Function at 0x4a4fad
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, 0x56d0b0
jmp 0x4a4f9f
mov eax, 0x51ffc4
call fcn.004efe80
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
call fcn.004b546f
lea edi, [esi + 0xe34]
xor ebx, ebx
mov ecx, edi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ecx
call fcn.004cbdbb
mov eax, edi
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc4]
call fcn.004cbdbb
lea ecx, [esi + 0xfc0]
mov byte [ebp - 4], 2
call fcn.004db02b
lea ecx, [esi + 0xfd4]
mov byte [ebp - 4], 3
call fcn.004ee935
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1000]
push eax
mov byte [ebp - 4], 5
call fcn.0047bc63
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1028]
push eax
mov byte [ebp - 4], 8
call fcn.004abb6a
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1094]
push eax
mov byte [ebp - 4], 0xb
call fcn.004abbcd
lea ecx, [esi + 0x1114]
mov byte [ebp - 4], 0xd
call fcn.004ab6d4
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1120]
push eax
mov byte [ebp - 4], 0xf
call fcn.004abcc4
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1178]
push eax
mov byte [ebp - 4], 0x12
call fcn.004abd14
lea ecx, [esi + 0x11a0]
mov byte [ebp - 4], 0x14
call fcn.004dadbb
mov byte [ebp - 4], 0x15
lea ecx, [esi + 0x11d8]
call fcn.004ee935
lea ecx, [esi + 0x11e8]
mov byte [ebp - 4], 0x16
call fcn.004da92a
lea ecx, [esi + 0x1224]
mov byte [ebp - 4], 0x17
call fcn.004d8e70
lea ecx, [esi + 0x12bc]
mov byte [ebp - 4], 0x18
call fcn.004d87d6
lea ecx, [esi + 0x1360]
mov byte [ebp - 4], 0x19
call fcn.004dadbb
lea ecx, [esi + 0x1398]
mov byte [ebp - 4], 0x1a
call fcn.004d87a2
lea ecx, [esi + 0x13a4]
mov byte [ebp - 4], 0x1b
call fcn.004d83d2
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x13d4]
push eax
mov byte [ebp - 4], 0x1d
call fcn.004abd64
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x13fc]
push eax
mov byte [ebp - 4], 0x20
call fcn.004abd64
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1424]
push eax
mov byte [ebp - 4], 0x23
call fcn.004abd64
lea eax, [esi + 0x1db0]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x1dcc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x1dd8]
mov byte [ebp - 4], 0x27
call fcn.004ab591
lea ecx, [esi + 0x1de4]
mov byte [ebp - 4], 0x28
call fcn.004ab591
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1f28]
push eax
mov byte [ebp - 4], 0x2a
call fcn.004abdfb
lea ecx, [esi + 0x1f88]
mov byte [ebp - 4], 0x2c
call fcn.004acdfe
lea ecx, [esi + 0x2e20]
mov byte [ebp - 4], 0x2d
call fcn.004acdfe
lea ecx, [esi + 0x3cb8]
mov byte [ebp - 4], 0x2e
call fcn.004bca2a
lea ecx, [esi + 0x3d08]
mov byte [ebp - 4], 0x2f
call fcn.004c2f3d
lea ecx, [esi + 0x3f3c]
mov byte [ebp - 4], 0x30
call fcn.004c5523
lea ecx, [esi + 0x417c]
mov byte [ebp - 4], 0x31
call fcn.004bd8df
lea ecx, [esi + 0x42dc]
mov byte [ebp - 4], 0x32
call fcn.004d7f00
lea ecx, [esi + 0x430c]
mov byte [ebp - 4], 0x33
call fcn.004d7eac
lea eax, [esi + 0x4378]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x4384]
mov byte [ebp - 4], 0x35
call fcn.004ee935
lea ecx, [esi + 0x4394]
mov byte [ebp - 4], 0x36
call fcn.004ee935
lea ecx, [esi + 0x4414]
mov byte [ebp - 4], 0x37
call fcn.004095fb
lea ecx, [esi + 0x4420]
mov byte [ebp - 4], 0x38
call fcn.004095fb
lea eax, [esi + 0x442c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x4438]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x4448]
lea eax, [ebp - 0xd]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0xe]
push eax
call fcn.004abac3
lea ecx, [esi + 0x4454]
mov byte [ebp - 4], 0x3d
call fcn.004ab591
mov dword [esi], 0x534920
mov dword [esi + 0x3c4], 6
mov dword [esi + 0xe28], ebx
mov byte [ebp - 4], 0x3e
mov dword [esi + 0xe24], ebx
mov dword [esi + 0xff4], ebx
mov dword [esi + 0xff8], ebx
push 0xffffffffffffffff
mov ecx, edi
mov dword [esi + 0xe1c], ebx
call fcn.004cbe3e
push 0xffffffffffffffff
lea ecx, [esi + 0xef8]
call fcn.004cbe3e
lea ecx, [esi + 0x1094]
mov dword [esi + 0x11e4], 1
call fcn.0049e6e8
mov dword [esi + 0x1df0], 0xc8
push 9
mov dword [esi + 0x43a8], ebx
mov dword [esi + 0x43ac], ebx
lea edi, [esi + 0x1050]
pop ecx
xor eax, eax
mov dword [esi + 0xfe8], ebx
rep stosd dword es:[edi], eax
or dword [esi + 0xfd0], 0xffffffff
mov ecx, esi
call fcn.004a8a37
lea ecx, [esi + 0x13d4]
call fcn.0049e6e8
lea ecx, [esi + 0x13fc]
call fcn.0049e6e8
lea ecx, [esi + 0x1424]
call fcn.0049e6e8
mov ecx, esi
mov dword [esi + 0x1dc4], ebx
call fcn.004a93d4
lea eax, [esi + 0x1e24]
mov dword [esi + 0x10c4], ebx
push str.NULL
mov dword [esi + 0x10bc], ebx
push eax
mov dword [esi + 0x10c8], ebx
call sub.MSVCRT.dll_strcpy
mov dword [esi + 0x3cc], 0xc
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0xffc], eax
push 0x10
lea eax, [esi + 0x415c]
push ebx
push eax
call sub.MSVCRT.dll_memset
push 0x10
lea eax, [esi + 0x416c]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0x20
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0x1df4], eax
call sub.WINMM.dll_timeGetTime
mov dword [esi + 0x1e04], eax
mov dword [esi + 0x1e08], ebx
mov dword [esi + 0x1e18], ebx
mov dword [esi + 0x1e0c], ebx
or dword [esi + 0x1f24], 0xffffffff
mov dword [esi + 0xe30], ebx
mov dword [esi + 0x42cc], ebx
mov dword [esi + 0xe20], ebx
mov dword [esi + 0x4360], ebx
mov dword [esi + 0x4364], ebx
lea ecx, [esi + 0x430c]
mov dword [esi + 0x4368], ebx
call fcn.004d7ed8
push 0xa4
mov byte [esi + 0x1df8], bl
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x3f
je 0x4a5414
mov ecx, eax
call fcn.004dbbd9
jmp 0x4a5416
xor eax, eax
push 0x64
mov byte [ebp - 4], 0x3e
mov dword [esi + 0xe0c], eax
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x40
je 0x4a543c
mov ecx, eax
call fcn.004db206
jmp 0x4a543e
xor eax, eax
mov dword [esi + 0xe08], eax
mov dword [esi + 0xe10], ebx
push 0x1c
lea eax, [esi + 0x1078]
mov dword [esi + 0xe14], ebx
push ebx
mov dword [esi + 0x43b0], ebx
push eax
mov byte [ebp - 4], 0x3e
mov dword [esi + 0x43b4], ebx
call sub.MSVCRT.dll_memset
add esp, 0xc
call sub.WINMM.dll_timeGetTime
or dword [esi + 0x43e4], 0xffffffff
mov ecx, esi
mov dword [esi + 0x43cc], eax
mov dword [esi + 0x43e0], ebx
mov dword [esi + 0x4444], ebx
mov byte [esi + 0x43ec], bl
mov dword [esi + 0x43e8], ebx
mov dword [esi + 0x43f0], ebx
mov dword [esi + 0x43f4], ebx
call fcn.004ab195
push 0x10
lea eax, [esi + 0x1168]
push ebx
mov dword [0x571a44], ebx
push eax
mov dword [esi + 0x4410], ebx
mov byte [esi + 0x1dc9], bl
mov byte [esi + 0x1dc8], bl
mov dword [esi + 0x10e0], ebx
mov dword [esi + 0x1110], ebx
mov byte [esi + 0x10e4], bl
mov dword [esi + 0xc34], ebx
mov dword [esi + 0x10e8], ebx
mov dword [esi + 0x10ec], ebx
mov dword [esi + 0x10f0], ebx
mov dword [esi + 0x10f4], ebx
mov dword [esi + 0x10f8], ebx
mov dword [esi + 0x10fc], ebx
mov dword [esi + 0x1104], ebx
mov dword [esi + 0x1108], ebx
mov dword [esi + 0x110c], ebx
mov dword [esi + 0x1100], ebx
mov byte [esi + 0x1158], bl
mov byte [esi + 0x1159], bl
mov dword [esi + 0x115c], ebx
mov dword [esi + 0x1160], ebx
mov dword [esi + 0x1164], ebx
mov byte [esi + 0x4474], bl
mov dword [esi + 0x4460], ebx
call sub.MSVCRT.dll_memset
mov ecx, dword [ebp - 0xc]
add esp, 0xc
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret