Function at 0x4a47c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, 0x56b070
jmp 0x4a47b2
mov eax, 0x51e084
call fcn.004edf30
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
call fcn.004b4c2c
lea edi, [esi + 0xe1c]
xor ebx, ebx
mov ecx, edi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ecx
call fcn.004cab71
mov eax, edi
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc4]
call fcn.004cab71
lea ecx, [esi + 0xfa8]
mov byte [ebp - 4], 2
call fcn.004d90fc
lea ecx, [esi + 0xfbc]
mov byte [ebp - 4], 3
call fcn.004ec9e9
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0xfe8]
push eax
mov byte [ebp - 4], 5
call fcn.0047b622
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1010]
push eax
mov byte [ebp - 4], 8
call fcn.004ab37d
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x107c]
push eax
mov byte [ebp - 4], 0xb
call fcn.004ab3cd
lea ecx, [esi + 0x10fc]
mov byte [ebp - 4], 0xd
call fcn.004aaf1a
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1108]
push eax
mov byte [ebp - 4], 0xf
call fcn.004ab4c4
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1160]
push eax
mov byte [ebp - 4], 0x12
call fcn.004ab514
lea ecx, [esi + 0x1188]
mov byte [ebp - 4], 0x14
call fcn.004d8ea5
mov byte [ebp - 4], 0x15
lea ecx, [esi + 0x11c0]
call fcn.004ec9e9
lea ecx, [esi + 0x11d0]
mov byte [ebp - 4], 0x16
call fcn.004d8a14
lea ecx, [esi + 0x120c]
mov byte [ebp - 4], 0x17
call fcn.004d6f9d
lea ecx, [esi + 0x12a4]
mov byte [ebp - 4], 0x18
call fcn.004d68d6
lea ecx, [esi + 0x1348]
mov byte [ebp - 4], 0x19
call fcn.004d8ea5
lea ecx, [esi + 0x1380]
mov byte [ebp - 4], 0x1a
call fcn.004d68a2
lea ecx, [esi + 0x138c]
mov byte [ebp - 4], 0x1b
call fcn.004d64d2
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x13bc]
push eax
mov byte [ebp - 4], 0x1d
call fcn.004ab564
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x13e4]
push eax
mov byte [ebp - 4], 0x20
call fcn.004ab564
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x140c]
push eax
mov byte [ebp - 4], 0x23
call fcn.004ab564
lea eax, [esi + 0x1d98]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x1db4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x1dc0]
mov byte [ebp - 4], 0x27
call fcn.004aad92
lea ecx, [esi + 0x1dcc]
mov byte [ebp - 4], 0x28
call fcn.004aad92
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1f10]
push eax
mov byte [ebp - 4], 0x2a
call fcn.004ab5fb
lea ecx, [esi + 0x1f70]
mov byte [ebp - 4], 0x2c
call fcn.004ac688
lea ecx, [esi + 0x2df0]
mov byte [ebp - 4], 0x2d
call fcn.004ac688
lea ecx, [esi + 0x3c70]
mov byte [ebp - 4], 0x2e
call fcn.004bc1a7
lea ecx, [esi + 0x3cc0]
mov byte [ebp - 4], 0x2f
call fcn.004c270a
lea ecx, [esi + 0x3ef4]
mov byte [ebp - 4], 0x30
call fcn.004c43c3
lea ecx, [esi + 0x4134]
mov byte [ebp - 4], 0x31
call fcn.004bd059
lea ecx, [esi + 0x4294]
mov byte [ebp - 4], 0x32
call fcn.004d6000
lea ecx, [esi + 0x42c4]
mov byte [ebp - 4], 0x33
call fcn.004d5fac
lea eax, [esi + 0x4330]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x433c]
mov byte [ebp - 4], 0x35
call fcn.004ec9e9
lea ecx, [esi + 0x434c]
mov byte [ebp - 4], 0x36
call fcn.004ec9e9
lea ecx, [esi + 0x43cc]
mov byte [ebp - 4], 0x37
call fcn.0040958c
lea ecx, [esi + 0x43d8]
mov byte [ebp - 4], 0x38
call fcn.0040958c
lea eax, [esi + 0x43e4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x43f0]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x4400]
lea eax, [ebp - 0xd]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0xe]
push eax
call fcn.004ab2d6
lea ecx, [esi + 0x440c]
mov byte [ebp - 4], 0x3d
call fcn.004aad92
mov dword [esi], 0x5328f0
mov dword [esi + 0x3ac], 6
mov dword [esi + 0xe10], ebx
mov byte [ebp - 4], 0x3e
mov dword [esi + 0xe0c], ebx
mov dword [esi + 0xfdc], ebx
mov dword [esi + 0xfe0], ebx
push 0xffffffffffffffff
mov ecx, edi
mov dword [esi + 0xe04], ebx
call fcn.004cabf4
push 0xffffffffffffffff
lea ecx, [esi + 0xee0]
call fcn.004cabf4
lea ecx, [esi + 0x107c]
mov dword [esi + 0x11cc], 1
call fcn.0047d1fd
mov dword [esi + 0x1dd8], 0xc8
push 9
mov dword [esi + 0x4360], ebx
mov dword [esi + 0x4364], ebx
lea edi, [esi + 0x1038]
pop ecx
xor eax, eax
mov dword [esi + 0xfd0], ebx
rep stosd dword es:[edi], eax
or dword [esi + 0xfb8], 0xffffffff
mov ecx, esi
call fcn.004a8235
lea ecx, [esi + 0x13bc]
call fcn.0047d1fd
lea ecx, [esi + 0x13e4]
call fcn.0047d1fd
lea ecx, [esi + 0x140c]
call fcn.0047d1fd
mov ecx, esi
mov dword [esi + 0x1dac], ebx
call fcn.004a8bd2
lea eax, [esi + 0x1e0c]
mov dword [esi + 0x10ac], ebx
push str.NULL
mov dword [esi + 0x10a4], ebx
push eax
mov dword [esi + 0x10b0], ebx
call sub.MSVCRT.dll_strcpy
mov dword [esi + 0x3b4], 0xc
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0xfe4], eax
push 0x10
lea eax, [esi + 0x4114]
push ebx
push eax
call sub.MSVCRT.dll_memset
push 0x10
lea eax, [esi + 0x4124]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0x20
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0x1ddc], eax
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0x1dec], eax
mov dword [esi + 0x1df0], ebx
mov dword [esi + 0x1e00], ebx
mov dword [esi + 0x1df4], ebx
or dword [esi + 0x1f0c], 0xffffffff
mov dword [esi + 0xe18], ebx
mov dword [esi + 0x4284], ebx
mov dword [esi + 0xe08], ebx
mov dword [esi + 0x4318], ebx
mov dword [esi + 0x431c], ebx
lea ecx, [esi + 0x42c4]
mov dword [esi + 0x4320], ebx
call fcn.004d5fd8
push 0xa4
mov byte [esi + 0x1de0], bl
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x3f
je 0x4a4c27
mov ecx, eax
call fcn.004d9caa
jmp 0x4a4c29
xor eax, eax
push 0x64
mov byte [ebp - 4], 0x3e
mov dword [esi + 0xdf4], eax
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x40
je 0x4a4c4f
mov ecx, eax
call fcn.004d92d7
jmp 0x4a4c51
xor eax, eax
mov dword [esi + 0xdf0], eax
mov dword [esi + 0xdf8], ebx
push 0x1c
lea eax, [esi + 0x1060]
mov dword [esi + 0xdfc], ebx
push ebx
mov dword [esi + 0x4368], ebx
push eax
mov byte [ebp - 4], 0x3e
mov dword [esi + 0x436c], ebx
call sub.MSVCRT.dll_memset
add esp, 0xc
call sub.WINMM.dll_timeGetTime
or dword [esi + 0x439c], 0xffffffff
mov ecx, esi
mov dword [esi + 0x4384], eax
mov dword [esi + 0x4398], ebx
mov dword [esi + 0x43fc], ebx
mov byte [esi + 0x43a4], bl
mov dword [esi + 0x43a0], ebx
mov dword [esi + 0x43a8], ebx
mov dword [esi + 0x43ac], ebx
call fcn.004aa999
push 0x10
lea eax, [esi + 0x1150]
push ebx
mov dword [0x56f9a4], ebx
push eax
mov dword [esi + 0x43c8], ebx
mov byte [esi + 0x1db1], bl
mov byte [esi + 0x1db0], bl
mov dword [esi + 0x10c8], ebx
mov dword [esi + 0x10f8], ebx
mov byte [esi + 0x10cc], bl
mov dword [esi + 0xc1c], ebx
mov dword [esi + 0x10d0], ebx
mov dword [esi + 0x10d4], ebx
mov dword [esi + 0x10d8], ebx
mov dword [esi + 0x10dc], ebx
mov dword [esi + 0x10e0], ebx
mov dword [esi + 0x10e4], ebx
mov dword [esi + 0x10ec], ebx
mov dword [esi + 0x10f0], ebx
mov dword [esi + 0x10f4], ebx
mov dword [esi + 0x10e8], ebx
mov byte [esi + 0x1140], bl
mov byte [esi + 0x1141], bl
mov dword [esi + 0x1144], ebx
mov dword [esi + 0x1148], ebx
mov dword [esi + 0x114c], ebx
mov byte [esi + 0x442c], bl
mov dword [esi + 0x4418], ebx
call sub.MSVCRT.dll_memset
mov ecx, dword [ebp - 0xc]
add esp, 0xc
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret