Function at 0x8deee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x9515e2
mov eax, dword fs:[0]
push eax
sub esp, 0x2c8
mov eax, dword [0x99986c]
xor eax, esp
mov dword [esp + 0x2c4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x99986c]
xor eax, esp
push eax
lea eax, [esp + 0x2dc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2f4]
mov esi, dword [esp + 0x2ec]
mov edi, dword [esp + 0x2f0]
mov ebp, dword [esp + 0x2f8]
mov dword [esp + 0x14], eax
mov eax, dword [esi]
push eax
mov dword [esp + 0x20], esi
call fcn.008972a0
add esp, 4
test al, al
jne 0x8def7d
mov ecx, dword [0x998168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x8df588
test ebp, ebp
je 0x8df588
push 0xffffffffffffffff
push str._Passing_network_path_to_system_
mov ecx, ebp
call fcn.0090a030
jmp 0x8df588
lea ecx, [esp + 0x130]
call fcn.0090a020
xor ebx, ebx
mov dword [esp + 0x2e4], ebx
mov eax, dword [esi]
push 1
lea ecx, [esp + 0x134]
push ecx
push eax
call fcn.00865370
add esp, 0xc
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x28], ebx
call fcn.0085f110
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x34]
call fcn.00863ea0
lea ecx, [esp + 0x34]
call fcn.008601c0
xor esi, esi
cmp esi, ebx
jne 0x8defe2
test byte [esp + 0x2fc], 2
jmp 0x8defef
cmp esi, 1
jne 0x8deff5
test byte [esp + 0x2fc], 1
je 0x8df0ec
mov ecx, dword [esp + 0x130]
push ebp
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esi*4 + 0x998258]
lea eax, [esp + 0x20]
push eax
push ecx
push edx
lea eax, [esp + 0x48]
push eax
call fcn.0087aff0
add esp, 0x18
cmp eax, 1
je 0x8df1a8
cmp eax, ebx
jne 0x8df0b5
push ebp
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esi*4 + 0x998258]
lea edx, [esp + 0x280]
push edx
lea eax, [esp + 0x38]
push eax
push ebx
push 1
push ebx
push 0x959de8
push ecx
lea edx, [esp + 0x58]
push edx
lea ecx, [esp + 0x40]
mov dword [esp + 0x4c], 0x60
call fcn.0087a830
test eax, eax
jne 0x8df0ba
cmp byte [esp + 0x278], 1
je 0x8df274
mov ecx, dword [0x998168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x8df09d
cmp ebp, ebx
je 0x8df09d
push esi
push str._embedded_in_view__d_
push ebp
call fcn.0090aa60
add esp, 0xc
push edi
lea ecx, [esp + 0x27c]
call fcn.0085f080
mov eax, dword [esp + 0x14]
mov dword [eax], ebx
jmp 0x8df3b4
cmp eax, 2
jne 0x8df0ec
mov eax, dword [esi*4 + 0x998258]
push eax
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x3c]
call fcn.0085f250
mov eax, dword [eax]
and eax, 7
cmp eax, 4
je 0x8df3e2
cmp eax, 3
jne 0x8df0ec
cmp esi, 1
je 0x8df3e2
inc esi
cmp esi, 2
jl 0x8defd4
lea ecx, [esp + 0x1d4]
call fcn.0090a020
mov byte [esp + 0x2e4], 5
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
push ebx
lea ecx, [esp + 0x1d8]
push ecx
push eax
call fcn.008979c0
add esp, 0xc
test al, al
jne 0x8df444
mov eax, dword [esi]
add eax, 8
push eax
call fcn.008cbec0
add esp, 4
cmp eax, ebx
je 0x8df437
cmp eax, 1
je 0x8df437
lea edx, [esp + 0x2c]
push edx
call dword [0x9824a4]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov edx, ecx
mov dword [edi + 8], edx
mov edx, eax
mov dword [edi + 4], eax
mov dword [edi + 0xc], eax
mov dword [edi], ecx
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], edx
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x14]
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], ecx
mov dword [edi + 0x20], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], 0x10
mov dword [edx], ebx
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
jmp 0x8df241
mov ecx, dword [0x998168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x8df1cb
cmp ebp, ebx
je 0x8df1cb
push esi
push str.__isolated_or_deleted_in_view__d_
push ebp
call fcn.0090aa60
add esp, 0xc
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x8c]
mov dword [esi], 0xc0000034
call fcn.0090a020
mov byte [esp + 0x2e4], 2
cmp dword [esp + 0x300], ebx
je 0x8df232
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
push ebx
lea ecx, [esp + 0x90]
push ecx
push eax
call fcn.008979c0
add esp, 0xc
test al, al
je 0x8df232
mov edx, dword [esp + 0x2fc]
mov eax, dword [esp + 0x8c]
push edx
push 0x10
push eax
call fcn.008deda0
add esp, 0xc
test al, al
jne 0x8df232
mov dword [esi], 0xc000003a
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x8c]
call fcn.009098c0
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.00860180
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.009098c0
mov al, 1
jmp 0x8df58a
lea ecx, [esp + 0x8c]
call fcn.0090a020
mov byte [esp + 0x2e4], 3
mov ecx, dword [esp + 0x130]
push ecx
lea edx, [esp + 0x90]
push edx
call fcn.0085f920
mov eax, dword [0x998168]
mov ecx, dword [eax]
shr ecx, 0x17
add esp, 8
test cl, 1
je 0x8df2ca
cmp ebp, ebx
je 0x8df2ca
mov edx, dword [esp + 0x8c]
push edx
push esi
push str._sandbox_in_view__d___ls_
push ebp
call fcn.0090aa60
add esp, 0x10
mov ecx, dword [esp + 0x8c]
push ebx
push ebx
lea eax, [esp + 0x24]
push eax
push ecx
call dword [0x98252c]
test al, al
jne 0x8df349
cmp ebp, ebx
je 0x8df2fd
mov edx, dword [esp + 0x8c]
push edx
push str.__Cant_convert__ls_to_Nt_path_
push ebp
call fcn.0090aa60
add esp, 0xc
mov eax, dword [esp + 0x14]
mov dword [eax], 0xc0000034
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x8c]
call fcn.009098c0
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.00860180
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.009098c0
mov al, 1
jmp 0x8df58a
push edi
lea edx, [esp + 0x58]
lea ecx, [esp + 0x20]
push edx
mov dword [esp + 0x5c], 0x18
mov dword [esp + 0x60], ebx
mov dword [esp + 0x68], 0x40
mov dword [esp + 0x64], ecx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
call dword [0x9829e4]
cmp eax, ebx
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
jge 0x8df395
cmp ebp, ebx
je 0x8df395
push 0xffffffffffffffff
push str.__sandbox_copy_missing_
mov ecx, ebp
call fcn.0090a030
lea edx, [esp + 0x1c]
push edx
call dword [0x982528]
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x8c]
call fcn.009098c0
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.00860180
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.009098c0
mov al, 1
jmp 0x8df58a
mov ecx, dword [0x998168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x8df414
cmp ebp, ebx
je 0x8df414
cmp eax, 4
mov eax, str.sb_only
je 0x8df405
mov eax, str.full
push eax
push str.__not_found_and_isolation___ls_
push ebp
call fcn.0090aa60
add esp, 0xc
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x8c]
mov dword [esi], 0xc0000034
call fcn.0090a020
mov byte [esp + 0x2e4], 4
jmp 0x8df1e9
push ebx
lea ecx, [esp + 0x1d8]
call fcn.00909e10
cmp dword [esp + 0x300], ebx
je 0x8df54d
test byte [esp + 0x2fc], 4
je 0x8df54d
mov eax, dword [esi]
push eax
lea eax, [esp + 0x88]
push eax
call dword [0x982480]
push edi
lea edx, [esp + 0x70]
lea ecx, [esp + 0x88]
push edx
mov dword [esp + 0x74], 0x18
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], 0x40
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call dword [0x9829e4]
cmp eax, ebx
mov esi, dword [esp + 0x14]
mov dword [esi], eax
jl 0x8df4eb
mov eax, dword [0x998168]
mov ecx, dword [eax]
shr ecx, 0x17
test cl, 1
je 0x8df539
cmp ebp, ebx
je 0x8df539
push 0xffffffffffffffff
push str._system_probe_successed_
mov ecx, ebp
call fcn.0090a030
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
jmp 0x8df241
mov edx, dword [0x998168]
mov eax, dword [edx]
shr eax, 0x17
test al, 1
je 0x8df50c
cmp ebp, ebx
je 0x8df50c
push 0xffffffffffffffff
push str.__system_probe_failed_
mov ecx, ebp
call fcn.0090a030
cmp dword [esp + 0x1d8], ebx
je 0x8df539
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x1d4]
push ecx
push 0x10
push edx
call fcn.008deda0
add esp, 0xc
test al, al
jne 0x8df539
mov dword [esi], 0xc000003a
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
jmp 0x8df241
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
call fcn.009098c0
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.00860180
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.009098c0
xor al, al
mov ecx, dword [esp + 0x2dc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c4]
xor ecx, esp
call fcn.0091b0aa
add esp, 0x2d4
ret