Function at 0x6180ae
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xac
mov eax, dword [0x73cb90]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
mov al, byte [esi + 0x12c]
cmp al, 8
push edi
mov dword [ebp - 0xa8], ecx
jae 0x618147
push 8
movzx ebx, al
pop edi
sub edi, ebx
push edi
lea eax, [ecx + ebx + 0x20]
push eax
push esi
call fcn.0061ce55
mov eax, dword [ebp - 0xa8]
push edi
add eax, 0x20
push ebx
push eax
mov byte [esi + 0x12c], 8
call fcn.00615a0d
test eax, eax
je 0x61813b
cmp ebx, 4
jae 0x618130
mov eax, dword [ebp - 0xa8]
add edi, 0xfffffffc
push edi
push ebx
add eax, 0x20
push eax
call fcn.00615a0d
test eax, eax
je 0x618130
push 0x427a9c
jmp 0x618135
push 0x427a74
push esi
call fcn.00615936
cmp ebx, 3
jae 0x618147
or dword [esi + 0x68], 0x1000
xor al, al
mov byte [ebp - 0x2c], 0x49
mov byte [ebp - 0x2b], 0x48
mov byte [ebp - 0x2a], 0x44
mov byte [ebp - 0x29], 0x52
mov byte [ebp - 0x28], al
mov byte [ebp - 0xc], 0x49
mov byte [ebp - 0xb], 0x44
mov byte [ebp - 0xa], 0x41
mov byte [ebp - 9], 0x54
mov byte [ebp - 8], al
mov byte [ebp - 0x8c], 0x49
mov byte [ebp - 0x8b], 0x45
mov byte [ebp - 0x8a], 0x4e
mov byte [ebp - 0x89], 0x44
mov byte [ebp - 0x88], al
mov byte [ebp - 0x14], 0x50
mov byte [ebp - 0x13], 0x4c
mov byte [ebp - 0x12], 0x54
mov byte [ebp - 0x11], 0x45
mov byte [ebp - 0x10], al
mov byte [ebp - 0x44], 0x62
mov byte [ebp - 0x43], 0x4b
mov byte [ebp - 0x42], 0x47
mov byte [ebp - 0x41], 0x44
mov byte [ebp - 0x40], al
mov byte [ebp - 0x7c], 0x63
mov byte [ebp - 0x7b], 0x48
mov byte [ebp - 0x7a], 0x52
mov byte [ebp - 0x79], 0x4d
mov byte [ebp - 0x78], al
mov byte [ebp - 0x54], 0x67
mov byte [ebp - 0x53], 0x41
mov byte [ebp - 0x52], 0x4d
mov byte [ebp - 0x51], 0x41
mov byte [ebp - 0x50], al
mov byte [ebp - 0x9c], 0x68
mov byte [ebp - 0x9b], 0x49
mov byte [ebp - 0x9a], 0x53
mov byte [ebp - 0x99], 0x54
mov byte [ebp - 0x98], al
mov byte [ebp - 0x74], 0x69
mov byte [ebp - 0x73], 0x43
mov byte [ebp - 0x72], 0x43
mov byte [ebp - 0x71], 0x50
mov byte [ebp - 0x70], al
mov byte [ebp - 0x1c], 0x6f
mov byte [ebp - 0x1b], 0x46
mov byte [ebp - 0x1a], 0x46
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x18], al
mov byte [ebp - 0x64], 0x70
mov byte [ebp - 0x63], 0x43
mov byte [ebp - 0x62], 0x41
mov byte [ebp - 0x61], 0x4c
mov byte [ebp - 0x60], al
mov byte [ebp - 0x3c], 0x70
mov byte [ebp - 0x3b], 0x48
mov byte [ebp - 0x3a], 0x59
mov byte [ebp - 0x39], 0x73
mov byte [ebp - 0x38], al
mov byte [ebp - 0x4c], 0x73
mov byte [ebp - 0x4b], 0x42
mov byte [ebp - 0x4a], 0x49
mov byte [ebp - 0x49], 0x54
mov byte [ebp - 0x48], al
mov byte [ebp - 0x24], 0x73
mov byte [ebp - 0x23], 0x43
mov byte [ebp - 0x22], 0x41
mov byte [ebp - 0x21], 0x4c
mov byte [ebp - 0x20], al
mov byte [ebp - 0x84], 0x73
mov byte [ebp - 0x83], 0x50
mov byte [ebp - 0x82], 0x4c
mov byte [ebp - 0x81], 0x54
mov byte [ebp - 0x80], al
mov byte [ebp - 0x5c], 0x73
mov byte [ebp - 0x5b], 0x52
mov byte [ebp - 0x5a], 0x47
mov byte [ebp - 0x59], 0x42
mov byte [ebp - 0x58], al
mov byte [ebp - 0x94], 0x74
mov byte [ebp - 0x93], 0x45
mov byte [ebp - 0x92], 0x58
mov byte [ebp - 0x91], 0x74
mov byte [ebp - 0x90], al
mov byte [ebp - 0xa4], 0x74
mov byte [ebp - 0xa3], 0x49
mov byte [ebp - 0xa2], 0x4d
mov byte [ebp - 0xa1], 0x45
mov byte [ebp - 0xa0], al
mov byte [ebp - 0x6c], 0x74
mov byte [ebp - 0x6b], 0x52
mov byte [ebp - 0x6a], 0x4e
mov byte [ebp - 0x69], 0x53
mov byte [ebp - 0x68], al
mov byte [ebp - 0x34], 0x7a
mov byte [ebp - 0x33], 0x54
mov byte [ebp - 0x32], 0x58
mov byte [ebp - 0x31], 0x74
mov byte [ebp - 0x30], al
lea edi, [esi + 0x11c]
push 4
lea eax, [ebp - 0xac]
push eax
push esi
call fcn.0061ce55
lea eax, [ebp - 0xac]
push eax
push esi
call fcn.00621154
push esi
mov ebx, eax
call fcn.00615b3c
push 4
push edi
push esi
call fcn.006202bb
mov eax, dword [edi]
cmp eax, dword [ebp - 0x2c]
jne 0x618356
push ebx
push dword [ebp - 0xa8]
push esi
call fcn.00621217
jmp 0x618313
cmp eax, dword [ebp - 0x8c]
jne 0x61836d
push ebx
push dword [ebp - 0xa8]
push esi
call fcn.0062149b
jmp 0x618313
push edi
push esi
call fcn.00615fab
test eax, eax
mov eax, dword [edi]
je 0x6183be
cmp eax, dword [ebp - 0xc]
jne 0x618383
or dword [esi + 0x68], 4
push ebx
push dword [ebp - 0xa8]
push esi
call fcn.00622a93
mov eax, dword [edi]
cmp eax, dword [ebp - 0x14]
jne 0x6183a0
or dword [esi + 0x68], 2
jmp 0x618313
cmp eax, dword [ebp - 0xc]
jne 0x618313
mov eax, dword [esi + 0x68]
test al, 1
jne 0x6184ec
push 0x427a58
jmp 0x6184fe
cmp eax, dword [ebp - 0x14]
jne 0x6183d5
push ebx
push dword [ebp - 0xa8]
push esi
call fcn.0062135b
jmp 0x618313
cmp eax, dword [ebp - 0xc]
je 0x618506
cmp eax, dword [ebp - 0x44]
push ebx
push dword [ebp - 0xa8]
push esi
jne 0x6183f5
call fcn.006220b1
jmp 0x618313
cmp eax, dword [ebp - 0x7c]
jne 0x618404
call fcn.00621709
jmp 0x618313
cmp eax, dword [ebp - 0x54]
jne 0x618413
call fcn.006214e2
jmp 0x618313
cmp eax, dword [ebp - 0x9c]
jne 0x618425
call fcn.00622238
jmp 0x618313
cmp eax, dword [ebp - 0x1c]
jne 0x618434
call fcn.006223f6
jmp 0x618313
cmp eax, dword [ebp - 0x64]
jne 0x618443
call fcn.006224a9
jmp 0x618313
cmp eax, dword [ebp - 0x24]
jne 0x618452
call fcn.00622663
jmp 0x618313
cmp eax, dword [ebp - 0x3c]
jne 0x618461
call fcn.00622345
jmp 0x618313
cmp eax, dword [ebp - 0x4c]
jne 0x618470
call fcn.006215f5
jmp 0x618313
cmp eax, dword [ebp - 0x5c]
jne 0x61847f
call fcn.00621a4f
jmp 0x618313
cmp eax, dword [ebp - 0x74]
jne 0x61848e
call fcn.00621bfd
jmp 0x618313
cmp eax, dword [ebp - 0x84]
jne 0x6184a0
call fcn.00621d55
jmp 0x618313
cmp eax, dword [ebp - 0x94]
jne 0x6184b2
call fcn.00622865
jmp 0x618313
cmp eax, dword [ebp - 0xa4]
jne 0x6184c4
call fcn.0062279b
jmp 0x618313
cmp eax, dword [ebp - 0x6c]
jne 0x6184d3
call fcn.00621eff
jmp 0x618313
cmp eax, dword [ebp - 0x34]
jne 0x6184e2
call fcn.0062295c
jmp 0x618313
call fcn.00622a93
jmp 0x618313
cmp byte [esi + 0x126], 3
jne 0x618536
test al, 2
jne 0x618536
push 0x427a3c
push esi
call fcn.00615936
jmp 0x618536
mov eax, dword [esi + 0x68]
test al, 1
jne 0x618514
push 0x427a58
jmp 0x618526
cmp byte [esi + 0x126], 3
jne 0x61852c
test al, 2
jne 0x61852c
push 0x427a3c
push esi
call fcn.00615936
or dword [esi + 0x68], 4
mov dword [esi + 0x10c], ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00666f65
leave
ret 8