Function at 0x4702b0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
mov eax, dword [0x4a9150]
xor eax, esp
mov dword [esp + 0xac], eax
push ebp
mov ebp, dword [esp + 0xbc]
push esi
mov esi, dword [esp + 0xbc]
mov dword [esp + 8], ebp
test esi, esi
je 0x470872
test ebp, ebp
je 0x470872
mov al, byte [esi + 0x130]
push ebx
push edi
cmp al, 8
jae 0x470365
movzx ebx, al
mov edi, 8
sub edi, ebx
push edi
lea eax, [ebx + ebp + 0x20]
push eax
push esi
mov dword [esi + 0x278], 0x11
call fcn.00478430
push edi
add ebp, 0x20
push ebx
push ebp
mov byte [esi + 0x130], 8
call fcn.00477720
add esp, 0x18
test eax, eax
je 0x470359
cmp ebx, 4
jae 0x47034b
add edi, 0xfffffffc
push edi
push ebx
push ebp
call fcn.00477720
add esp, 0xc
test eax, eax
je 0x47034b
push 0x495898
jmp 0x470350
push 0x495870
push esi
call fcn.004775c0
add esp, 8
cmp ebx, 3
jae 0x470365
or dword [esi + 0x6c], 0x1000
mov bl, 0x54
jmp 0x470370
mov byte [esp + 0x2c], 0x49
mov byte [esp + 0x2d], 0x48
mov byte [esp + 0x2e], 0x44
mov byte [esp + 0x2f], 0x52
mov byte [esp + 0x8c], 0x49
mov byte [esp + 0x8d], 0x44
mov byte [esp + 0x8e], 0x41
mov byte [esp + 0x8f], bl
mov byte [esp + 0xac], 0x49
mov byte [esp + 0xad], 0x45
mov byte [esp + 0xae], 0x4e
mov byte [esp + 0xaf], 0x44
mov byte [esp + 0x14], 0x50
mov byte [esp + 0x15], 0x4c
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], 0x45
mov byte [esp + 0x3c], 0x62
mov byte [esp + 0x3d], 0x4b
mov byte [esp + 0x3e], 0x47
mov byte [esp + 0x3f], 0x44
mov byte [esp + 0x7c], 0x63
mov byte [esp + 0x7d], 0x48
mov byte [esp + 0x7e], 0x52
mov byte [esp + 0x7f], 0x4d
mov byte [esp + 0x4c], 0x67
mov byte [esp + 0x4d], 0x41
mov byte [esp + 0x4e], 0x4d
mov byte [esp + 0x4f], 0x41
mov byte [esp + 0x9c], 0x68
mov byte [esp + 0x9d], 0x49
mov byte [esp + 0x9e], 0x53
mov byte [esp + 0x9f], bl
mov byte [esp + 0x54], 0x69
mov byte [esp + 0x55], 0x43
mov byte [esp + 0x56], 0x43
mov byte [esp + 0x57], 0x50
mov byte [esp + 0xb4], 0x69
mov byte [esp + 0xb5], bl
mov byte [esp + 0xb6], 0x58
mov byte [esp + 0xb7], 0x74
mov byte [esp + 0x5c], 0x6f
mov byte [esp + 0x5d], 0x46
mov byte [esp + 0x5e], 0x46
mov byte [esp + 0x5f], 0x73
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0x43
mov byte [esp + 0x1e], 0x41
mov byte [esp + 0x1f], 0x4c
mov byte [esp + 0x24], 0x70
mov byte [esp + 0x25], 0x48
mov byte [esp + 0x26], 0x59
mov byte [esp + 0x27], 0x73
mov byte [esp + 0x34], 0x73
mov byte [esp + 0x35], 0x42
mov byte [esp + 0x36], 0x49
mov byte [esp + 0x37], bl
mov byte [esp + 0x6c], 0x73
mov byte [esp + 0x6d], 0x43
mov byte [esp + 0x6e], 0x41
mov byte [esp + 0x6f], 0x4c
mov byte [esp + 0x64], 0x73
mov byte [esp + 0x65], 0x50
mov byte [esp + 0x66], 0x4c
mov byte [esp + 0x67], bl
mov byte [esp + 0x44], 0x73
mov byte [esp + 0x45], 0x52
mov byte [esp + 0x46], 0x47
mov byte [esp + 0x47], 0x42
mov byte [esp + 0x74], 0x74
mov byte [esp + 0x75], 0x45
mov byte [esp + 0x76], 0x58
mov byte [esp + 0x77], 0x74
mov byte [esp + 0x84], 0x74
mov byte [esp + 0x85], 0x49
mov byte [esp + 0x86], 0x4d
mov byte [esp + 0x87], 0x45
mov byte [esp + 0x94], 0x74
mov byte [esp + 0x95], 0x52
mov byte [esp + 0x96], 0x4e
mov byte [esp + 0x97], 0x53
mov byte [esp + 0xa4], 0x7a
push esi
mov byte [esp + 0xa9], bl
mov byte [esp + 0xaa], 0x58
mov byte [esp + 0xab], 0x74
call fcn.0047b530
mov ebp, dword [esp + 0x90]
lea ecx, [esi + 0x120]
add esp, 4
mov edi, eax
cmp dword [ecx], ebp
jne 0x47058c
mov eax, dword [esi + 0x6c]
test al, 8
je 0x47058c
or eax, 0x2000
mov dword [esi + 0x6c], eax
mov eax, dword [ecx]
cmp eax, dword [esp + 0x2c]
jne 0x4705a8
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.0047b660
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0xac]
jne 0x4705c5
mov edx, dword [esp + 0x10]
push edi
push edx
push esi
call fcn.0047b970
add esp, 0xc
jmp 0x470370
push ecx
push esi
call fcn.00477eb0
add esp, 8
test eax, eax
je 0x470629
cmp dword [esi + 0x120], ebp
jne 0x4705df
or dword [esi + 0x6c], 4
mov eax, dword [esp + 0x10]
push edi
push eax
push esi
call fcn.0047de20
mov eax, dword [esi + 0x120]
add esp, 0xc
cmp eax, dword [esp + 0x14]
jne 0x470603
or dword [esi + 0x6c], 2
jmp 0x470370
cmp eax, ebp
jne 0x470370
mov eax, dword [esi + 0x6c]
test al, 1
jne 0x470820
push 0x495854
push esi
call fcn.004775c0
add esp, 8
jmp 0x470870
mov eax, dword [esi + 0x120]
cmp eax, dword [esp + 0x14]
jne 0x470649
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.0047b7e0
add esp, 0xc
jmp 0x470370
cmp eax, ebp
je 0x47083d
push edi
cmp eax, dword [esp + 0x40]
jne 0x47066b
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0047ca90
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x80]
jne 0x470687
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0047bcb0
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x50]
jne 0x4706a0
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0047b9c0
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0xa0]
jne 0x4706bc
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0047cd00
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x60]
jne 0x4706d5
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0047d000
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x20]
jne 0x4706ee
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0047d150
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x70]
jne 0x470707
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0047d460
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x28]
jne 0x470720
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0047ceb0
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x38]
jne 0x470739
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0047bb40
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x48]
jne 0x470752
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0047c110
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x58]
jne 0x47076b
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0047c310
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x68]
jne 0x470784
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0047c500
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x78]
jne 0x47079d
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0047d7a0
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x88]
jne 0x4707b9
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0047d670
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0x98]
jne 0x4707d5
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0047c7f0
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0xa8]
jne 0x4707f1
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0047d950
add esp, 0xc
jmp 0x470370
cmp eax, dword [esp + 0xb8]
jne 0x47080d
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0047db60
add esp, 0xc
jmp 0x470370
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0047de20
add esp, 0xc
jmp 0x470370
cmp byte [esi + 0x12a], 3
jne 0x470870
test al, 2
jne 0x470870
push 0x495838
push esi
call fcn.004775c0
add esp, 8
jmp 0x470870
mov eax, dword [esi + 0x6c]
test al, 1
jne 0x47084b
push 0x495854
jmp 0x47085d
cmp byte [esi + 0x12a], 3
jne 0x470866
test al, 2
jne 0x470866
push 0x495838
push esi
call fcn.004775c0
add esp, 8
or dword [esi + 0x6c], 4
mov dword [esi + 0x110], edi
pop edi
pop ebx
mov ecx, dword [esp + 0xb4]
pop esi
pop ebp
xor ecx, esp
call fcn.0043f097
add esp, 0xb0
ret