Function at 0x6c9397f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, dword [0x6cb24420]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x6c939cc5
sub esp, 0x130
mov eax, 0
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov byte [esp + 0x23], 0
mov byte [esp + 0x134], 0
mov dword [esp + 0xe1], 0
lea edi, [esp + 0xe4]
xor eax, eax
call fcn.6c82c2c6
mov byte [esp + 0xe1], 0x53
mov word [esp + 0xe2], 0x5359
mov dword [esp + 0xe4], 0x5c4d4554
mov dword [esp + 0xe8], 0x72727543
mov dword [esp + 0xec], 0x43746e65
mov dword [esp + 0xf0], 0x72746e6f
mov dword [esp + 0xf4], 0x65536c6f
mov dword [esp + 0xf8], 0x6f435c74
mov dword [esp + 0xfc], 0x6f72746e
mov dword [esp + 0x100], 0x49435c6c
mov dword [esp + 0x104], 0x7365545c
mov dword [esp + 0x108], 0x676e6974
lea ecx, [esp + 0x84]
mov dword [esp], ecx
lea ecx, [esp + 0xe1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x2b
call fcn.6c8142b0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp], 0x80000002
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.6c9382c0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x6c939caa
mov eax, dword [esp + 0x10]
mov dword [esp + 0x11c], 0
mov dword [esp + 0x120], 0
lea ecx, [0x6c939d10]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], eax
lea ecx, [esp + 0x11c]
mov dword [esp + 0x128], ecx
mov byte [esp + 0x23], 1
mov dword [esp], eax
lea eax, [0x6c9b6e6a]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
call fcn.6c9385d0
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x6c939c8b
lea edi, [esp + 0xc1]
xor eax, eax
call fcn.6c82c2c8
mov dword [esp + 0xc1], 0x54535953
mov dword [esp + 0xc5], 0x435c4d45
mov dword [esp + 0xc9], 0x65727275
mov dword [esp + 0xcd], 0x6f43746e
mov dword [esp + 0xd1], 0x6f72746e
mov dword [esp + 0xd5], 0x7465536c
mov dword [esp + 0xd9], 0x6e6f435c
mov dword [esp + 0xdd], 0x6c6f7274
lea ecx, [esp + 0x64]
mov dword [esp], ecx
lea ecx, [esp + 0xc1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x20
call fcn.6c8142b0
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp], 0x80000002
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.6c9382c0
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x6c939c6c
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10c], eax
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
lea ecx, [0x6c939cd0]
mov dword [esp + 0x114], ecx
mov dword [esp + 0x118], eax
lea ecx, [esp + 0x114]
mov dword [esp + 0x12c], ecx
mov byte [esp + 0x23], 3
mov dword [esp + 0xaf], 0
mov dword [esp + 0xb1], 0
mov dword [esp + 0xb5], 0
mov dword [esp + 0xb9], 0
mov dword [esp + 0xbd], 0
mov word [esp + 0xaf], 0x7953
mov dword [esp + 0xb1], 0x6d657473
mov dword [esp + 0xb5], 0x72617453
mov dword [esp + 0xb9], 0x74704f74
mov dword [esp + 0xbd], 0x736e6f69
lea ecx, [esp + 0x44]
mov dword [esp], ecx
lea ecx, [esp + 0xaf]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x12
call fcn.6c8142b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.6c9385d0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x6c939c0e
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c84e870
mov eax, dword [esp + 0xc]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x124], ecx
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa7], 0
mov dword [esp + 0xab], 0
mov byte [esp + 0xa4], 0x54
mov word [esp + 0xa5], 0x5345
mov dword [esp + 0xa7], 0x47495354
mov dword [esp + 0xab], 0x474e494e
lea edx, [esp + 0x24]
mov dword [esp], edx
lea edx, [esp + 0xa4]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
call fcn.6c8142b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6c84e870
mov eax, dword [esp + 0x110]
cmp dword [esp + 0xc], eax
jne 0x6c939c0e
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x124]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.6c7c38a0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6c939c3d
mov byte [esp + 0x134], 0
mov byte [esp + 0x23], 1
mov edx, dword [esp + 0x12c]
mov eax, dword [edx]
call eax
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 1
mov byte [esp + 0x23], 1
mov edx, dword [esp + 0x12c]
mov eax, dword [edx]
call eax
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 0
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 1
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x128]
mov eax, dword [edx]
call eax
add esp, 0x130
ret
mov byte [esp + 0x134], 0
add esp, 0x130
ret
call fcn.6c82ac40
jmp fcn.6c9397f0