Function at 0x4702d7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
inc edi
mov dword [ebp - 4], eax
push str.GetProcessWindowStation
div ecx
or dword [eax], edx
push eax
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
outsd dx, dword [esi]
dec ebp
push eax
pop ebp
popal
rep stosb byte es:[edi], al
mov dword [ecx + edx + 8], eax
mov dword [0x40b7e4], eax
lea esi, [esi + eax + 4]
inc eax
mov dword fs:[0], eax
push ebp
jns 0x46ff3c
inc esp
mov esi, ebx
mov ebp, esp
jnp 0x46ff3d
push esp
jmp 0x46ff1f
add byte [eax], al
cmovne edi, dword [esp + 0xc]
add ebp, edi
mov dword [esp + 0xc], ebp
pop edi
mov ebp, dword [esp]
lea esp, [esp + 4]
popfd
ret
aas
imul cx, word [ecx - 0x77], 0x6830
add al, 0x10
add byte [eax], al
cmp edi, eax
mov eax, dword [esi]
push dword [ebp + 0xc]
xor eax, dword [ebp - 0x10]
push dword fs:[ebp + 0x10]
and dword [ebp - 4], 0
inc ebx
jnp 0x46ffb0
pop ebp
cmp ebx, dword [ecx + 8]
push esi
mov byte [edi], al
cmp edi, ebx
call dword [sym.imp.KERNEL32.dll_HeapCreate]
and dword [ebp - 4], 0
dec ebx
jns 0x46ff81
test dword [ebp + 1], eax
add byte [eax], al
ret
pop ecx
mov ebp, esp
mov al, byte [esi + 1]
push eax
pop ebp
push eax
call edi
mov edi, 0x80000000
leave
dec edi
pop eax
push eax
push edi
pop esp
dec edi
call fcn.00471b15
pop ebp
push 0x4d
outsb dx, byte [esi]
arpl word [eax + 0x53], bx
popal
sub ecx, edx
mov dword [ebp - 0xc], eax
jmp 0x46ffdd
inc eax
cmp esi, 0x3441f55d
je 0x46ffde
pushf
push ecx
call fcn.0047000b
popal
pop ax
push ebx
je 0x470031
cmp eax, edi
jne 0x46ffee
push dword [ebp - 0xc]
push edi
cmp ecx, dword [ebp + 0x1c]
cmp byte fs:[ebp + 0x13], 0
dec esi
pushal
mov edi, edi
pop edx
dec esp
pop edx
inc ecx
dec edx
dec eax
push 0x6f
pop edi
push 0xfffdf0e8
call dword [ebp + ebx*2 + 0x66]
push esi
cmp eax, dword [ebp + 0x20]
test eax, eax
or dword [edi], esi
je 0x470014
jmp 0x46ff99
xchg esp, eax
and al, 0xa
add byte [eax], al
add al, ch
add byte [eax], al
add byte [eax], al
mov dword [esp], ebx
call 0x470027
mov dword [esp], ebp
mov ebx, ecx
add ebx, 0xfff9805f
push word [esp + 0x10]
popf
mov esi, dword [ebx]
lock xchg dword [esp], ebp
lea esp, [esp + 4]
lock xchg dword [esp], ebx
lea esp, [esp + 4]
pop edx
pop ecx
lea esp, [esp + 2]
cmp dword [esp + 0x30], 0x6f4247b
cmove ebp, edi
push ebx
cmp edi, 0x6ba30995
cmove ebx, ecx
push ebx
cmp ebx, 0xabe03e15
jne 0x47007f
jmp dword [esi - 1]
ret
push ebx
sub eax, edi
cmp dword [esp + 0x68], 0xb16b85e5
cmove ecx, ebp
push ebx
cmp dword [esp + 0x60], 0x51c72ed5
jne 0x4700e7
dec edx
push esi
push esi
dec ebx
cmp eax, 0x78
xor esi, esi
cmp dword [0x40b6d0], 3
lea esi, gs:[ecx + esi - 4]
xor esp, edi
push eax
call fcn.0046fe40
push dword [ebp + 0x20]
pop esi
xor eax, 0x200000
pop ecx
dec eax
js 0x4700b0
jb 0x47011d
pop edi
dec esp
add ecx, edi
mov eax, dword [ebx + 8]
not ebx
pop ecx
shr ecx, 2
and dword [eax + 4], 0xfffffffe
call fcn.0046bea2
mov dword [ebp - 0x218], esi
inc ebp
pop di
sar eax, 1
cmp dword [esp + 0x40], 0xa29e80dd
cmove edi, edi
inc eax
push eax
cmp edi, 0x8508abf
je 0x4700c3
push edi
cmp dword [esp + 0x7c], 0x8f7878a3
js 0x470096
jne 0x470130
dec ecx
bound ecx, qword [edx + 0x63]
jns 0x47018e
push 0x69
popal
push 0x5a
pop edi
dec ecx
push 0x49
dec ebx
push di
push 0x626a5d69
pop edi
push eax
dec edx
dec esi
js 0x4701a8
pop ecx
dec ecx
pop edi
push ebx
cmp dword [esp + 0x58], 0x6003df9f
cmove edi, ebx
push ebx
mov dword [ebp - 0xc], eax
cmp esi, 0xeea82ec5
je 0x470105
call esi
mov dword [ebp - 8], eax
cmp eax, ebx
push edi
push ebx
push edx
push 0x428
pushfd
lea esp, [esp - 4]
mov dword [esp], ebp
call 0x470185
push ecx
pop eax
jnp 0x4701d4
push ebx
push 0x41
dec ebp
jns 0x4701c6
outsd dx, dword gs:[esi]
inc eax
arpl word [eax + 0x4d], bx
dec ebx
dec edx
insd dword es:[edi], dx
inc ebx
pop esi
push 0x43424969
jnp 0x4701d6
inc ebx
inc ebx
bound esp, qword [ebx - 0x75]
sub al, 0x24
lea esp, [esp + 4]
push eax
mov eax, 0xb3
mov bl, 0
add byte [eax], al
cmove eax, dword [esp + 0xc]
add ebp, eax
lock xchg dword [esp + 0xc], ebp
mov eax, dword [esp]
lea esp, [esp + 4]
mov ebp, dword [esp]
lea esp, [esp + 4]
lock xchg dword [esp], eax
xchg al, ah
sahf
mov eax, dword [esp]
lea esp, [esp + 4]
outsb dx, byte [esi]
push ebx
test byte [0x40abd0], 1
push 0x3f
pop edi
jg 0x470220
pop edi
add ecx, edx
add ecx, edx
jmp 0xfad55cd
cmp ecx, 0x892bec81
jne 0x470285
pop ebx
outsd dx, dword fs:[esi]
push 0x4d
pushal
bound ebx, qword [esi + 0x67]
pop ebx
inc eax
dec eax
push ecx
pop ebx
inc esp
bound eax, qword [edx + 0x64]
pop ecx
outsb dx, byte [esi]
pop esi
jnp 0x4702a5
insb byte es:[edi], dx
inc ebx
dec edx
dec ecx
inc esi
inc ecx
bound edx, qword [ebx + 0x51]
arpl word [esi + 0x4d], bx
jns 0x4702c9
push esi
jns 0x4702b1
inc edi
insb byte es:[edi], dx
dec esi
dec edx
popal
outsd dx, dword [esi]
dec ebp
js 0x4702ac
inc ebx
pop esi
push esi
bound edi, qword [ecx + 0x6f]
pop esi
inc edi
jnp 0x4702e2
jnp fcn.004702d7
push ebx
push 0x51
popal
dec esi
pop esi
pop ebx
dec ebp
inc ebp
push ebp
push ebx
inc eax
push edi
insb byte es:[edi], dx
dec ebx
dec esp
arpl word [ecx + 0x5d], dx
pop ebp
push esi
dec ecx
imul ebp, dword [edi - 0x18], 0x3f
call 0x4702c9
inc edi
inc ebp
arpl word [ecx + 0x47], bx
pushal
inc ebp
push esp
popal
pop ecx
pop esp
bound eax, qword [ebx + 0x64]
outsb dx, byte [esi]
push esi
inc ecx
push esp
inc eax
push esp
inc esp
push eax
push 0x6d
insd dword es:[edi], dx
imul eax, dword [esi + 0x5d], 0x6b
inc ecx
inc esi
insb byte es:[edi], dx
pop edi
imul ebp, dword [edx + 0x4b], 0x5c424066
dec ebx
inc ax
inc edx
pop esp
pop edi
pop esp
dec esp
pop esp
dec ebp
imul ebp, dword [edx + 0x5f], 0x6a
js 0x47030a
push ebp
inc esi
pop edx
inc ebp
dec ebx
pop edi
pop edx
imul edi, edi, 0x44812434
and al, 0
or dword [ecx + 0x44810000], esi
and al, 4
add al, 0xa4
push dword [esp]
add dword [esp], 0xb109
add dword [esp + 4], 0xa4
add al, 0xa4
add byte [eax], al
add bl, al
inc esi
push esp
imul ebx, dword [ecx + 0x48], 0x53474552