Function at 0x20056b71
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov eax, 0x200a0583
call fcn.2007d394
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esi
mov dword [esi], fcn.2003ae71
mov dword [esi + 4], 0x200a9fa4
mov dword [ebp - 4], 0x66
push esi
call fcn.20050338
pop ecx
mov ecx, dword [esi + 0x108f0]
xor ebx, ebx
cmp ecx, ebx
je 0x20056bd5
call fcn.200773dd
test eax, eax
je 0x20056bbf
mov ecx, dword [esi + 0x108f0]
call fcn.20077656
mov ecx, dword [esi + 0x108f0]
cmp ecx, ebx
je 0x20056bcf
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [esi + 0x108f0], ebx
lea edi, [esi + 0x192c4]
mov eax, dword [edi]
cmp eax, ebx
je 0x20056bea
push eax
call fcn.2008f9fe
pop ecx
mov dword [edi], ebx
mov byte [ebp - 4], 0x65
lea ecx, [esi + 0x19938]
call fcn.2003d296
mov byte [ebp - 4], 0x64
lea ecx, [esi + 0x19830]
call fcn.20064359
mov byte [ebp - 4], 0x63
lea ecx, [esi + 0x19824]
call fcn.20006ee7
mov byte [ebp - 4], 0x62
lea ecx, [esi + 0x19754]
call fcn.2002733d
mov byte [ebp - 4], 0x61
lea ecx, [esi + 0x19670]
call fcn.2003f197
mov byte [ebp - 4], 0x60
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [esi + 0x19654]
call fcn.2000275e
mov byte [ebp - 4], 0x5f
push ebx
push edi
lea ecx, [esi + 0x19638]
call fcn.2000275e
mov byte [ebp - 4], 0x5e
push ebx
push edi
lea ecx, [esi + 0x1961c]
call fcn.2000275e
mov byte [ebp - 4], 0x5d
push ebx
push edi
lea ecx, [esi + 0x19600]
call fcn.2000275e
mov byte [ebp - 4], 0x5c
push ebx
push edi
lea ecx, [esi + 0x195e4]
call fcn.2000275e
mov byte [ebp - 4], 0x5b
push ebx
push edi
lea ecx, [esi + 0x195c8]
call fcn.2000275e
mov byte [ebp - 4], 0x5a
push ebx
push edi
lea ecx, [esi + 0x195ac]
call fcn.2000275e
mov byte [ebp - 4], 0x59
push ebx
push edi
lea ecx, [esi + 0x19590]
call fcn.2000275e
mov byte [ebp - 4], 0x58
push ebx
push edi
lea ecx, [esi + 0x19574]
call fcn.2000275e
mov byte [ebp - 4], 0x57
push ebx
push edi
lea ecx, [esi + 0x19558]
call fcn.2000275e
mov byte [ebp - 4], 0x56
lea ecx, [esi + 0x19544]
call fcn.2000447d
mov byte [ebp - 4], 0x55
mov edi, dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea eax, [esi + 0x19528]
push eax
call edi
mov byte [ebp - 4], 0x54
push ebx
push 1
lea ecx, [esi + 0x19504]
call fcn.2000275e
mov byte [ebp - 4], 0x53
lea ecx, [esi + 0x194f0]
call fcn.2007660f
mov byte [ebp - 4], 0x52
push ebx
push 1
lea ecx, [esi + 0x194d4]
call fcn.2000275e
mov byte [ebp - 4], 0x51
push ebx
push 1
lea ecx, [esi + 0x194b4]
call fcn.2000275e
mov byte [ebp - 4], 0x50
lea ecx, [esi + 0x19430]
call fcn.20073ded
mov byte [ebp - 4], 0x4f
lea ecx, [esi + 0x193c8]
call fcn.20073ded
mov byte [ebp - 4], 0x4e
lea ecx, [esi + 0x192fc]
call fcn.20071716
mov byte [ebp - 4], 0x4d
lea ecx, [esi + 0x192c8]
call fcn.2001e6a9
mov byte [ebp - 4], 0x4c
push ebx
push 1
lea ecx, [esi + 0x192a0]
call fcn.2000275e
mov byte [ebp - 4], 0x4b
push ebx
push 1
lea ecx, [esi + 0x19284]
call fcn.2000275e
mov byte [ebp - 4], 0x4a
push ebx
push 1
lea ecx, [esi + 0x19268]
call fcn.2000275e
mov byte [ebp - 4], 0x49
push ebx
push 1
lea ecx, [esi + 0x1924c]
call fcn.2000275e
mov byte [ebp - 4], 0x48
push ebx
push 1
lea ecx, [esi + 0x19200]
call fcn.2000275e
mov byte [ebp - 4], 0x47
lea ecx, [esi + 0x191e8]
call fcn.20025d4d
mov byte [ebp - 4], 0x46
lea ecx, [esi + 0x191d0]
call fcn.20013728
mov byte [ebp - 4], 0x45
lea ecx, [esi + 0x191c4]
call fcn.2004d127
mov byte [ebp - 4], 0x44
lea ecx, [esi + 0x19050]
call fcn.200073f2
mov byte [ebp - 4], 0x43
lea ecx, [esi + 0x19040]
call fcn.2004d127
mov byte [ebp - 4], 0x42
lea ecx, [esi + 0x19034]
call fcn.20013728
mov byte [ebp - 4], 0x41
lea ecx, [esi + 0x19028]
call fcn.20013728
mov byte [ebp - 4], 0x40
lea ecx, [esi + 0x19000]
call fcn.20056b4e
mov byte [ebp - 4], 0x3f
lea ecx, [esi + 0x10fa8]
call fcn.20042b66
mov byte [ebp - 4], 0x3e
lea ecx, [esi + 0x10e90]
call fcn.20072da9
mov byte [ebp - 4], 0x3d
lea ecx, [esi + 0x10e4c]
call fcn.2004d104
mov byte [ebp - 4], 0x3c
lea ecx, [esi + 0x10e40]
call fcn.20025d4d
mov byte [ebp - 4], 0x3b
lea ecx, [esi + 0x10e34]
call fcn.20025d4d
mov byte [ebp - 4], 0x3a
lea eax, [esi + 0x10e10]
push eax
call edi
mov byte [ebp - 4], 0x39
lea ecx, [esi + 0x10d98]
call fcn.20063001
mov byte [ebp - 4], 0x38
lea ecx, [esi + 0x10d88]
call fcn.2004e5a3
mov byte [ebp - 4], 0x37
lea ecx, [esi + 0x10d70]
call fcn.20006ee7
mov byte [ebp - 4], 0x36
lea ecx, [esi + 0x10d64]
call fcn.20050129
mov byte [ebp - 4], 0x35
lea eax, [esi + 0x10d48]
push eax
call edi
mov byte [ebp - 4], 0x34
push ebx
push 1
lea ecx, [esi + 0x10d2c]
call fcn.2000275e
mov byte [ebp - 4], 0x33
push ebx
push 1
lea ecx, [esi + 0x10d0c]
call fcn.2000275e
mov byte [ebp - 4], 0x32
push ebx
push 1
lea ecx, [esi + 0x10cf0]
call fcn.2000275e
mov byte [ebp - 4], 0x31
push ebx
push 1
lea ecx, [esi + 0x10cd0]
call fcn.2000275e
mov byte [ebp - 4], 0x30
push ebx
push 1
lea ecx, [esi + 0x10cb4]
call fcn.2000275e
mov byte [ebp - 4], 0x2f
push ebx
push 1
lea ecx, [esi + 0x10c90]
call fcn.2000275e
mov byte [ebp - 4], 0x2e
push ebx
push 1
lea ecx, [esi + 0x10c74]
call fcn.2000275e
mov byte [ebp - 4], 0x2d
lea ecx, [esi + 0x10c50]
call fcn.2004d0e1
mov byte [ebp - 4], 0x2c
lea eax, [esi + 0x10c34]
push eax
call edi
mov byte [ebp - 4], 0x2b
lea eax, [esi + 0x10c18]
push eax
call edi
mov byte [ebp - 4], 0x2a
lea ecx, [esi + 0x10b5c]
call fcn.20013aa3
mov byte [ebp - 4], 0x29
lea ecx, [esi + 0x10b30]
call fcn.200122d2
mov byte [ebp - 4], 0x28
lea ecx, [esi + 0x10b24]
call fcn.20013728
mov byte [ebp - 4], 0x27
lea ecx, [esi + 0x10b18]
call fcn.200352ad
mov byte [ebp - 4], 0x26
push ebx
push 1
lea ecx, [esi + 0x10ae8]
call fcn.2000275e
mov byte [ebp - 4], 0x25
push ebx
push 1
lea ecx, [esi + 0x10acc]
call fcn.2000275e
mov byte [ebp - 4], 0x24
push ebx
push 1
lea ecx, [esi + 0x10ab0]
call fcn.2000275e
mov byte [ebp - 4], 0x23
push ebx
push 1
lea ecx, [esi + 0x10a94]
call fcn.2000275e
mov byte [ebp - 4], 0x22
push ebx
push 1
lea ecx, [esi + 0x10a78]
call fcn.2000275e
mov byte [ebp - 4], 0x21
push ebx
push 1
lea ecx, [esi + 0x10a5c]
call fcn.2000275e
mov byte [ebp - 4], 0x20
lea ecx, [esi + 0x10a54]
call fcn.20001efb
mov byte [ebp - 4], 0x1f
lea eax, [esi + 0x10a38]
push eax
call edi
mov byte [ebp - 4], 0x1e
lea ecx, [esi + 0x10a2c]
call fcn.2004d0be
mov byte [ebp - 4], 0x1d
lea ecx, [esi + 0x10a20]
call fcn.2004d0be
mov byte [ebp - 4], 0x1c
lea ecx, [esi + 0x10a14]
call fcn.2004d0be
mov byte [ebp - 4], 0x1b
lea ecx, [esi + 0x10a08]
call fcn.2004d0be
mov byte [ebp - 4], 0x1a
lea ecx, [esi + 0x109fc]
call fcn.2004d0be
mov byte [ebp - 4], 0x19
lea ecx, [esi + 0x109f0]
call fcn.2004d0be
mov byte [ebp - 4], 0x18
lea ecx, [esi + 0x109e4]
call fcn.2004d0be
mov byte [ebp - 4], 0x17
lea ecx, [esi + 0x109d8]
call fcn.2004d0be
mov byte [ebp - 4], 0x16
lea ecx, [esi + 0x109cc]
call fcn.2004d0be
mov byte [ebp - 4], 0x15
lea ecx, [esi + 0x109c0]
call fcn.2004d0be
mov byte [ebp - 4], 0x14
lea ecx, [esi + 0x109b4]
call fcn.2004d0be
mov byte [ebp - 4], 0x13
lea ecx, [esi + 0x109a8]
call fcn.2004d0be
mov byte [ebp - 4], 0x12
lea ecx, [esi + 0x1099c]
call fcn.2004d0be
mov byte [ebp - 4], 0x11
lea ecx, [esi + 0x10990]
call fcn.2004d0be
mov byte [ebp - 4], 0x10
lea ecx, [esi + 0x10984]
call fcn.2004d0be
mov byte [ebp - 4], 0xf
lea ecx, [esi + 0x10978]
call fcn.2004d0be
mov byte [ebp - 4], 0xe
lea ecx, [esi + 0x1096c]
call fcn.2004d0be
mov byte [ebp - 4], 0xd
lea ecx, [esi + 0x10960]
call fcn.2004d0be
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x10954]
call fcn.2004d0be
mov byte [ebp - 4], 0xb
lea eax, [esi + 0x10938]
push eax
call edi
mov byte [ebp - 4], 0xa
lea eax, [esi + 0x108f8]
push eax
call edi
mov byte [ebp - 4], 9
push ebx
push 1
lea ecx, [esi + 0x10874]
call fcn.2000275e
mov byte [ebp - 4], 8
lea ecx, [esi + 0x877c]
call fcn.200554af
mov byte [ebp - 4], 7
lea ecx, [esi + 0x688]
call fcn.200554af
mov byte [ebp - 4], 6
lea ecx, [esi + 0x340]
call fcn.2000fbba
mov byte [ebp - 4], 5
push ebx
push 1
lea ecx, [esi + 0x324]
call fcn.2000275e
mov byte [ebp - 4], 4
push ebx
push 1
lea ecx, [esi + 0x308]
call fcn.2000275e
mov byte [ebp - 4], 3
push ebx
push 1
lea ecx, [esi + 0x2e4]
call fcn.2000275e
mov byte [ebp - 4], 2
lea eax, [esi + 0x2c8]
push eax
call edi
mov byte [ebp - 4], 1
lea eax, [esi + 0x284]
push eax
call edi
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [esi + 0x268]
call fcn.2000275e
or dword [ebp - 4], 0xffffffff
add esi, 0x238
push esi
call edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret