Function at 0x4ef0db
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00512b9e
add esp, 0xc
jb 0x4ef0f6
jb 0x4ef0f8
jno 0x4ef101
xchg ecx, ecx
jo 0x4ef101
mov ecx, 0x45c630ad
call 0xed94b74c
push esp
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x13], 0x54
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x65
mov byte [ebp - 0x17], 0x6d
mov byte [ebp - 0x12], 0x66
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0x16], 0x70
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0xc], 0x49
mov byte [ebp - 7], 0x66
mov byte [ebp - 0x15], 0x74
mov byte [ebp - 0x10], 0x77
mov byte [ebp - 0xb], 0x62
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x6f
js 0x4ef14f
sub esp, 0
mov ebx, ebx
jo 0x4ef15d
mov esi, esi
jno 0x4ef15d
mov edi, 0x4d8a9a32
call 0x8850dae4
dec ebp
call 0x813c46f4
ljmp 0x458a
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
xor ecx, dword [esp]
xor ecx, dword [esp]
jnp 0x4ef221
pushf
cmp esp, 0x51cb
cmp eax, dword [esp]
je 0x4ef20e
popf
jns 0x4ef212
lea ecx, [ecx + 0x1b45]
lea ecx, [ecx - 0x1b45]
jp 0x4ef221
call fcn.0051860d
add byte [ecx + 0x7d83fc45], cl
cld
add byte [ebp + 7], dh
call 0x4ef4b9
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4ef236
xor eax, eax
jmp 0x4ef2c9
jae 0x4ef238
rol ecx, 6
rol ecx, 0x1a
mov ecx, ecx
jbe 0x4ef260
pushf
not ebx
not ebx
test edi, ecx
popf
lea esp, [esp]
jo 0x4ef251
lea edx, [edx + 0x7237]
lea edx, [edx - 0x7237]
ja 0x4ef260
mov eax, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004f3a1e
mov dword [ebp - 0x1c], eax
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00512b9e
add esp, 0xc
cmp dword [ebp - 0x1c], 0
jne 0x4ef28a
xor eax, eax
jmp 0x4ef2c9
jl 0x4ef28c
shl esp, 0
jl 0x4ef2a2
lea ebx, [ebx]
lea esi, [esi + 0x4c56]
lea esi, [esi - 0x4c56]
jge 0x4ef2a2
mov ebx, 0x51e44d8b
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0050bbfe
add esp, 4
ror esp, 0
or esp, 0
test dword [esp + 4], ebx
je 0x4ef2c2
jno 0x4ef2bc
jo 0x4ef2be
jne 0x4ef2c2
ljmp 0xff52:0x8558b31
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4