Function at 0x4f570
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov edx, dword [sym.imp.ntoskrnl.exe_NtBuildNumber]
push ebx
mov ebx, eax
mov ecx, dword [ebx + 0x3c]
mov eax, 0x1770
push esi
mov byte [ebp - 1], 0
cmp word [edx], ax
jae 0x4f598
push 0x2f6
jmp 0x4f59d
push 0x2f8
call fcn.00049640
push 0x1098
mov dword [ebp - 0x14], eax
call fcn.00049650
xor esi, esi
cmp dword [ebp - 0x14], esi
je 0x4f8b2
mov eax, dword [ecx + ebx + 0x34]
mov dword [ebp - 0x18], eax
mov eax, dword [sym.imp.ntoskrnl.exe_NtBuildNumber]
mov edx, 0x1770
push edi
cmp word [eax], dx
jae 0x4f655
mov ecx, dword [ecx + ebx + 0x28]
mov eax, dword [ebp + 8]
mov dword [ebp - 8], ecx
cmp ecx, eax
jae 0x4f70a
lea edx, [ecx + 0x1000]
cmp edx, eax
jae 0x4f70a
lea edi, [ecx + ebx]
lea eax, [edi + 0x1000]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esi
mov ecx, dword [ebp - 0xc]
push ecx
lea esi, [ebp - 0x5c]
mov ecx, edi
call fcn.00032c70
test al, al
je 0x4f705
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
add edi, dword [ebp - 0x44]
cmp eax, 0x10cd
je 0x4f705
cmp eax, 0x10ce
jne 0x4f644
mov eax, dword [ebp - 0x50]
sub eax, ebx
add eax, edi
cmp eax, dword [ebp + 8]
jb 0x4f702
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x1e
jb 0x4f604
jmp 0x4f705
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x2c]
push eax
push edi
xor edx, edx
mov eax, ebx
mov dword [ebp - 0x2c], 0x50617441
mov dword [ebp - 0x28], 0x4974726f
mov dword [ebp - 0x24], 0x6974696e
mov dword [ebp - 0x20], 0x7a696c61
mov dword [ebp - 0x1c], 0x65
call fcn.00015090
cmp eax, esi
je 0x4f8b1
cmp eax, edi
jae 0x4f8b1
lea ecx, [eax + 0x1000]
cmp ecx, edi
jae 0x4f8b1
lea edi, [eax + ebx]
lea edx, [edi + 0x1000]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0xc]
push eax
lea esi, [ebp - 0x5c]
mov ecx, edi
call fcn.00032c70
test al, al
je 0x4f8b1
mov ecx, dword [ebp - 0x3c]
add edi, dword [ebp - 0x44]
cmp dword [ecx], 0x10cd
je 0x4f6f2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x32
jb 0x4f6b6
mov al, byte [ebp - 1]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebp - 0x50]
sub eax, ebx
add eax, edi
cmp eax, dword [ebp + 8]
jae 0x4f8b1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
xor esi, esi
cmp ecx, esi
je 0x4f8b1
mov eax, dword [ebp + 8]
cmp ecx, eax
jae 0x4f8b1
lea edx, [ecx + 0x1000]
cmp edx, eax
jae 0x4f8b1
lea edi, [ecx + ebx]
lea eax, [edi + 0x1000]
xor bl, bl
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
cmp edi, eax
jae 0x4f8b1
jmp 0x4f763
mov eax, dword [ebp - 0xc]
push eax
lea esi, [ebp - 0x5c]
mov ecx, edi
call fcn.00032c70
test al, al
je 0x4f8b1
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
cmp ecx, 0x10b8
jne 0x4f817
mov eax, dword [ebp - 0x4c]
test eax, eax
jle 0x4f894
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
jbe 0x4f894
sub eax, ecx
cmp dword [ebp + 8], eax
jbe 0x4f894
mov ecx, dword [ebp - 0x50]
cmp ecx, 0x30
jne 0x4f7cd
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x314], eax
add eax, dword [ebp - 0x14]
mov byte [ebp - 1], 1
mov dword [ecx + 0x318], eax
mov bl, 1
jmp 0x4f899
lea edx, [ecx - 0x38]
cmp edx, 0x6c
ja 0x4f894
test ecx, 3
jne 0x4f894
add ecx, 0xffffffc8
shr ecx, 2
cmp ecx, 0x1b
ja 0x4f894
lea edx, [ecx*8]
sub edx, ecx
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx + edx*4]
mov dword [ecx + 4], eax
add eax, dword [ebp - 0x14]
mov byte [ebp - 1], 1
mov dword [ecx + 8], eax
mov bl, 1
jmp 0x4f899
lea eax, [ecx - 0x10ab]
cmp eax, 7
ja 0x4f841
mov eax, dword [ebp - 0x4c]
test eax, eax
jle 0x4f894
cmp eax, dword [ebp - 0x18]
jbe 0x4f894
mov edx, eax
sub edx, dword [ebp - 0x18]
cmp dword [ebp + 8], edx
jbe 0x4f894
mov dword [ebp + ecx*4 - 0x42e4], eax
jmp 0x4f894
cmp ecx, 0x107c
jne 0x4f894
mov eax, dword [ebp - 0x50]
lea ecx, [eax - 0x38]
cmp ecx, 0x6c
ja 0x4f894
test al, 3
jne 0x4f894
lea ecx, [eax - 0x38]
shr ecx, 2
cmp ecx, 0x1b
ja 0x4f894
movzx edx, byte [ebp - 0x54]
shr edx, 3
and edx, 7
mov eax, dword [ebp + edx*4 - 0x38]
test eax, eax
je 0x4f894
sub eax, dword [ebp - 0x18]
lea edx, [ecx*8]
sub edx, ecx
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx + edx*4]
mov dword [ecx + 4], eax
add eax, dword [ebp - 0x14]
mov byte [ebp - 1], 1
mov dword [ecx + 8], eax
cmp bl, 1
jne 0x4f8a5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x14
ja 0x4f8b1
add edi, dword [ebp - 0x44]
cmp edi, dword [ebp - 0xc]
jb 0x4f760
pop edi
mov al, byte [ebp - 1]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8