Function at 0x111da96
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x1280a1d
call fcn.01160458
sub esp, 0x1c
push ebx
push esi
push edi
mov esi, ecx
push 0x100d024
mov dword [ebp - 0x1c], esi
call fcn.011137d6
xor ebx, ebx
mov dword [ebp - 4], ebx
lea edi, [esi + 0x10]
push 0x100d024
mov ecx, edi
call fcn.010fe287
mov byte [ebp - 4], 1
lea ecx, [esi + 0xd44]
call fcn.01104767
mov byte [ebp - 4], 2
lea ecx, [esi + 0xd54]
call fcn.01132f8e
mov byte [ebp - 4], 3
mov dword [edi], 0x1006754
mov edi, dword [ebp + 8]
lea eax, [esi + 0xd60]
push eax
mov dword [esi], fcn.0116cc92
mov dword [esi + 4], 0x100cfd8
mov dword [esi + 0x14], 0x1006748
mov dword [esi + 0xd44], 0x100cf00
mov dword [esi + 0xd50], 0x100ceec
mov dword [esi + 0xd54], 0x100cee8
mov dword [esi + 0xd58], edi
mov dword [esi + 0xd5c], ebx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [ebp - 4], 4
lea eax, [esi + 0xd78]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [ebp - 4], 5
lea eax, [esi + 0xd84]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [ebp - 4], 6
mov byte [esi + 0xd90], bl
mov dword [esi + 0xd94], ebx
mov dword [esi + 0xd98], ebx
mov byte [ebp - 4], 7
cmp edi, 0xffffffff
setne al
lea ecx, [esi + 0xdcc]
mov byte [esi + 0xd9c], bl
mov byte [esi + 0xd9d], bl
mov dword [esi + 0xda0], ebx
mov byte [esi + 0xda5], bl
mov byte [esi + 0xda7], bl
mov byte [esi + 0xda8], bl
mov byte [esi + 0xda9], bl
mov byte [esi + 0xdaa], bl
mov byte [esi + 0xdab], bl
mov byte [esi + 0xdac], bl
mov byte [esi + 0xdad], bl
mov byte [esi + 0xdae], bl
mov byte [esi + 0xdaf], bl
mov byte [esi + 0xdb0], bl
mov dword [esi + 0xdb4], ebx
mov dword [esi + 0xdb8], ebx
mov dword [esi + 0xdbc], 1
mov dword [esi + 0xdc0], ebx
mov dword [esi + 0xdc4], ebx
mov byte [esi + 0xdc8], al
mov byte [esi + 0xdc9], bl
call fcn.0114e842
mov byte [ebp - 4], 8
mov dword [esi + 0xe4c], ebx
mov byte [ebp - 4], 9
push ebx
lea ecx, [esi + 0xe50]
call fcn.0119840a
mov byte [ebp - 4], 0xa
lea ecx, [esi + 0xedc]
call fcn.0110c4f4
mov byte [ebp - 4], 0xb
mov eax, dword [0x12ce0a0]
mov dword [esi + 0xf1c], eax
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0xf20]
call fcn.01045169
mov byte [ebp - 4], 0xd
lea ecx, [esi + 0xf24]
call fcn.01045169
mov byte [ebp - 4], 0xe
lea ecx, [esi + 0xf28]
call fcn.01045169
mov byte [ebp - 4], 0xf
lea ecx, [esi + 0xf2c]
call fcn.01045169
mov byte [ebp - 4], 0x10
mov eax, dword [0x12ce0a0]
mov dword [esi + 0xf30], eax
mov byte [ebp - 4], 0x11
mov eax, dword [0x12ce0a0]
mov dword [esi + 0xf34], eax
mov byte [ebp - 4], 0x12
mov eax, dword [0x12ce0a0]
mov dword [esi + 0xf38], eax
mov byte [ebp - 4], 0x13
mov eax, dword [0x12ce0a0]
mov dword [esi + 0xf3c], eax
mov byte [ebp - 4], 0x14
mov eax, dword [0x12ce0a0]
mov dword [esi + 0xf40], eax
mov byte [ebp - 4], 0x15
mov eax, dword [0x12ce0a0]
mov dword [esi + 0xf44], eax
mov byte [ebp - 4], 0x16
mov dword [esi + 0xf48], ebx
mov byte [ebp - 4], 0x17
lea edi, [esi + 0xf4c]
push esi
mov ecx, edi
call fcn.011188b9
mov byte [ebp - 4], 0x18
lea ecx, [esi + 0x1028]
push esi
call fcn.01107ad5
mov byte [ebp - 4], 0x19
lea ecx, [esi + 0x1128]
push esi
call fcn.01116459
mov byte [ebp - 4], 0x1a
lea ecx, [esi + 0x12f8]
push esi
call fcn.01116758
mov byte [ebp - 4], 0x1b
lea ecx, [esi + 0x1368]
push esi
call fcn.011167d8
mov byte [ebp - 4], 0x1c
lea ecx, [esi + 0x13e4]
push esi
call fcn.0111685c
mov byte [ebp - 4], 0x1d
lea ecx, [esi + 0x1454]
push esi
call fcn.011168dc
mov byte [ebp - 4], 0x1e
lea ecx, [esi + 0x14c4]
push esi
call fcn.0111435f
mov byte [ebp - 4], 0x1f
lea ecx, [esi + 0x1530]
push esi
call fcn.011145cc
mov byte [ebp - 4], 0x20
lea ecx, [esi + 0x159c]
push esi
call fcn.01114839
mov byte [ebp - 4], 0x21
lea ecx, [esi + 0x1610]
push esi
call fcn.0111695c
mov byte [ebp - 4], 0x22
lea ecx, [esi + 0x173c]
push esi
call fcn.01117117
mov byte [ebp - 4], 0x23
lea ecx, [esi + 0x1808]
push esi
call fcn.01116aa2
mov byte [ebp - 4], 0x24
lea ecx, [esi + 0x18e0]
push esi
call fcn.01114ab9
mov byte [ebp - 4], 0x25
lea ecx, [esi + 0x194c]
push esi
call fcn.01116e9a
mov byte [ebp - 4], 0x26
lea ecx, [esi + 0x1a18]
push esi
call fcn.01116beb
mov byte [ebp - 4], 0x27
lea ecx, [esi + 0x1afc]
push esi
call fcn.01116d54
mov byte [ebp - 4], 0x28
lea ecx, [esi + 0x1c28]
push esi
call fcn.01116fd1
mov byte [ebp - 4], 0x29
push esi
lea ecx, [esi + 0x1d54]
call fcn.0111a987
mov byte [ebp - 4], 0x2a
lea ecx, [esi + 0x1e58]
push esi
call fcn.0111957b
mov byte [ebp - 4], 0x2b
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f5c], eax
mov byte [ebp - 4], 0x2c
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f60], eax
mov byte [ebp - 4], 0x2d
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f64], eax
mov byte [ebp - 4], 0x2e
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f68], eax
mov byte [ebp - 4], 0x2f
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f6c], eax
mov byte [ebp - 4], 0x30
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f70], eax
mov byte [ebp - 4], 0x31
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f74], eax
mov byte [ebp - 4], 0x32
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f78], eax
mov byte [ebp - 4], 0x33
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f7c], eax
mov byte [ebp - 4], 0x34
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f80], eax
mov byte [ebp - 4], 0x35
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f84], eax
mov byte [ebp - 4], 0x36
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f88], eax
mov byte [ebp - 4], 0x37
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f8c], eax
mov byte [ebp - 4], 0x38
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f90], eax
mov byte [ebp - 4], 0x39
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f94], eax
mov byte [ebp - 4], 0x3a
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f98], eax
mov byte [ebp - 4], 0x3b
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1f9c], eax
mov byte [ebp - 4], 0x3c
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fa0], eax
mov byte [ebp - 4], 0x3d
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fa4], eax
mov byte [ebp - 4], 0x3e
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fa8], eax
mov byte [ebp - 4], 0x3f
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fac], eax
mov byte [ebp - 4], 0x40
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fb0], eax
mov byte [ebp - 4], 0x41
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fb4], eax
mov byte [ebp - 4], 0x42
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fb8], eax
mov byte [ebp - 4], 0x43
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fbc], eax
mov byte [ebp - 4], 0x44
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fc0], eax
mov byte [ebp - 4], 0x45
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fc4], eax
mov byte [ebp - 4], 0x46
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fc8], eax
mov byte [ebp - 4], 0x47
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fcc], eax
mov byte [ebp - 4], 0x48
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fd0], eax
mov byte [ebp - 4], 0x49
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fd4], eax
mov byte [ebp - 4], 0x4a
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fd8], eax
mov byte [ebp - 4], 0x4b
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fdc], eax
mov byte [ebp - 4], 0x4c
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fe0], eax
mov byte [ebp - 4], 0x4d
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fe4], eax
mov byte [ebp - 4], 0x4e
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fe8], eax
mov byte [ebp - 4], 0x4f
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1fec], eax
mov byte [ebp - 4], 0x50
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1ff0], eax
mov byte [ebp - 4], 0x51
mov eax, dword [0x12ce0a0]
mov dword [esi + 0x1ff4], eax
mov byte [ebp - 4], 0x52
push 1
push 0x7f02
push 1
lea ecx, [ebp - 0x28]
call fcn.0103f1d2
mov byte [ebp - 4], 0x53
push ecx
mov eax, esp
lea ecx, [esi + 0xf48]
mov dword [ebp + 8], esp
mov dword [eax], 0xf4f7
call fcn.010a5e8f
mov ecx, dword [esi + 0x38]
mov eax, dword [esi + 0xf48]
and ecx, 0xffffffdf
or ecx, 0x1180000
mov dword [esi + 0x38], ecx
push 0xf156
lea ecx, [esi + 0x1f5c]
mov dword [esi + 0x64], eax
call fcn.01032a72
push 0xf157
lea ecx, [esi + 0x1f60]
call fcn.01032a72
push 0xf152
lea ecx, [esi + 0x1f64]
call fcn.01032a72
push 0xf153
lea ecx, [esi + 0x1f68]
call fcn.01032a72
push 0xf154
lea ecx, [esi + 0x1f6c]
call fcn.01032a72
push 0xf155
lea ecx, [esi + 0x1f70]
call fcn.01032a72
push 0xf158
lea ecx, [esi + 0x1f74]
call fcn.01032a72
push 0xf159
lea ecx, [esi + 0x1f78]
call fcn.01032a72
push 0x22f
lea ecx, [esi + 0x1f7c]
call fcn.01032a72
push 0x230
lea ecx, [esi + 0x1f80]
call fcn.01032a72
push 0x231
lea ecx, [esi + 0x1f84]
call fcn.01032a72
push 0x232
lea ecx, [esi + 0x1f88]
call fcn.01032a72
push 0x233
lea ecx, [esi + 0x1f8c]
call fcn.01032a72
push 0x234
lea ecx, [esi + 0x1f90]
call fcn.01032a72
push 0x23a
lea ecx, [esi + 0x1f94]
call fcn.01032a72
push 0x23b
lea ecx, [esi + 0x1f98]
call fcn.01032a72
push 0x1ff
lea ecx, [esi + 0x1f9c]
call fcn.01032a72
push 0x200
lea ecx, [esi + 0x1fa0]
call fcn.01032a72
push 0x236
lea ecx, [esi + 0x1fa4]
call fcn.01032a72
push 0x237
lea ecx, [esi + 0x1fa8]
call fcn.01032a72
push 0x215
lea ecx, [esi + 0x1fac]
call fcn.01032a72
push 0x216
lea ecx, [esi + 0x1fb0]
call fcn.01032a72
push 0x213
lea ecx, [esi + 0x1fb4]
call fcn.01032a72
push 0x214
lea ecx, [esi + 0x1fb8]
call fcn.01032a72
push 0x21b
lea ecx, [esi + 0x1fbc]
call fcn.01032a72
push 0x226
lea ecx, [esi + 0x1fc4]
call fcn.01032a72
push 0x227
lea ecx, [esi + 0x1fc8]
call fcn.01032a72
push 0x284
lea ecx, [esi + 0x1fcc]
call fcn.01032a72
push 0x285
lea ecx, [esi + 0x1fd0]
call fcn.01032a72
push 0x22d
lea ecx, [esi + 0x1fd4]
call fcn.01032a72
push 0x22e
lea ecx, [esi + 0x1fd8]
call fcn.01032a72
push 0x229
lea ecx, [esi + 0x1fdc]
call fcn.01032a72
push 0x22a
lea ecx, [esi + 0x1fe0]
call fcn.01032a72
push 0x27e
lea ecx, [esi + 0x1fe4]
call fcn.01032a72
push 0x27f
lea ecx, [esi + 0x1fe8]
call fcn.01032a72
push 0x28b
lea ecx, [esi + 0x1fec]
call fcn.01032a72
push 0x28c
lea ecx, [esi + 0x1ff0]
call fcn.01032a72
push 0x29f
lea ecx, [esi + 0x1ff4]
call fcn.01032a72
mov ecx, dword [esi + 0x1f5c]
mov dword [edi + 0x44], ecx
mov eax, 0x1000
or dword [edi + 0x20], eax
mov edx, dword [esi + 0x1f60]
mov dword [edi + 0x48], edx
mov ecx, 0x2000
or dword [edi + 0x20], ecx
mov edi, dword [esi + 0x1f64]
lea edx, [esi + 0x1028]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1f68]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1f6c]
lea edx, [esi + 0x1128]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1f70]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1f74]
lea edx, [esi + 0x12f8]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1f78]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1f7c]
lea edx, [esi + 0x1368]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1f80]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1f84]
lea edx, [esi + 0x13e4]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1f88]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1f8c]
lea edx, [esi + 0x1454]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1f90]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1f94]
lea edx, [esi + 0x14c4]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1f98]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1f9c]
lea edx, [esi + 0x1530]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fa0]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1fa4]
lea edx, [esi + 0x159c]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fa8]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1fac]
lea edx, [esi + 0x1610]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fb0]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1fb4]
lea edx, [esi + 0x1808]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fb8]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edx, dword [esi + 0x1fbc]
or dword [esi + 0x1900], eax
mov dword [esi + 0x1924], edx
mov edi, dword [esi + 0x1fc4]
lea edx, [esi + 0x1a18]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fc8]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1fcc]
lea edx, [esi + 0x1afc]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fd0]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1fd4]
lea edx, [esi + 0x173c]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fd8]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1fdc]
lea edx, [esi + 0x1c28]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1fe0]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1fec]
lea edx, [esi + 0x194c]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
mov edi, dword [esi + 0x1ff0]
or dword [edx + 0x20], ecx
mov dword [edx + 0x48], edi
mov edi, dword [esi + 0x1ff4]
lea edx, [esi + 0x1e58]
or dword [edx + 0x20], eax
mov dword [edx + 0x44], edi
or dword [edx + 0x20], ecx
lea ecx, [esi + 0x10]
mov dword [edx + 0x48], 0x100355c
call fcn.01117d96
cmp eax, ebx
jge 0x111e562
push 0x8000ffff
call fcn.0116f4d6
pop ecx
mov ecx, 0x12d2398
mov byte [esi + 0xda4], bl
mov byte [esi + 0xda5], bl
mov byte [esi + 0xda6], bl
call fcn.0107cca6
push eax
lea ecx, [ebp + 8]
call fcn.01039a07
mov byte [ebp - 4], 0x54
push 0x100d020
lea ecx, [ebp - 0x14]
call fcn.01077147
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.01045ddd
mov byte [ebp - 4], 0x56
push 0x10021d4
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.01045e48
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x18]
call fcn.010328fe
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x14]
call fcn.010328fe
push dword [ebp - 0x10]
lea ecx, [esi + 0x1028]
call fcn.0111ecab
or dword [esi + 0x1104], 2
mov ecx, esi
call fcn.0110dc35
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x10]
call fcn.010328fe
mov byte [ebp - 4], 0x53
lea ecx, [ebp + 8]
call fcn.010328fe
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x28]
call fcn.0103d6c4
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4