Function at 0x4f9947
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x144
mov eax, 0x770566
call fcn.00736d13
xor ebx, ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x28]
push eax
call fcn.004f9c2d
mov byte [ebp - 4], 1
lea edx, [ebp - 0x9c]
mov ecx, eax
call fcn.0049ec33
mov byte [ebp - 4], bl
xor edi, edi
push ebx
inc edi
lea ecx, [ebp - 0x28]
push edi
call fcn.00482a51
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 0x9c]
sar eax, 2
test eax, eax
je 0x4f9a41
lea eax, [ebp - 0x40]
push eax
call fcn.004f9cd7
mov esi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
push 0x848a48
call fcn.004824e0
mov byte [ebp - 4], 3
mov edx, str.BUKRJPL2438JXN40QEN4H994GO3LQ556ZN1D2EMQ0P3PV7TC9QXQ09F14YH4XROLWKJPNZ4NZDZYDEEWGC6UBGUT3FGTC5OTX7R0ZM7IVNXKHRWBFKH1E3S10S11P9MVMR2GJZQ0744DLN8CPVXY3G5YLN1XEJULL31OXDI4MVFD
push eax
lea ecx, [ebp - 0x70]
call fcn.0048c246
mov byte [ebp - 4], 4
mov edx, eax
lea ecx, [ebp - 0x28]
mov dword [esp], str.0GXPTWMBUJJL0Z83K2YKAXDEBQAB
call fcn.0048c3b1
mov byte [ebp - 4], 5
mov edx, eax
push ecx
push esi
push 0x20
pop ecx
call fcn.005febc7
add esp, 0xc
mov byte [ebp - 4], 4
push ebx
push edi
lea ecx, [ebp - 0x28]
call fcn.00482a51
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
push ebx
push edi
call fcn.00482a51
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x58]
push ebx
push edi
call fcn.00482a51
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x40]
push ebx
push edi
call fcn.00482a51
lea eax, [ebp - 0x40]
mov byte [ebp - 0x89], bl
push eax
call fcn.004f9d85
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x89]
mov dword [ebp - 0x90], edi
mov edx, eax
push ebx
push ecx
mov edi, 0x80000002
mov ecx, edi
call fcn.004abbc1
pop ecx
pop ecx
test al, al
je 0x4f9a81
cmp byte [ebp - 0x89], 0
je 0x4f9a81
mov bl, 1
and dword [ebp - 4], 0
xor eax, eax
inc eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x90], eax
and eax, 0xfffffffe
push 0
push 1
mov dword [ebp - 0x90], eax
call fcn.00482a51
test bl, bl
je 0x4f9c18
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], ebx
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 7
lea eax, [ebp - 0x58]
push eax
call fcn.004f9f25
mov esi, eax
mov byte [ebp - 4], 8
lea eax, [ebp - 0x40]
push eax
call fcn.004f9e55
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
push ebx
push ecx
push esi
mov edx, eax
mov ecx, edi
call fcn.004ab9f2
add esp, 0xc
mov byte [ebp - 4], 8
xor edi, edi
lea ecx, [ebp - 0x40]
push ebx
inc edi
push edi
call fcn.00482a51
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x58]
push ebx
push edi
call fcn.00482a51
push ecx
push ecx
lea ecx, [ebp - 0x150]
call fcn.0049b261
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x40]
push eax
call fcn.004f9fd3
mov byte [ebp - 4], 0xb
mov edx, eax
lea ecx, [ebp - 0x140]
call fcn.0049d762
lea edx, [ebp - 0x28]
mov ecx, eax
call fcn.0049d762
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x40]
push ebx
push edi
call fcn.00482a51
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x150]
call fcn.004a1dcf
mov esi, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x70]
push 0x848a6c
call fcn.004824e0
mov byte [ebp - 4], 0xd
mov edx, 0x848a70
push eax
lea ecx, [ebp - 0x58]
call fcn.0048c246
mov byte [ebp - 4], 0xe
mov dword [esp], str.HC8WAHX7XCWWRKV9V3LMBVMG2096
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.0048c3b1
mov byte [ebp - 4], 0xf
mov edx, eax
push ecx
push esi
push 0x20
pop ecx
call fcn.005febc7
add esp, 0xc
mov byte [ebp - 4], 0xe
push ebx
push edi
lea ecx, [ebp - 0x40]
call fcn.00482a51
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x58]
push ebx
push edi
call fcn.00482a51
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x70]
push ebx
push edi
call fcn.00482a51
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x88]
push ebx
push edi
call fcn.00482a51
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.0049b2e2
lea ecx, [ebp - 0xe8]
call fcn.00497914
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x28]
push ebx
push edi
call fcn.00482a51
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.004a2202
call fcn.00736cc2
ret