Function at 0x4fafae
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov dword [ebp - 8], 0
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.00506175
add esp, 0xc
cmp ebx, edi
nop
or eax, eax
jns 0x4fafdb
xchg edi, edi
nop
js 0x4fafdb
mov ebp, 0x44dc45c6
mov byte [ebp - 0x24], 0x44
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x69
mov byte [ebp - 0x15], 0x33
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x1e], 0x55
mov byte [ebp - 0x19], 0x66
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x69
mov byte [ebp - 0x22], 0x66
mov byte [ebp - 0x1d], 0x70
mov byte [ebp - 0x18], 0x6d
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xe], 0x70
lea esi, [esi + 0x4c39]
sub esi, 0x4c39
mov eax, eax
cld
and edi, edi
jae 0x4fb030
jmp 0x4fb02c
jb 0x4fb030
mov edi, 0xdf45c6ee
invalid
mov byte [ebp - 0x21], 0x62
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x20], 0x75
mov byte [ebp - 0x1b], 0x6d
mov byte [ebp - 0x16], 0x34
mov byte [ebp - 0x11], 0x71
mov byte [ebp - 0xc], 0
mov cl, byte [ebp - 0x24]
sub cl, 1
mov byte [ebp - 0x24], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x23]
sub al, 1
mov byte [ebp - 0x23], al
mov cl, byte [ebp - 0x1e]
sub cl, 1
mov byte [ebp - 0x1e], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x22]
sub dl, 1
mov byte [ebp - 0x22], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
jge 0x4fb0dc
cmp esp, 0x6d97
jae 0x4fb0e4
jge 0x4fb0ed
jge 0x4fb0e8
jo 0x4fb0ea
jl 0x4fb0ed
add eax, 0x80df4d8a
jmp 0xdf9d38f7
mov cl, byte [ebp - 0x21]
sub cl, 1
mov byte [ebp - 0x21], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
ror esp, 0
lea ebx, [ebx]
std
cld
js 0x4fb159
lea esp, [esp]
lea edi, [edi + 0x4694]
lea edi, [edi - 0x4694]
ja 0x4fb155
jns 0x4fb159
mov ecx, 0xb046e812
add byte [eax], al
call fcn.005061a4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4fb16f
or eax, 0xffffffff
jmp 0x4fb1f5
test dword [esp], esi
shl esp, 0
add esp, 0
xchg edx, ebx
xchg edx, ebx
jnp 0x4fb184
jle 0x4fb180
jp 0x4fb184
ljmp 0x8b51:0xdc4d8d6e
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004ecdaf
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4fb19f
or eax, 0xffffffff
jmp 0x4fb1f5
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.00506175
add esp, 0xc
cmp esp, 0x7748
jae 0x4fb1cd
pushf
xor edx, ecx
xor edx, ecx
rol edi, 0
popf
jae 0x4fb1c4
jl 0x4fb1c6
xchg edx, edi
xchg edx, edi
jb 0x4fb1cd
jmp 0x524bff5c
mov ecx, dword [ebp - 4]
push ecx
call fcn.0050c251
add esp, 4
neg ebx
neg ebx
jbe 0x4fb1ea
jle 0x4fb1e1
jb 0x4fb1e3
jae 0x4fb1e5
jp 0x4fb1e7
ja 0x4fb1ea
jmp 0x525c0779
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8