Function at 0x4ec1bc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.00506175
add esp, 0xc
lea esp, [esp]
lea edi, [edi]
shr eax, 0
stc
jge 0x4ec1e6
xchg edi, edi
jl 0x4ec1e6
mov esi, 0xe445c6ec
push edx
mov byte [ebp - 0x1c], 0x52
mov byte [ebp - 0x17], 0x54
mov byte [ebp - 0x12], 0x64
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x1b], 0x76
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x66
mov byte [ebp - 0xc], 0x76
mov byte [ebp - 0x1a], 0x66
mov byte [ebp - 0x15], 0x73
mov byte [ebp - 0x10], 0x54
mov byte [ebp - 0xb], 0x74
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x14], 0x77
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x7a
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x62
nop
ror eax, 4
ror eax, 0x1c
jg 0x4ec245
nop
jo 0x4ec23e
jge 0x4ec240
jns 0x4ec242
jle 0x4ec245
sub eax, 0x80e44d8a
jmp 0xe49c4a4f
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
jnp 0x4ec2e3
jge 0x4ec300
pushf
ror edx, 3
ror edx, 0x1d
xor edx, dword [esp + 0x10]
xor edx, dword [esp + 0x10]
popf
jp 0x4ec2f9
jp 0x4ec2fb
jb 0x4ec2fd
jl 0x4ec300
mov eax, 0xdff3e8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 7], dh
call fcn.004fa2f8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4ec315
xor eax, eax
jmp 0x4ec3c9
sub esi, 0
jl 0x4ec325
jb 0x4ec31c
je 0x4ec31e
jnp 0x4ec320
js 0x4ec322
jge 0x4ec325
mov edi, 0x51e44d8d
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004ecdaf
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.00506175
add esp, 0xc
xor ecx, dword [esp + 0x10]
xor ecx, dword [esp + 0x10]
jbe 0x4ec354
jp 0x4ec351
ja 0x4ec354
jmp 0x14b40db
cmp dword [ebp - 4], 0
jne 0x4ec35e
xor eax, eax
jmp 0x4ec3c9
ja 0x4ec360
xor ecx, 0x253c
xor ecx, 0x253c
shl esp, 0
add esp, 0
jae 0x4ec37d
jb 0x4ec376
ja 0x4ec378
jns 0x4ec37a
jb 0x4ec37d
mov eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.0050c251
add esp, 4
jg 0x4ec38b
js 0x4ec38d
lea edx, [edx + 0x6b7d]
lea edx, [edx - 0x6b7d]
rol esi, 0x1c
ror esi, 0x1c
jo 0x4ec3be
pushf
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
test edi, 0x590
ror eax, 0x11
ror eax, 0xf
popf
jns 0x4ec3bb
jno 0x4ec3be
or dword [ebx - 0x74adf3ab], 0xff500845
push ebp
cld
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8