Function at 0x418536
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x49f30e
call fcn.0045797c
sub esp, 0x220
push ebx
mov ebx, ecx
xor eax, eax
push esi
mov dword [ebp - 0x24], ebx
xor esi, esi
mov dword [ebx + 0x10], esi
mov dword [ebx + 0x14], 7
mov word [ebx], ax
lea eax, [ebp - 0x14]
mov dword [ebp - 4], esi
push 0x4c7c40
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 1
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1c]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7c54
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x40]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7c68
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 7
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x64]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7c80
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x88]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7b70
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0xac]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7c98
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0xd0]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7cbc
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0xf4]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7ccc
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x118]
call fcn.004b7066
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7ce0
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x19
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x13c]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7cf8
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x160]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7d14
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x184]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7d2c
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1a8]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7d44
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1cc]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7d58
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1f0]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7d6c
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x214]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7d88
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x238]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7d9c
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov byte [ebp - 4], 0x31
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x25c]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7db0
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x280]
call fcn.004b7066
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7dc8
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x37
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x2a4]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x39
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7dec
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x2c8]
call fcn.00478659
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7e08
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x300]
call fcn.00478659
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7e24
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x338]
call fcn.00478659
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7e44
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x370]
call fcn.00478659
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x45
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7e54
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x46
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x3a8]
call fcn.00478659
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x48
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7e64
push eax
call fcn.0043fa6b
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x49
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x3e0]
call fcn.004b7066
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0x208
lea eax, [ebp - 0x22c]
push esi
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x22c]
push eax
push esi
push esi
push 0x1c
push esi
call fcn.004aed01
lea eax, [ebp - 0x18]
push eax
call fcn.0044b8c3
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x4c
push 0x4bc9c4
push eax
call fcn.004460d9
add esp, 0x30
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea eax, [ebp - 0x22c]
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
add esp, 0xc
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4b
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x22c]
push eax
push esi
call fcn.0048ee18
lea eax, [ebp - 0x20]
push 0x4c7c10
push eax
call fcn.0043fa6b
mov esi, eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x4d
push eax
call fcn.0044b8c3
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x4e
push 0x4bc9c4
push eax
call fcn.004460d9
push esi
push eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x4f
push eax
call fcn.00443c4b
add esp, 0x2c
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea eax, [ebp - 0x22c]
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
add esp, 0xc
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x22c]
mov ecx, ebx
push eax
call fcn.00443eae
lea eax, [ebp - 0x22c]
push eax
call fcn.0046a7c4
dec eax
neg eax
pop ecx
mov ecx, dword [ebp - 0xc]
sbb al, al
inc al
mov byte [ebx + 0x18], al
mov eax, ebx
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret