Function at 0x473ce0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x11b0
call fcn.0047aea0
push ebx
push ebp
push esi
mov esi, dword [esp + 0x11c0]
mov ebp, dword [esi + 4]
xor ebx, ebx
push 0xfff
lea eax, [esp + 0x1c1]
push ebx
push eax
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1c8], bl
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0x68]
add esp, 0xc
cmp eax, 0xbb8
jae 0x4740d3
push edi
push eax
lea ecx, [ebp + 0xa0]
push ecx
lea edx, [esp + 0x1c8]
push edx
call sub.msvcrt.dll_memcpy
xor eax, eax
push 0x3f
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov word [esp + 0x3d], ax
mov byte [esp + 0x3f], al
lea eax, [esp + 0x45]
push ebx
push eax
mov byte [esp + 0x34], bl
mov byte [esp + 0x4c], bl
call sub.msvcrt.dll_memset
mov ecx, dword [ebp + 0x84]
mov dword [esp + 0x34], ecx
mov edx, dword [ebp + 0x88]
mov dword [esp + 0x38], edx
mov eax, dword [ebp + 0x8c]
mov dword [esp + 0x3c], eax
mov ecx, dword [ebp + 0x90]
add esp, 0x18
mov dword [esp + 0x28], ecx
mov byte [esp + 0x2f], 1
mov eax, dword [ebp + 0x94]
mov ebx, dword [ebp + 0x98]
lea edx, [esp + 0x34]
push edx
mov edx, dword [esp + 0x11d0]
push eax
lea ecx, [esp + 0x24]
push ecx
push edx
mov eax, esi
call fcn.00473560
mov ecx, 8
mov byte [esp + 0x74], cl
mov dword [esp + 0x78], 0x6610
mov byte [esp + 0x75], 2
mov dword [esp + 0x7c], 0x20
lea esi, [esp + 0x34]
lea edi, [esp + 0x80]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x11c4]
mov esi, dword [edi + 0x14]
mov ebx, dword [edi]
mov dword [esp + 0x14], 0
call fcn.00475470
mov esi, dword [esi + 0x28]
test esi, esi
je 0x473e25
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x2c
lea ecx, [esp + 0x84]
push ecx
push ebx
call esi
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x4740c2
mov edx, dword [ebp + 0x68]
mov esi, dword [edi + 0x14]
mov dword [esp + 0x30], edx
call fcn.00475470
mov esi, dword [esi + 0x1c]
test esi, esi
je 0x473e5d
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1c4]
push ecx
push 0
push 0
push 0
push ebx
call esi
mov esi, dword [edi + 0x14]
mov ebx, dword [esp + 0x14]
call fcn.00475470
mov esi, dword [esi + 0x2c]
test esi, esi
je 0x473e73
push ebx
call esi
xor eax, eax
movzx edx, byte [esp + eax + 0x54]
movzx ecx, byte [esp + eax + 0x55]
xor byte [esp + eax + 0x1c0], dl
xor byte [esp + eax + 0x1c1], cl
movzx edx, byte [esp + eax + 0x56]
movzx ecx, byte [esp + eax + 0x57]
xor byte [esp + eax + 0x1c2], dl
xor byte [esp + eax + 0x1c3], cl
add eax, 4
cmp eax, 0x10
jl 0x473e75
push 0x7f
lea edx, [esp + 0x145]
push 0
push edx
mov byte [esp + 0x14c], 0
call sub.msvcrt.dll_memset
push 0x7f
lea eax, [esp + 0xd1]
push 0
push eax
mov byte [esp + 0xd8], 0
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0x98]
add esp, 0x18
lea ecx, [esp + 0x140]
push ecx
push 0x10
lea edx, [esp + 0x1c8]
push edx
push 0x14
push eax
mov eax, dword [esp + 0x11e0]
mov esi, 0x80
mov ecx, edi
call fcn.00473240
mov eax, dword [ebp + 0x98]
lea ecx, [esp + 0xc0]
push ecx
push 0x40
lea edx, [esp + 0x218]
push edx
push 0x40
push eax
lea eax, [esp + 0x154]
mov ecx, edi
call fcn.00473240
lea eax, [esi - 0x40]
lea ecx, [esp + 0x1d0]
lea edx, [esp + 0xc0]
lea ebx, [ebx]
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x473f68
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x473f50
test eax, eax
je 0x473fc5
movzx ebx, byte [ecx]
movzx esi, byte [edx]
sub esi, ebx
jne 0x473fb7
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x473fc5
movzx ebx, byte [ecx]
movzx esi, byte [edx]
sub esi, ebx
jne 0x473fb7
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x473fc5
movzx ebx, byte [ecx]
movzx esi, byte [edx]
sub esi, ebx
jne 0x473fb7
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x473fc5
movzx ecx, byte [ecx]
movzx esi, byte [edx]
sub esi, ecx
je 0x473fc5
test esi, esi
mov eax, 1
jg 0x473fc7
or eax, 0xffffffff
jmp 0x473fc7
xor eax, eax
test eax, eax
jne 0x4740c2
cmp dword [edi], eax
jne 0x47401b
mov esi, dword [edi + 0x14]
call fcn.00475470
mov esi, dword [esi + 4]
test esi, esi
je 0x473ff4
push 0xf0000000
push 0x18
push 0
push 0
push edi
call esi
test eax, eax
jne 0x47401b
mov esi, dword [edi + 0x14]
call fcn.00475470
mov eax, dword [esi + 4]
test eax, eax
je 0x474015
push 0xf0000000
push 1
push 0
push 0
push edi
call eax
test eax, eax
jne 0x47401b
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov esi, dword [edi + 0x14]
mov ebx, dword [edi]
call fcn.00475470
mov esi, dword [esi + 0xc]
test esi, esi
je 0x4740b0
lea edx, [esp + 0x10]
push edx
push 0
push 0
push 0x8004
push ebx
call esi
test eax, eax
je 0x4740b0
mov esi, dword [edi + 0x14]
mov ebx, dword [esp + 0x10]
call fcn.00475470
mov esi, dword [esi + 0x14]
test esi, esi
je 0x4740b0
push 0
push 0x40
lea eax, [esp + 0x218]
push eax
push ebx
call esi
test eax, eax
je 0x4740b0
mov esi, dword [edi + 0x14]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x18], 0x14
call fcn.00475470
mov esi, dword [esi + 0x10]
test esi, esi
je 0x47409a
mov edx, dword [esp + 0x11c8]
push 0
lea ecx, [esp + 0x1c]
push ecx
push edx
push 2
push ebx
call esi
mov esi, dword [edi + 0x14]
mov ebx, dword [esp + 0x10]
call fcn.00475470
mov esi, dword [esi + 0x18]
test esi, esi
je 0x4740b0
push ebx
call esi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x11b0
ret 0xc
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x11b0
ret 0xc
mov dword [esi + 0x31c], 0xfffffffe
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x11b0
ret 0xc