Function at 0x11f96
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x6f8
push ebx
push esi
push edi
push 0xf
pop ecx
xor eax, eax
push 0xb
lea edi, [ebp - 0x2e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
pop ecx
xor eax, eax
xor ebx, ebx
push 0xb
mov word [ebp + 0x10], bx
lea edi, [ebp + 0x12]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
pop ecx
xor eax, eax
push 0xb
mov word [ebp - 0x60], bx
lea edi, [ebp - 0x5e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
pop ecx
xor eax, eax
push 7
mov word [ebp - 0x90], bx
lea edi, [ebp - 0x8e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
pop ecx
xor eax, eax
mov word [ebp + 0x40], bx
lea edi, [ebp + 0x42]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
pop ecx
xor eax, eax
mov word [ebp - 0x490], bx
lea edi, [ebp - 0x48e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
pop ecx
xor eax, eax
mov word [ebp - 0x290], bx
lea edi, [ebp - 0x28e]
rep stosd dword es:[edi], eax
push 0x7f
stosw word es:[edi], ax
pop ecx
mov word [ebp - 0x690], bx
xor eax, eax
lea edi, [ebp - 0x68e]
rep stosd dword es:[edi], eax
push 0x5c
stosw word es:[edi], ax
pop edi
push 0x53
pop esi
mov word [ebp - 0x30], di
mov word [ebp - 0x2c], 0x45
mov word [ebp - 0x2e], 0x52
mov word [ebp - 0x2a], 0x47
mov word [ebp - 0x28], 0x49
mov word [ebp - 0x26], si
mov word [ebp - 0x24], 0x54
mov word [ebp - 0x22], 0x52
mov word [ebp - 0x20], 0x59
mov word [ebp - 0x1e], di
mov word [ebp - 0x1c], 0x4d
nop
mov word [ebp - 0x1a], 0x41
mov word [ebp - 0x18], 0x43
mov word [ebp - 0x16], 0x48
mov word [ebp - 0x14], 0x49
mov word [ebp - 0x12], 0x4e
mov word [ebp - 0x10], 0x45
push 0x72
pop ecx
push 0x74
pop eax
mov word [ebp - 0xe], di
mov word [ebp - 0xc], si
mov word [ebp - 0xa], 0x59
mov word [ebp - 8], si
mov word [ebp - 6], 0x54
mov word [ebp - 4], 0x45
mov word [ebp - 2], 0x4d
mov word [ebp], di
mov word [ebp + 0x10], 0x43
mov word [ebp + 0x12], 0x75
mov word [ebp + 0x14], cx
mov word [ebp + 0x16], cx
mov word [ebp + 0x18], 0x65
mov word [ebp + 0x1a], 0x6e
mov word [ebp + 0x1c], ax
mov word [ebp + 0x1e], 0x43
nop
push 0x6f
pop edx
mov word [ebp + 0x24], ax
mov word [ebp + 0x30], ax
mov word [ebp - 0x5a], ax
mov word [ebp - 0x4e], ax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x90]
push eax
mov word [ebp + 0x20], dx
mov word [ebp + 0x22], 0x6e
mov word [ebp + 0x26], cx
mov word [ebp + 0x28], dx
mov word [ebp + 0x2a], 0x6c
mov word [ebp + 0x2c], si
mov word [ebp + 0x2e], 0x65
mov word [ebp - 0x60], 0x43
mov word [ebp - 0x5e], dx
mov word [ebp - 0x5c], 0x6e
mov word [ebp - 0x58], cx
mov word [ebp - 0x56], dx
mov word [ebp - 0x54], 0x6c
mov word [ebp - 0x52], si
mov word [ebp - 0x50], 0x65
mov word [ebp - 0x4c], 0x30
mov word [ebp - 0x4a], 0x30
mov word [ebp - 0x48], 0x31
call dword [sym.imp.ntoskrnl.exe_wcscpy]
pop ecx
pop ecx
mov word [ebp - 0x78], 0x32
mov word [ebp + 0x40], di
mov word [ebp + 0x42], si
mov word [ebp + 0x44], 0x65
mov word [ebp + 0x46], 0x72
nop
push dword [ebp + 0x70]
mov esi, dword [sym.imp.ntoskrnl.exe_swprintf]
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x490]
push 0x11f5c
push eax
mov word [ebp + 0x48], 0x76
mov word [ebp + 0x4a], 0x69
mov word [ebp + 0x4c], 0x63
mov word [ebp + 0x4e], 0x65
mov word [ebp + 0x50], 0x73
mov word [ebp + 0x52], di
call esi
push dword [ebp + 0x70]
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x290]
push 0x11f70
push eax
call esi
add esp, 0x30
nop
push dword [ebp + 0x70]
lea eax, [ebp + 0x40]
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x690]
push 0x11f84
push eax
call esi
mov esi, dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
add esp, 0x18
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp + 0x60]
push eax
call esi
push dword [ebp + 0x7c]
mov edi, dword [sym.imp.ntoskrnl.exe_wcslen]
push dword [ebp + 0x78]
call edi
pop ecx
lea eax, [eax + eax + 2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push dword [ebp + 0x64]
push dword [ebp + 0x60]
call fcn.00011ee0
cmp eax, ebx
jl 0x122b6
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp + 0x60]
push eax
call esi
push dword [ebp + 0x7c]
push dword [ebp + 0x78]
call edi
pop ecx
lea eax, [eax + eax + 2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push dword [ebp + 0x64]
push dword [ebp + 0x60]
call fcn.00011ee0
cmp eax, ebx
jl 0x122b6
nop
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp + 0x60]
push eax
call esi
push dword [ebp + 0x7c]
push dword [ebp + 0x78]
call edi
pop ecx
lea eax, [eax + eax + 2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push dword [ebp + 0x64]
push dword [ebp + 0x60]
call fcn.00011ee0
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10