Function at 0x417c10
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x5a2919
push eax
mov eax, 0xc540
mov dword fs:[0], esp
call fcn.0044d280
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xc564]
xor ebx, ebx
mov esi, ecx
cmp edi, ebx
mov dword [esp + 0x30], esi
je 0x417c4f
mov ecx, edi
call fcn.00477410
jmp 0x417c51
xor eax, eax
push eax
mov eax, dword [esp + 0xc564]
push eax
push str.ParsePolicy_dype_0x_x__Data_size__lu_
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x18
xor ebp, ebp
cmp edi, ebx
je 0x41a4c5
mov ecx, edi
call fcn.00477410
mov ecx, edi
mov dword [esp + 0x28], eax
call fcn.00477b30
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
cmp eax, ebx
mov dword [esp + 0x24], ebx
jbe 0x41a4c5
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
add ecx, 4
cmp ecx, eax
ja 0x41a4a0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
mov edi, dword [eax + edx]
lea ecx, [eax + edx]
mov edx, dword [esp + 0x28]
add edi, 4
add eax, edi
mov dword [esp + 0x20], ecx
cmp eax, edx
mov dword [esp + 0x24], eax
ja 0x41a4a7
cmp dword [ecx + 4], 2
jne 0x41a475
push str.ParsePolicy_parse_1
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
cmp edi, 0x1d
jbe 0x417d1e
add edi, 0xffffffe3
cmp edi, 0x50
mov dword [esp + 0x14], edi
jb 0x417d22
mov eax, dword [esp + 0x20]
add eax, 0x1d
mov dword [esp + 0x1c], eax
jmp 0x417d26
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], ebx
lea ecx, [esi + 4]
push ecx
lea ecx, [esp + 0x14]
call fcn.00464a40
mov edx, dword [esi + 8]
mov eax, dword [esp + 0x10]
push edx
push eax
push 0xaa
push str.ParsePolicy_line__lu__wstrTempFile__s__username__s__parse_2
push str.CheckModule
push 0xf
push 0x6292fc
mov dword [esp + 0xc574], ebx
call fcn.00440080
mov edi, dword [esp + 0xc57c]
add esp, 0x1c
lea eax, [edi - 1]
cmp eax, 0x4f
ja case.0x417d7c.30
xor ecx, ecx
mov cl, byte [eax + 0x41a57c]
jmp dword [ecx*4 + 0x41a504]
push str.ParsePolicy_POLICY_TYPE_SD_ONLINE_AUTH
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x9c88]
call fcn.004b9520
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x9138]
mov byte [esp + 0xc558], 1
call fcn.004b9520
push ebp
push ebx
push ebx
push str.SDRightsPolicy
mov byte [esp + 0xc568], 2
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x9138]
mov byte [esp + 0xc558], 1
call fcn.004b9e30
lea ecx, [esp + 0xa8]
call fcn.0058719b
mov dword [esp + 0xa8], 0x5b8020
mov dword [esp + 0xbc], ebx
mov edx, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 3
mov dword [esp + 0x24], edx
call fcn.0058879e
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, ebx
mov byte [esp + 0xc558], 4
je 0x417e42
mov ecx, eax
call fcn.0041bc10
mov ebp, eax
jmp 0x417e44
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 3
je 0x417e78
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
mov ecx, ebp
call fcn.00420710
mov edx, dword [esp + 0x20]
mov ecx, ebp
push edx
push edi
call fcn.00420830
mov eax, dword [ebp]
push 1
mov ecx, ebp
call dword [eax + 4]
mov ebp, 1
mov dword [esp + 0xa8], 0x5b8020
lea ecx, [esp + 0xa8]
mov byte [esp + 0xc558], 5
call fcn.0041d2b0
lea ecx, [esp + 0xa8]
mov byte [esp + 0xc558], 1
call fcn.005871ce
lea ecx, [esp + 0x9c88]
mov byte [esp + 0xc558], bl
call fcn.004b9e30
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_SD_OFFLINE_AUTH
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
push 0x18
call fcn.0058879e
mov esi, eax
add esp, 0x14
mov dword [esp + 0x18], esi
cmp esi, ebx
mov byte [esp + 0xc558], 6
je 0x417f10
mov ecx, esi
call fcn.0058719b
mov dword [esi], method.CPtrArray.virtual_0
mov dword [esi + 0x14], ebx
mov dword [esp + 0x20], esi
jmp 0x417f14
mov dword [esp + 0x20], ebx
mov edi, dword [esp + 0x1c]
mov byte [esp + 0xc558], bl
cmp edi, ebx
je 0x417ff0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1c], edi
call fcn.0041d2f0
mov eax, dword [esp + 0x14]
cmp eax, 0x50
jb 0x417ff0
mov edx, dword [edi + 0x48]
xor ecx, ecx
mov cx, word [edi + 0x44]
add eax, edi
add ecx, edx
mov dword [esp + 0x14], eax
lea edi, [edi + ecx*2 + 0x54]
cmp edi, eax
ja 0x417ff0
push 0x5c0
call fcn.0058879e
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, ebx
mov byte [esp + 0xc558], 7
je 0x417f86
mov ecx, eax
call fcn.004c39d0
mov esi, eax
jmp 0x417f88
xor esi, esi
mov eax, dword [esp + 0x20]
mov edx, dword [esi]
mov byte [esp + 0xc558], bl
mov ecx, dword [eax + 0x14]
push ecx
mov ecx, esi
call dword [edx + 0x10]
mov eax, dword [esp + 0x1c]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x8c]
test eax, eax
je 0x417fbd
mov ecx, dword [esp + 0x20]
push esi
call fcn.0041a5f0
jmp 0x417fc9
cmp esi, ebx
je 0x417fc9
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], edi
cmp edi, eax
je 0x417ff0
mov ecx, dword [edi + 0x48]
xor eax, eax
mov ax, word [edi + 0x44]
add eax, ecx
lea edi, [edi + eax*2 + 0x54]
mov eax, dword [esp + 0x14]
cmp edi, eax
jbe 0x417f5e
lea ecx, [esp + 0x3c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], ebx
call fcn.0058719b
lea ecx, [esp + 0x64]
mov byte [esp + 0xc558], 8
call fcn.00586db5
mov eax, dword [esp + 0x20]
xor esi, esi
mov byte [esp + 0xc558], 9
cmp dword [eax + 8], ebx
jle 0x418083
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + esi*4]
cmp ecx, ebx
je 0x418073
mov edx, dword [ecx]
call dword [edx + 0x88]
mov edi, eax
lea ecx, [esp + 0x3c]
push edi
call fcn.0041a5f0
mov eax, dword [edi + 0x2ec]
lea ecx, [eax + eax + 0x2f2]
push ecx
lea ecx, [esp + 0x68]
call fcn.0041a5d0
mov edx, dword [edi + 0x2ec]
mov eax, dword [esp + 0x1c]
lea ecx, [eax + edx*2 + 0x2f2]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax + 8]
inc esi
cmp esi, ecx
jl 0x418025
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jne 0x4180ab
lea ecx, [esp + 0x64]
mov byte [esp + 0xc558], 8
call fcn.00586de8
lea ecx, [esp + 0x3c]
mov byte [esp + 0xc558], bl
call fcn.005871ce
xor esi, esi
jmp 0x418179
push eax
call fcn.0058879e
mov esi, eax
add esp, 4
cmp esi, ebx
mov dword [esp + 0x18], esi
jne 0x4180e6
lea ecx, [esp + 0x64]
mov byte [esp + 0xc558], 8
call fcn.00586de8
lea ecx, [esp + 0x3c]
mov byte [esp + 0xc558], bl
call fcn.005871ce
xor esi, esi
jmp 0x418179
mov eax, dword [esp + 0x44]
mov dword [esp + 0x20], esi
cmp eax, ebx
mov dword [esp + 0x14], ebx
jle 0x418150
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov ecx, dword [edx + eax*4]
mov edx, dword [esp + 0x40]
mov esi, dword [edx + eax*4]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x68]
mov edx, dword [ecx + eax*4]
mov ecx, dword [esp + 0x20]
add ecx, edx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + eax*4]
push eax
call fcn.005887c7
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x48]
add esp, 4
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x4180f6
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x64]
mov dword [esp + 0x14], edx
mov byte [esp + 0xc558], 8
call fcn.00586de8
lea ecx, [esp + 0x3c]
mov byte [esp + 0xc558], bl
call fcn.005871ce
lea ecx, [esp + 0x50]
call fcn.00586a6c
mov edi, dword [esp + 0x14]
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x58]
mov byte [esp + 0xc560], 0xa
call fcn.00586acc
mov ecx, edi
mov edi, dword [esp + 0x54]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x34]
call fcn.0041bb90
cmp eax, ebx
je 0x418294
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x54]
push edx
lea ecx, [esp + 0x38]
push eax
push ecx
call fcn.004768f0
add esp, 0xc
lea ecx, [esp + 0xa2a0]
mov byte [esp + 0xc558], 0xb
call fcn.004c39d0
mov edx, dword [0x5be444]
mov dword [esp + 0x2c], edx
push str.SDOfflinePolicy
lea eax, [esp + 0x30]
push str._s_2
push eax
mov byte [esp + 0xc564], 0xd
call fcn.004684d0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x3c]
mov eax, dword [ecx + 8]
mov ecx, dword [esp + 0x44]
push ecx
push eax
push edx
call fcn.0049b040
add esp, 0x1c
mov esi, eax
mov eax, dword [esp + 0x58]
push esi
push eax
push str.ParsePolicy_POLICY_TYPE_SD_OFFLINE_AUTH_size_0x_x__WriteIniString
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x18
cmp esi, ebx
je 0x41825e
mov ebp, 1
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc558], 0xc
call fcn.004654c0
lea ecx, [esp + 0xa2a0]
mov byte [esp + 0xc558], 0xb
call fcn.004c3f70
lea ecx, [esp + 0x34]
mov byte [esp + 0xc558], 0xa
call fcn.004654c0
lea ecx, [esp + 0x50]
mov byte [esp + 0xc558], bl
call fcn.00586a9f
mov esi, dword [esp + 0x30]
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_SD_AGENT_CONFIG
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x3480]
call fcn.004cdea0
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x5cb0]
mov byte [esp + 0xc558], 0xe
call fcn.004cdea0
push ebp
push ebx
push ebx
push str.SDParamPolicy
mov byte [esp + 0xc568], 0xf
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x5cb0]
mov byte [esp + 0xc558], 0xe
call fcn.0041a6a0
lea ecx, [esp + 0x210]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b8008
mov dword [esp + 0x224], ebx
mov ecx, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x10
mov dword [esp + 0x1c], ecx
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x11
je 0x41836c
mov ecx, eax
call fcn.0041bcc0
mov ebp, eax
jmp 0x41836e
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x10
je 0x4183a2
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
push edx
push eax
mov ecx, ebp
call fcn.00420ac0
mov ecx, dword [esp + 0x18]
push ecx
push edi
mov ecx, ebp
call fcn.00420be0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b8008
lea ecx, [esp + 0x210]
mov byte [esp + 0xc558], 0x12
call fcn.0041d330
lea ecx, [esp + 0x210]
mov byte [esp + 0xc558], 0xe
call fcn.005871ce
lea ecx, [esp + 0x37a0]
mov byte [esp + 0xc558], 0x14
call fcn.0046c1e0
lea ecx, [esp + 0x3790]
mov byte [esp + 0xc558], 0x13
call fcn.0046c1e0
lea ecx, [esp + 0x3480]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_AGENT_CONFIG
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x16d8]
call fcn.004a9a20
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x5958]
mov byte [esp + 0xc558], 0x15
call fcn.004a9a20
push ebp
push ebx
push ebx
push str.ConfigPolicy
mov byte [esp + 0xc568], 0x16
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x5958]
mov byte [esp + 0xc558], 0x15
call fcn.0041a700
lea ecx, [esp + 0x168]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7ffc
mov dword [esp + 0x17c], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x17
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x18
je 0x4184d9
mov ecx, eax
call fcn.0041bd70
mov ebp, eax
jmp 0x4184db
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x17
je 0x41850f
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00420ea0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00420fc0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7ffc
lea ecx, [esp + 0x168]
mov byte [esp + 0xc558], 0x19
call fcn.0041d370
lea ecx, [esp + 0x168]
mov byte [esp + 0xc558], 0x15
call fcn.005871ce
lea ecx, [esp + 0x1a1c]
mov byte [esp + 0xc558], 0x1d
call fcn.0046c1e0
lea ecx, [esp + 0x1a08]
mov byte [esp + 0xc558], 0x1c
call fcn.00586de8
lea ecx, [esp + 0x19f8]
mov byte [esp + 0xc558], 0x1b
call fcn.0046c1e0
lea ecx, [esp + 0x19e8]
mov byte [esp + 0xc558], 0x1a
call fcn.0046c1e0
lea ecx, [esp + 0x16d8]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_SD_SAFE_COMM
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x2e08]
call fcn.004d34f0
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x6a58]
mov byte [esp + 0xc558], 0x1e
call fcn.004d34f0
push ebp
push ebx
push ebx
push str.SDGatewayPolicy
mov byte [esp + 0xc568], 0x1f
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x6a58]
mov byte [esp + 0xc558], 0x1e
call fcn.0041a780
lea ecx, [esp + 0xd8]
call fcn.0058719b
mov dword [esp + 0xd8], 0x5b7ff0
mov dword [esp + 0xec], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x20
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x21
je 0x41866e
mov ecx, eax
call fcn.0041be20
mov ebp, eax
jmp 0x418670
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x20
je 0x4186a4
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.004212a0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.004213c0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + 0xd8], 0x5b7ff0
lea ecx, [esp + 0xd8]
mov byte [esp + 0xc558], 0x22
call fcn.0041d3b0
lea ecx, [esp + 0xd8]
mov byte [esp + 0xc558], 0x1e
call fcn.005871ce
lea ecx, [esp + 0x3128]
mov byte [esp + 0xc558], 0x24
call fcn.0046c1e0
lea ecx, [esp + 0x3118]
mov byte [esp + 0xc558], 0x23
call fcn.0046c1e0
lea ecx, [esp + 0x2e08]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_BASIC
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x1db0]
call fcn.004f8f90
lea ecx, [esp + 0x20c0]
mov byte [esp + 0xc558], 0x25
call fcn.004a08f0
mov dword [esp + 0x1db0], 0x5b7f28
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x5288]
mov byte [esp + 0xc558], 0x26
call fcn.0041a7e0
push ebp
push ebx
push ebx
push str.BasicPolicy
mov byte [esp + 0xc568], 0x27
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x5288]
mov byte [esp + 0xc558], 0x26
call fcn.0041a830
lea ecx, [esp + 0x1c8]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7f1c
mov dword [esp + 0x1dc], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x28
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x29
je 0x4187fa
mov ecx, eax
call fcn.0041bed0
mov ebp, eax
jmp 0x4187fc
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x28
je 0x418830
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00421680
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.004217c0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7f1c
lea ecx, [esp + 0x1c8]
mov byte [esp + 0xc558], 0x2a
call fcn.0041d3f0
lea ecx, [esp + 0x1c8]
mov byte [esp + 0xc558], 0x26
call fcn.005871ce
lea ecx, [esp + 0x20c0]
mov byte [esp + 0xc558], 0x2b
call fcn.004a0930
lea ecx, [esp + 0x1db0]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_APP
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x2418]
call fcn.004f8f90
lea ecx, [esp + 0x2728]
mov byte [esp + 0xc558], 0x2c
call fcn.004a0cf0
mov dword [esp + 0x2418], 0x5b7e54
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x7e90]
mov byte [esp + 0xc558], 0x2d
call fcn.0041a880
push ebp
push ebx
push ebx
push str.AppPolicy
mov byte [esp + 0xc568], 0x2e
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x7e90]
mov byte [esp + 0xc558], 0x2d
call fcn.0041a8d0
lea ecx, [esp + 0x108]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7e48
mov dword [esp + 0x11c], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x2f
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x30
je 0x418972
mov ecx, eax
call fcn.0041bf80
mov ebp, eax
jmp 0x418974
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x2f
je 0x4189a8
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00421aa0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00421be0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7e48
lea ecx, [esp + 0x108]
mov byte [esp + 0xc558], 0x31
call fcn.0041d430
lea ecx, [esp + 0x108]
mov byte [esp + 0xc558], 0x2d
call fcn.005871ce
lea ecx, [esp + 0x2728]
mov byte [esp + 0xc558], 0x32
call fcn.0041a640
lea ecx, [esp + 0x2418]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_WEB
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0xc30]
call fcn.004f8f90
lea ecx, [esp + 0xf40]
mov byte [esp + 0xc558], 0x33
call fcn.00586db5
lea ecx, [esp + 0xf54]
mov byte [esp + 0xc558], 0x34
call fcn.0046c1d0
lea ecx, [esp + 0xf64]
mov byte [esp + 0xc558], 0x35
call fcn.004a0cf0
mov dword [esp + 0xc30], 0x5b7d80
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x6d88]
mov byte [esp + 0xc558], 0x36
call fcn.0041a950
push ebp
push ebx
push ebx
push str.UrlPolicy
mov byte [esp + 0xc568], 0x37
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x6d88]
mov byte [esp + 0xc558], 0x36
call fcn.0041a9c0
lea ecx, [esp + 0x198]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d74
mov dword [esp + 0x1ac], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x38
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x39
je 0x418b12
mov ecx, eax
call fcn.0041c030
mov ebp, eax
jmp 0x418b14
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x38
je 0x418b48
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00421ef0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00422050
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d74
lea ecx, [esp + 0x198]
mov byte [esp + 0xc558], 0x3a
call fcn.0041d470
lea ecx, [esp + 0x198]
mov byte [esp + 0xc558], 0x36
call fcn.005871ce
lea ecx, [esp + 0xf64]
mov byte [esp + 0xc558], 0x3d
call fcn.0041a640
lea ecx, [esp + 0xf54]
mov byte [esp + 0xc558], 0x3c
call fcn.0046c1e0
lea ecx, [esp + 0xf40]
mov byte [esp + 0xc558], 0x3b
call fcn.00586de8
lea ecx, [esp + 0xc30]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_DEVICE
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x20d8]
call fcn.004a2ef0
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x7b50]
mov byte [esp + 0xc558], 0x3e
call fcn.004a2ef0
push ebp
push ebx
push ebx
push str.DevicePolicy
mov byte [esp + 0xc568], 0x3f
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x7b50]
mov byte [esp + 0xc558], 0x3e
call fcn.0041aa60
lea ecx, [esp + 0x138]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d68
mov dword [esp + 0x14c], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x40
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x41
je 0x418c93
mov ecx, eax
call fcn.0041c0e0
mov ebp, eax
jmp 0x418c95
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x40
je 0x418cc9
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.004223b0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.004224d0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d68
lea ecx, [esp + 0x138]
mov byte [esp + 0xc558], 0x42
call fcn.0041d4b0
lea ecx, [esp + 0x138]
mov byte [esp + 0xc558], 0x3e
call fcn.005871ce
lea ecx, [esp + 0x2410]
mov byte [esp + 0xc558], 0x45
call fcn.004654c0
lea ecx, [esp + 0x2400]
mov byte [esp + 0xc558], 0x44
call fcn.0046c1e0
lea ecx, [esp + 0x23e8]
mov byte [esp + 0xc558], 0x43
call fcn.004a0930
lea ecx, [esp + 0x20d8]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_PRINT
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x55b0]
call fcn.004a3250
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x77a8]
mov byte [esp + 0xc558], 0x46
call fcn.004a3250
push ebp
push ebx
push ebx
push str.PrintPolicy
mov byte [esp + 0xc568], 0x47
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x77a8]
mov byte [esp + 0xc558], 0x46
call fcn.004a3390
lea ecx, [esp + 0x1f8]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d5c
mov dword [esp + 0x20c], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x48
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x49
je 0x418e14
mov ecx, eax
call fcn.0041c190
mov ebp, eax
jmp 0x418e16
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x48
je 0x418e4a
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.004227a0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.004228c0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d5c
lea ecx, [esp + 0x1f8]
mov byte [esp + 0xc558], 0x4a
call fcn.0041d4f0
lea ecx, [esp + 0x1f8]
mov byte [esp + 0xc558], 0x46
call fcn.005871ce
lea ecx, [esp + 0x55b0]
mov byte [esp + 0xc558], bl
call fcn.004a3390
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_SNAPSHOT
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x4f40]
call fcn.004a3fa0
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x70f0]
mov byte [esp + 0xc558], 0x4b
call fcn.004a3fa0
push ebp
push ebx
push ebx
push str.SnapshotPolicy
mov byte [esp + 0xc568], 0x4c
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x70f0]
mov byte [esp + 0xc558], 0x4b
call fcn.0041aad0
lea ecx, [esp + 0x90]
call fcn.0058719b
mov dword [esp + 0x90], 0x5b7d50
mov dword [esp + 0xa4], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x4d
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x4e
je 0x418f59
mov ecx, eax
call fcn.0041c240
mov ebp, eax
jmp 0x418f5b
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x4d
je 0x418f8f
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00422b50
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00422c70
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + 0x90], 0x5b7d50
lea ecx, [esp + 0x90]
mov byte [esp + 0xc558], 0x4f
call fcn.0041d530
lea ecx, [esp + 0x90]
mov byte [esp + 0xc558], 0x4b
call fcn.005871ce
lea ecx, [esp + 0x5250]
mov byte [esp + 0xc558], 0x50
call fcn.0041a640
lea ecx, [esp + 0x4f40]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_LOG
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x300]
call fcn.004a4110
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x9750]
mov byte [esp + 0xc558], 0x51
call fcn.004a4110
push ebp
push ebx
push ebx
push str.LogPolicy
mov byte [esp + 0xc568], 0x52
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x9750]
mov byte [esp + 0xc558], 0x51
call fcn.0041ab50
lea ecx, [esp + 0xc0]
call fcn.0058719b
mov dword [esp + 0xc0], 0x5b7d44
mov dword [esp + 0xd4], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x53
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x54
je 0x4190b2
mov ecx, eax
call fcn.0041c2f0
mov ebp, eax
jmp 0x4190b4
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x53
je 0x4190e8
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00422f50
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00423070
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + 0xc0], 0x5b7d44
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc558], 0x55
call fcn.0041d570
lea ecx, [esp + 0xc0]
mov byte [esp + 0xc558], 0x51
call fcn.005871ce
lea ecx, [esp + 0x81c]
mov byte [esp + 0xc558], 0x68
call fcn.004a0930
lea ecx, [esp + 0x804]
mov byte [esp + 0xc558], 0x67
call fcn.004a0930
lea ecx, [esp + 0x7ec]
mov byte [esp + 0xc558], 0x66
call fcn.004a0930
lea ecx, [esp + 0x7cc]
mov byte [esp + 0xc558], 0x65
call fcn.004a0930
lea ecx, [esp + 0x7bc]
mov byte [esp + 0xc558], 0x64
call fcn.0046c1e0
lea ecx, [esp + 0x7a8]
mov byte [esp + 0xc558], 0x63
call fcn.0046c1e0
lea ecx, [esp + 0x780]
mov byte [esp + 0xc558], 0x62
call fcn.0046c1e0
lea ecx, [esp + 0x770]
mov byte [esp + 0xc558], 0x61
call fcn.0046c1e0
lea ecx, [esp + 0x75c]
mov byte [esp + 0xc558], 0x60
call fcn.00586de8
lea ecx, [esp + 0x748]
mov byte [esp + 0xc558], 0x5f
call fcn.0041d770
lea ecx, [esp + 0x738]
mov byte [esp + 0xc558], 0x5e
call fcn.0046c1e0
lea ecx, [esp + 0x704]
mov byte [esp + 0xc558], 0x5d
call fcn.0041a640
lea ecx, [esp + 0x6cc]
mov byte [esp + 0xc558], 0x5c
call fcn.0041a640
lea ecx, [esp + 0x6bc]
mov byte [esp + 0xc558], 0x5b
call fcn.0046c1e0
lea ecx, [esp + 0x6a8]
mov byte [esp + 0xc558], 0x5a
call fcn.0046c1e0
lea ecx, [esp + 0x694]
mov byte [esp + 0xc558], 0x59
call fcn.00586de8
lea ecx, [esp + 0x660]
mov byte [esp + 0xc558], 0x58
call fcn.0041a640
mov byte [esp + 0xc558], 0x57
lea ecx, [esp + 0x62c]
call fcn.0041a640
lea ecx, [esp + 0x610]
mov byte [esp + 0xc558], 0x56
call fcn.004a0930
lea ecx, [esp + 0x300]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_REMOTE_CONTROL
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x2760]
call fcn.004a5340
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x63b0]
mov byte [esp + 0xc558], 0x69
call fcn.004a5340
push ebp
push ebx
push ebx
push str.RemoteControlPolicy
mov byte [esp + 0xc568], 0x6a
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x63b0]
mov byte [esp + 0xc558], 0x69
call fcn.0041ad60
lea ecx, [esp + 0xf0]
call fcn.0058719b
mov dword [esp + 0xf0], 0x5b7d38
mov dword [esp + 0x104], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x6b
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x6c
je 0x419373
mov ecx, eax
call fcn.0041c3a0
mov ebp, eax
jmp 0x419375
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x6b
je 0x4193a9
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00423510
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00423630
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + 0xf0], 0x5b7d38
lea ecx, [esp + 0xf0]
mov byte [esp + 0xc558], 0x6d
call fcn.0041d5b0
lea ecx, [esp + 0xf0]
mov byte [esp + 0xc558], 0x69
call fcn.005871ce
lea ecx, [esp + 0x2a9c]
mov byte [esp + 0xc558], 0x70
call fcn.0041d770
lea ecx, [esp + 0x2a8c]
mov byte [esp + 0xc558], 0x6f
call fcn.0046c1e0
lea ecx, [esp + 0x2a7c]
mov byte [esp + 0xc558], 0x6e
call fcn.0046c1e0
lea ecx, [esp + 0x2760]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_IMFILE
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x2ab0]
call fcn.004a71a0
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x6700]
mov byte [esp + 0xc558], 0x71
call fcn.004a71a0
push ebp
push ebx
push ebx
push str.IMFilePolicy
mov byte [esp + 0xc568], 0x72
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x6700]
mov byte [esp + 0xc558], 0x71
call fcn.0041adf0
lea ecx, [esp + 0x120]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d2c
mov dword [esp + 0x134], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x73
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x74
je 0x4194f4
mov ecx, eax
call fcn.0041c450
mov ebp, eax
jmp 0x4194f6
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x73
je 0x41952a
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00423920
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00423a40
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d2c
lea ecx, [esp + 0x120]
mov byte [esp + 0xc558], 0x75
call fcn.0041d5f0
lea ecx, [esp + 0x120]
mov byte [esp + 0xc558], 0x71
call fcn.005871ce
lea ecx, [esp + 0x2ddc]
mov byte [esp + 0xc558], 0x77
call fcn.0046c1e0
lea ecx, [esp + 0x2dc4]
mov byte [esp + 0xc558], 0x76
call fcn.004a0930
lea ecx, [esp + 0x2ab0]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_IMFILE
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x1a30]
call fcn.004a5e20
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x81d8]
mov byte [esp + 0xc558], 0x78
call fcn.004a5e20
push ebp
push ebx
push ebx
push str.NetTrafficPolicy
mov byte [esp + 0xc568], 0x79
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x81d8]
mov byte [esp + 0xc558], 0x78
call fcn.0041ae50
lea ecx, [esp + 0x150]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d20
mov dword [esp + 0x164], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x7a
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x7b
je 0x419661
mov ecx, eax
call fcn.0041c500
mov ebp, eax
jmp 0x419663
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x7a
je 0x419697
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00423d00
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00423e20
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d20
lea ecx, [esp + 0x150]
mov byte [esp + 0xc558], 0x7c
call fcn.0041d630
lea ecx, [esp + 0x150]
mov byte [esp + 0xc558], 0x78
call fcn.005871ce
lea ecx, [esp + 0x1d90]
mov byte [esp + 0xc558], 0x81
call fcn.0041dbc0
lea ecx, [esp + 0x1d7c]
mov byte [esp + 0xc558], 0x80
call fcn.00586de8
lea ecx, [esp + 0x1d68]
mov byte [esp + 0xc558], 0x7f
call fcn.0041d770
lea ecx, [esp + 0x1d54]
mov byte [esp + 0xc558], 0x7e
call fcn.0041d970
lea ecx, [esp + 0x1d40]
mov byte [esp + 0xc558], 0x7d
call fcn.00586de8
lea ecx, [esp + 0x1a30]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_NETWORK
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0xf98]
call fcn.004a6410
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x5fe0]
mov byte [esp + 0xc558], 0x82
call fcn.004a6410
push ebp
push ebx
push ebx
push str.NetControlPolicy
mov byte [esp + 0xc568], 0x83
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x5fe0]
mov byte [esp + 0xc558], 0x82
call fcn.0041af50
lea ecx, [esp + 0x180]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d14
mov dword [esp + 0x194], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x84
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x85
je 0x41980a
mov ecx, eax
call fcn.0041c5b0
mov ebp, eax
jmp 0x41980c
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x84
je 0x419840
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.004241a0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.004242c0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d14
lea ecx, [esp + 0x180]
mov byte [esp + 0xc558], 0x86
call fcn.0041d670
lea ecx, [esp + 0x180]
mov byte [esp + 0xc558], 0x82
call fcn.005871ce
lea ecx, [esp + 0x1334]
mov byte [esp + 0xc558], 0x8d
call fcn.0041a640
lea ecx, [esp + 0x1310]
mov byte [esp + 0xc558], 0x8c
call fcn.00586de8
lea ecx, [esp + 0x12f8]
mov byte [esp + 0xc558], 0x8b
call fcn.0041dbc0
lea ecx, [esp + 0x12e4]
mov byte [esp + 0xc558], 0x8a
call fcn.00586de8
lea ecx, [esp + 0x12d0]
mov byte [esp + 0xc558], 0x89
call fcn.0041d770
lea ecx, [esp + 0x12bc]
mov byte [esp + 0xc558], 0x88
call fcn.0041d970
lea ecx, [esp + 0x12a8]
mov byte [esp + 0xc558], 0x87
call fcn.00586de8
lea ecx, [esp + 0xf98]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_MAIL
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x1368]
call fcn.004a6c70
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x7438]
mov byte [esp + 0xc558], 0x8e
call fcn.004a6c70
push ebp
push ebx
push ebx
push str.MailPolicy
mov byte [esp + 0xc568], 0x8f
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x7438]
mov byte [esp + 0xc558], 0x8e
call fcn.0041b090
lea ecx, [esp + 0x1b0]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d08
mov dword [esp + 0x1c4], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x90
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x91
je 0x4199db
mov ecx, eax
call fcn.0041c660
mov ebp, eax
jmp 0x4199dd
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x90
je 0x419a11
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00424690
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.004247b0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7d08
lea ecx, [esp + 0x1b0]
mov byte [esp + 0xc558], 0x92
call fcn.0041d6b0
lea ecx, [esp + 0x1b0]
mov byte [esp + 0xc558], 0x8e
call fcn.005871ce
lea ecx, [esp + 0x16c4]
mov byte [esp + 0xc558], 0x97
call fcn.0041d770
lea ecx, [esp + 0x16ac]
mov byte [esp + 0xc558], 0x96
call fcn.0046c1e0
lea ecx, [esp + 0x169c]
mov byte [esp + 0xc558], 0x95
call fcn.0046c1e0
lea ecx, [esp + 0x1688]
mov byte [esp + 0xc558], 0x94
call fcn.0046c1e0
lea ecx, [esp + 0x1678]
mov byte [esp + 0xc558], 0x93
call fcn.0046c1e0
lea ecx, [esp + 0x1368]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_UPDOWN
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x838]
call fcn.004a76f0
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x8d40]
mov byte [esp + 0xc558], 0x98
call fcn.004a76f0
push ebp
push ebx
push ebx
push str.UpDownPolicy
mov byte [esp + 0xc568], 0x99
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x8d40]
mov byte [esp + 0xc558], 0x98
call fcn.0041b140
lea ecx, [esp + 0x1e0]
call fcn.0058719b
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7cfc
mov dword [esp + 0x1f4], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0x9a
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0x9b
je 0x419b84
mov ecx, eax
call fcn.0041c710
mov ebp, eax
jmp 0x419b86
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0x9a
je 0x419bba
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00424ac0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.00424be0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + method.CPtrArray.virtual_0], 0x5b7cfc
lea ecx, [esp + 0x1e0]
mov byte [esp + 0xc558], 0x9c
call fcn.0041d6f0
lea ecx, [esp + 0x1e0]
mov byte [esp + 0xc558], 0x98
call fcn.005871ce
lea ecx, [esp + 0xc20]
mov byte [esp + 0xc558], 0xa6
call fcn.0046c1e0
lea ecx, [esp + 0xc0c]
mov byte [esp + 0xc558], 0xa5
call fcn.0041dbc0
lea ecx, [esp + 0xbf8]
mov byte [esp + 0xc558], 0xa4
call fcn.00586de8
lea ecx, [esp + 0xbd8]
mov byte [esp + 0xc558], 0xa3
call fcn.0046c1e0
lea ecx, [esp + 0xbc4]
mov byte [esp + 0xc558], 0xa2
call fcn.0041d770
lea ecx, [esp + 0xbc0]
mov byte [esp + 0xc558], 0xa1
call fcn.004654c0
lea ecx, [esp + 0xbb0]
mov byte [esp + 0xc558], 0xa0
call fcn.0046c1e0
lea ecx, [esp + 0xba0]
mov byte [esp + 0xc558], 0x9f
call fcn.004654c0
lea ecx, [esp + 0xb90]
mov byte [esp + 0xc558], 0x9e
call fcn.0046c1e0
lea ecx, [esp + 0xb4c]
mov byte [esp + 0xc558], 0x9d
call fcn.0041a640
lea ecx, [esp + 0x838]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_IDS
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x3138]
call fcn.004a8940
mov ebp, dword [esp + 0x10]
lea ecx, [esp + 0x8558]
mov byte [esp + 0xc558], 0xa7
call fcn.004a8940
push ebp
push ebx
push ebx
push str.IDSPolicy
mov byte [esp + 0xc568], 0xa8
call fcn.0049b040
add esp, 0x10
lea ecx, [esp + 0x8558]
mov byte [esp + 0xc558], 0xa7
call fcn.0041b270
lea ecx, [esp + 0x78]
call fcn.0058719b
mov dword [esp + 0x78], 0x5b7cf0
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x10]
mov edi, dword [esi + 8]
push 0x18
mov byte [esp + 0xc55c], 0xa9
mov dword [esp + 0x1c], eax
call fcn.0058879e
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0xc558], 0xaa
je 0x419d8b
mov ecx, eax
call fcn.0041c7c0
mov ebp, eax
jmp 0x419d8d
xor ebp, ebp
cmp ebp, ebx
mov byte [esp + 0xc558], 0xa9
je 0x419dc1
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
push edx
mov ecx, ebp
call fcn.00424fb0
mov eax, dword [esp + 0x18]
mov ecx, ebp
push eax
push edi
call fcn.004250d0
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx + 4]
mov ebp, 1
mov dword [esp + 0x78], 0x5b7cf0
lea ecx, [esp + 0x78]
mov byte [esp + 0xc558], 0xab
call fcn.0041d730
lea ecx, [esp + 0x78]
mov byte [esp + 0xc558], 0xa7
call fcn.005871ce
lea ecx, [esp + 0x346c]
mov byte [esp + 0xc558], 0xad
call fcn.0041d770
lea ecx, [esp + 0x3458]
mov byte [esp + 0xc558], 0xac
call fcn.0041d770
lea ecx, [esp + 0x3138]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_DOC
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x48b0]
call fcn.004a85f0
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x48b0]
push eax
push ecx
mov byte [esp + 0xc560], 0xae
call fcn.0041e200
add esp, 8
lea ecx, [esp + 0x2e8]
call fcn.0041c870
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push edx
mov edx, dword [esp + 0x14]
push ecx
push eax
lea eax, [esp + 0x2f4]
push edx
push eax
mov byte [esp + 0xc56c], 0xaf
call fcn.0041e2e0
add esp, 0x14
lea ecx, [esp + 0x2e8]
mov ebp, 1
mov byte [esp + 0xc558], 0xae
call fcn.0041c890
lea ecx, [esp + 0x48b0]
mov byte [esp + 0xc558], bl
call fcn.0041b300
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_SYSALERT
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x37b0]
call fcn.004a56e0
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x37b0]
push ecx
push edx
mov byte [esp + 0xc560], 0xb0
call fcn.0041e600
add esp, 8
lea ecx, [esp + 0x2d0]
call fcn.0041c920
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x2dc]
push eax
push ecx
mov byte [esp + 0xc56c], 0xb1
call fcn.0041e6b0
add esp, 0x14
lea ecx, [esp + 0x2d0]
mov ebp, 1
mov byte [esp + 0xc558], 0xb0
call fcn.0041c940
lea ecx, [esp + 0x37b0]
mov byte [esp + 0xc558], bl
call fcn.0041b390
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_UDISK
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x3b18]
call fcn.004a8e50
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x3b18]
push edx
push eax
mov byte [esp + 0xc560], 0xb2
call fcn.0041e9a0
add esp, 8
lea ecx, [esp + 0x2b8]
call fcn.0041c9d0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x2c4]
push eax
push ecx
mov byte [esp + 0xc56c], 0xb3
call fcn.0041eab0
add esp, 0x14
lea ecx, [esp + 0x2b8]
mov ebp, 1
mov byte [esp + 0xc558], 0xb2
call fcn.0041c9f0
lea ecx, [esp + 0x3b18]
mov byte [esp + 0xc558], bl
call fcn.0041b3f0
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_SEC_CONFIG
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x3e98]
call fcn.004d1f20
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x3e98]
push edx
push eax
mov byte [esp + 0xc560], 0xb4
call fcn.0041ee10
add esp, 8
lea ecx, [esp + 0x288]
call fcn.0041ca80
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x294]
push eax
push ecx
mov byte [esp + 0xc56c], 0xb5
call fcn.0041ee90
add esp, 0x14
lea ecx, [esp + 0x288]
mov ebp, 1
mov byte [esp + 0xc558], 0xb4
call fcn.0041caa0
lea ecx, [esp + 0x3e98]
mov byte [esp + 0xc558], bl
call fcn.004f9040
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_PRINTPAGE
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0xa860]
call fcn.004aa110
mov edx, dword [esp + 0x10]
lea eax, [esp + 0xa860]
push edx
push eax
mov byte [esp + 0xc560], 0xb6
call fcn.0041f150
add esp, 8
lea ecx, [esp + 0x2a0]
call fcn.0041cb30
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x2ac]
push eax
push ecx
mov byte [esp + 0xc56c], 0xb7
call fcn.0041f1d0
add esp, 0x14
lea ecx, [esp + 0x2a0]
mov ebp, 1
mov byte [esp + 0xc558], 0xb6
call fcn.0041cb50
lea ecx, [esp + 0xa860]
mov byte [esp + 0xc558], bl
call fcn.004aa390
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_GENERAL
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_UDISK_REGISTER_CONTROL
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x4578]
call fcn.004d7580
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x4578]
push edx
push eax
mov byte [esp + 0xc560], 0xb8
call fcn.0041f490
add esp, 8
lea ecx, [esp + 0x270]
call fcn.0041cbe0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x27c]
push eax
push ecx
mov byte [esp + 0xc56c], 0xb9
call fcn.0041f580
add esp, 0x14
lea ecx, [esp + 0x270]
mov ebp, 1
mov byte [esp + 0xc558], 0xb8
call fcn.0041cc00
lea ecx, [esp + 0x4578]
mov byte [esp + 0xc558], bl
call fcn.0041b4c0
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_SOFT_INSTALL_CONTROL_or_POLICY_TYPE_SOFT_UNINSTALL_CONTROL
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x41f0]
call fcn.004d8ed0
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x41f0]
push edx
push eax
mov byte [esp + 0xc560], 0xba
call fcn.0041f8a0
add esp, 8
lea ecx, [esp + 0x258]
call fcn.0041cc90
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x264]
push eax
push ecx
mov byte [esp + 0xc56c], 0xbb
call fcn.0041f920
add esp, 0x14
lea ecx, [esp + 0x258]
mov ebp, 1
mov byte [esp + 0xc558], 0xba
call fcn.0041ccb0
lea ecx, [esp + 0x41f0]
mov byte [esp + 0xc558], bl
call fcn.004d8fd0
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_AUTH_REQUEST
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x88a0]
call fcn.004da210
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x88a0]
push edx
push eax
mov byte [esp + 0xc560], 0xbc
call fcn.0041fbe0
add esp, 8
lea ecx, [esp + 0x228]
call fcn.0041cd40
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x234]
push eax
push ecx
mov byte [esp + 0xc56c], 0xbd
call fcn.0041ff30
add esp, 0x14
lea ecx, [esp + 0x228]
mov ebp, 1
mov byte [esp + 0xc558], 0xbc
call fcn.0041cd60
lea ecx, [esp + 0x88a0]
mov byte [esp + 0xc558], bl
call fcn.0041b550
jmp 0x41a45f
push str.ParsePolicy_POLICY_TYPE_TDS
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
lea ecx, [esp + 0x4c18]
call fcn.004d7a60
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x4c18]
push edx
push eax
mov byte [esp + 0xc560], 0xbe
call fcn.00420330
add esp, 8
lea ecx, [esp + 0x240]
call fcn.0041cdf0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x24c]
push eax
push ecx
mov byte [esp + 0xc56c], 0xbf
call fcn.004203b0
add esp, 0x14
lea ecx, [esp + 0x240]
mov ebp, 1
mov byte [esp + 0xc558], 0xbe
call fcn.0041ce10
lea ecx, [esp + 0x4c18]
mov byte [esp + 0xc558], bl
call fcn.004d7ad0
jmp 0x41a45f
push edi
push str.ParsePolicy_type_0x_x__unsupported_
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x14
lea ecx, [esp + 0x10]
mov dword [esp + 0xc558], 0xffffffff
call fcn.004654c0
jmp 0x41a48e
push str.ParsePolicy_user_policy_unsupported_
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x10
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
cmp eax, edx
jb 0x417ca3
jmp 0x41a4c5
push 0x90
jmp 0x41a4ac
push 0x99
push str.ParsePolicy_line__lu__break
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x14
mov eax, dword [esp + 0xc560]
push ebp
push eax
push str.ParsePolicy_type_0x_x__ret_0x_x_
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
mov ecx, dword [esp + 0xc568]
add esp, 0x18
mov eax, ebp
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc54c
ret 8