Function at 0xbf7f20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0xccff6b
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
mov eax, dword [0xcff584]
xor eax, esp
mov dword [esp + 0xa8], eax
push ebx
push esi
push edi
mov eax, dword [0xcff584]
xor eax, esp
push eax
lea eax, [esp + 0xc0]
mov dword fs:[0], eax
mov edi, ecx
xor esi, esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], esi
cmp edi, esi
jne 0xbf7f78
lea eax, [esi + 0x57]
jmp 0xbf83dc
mov ebx, dword [edi + 0x14]
cmp ebx, esi
jne 0xbf7f87
mov eax, dword [0xd072c8]
mov ebx, dword [eax + 0x14]
mov dword [esp + 0xc8], esi
lea ecx, [esp + 0x4c]
mov dword [esp + 0x48], vtable.tpsp::FUNCUNINJECT.0
call fcn.00c9e720
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x68], esi
mov byte [esp + 0xc8], 2
mov ecx, dword [0xd072cc]
mov edx, dword [0xd072d0]
mov dword [esp + 0x50], ecx
mov eax, 0xd006e0
mov ecx, ebx
lea ebx, [esp + 0x48]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x70], esi
call fcn.00c1ae50
xor ecx, ecx
mov dword [esp + 0xc8], 3
mov eax, dword [edi + 0xc]
push 0xffffffffffffffff
push ecx
mov dword [esp + 0x8c], ecx
mov byte [esp + 0x7c], cl
push eax
lea ecx, [esp + 0x80]
mov dword [esp + 0x94], 0xf
call fcn.00be2c50
mov byte [esp + 0xc8], 4
mov eax, dword [esp + 0x64]
xor ecx, ecx
inc eax
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00c630b5
mov ebx, dword [esp + 0x78]
add esp, 4
cmp dword [esp + 0x88], 0x10
mov edi, eax
mov dword [esp + 0x20], edi
jae 0xbf805b
lea ebx, [esp + 0x74]
lea esi, [esp + 0x18]
call fcn.00be4ea0
mov ebx, dword [esp + 0x58]
cmp dword [ebx + 0x10], 0
mov dword [esp + 0x28], eax
jne 0xbf8076
xor ebx, ebx
jmp 0xbf807e
cmp dword [ebx + 0x14], 0x10
jb 0xbf807e
mov ebx, dword [ebx]
lea esi, [esp + 0x18]
call fcn.00be4ea0
mov ebx, dword [esp + 0x5c]
cmp dword [ebx + 0x10], 0
mov dword [esp + 0x24], eax
jne 0xbf8099
xor ebx, ebx
jmp 0xbf80a1
cmp dword [ebx + 0x14], 0x10
jb 0xbf80a1
mov ebx, dword [ebx]
lea esi, [esp + 0x18]
call fcn.00be4ea0
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
xor ecx, ecx
xor esi, esi
cmp eax, ecx
jle 0xbf8137
mov bl, 5
cmp esi, eax
jl 0xbf80ff
push 0x265
push str.D:workTpsp
push 3
lea ecx, [esp + 0x9c]
mov byte [esp + 0x1f], 0
call fcn.00c7b6d0
mov byte [esp + 0xc8], bl
or dword [esp + 0x14], 1
push str.CHECK_failed:__index_____size___:
mov ecx, eax
call fcn.00c7b9c0
push eax
lea ecx, [esp + 0x17]
call fcn.00c7bc10
mov dword [esp + 0xc8], 4
test byte [esp + 0x14], 1
je 0xbf8122
and dword [esp + 0x14], 0xfffffffe
lea ecx, [esp + 0x90]
call fcn.00c7b700
mov eax, dword [esp + 0x60]
mov ecx, dword [eax + esi*4]
mov dword [edi + esi*4], ecx
mov eax, dword [esp + 0x64]
inc esi
cmp esi, eax
jl 0xbf80ff
xor ecx, ecx
mov dword [edi + esi*4], ecx
mov edi, dword [esp + 0x1c]
movzx eax, byte [edi + 0x1c]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x40], 0
mov dword [esp + 0x44], ecx
cmp eax, ecx
je 0xbf81b6
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x44], eax
test eax, eax
jne 0xbf8172
xor al, al
jmp 0xbf81a1
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.Wow64DisableWow64FsRedirection
push eax
call ebx
mov dword [esp + 0x2c], eax
test eax, eax
jne 0xbf818c
xor al, al
jmp 0xbf81a1
mov edx, dword [esp + 0x44]
push str.Wow64RevertWow64FsRedirection
push edx
call ebx
test eax, eax
mov dword [esp + 0x30], eax
setne al
mov byte [esp + 0x40], al
test al, al
je 0xbf81b6
lea eax, [esp + 0x38]
push eax
call dword [esp + 0x30]
mov dword [esp + 0x3c], eax
mov byte [esp + 0xc8], 6
push 4
push 0xceed80
lea ecx, [esp + 0x98]
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], 0
mov byte [esp + 0x98], 0
call fcn.00be2a60
mov byte [esp + 0xc8], 7
cmp dword [esp + 0xa4], 0x10
mov ecx, dword [edi + 0x18]
mov edx, dword [esp + 0x90]
mov dword [esp + 0x1c], ecx
jae 0xbf8216
lea edx, [esp + 0x90]
mov eax, dword [esp + 0x54]
mov ebx, dword [eax + 0x10]
mov edi, dword [esp + 0xa0]
mov ecx, ebx
cmp ebx, edi
jb 0xbf822c
mov ecx, edi
cmp dword [eax + 0x14], 0x10
jb 0xbf8234
mov eax, dword [eax]
push ecx
push edx
push eax
call fcn.00be2790
add esp, 0xc
test eax, eax
jne 0xbf8255
cmp ebx, edi
jae 0xbf824c
or eax, 0xffffffff
jmp 0xbf8253
xor eax, eax
cmp ebx, edi
setne al
test eax, eax
mov ecx, dword [esp + 0x50]
sete al
cmp dword [ecx + 0x14], 0x10
jb 0xbf8264
mov ecx, dword [ecx]
mov edx, dword [esp + 0x1c]
neg esi
sbb esi, esi
and esi, dword [esp + 0x20]
push edx
movzx eax, al
push esi
push eax
call fcn.00be6f30
mov ebx, dword [esp + 0x24]
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
push eax
call fcn.00bf3ff0
mov ebx, 0x10
add esp, 0x10
mov byte [esp + 0xc8], 6
cmp dword [esp + 0xa4], ebx
jb 0xbf82b6
mov ecx, dword [esp + 0x90]
push ecx
call fcn.00c625e4
add esp, 4
xor edi, edi
mov byte [esp + 0xc8], 4
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], edi
mov byte [esp + 0x90], 0
cmp dword [esp + 0x34], edi
je 0xbf831d
cmp dword [esp + 0x3c], edi
je 0xbf8307
lea edx, [esp + 0x38]
push edx
call dword [esp + 0x34]
test eax, eax
jne 0xbf8307
push 0x69
push str...Coreutility_common.cpp
push 0xcee244
call fcn.00c63c57
add esp, 0xc
cmp byte [esp + 0x40], 0
je 0xbf831d
mov eax, dword [esp + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esp + 0x44], edi
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00c63498
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.00c63498
mov eax, dword [esp + 0x2c]
add esp, 4
push eax
call fcn.00c63498
mov ecx, dword [esp + 0x24]
add esp, 4
push ecx
call fcn.00c63498
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov byte [esp + 0xc8], 3
mov esi, eax
cmp dword [esp + 0x88], ebx
jb 0xbf8377
mov edx, dword [esp + 0x74]
push edx
call fcn.00c625e4
add esp, 4
mov dword [esp + 0x88], 0xf
mov dword [esp + 0x84], edi
mov byte [esp + 0x74], 0
mov dword [esp + 0x48], vtable.tpsp::FUNCUNINJECT.0
lea edi, [esp + 0x48]
mov dword [esp + 0xc8], 0xa
call fcn.00c1a830
mov eax, dword [esp + 0x60]
push eax
call fcn.00c63498
add esp, 4
lea ecx, [esp + 0x4c]
mov byte [esp + 0xc8], 8
call fcn.00c9ead0
mov ecx, edi
mov dword [esp + 0xc8], 0xffffffff
call fcn.00c7c7c0
mov eax, esi
mov ecx, dword [esp + 0xc0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa8]
xor ecx, esp
call fcn.00c62239
mov esp, ebp
pop ebp
ret