Function at 0x61bea3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov eax, dword [0x10148050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0xb0], eax
test esi, esi
je 0x61c252
push ebx
push edi
push 0
push esi
call fcn.0061fed3
add esp, 8
mov bl, 0x54
jmp 0x61bee3
push esi
mov dword [ebp - 0x2c], 0x52444849
mov word [ebp - 0x14], 0x4449
mov byte [ebp - 0x12], 0x41
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x8c], 0x444e4549
mov word [ebp - 0xc], 0x4c50
mov byte [ebp - 0xa], bl
mov byte [ebp - 9], 0x45
mov dword [ebp - 0x3c], 0x44474b62
mov dword [ebp - 0x7c], 0x4d524863
mov dword [ebp - 0x4c], 0x414d4167
mov word [ebp - 0xa4], 0x4968
mov byte [ebp - 0xa2], 0x53
mov byte [ebp - 0xa1], bl
mov dword [ebp - 0x54], 0x50434369
mov byte [ebp - 0x94], 0x69
mov byte [ebp - 0x93], bl
mov word [ebp - 0x92], 0x7458
mov dword [ebp - 0x5c], 0x7346466f
mov dword [ebp - 0x1c], 0x4c414370
mov dword [ebp - 0x24], 0x73594870
mov word [ebp - 0x34], 0x4273
mov byte [ebp - 0x32], 0x49
mov byte [ebp - 0x31], bl
mov dword [ebp - 0x6c], 0x4c414373
mov word [ebp - 0x64], 0x5073
mov byte [ebp - 0x62], 0x4c
mov byte [ebp - 0x61], bl
mov dword [ebp - 0x44], 0x42475273
mov dword [ebp - 0x74], 0x74584574
mov dword [ebp - 0x84], 0x454d4974
mov dword [ebp - 0x9c], 0x534e5274
mov byte [ebp - 0xac], 0x7a
mov byte [ebp - 0xab], bl
mov word [ebp - 0xaa], 0x7458
call fcn.0061fe53
lea ecx, [esi + 0x11c]
mov edi, eax
mov eax, dword [ecx]
add esp, 4
cmp eax, dword [ebp - 0x2c]
jne 0x61bfef
mov ecx, dword [ebp - 0xb0]
push edi
push ecx
push esi
call fcn.0061ff83
jmp 0x61c243
cmp eax, dword [ebp - 0x8c]
jne 0x61c00a
mov edx, dword [ebp - 0xb0]
push edi
push edx
push esi
call fcn.006202a3
jmp 0x61c243
push ecx
push esi
call fcn.0061a4c3
add esp, 8
test eax, eax
mov eax, dword [esi + 0x11c]
je 0x61c067
cmp eax, dword [ebp - 0x14]
jne 0x61c03e
test edi, edi
jne 0x61c030
test dword [esi + 0x6c], 0x2000
je 0x61c03e
push 0x1010fb64
push esi
call fcn.00619d83
add esp, 8
mov ecx, dword [ebp - 0xb0]
push edi
push ecx
push esi
call fcn.00622443
mov edx, dword [esi + 0x11c]
add esp, 0xc
cmp edx, dword [ebp - 0xc]
jne 0x61c246
or dword [esi + 0x6c], 2
jmp 0x61c246
cmp eax, dword [ebp - 0x14]
jne 0x61c096
test edi, edi
jne 0x61c079
test dword [esi + 0x6c], 0x2000
je 0x61c087
push 0x1010fb64
push esi
call fcn.00619d83
add esp, 8
push edi
push esi
call fcn.0061fed3
add esp, 8
jmp 0x61c246
cmp eax, dword [ebp - 0xc]
jne 0x61c0ae
mov eax, dword [ebp - 0xb0]
push edi
push eax
push esi
call fcn.006200d3
jmp 0x61c243
push edi
cmp eax, dword [ebp - 0x3c]
jne 0x61c0c6
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.00621203
jmp 0x61c243
cmp eax, dword [ebp - 0x7c]
jne 0x61c0dd
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.00620593
jmp 0x61c243
cmp eax, dword [ebp - 0x4c]
jne 0x61c0f4
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.006202f3
jmp 0x61c243
cmp eax, dword [ebp - 0xa4]
jne 0x61c10e
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.00621433
jmp 0x61c243
cmp eax, dword [ebp - 0x5c]
jne 0x61c125
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.006216f3
jmp 0x61c243
cmp eax, dword [ebp - 0x1c]
jne 0x61c13c
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.00621853
jmp 0x61c243
cmp eax, dword [ebp - 0x6c]
jne 0x61c153
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.00621b53
jmp 0x61c243
cmp eax, dword [ebp - 0x24]
jne 0x61c16a
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.006215b3
jmp 0x61c243
cmp eax, dword [ebp - 0x34]
jne 0x61c181
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.00620433
jmp 0x61c243
cmp eax, dword [ebp - 0x44]
jne 0x61c198
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.00620893
jmp 0x61c243
cmp eax, dword [ebp - 0x54]
jne 0x61c1af
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.00620a83
jmp 0x61c243
cmp eax, dword [ebp - 0x64]
jne 0x61c1c6
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.00620ce3
jmp 0x61c243
cmp eax, dword [ebp - 0x74]
jne 0x61c1da
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.00621e33
jmp 0x61c243
cmp eax, dword [ebp - 0x84]
jne 0x61c1f1
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.00621d23
jmp 0x61c243
cmp eax, dword [ebp - 0x9c]
jne 0x61c208
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.00620fb3
jmp 0x61c243
cmp eax, dword [ebp - 0xac]
jne 0x61c21f
mov ecx, dword [ebp - 0xb0]
push ecx
push esi
call fcn.00621fe3
jmp 0x61c243
cmp eax, dword [ebp - 0x94]
jne 0x61c236
mov edx, dword [ebp - 0xb0]
push edx
push esi
call fcn.006221d3
jmp 0x61c243
mov eax, dword [ebp - 0xb0]
push eax
push esi
call fcn.00622443
add esp, 0xc
test byte [esi + 0x6c], 0x10
je 0x61bee3
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.0057371d
mov esp, ebp
pop ebp
ret