Function at 0x110ad920
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x111e1107
mov eax, dword fs:[0]
push eax
sub esp, 0xfa8
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
xor edi, edi
push str.activeds.dll
mov dword [ebp - 0xf38], eax
mov dword [ebp - 0xf30], ecx
mov dword [ebp - 0xf40], edx
mov dword [ebp - 0xf34], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xf5c], eax
test eax, eax
je 0x110ae5a1
mov ecx, dword [0x1127aa68]
push edi
push edi
push str.TraceADGroups
push str._debug
call fcn.110bbc00
push edi
mov dword [ebp - 0xf28], eax
call dword [sym.imp.ole32.dll_CoInitialize]
mov ecx, dword [ebp - 0xf38]
mov dword [ebp - 0xf60], eax
push 0x200
lea eax, [ebp - 0x294]
push eax
push ecx
mov dword [ebp - 0xf50], edi
mov dword [ebp - 0xf58], edi
call fcn.111b8020
push 0x200
lea edx, [ebp - 0xb14]
push edx
push esi
call fcn.111b8020
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 0x18
call ebx
mov esi, eax
lea eax, [ebp - 0xf50]
push eax
push 0x112477b4
push 5
push edi
push edi
push str.LDAP:__rootDSE
call sub.ACTIVEDS.dll_ADsOpenObject
mov edi, eax
call ebx
sub eax, esi
cmp eax, 0x64
jb 0x110ada28
push edi
push eax
push str.ADsOpenObject_root__took__d_ms__ret__x_n
call fcn.111bd7b0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x94], cx
xor ebx, ebx
lea ecx, [ebp - 0xf84]
mov dword [ebp - 0xf2c], ebx
call fcn.1113dd30
mov dword [ebp - 4], ebx
cmp edi, ebx
jl 0x110adc0e
lea edx, [ebp - 0xf2c]
push edx
push 0x11247974
push 1
push ebx
push 0x11247984
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x110adbf9
mov eax, dword [ebp - 0xf2c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x20]
push 0x11247f3c
push 3
push eax
call edx
cmp eax, ebx
jl 0x110adbdf
lea eax, [ebp - 0xf74]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebp - 0xf50]
mov ecx, dword [eax]
lea edx, [ebp - 0xf74]
push edx
push str.defaultNamingContext
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov ecx, dword [ebp - 0xf6c]
push ecx
lea ecx, [ebp - 0xf84]
call fcn.1113dbf0
push str.LDAP:__
lea ecx, [ebp - 0xf84]
call fcn.1113c980
test al, al
jne 0x110adb14
lea edx, [ebp - 0xf84]
push edx
lea eax, [ebp - 0xfb4]
push str.LDAP:__
push eax
call fcn.1113dfe0
add esp, 0xc
push eax
lea ecx, [ebp - 0xf84]
mov byte [ebp - 4], 1
call fcn.1113db60
lea ecx, [ebp - 0xfb4]
mov byte [ebp - 4], bl
call fcn.1113cd80
mov edx, dword [ebp - 0xf6c]
mov eax, dword [ebp - 0xf2c]
mov ecx, dword [eax]
push edx
push 1
push eax
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x110adb46
mov eax, dword [ebp - 0xf2c]
mov ecx, dword [eax]
lea edx, [ebp - 0xf6c]
push edx
push 3
push eax
mov eax, dword [ecx + 0x2c]
call eax
mov eax, dword [ebp - 0xf6c]
lea edx, [ebp - 0x94]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x110adb54
cmp word [ebp - 0x94], bx
je 0x110adbb4
lea eax, [ebp - 0x94]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x110adb75
sub eax, edx
sar eax, 1
cmp word [ebp + eax*2 - 0x96], 0x5c
je 0x110adbb4
lea edi, [ebp - 0x94]
add edi, 0xfffffffe
jmp 0x110adba0
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x110adba0
mov ecx, dword [0x11203288]
mov dword [edi], ecx
cmp dword [ebp - 0xf28], ebx
je 0x110adbd0
lea edx, [ebp - 0x94]
push edx
push str.ad_dom_ls_n
call fcn.111bd7b0
add esp, 8
lea eax, [ebp - 0xf74]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x110adc0e
mov eax, dword [ebp - 0xf2c]
cmp eax, ebx
je 0x110adc0e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [ebp - 0xf2c], ebx
jmp 0x110adc0e
cmp dword [ebp - 0xf28], ebx
je 0x110adc0e
push str.Couldnt_create_NameTranslate_n
call fcn.111bd7b0
add esp, 4
mov esi, dword [sym.imp.MSVCR100.dll_wcschr]
lea eax, [ebp - 0x294]
push 0x5c
push eax
call esi
add esp, 8
test eax, eax
jne 0x110adcd2
lea ecx, [ebp - 0x294]
push 0x40
push ecx
call esi
add esp, 8
test eax, eax
jne 0x110adcd2
lea edx, [ebp - 0x294]
push 0x2f
push edx
call esi
add esp, 8
test eax, eax
jne 0x110adcd2
jmp 0x110adc60
movzx ecx, word [ebp + eax - 0x294]
mov word [ebp + eax - 0xf14], cx
add eax, 2
cmp cx, bx
jne 0x110adc60
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [ebp + eax - 0x94]
mov word [ebp + eax - 0x294], cx
add eax, 2
cmp cx, bx
jne 0x110adc80
lea eax, [ebp - 0xf14]
mov edx, eax
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x110adca0
lea edi, [ebp - 0x294]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
cmp cx, bx
jne 0x110adcb6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0xf58]
push eax
push 0x112477b4
push 5
lea ecx, [ebp - 0xb14]
push ecx
lea edx, [ebp - 0x294]
push edx
push str.LDAP:__rootDSE
call sub.ACTIVEDS.dll_ADsOpenObject
cmp eax, ebx
jl 0x110add09
mov esi, 1
mov dword [ebp - 0xf34], esi
jmp 0x110add1b
mov eax, dword [ebp - 0xf40]
mov esi, dword [ebp - 0xf34]
mov dword [eax], 1
cmp dword [ebp - 0xf28], ebx
je 0x110add38
mov ecx, dword [ebp - 0xf38]
push esi
push ecx
push str.Authenticating_AD_User__s__valid_d_n
call fcn.111bd7b0
add esp, 0xc
cmp esi, ebx
je 0x110ae535
mov edx, dword [ebp - 0xf30]
cmp word [edx], 0
je 0x110ae535
mov ecx, 0x1124b64c
mov eax, edx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x110add7d
test dx, dx
je 0x110add79
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x110add7d
add eax, 4
add ecx, 4
test dx, dx
jne 0x110add57
xor eax, eax
jmp 0x110add82
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x110ae535
xor eax, eax
mov word [ebp - 0x494], ax
mov eax, dword [ebp - 0xf2c]
mov dword [ebp - 0xf34], 0
test eax, eax
je 0x110ae535
mov ecx, dword [eax]
lea edx, [ebp - 0x294]
push edx
push 8
push eax
mov eax, dword [ecx + 0x28]
call eax
mov ebx, dword [ebp - 0xf28]
mov esi, eax
test ebx, ebx
je 0x110adddd
push esi
lea ecx, [ebp - 0x294]
push ecx
push str.NameTranslate__set_unk_user__ls__ret__x_n
call fcn.111bd7b0
add esp, 0xc
test esi, esi
jns 0x110ade8a
lea edx, [ebp - 0x294]
push 0x5c
push edx
call dword [sym.imp.MSVCR100.dll_wcschr]
add esp, 8
test eax, eax
jne 0x110ade82
nop
movzx ecx, word [ebp + eax - 0x94]
mov word [ebp + eax - 0xd14], cx
add eax, 2
test cx, cx
jne 0x110ade00
lea eax, [ebp - 0x294]
mov esi, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x110ade20
lea edi, [ebp - 0xd14]
sub eax, esi
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x110ade36
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0xf2c]
lea edx, [ebp - 0xd14]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [eax]
push 8
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
test ebx, ebx
je 0x110ade82
push esi
lea ecx, [ebp - 0xd14]
push ecx
push str.NameTranslate__set_unk_user__ls__ret__x_n
call fcn.111bd7b0
add esp, 0xc
test esi, esi
js 0x110adf40
mov eax, dword [ebp - 0xf2c]
lea ecx, [ebp - 0xf54]
push ecx
mov dword [ebp - 0xf54], 0
mov edx, dword [eax]
mov edx, dword [edx + 0x2c]
push 1
push eax
call edx
mov ebx, dword [ebp - 0xf54]
test ebx, ebx
je 0x110adf40
xor eax, eax
jmp 0x110adec0
movzx ecx, word [eax + str.LDAP:__]
mov word [ebp + eax - 0x494], cx
add eax, 2
test cx, cx
jne 0x110adec0
mov eax, ebx
mov edx, ebx
jmp 0x110adee0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x110adee0
lea edi, [ebp - 0x494]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x110adef6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0xf28], 0
mov dword [ebp - 0xf54], 0
je 0x110adf40
lea eax, [ebp - 0x494]
push eax
push str.UserPath_xlat_to__ls_n
call fcn.111bd7b0
add esp, 8
xor esi, esi
cmp word [ebp - 0x494], si
je 0x110ae523
lea edx, [ebp - 0xf44]
push edx
push 0x112477c4
xor ecx, ecx
push 5
lea eax, [ebp - 0xb14]
mov word [ebp - 0x514], cx
push eax
lea ecx, [ebp - 0x294]
push ecx
lea edx, [ebp - 0x494]
push edx
mov dword [ebp - 0xf38], esi
mov dword [ebp - 0xf48], esi
mov dword [ebp - 0xf44], esi
call sub.ACTIVEDS.dll_ADsOpenObject
cmp eax, esi
jl 0x110adfb4
cmp dword [ebp - 0xf28], esi
je 0x110adffe
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x494]
push ecx
push str.Opened_IADsUser__p_ls__u_ls__using_supplied_uname_pw_n
jmp 0x110adff6
lea edx, [ebp - 0xf44]
push edx
push 0x112477c4
push 5
push esi
push esi
lea eax, [ebp - 0x494]
push eax
call sub.ACTIVEDS.dll_ADsOpenObject
cmp eax, esi
jl 0x110ae0ff
xor esi, esi
cmp dword [ebp - 0xf28], esi
je 0x110adffe
push eax
lea ecx, [ebp - 0x294]
push ecx
lea edx, [ebp - 0x494]
push edx
push str.Opened_IADsUser__p_ls__u_ls__using_NULL_authent_n
call fcn.111bd7b0
add esp, 0x10
mov eax, dword [ebp - 0xf44]
cmp eax, esi
je 0x110ae0ff
mov ecx, dword [eax]
lea edx, [ebp - 0xf38]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0xf44]
mov ecx, dword [eax]
lea edx, [ebp - 0xf48]
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
mov eax, dword [ebp - 0xf38]
test eax, eax
je 0x110ae051
cmp dword [ebp - 0xf28], 0
je 0x110ae051
push eax
push str.objuser_get_path_ls_n
call fcn.111bd7b0
add esp, 8
mov esi, dword [ebp - 0xf48]
test esi, esi
je 0x110ae078
cmp dword [ebp - 0xf28], 0
je 0x110ae078
push esi
push str.objuser_get_GUID_ls_n
call fcn.111bd7b0
mov esi, dword [ebp - 0xf48]
add esp, 8
xor eax, eax
mov dword [ebp - 0xf24], eax
mov dword [ebp - 0xf20], eax
mov dword [ebp - 0xf1c], eax
mov dword [ebp - 0xf18], eax
mov eax, esi
lea edi, [ebp - 0xf24]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x110ae0a0
sub eax, edx
sar eax, 1
and eax, 0xfffffffe
cmp eax, 0x20
ja 0x110ae0ff
cmp word [esi], cx
je 0x110ae0e9
lea esp, [esp]
movzx ecx, word [esi + 2]
push ecx
call fcn.111b8a10
movzx edx, word [esi]
push edx
mov ebx, eax
call fcn.111b8a10
shl al, 4
or bl, al
mov byte [edi], bl
add esi, 4
add esp, 8
inc edi
cmp word [esi], 0
jne 0x110ae0c0
push 0x27
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0xf24]
push ecx
call dword [sym.imp.ole32.dll_StringFromGUID2]
mov edi, dword [ebp - 0xf30]
push 0
push edi
call fcn.111b7990
mov esi, eax
add esp, 8
mov dword [ebp - 0xf64], esi
mov ecx, dword [0x1127aa68]
push 0
push 0
push 0x11216134
push str.Client
mov byte [ebp - 4], 2
call fcn.110bbc00
test eax, eax
jne 0x110ae1a4
push edi
lea edx, [ebp - 0x486]
push edx
lea ecx, [ebp - 0xf84]
call fcn.1102f630
mov ecx, dword [0x1127b220]
push eax
lea eax, [ebp - 0xf94]
push eax
call fcn.11167160
lea ecx, [ebp - 0xf94]
mov byte [ebp - 4], 3
call fcn.11058100
test eax, eax
je 0x110ae190
push 0x11216130
lea ecx, [ebp - 0xf94]
call fcn.1113c3f0
test al, al
je 0x110ae190
mov dword [ebp - 0xf34], 1
lea ecx, [ebp - 0xf94]
mov byte [ebp - 4], 2
call fcn.1113cd80
jmp 0x110ae510
cmp word [esi], 0
je 0x110ae510
mov edi, edi
mov edi, dword [sym.imp.MSVCR100.dll_wcschr]
push 0x3b
push esi
call edi
add esp, 8
mov dword [ebp - 0xf40], eax
test eax, eax
je 0x110ae1cd
xor ecx, ecx
mov word [eax], cx
push 7
xor edx, edx
push str.LDAP:__
push esi
mov word [ebp - 0x914], dx
call dword [sym.imp.MSVCR100.dll_wcsncmp]
add esp, 0xc
neg eax
sbb eax, eax
inc eax
je 0x110ae1f3
add esi, 0xe
jmp 0x110ae228
cmp word [esi], 0x2e
jne 0x110ae203
cmp word [esi + 2], 0x5c
jne 0x110ae203
add esi, 4
push 0x5c
push esi
call edi
add esp, 8
test eax, eax
jne 0x110ae228
nop
movzx ecx, word [ebp + eax - 0x94]
mov word [ebp + eax - 0x914], cx
add eax, 2
test cx, cx
jne 0x110ae210
lea eax, [ebp - 0x914]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x110ae231
sub eax, edx
sar eax, 1
mov ecx, 0x100
sub ecx, eax
add ecx, ecx
push ecx
lea edx, [ebp + eax*2 - 0x914]
push edx
push esi
call fcn.111b8020
mov eax, dword [ebp - 0xf2c]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [ebp - 0x914]
push edx
push 8
push eax
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x110ae30f
mov eax, dword [ebp - 0xf2c]
lea edx, [ebp - 0xf4c]
push edx
mov dword [ebp - 0xf4c], 0
mov ecx, dword [eax]
push 1
push eax
mov eax, dword [ecx + 0x2c]
call eax
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [eax + str.LDAP:__]
mov word [ebp + eax - 0x714], cx
add eax, 2
test cx, cx
jne 0x110ae2a0
mov ebx, dword [ebp - 0xf4c]
test ebx, ebx
je 0x110ae326
mov eax, ebx
mov edx, ebx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x110ae2c5
lea edi, [ebp - 0x714]
sub eax, edx
add edi, 0xfffffffe
jmp 0x110ae2e0
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x110ae2e0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0xf4c], 0
jmp 0x110ae326
cmp dword [ebp - 0xf28], 0
je 0x110ae34a
push eax
push str.set_translate_for_group_failed__hr_x_n
call fcn.111bd7b0
add esp, 8
cmp dword [ebp - 0xf28], 0
je 0x110ae34a
lea ecx, [ebp - 0x714]
push ecx
lea edx, [ebp - 0x914]
push edx
push str.Group_translated_from__ls_to__ls_n
call fcn.111bd7b0
add esp, 0xc
lea eax, [ebp - 0xf30]
push eax
push 0x112477d4
xor edi, edi
push 5
push edi
push edi
lea ecx, [ebp - 0x714]
push ecx
mov dword [ebp - 0xf30], edi
mov dword [ebp - 0xf3c], edi
call sub.ACTIVEDS.dll_ADsOpenObject
cmp eax, edi
jl 0x110ae48a
cmp dword [ebp - 0xf28], edi
je 0x110ae398
lea edx, [ebp - 0x714]
push edx
push str.Create_Group_ok___ls__n
call fcn.111bd7b0
add esp, 8
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
lea edx, [ebp - 0xf3c]
push edx
mov esi, eax
mov eax, dword [ebp - 0xf30]
mov ecx, dword [eax]
lea edx, [ebp - 0x494]
push edx
push eax
mov eax, dword [ecx + 0x5c]
call eax
call ebx
sub eax, esi
cmp eax, 0x64
jae 0x110ae3cf
cmp dword [ebp - 0xf28], edi
je 0x110ae3f3
movsx ecx, word [ebp - 0xf3c]
push eax
push ecx
lea edx, [ebp - 0x494]
push edx
lea eax, [ebp - 0x714]
push eax
push str.IsMember__ls___ls__ret__d__took__u_ms_n
call fcn.111bd7b0
add esp, 0x14
cmp word [ebp - 0xf3c], di
jne 0x110ae4a6
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
lea ecx, [ebp - 0xfa4]
mov esi, eax
call fcn.110ad840
mov edx, dword [ebp - 0xf28]
mov eax, dword [ebp - 0xf38]
lea ecx, [ebp - 0xfa4]
push ecx
push 0
push 0
push edx
mov edx, dword [ebp - 0xf30]
push eax
lea ecx, [ebp - 0x514]
push ecx
push edx
mov byte [ebp - 4], 4
call fcn.110ad170
add esp, 0x1c
mov edi, eax
call ebx
sub eax, esi
cmp eax, 0x64
jae 0x110ae45c
cmp dword [ebp - 0xf28], 0
je 0x110ae479
push eax
push edi
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x714]
push ecx
push str.RecIsMember__ls___ls__ret__d__took__u_ms_n
call fcn.111bd7b0
add esp, 0x14
lea ecx, [ebp - 0xfa4]
mov byte [ebp - 4], 2
call fcn.110ad780
jmp 0x110ae4a6
cmp dword [ebp - 0xf28], edi
je 0x110ae4a6
lea edx, [ebp - 0x714]
push edx
push str.Create_Group___ls__failed_n
call fcn.111bd7b0
add esp, 8
mov eax, dword [ebp - 0xf30]
test eax, eax
je 0x110ae4b8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [ebp - 0xf28], 0
je 0x110ae4dc
xor eax, eax
cmp word [ebp - 0xf3c], ax
push edi
setne al
push eax
push str.inGroup___d__bRecursiveMember___d_n
call fcn.111bd7b0
add esp, 0xc
cmp word [ebp - 0xf3c], 0
jne 0x110ae506
test edi, edi
jne 0x110ae506
cmp dword [ebp - 0xf40], edi
je 0x110ae510
mov esi, dword [ebp - 0xf40]
add esi, 2
cmp word [esi], di
jne 0x110ae1b0
jmp 0x110ae510
mov dword [ebp - 0xf34], 1
mov ecx, dword [ebp - 0xf64]
push ecx
mov byte [ebp - 4], 0
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
mov eax, dword [ebp - 0xf2c]
test eax, eax
je 0x110ae535
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov eax, dword [ebp - 0xf50]
test eax, eax
je 0x110ae547
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0xf58]
test eax, eax
je 0x110ae559
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [ebp - 0xf60], 0
jl 0x110ae568
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, 0x200
lea eax, [ebp - 0xb14]
mov byte [eax], 0
inc eax
dec ecx
jne 0x110ae573
mov eax, dword [ebp - 0xf5c]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0xf84]
mov dword [ebp - 4], 0xffffffff
call fcn.1113cd80
mov eax, dword [ebp - 0xf34]
jmp 0x110ae5a3
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret