Function at 0x48a54a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, 0x50ade8
jmp 0x48a53c
mov eax, 0x4d6432
call fcn.004ca3a0
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
call fcn.00495ec7
lea edi, [esi + 0xe1c]
xor ebx, ebx
mov ecx, edi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ecx
call fcn.004a9276
mov eax, edi
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc4]
call fcn.004a9276
lea ecx, [esi + 0xfa8]
mov byte [ebp - 4], 2
call fcn.004b64e5
lea ecx, [esi + 0xfbc]
mov byte [ebp - 4], 3
call fcn.004c8e75
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0xfe8]
push eax
mov byte [ebp - 4], 5
call fcn.00461675
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1010]
push eax
mov byte [ebp - 4], 8
call fcn.00490dc5
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x107c]
push eax
mov byte [ebp - 4], 0xb
call fcn.00490e15
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x10c8]
push eax
mov byte [ebp - 4], 0xe
call fcn.00490e65
lea ecx, [esi + 0x1100]
mov byte [ebp - 4], 0x10
call fcn.004c8e75
lea ecx, [esi + 0x1110]
mov byte [ebp - 4], 0x11
call fcn.004b6054
lea ecx, [esi + 0x114c]
mov byte [ebp - 4], 0x12
call fcn.004b4586
lea ecx, [esi + 0x11e4]
mov byte [ebp - 4], 0x13
call fcn.004b3f52
mov byte [ebp - 4], 0x14
lea ecx, [esi + 0x1288]
call fcn.004b3ccb
lea ecx, [esi + 0x12c0]
mov byte [ebp - 4], 0x15
call fcn.004b3c97
lea ecx, [esi + 0x12cc]
mov byte [ebp - 4], 0x16
call fcn.004b38bd
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x12fc]
push eax
mov byte [ebp - 4], 0x18
call fcn.00490eb5
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1324]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00490eb5
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x134c]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00490eb5
lea eax, [esi + 0x1cd8]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x1cf4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x1d00]
mov byte [ebp - 4], 0x22
call fcn.00490860
lea ecx, [esi + 0x1d0c]
mov byte [ebp - 4], 0x23
call fcn.00490860
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1e50]
push eax
mov byte [ebp - 4], 0x25
call fcn.00490f93
lea ecx, [esi + 0x1eb0]
mov byte [ebp - 4], 0x27
call fcn.00491d3d
lea ecx, [esi + 0x2d30]
mov byte [ebp - 4], 0x28
call fcn.00491d3d
lea ecx, [esi + 0x3bb0]
mov byte [ebp - 4], 0x29
call fcn.0049c80e
lea ecx, [esi + 0x3c00]
mov byte [ebp - 4], 0x2a
call fcn.004a0b55
mov byte [ebp - 4], 0x2b
lea ecx, [esi + 0x3e34]
call fcn.004a276e
lea ecx, [esi + 0x4074]
mov byte [ebp - 4], 0x2c
call fcn.0049d05b
lea ecx, [esi + 0x41d4]
mov byte [ebp - 4], 0x2d
call fcn.004b33eb
lea ecx, [esi + 0x4204]
mov byte [ebp - 4], 0x2e
call fcn.004b3397
lea eax, [esi + 0x4270]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x427c]
mov byte [ebp - 4], 0x30
call fcn.004c8e75
lea ecx, [esi + 0x428c]
mov byte [ebp - 4], 0x31
call fcn.004c8e75
lea ecx, [esi + 0x430c]
mov byte [ebp - 4], 0x32
call fcn.00407b77
lea ecx, [esi + 0x4318]
mov byte [ebp - 4], 0x33
call fcn.00407b77
lea eax, [esi + 0x4324]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x4330]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x4340]
lea eax, [ebp - 0xd]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0xe]
push eax
call fcn.00490d1e
lea ecx, [esi + 0x434c]
lea eax, [ebp - 0xe]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0xd]
push eax
call fcn.00490d1e
mov dword [esi], 0x4e7c40
mov dword [esi + 0x3ac], 6
mov dword [esi + 0xe10], ebx
mov dword [esi + 0xe0c], ebx
mov dword [esi + 0xfdc], ebx
mov dword [esi + 0xfe0], ebx
push 0xffffffffffffffff
mov ecx, edi
mov byte [ebp - 4], 0x3a
mov dword [esi + 0xe04], ebx
call fcn.004a92f9
push 0xffffffffffffffff
lea ecx, [esi + 0xee0]
call fcn.004a92f9
lea ecx, [esi + 0x107c]
mov dword [esi + 0x110c], 1
call fcn.0047fdf0
mov dword [esi + 0x1d18], 0xc8
push 9
mov dword [esi + 0x42a0], ebx
mov dword [esi + 0x42a4], ebx
lea edi, [esi + 0x1038]
pop ecx
xor eax, eax
mov dword [esi + 0xfd0], ebx
rep stosd dword es:[edi], eax
or dword [esi + 0xfb8], 0xffffffff
mov ecx, esi
call fcn.0048dd6a
lea ecx, [esi + 0x12fc]
call fcn.0047fdf0
lea ecx, [esi + 0x1324]
call fcn.0047fdf0
lea ecx, [esi + 0x134c]
call fcn.0047fdf0
mov ecx, esi
mov dword [esi + 0x1cec], ebx
call fcn.0048e707
lea eax, [esi + 0x1d4c]
mov dword [esi + 0x10ac], ebx
push str.NULL
mov dword [esi + 0x10a4], ebx
push eax
mov dword [esi + 0x10b0], ebx
call sub.MSVCRT.dll_strcpy
mov dword [esi + 0x3b4], 0xc
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0xfe4], eax
push 0x10
lea eax, [esi + 0x4054]
push ebx
push eax
call sub.MSVCRT.dll_memset
push 0x10
lea eax, [esi + 0x4064]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0x20
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0x1d1c], eax
call sub.WINMM.dll_timeGetTime
or dword [esi + 0x1e4c], 0xffffffff
lea ecx, [esi + 0x4204]
mov dword [esi + 0x1d2c], eax
mov dword [esi + 0x1d30], ebx
mov dword [esi + 0x1d40], ebx
mov dword [esi + 0x1d34], ebx
mov dword [esi + 0xe18], ebx
mov dword [esi + 0x41c4], ebx
mov dword [esi + 0xe08], ebx
mov dword [esi + 0x4258], ebx
mov dword [esi + 0x425c], ebx
mov dword [esi + 0x4260], ebx
call fcn.004b33c3
push 0xa4
mov byte [esi + 0x1d20], bl
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x3b
je 0x48a987
mov ecx, eax
call fcn.004b7093
jmp 0x48a989
xor eax, eax
push 0x64
mov byte [ebp - 4], 0x3a
mov dword [esi + 0xdf4], eax
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x3c
je 0x48a9af
mov ecx, eax
call fcn.004b66c0
jmp 0x48a9b1
xor eax, eax
mov dword [esi + 0xdf0], eax
push 0x1c
lea eax, [esi + 0x1060]
push ebx
push eax
mov byte [ebp - 4], 0x3a
mov dword [esi + 0xdf8], ebx
mov dword [esi + 0xdfc], ebx
mov dword [esi + 0x42a8], ebx
mov dword [esi + 0x42ac], ebx
call sub.MSVCRT.dll_memset
add esp, 0xc
call sub.WINMM.dll_timeGetTime
or dword [esi + 0x42dc], 0xffffffff
mov ecx, esi
mov dword [esi + 0x42c4], eax
mov dword [esi + 0x42d8], ebx
mov dword [esi + 0x433c], ebx
mov byte [esi + 0x42e4], bl
mov dword [esi + 0x42e0], ebx
mov dword [esi + 0x42e8], ebx
mov dword [esi + 0x42ec], ebx
call fcn.004904b4
mov ecx, dword [ebp - 0xc]
mov dword [0x50f64c], ebx
mov dword [esi + 0x4308], ebx
mov byte [esi + 0x1cf1], bl
mov byte [esi + 0x1cf0], bl
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret