Function at 0x12ed3d70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x13067028
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x38
mov ecx, dword [esp + 0x68]
push ebx
push ebp
mov ebp, dword [esp + 0x58]
xor eax, eax
xor ebx, ebx
test ebp, ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xd
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [ecx], ebx
je 0x12ed499f
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x12ed499f
push esi
push edi
push 0x20000
call fcn.12e6efd0
add esp, 4
test eax, eax
jne 0x12ed3de7
push 1
mov ecx, 0x131c0930
call fcn.12ebfbe0
test eax, eax
je 0x12ed4795
push ebp
call fcn.12e34140
add esp, 4
test eax, eax
je 0x12ed468a
push 0x130e1f5c
call fcn.12f5c51d
push eax
push 0x130e1f5c
push ebp
call fcn.12f5e383
add esp, 0x10
test eax, eax
je 0x12ed4795
push 0x130e1f3c
call fcn.12f5c51d
push eax
push 0x130e1f3c
push ebp
call fcn.12f5e383
add esp, 0x10
test eax, eax
je 0x12ed4795
push 0x130e1f1c
call fcn.12f5c51d
push eax
push 0x130e1f1c
push ebp
call fcn.12f5e383
add esp, 0x10
test eax, eax
je 0x12ed4795
mov ebx, ebp
push 0x2f
push ebp
mov dword [esp + 0x2c], ebx
call fcn.12f5d099
add esp, 8
test eax, eax
je 0x12ed3eec
mov edx, dword [esp + 0x64]
lea esi, [edx + 1]
lea edi, [esi + esi]
push edi
call fcn.12f5c05b
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
je 0x12ed3eec
mov ebx, dword [esp + 0x28]
mov ecx, edi
mov edx, ecx
xor eax, eax
mov edi, ebx
push esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push ebp
and ecx, 3
push ebx
rep stosb byte es:[edi], al
call fcn.12f5c57b
add esp, 0xc
test esi, esi
jbe 0x12ed3ec5
mov eax, ebx
cmp word [eax], 0x2f
jne 0x12ed3ebf
mov word [eax], 0x5c
add eax, 2
dec esi
jne 0x12ed3eb4
mov eax, dword [0x13199068]
mov ebx, dword [esp + 0x28]
test eax, eax
mov dword [esp + 0x24], ebx
je 0x12ed3eec
push ebx
push ebp
push str.CTSCDTPolicy::IsDisPathAction___s______s_
push str.SCDTPath
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x14
lea ecx, [esp + 0x38]
call fcn.12f4cc70
lea eax, [esp + 0x38]
mov ecx, 0x131c09d8
push eax
mov dword [esp + 0x54], 0
call fcn.12ee7500
mov eax, dword [esp + 0x3c]
xor esi, esi
test eax, eax
jle 0x12ed3f34
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + esi*4]
push eax
push ebx
call fcn.12f513e0
add esp, 8
test eax, eax
jne 0x12ed3fa7
mov eax, dword [esp + 0x3c]
inc esi
cmp esi, eax
jl 0x12ed3f16
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x12ed4784
mov ecx, 0x131c0930
call fcn.12ec0930
mov edi, eax
test edi, edi
jne 0x12ed3f5d
call fcn.12d92e70
test eax, eax
je 0x12ed401c
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x40]
call fcn.12f4cce0
lea ecx, [esp + 0x38]
push ecx
mov ecx, 0x131c0934
call fcn.12ee7400
mov eax, dword [esp + 0x3c]
xor esi, esi
test eax, eax
jle 0x12ed401c
mov edx, dword [esp + 0x38]
mov eax, dword [edx + esi*4]
push eax
push ebx
call fcn.12f513e0
add esp, 8
test eax, eax
jne 0x12ed3fe0
mov eax, dword [esp + 0x3c]
inc esi
cmp esi, eax
jl 0x12ed3f87
jmp 0x12ed401c
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed3fce
mov edx, dword [esp + 0x38]
mov eax, dword [edx + esi*4]
push eax
push ebx
push esi
push str.CTSCDTPolicy::IsDisPathAction_SafeDiskPathForbidden___d___s___s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x18
mov eax, 1
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
jmp 0x12ed4784
mov eax, dword [0x13199068]
mov dword [esp + 0x14], 2
test eax, eax
je 0x12ed400f
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + esi*4]
push ecx
push ebx
push esi
push str.CTSCDTPolicy::IsDisPathAction_SDWorkSpace___d___s___s_
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x18
mov dword [esp + 0x10], 1
jmp 0x12ed4784
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x12ed4784
mov esi, dword [esp + 0x68]
mov ecx, 0x131c0930
push esi
push ebx
call fcn.12ec41c0
mov ebp, dword [esp + 0x6c]
cmp esi, 5
mov dword [esp + 0x14], eax
je 0x12ed404a
cmp esi, 6
jne 0x12ed4086
mov edx, dword [esp + 0x64]
mov ecx, 0x131c13e0
push edx
push ebx
push ebp
call fcn.12ed54a0
test eax, eax
je 0x12ed4086
test edi, edi
jne 0x12ed407f
call fcn.12d92e70
test eax, eax
jne 0x12ed407f
test ebp, ebp
je 0x12ed46cd
cmp ebp, 2
je 0x12ed46cd
jmp 0x12ed4086
cmp dword [esp + 0x14], 3
jne 0x12ed400f
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
push eax
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x78]
push edx
push eax
push ecx
push ebp
push esi
push ebx
call fcn.12ed37e0
mov ecx, dword [0x13199068]
add esp, 0x20
test ecx, ecx
mov dword [esp + 0x10], eax
je 0x12ed40d3
mov edx, dword [esp + 0x7c]
push edx
push ebp
push eax
push str.CTSCDTPolicy::IsDisPathAction__1__Ret_d___ProcSCDTType_d___Identify_08x_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x18
push 0x131912a8
lea ecx, [esp + 0x24]
call fcn.12f46b50
push 0x131912a8
lea ecx, [esp + 0x20]
mov byte [esp + 0x54], 1
call fcn.12f46b50
push 0x131912a8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x54], 2
call fcn.12f46b50
push 0x131912a8
lea ecx, [esp + 0x34]
mov byte [esp + 0x54], 3
call fcn.12f46b50
push str.consent.exe
mov byte [esp + 0x54], 4
call fcn.12d8ba90
push eax
lea eax, [esp + 0x28]
push 0x130c4e18
push eax
call fcn.12f4a270
add esp, 0x10
push str.svchost.exe
call fcn.12d8ba90
push eax
lea ecx, [esp + 0x24]
push 0x130c4e18
push ecx
call fcn.12f4a270
add esp, 0x10
push str.smartscreen.exe
call fcn.12d8ba90
push eax
lea edx, [esp + 0x20]
push 0x130c4e18
push edx
call fcn.12f4a270
add esp, 0x10
push 0x130c69b8
call fcn.12d8ba90
push eax
lea eax, [esp + 0x38]
push 0x130c4e18
push eax
call fcn.12f4a270
mov ecx, dword [0x13196dd0]
add esp, 0x10
push ecx
lea ecx, [esp + 0x64]
call fcn.12f46b50
mov eax, dword [esp + 0x10]
mov byte [esp + 0x50], 5
test eax, eax
je 0x12ed435c
mov eax, dword [esp + 0x7c]
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test eax, 0x30000000
je 0x12ed4270
mov edx, dword [esp + 0x60]
push ebx
push edx
call fcn.12f5e2a4
add esp, 8
test eax, eax
je 0x12ed41ee
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call fcn.12e5c5e0
add esp, 4
test eax, eax
je 0x12ed41f6
mov dword [esp + 0x10], 0
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed4270
call ebp
mov esi, eax
push esi
call fcn.12f8c970
mov edi, eax
lea eax, [esp + 0x38]
push edi
push eax
call fcn.12f8c9c0
add esp, 0xc
mov eax, dword [eax]
lea ecx, [esp + 0x2c]
push eax
mov byte [esp + 0x54], 6
call fcn.12f469f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 8
call fcn.12f41f70
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed4262
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x2c]
push ecx
push edx
push ebx
push edi
push esi
push str.CTSCDTPolicy::IsDisPathAction__2_1__dwProcID_d___dwPProcID_d___Src_s___wstrParentsPath_s___wstrCurPath_s_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x20
lea ecx, [esp + 0x2c]
mov byte [esp + 0x50], 5
call fcn.12f472f0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x12ed435c
test byte [esp + 0x7c], 1
je 0x12ed435c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call fcn.12e5c5e0
add esp, 4
test eax, eax
je 0x12ed42a7
mov dword [esp + 0x10], 0
jmp 0x12ed432e
call ebp
mov esi, eax
push esi
call fcn.12f8c970
mov edi, eax
lea eax, [esp + 0x38]
push edi
push eax
call fcn.12f8c9c0
add esp, 0xc
mov eax, dword [eax]
lea ecx, [esp + 0x2c]
push eax
mov byte [esp + 0x54], 9
call fcn.12f469f0
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0xb
call fcn.12f41f70
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed430a
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x2c]
push ecx
push edx
push ebx
push edi
push esi
push str.CTSCDTPolicy::IsDisPathAction__2_2__dwProcID_d___dwPProcID_d___Src_s___wstrParentsPath_s___wstrCurPath_s_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x20
mov eax, dword [esp + 0x2c]
push ebx
push eax
call fcn.12f5e2a4
add esp, 8
test eax, eax
jne 0x12ed4320
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x50], 5
call fcn.12f472f0
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed435c
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0x6c]
mov edx, dword [esp + 0x10]
push ecx
push edi
push edx
push str.CTSCDTPolicy::IsDisPathAction__3__Ret_d___ProcSCDTType_d___Identify_08x_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x18
jmp 0x12ed4360
mov edi, dword [esp + 0x6c]
call fcn.12d8ccf0
push eax
call fcn.12f5c51d
mov ecx, dword [esp + 0x14]
add esp, 4
test ecx, ecx
jne 0x12ed473e
mov ebp, dword [esp + 0x64]
cmp ebp, eax
jb 0x12ed455f
push eax
call fcn.12d8ccf0
push eax
push ebx
call fcn.12f5e383
add esp, 0xc
test eax, eax
jne 0x12ed4553
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed43cc
mov eax, dword [esp + 0x60]
push eax
call fcn.12d8ccf0
mov ecx, dword [esp + 0x14]
push eax
push ebx
push ecx
push str.CTSCDTPolicy::IsDisPathAction__3_1__Ret_d____s____s____s_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
mov edx, dword [0x13196dd0]
lea ecx, [esp + 0x6c]
push edx
call fcn.12f46b50
mov eax, dword [0x13199068]
mov byte [esp + 0x50], 0xc
test eax, eax
je 0x12ed4403
push str.CTSCDTPolicy::IsDisPathAction__3_2
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
mov eax, dword [0x13199068]
add esp, 0xc
test byte [esp + 0x7c], 1
je 0x12ed442f
test eax, eax
je 0x12ed4422
push str.CTSCDTPolicy::IsDisPathAction__3_3
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov dword [esp + 0x10], 0
jmp 0x12ed4545
test eax, eax
je 0x12ed445b
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
push eax
push str.CTSCDTPolicy::IsDisPathAction__3_3_1__wstrConsent_s___wstrsvchost_s___wstrSmartscreen_s____s_
push str.procidentifytypeex
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x1c
mov esi, 1
mov dword [esp + 0x10], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call fcn.12e5c5e0
add esp, 4
test eax, eax
jne 0x12ed44b9
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.12f5e2a4
add esp, 8
test eax, eax
je 0x12ed44b9
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.12f5e2a4
add esp, 8
test eax, eax
je 0x12ed44b9
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x18]
push edx
push eax
call fcn.12f5e2a4
add esp, 8
test eax, eax
jne 0x12ed44e0
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed44d6
push str.CTSCDTPolicy::IsDisPathAction__3_3_3
push str.procidentifytypeex
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov dword [esp + 0x10], 0
jmp 0x12ed4528
mov eax, dword [esp + 0x10]
test eax, eax
je 0x12ed4528
call fcn.12d91a00
test eax, eax
je 0x12ed4528
mov eax, dword [esp + 0x5c]
cmp eax, 2
je 0x12ed4507
cmp eax, 3
mov dword [esp + 0x10], 0
jne 0x12ed450b
mov dword [esp + 0x10], esi
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed4545
push str.CTSCDTPolicy::IsDisPathAction__3_3_3
push str.procidentifytypeex
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed4545
push str.CTSCDTPolicy::IsDisPathAction__3_4
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
lea ecx, [esp + 0x6c]
mov byte [esp + 0x50], 5
call fcn.12f472f0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x12ed473e
mov eax, dword [esp + 0x74]
test eax, eax
je 0x12ed473e
call fcn.12d92c40
test eax, eax
je 0x12ed45ff
push edi
call fcn.12ebfa90
mov esi, dword [esp + 0x18]
add esp, 4
cmp eax, 1
jne 0x12ed45c9
mov eax, 1
cmp esi, eax
je 0x12ed45c5
cmp esi, 3
je 0x12ed45c5
cmp esi, 8
je 0x12ed45c9
cmp esi, 9
je 0x12ed45c9
cmp esi, 0xa
je 0x12ed45c9
cmp dword [esp + 0x68], eax
jne 0x12ed45c9
lea ecx, [esp + 0x10]
push ecx
push ebx
call fcn.12ece9b0
add esp, 8
test eax, eax
jne 0x12ed45c9
mov dword [esp + 0x10], eax
jmp 0x12ed45c9
mov dword [esp + 0x10], eax
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed45f1
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x10]
push edx
push edi
push eax
push str.CTSCDTPolicy::IsDisPathAction__4__Ret_d___ProcSCDTType_d___Identify_08x_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x18
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x12ed46da
jmp 0x12ed460b
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x12ed473e
call fcn.12d91a00
test eax, eax
jne 0x12ed473e
push edi
call fcn.12ebfa90
add esp, 4
cmp eax, 1
jne 0x12ed473e
lea ecx, [esp + 0x7c]
push ecx
mov ecx, 0x131bf458
call fcn.12eb4310
mov eax, dword [esp + 0x7c]
mov byte [esp + 0x50], 0xe
cmp ebp, dword [eax - 8]
jne 0x12ed467c
push ebp
push eax
push ebx
call fcn.12f5e383
add esp, 0xc
test eax, eax
jne 0x12ed467c
mov eax, dword [0x131bf528]
test eax, eax
je 0x12ed4672
push ebx
push str.TPLR_Log_File_ChangeToRead___s_
push str.Path_Write_Blocked
call fcn.12eda250
add esp, 0xc
mov edx, dword [esp + 0x78]
mov dword [edx], 1
mov byte [esp + 0x50], 5
lea ecx, [esp + 0x7c]
jmp 0x12ed4739
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed4795
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x6c]
and ecx, 0xffff
push 0xd
push ecx
push edx
push eax
push ebp
push str.CTSCDTPolicy::IsDisPathAction__IsLocalOrNetworkFilePath___s____d___d___d___d___d_
push str.NoFile
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x24
jmp 0x12ed4795
mov dword [esp + 0x10], 0
jmp 0x12ed4784
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed46f9
push esi
push ebx
push str.CTSCDTPolicy::IsDisPathAction_IsRDPClip___s___d_
push str.SCDTRuleLog
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x14
mov eax, dword [0x131bf528]
test eax, eax
je 0x12ed473e
mov ecx, dword [esp + 0x68]
lea edx, [esp + 0x7c]
push ecx
push esi
push edx
call fcn.12ed3ba0
add esp, 0xc
mov eax, dword [eax]
mov byte [esp + 0x50], 0xd
push eax
push ebx
push str.RDPClip_Read___s___StorageType__s_
push str.Path_Read_Blocked
call fcn.12eda250
add esp, 0x10
mov byte [esp + 0x50], 5
lea ecx, [esp + 0x7c]
call fcn.12f472f0
lea ecx, [esp + 0x60]
mov byte [esp + 0x50], 4
call fcn.12f472f0
lea ecx, [esp + 0x30]
mov byte [esp + 0x50], 3
call fcn.12f472f0
lea ecx, [esp + 0x18]
mov byte [esp + 0x50], 2
call fcn.12f472f0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x50], 1
call fcn.12f472f0
lea ecx, [esp + 0x20]
mov byte [esp + 0x50], 0
call fcn.12f472f0
lea ecx, [esp + 0x38]
mov dword [esp + 0x50], 0xffffffff
call fcn.12f4cc80
mov eax, dword [esp + 0x10]
test eax, eax
je 0x12ed4988
mov edi, dword [esp + 0x58]
cmp edi, 0x100613
je 0x12ed47c1
cmp edi, 0x100620
je 0x12ed47c1
cmp edi, 0x100621
jne 0x12ed4851
push ebx
call fcn.12e0c970
add esp, 4
test eax, eax
je 0x12ed4803
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed47eb
push str.CTSCDTPolicy::IsDisPathAction_IsRecyclerW_____
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov esi, dword [esp + 0x14]
cmp esi, 2
je 0x12ed47f9
cmp esi, 1
jne 0x12ed4807
mov dword [esp + 0x10], 0
jmp 0x12ed4807
mov esi, dword [esp + 0x14]
call fcn.12d92e70
test eax, eax
jne 0x12ed481d
call fcn.12e76620
cmp dword [0x13196dc4], eax
jne 0x12ed4851
cmp esi, 1
je 0x12ed4827
cmp esi, 3
jne 0x12ed4851
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed4844
push str.CTSCDTPolicy::IsDisPathAction_UIhelper_____
push str.SCDT
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
mov dword [esp + 0x10], 0
jmp 0x12ed4988
mov eax, dword [esp + 0x10]
test eax, eax
je 0x12ed4988
mov eax, dword [0x13199068]
test eax, eax
je 0x12ed4927
mov eax, dword [esp + 0x74]
mov ebp, str.Read
test eax, eax
jne 0x12ed487c
mov ebp, str.Write
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x14]
push ecx
lea eax, [esp + 0x68]
push edx
push eax
call fcn.12ed3ba0
mov esi, eax
mov eax, dword [esp + 0x7c]
lea ecx, [esp + 0x78]
and eax, 0xffff
mov dword [esp + 0x5c], 0xf
push eax
push ecx
call fcn.12ed3ae0
mov edi, eax
lea edx, [esp + 0x90]
mov bl, 0x10
push edx
mov byte [esp + 0x68], bl
call fcn.12ec10a0
add esp, 0x18
mov ecx, dword [esp + 0x58]
mov edx, dword [esi]
mov eax, dword [eax]
push ecx
mov ecx, dword [edi]
push edx
mov edx, dword [esp + 0x2c]
push ecx
push ebp
push edx
push eax
push str._r_n_s_r_nCTSCDTPolicy::IsDisPathAction_Path:__s__Operate:__s__PersonalDirDoMode:__s_StorageType:__s_dwContext__d_
push str.SCDTRuleLog
push 0xffffffffffffffff
mov byte [esp + 0x74], 0x11
call fcn.12dad750
add esp, 0x24
lea ecx, [esp + 0x7c]
mov byte [esp + 0x50], bl
call fcn.12f472f0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x50], 0xf
call fcn.12f472f0
lea ecx, [esp + 0x64]
mov dword [esp + 0x50], 0xffffffff
call fcn.12f472f0
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0x24]
mov eax, dword [0x131bf528]
test eax, eax
je 0x12ed4988
mov eax, dword [esp + 0x74]
mov esi, str.Path_Read_Blocked
test eax, eax
jne 0x12ed4942
mov esi, str.Path_Write_Blocked
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x14]
push ecx
lea eax, [esp + 0x80]
push edx
push eax
call fcn.12ed3ba0
add esp, 0xc
mov ecx, dword [eax]
push edi
push ecx
push ebx
push str.Path:__s__StorageType__s__dwContext__d_
push esi
mov dword [esp + 0x64], 0x12
call fcn.12eda250
add esp, 0x14
lea ecx, [esp + 0x7c]
mov dword [esp + 0x50], 0xffffffff
call fcn.12f472f0
mov eax, dword [esp + 0x28]
pop edi
test eax, eax
pop esi
je 0x12ed499b
push eax
call fcn.12f5c050
add esp, 4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x40]
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x44
ret