Function at 0x1ce8a40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1d538c2
mov eax, dword fs:[0]
push eax
sub esp, 0x2c8
mov eax, dword [0x1d9682c]
xor eax, esp
mov dword [esp + 0x2c4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1d9682c]
xor eax, esp
push eax
lea eax, [esp + 0x2dc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2f4]
mov esi, dword [esp + 0x2ec]
mov edi, dword [esp + 0x2f0]
mov ebp, dword [esp + 0x2f8]
mov dword [esp + 0x14], eax
mov eax, dword [esi]
push eax
mov dword [esp + 0x20], esi
call fcn.01c934c0
add esp, 4
test al, al
jne 0x1ce8ae1
mov ecx, dword [0x1d95168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1ce90f4
test ebp, ebp
je 0x1ce90f4
mov eax, dword [0x1d76b80]
push eax
push str._Passing_network_path_to_system_
mov ecx, ebp
call fcn.01d0fdd0
jmp 0x1ce90f4
lea ecx, [esp + 0x130]
call fcn.01d0fdc0
xor ebx, ebx
mov dword [esp + 0x2e4], ebx
mov eax, dword [esi]
push 1
lea ecx, [esp + 0x134]
push ecx
push eax
call fcn.01ca4510
add esp, 0xc
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x28], ebx
call fcn.01c6ec90
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x34]
call fcn.01c73a00
lea ecx, [esp + 0x34]
call fcn.01c6fd10
xor esi, esi
cmp esi, ebx
jne 0x1ce8b46
test byte [esp + 0x2fc], 2
jmp 0x1ce8b53
cmp esi, 1
jne 0x1ce8b59
test byte [esp + 0x2fc], 1
je 0x1ce8c50
mov ecx, dword [esp + 0x130]
push ebp
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esi*4 + 0x1d955ac]
lea eax, [esp + 0x20]
push eax
push ecx
push edx
lea eax, [esp + 0x48]
push eax
call fcn.01c849f0
add esp, 0x18
cmp eax, 1
je 0x1ce8d0c
cmp eax, ebx
jne 0x1ce8c19
push ebp
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esi*4 + 0x1d955ac]
lea edx, [esp + 0x280]
push edx
lea eax, [esp + 0x38]
push eax
push ebx
push 1
push ebx
push 0x1d5ad58
push ecx
lea edx, [esp + 0x58]
push edx
lea ecx, [esp + 0x40]
mov dword [esp + 0x4c], 0x60
call fcn.01c84240
test eax, eax
jne 0x1ce8c1e
cmp byte [esp + 0x278], 1
je 0x1ce8dd8
mov ecx, dword [0x1d95168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1ce8c01
cmp ebp, ebx
je 0x1ce8c01
push esi
push str._embedded_in_view__d_
push ebp
call fcn.01d10800
add esp, 0xc
push edi
lea ecx, [esp + 0x27c]
call fcn.01c6ec00
mov eax, dword [esp + 0x14]
mov dword [eax], ebx
jmp 0x1ce8f1d
cmp eax, 2
jne 0x1ce8c50
mov eax, dword [esi*4 + 0x1d955ac]
push eax
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x3c]
call fcn.01c6edf0
mov eax, dword [eax]
and eax, 7
cmp eax, 4
je 0x1ce8f4b
cmp eax, 3
jne 0x1ce8c50
cmp esi, 1
je 0x1ce8f4b
inc esi
cmp esi, 2
jl 0x1ce8b38
lea ecx, [esp + 0x1d4]
call fcn.01d0fdc0
mov byte [esp + 0x2e4], 5
mov esi, dword [esp + 0x1c]
mov eax, dword [esi]
push ebx
lea ecx, [esp + 0x1d8]
push ecx
push eax
call fcn.01c93bd0
add esp, 0xc
test al, al
jne 0x1ce8fad
mov eax, dword [esi]
add eax, 8
push eax
call fcn.01cd8cf0
add esp, 4
cmp eax, ebx
je 0x1ce8fa0
cmp eax, 1
je 0x1ce8fa0
lea edx, [esp + 0x2c]
push edx
call dword [0x1d7ffac]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov edx, ecx
mov dword [edi + 8], edx
mov edx, eax
mov dword [edi + 4], eax
mov dword [edi + 0xc], eax
mov dword [edi], ecx
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], edx
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x14]
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], ecx
mov dword [edi + 0x20], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], 0x10
mov dword [edx], ebx
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
jmp 0x1ce8da5
mov ecx, dword [0x1d95168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1ce8d2f
cmp ebp, ebx
je 0x1ce8d2f
push esi
push str.__isolated_or_deleted_in_view__d_
push ebp
call fcn.01d10800
add esp, 0xc
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x8c]
mov dword [esi], 0xc0000034
call fcn.01d0fdc0
mov byte [esp + 0x2e4], 2
cmp dword [esp + 0x300], ebx
je 0x1ce8d96
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
push ebx
lea ecx, [esp + 0x90]
push ecx
push eax
call fcn.01c93bd0
add esp, 0xc
test al, al
je 0x1ce8d96
mov edx, dword [esp + 0x2fc]
mov eax, dword [esp + 0x8c]
push edx
push 0x10
push eax
call fcn.01ce8900
add esp, 0xc
test al, al
jne 0x1ce8d96
mov dword [esi], 0xc000003a
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x8c]
call fcn.01d0f660
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.01c6fcd0
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.01d0f660
mov al, 1
jmp 0x1ce90f6
lea ecx, [esp + 0x8c]
call fcn.01d0fdc0
mov byte [esp + 0x2e4], 3
mov ecx, dword [esp + 0x130]
push ecx
lea edx, [esp + 0x90]
push edx
call fcn.01c6f4b0
mov eax, dword [0x1d95168]
mov ecx, dword [eax]
shr ecx, 0x17
add esp, 8
test cl, 1
je 0x1ce8e2e
cmp ebp, ebx
je 0x1ce8e2e
mov edx, dword [esp + 0x8c]
push edx
push esi
push str._sandbox_in_view__d___ls_
push ebp
call fcn.01d10800
add esp, 0x10
mov ecx, dword [esp + 0x8c]
push ebx
push ebx
lea eax, [esp + 0x24]
push eax
push ecx
call dword [0x1d800e4]
test al, al
jne 0x1ce8ead
cmp ebp, ebx
je 0x1ce8e61
mov edx, dword [esp + 0x8c]
push edx
push str.__Cant_convert__ls_to_Nt_path_
push ebp
call fcn.01d10800
add esp, 0xc
mov eax, dword [esp + 0x14]
mov dword [eax], 0xc0000034
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x8c]
call fcn.01d0f660
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.01c6fcd0
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.01d0f660
mov al, 1
jmp 0x1ce90f6
push edi
lea edx, [esp + 0x58]
lea ecx, [esp + 0x20]
push edx
mov dword [esp + 0x5c], 0x18
mov dword [esp + 0x60], ebx
mov dword [esp + 0x68], 0x40
mov dword [esp + 0x64], ecx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
call dword [0x1d804ec]
cmp eax, ebx
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
jge 0x1ce8efe
cmp ebp, ebx
je 0x1ce8efe
mov edx, dword [0x1d76b80]
push edx
push str.__sandbox_copy_missing_
mov ecx, ebp
call fcn.01d0fdd0
lea eax, [esp + 0x1c]
push eax
call dword [0x1d800dc]
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x8c]
call fcn.01d0f660
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.01c6fcd0
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.01d0f660
mov al, 1
jmp 0x1ce90f6
mov ecx, dword [0x1d95168]
mov edx, dword [ecx]
shr edx, 0x17
test dl, 1
je 0x1ce8f7d
cmp ebp, ebx
je 0x1ce8f7d
cmp eax, 4
mov eax, str.sb_only
je 0x1ce8f6e
mov eax, str.full
push eax
push str.__not_found_and_isolation___ls_
push ebp
call fcn.01d10800
add esp, 0xc
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x8c]
mov dword [esi], 0xc0000034
call fcn.01d0fdc0
mov byte [esp + 0x2e4], 4
jmp 0x1ce8d4d
push ebx
lea ecx, [esp + 0x1d8]
call fcn.01d0fbb0
cmp dword [esp + 0x300], ebx
je 0x1ce90b9
test byte [esp + 0x2fc], 4
je 0x1ce90b9
mov eax, dword [esi]
push eax
lea eax, [esp + 0x88]
push eax
call dword [0x1d7ff88]
push edi
lea edx, [esp + 0x70]
lea ecx, [esp + 0x88]
push edx
mov dword [esp + 0x74], 0x18
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], 0x40
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call dword [0x1d804ec]
mov esi, dword [esp + 0x14]
mov dword [esi], eax
cmp eax, ebx
mov eax, dword [0x1d95168]
mov ecx, dword [eax]
jl 0x1ce9059
shr ecx, 0x17
test cl, 1
je 0x1ce90a5
cmp ebp, ebx
je 0x1ce90a5
mov edx, dword [0x1d76b80]
push edx
push str._system_probe_successed_
mov ecx, ebp
call fcn.01d0fdd0
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
jmp 0x1ce8da5
shr ecx, 0x17
test cl, 1
je 0x1ce9078
cmp ebp, ebx
je 0x1ce9078
mov edx, dword [0x1d76b80]
push edx
push str.__system_probe_failed_
mov ecx, ebp
call fcn.01d0fdd0
cmp dword [esp + 0x1d8], ebx
je 0x1ce90a5
mov eax, dword [esp + 0x2fc]
mov ecx, dword [esp + 0x1d4]
push eax
push 0x10
push ecx
call fcn.01ce8900
add esp, 0xc
test al, al
jne 0x1ce90a5
mov dword [esi], 0xc000003a
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
jmp 0x1ce8da5
mov byte [esp + 0x2e4], 1
lea ecx, [esp + 0x1d4]
call fcn.01d0f660
mov byte [esp + 0x2e4], bl
lea ecx, [esp + 0x34]
call fcn.01c6fcd0
mov dword [esp + 0x2e4], 0xffffffff
lea ecx, [esp + 0x130]
call fcn.01d0f660
xor al, al
mov ecx, dword [esp + 0x2dc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c4]
xor ecx, esp
call fcn.01d20f6a
add esp, 0x2d4
ret