Function at 0x47830f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x49cb2e
call fcn.0045ce8c
sub esp, 0x220
push ebx
mov ebx, ecx
xor eax, eax
push esi
mov dword [ebp - 0x24], ebx
xor esi, esi
mov dword [ebx + 0x10], esi
mov dword [ebx + 0x14], 7
mov word [ebx], ax
lea eax, [ebp - 0x14]
mov dword [ebp - 4], esi
push 0x4c7c50
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 1
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1c]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7c64
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x40]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7c78
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 7
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x64]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7c90
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x88]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7b80
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0xac]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7ca8
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0xd0]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7ccc
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0xf4]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7cdc
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x118]
call fcn.00419fde
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7cf0
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x19
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x13c]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7d08
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x160]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7d24
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x184]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7d3c
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1a8]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7d54
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1cc]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7d68
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x1f0]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7d7c
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x214]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7d98
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x238]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7dac
push eax
call fcn.004b6474
pop ecx
pop ecx
mov byte [ebp - 4], 0x31
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x25c]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7dc0
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x280]
call fcn.00419fde
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7dd8
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x37
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x2a4]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x39
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7dfc
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x2c8]
call fcn.00482cd5
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7e18
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x300]
call fcn.00482cd5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7e34
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x338]
call fcn.00482cd5
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7e54
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x370]
call fcn.00482cd5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x45
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4c7e64
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x46
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x3a8]
call fcn.00482cd5
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x48
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x14]
push 0x4c7e74
push eax
call fcn.004b6474
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x49
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push ebx
lea ecx, [ebx + 0x3e0]
call fcn.00419fde
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0x208
lea eax, [ebp - 0x22c]
push esi
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x22c]
push eax
push esi
push esi
push 0x1c
push esi
call fcn.00417f08
lea eax, [ebp - 0x18]
push eax
call fcn.00450dd3
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x4c
push 0x4bc9d4
push eax
call fcn.0044b5e9
add esp, 0x30
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea eax, [ebp - 0x22c]
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
add esp, 0xc
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4b
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x22c]
push eax
push esi
call fcn.00482f84
lea eax, [ebp - 0x20]
push 0x4c7c20
push eax
call fcn.004b6474
mov esi, eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x4d
push eax
call fcn.00450dd3
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x4e
push 0x4bc9d4
push eax
call fcn.0044b5e9
push esi
push eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x4f
push eax
call fcn.0044915b
add esp, 0x2c
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea eax, [ebp - 0x22c]
push 0x104
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
add esp, 0xc
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x22c]
mov ecx, ebx
push eax
call fcn.004493be
lea eax, [ebp - 0x22c]
push eax
call fcn.004766fd
dec eax
neg eax
pop ecx
mov ecx, dword [ebp - 0xc]
sbb al, al
inc al
mov byte [ebx + 0x18], al
mov eax, ebx
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret