Function at 0x4ecb1e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
call fcn.005165ad
mov ecx, dword [eax + 0x7c]
mov eax, dword [eax + 0x78]
add eax, ebx
jmp 0x4ecbe5
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0x7f
jmp 0x4ece30
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x4ecab1
pushal
mov dword [esp + 0x18], ebx
push bx
lea esp, [esp]
push word [esp]
push word [esp + 1]
push eax
push word [esp + 9]
push word [esp + 9]
lea esp, [esp + 2]
lea esp, [esp + 0xc]
popal
xor esi, esi
jmp 0x4eca93
lea esp, [esp + 4]
jmp 0x4ecadb
push edi
pushal
mov eax, 0x611b51c8
xchg dx, cx
mov cx, 0x5c95
setno dl
mov cx, 0xa37
jmp 0x56184c
cmp esi, eax
jb 0x561826
mov ecx, dword [ebp - 0x1c]
add eax, ecx
cmp esi, eax
jae 0x561826
jmp 0x561904
mov edi, dword [eax + 0x20]
and dword [ebp - 4], esi
add edi, ebx
cmp dword [eax + 0x18], esi
jbe 0x4ecb56
jmp 0x4ecb98
push esi
pushal
lea edx, [edx + 0x5d802da3]
mov di, 0x624
jmp 0x5611b7
push ebx
pushal
lea edi, [edi + ebp]
not bh
mov dword [esp + 0x10], ebp
push di
mov word [esp], cx
lea esp, [esp]
lea esp, [esp + 1]
mov byte [esp], ah
lea esp, [esp]
mov byte [esp], ch
jmp 0x56114a
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x4ecab1
cmp eax, ebx
jbe 0x4ecab1
mov edx, dword [ebp + 0xc]
cmp edx, 0x10000
jae 0x4ecb7b
mov ecx, dword [eax + 0x10]
cmp edx, ecx
jb 0x4ecb56
mov edi, dword [eax + 0x14]
add edi, ecx
cmp edx, edi
jae 0x4ecb56
sub edx, ecx
push edx
mov edx, eax
lea edx, [edx + 0x1c]
mov ecx, dword [edx]
pop edx
lea ecx, [ecx + edx*4]
jmp 0x4ecb30
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
lea esp, [esp + 1]
popal
lea ebx, [ebx + 0xc]
mov edx, dword [ebx]
pop ebx
jmp 0x4ecb98
mov di, sp
mov esi, dword [esp]
mov di, dx
mov esi, dword [esp]
mov dword [esp + 4], ebp
pushal
jmp 0x561624
push dword [esp + 8]
lea esp, [esp + 3]
lea esp, [esp + 0x14]
popal
lea esi, [esi - 4]
mov ecx, dword [esi]
pop esi
push esi
pushal
xchg bp, bx
mov ebp, esp
xchg dh, ah
jmp 0x56167c
lea esp, [esp + 0x11]
mov dword [esp + 7], ebp
push word [esp + 0xc]
pop word [esp + 7]
push esi
jmp 0x5615f8
mov dword [esp + 4], ecx
popal
lea esi, [esi*4]
lea esi, [esi + edi]
mov ecx, dword [esi]
pop esi
jmp 0x5616d4
setae dl
lea esi, [ebx + 0x523e]
setne dh
jmp 0x56165b
add ecx, ebx
pushal
pop word [esp + 0xc]
push word [esp + 5]
pop dword [esp + 0x14]
mov byte [esp + 0x12], cl
mov dword [esp + 8], esi
lea esp, [esp + 0x1c]
jmp 0x5618ca
test ecx, ecx
je 0x561894
inc dword [ebp - 4]
mov ecx, dword [ebp - 4]
cmp ecx, dword [eax + 0x18]
jb 0x4ecbb4
jmp 0x4ecb56
pop dword [esp + 4]
lea esp, [esp + 1]
xor ecx, ecx
pushfd
mov byte [esp], bh
push word [esp]
push dword [esp + 1]
mov byte [esp + 2], ch
pop word [esp]
mov byte [esp + 4], dl
push word [esp + 4]
lea esp, [esp + 2]
lea esp, [esp + 0x10]
jmp 0x561794
stc
cmc
pushfd
sub esp, 7
pop word [esp + 1]
push dword [esp + 7]
mov byte [esp + 7], al
jmp 0x5617b8
sbb ecx, ecx
sbb ecx, 0xffffffff
jmp 0x561794
test esi, esi
je 0x4ecab1
mov eax, esi
call fcn.00516540
jmp 0x4ece32
mov dword [esp], ebx
pushfd
mov dword [esp], edx
push word [esp + 3]
pop word [esp]
mov byte [esp + 2], cl
mov byte [esp + 2], al
mov byte [esp], bh
lea esp, [esp + 3]
mov byte [esp], bh
lea esp, [esp + 1]
popal
lea edi, [ecx + edi]
mov esi, dword [edi]
pop edi
add esi, ebx
jmp 0x4ecb56
mov edx, dword [ebp - 4]
push ebx
mov ebx, eax
lea ebx, [ebx + 0x24]
mov ecx, dword [ebx]
pop ebx
lea ecx, [ecx + edx*2]
movzx ecx, word [ecx + ebx]
mov edx, dword [eax + 0x1c]
lea ecx, [edx + ecx*4]
jmp 0x4ecb30
mov dword [ebp - 8], edx
mov edx, dword [ebp - 8]
mov dl, byte [edx]
cmp dl, byte [ecx]
jne 0x56181c
test dl, dl
je 0x5617f9
mov edx, dword [ebp - 8]
mov dl, byte [edx + 1]
mov byte [ebp + 0xb], dl
cmp dl, byte [ecx + 1]
jne 0x56181c
add dword [ebp - 8], 2
inc ecx
inc ecx
test dl, dl
jne 0x5618cd
je 0x5617f9
mov eax, esi
call fcn.00516566
mov edi, eax
push eax
mov eax, ebp
lea eax, [eax + 0xc]
mov dword [eax], edi
pop eax
test edi, edi
je 0x4ecab1
sub edi, esi
push edi
pushal
jmp 0x5619f4
pop word [esp + 1]
lea esp, [esp + 2]
mov byte [esp], dl
push word [esp + 1]
jmp 0x561b20
cmc
push cx
stc
cmc
pushfd
add esp, 1
push word [esp + 3]
push dword [esp + 4]
lea esp, [esp + 3]
cmp esi, ebx
pushfd
push word [esp + 3]
jmp 0x5619a7
mov di, bp
mov dword [esp + 0x14], esi
push dx
push esp
mov dword [esp], edx
push word [esp + 5]
push bp
pop dword [esp]
lea esp, [esp + 3]
mov byte [esp + 1], dl
lea esp, [esp + 3]
popal
lea ecx, [ebp - 0x120]
call fcn.00516531
pop ecx
lea eax, [ebp - 0x120]
push eax
mov byte [ebp + edi - 0x120], 0
call dword [0x4f6cb0]
mov esi, eax
test esi, esi
jne 0x5619c6
call fcn.00510b11
push ebx
mov ebx, eax
lea ebx, [ebx + 0x10]
mov eax, dword [ebx]
pop ebx
push esi
push esi
lea ecx, [ebp - 0x120]
push ax
pushal
mov dword [esp + 5], edx
push dx
pop dword [esp + 5]
pushfd
push word [esp + 0x1e]
push word [esp + 0xd]
pop dword [esp + 0x1e]
mov dword [esp + 0x20], ecx
push ax
push esi
mov byte [esp + 4], ah
push dword [esp + 2]
mov byte [esp + 8], bh
lea esp, [esp + 9]
lea esp, [esp]
mov byte [esp], ch
lea esp, [esp + 1]
lea esp, [esp + 0x20]
call eax
mov esi, eax
jmp 0x5619c6
lea esp, [esp + 8]
lea eax, [ecx + ebp - 0x18]
mov dl, byte [eax]
sub dl, 3
xor dl, 0x3f
inc ecx
cmp ecx, 0xf
mov byte [eax], dl
jmp 0x561cde
lea esp, [esp + 1]
pushfd
mov dword [esp], eax
lea esp, [esp]
pop word [esp + 1]
lea esp, [esp + 1]
xor ecx, ecx
pushfd
push word [esp + 3]
lea esp, [esp + 2]
jmp 0x561a9f
mov ecx, dword [ebp + 0xc]
lea eax, [ecx + 1]
cmp byte [eax], 0x23
jne 0x561c3b
add ecx, 2
push ecx
jmp 0x561c0f
mov dword [esp], edi
push word [esp + 1]
push word [esp + 2]
lea esp, [esp + 0x10]
jne 0x561af4
mov byte [ebp - 0xa], 0x42
mov byte [ebp - 0xb], 0x56
mov byte [ebp - 0xc], 0x56
mov byte [ebp - 0xd], 0x5e
mov byte [ebp - 0xe], 0x14
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0x10], 0x4f
mov byte [ebp - 0x11], 0x61
mov byte [ebp - 0x12], 0x80
mov byte [ebp - 0x13], 0x56
mov byte [ebp - 0x14], 0x5d
mov byte [ebp - 0x15], 0x54
mov byte [ebp - 0x16], 0x50
mov byte [ebp - 0x17], 0x5d
mov byte [ebp - 0x18], 0x77
cmc
clc
cmc
pushfd
jmp 0x561ac6
mov ecx, dword [esp]
pushal
mov byte [esp + 0x1a], dl
pop word [esp]
mov word [esp + 0x11], bx
push word [esp + 0xe]
jmp 0x561c7f
call fcn.004ff21b
bswap cx
mov ecx, dword [esp]
bswap cx
not cx
setg cl
mov ecx, dword [esp]
mov cx, 0x6db8
jmp 0x561beb
push eax
push dx
lea esp, [esp]
lea esp, [esp + 1]
lea esp, [esp + 1]
push esi
call fcn.004ecc42
jmp 0x4ece32
pop dword [esp + 9]
push word [esp + 0x18]
mov byte [esp + 0x17], bl
lea esp, [esp + 2]
lea esp, [esp + 0x20]
jmp 0x561c3b
jl 0x561aa3
lea eax, [ebp - 0x18]
push eax
call dword [0x4f6cb0]
pushal
mov ecx, dword [esp]
mov cx, word [esp]
lea ebx, [esp + edi]
mov cl, byte [esp]
mov dword [esp + 4], eax
pushal
push ax
pushal
mov byte [esp + 0x26], dh
pop word [esp + 0x15]
mov word [esp + 0x1f], bp
lea esp, [esp + 0xd]
lea esp, [esp + 3]
lea esp, [esp + 0x30]
popal
jmp 0x561af4