eax
lea eax, [esi + 0x985]
push 0
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.permitS2CForwarding
call fcn.0069f610
lea ecx, [esp + 0x54]
call fcn.006a1d90
mov dword [esp + 0x10], eax
sub esp, 8
mov dword [esp + 0x190], 0x7e
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Permit_S2C_port_forwarding
call fcn.0069f610
mov ecx, dword [esp + 0x18]
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x7f
test eax, eax
je 0x6e5a9f
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e5ac2
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
mov ebx, str.For_client_initiated_client_2_server_port_forwarding__these_settings_control_what_target_hosts_can_be_connected_to_and_on_what_ports._Connections_can_also_be_redirected_to_different_servers_and_different_ports__or__by_specifying_a_configured_proxy_profile__through_a_SOCKS_or_an_HTTP_CONNECT_proxy._n_nWinSSHD_will_look_for_a_match_in_account_connect_rules_first._If_no_match_is_found__WinSSHD_will_look_for_a_match_in_group_settings.
mov dword [esp + 0x10], 2
push ebx
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Connect_rules
call fcn.0069f610
lea ecx, [esp + 0x18]
push 0
lea edx, [esp + 0x3a]
push ecx
lea eax, [esp + 0x44]
push edx
push eax
call fcn.00749b00
add esp, 0xc
push eax
lea eax, [esi + 0x984]
push eax
call fcn.00749b20
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00404320
lea ecx, [esi + 0x988]
mov dword [esp + 0x194], 0x80
push ecx
sub esp, 8
mov ecx, esp
mov dword [esp + 0x48], esp
push str.connectRules
call fcn.0069f610
lea ecx, [esp + 0x58]
call fcn.006a1f60
mov ecx, eax
mov byte [esp + 0x194], 0x82
call fcn.006a2030
mov ecx, eax
call fcn.006f4bd0
mov ecx, eax
call fcn.006a2110
mov edx, dword [esp + 0x28]
push eax
mov ecx, edi
mov dword [eax + 0x74], ebx
mov dword [eax + 0x78], edx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x83
test eax, eax
je 0x6e5ba3
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e5bc6
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
lea ecx, [esi + 0x16f8]
mov dword [esp + 0x10], 2
test ecx, ecx
je 0x6e5be4
lea edx, [esi + 0x171c]
mov dword [esp + 0x14], edx
jmp 0x6e5bec
mov dword [esp + 0x14], 0
mov ebx, str.For_client_initiated_server_2_client_port_forwarding__these_settings_control_what_interfaces_and_ports_the_client_can_request_listening_on__as_well_as_what_origin_addresses_connections_will_be_accepted_from._n_nWinSSHD_will_look_for_a_match_in_account_listening_rules_first._If_no_match_is_found__WinSSHD_will_look_for_a_match_in_group_settings.
push ebx
call fcn.006d2d30
push ecx
mov dword [esp + 0x30], eax
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Listening_rules
call fcn.0069f610
lea eax, [esp + 0x18]
push 0
lea ecx, [esp + 0x3a]
push eax
lea edx, [esp + 0x44]
push ecx
push edx
call fcn.00749b00
add esp, 0xc
push eax
lea eax, [esi + 0x985]
push eax
call fcn.00749b20
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00404320
mov eax, dword [esp + 0x20]
mov dword [esp + 0x194], 0x84
push eax
sub esp, 8
mov ecx, esp
mov dword [esp + 0x48], esp
push str.listenRules
call fcn.0069f610
lea ecx, [esp + 0x58]
call fcn.006a1f60
mov ecx, eax
mov byte [esp + 0x194], 0x86
call fcn.006f4bd0
mov ecx, eax
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x188], 0x87
test eax, eax
je 0x6e5cbc
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e5cdf
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
mov ebx, str.A_list_of_port_forwardings_that_shall_be_requested_and_managed_by_the_server_rather_than_by_the_client._This_allows_port_forwarding_rules_to_be_configured_centrally__which_is_valuable_in_environments_where_a_large_number_of_clients_are_managed._n_nAt_the_time_of_this_writing__server_side_forwarding_is_supported_on_the_client_only_by_Bitvise_SSH_Client__Tunnelier__version_4.14_or_higher._n_nWinSSHD_will_establish_first_the_server_side_forwarding_rules_configured_in_account_settings__and_then_also_any_rules_configured_in_group_settings._In_case_of_a_conflict__account_rules_prevail.
push ebx
call fcn.006d2d30
add esp, 4
add esi, 0x2808
mov dword [esp + 0x28], eax
push esi
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push str.srvSideFwding
call fcn.0069f610
lea ecx, [esp + 0xf0]
call fcn.006a1f60
mov esi, eax
sub esp, 8
mov dword [esp + 0x190], 0x88
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Server_side_forwarding
call fcn.0069f610
mov ecx, esi
call fcn.006a2030
mov ecx, eax
call fcn.006a2110
mov ecx, dword [esp + 0x28]
push eax
mov dword [eax + 0x78], ecx
mov ecx, edi
mov dword [eax + 0x74], ebx
call fcn.00682b30
mov eax, dword [esp + 0x144]
mov dword [esp + 0x188], 0x89
test eax, eax
je 0x6e5d7e
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + eax + 4]
lea ecx, [ecx + eax + 4]
call dword [edx + 8]
mov eax, dword [esp + 0x140]
mov dword [esp + 0x188], ebp
test eax, eax
je 0x6e5da1
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ecx, [edx + eax + 4]
mov eax, dword [edx + eax + 4]
call dword [eax + 8]
mov ecx, dword [esp + 0x180]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x17c
ret 4