Function at 0x4703f9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test byte [eax], cl
pop ss
invalid
imul ebp, dword [ebx + 0x5e], 0x69
push eax
dec ecx
pop ebx
pop ebp
push ecx
arpl word [eax + 0x4f], sp
js 0x4483d3
pop ecx
bound ebx, qword [ebx + 0x57]
pop esi
pop ebx
push eax
push eax
pop esi
outsd dx, dword [esi]
popal
push eax
outsb dx, byte [si]
pushal
inc ebx
inc ecx
dec ebp
push eax
pop edx
push ebx
outsb dx, byte [esi]
inc eax
inc eax
push ecx
push edi
js 0x44ac2a
push bp
arpl word [ecx + 0x6c], bx
inc eax
jnp 0x44ac48
inc esi
push eax
js 0x44ac25
push esp
inc ebp
bound ebp, qword [ebx + 0x65]
arpl word [ebp + 0x42], sp
pop edi
pop eax
push esp
dec ecx
jns 0x44ac44
insd dword es:[edi], dx
push esp
push edx
dec cx
push edi
arpl word [ecx + 0x47], bp
inc eax
inc ecx
push ebp
inc ecx
dec ecx
push ecx
inc edx
imul ebx, dword [ebx - 1], 0x44812434
and al, 0
push ss
cmp bl, 0xff
add dword [esp + 4], 0xb9
ret
ret
imul eax, dword [edx + 0x66], 0x24ff203c
invalid
add eax, 0x40b5ec
dec esi
ret
add byte [esi - 0x3d], cl
jne 0x44ac5a
add edi, 2
or byte [eax], 8
mov edi, edi
call fcn.00449982
cmp dword [ebp - 0x20], edi
pop ebx
mov edi, 0x101
je 0x44ace4
push esp
pop esi
sub ecx, esi
push ebp
dec edx
popal
cmp dword [esp - 0x14], 0x3a4af9f3
je 0x44ac63
pop ecx
cmp dword [esp + 4], 0x1a4408a9
cmove ecx, eax
pop ecx
cmp eax, 0x805b0c79
cmove edx, eax
pop ebp
cmp ebp, 0x299099f5
cmove ebp, ebp
ret
push ebp
inc ebp
pop edi
lock and edx, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
push eax
bound ebx, qword [ecx - 0x7f]
jl 0x4552dd
add bh, al
fld st(6)
jne 0x455318
invalid
jne 0x455318
mov eax, dword [esi + ecx*4 + 4]
push 0x101
jb 0x4552ba
mov dword [ebp - 0x1c], eax
mov dword [eax], edi
mov dword [ebp - 4], 0xfffffffe
bound ecx, qword [eax + 0x41]
inc ecx
inc ebp
dec edx
inc esi
push 0xffffffffffffffff
adc eax, sym.imp.KERNEL32.dll_FreeEnvironmentStringsA
push eax
dec edx
dec eax
inc edi
bound eax, qword [eax + 0x62]
push 0x5c
jne 0x45537a
push ebx
push ebx
push esi
jne 0x4552ef
ja 0x455311
jmp 0x4552a8
add al, 0x6f
dec edx
inc esi
jne 0x45532d
ret
pop edi
cmp ebp, 0xc45e2cb7
jne 0x45535f
pop eax
dec esi
push esp
dec ecx
arpl word [eax + 0x5e], di
push esi
inc edi
pop esp
push 0x6655645c
inc edi
dec ecx
push esp
push 0x4d676956
arpl word [eax + 0x56], dx
inc edx
outsb dx, byte [esi]
push 0x55604c53
push ebp
jnp 0x455394
push ebp
pop edx
pop edi
pop esi
pop ebx
pop edi
inc ecx
pop esp
dec ebp
push 0x4a594a79
dec eax
jns 0x4553bb
pop ebp
bound edx, qword [ebp + 0x79]
pop esi
pop ebx
cmp eax, 0x3bae3479
cmove esi, esi
pop ebp
cmp dword [esp], 0xf1f9b0df
cmove esi, edi
ret
scasd eax, dword es:[edi]
sub byte [edx], bl
cmp dh, byte [ecx + eax - 0x75]
inc dword [ecx + 0x7f3c247c]
jle 0x4553a9
mov edi, edi
cmp dword [esp + 0x3c], 0xa0207e7f
cmove esi, ebp
push ebp
mov al, byte [0x55f5440f]
cmp eax, 0xbf24eb6b
jne 0x4553f4
pop edi
push 0x63
outsw dx, word [esi]
pop esp
push eax
dec edi
dec eax
bound ebx, qword [ebx + 0x6e]
pop edx
dec edx
pop ecx
inc ebp
dec ebx
js 0x455416
inc eax
pop esi
pop ebp
bound bx, dword [edx + 0x50]
pop edx
push eax
push ecx
pushal
dec esp
pop edi
inc ebx
push edi
push 0x6e505941
push esp
push ecx
push edi
dec esp
push edi
push edi
pop eax
push ebp
dec ebx
push 0x6f
inc edi
push ebp
imul ebx, dword [ebx + 0x78], 0x4c6e467b
jnp 0x455413
outsb dx, byte [esi]
dec esp
inc ebx
dec esp
dec esi
dec edx
dec esi
push ecx
dec edx
inc ecx
dec ecx
imul ebp, dword gs:[eax + edi*2 + 0x65], 0x44
dec edi
pop edi
pop edi
dec esi
insd dword es:[di], dx
inc ecx
dec esi
insb byte es:[edi], dx
dec esp
pop ebx
pop edx
imul edx, dword [edi + 0x6d], 0x697b6c78
inc esp
jns 0x455380
mov ebp, esp
in al, dx
cmp esi, 0x509ffb15
jne 0x45540c
push esp
push 0x58
push 0x464d4549
push 0x43
inc esp
dec esi
push edi
bound edx, qword [ebx - 0x7f]
sti
invalid
push ebx
cmp ebx, 0xaad1ff8f
cmove eax, eax
push esi
cmp ecx, 0x60e17131
jne 0x455483
inc ebx
pop edx
imul ebx, dword [ebx + 0x69], 0x53
push eax
push 0x51
dec esi
push 0x55615c41
inc ecx
pop edi
pop ebp
pop edx
push ebx
dec ecx
push ecx
push esp
dec ebx
imul edx, dword [esi + 0x4f], 0x5265665e
dec edi
pop eax
dec eax
push edx
popal
dec edx
inc ebx
dec edx
inc eax
push edi
popal
push ebx
push esp
pop ebx
dec ebx
outsb dx, byte [esi]
dec esp
push 0x6e
dec eax
dec ebp
pop ebx
pop edx
js 0x4554ae
push eax
inc eax
imul ecx, dword [ebp + 0x64], 0x4d
dec ecx
dec esp
pop ebp
bound edx, qword [ebp + 0x53]
push ecx
push ebp
dec ax
popal
pop ecx
popal
push ebp
inc ebp
js 0x4554d5
pop eax
inc ebp
pop esi
jnp 0x4554cd
bound ebx, qword [esi + 0x67]
outsb dx, byte [esi]
push ebp
push ebx
pop ecx
insd dword es:[edi], dx
pushf
call 0x45548a
mov dword [esp], ebp
call 0x4554b4
test eax, eax
mov eax, ebx
and dword [0x40ac60], 0
push esi
push dword [ebp + 0x1c]
ret
push ecx
jnp 0x4554fa
popal
bound esp, qword [ecx - 0x10]
xchg dword [esp], ebp
lea esp, [esp + 4]
push ecx
lea ecx, [esp + 0xa]
call 0x4554c9
mov dword [esp], eax
push edx
mov eax, ebp
add eax, 0xfffb2bb6
push word [esp + 0x10]
push dword [esp + 0x10]
popf
mov esi, dword [eax]
pop edx
mov eax, dword [esp]
lea esp, [esp + 4]
lock xchg dword [esp], ecx
lea esp, [esp + 4]
lock xchg dword [esp], ebp
lea esp, [esp + 4]
lea esp, [esp + 2]
and al, 2
cmp ebx, 0x53e9f01
cmove ecx, ebx
push edi
cmp dword [esp + 0x54], 0x5d3e5121
pop ebp
je 0x45550d
mov edi, dword [ebp + 8]
cmp dword [esp - 0x10], 0xec9f3b0b
je 0x43bbaa
push edi
cmp dword [esp + 0x68], 0x333cabd5
cmove edx, edx
call esi
mov eax, dword [edi + 0xb0]
test eax, eax
push ebp
push edi
push ebp
push ecx
push edi
push 0xae68
push ebx
pushal
inc ebp
popal
imul ebx, dword [esi + 0x4c], 0x6a
outsb dx, byte [esi]
push 0x6e
pop ebx
bound esp, qword [ebx - 1]
jne 0x470388
cmp dword [esp + 0x20], 0x7c70e307
jne 0x470400
cmp ecx, dword [ebx + 8]
neg eax
pushal
push ebx
movzx eax, di
pop edx
push esi
push eax
inc eax
push edi
popal
shl esi, 6
push ebx
push dword [0x40b444]
push ebp
add edi, 2
pop esi
pop edi
pop ecx
push 0x5a5a6851
dec esp
inc ebx
lea esi, [ebp - 0x11]
push eax
jmp 0x4703e7
push eax
mov ebp, esp
jne 0x4703f2
mov dword [ebp - 0x18], ecx
insd dword es:[edi], dx
pop edx
dec ebx
push esp
dec esp
mov ecx, dword [edi - 4]
je 0x470425
mov eax, dword [0x40a004]
inc eax
pop ecx
push eax
cmp dword [esp + 0x28], 0x3262ab75
cmove ebx, edx
push dword [ebp - 0xc]
cmp dword [esp + 0x1c], 0xa5e27cb7
je 0x494cec
push edi
push ebx
cmp dword [esp + 0x14], 0x87becd17
je 0x4552be
mov esi, 0x91840f87
dec esi
invalid
push ebx
cmp dword [esp + 0x18], 0x2a85fc51
je 0x48c5c8
call esi
test eax, eax
push 0xe49971cb
lea esp, [esp - 2]
mov word [esp], ax
lahf
lock xchg word [esp], ax
push ebx
call 0x4704bd
push ebx
dec eax
outsd dx, dword [esi]
pop esi
pop esi
dec edi
push 0x55
pop ebx
inc edi
insb byte es:[edi], dx
inc ebp
js 0x4704e2
inc esp
pop ebp
push eax
inc esp
dec ebx
insd dword es:[edi], dx
dec ebx
push ebp
pop ebx
push edx
pop ecx
dec esi
push 0x58
pop eax
dec eax
inc edx
pop eax
arpl word [ebx + 0x48], dx
dec esp
pop edi
push ecx
dec ebp
js 0x4704ec
arpl word [edi + 0x66], cx
inc edi
imul eax, dword [eax + eax*2 + 0x50], 0x56
js 0x4704f1
insb byte es:[edi], dx
dec ecx
jns 0x4704ee
jnp 0x4704ec
pop ecx
dec esi
push esp
dec ecx
arpl word [eax + 0x4b], bp
imul edx, dword [esi + edx*2 + 0x56], 0x4b
dec ecx
inc edx
dec esi
inc ebx
dec edi
inc ecx
insd dword es:[edi], dx
push edx
pop ecx
js 0x470525
push ebp
js 0x4704fb
dec edx
dec ecx
push eax
imul ebx, dword [ebp + 0x59], 0x69
push ebx
push ecx
inc eax
push edx
push 0x48
lock xchg dword [esp], ebx
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0xe4997194
cmovne eax, dword [esp + 0xa]
lea eax, [ebx + eax + 0x1b668f59]
mov dword [esp + 0xa], eax
mov eax, dword [esp]
add al, 0x24
lea esp, [esp + 4]
lock xchg dword [esp], ebx
lea esp, [esp + 4]
and al, 4
lock xchg word [esp], ax
lock xchg dword [esp], eax
sahf
mov ax, word [esp]
lea esp, [esp + 2]
and al, 2
ret
imul edx, dword [ebx + 0x62], 0x6c6b575f
imul esp, dword [eax + 0x54], 0x564f4956
push ebx
inc edx
dec ebx
dec ebx
dec edx
popal
insb byte es:[edi], dx
push esp
outsb dx, byte [esi]
push eax
jns 0x47058c
imul eax, dword [ecx + 0x56], 0x7b695a42
cmp dword [esp - 8], 0xb47678e5
je 0x47053a
push dword [ebp - 4]
cmp dword [esp + 0x5c], 0xa784a7a9
je 0x44835a
call fcn.0047a1ee
cmp dword [esp + 0x54], 0x82bee5f7
cmove ebp, ebx
pop ecx
cmp esi, 0xe4111cf9
je 0x47059a
mov dword [ebp - 4], ebx
cmp ebp, 0xc50f797d
je 0x44abc0
mov ebx, dword [ebp - 4]
cmp dword [esp + 0x1c], 0x21efb811
cmove eax, ebx
push edi
cmp ebp, 0xca52febd
cmove eax, esi
call 0x470610
popal
pop edi
dec ebx
inc esi
arpl word [eax + 0x4a], bp
dec ebp
pop eax
push ebx
pop ecx
push 0x5f
inc ecx
inc ebx
js 0x470613
mov ebp, 0xfca52fe
inc esp
invalid
push edi
dec edi
inc edx
inc ebx
push 0x695b425c
inc esp
inc ebp
pop eax
dec eax
dec edx
arpl word [ecx + 0x66], di
pop edi
jns 0x470615
inc edi
pushal
pop ecx
imul ebp, dword [edx + 0x4a], 0x694e565a
insb byte es:[edi], dx
pop ebx
push edi
pop edx
inc ebp
push ebx
push eax
insb byte es:[di], dx
dec edx
push esp
pop ebx
arpl word [ecx + 0x43], bx
insd dword es:[edi], dx
inc ebp
bound ebx, qword [edx + 0x60]
dec edx
insd dword es:[edi], dx
arpl word [edi + 0x4a], ax
arpl word [ebx + 0x5e], bx
outsd dx, dword [esi]
push esi
dec ecx
inc esi
push si
inc ebp
inc ebx
push ebx
pop edi
push 0x41
pop ebx
pushal
pushal
dec ebx
dec edi
inc esi
insd dword es:[edi], dx
inc eax
dec esp
dec esp
outsd dx, dword [esi]
pop eax
dec ebx
push dword fs:[esp]
push edx
add dword [esp + 4], 0xfff97af2
mov edx, dword [esp + 4]
mov edx, dword [edx]
mov dword [esp + 4], edx
add dword [esp + 8], 0x91
lock xchg dword [esp], edx
inc esp
and al, 4
bnd jp 0x470614
dec dword [ebx - 0x74fbdbac]
adc cl, byte [ecx - 0x7efbdbac]
inc esp
and al, 8
xchg ecx, eax
add byte [eax], al
add al, dh
xchg dword [esp], edx
lea esp, [esp + 4]
ret
or byte [ebx + 0x405714c4], al
push 0xffffffffffffff88
inc edi
add bl, byte [ebp + 0x48]
push ecx
insd dword es:[edi], dx
js 0x48c640
add byte [eax], al
adc byte [eax], al
cmp byte [ebp + 0x13], 0
ret
imul ecx, dword [edi + 0x58], 0x42
pop esi
popal
dec edx
imul ecx, dword [ebp + 0x62], 0x605a5940
push ebx
inc ebx
push ebp
popal
push edi
imul edx, dword [esi + 0x54], 0x66
arpl word [eax + 0x6e], cx
inc eax
dec ebx
inc esi
inc ebx
pop eax
dec esp
popal
insd dword es:[edi], dx
dec ecx
push edx
pop ebp
cmp dword [esp + 0x3c], 0x99004c0b
cmove ecx, ebp
ret
je 0x494cf8
push edi
outsb dx, byte [esi]
imul ebx, dword [ecx - 9], 0xfffffff1
pop esp
outsb dx, byte [esi]
jnp 0x494d55
pop esp
insb byte es:[edi], dx
pop ebx
pop ebp
push edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
inc ebp
push esp
pushal
mov dword [ebx + 4], edi
pop ebx
and dword [ecx + 4], ebx
cmp dword [ebp - 0x18], 1
dec edi
pop esp
je 0x494d26
test edi, edi
push ebx
cmp eax, ecx
je 0x494da5
inc edi
js 0x494d7c
adc byte [eax], al
add byte [eax], al
add al, ch
cmp al, 0x2a
add byte [eax], al