Function at 0x560428
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xc
push 0
push 0
dec ecx
jne 0x560430
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x56079f
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [0x83a4b8]
mov edx, dword [edx + 0xd4]
lea eax, [ebp - 4]
mov ecx, 0x5607b8
call fcn.0040545c
mov eax, dword [ebp - 4]
call fcn.0040be8c
test al, al
je 0x560765
mov dl, 1
mov eax, dword [0x41ed6c]
call fcn.004041c0
mov esi, eax
mov edx, dword [ebp - 4]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x56075e
inc ebx
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 8]
call fcn.0040b510
cmp dword [ebp - 8], 0
je 0x560754
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3b
je 0x560754
push 1
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.00491520
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 8]
call fcn.004051d8
cmp dword [ebp - 0xc], 0
je 0x560520
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x22
jne 0x560520
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x5607cc
mov edx, 0x5607cc
mov eax, dword [ebp - 0xc]
call fcn.004916b0
push 1
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 8]
call fcn.004051d8
push 1
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 8]
call fcn.004051d8
push 1
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 8]
call fcn.004051d8
push 1
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 8]
call fcn.004051d8
push 1
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 8]
call fcn.004051d8
push 1
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x58]
lea eax, [ebp - 8]
call fcn.004051d8
push 1
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 8]
call fcn.004051d8
push 1
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 0x3c], 0x20
mov byte [ebp - 0x3b], 9
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 8]
call fcn.0049136c
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 8]
call fcn.004051d8
cmp dword [ebp - 0xc], 0
je 0x560754
cmp dword [ebp - 0x14], 0
je 0x560754
cmp dword [ebp - 0x24], 0
je 0x560754
xor edi, edi
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0040ba78
sub eax, 1
jb 0x56068e
je 0x56069e
dec eax
je 0x5606ae
jmp 0x5606bc
mov dl, 1
mov eax, dword [0x686f8c]
call fcn.0068d208
mov edi, eax
jmp 0x5606bc
mov dl, 1
mov eax, dword [0x6870b8]
call fcn.006a4778
mov edi, eax
jmp 0x5606bc
mov dl, 1
mov eax, dword [0x6872e4]
call fcn.006a4718
mov edi, eax
test edi, edi
je 0x560754
lea eax, [edi + 0x14]
mov edx, dword [ebp - 0x14]
call fcn.00405194
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.0040ba78
mov dword [edi + 0x1c], eax
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.0040ba78
mov dword [edi + 0x20], eax
lea eax, [edi + 0x18]
mov edx, dword [ebp - 0xc]
call fcn.00405194
xor edx, edx
mov eax, dword [ebp - 0x20]
call fcn.0040ba78
mov byte [edi + 0x15c4], al
xor edx, edx
mov eax, dword [ebp - 0x24]
call fcn.0040ba78
mov word [edi + 0xda0], ax
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.0040ba78
test eax, eax
je 0x56072a
mov byte [edi + 0x15dc], 1
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.0040ba78
imul eax, eax, 0x3e8
mov dword [edi + reloc.kernel32.dll_DeleteCriticalSection], eax
mov eax, dword [0x83a314]
mov eax, dword [eax]
mov eax, dword [eax + 0xcc]
mov edx, edi
call fcn.0042111c
inc dword [ebp - 0x30]
dec ebx
jne 0x5604a3
mov eax, esi
call fcn.004041f0
mov ebx, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5607a6
lea eax, [ebp - 0x60]
mov edx, 9
call fcn.00405164
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00405164
lea eax, [ebp - 0x2c]
mov edx, 0xb
call fcn.00405164
ret