Function at 0x111cebd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x1280607
call fcn.01160118
push ecx
push ebx
push esi
mov esi, ecx
push edi
lea edi, [esi + 0x10]
lea ebx, [esi + 0xd44]
mov dword [ebp - 0x10], esi
mov dword [esi], fcn.0116c973
mov dword [esi + 4], 0x100cfd8
mov dword [edi], 0x1006754
mov dword [esi + 0x14], 0x1006748
mov dword [ebx], 0x100cf00
mov dword [esi + 0xd50], 0x100ceec
mov dword [esi + 0xd54], 0x100cee8
mov dword [ebp - 4], 0x52
mov ecx, dword [esi + 0xd98]
test ecx, ecx
je 0x111cf23
call fcn.0119b9fc
mov byte [ebp - 4], 0x51
lea ecx, [esi + 0x1ff4]
call fcn.0103290a
mov byte [ebp - 4], 0x50
lea ecx, [esi + 0x1ff0]
call fcn.0103290a
mov byte [ebp - 4], 0x4f
lea ecx, [esi + 0x1fec]
call fcn.0103290a
mov byte [ebp - 4], 0x4e
lea ecx, [esi + 0x1fe8]
call fcn.0103290a
mov byte [ebp - 4], 0x4d
lea ecx, [esi + 0x1fe4]
call fcn.0103290a
mov byte [ebp - 4], 0x4c
lea ecx, [esi + 0x1fe0]
call fcn.0103290a
mov byte [ebp - 4], 0x4b
lea ecx, [esi + 0x1fdc]
call fcn.0103290a
mov byte [ebp - 4], 0x4a
lea ecx, [esi + 0x1fd8]
call fcn.0103290a
mov byte [ebp - 4], 0x49
lea ecx, [esi + 0x1fd4]
call fcn.0103290a
mov byte [ebp - 4], 0x48
lea ecx, [esi + 0x1fd0]
call fcn.0103290a
mov byte [ebp - 4], 0x47
lea ecx, [esi + 0x1fcc]
call fcn.0103290a
mov byte [ebp - 4], 0x46
lea ecx, [esi + 0x1fc8]
call fcn.0103290a
mov byte [ebp - 4], 0x45
lea ecx, [esi + 0x1fc4]
call fcn.0103290a
mov byte [ebp - 4], 0x44
lea ecx, [esi + 0x1fc0]
call fcn.0103290a
mov byte [ebp - 4], 0x43
lea ecx, [esi + 0x1fbc]
call fcn.0103290a
mov byte [ebp - 4], 0x42
lea ecx, [esi + 0x1fb8]
call fcn.0103290a
mov byte [ebp - 4], 0x41
lea ecx, [esi + 0x1fb4]
call fcn.0103290a
mov byte [ebp - 4], 0x40
lea ecx, [esi + 0x1fb0]
call fcn.0103290a
mov byte [ebp - 4], 0x3f
lea ecx, [esi + 0x1fac]
call fcn.0103290a
mov byte [ebp - 4], 0x3e
lea ecx, [esi + 0x1fa8]
call fcn.0103290a
mov byte [ebp - 4], 0x3d
lea ecx, [esi + 0x1fa4]
call fcn.0103290a
mov byte [ebp - 4], 0x3c
lea ecx, [esi + 0x1fa0]
call fcn.0103290a
mov byte [ebp - 4], 0x3b
lea ecx, [esi + 0x1f9c]
call fcn.0103290a
mov byte [ebp - 4], 0x3a
lea ecx, [esi + 0x1f98]
call fcn.0103290a
mov byte [ebp - 4], 0x39
lea ecx, [esi + 0x1f94]
call fcn.0103290a
mov byte [ebp - 4], 0x38
lea ecx, [esi + 0x1f90]
call fcn.0103290a
mov byte [ebp - 4], 0x37
lea ecx, [esi + 0x1f8c]
call fcn.0103290a
mov byte [ebp - 4], 0x36
lea ecx, [esi + 0x1f88]
call fcn.0103290a
mov byte [ebp - 4], 0x35
lea ecx, [esi + 0x1f84]
call fcn.0103290a
mov byte [ebp - 4], 0x34
lea ecx, [esi + 0x1f80]
call fcn.0103290a
mov byte [ebp - 4], 0x33
lea ecx, [esi + 0x1f7c]
call fcn.0103290a
mov byte [ebp - 4], 0x32
lea ecx, [esi + 0x1f78]
call fcn.0103290a
mov byte [ebp - 4], 0x31
lea ecx, [esi + 0x1f74]
call fcn.0103290a
mov byte [ebp - 4], 0x30
lea ecx, [esi + 0x1f70]
call fcn.0103290a
mov byte [ebp - 4], 0x2f
lea ecx, [esi + 0x1f6c]
call fcn.0103290a
mov byte [ebp - 4], 0x2e
lea ecx, [esi + 0x1f68]
call fcn.0103290a
mov byte [ebp - 4], 0x2d
lea ecx, [esi + 0x1f64]
call fcn.0103290a
mov byte [ebp - 4], 0x2c
lea ecx, [esi + 0x1f60]
call fcn.0103290a
mov byte [ebp - 4], 0x2b
lea ecx, [esi + 0x1f5c]
call fcn.0103290a
mov byte [ebp - 4], 0x2a
lea ecx, [esi + 0x1e58]
call fcn.01117cea
mov byte [ebp - 4], 0x29
lea ecx, [esi + 0x1d54]
call fcn.01117cea
mov byte [ebp - 4], 0x28
lea ecx, [esi + 0x1c28]
call fcn.01117c9e
mov byte [ebp - 4], 0x27
lea ecx, [esi + 0x1afc]
call fcn.01117c9e
mov byte [ebp - 4], 0x26
lea ecx, [esi + 0x1a18]
call fcn.01117c3a
mov byte [ebp - 4], 0x25
lea ecx, [esi + 0x194c]
call fcn.01117c00
mov byte [ebp - 4], 0x24
lea ecx, [esi + 0x18e0]
call fcn.0110dac6
mov byte [ebp - 4], 0x23
lea ecx, [esi + 0x1808]
call fcn.01117c00
mov byte [ebp - 4], 0x22
lea ecx, [esi + 0x173c]
call fcn.01117c00
mov byte [ebp - 4], 0x21
lea ecx, [esi + 0x1610]
call fcn.01117c9e
mov byte [ebp - 4], 0x20
lea ecx, [esi + 0x159c]
call fcn.0110dac6
mov byte [ebp - 4], 0x1f
lea ecx, [esi + 0x1530]
call fcn.0110dac6
mov byte [ebp - 4], 0x1e
lea ecx, [esi + 0x14c4]
call fcn.0110dac6
mov byte [ebp - 4], 0x1d
lea ecx, [esi + 0x1454]
call fcn.01112509
mov byte [ebp - 4], 0x1c
lea ecx, [esi + 0x13e4]
call fcn.01112509
mov byte [ebp - 4], 0x1b
lea ecx, [esi + 0x1368]
call fcn.01112509
mov byte [ebp - 4], 0x1a
lea ecx, [esi + 0x12f8]
call fcn.01112509
mov byte [ebp - 4], 0x19
lea ecx, [esi + 0x1128]
call fcn.01117ba5
mov byte [ebp - 4], 0x18
lea ecx, [esi + 0x1028]
call fcn.0110763b
mov byte [ebp - 4], 0x17
lea ecx, [esi + 0xf4c]
call fcn.01117b54
mov byte [ebp - 4], 0x16
lea ecx, [esi + 0xf48]
cmp dword [ecx], 0
je 0x111d2ac
call fcn.0103d737
mov byte [ebp - 4], 0x15
lea ecx, [esi + 0xf44]
call fcn.0103290a
mov byte [ebp - 4], 0x14
lea ecx, [esi + 0xf40]
call fcn.0103290a
mov byte [ebp - 4], 0x13
lea ecx, [esi + 0xf3c]
call fcn.0103290a
mov byte [ebp - 4], 0x12
lea ecx, [esi + 0xf38]
call fcn.0103290a
mov byte [ebp - 4], 0x11
lea ecx, [esi + 0xf34]
call fcn.0103290a
mov byte [ebp - 4], 0x10
lea ecx, [esi + 0xf30]
call fcn.0103290a
mov byte [ebp - 4], 0xf
lea ecx, [esi + 0xf2c]
call fcn.0104508a
mov byte [ebp - 4], 0xe
lea ecx, [esi + 0xf28]
call fcn.0104508a
mov byte [ebp - 4], 0xd
lea ecx, [esi + 0xf24]
call fcn.0104508a
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0xf20]
call fcn.0104508a
mov byte [ebp - 4], 0xb
lea ecx, [esi + 0xf1c]
call fcn.0103290a
mov byte [ebp - 4], 0xa
lea ecx, [esi + 0xedc]
call fcn.0110da05
mov byte [ebp - 4], 9
lea ecx, [esi + 0xe50]
call fcn.0119928c
mov byte [ebp - 4], 8
mov eax, dword [esi + 0xe4c]
test eax, eax
je 0x111d383
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 7
lea ecx, [esi + 0xdcc]
call fcn.0111564b
mov byte [ebp - 4], 6
mov eax, dword [esi + 0xd98]
test eax, eax
je 0x111d3a6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
lea ecx, [esi + 0xd84]
call fcn.0110ed40
mov byte [ebp - 4], 4
lea ecx, [esi + 0xd78]
call fcn.0110ed40
mov byte [ebp - 4], 3
lea eax, [esi + 0xd60]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov byte [ebp - 4], 2
lea ecx, [esi + 0xd54]
call fcn.01132eae
mov byte [ebp - 4], 1
mov ecx, ebx
call fcn.011033a4
mov byte [ebp - 4], 0
mov ecx, edi
call fcn.0111cdb1
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.01107610
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret