Function at 0x398fe90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x3a303b7
mov eax, dword fs:[0]
push eax
sub esp, 0x8fc
mov eax, dword [0x3a7682c]
xor eax, esp
mov dword [esp + 0x8f8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x3a7682c]
xor eax, esp
push eax
lea eax, [esp + 0x910]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x940]
mov eax, dword [esp + 0x938]
mov ebp, dword [esp + 0x92c]
mov edi, dword [esp + 0x93c]
mov esi, dword [esp + 0x920]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x15c]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], edi
call fcn.039efdc0
mov dword [esp + 0x918], 0
mov byte [esp + 0x2c], 0
test esi, esi
je 0x398ff71
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x398ff23
mov ebx, dword [esp + 0x934]
sub eax, edx
sar eax, 1
cmp word [esi + eax*2 - 2], 0x5c
jne 0x398ff84
test ebx, 0x2000000
jne 0x398ff84
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x398ff71
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x398ff71
mov edx, dword [0x3a56b80]
push edx
push str._CreateFile_with_trailing__but_NO_BUFFERING_not_specified_
call fcn.039efdd0
push 3
call dword [0x3a5fde0]
mov dword [edi], 0xffffffff
jmp 0x3991a74
push str..PHYSICALDRIVE0
push esi
call fcn.03a012f2
add esp, 8
test eax, eax
je 0x3991a66
push str..PHYSICALDRIVE1
push esi
call fcn.03a012f2
add esp, 8
test eax, eax
je 0x3991a66
push 4
push str.__
push esi
call fcn.03a02fe5
add esp, 0xc
test eax, eax
jne 0x398fff9
movzx eax, word [esi + 8]
mov edi, dword [0x3a5fd40]
push eax
call edi
cmp ax, 0x61
jb 0x398fff9
movzx eax, word [esi + 8]
movzx ecx, ax
push ecx
call edi
cmp ax, 0x7a
ja 0x398fff9
cmp word [esi + 0xa], 0x3a
jne 0x398fff9
cmp word [esi + 0xc], 0
je 0x3991a62
push str.CONIN_
push esi
call fcn.03a012f2
add esp, 8
test eax, eax
je 0x3991a0c
push 0x3a48554
push esi
call fcn.03a012f2
add esp, 8
test eax, eax
je 0x3991a0c
push esi
call fcn.03989800
add esp, 4
lea ecx, [esp + 0x348]
mov byte [esp + 0x37], al
call fcn.039efdc0
mov byte [esp + 0x918], 1
lea edx, [esp + 0x348]
push edx
push esi
call fcn.039d9a90
add esp, 8
cmp dword [esp + 0x34c], 0
mov esi, eax
je 0x3990068
mov byte [esp + 0x2c], 1
push esi
call fcn.03988340
add esp, 4
test al, al
jne 0x39919da
mov eax, esi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x3990080
sub eax, edx
sar eax, 1
cmp word [esi + eax*2 - 2], 0x5c
je 0x39900b7
mov eax, esi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x39900a0
sub eax, edx
sar eax, 1
cmp word [esi + eax*2 - 2], 0x2f
jne 0x39900db
mov eax, esi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x39900c0
sub eax, edx
sar eax, 1
cmp eax, 3
ja 0x39900e2
cmp word [esi + 2], 0x3a
jne 0x39900e2
mov eax, dword [0x3a56b80]
jmp 0x39900f7
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x39900e7
sub eax, edx
sar eax, 1
dec eax
push eax
push esi
lea ecx, [esp + 0x164]
call fcn.03931210
mov ecx, dword [esp + 0x15c]
push 9
push str..pipe_
push ecx
call fcn.03a0113b
add esp, 0xc
test eax, eax
jne 0x39901c4
mov esi, dword [esp + 0x15c]
push str..pipe_
lea ecx, [esp + 0x538]
add esi, 0x12
call fcn.039f0100
mov byte [esp + 0x918], 2
mov edi, dword [esp + 0x14]
push edi
push 0
lea edx, [esp + 0x7cc]
push esi
push edx
call fcn.039ba1f0
add esp, 0x10
mov byte [esp + 0x918], 3
mov ecx, dword [0x3a56b80]
push ecx
push 0
push eax
lea ecx, [esp + 0x540]
call fcn.039eff20
mov byte [esp + 0x918], 2
lea ecx, [esp + 0x7c4]
call fcn.039ef660
mov edx, dword [0x3a56b80]
push edx
push 0
lea eax, [esp + 0x53c]
push eax
lea ecx, [esp + 0x168]
call fcn.039321e0
mov byte [esp + 0x918], 1
lea ecx, [esp + 0x534]
call fcn.039ef660
jmp 0x39901c8
mov edi, dword [esp + 0x14]
lea ecx, [esp + 0xb8]
call fcn.039efdc0
mov byte [esp + 0x918], 4
lea ecx, [esp + 0x200]
call fcn.039efdc0
mov byte [esp + 0x918], 5
mov eax, dword [esp + 0x15c]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0xbc]
push edx
push eax
call fcn.03975600
add esp, 0xc
test al, al
je 0x399198c
cmp dword [esp + 0x28], 0
jne 0x399025a
cmp dword [esp + 0xbc], 3
jg 0x399198c
push 1
lea ecx, [esp + 0xbc]
call fcn.039ef290
cmp word [eax], 0x3a
jne 0x399198c
push 2
lea ecx, [esp + 0xbc]
call fcn.039ef290
cmp word [eax], 0x5c
jne 0x399198c
mov ecx, dword [esp + 0xb8]
push ecx
call fcn.039734c0
add esp, 4
test al, al
je 0x39919b2
lea ecx, [esp + 0x490]
call fcn.039efdc0
mov byte [esp + 0x918], 6
call dword [0x3a5fd78]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0xb8]
push edx
push 0
mov dword [esp + 0x44], eax
push 0
lea eax, [esp + 0x49c]
push eax
push ecx
mov dword [esp + 0x44], 0
call fcn.03976d20
add esp, 0x14
or ebx, 0xffffffff
test al, al
je 0x399046a
mov edx, dword [esp + 0xb8]
push edx
call fcn.039744e0
cmp eax, ebx
je 0x39902de
test al, 0x10
je 0x39902de
lea esi, [ebx + 2]
jmp 0x39902e0
xor esi, esi
cmp dword [esp + 0x930], 1
mov dword [esp + 0x30], esi
jne 0x3990382
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
test cl, 1
je 0x3990318
test edi, edi
je 0x3990318
mov edx, dword [0x3a56b80]
push edx
push str.__CREATE_NEW_specified_and_GetLongPathNameW_reports_already_exist_
mov ecx, edi
call fcn.039efdd0
push 0x50
call dword [0x3a5fde0]
mov eax, dword [esp + 0x1c]
mov dword [eax], ebx
mov byte [esp + 0x918], 5
lea ecx, [esp + 0x490]
call fcn.039ef660
mov byte [esp + 0x918], 4
lea ecx, [esp + 0x200]
call fcn.039ef660
mov byte [esp + 0x918], 1
lea ecx, [esp + 0xb8]
call fcn.039ef660
mov byte [esp + 0x918], 0
lea ecx, [esp + 0x348]
call fcn.039ef660
mov dword [esp + 0x918], ebx
jmp 0x3991a7f
mov ecx, dword [0x3a56b80]
push ecx
push 0
lea edx, [esp + 0x498]
push edx
lea ecx, [esp + 0xc4]
call fcn.039321e0
mov eax, dword [esp + 0xb8]
push eax
call fcn.039f7560
mov dword [esp + 0x28], eax
test esi, esi
jne 0x3990505
mov eax, dword [esp + 0xb8]
push 0
lea edx, [esp + 0x204]
push edx
push eax
call fcn.03973bd0
add esp, 0xc
test al, al
jne 0x3990522
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test dl, 1
je 0x3990400
test edi, edi
je 0x3990400
mov eax, dword [0x3a56b80]
push eax
push str.__GetParentPath_failed_
mov ecx, edi
call fcn.039efdd0
mov byte [esp + 0x918], 5
lea ecx, [esp + 0x490]
call fcn.039ef660
mov byte [esp + 0x918], 4
lea ecx, [esp + 0x200]
call fcn.039ef660
mov byte [esp + 0x918], 1
lea ecx, [esp + 0xb8]
call fcn.039ef660
mov byte [esp + 0x918], 0
lea ecx, [esp + 0x348]
call fcn.039ef660
mov dword [esp + 0x918], ebx
lea ecx, [esp + 0x15c]
call fcn.039ef660
xor al, al
jmp 0x3991a8d
cmp dword [esp + 0x930], 3
jne 0x39903b8
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test dl, 1
je 0x399049e
test edi, edi
je 0x399049e
mov eax, dword [0x3a56b80]
push eax
push str.__OPEN_EXISTING_specified_and_GetLongPathNameW_reports_nonexistent_
mov ecx, edi
call fcn.039efdd0
push 2
call dword [0x3a5fde0]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0xffffffff
mov byte [esp + 0x918], 5
lea ecx, [esp + 0x490]
call fcn.039ef660
mov byte [esp + 0x918], 4
lea ecx, [esp + 0x200]
call fcn.039ef660
mov byte [esp + 0x918], 1
lea ecx, [esp + 0xb8]
call fcn.039ef660
mov byte [esp + 0x918], 0
lea ecx, [esp + 0x348]
call fcn.039ef660
jmp 0x3991a74
mov ecx, dword [0x3a56b80]
push ecx
push 0
lea edx, [esp + 0xc0]
push edx
lea ecx, [esp + 0x20c]
call fcn.039321e0
lea ecx, [esp + 0x3ec]
call fcn.039efdc0
mov byte [esp + 0x918], 7
mov ecx, dword [esp + 0x200]
push 1
lea eax, [esp + 0x3f0]
push eax
push ecx
call fcn.03984510
xor esi, esi
add esp, 0xc
lea ecx, [esp + 0x44]
mov dword [esp + 0x38], esi
xor ebp, ebp
mov dword [esp + 0x40], esi
call fcn.0394ec90
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x44]
call fcn.03953a00
lea ecx, [esp + 0x44]
call fcn.0394fd10
mov ebx, eax
mov eax, dword [esp + 0x924]
mov dword [esp + 0x2c], eax
cmp eax, 0x80000100
jne 0x39905ae
call fcn.03935640
test eax, eax
je 0x39905ae
call dword [0x3a5fdc8]
cmp al, 6
jae 0x39905ae
mov dword [esp + 0x2c], 0x80000000
mov byte [esp + 0x1b], 0
mov edx, 1
mov ecx, esi
shl edx, cl
test dword [esp + 0x944], edx
je 0x39908ec
mov eax, dword [esp + 0x14]
push eax
mov eax, dword [esp + 0x3f0]
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esi*4 + 0x3a755ac]
lea edx, [esp + 0x40]
push edx
push eax
push ecx
lea edx, [esp + 0x58]
push edx
call fcn.039649f0
mov edi, eax
add esp, 0x18
cmp edi, 1
je 0x3990952
mov eax, dword [esp + 0x40]
cmp eax, 1
jle 0x399062e
cmp eax, ebp
jle 0x399062e
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x399062e
mov ebp, eax
mov eax, dword [esi*4 + 0x3a755ac]
push eax
push ecx
lea ecx, [esp + 0x4c]
call fcn.0394edf0
mov ebx, dword [eax]
and ebx, 7
test edi, edi
jne 0x39908b8
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x1b], 1
call fcn.039efdc0
mov byte [esp + 0x918], 9
mov ecx, dword [esp + 0xb8]
push 1
lea eax, [esp + 0x2a8]
push eax
push ecx
call fcn.03984510
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x2b0]
push edi
lea edx, [esp + 0x50]
push edx
mov edx, dword [esi*4 + 0x3a755ac]
lea eax, [esp + 0x4c]
push eax
push ecx
push edx
lea eax, [esp + 0x64]
push eax
call fcn.039649f0
add esp, 0x24
cmp eax, 1
je 0x39909b4
test eax, eax
jne 0x3990875
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test dl, 1
je 0x39906c6
test edi, edi
je 0x39906c6
push esi
push str._File_path_located_in_view__d_
push edi
call fcn.039f0800
add esp, 0xc
push edi
lea eax, [esp + 0x80]
push eax
mov eax, dword [esi*4 + 0x3a755ac]
lea ecx, [esp + 0x5e0]
push ecx
lea edx, [esp + 0x8c]
push edx
push 0
push 1
push 0
push 0x3a3ad58
push eax
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x60]
mov dword [esp + 0xa4], 0x60
call fcn.03964240
test eax, eax
je 0x3990747
test esi, esi
jne 0x39908a2
cmp dword [esp + 0x30], esi
je 0x39908a2
push 0x60
lea edx, [esp + 0x5dc]
push esi
push edx
call fcn.03a01b70
add esp, 0xc
mov byte [esp + 0x5d8], 1
mov dword [esp + 0x5dc], 1
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x3990769
test edi, edi
je 0x3990769
push esi
push str._File_MetaData_located_in_view__d_
push edi
call fcn.039f0800
add esp, 0xc
mov eax, dword [esp + 0x2c]
and eax, 0x40000116
mov dword [esp + 0x64], eax
je 0x3990c5c
push 0x3a78e6c
xor bl, bl
call dword [0x3a5ff28]
mov ecx, dword [0x3a78ec0]
mov eax, dword [ecx]
mov edx, dword [0x3a78ea8]
mov ebp, dword [0x3a6018c]
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], eax
mov ecx, dword [0x3a78ea8]
mov eax, dword [0x3a78ec0]
lea edx, [esp + 0x74]
mov dword [esp + 0x68], ecx
push edx
lea ecx, [esp + 0x6c]
mov dword [esp + 0x70], eax
call fcn.03942ae0
test al, al
je 0x399080a
lea ecx, [esp + 0x74]
call fcn.03943180
mov eax, dword [eax + 4]
cmp dword [eax], 1
jne 0x39907fd
mov edi, dword [esp + 0xb8]
lea ecx, [esp + 0x74]
call fcn.03943180
mov eax, dword [eax + 4]
add eax, 4
mov eax, dword [eax]
push edi
push eax
call ebp
test eax, eax
jne 0x39907fd
mov bl, 1
lea ecx, [esp + 0x74]
call fcn.03941600
test bl, bl
je 0x39907a5
push 0x3a78e6c
call dword [0x3a5ff24]
test bl, bl
je 0x3990c5c
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
test cl, 1
je 0x399084a
mov eax, dword [esp + 0x14]
test eax, eax
je 0x399084a
mov edx, dword [esp + 0xb8]
push edx
push str.___ls_cannot_be_opened_for_write_access_since_it_is_already_open_as_embedded_
push eax
call fcn.039f0800
add esp, 0xc
push 0x20
mov eax, dword [esp + 0x20]
mov dword [eax], 0xffffffff
call dword [0x3a5fde0]
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
jmp 0x399098a
cmp eax, 2
jne 0x39908a2
test esi, esi
jne 0x39908a2
mov edx, dword [0x3a755ac]
mov eax, dword [esp + 0x38]
push edx
push eax
lea ecx, [esp + 0x4c]
call fcn.0394edf0
mov ecx, dword [eax]
and cl, 7
cmp cl, 4
jne 0x39908a2
mov esi, 2
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
jmp 0x39908e2
cmp edi, 2
jne 0x39908e2
test esi, esi
jne 0x39908e2
mov edx, dword [0x3a755ac]
mov eax, dword [esp + 0x38]
push edx
push eax
lea ecx, [esp + 0x4c]
call fcn.0394edf0
mov ecx, dword [eax]
and cl, 7
cmp cl, 4
jne 0x39908e2
mov esi, edi
inc esi
cmp esi, 2
jl 0x39905b3
cmp byte [esp + 0x1b], 0
jne 0x39912d4
lea ecx, [esp + 0x2a4]
call fcn.039efdc0
mov byte [esp + 0x918], 0x10
lea ecx, [esp + 0x534]
call fcn.039efdc0
mov byte [esp + 0x918], 0x11
mov eax, dword [esp + 0x200]
push 0
push 0
push 0
lea edx, [esp + 0x540]
push edx
push eax
call fcn.03976d20
add esp, 0x14
test al, al
je 0x399125a
lea ecx, [esp + 0x534]
push ecx
jmp 0x3991262
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
test cl, 1
je 0x3990978
mov eax, dword [esp + 0x14]
test eax, eax
je 0x3990978
push esi
push str.__dir_found_deleted_in_View__d_
push eax
call fcn.039f0800
add esp, 0xc
push 3
call dword [0x3a5fde0]
mov edx, dword [esp + 0x1c]
mov dword [edx], 0xffffffff
mov byte [esp + 0x918], 7
lea ecx, [esp + 0x44]
call fcn.0394fcd0
mov byte [esp + 0x918], 6
lea ecx, [esp + 0x3ec]
call fcn.039ef660
jmp 0x39904b0
mov eax, dword [esp + 0x930]
cmp eax, 3
je 0x3990c0f
cmp eax, 5
je 0x3990c0f
mov eax, dword [esp + 0x200]
push edi
push eax
lea ecx, [esp + 0x4c]
push ecx
call fcn.0398d5e0
add esp, 0xc
test al, al
jne 0x3990a3b
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x3990a10
test edi, edi
je 0x3990a10
mov ecx, dword [esp + 0x200]
push ecx
push str.__CreateSandboxDirectory_failed_for__ls_
push edi
call fcn.039f0800
add esp, 0xc
push 5
call dword [0x3a5fde0]
mov edx, dword [esp + 0x1c]
mov dword [edx], 0xffffffff
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
jmp 0x399098a
lea ecx, [esp + 0x5d8]
call fcn.039efdc0
mov byte [esp + 0x918], 0xa
mov eax, dword [esp + 0x2a4]
push eax
lea ecx, [esp + 0x5dc]
push ecx
call fcn.0394f4b0
mov ebx, dword [esp + 0x93c]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov ebp, dword [esp + 0x92c]
add esp, 8
push edx
mov edx, dword [esp + 0x92c]
mov eax, ebx
and eax, 0xfbffffff
push eax
mov eax, dword [esp + 0x938]
push eax
mov eax, dword [esp + 0x5e4]
push ecx
push edx
push ebp
push eax
call dword [0x3a5fdb0]
mov ecx, dword [esp + 0x1c]
mov edi, eax
mov dword [ecx], edi
cmp edi, 0xffffffff
je 0x3990bb5
test ebx, 0x4000000
je 0x3990acf
mov ecx, dword [esp + 0xb8]
mov eax, ebp
mov edx, ebx
call fcn.0398a780
mov edi, dword [esp + 0x14]
test esi, esi
jne 0x3990b2b
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x3990afd
test edi, edi
je 0x3990afd
mov ecx, dword [esp + 0x28]
push ecx
push str._removing_previously_deleted_entry__ls_
push edi
call fcn.039f0800
add esp, 0xc
mov edx, dword [esp + 0x28]
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x3990b06
push 0
sub eax, esi
sar eax, 1
push eax
push edx
push 0
push 0
lea edx, [esp + 0x58]
push edx
lea ecx, [esp + 0x50]
call fcn.03961e30
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3ec]
push eax
push ecx
lea edx, [esp + 0x4c]
push edx
call fcn.0398ce00
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
add esp, 0xc
test cl, 1
je 0x3990b73
test edi, edi
je 0x3990b73
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x3ec]
push edx
push eax
push str._Wrote_SandboxRecord__ls_ls_
push edi
call fcn.039f0800
add esp, 0x10
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi]
push ecx
call fcn.03988de0
add esp, 4
test eax, eax
jne 0x3990ba2
mov ecx, dword [esp + 0xb8]
mov edi, dword [esi]
mov eax, ebp
mov edx, ebx
call fcn.0398a7a0
push 0
call dword [0x3a5fde0]
jmp 0x3990be2
push eax
call fcn.03986590
add esp, 4
push 0
call dword [0x3a5fde0]
jmp 0x3990be2
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x3990be2
mov eax, dword [esp + 0x14]
test eax, eax
je 0x3990be2
mov ecx, dword [esp + 0x5d8]
push ecx
push str.__CCreateFile_failed_for_sandbox_path__ls_
push eax
call fcn.039f0800
add esp, 0xc
mov byte [esp + 0x918], 9
lea ecx, [esp + 0x5d8]
call fcn.039ef660
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
jmp 0x399098a
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x3990c31
test edi, edi
je 0x3990c31
push esi
push str.___found_deleted_in_View__d_and_OPEN_EXISTING__TRUNCATE_EXISTING_specified_
push edi
call fcn.039f0800
add esp, 0xc
push 2
call dword [0x3a5fde0]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0xffffffff
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
jmp 0x399098a
cmp dword [esp + 0x64], 0
je 0x3990e3a
test esi, esi
jne 0x3990e4d
cmp byte [esp + 0x5d8], 1
jne 0x3990e4d
lea ecx, [esp + 0x534]
call fcn.039efdc0
mov byte [esp + 0x918], 0xd
mov edx, dword [esp + 0x2a4]
push edx
lea eax, [esp + 0x538]
push eax
call fcn.0394f4b0
mov ecx, dword [esp + 0x44]
add esp, 8
push ecx
call dword [0x3a5fde0]
lea ecx, [esp + 0x7c4]
call fcn.039efdc0
mov byte [esp + 0x918], 0xe
mov eax, dword [esp + 0x534]
lea edx, [esp + 0x7c4]
push edx
push eax
call fcn.039f8d10
mov ebp, dword [esp + 0x93c]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x938]
mov ebx, dword [esp + 0x92c]
add esp, 8
push ecx
mov ecx, dword [esp + 0x92c]
mov eax, ebp
and eax, 0xfbffffff
push eax
mov eax, dword [esp + 0x28]
push edx
mov edx, dword [esp + 0x7d0]
push eax
push ecx
push ebx
push edx
call dword [0x3a5fdb0]
mov esi, dword [esp + 0x1c]
mov edi, eax
mov dword [esi], edi
cmp edi, 0xffffffff
je 0x3991205
test ebp, 0x4000000
je 0x3990d48
mov ecx, dword [esp + 0xb8]
mov eax, ebx
mov edx, ebp
call fcn.0398a780
mov eax, dword [esi]
cmp eax, 0xffffffff
je 0x3991205
test ebp, 0x2000000
je 0x3990d8a
lea ecx, [esp + 0x84]
push ecx
push eax
call dword [0x3a60164]
test eax, eax
je 0x3990d8a
test byte [esp + 0x84], 0x10
je 0x3990d8a
mov ecx, dword [esp + 0xb8]
mov edi, dword [esi]
mov eax, ebx
mov edx, ebp
call fcn.0398a790
cmp dword [esi], 0xffffffff
je 0x3991205
mov eax, dword [esp + 0x930]
cmp eax, 4
je 0x3990da4
cmp eax, 2
jne 0x3990e07
lea ecx, [esp + 0x720]
call fcn.039efdc0
mov byte [esp + 0x918], 0xf
mov ecx, dword [esp + 0x2a4]
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x724]
push eax
push ecx
call fcn.03973bd0
add esp, 0xc
test al, al
je 0x3990df3
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x720]
push edx
push eax
lea ecx, [esp + 0x4c]
push ecx
call fcn.0398ce00
add esp, 0xc
mov byte [esp + 0x918], 0xe
lea ecx, [esp + 0x720]
call fcn.039ef660
mov eax, dword [esi]
cmp eax, 0xffffffff
je 0x3991205
push eax
call fcn.03988de0
add esp, 4
test eax, eax
jne 0x39911fc
mov ecx, dword [esp + 0xb8]
mov edi, dword [esi]
mov eax, ebx
mov edx, ebp
call fcn.0398a7a0
jmp 0x3991205
test esi, esi
je 0x39910f3
cmp byte [esp + 0x37], 0
je 0x39910f3
cmp dword [esp + 0x30], 0
jne 0x3990ea4
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0xb8]
push esi
push 0
push ecx
lea edx, [esp + 0x50]
push edx
call fcn.0398f4a0
add esp, 0x10
test al, al
jne 0x3990ea4
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
test cl, 1
je 0x3990e9d
test esi, esi
je 0x3990e9d
mov edx, dword [esp + 0xb8]
push edx
push str.__Unable_to_copy__ls_to_sandbox_
push esi
call fcn.039f0800
add esp, 0xc
push 5
jmp 0x399084c
lea ecx, [esp + 0x534]
call fcn.039efdc0
mov byte [esp + 0x918], 0xb
mov ecx, dword [esp + 0x2a4]
push ecx
lea edx, [esp + 0x538]
push edx
call fcn.0394f4b0
mov esi, dword [esp + 0x93c]
add esp, 8
lea ecx, [esp + 0x720]
and esi, 0xfbffffff
call fcn.039efdc0
mov byte [esp + 0x918], 0xc
mov ecx, dword [esp + 0x534]
lea eax, [esp + 0x720]
push eax
push ecx
call fcn.039f8d10
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x938]
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x930]
mov ebx, dword [0x3a5fdb0]
add esp, 8
push edx
mov edx, dword [esp + 0x928]
push esi
push eax
mov eax, dword [esp + 0x72c]
push ecx
push edi
push edx
push eax
call ebx
mov ebp, dword [esp + 0x1c]
mov dword [ebp], eax
cmp eax, 0xffffffff
jne 0x3990fe4
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0x20]
je 0x3990f79
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x930]
push ecx
mov ecx, dword [esp + 0x928]
push esi
push edx
mov edx, dword [esp + 0xc4]
push eax
push edi
push ecx
push edx
jmp 0x3990fd5
test eax, eax
je 0x3990fda
cmp dword [eax + 4], 0
je 0x3990fda
call dword [0x3a5fd78]
cmp eax, 0x51b
jne 0x3990fda
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 8]
mov eax, dword [esp + 0x930]
push edx
mov edx, dword [esp + 0x928]
push esi
push eax
mov eax, dword [esp + 0x72c]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x74]
push ecx
push edi
push edx
mov dword [esp + 0x80], 0xc
mov dword [esp + 0x84], 0
push eax
call ebx
mov dword [ebp], eax
cmp dword [ebp], 0xffffffff
je 0x399109e
test dword [esp + 0x934], 0x4000000
je 0x399100e
mov eax, dword [esp + 0x924]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x934]
mov edi, dword [ebp]
call fcn.0398a780
mov eax, dword [ebp]
cmp eax, 0xffffffff
je 0x399109e
test dword [esp + 0x934], 0x2000000
je 0x3991061
lea ecx, [esp + 0x84]
push ecx
push eax
call dword [0x3a60164]
test eax, eax
je 0x3991061
test byte [esp + 0x84], 0x10
je 0x3991061
mov eax, dword [esp + 0x924]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x934]
mov edi, dword [ebp]
call fcn.0398a790
mov eax, dword [ebp]
cmp eax, 0xffffffff
je 0x399109e
push eax
call fcn.03988de0
add esp, 4
test eax, eax
jne 0x3991095
mov eax, dword [esp + 0x924]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x934]
mov edi, dword [ebp]
call fcn.0398a7a0
jmp 0x399109e
push eax
call fcn.03986590
add esp, 4
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x39910cb
mov eax, dword [esp + 0x14]
test eax, eax
je 0x39910cb
mov ecx, dword [esp + 0x534]
push ecx
push str._Using_sandbox_copy__ls_
push eax
call fcn.039f0800
add esp, 0xc
mov byte [esp + 0x918], 0xb
lea ecx, [esp + 0x720]
call fcn.039ef660
mov byte [esp + 0x918], 9
lea ecx, [esp + 0x534]
jmp 0x3990bf1
cmp byte [esp + 0x5d8], 1
je 0x3990c7d
mov eax, dword [esp + 0x934]
test eax, 0x4000000
jne 0x3990a10
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x28]
push edx
mov edx, dword [esp + 0x938]
push ecx
mov ecx, dword [esp + 0x934]
push eax
mov eax, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0xd0]
push ecx
push edx
push eax
push esi
lea ecx, [esp + 0x600]
push ecx
call fcn.0398af70
mov bl, al
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
mov byte [esp + 0x918], 7
lea ecx, [esp + 0x44]
call fcn.0394fcd0
mov byte [esp + 0x918], 6
lea ecx, [esp + 0x3ec]
call fcn.039ef660
mov byte [esp + 0x918], 5
lea ecx, [esp + 0x490]
call fcn.039ef660
mov byte [esp + 0x918], 4
lea ecx, [esp + 0x200]
call fcn.039ef660
mov byte [esp + 0x918], 1
lea ecx, [esp + 0xb8]
call fcn.039ef660
mov byte [esp + 0x918], 0
lea ecx, [esp + 0x348]
call fcn.039ef660
mov dword [esp + 0x918], 0xffffffff
lea ecx, [esp + 0x15c]
call fcn.039ef660
mov al, bl
jmp 0x3991a8d
push eax
call fcn.03986590
add esp, 4
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x3991232
mov eax, dword [esp + 0x14]
test eax, eax
je 0x3991232
mov ecx, dword [esp + 0x534]
push ecx
push str._Using_sandbox_copy__ls_
push eax
call fcn.039f0800
add esp, 0xc
mov byte [esp + 0x918], 0xd
lea ecx, [esp + 0x7c4]
call fcn.039ef660
mov byte [esp + 0x918], 9
lea ecx, [esp + 0x534]
jmp 0x3990bf1
lea edx, [esp + 0x200]
push edx
lea ecx, [esp + 0x2a8]
call fcn.039360d0
mov eax, dword [esp + 0x2a4]
push 4
push 0x10
push eax
call fcn.03974d90
add esp, 0xc
test al, al
jne 0x39912ac
mov ecx, dword [esp + 0x1c]
push 3
mov dword [ecx], 0xffffffff
call dword [0x3a5fde0]
mov byte [esp + 0x918], 0x10
lea ecx, [esp + 0x534]
jmp 0x3990bf1
mov byte [esp + 0x918], 0x10
lea ecx, [esp + 0x534]
call fcn.039ef660
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
xor al, al
test ebx, ebx
je 0x39912e3
cmp ebx, 2
jne 0x399136a
mov edx, dword [0x3a75168]
mov eax, dword [edx]
shr eax, 0x15
test al, 1
je 0x399130e
cmp dword [esp + 0x14], 0
je 0x399130e
mov ecx, dword [0x3a56b80]
push ecx
mov ecx, dword [esp + 0x18]
push str._passing_to_system__isolation_system_or_isolation_merged_found_
call fcn.039efdd0
cmp ebx, 2
jne 0x3991368
mov edx, dword [esp + 0x200]
push 4
push 0x90
push edx
call fcn.03974d90
add esp, 0xc
test al, al
jne 0x3991368
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
test cl, 1
je 0x3991356
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x3991356
mov edx, dword [0x3a56b80]
push edx
push str._Parent_directory_didnt_exist_on_system__creating_
call fcn.039efdd0
mov eax, dword [esp + 0x200]
push 0
push eax
call fcn.03986370
add esp, 8
mov al, 1
cmp ebx, 1
jne 0x39913af
test dword [esp + 0x2c], 0x40000116
jne 0x39913af
cmp dword [esp + 0x930], 3
jne 0x39913af
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test bl, dl
je 0x39913b7
cmp dword [esp + 0x14], 0
je 0x39913b7
mov eax, dword [0x3a56b80]
mov ecx, dword [esp + 0x14]
push eax
push str._system_probe__isolation_writecopy_found_with_read_only_access_
call fcn.039efdd0
jmp 0x39913b7
test al, al
je 0x399156d
mov ecx, dword [esp + 0x3c]
mov ebx, dword [0x3a5fde0]
push ecx
call ebx
test byte [esp + 0x944], 4
jne 0x399140c
mov byte [esp + 0x918], 7
lea ecx, [esp + 0x44]
call fcn.0394fcd0
mov byte [esp + 0x918], 6
lea ecx, [esp + 0x3ec]
call fcn.039ef660
mov byte [esp + 0x918], 5
lea ecx, [esp + 0x490]
call fcn.039ef660
jmp 0x39919b2
lea ecx, [esp + 0x2a4]
call fcn.039efdc0
mov byte [esp + 0x918], 0x12
mov eax, dword [esp + 0xb8]
lea edx, [esp + 0x2a4]
push edx
push eax
call fcn.039f8d10
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x93c]
mov eax, dword [esp + 0x938]
mov esi, dword [esp + 0x930]
mov ebp, dword [esp + 0x34]
mov edi, dword [0x3a5fdb0]
add esp, 8
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x2ac]
push eax
push ecx
push esi
push ebp
push edx
call edi
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
cmp eax, 0xffffffff
jne 0x3990bf6
test ebp, 0x40000116
jne 0x39914f0
call dword [0x3a5fd78]
cmp eax, 0x20
jne 0x39914f0
mov eax, dword [esp + 0x2a4]
push 1
lea edx, [esp + 0x40]
push edx
push eax
mov dword [esp + 0x48], 0
call fcn.03943ef0
add esp, 0xc
test al, al
je 0x39914ec
cmp dword [esp + 0x3c], 0
je 0x39914ec
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x934]
mov eax, dword [esp + 0x930]
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [esp + 0x2ac]
push eax
push ecx
or esi, 1
push esi
push ebp
push edx
call edi
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
jmp 0x39914f0
push 0x20
call ebx
mov edx, dword [esp + 0x1c]
cmp dword [edx], 0xffffffff
jne 0x3990bf6
call dword [0x3a5fd78]
cmp eax, 3
jne 0x3990bf6
mov eax, dword [esp + 0x200]
push 7
push 0x10
push eax
call fcn.03974d90
add esp, 0xc
test al, al
je 0x3990bf6
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test dl, 1
je 0x3991550
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x3991550
mov eax, dword [0x3a56b80]
push eax
push str._corrected_error_code_from_PATH_NOT_FOUND_to_FILE_NOT_FOUND_
call fcn.039efdd0
push 2
call ebx
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x2a4]
call fcn.039ef660
jmp 0x399098a
lea ecx, [esp + 0x67c]
call fcn.039efdc0
mov byte [esp + 0x918], 0x13
mov ecx, dword [esp + 0x3ec]
push ecx
lea edx, [esp + 0x680]
push edx
call fcn.0394f4b0
add esp, 8
mov byte [esp + 0x1b], 0
cmp ebx, 3
je 0x39916d8
cmp ebx, 4
je 0x39916d8
mov eax, dword [esp + 0xb8]
push 4
push 0x90
push eax
call fcn.03974d90
add esp, 0xc
test al, al
je 0x39916d8
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test dl, 1
je 0x39915f8
cmp dword [esp + 0x14], 0
je 0x39915f8
mov eax, dword [esp + 0x14]
push str._found_on_system_
push eax
call fcn.039f0800
add esp, 8
mov eax, dword [esp + 0x930]
cmp eax, 1
jne 0x3991656
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test al, dl
je 0x399162b
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x399162b
mov eax, dword [0x3a56b80]
push eax
push str.__CREATE_NEW_specified__failing_
call fcn.039efdd0
push 0x50
call dword [0x3a5fde0]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0xffffffff
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x67c]
call fcn.039ef660
jmp 0x399098a
cmp eax, 2
je 0x39916d8
cmp dword [esp + 0x30], 0
jne 0x39916d3
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0xb8]
push esi
push 1
push edx
lea eax, [esp + 0x50]
push eax
call fcn.0398f4a0
add esp, 0x10
test al, al
jne 0x39916d3
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test dl, 1
je 0x39916a8
test esi, esi
je 0x39916a8
mov eax, dword [0x3a56b80]
push eax
push str.__CopyToSandBox_failed_
mov ecx, esi
call fcn.039efdd0
push 5
call dword [0x3a5fde0]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x67c]
call fcn.039ef660
jmp 0x399098a
mov byte [esp + 0x1b], 1
cmp dword [esp + 0x30], 0
jne 0x3991718
mov edx, dword [esp + 0x67c]
push 0
push edx
call fcn.03986370
add esp, 8
push 0x5c
push 1
lea ecx, [esp + 0x684]
call fcn.039ef1a0
mov eax, dword [0x3a56b80]
mov ecx, dword [esp + 0x28]
push eax
push ecx
lea ecx, [esp + 0x684]
call fcn.039efdd0
mov edx, dword [esp + 0x3c]
push edx
call dword [0x3a5fde0]
mov esi, dword [esp + 0x934]
lea ecx, [esp + 0x868]
and esi, 0xfbffffff
call fcn.039efdc0
mov byte [esp + 0x918], 0x14
mov ecx, dword [esp + 0x67c]
lea eax, [esp + 0x868]
push eax
push ecx
call fcn.039f8d10
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x938]
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x930]
mov ebx, dword [0x3a5fdb0]
add esp, 8
push edx
mov edx, dword [esp + 0x928]
push esi
push eax
mov eax, dword [esp + 0x874]
push ecx
push edi
push edx
push eax
call ebx
mov ebp, dword [esp + 0x1c]
mov dword [ebp], eax
cmp eax, 0xffffffff
jne 0x3991837
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0x20]
je 0x39917cc
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x930]
push ecx
mov ecx, dword [esp + 0x928]
push esi
push edx
mov edx, dword [esp + 0xc4]
push eax
push edi
push ecx
push edx
jmp 0x3991828
test eax, eax
je 0x399182d
cmp dword [eax + 4], 0
je 0x399182d
call dword [0x3a5fd78]
cmp eax, 0x51b
jne 0x399182d
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 8]
mov eax, dword [esp + 0x930]
push edx
mov edx, dword [esp + 0x928]
push esi
push eax
mov eax, dword [esp + 0x874]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x74]
push ecx
push edi
push edx
mov dword [esp + 0x80], 0xc
mov dword [esp + 0x84], 0
push eax
call ebx
mov dword [ebp], eax
cmp dword [ebp], 0xffffffff
je 0x399191c
test dword [esp + 0x934], 0x4000000
je 0x3991861
mov eax, dword [esp + 0x924]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x934]
mov edi, dword [ebp]
call fcn.0398a780
mov eax, dword [ebp]
cmp eax, 0xffffffff
je 0x399191c
test dword [esp + 0x934], 0x2000000
je 0x39918b4
lea ecx, [esp + 0x84]
push ecx
push eax
call dword [0x3a60164]
test eax, eax
je 0x39918b4
test byte [esp + 0x84], 0x10
je 0x39918b4
mov eax, dword [esp + 0x924]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x934]
mov edi, dword [ebp]
call fcn.0398a790
cmp dword [ebp], 0xffffffff
je 0x399191c
cmp byte [esp + 0x1b], 0
jne 0x39918df
mov eax, dword [esp + 0x28]
test eax, eax
je 0x39918df
mov edx, dword [esp + 0x3ec]
push eax
push edx
lea eax, [esp + 0x4c]
push eax
call fcn.0398ce00
add esp, 0xc
mov eax, dword [ebp]
cmp eax, 0xffffffff
je 0x399191c
push eax
call fcn.03988de0
add esp, 4
test eax, eax
jne 0x3991913
mov eax, dword [esp + 0x924]
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x934]
mov edi, dword [ebp]
call fcn.0398a7a0
jmp 0x399191c
push eax
call fcn.03986590
add esp, 4
mov ecx, dword [0x3a75168]
mov edx, dword [ecx]
shr edx, 0x15
test dl, 1
je 0x399195f
mov eax, dword [esp + 0x14]
test eax, eax
je 0x399195f
cmp dword [ebp], 0xffffffff
jne 0x3991949
mov ecx, dword [esp + 0x67c]
push ecx
push str.__CreateFile__ls_failed_
jmp 0x3991956
mov edx, dword [esp + 0x67c]
push edx
push str._using_Sandbox_path__ls_
push eax
call fcn.039f0800
add esp, 0xc
mov byte [esp + 0x918], 0x13
lea ecx, [esp + 0x868]
call fcn.039ef660
mov byte [esp + 0x918], 8
lea ecx, [esp + 0x67c]
call fcn.039ef660
jmp 0x399098a
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
test cl, 1
je 0x39919b2
test edi, edi
je 0x39919b2
mov edx, dword [0x3a56b80]
push edx
push str.__GetFullPathNameW_failed_
mov ecx, edi
call fcn.039efdd0
mov byte [esp + 0x918], 4
lea ecx, [esp + 0x200]
call fcn.039ef660
mov byte [esp + 0x918], 1
lea ecx, [esp + 0xb8]
call fcn.039ef660
mov byte [esp + 0x918], 0
lea ecx, [esp + 0x348]
call fcn.039ef660
mov dword [esp + 0x918], 0xffffffff
lea ecx, [esp + 0x15c]
call fcn.039ef660
xor al, al
jmp 0x3991a8d
mov eax, dword [0x3a75168]
mov ecx, dword [eax]
shr ecx, 0x15
test cl, 1
je 0x3991a34
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x3991a34
mov edx, dword [0x3a56b80]
push edx
push str._Passing_console_stream_to_system_
call fcn.039efdd0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x930]
mov edx, dword [esp + 0x928]
push eax
mov eax, dword [esp + 0x928]
push ebx
push ecx
push ebp
push edx
push eax
push esi
call dword [0x3a5fdb0]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
jmp 0x3991a74
mov edi, dword [esp + 0x1c]
push 5
mov dword [edi], 0xffffffff
call dword [0x3a5fde0]
mov dword [esp + 0x918], 0xffffffff
lea ecx, [esp + 0x15c]
call fcn.039ef660
mov al, 1
mov ecx, dword [esp + 0x910]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8f8]
xor ecx, esp
call fcn.03a00f6a
add esp, 0x908
ret 0x28