Function at 0x11001f10
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1115f2e5
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x111c8010]
xor eax, esp
mov dword [esp + 0xc0], eax
push ebx
push esi
push edi
mov eax, dword [0x111c8010]
xor eax, esp
push eax
lea eax, [esp + 0xd8]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 8]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], eax
je 0x11001f6f
lea ecx, [eax + 8]
mov edx, 1
lock xadd dword [ecx], edx
cmp eax, esi
mov dword [esp + 0xe0], esi
jne 0x1100202e
test byte [0x111d350c], 1
jne 0x11001fb0
or dword [0x111d350c], 1
mov byte [esp + 0xe0], 1
call fcn.11004a70
push 0x1115ff30
call fcn.11134d04
add esp, 4
mov byte [esp + 0xe0], 0
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov eax, dword [0x111d3510]
mov ecx, dword [eax + 8]
push esi
push edi
push str.m_curlHttp_is_Null_et:_d_ec:_d
push str..httpHttpCommand.cpp
push 0xfc
push 2
push 0x111d3510
call ecx
add esp, 0x1c
test byte [0x111d34e0], 1
jne 0x1100200d
or dword [0x111d34e0], 1
mov byte [esp + 0xe0], 2
call fcn.11004b50
push 0x1115ff70
call fcn.11134d04
add esp, 4
mov byte [esp + 0xe0], 0
mov edx, dword [0x111d34e4]
mov eax, dword [edx + 4]
push esi
push edi
push str.m_curlHttp_is_Null_et:_d_ec:_d
push 2
push 0x111d34e4
call eax
add esp, 0x14
jmp 0x11002c02
mov eax, dword [edi + 8]
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0xac], esi
mov byte [esp + 0x9c], 0
mov ecx, dword [eax + 0x78]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], esi
mov word [esp + 0x64], si
cmp eax, esi
mov byte [esp + 0xe0], 4
je 0x110020ac
add eax, 0x5c
lea ecx, [esp + 0x24]
call fcn.11010be0
push 0xffffffffffffffff
push esi
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0xec], 5
call fcn.11004d20
mov byte [esp + 0xe0], 4
cmp dword [esp + 0x3c], 8
jb 0x110020ac
mov edx, dword [esp + 0x28]
push edx
call fcn.1101d128
add esp, 4
mov ebx, dword [ebp + 8]
cmp ebx, 5
jne 0x110021f7
mov eax, dword [ebp + 0xc]
cdq
mov dword [esp + 0x24], 1
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], edx
lea ebx, [edi + 0xd0]
mov edx, str.curl
mov ecx, ebx
mov byte [esp + 0xe0], 6
call fcn.1100d9e0
mov edx, str.code
mov ecx, eax
call fcn.1100d9e0
mov esi, eax
lea eax, [esp + 0x24]
call fcn.1100dd60
lea ecx, [esp + 0x24]
mov byte [esp + 0xe0], 4
call fcn.1100e110
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11002175
mov edx, dword [eax + 8]
mov ecx, dword [eax + 0xc]
or edx, ecx
je 0x11002175
mov eax, dword [eax + 8]
mov dword [esp + 0x24], 1
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], 0
mov byte [esp + 0xe0], 7
mov edx, dword [ecx*4 + 0x111ce728]
mov ecx, ebx
call fcn.1100d9e0
mov edx, str.code
mov ecx, eax
call fcn.1100d9e0
mov esi, eax
lea eax, [esp + 0x24]
call fcn.1100dd60
lea ecx, [esp + 0x24]
mov byte [esp + 0xe0], 4
call fcn.1100e110
push edi
call fcn.1100ae60
mov ebx, edx
cmp ebx, 5
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], eax
jne 0x110021f7
cmp eax, 0x33
jne 0x110021f7
call fcn.110034b0
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
cmp dword [eax + 0x18], 8
jb 0x110021a7
mov eax, dword [eax + 4]
jmp 0x110021aa
add eax, 4
mov ecx, dword [esi]
mov edx, dword [ecx + 8]
push eax
push str.ssl
push str..httpHttpCommand.cpp
push 0x116
push 0
push esi
call edx
add esp, 0x18
call fcn.11003440
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
cmp dword [eax + 0x18], 8
jb 0x110021e1
mov eax, dword [eax + 4]
jmp 0x110021e4
add eax, 4
mov ecx, dword [esi]
mov edx, dword [ecx + 4]
push eax
push str.ssl
push 0
push esi
call edx
add esp, 0x10
mov eax, dword [esp + 0x14]
xor esi, esi
cmp eax, esi
je 0x1100221d
mov ecx, dword [eax + 0x18]
cmp ecx, esi
je 0x1100221d
mov eax, dword [eax + 0x10]
cmp eax, esi
je 0x1100221d
push ecx
push eax
lea ecx, [esp + 0xa0]
call fcn.11003350
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
push 0xffffffffffffffff
push esi
push eax
lea ecx, [esp + 0x88]
mov dword [esp + 0xa0], 7
mov dword [esp + 0x9c], esi
mov word [esp + 0x8c], si
call fcn.11004d20
cmp ebx, 5
mov byte [esp + 0xe0], 8
jne 0x1100227e
cmp dword [ebp + 0xc], esi
jne 0x1100228c
xor cl, cl
mov edx, dword [edi + 0x138]
cmp edx, 1
ja 0x11002290
cmp dword [edi + 0x17c], esi
jne 0x11002290
mov eax, dword [edi + 0xe0]
jmp 0x11002295
cmp ebx, 3
jne 0x11002261
cmp dword [ebp + 0xc], 0xbba
jne 0x11002261
mov cl, 1
jmp 0x11002263
mov eax, 1
cmp dword [edi + 0xc8], eax
ja 0x1100247a
test cl, cl
je 0x1100247e
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov ecx, edi
call edx
cmp byte [edi + 0x12c], 0
je 0x11002307
mov ecx, dword [esp + 0x64]
mov eax, 8
cmp dword [esp + 0x78], eax
jae 0x110022ce
lea ecx, [esp + 0x64]
cmp dword [esp + 0x94], eax
mov eax, dword [esp + 0x80]
jae 0x110022e5
lea eax, [esp + 0x80]
push ecx
push eax
mov eax, dword [ebp + 0xc]
push 0x111b6368
push eax
push ebx
push 0x232b
push 1
call fcn.11003650
mov esi, eax
call fcn.11011740
add esp, 0x1c
call fcn.110034b0
mov edx, dword [esp + 0x64]
mov ecx, 8
cmp dword [esp + 0x78], ecx
jae 0x1100231f
lea edx, [esp + 0x64]
cmp dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x80]
jae 0x11002336
lea ecx, [esp + 0x80]
mov esi, dword [eax]
push edx
mov edx, dword [esi + 8]
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
push ebx
push 0x111b63c0
push str..httpHttpCommand.cpp
push 0x12c
push 2
push eax
call edx
add esp, 0x24
call fcn.11003440
mov edx, dword [esp + 0x64]
mov ecx, 8
cmp dword [esp + 0x78], ecx
jae 0x11002371
lea edx, [esp + 0x64]
cmp dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x80]
jae 0x11002388
lea ecx, [esp + 0x80]
mov esi, dword [eax]
push edx
mov edx, dword [esi + 4]
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
push ebx
push 0x111b63c0
push 2
push eax
call edx
add esp, 0x1c
mov byte [edi + 0xe8], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, edi
mov dword [edi + 0xec], eax
call fcn.11001b00
cmp dword [esp + 0x94], 8
jb 0x110023d5
mov eax, dword [esp + 0x80]
push eax
call fcn.1101d128
add esp, 4
xor esi, esi
cmp dword [esp + 0x78], 8
mov edi, 7
mov dword [esp + 0x94], edi
mov dword [esp + 0x90], esi
mov word [esp + 0x80], si
jb 0x11002406
mov ecx, dword [esp + 0x64]
push ecx
call fcn.1101d128
add esp, 4
cmp dword [esp + 0xb0], 0x10
mov dword [esp + 0x78], edi
mov dword [esp + 0x74], esi
mov word [esp + 0x64], si
jb 0x1100242d
mov edx, dword [esp + 0x9c]
push edx
call fcn.1101d128
add esp, 4
mov dword [esp + 0xe0], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 8
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0xac], esi
mov byte [esp + 0x9c], 0
mov ecx, eax
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x11002c02
cmp eax, esi
je 0x11002c02
lea ecx, [eax - 8]
cmp ecx, esi
jmp 0x11002bf8
test cl, cl
jne 0x11002490
cmp ebx, 4
jne 0x11002488
cmp dword [ebp + 0xc], esi
jne 0x11002490
xor cl, cl
mov byte [esp + 0x13], cl
jmp 0x11002499
mov byte [esp + 0x13], 1
mov cl, byte [esp + 0x13]
cmp edx, 1
jbe 0x110026d7
test cl, cl
je 0x110026d7
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov ecx, edi
call edx
lea ebx, [edi + 0x130]
mov dword [edi + 0xc8], esi
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
push ebx
lea eax, [esp + 0x1c]
push eax
call fcn.11003570
call fcn.110034b0
mov edx, dword [edi]
mov esi, eax
mov eax, dword [edx]
mov ecx, edi
call eax
cmp dword [eax + 0x18], 8
jb 0x110024ea
mov eax, dword [eax + 4]
jmp 0x110024ed
add eax, 4
mov edx, dword [esp + 0x64]
mov ecx, 8
cmp dword [esp + 0x78], ecx
jae 0x11002500
lea edx, [esp + 0x64]
cmp dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x80]
jae 0x11002517
lea ecx, [esp + 0x80]
mov ebx, dword [ebp + 0xc]
push eax
mov eax, dword [esi]
push edx
mov edx, dword [eax + 8]
push ecx
mov ecx, dword [ebp + 8]
push ebx
push ecx
push str.CHttpCommand::Done___type:_d_code:_d__url:_s_ip:_s
push str..httpHttpCommand.cpp
push 0x140
push 0
push esi
call edx
add esp, 0x28
call fcn.11003440
mov esi, eax
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
cmp dword [eax + 0x18], 8
jb 0x11002558
mov eax, dword [eax + 4]
jmp 0x1100255b
add eax, 4
mov edx, dword [esp + 0x64]
mov ecx, 8
cmp dword [esp + 0x78], ecx
jae 0x1100256e
lea edx, [esp + 0x64]
cmp dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x14], edx
jae 0x11002589
lea ecx, [esp + 0x80]
mov edx, dword [esi]
mov edx, dword [edx + 4]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [ebp + 8]
push ebx
push ecx
push str.CHttpCommand::Done___type:_d_code:_d__url:_s_ip:_s
push 0
push esi
call edx
add esp, 0x20
cmp byte [edi + 0x12c], 0
je 0x11002615
mov eax, dword [edi]
mov edx, dword [eax]
mov ecx, edi
call edx
mov ecx, 8
cmp dword [eax + 0x18], ecx
jb 0x110025c7
mov eax, dword [eax + 4]
jmp 0x110025ca
add eax, 4
cmp dword [esp + 0x78], ecx
mov edx, dword [esp + 0x64]
jae 0x110025d8
lea edx, [esp + 0x64]
cmp dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x80]
jae 0x110025ef
lea ecx, [esp + 0x80]
push eax
mov eax, dword [ebp + 0xc]
push edx
push ecx
mov ecx, dword [ebp + 8]
push 0x111b64c0
push eax
push ecx
push 0x232b
push 1
call fcn.11003650
mov esi, eax
call fcn.11011740
add esp, 0x20
mov byte [edi + 0xe8], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, edi
mov dword [edi + 0xec], eax
call fcn.11001b00
mov edi, 8
cmp dword [esp + 0x94], edi
jb 0x1100264d
mov edx, dword [esp + 0x80]
push edx
call fcn.1101d128
add esp, 4
xor esi, esi
cmp dword [esp + 0x78], edi
mov ebx, 7
mov dword [esp + 0x94], ebx
mov dword [esp + 0x90], esi
mov word [esp + 0x80], si
jb 0x1100267d
mov eax, dword [esp + 0x64]
push eax
call fcn.1101d128
add esp, 4
cmp dword [esp + 0xb0], 0x10
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], esi
mov word [esp + 0x64], si
jb 0x110026a4
mov ecx, dword [esp + 0x9c]
push ecx
call fcn.1101d128
add esp, 4
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0xac], esi
mov byte [esp + 0x9c], 0
lea eax, [esp + 0x1c]
mov dword [esp + 0xe0], 0xffffffff
call fcn.11013750
jmp 0x11002c02
cmp byte [edi + 0x181], 0
je 0x1100270b
cmp dword [edi + 0x17c], esi
je 0x1100270b
mov eax, dword [edi + 0x178]
mov eax, dword [eax]
lea ebx, [edi + 0x174]
push eax
push ebx
lea edx, [esp + 0x1c]
push edx
call fcn.11003570
mov cl, byte [esp + 0x13]
mov ebx, dword [ebp + 8]
xor esi, esi
mov eax, dword [edi + 0x16c]
cmp eax, esi
je 0x1100297a
cmp dword [edi + 0x17c], esi
je 0x11002806
test cl, cl
je 0x11002806
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov ecx, edi
call edx
mov dword [edi + 0xc8], esi
mov byte [edi + 0xe8], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ebx, [edi + 0x130]
mov dword [edi + 0xec], eax
call fcn.110035f0
call fcn.110034b0
mov esi, 8
cmp dword [edi + 0x170], esi
jb 0x11002774
mov ecx, dword [edi + 0x15c]
jmp 0x1100277a
lea ecx, [edi + 0x15c]
mov edx, dword [eax]
mov edx, dword [edx + 8]
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp + 8]
push ecx
push 0x111b6528
push str..httpHttpCommand.cpp
push 0x158
push 0
push eax
call edx
add esp, 0x20
call fcn.11003440
cmp dword [edi + 0x170], esi
jb 0x110027b4
mov ecx, dword [edi + 0x15c]
jmp 0x110027ba
lea ecx, [edi + 0x15c]
mov edx, dword [eax]
mov edx, dword [edx + 4]
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp + 8]
push ecx
push 0x111b6528
push 0
push eax
call edx
add esp, 0x18
mov esi, edi
mov byte [edi + 0x181], 1
call fcn.11001b00
lea ecx, [esp + 0x7c]
call fcn.11005700
lea ecx, [esp + 0x60]
call fcn.11005700
lea ecx, [esp + 0x98]
call fcn.110056d0
jmp 0x110026be
cmp eax, esi
je 0x1100297a
cmp byte [edi + 0x180], 0
jne 0x1100297a
test cl, cl
je 0x1100297a
mov dword [edi + 0xc8], 0
call fcn.110034b0
cmp dword [edi + 0x170], 8
lea esi, [edi + 0x158]
jb 0x11002846
mov ecx, dword [esi + 4]
jmp 0x11002849
lea ecx, [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx + 8]
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
push ebx
push 0x111b6598
push str..httpHttpCommand.cpp
push 0x166
push 0
push eax
call edx
add esp, 0x20
call fcn.11003440
cmp dword [esi + 0x18], 8
jb 0x1100287b
mov ecx, dword [esi + 4]
jmp 0x1100287e
lea ecx, [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx + 4]
push ecx
mov ecx, dword [ebp + 0xc]
push ecx
push ebx
push 0x111b6598
push 0
push eax
call edx
add esp, 0x18
mov byte [edi + 0xe8], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi + 0xec], eax
lea eax, [esp + 0xb4]
push eax
mov ecx, esi
mov byte [edi + 0x180], 1
call fcn.11008020
add esp, 4
mov bl, 9
mov byte [esp + 0xe0], bl
cmp dword [edi + 0x184], 0
jne 0x1100290a
push 0x5c
call fcn.1113530a
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
mov byte [esp + 0xe0], 0xa
je 0x110028f7
mov esi, eax
call fcn.11010080
jmp 0x110028f9
xor eax, eax
test eax, eax
mov byte [esp + 0xe0], bl
mov dword [edi + 0x184], eax
je 0x11002969
lea ecx, [esp + 0xb4]
push ecx
lea esi, [esp + 0x48]
call fcn.11010c20
add esp, 4
mov byte [esp + 0xe0], 0xb
cmp dword [eax + 0x18], 0x10
jb 0x11002931
mov eax, dword [eax + 4]
jmp 0x11002934
add eax, 4
push eax
lea ecx, [esp + 0x28]
call fcn.11005390
mov edx, dword [esp + 0x20]
mov byte [esp + 0xe0], 0xc
mov esi, dword [edx + 0x184]
lea ebx, [esp + 0x24]
call fcn.11010500
mov ecx, ebx
call fcn.110056d0
lea ecx, [esp + 0x44]
call fcn.110056d0
lea ecx, [esp + 0xb4]
call fcn.11005700
jmp 0x110027e3
mov eax, dword [edi]
mov edx, dword [eax + 0x18]
mov ecx, edi
call edx
cmp ebx, esi
je 0x11002a76
call fcn.110034b0
mov edx, dword [esp + 0x64]
mov ecx, 8
cmp dword [esp + 0x78], ecx
jae 0x110029a3
lea edx, [esp + 0x64]
cmp dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x80]
jae 0x110029ba
lea ecx, [esp + 0x80]
mov esi, dword [ebp + 0xc]
push edx
push ecx
push esi
push ebx
push 0x111b6610
push str..httpHttpCommand.cpp
push 0x17b
push 2
push eax
mov eax, dword [eax]
mov eax, dword [eax + 8]
call eax
add esp, 0x24
call fcn.11003440
cmp dword [esp + 0x78], 8
mov ecx, dword [esp + 0x64]
jae 0x110029f1
lea ecx, [esp + 0x64]
cmp dword [esp + 0x94], 8
mov edx, dword [esp + 0x80]
jae 0x11002a09
lea edx, [esp + 0x80]
push ecx
mov ecx, edx
mov edx, dword [eax]
mov edx, dword [edx + 4]
push ecx
push esi
push ebx
push 0x111b6610
push 2
push eax
call edx
add esp, 0x1c
cmp byte [edi + 0x12c], 0
je 0x11002a76
mov ecx, dword [esp + 0x64]
mov eax, 8
cmp dword [esp + 0x78], eax
jae 0x11002a3d
lea ecx, [esp + 0x64]
cmp dword [esp + 0x94], eax
mov eax, dword [esp + 0x80]
jae 0x11002a54
lea eax, [esp + 0x80]
push ecx
push eax
mov eax, dword [ebp + 0xc]
push 0x111b6688
push eax
push ebx
push 0x232b
push 2
call fcn.11003650
mov esi, eax
call fcn.11011740
add esp, 0x1c
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
call eax
push eax
lea edi, [esp + 0x28]
call fcn.1100e350
mov ebx, dword [esp + 0x20]
add ebx, 0x188
mov edx, 0x111b66e0
mov ecx, ebx
mov byte [esp + 0xe0], 0xd
call fcn.1100d9e0
mov esi, eax
mov eax, edi
call fcn.1100dd60
mov ecx, edi
mov byte [esp + 0xe0], 8
call fcn.1100e110
lea ecx, [esp + 0x60]
push ecx
lea edi, [esp + 0x28]
call fcn.1100e350
mov edx, 0x111b66e8
mov ecx, ebx
mov byte [esp + 0xe0], 0xe
call fcn.1100d9e0
mov esi, eax
mov eax, edi
call fcn.1100dd60
mov ecx, edi
mov byte [esp + 0xe0], 8
call fcn.1100e110
mov ebx, dword [esp + 0x20]
add ebx, 0x130
call fcn.110035f0
mov esi, dword [esp + 0x20]
lea ebx, [esi + 0x174]
call fcn.110035f0
mov eax, dword [esi + 0x108]
xor ebx, ebx
cmp eax, ebx
mov dword [esi + 0xc8], ebx
je 0x11002b46
lea edx, [ebp + 0xc]
push edx
add esi, 0x10c
push esi
push eax
lea ecx, [ebp + 8]
lea edx, [esp + 0xa4]
call fcn.11004150
add esp, 0xc
mov edi, 8
cmp dword [esp + 0x94], edi
jb 0x11002b64
mov eax, dword [esp + 0x80]
push eax
call fcn.1101d128
add esp, 4
cmp dword [esp + 0x78], edi
mov esi, 7
mov dword [esp + 0x94], esi
mov dword [esp + 0x90], ebx
mov word [esp + 0x80], bx
jb 0x11002b92
mov ecx, dword [esp + 0x64]
push ecx
call fcn.1101d128
add esp, 4
cmp dword [esp + 0xb0], 0x10
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], ebx
mov word [esp + 0x64], bx
jb 0x11002bb9
mov edx, dword [esp + 0x9c]
push edx
call fcn.1101d128
add esp, 4
mov dword [esp + 0xe0], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 8
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0xac], ebx
mov byte [esp + 0x9c], bl
mov ecx, eax
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x11002c02
cmp eax, ebx
je 0x11002c02
lea ecx, [eax - 8]
cmp ecx, ebx
je 0x11002c02
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
mov ecx, dword [esp + 0xd8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc0]
xor ecx, esp
call fcn.1113507a
mov esp, ebp
pop ebp
ret 8