Function at 0x554100
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5543a5
sub esp, 0x20
lea eax, [0x5b0a60]
mov dword [esp], eax
call fcn.0040a590
mov eax, dword [esp + 4]
mov dword [esp + 0x14], eax
mov byte [eax], 0xcd
lea ecx, [0x5ad780]
mov dword [esp], ecx
call fcn.0040a590
mov eax, dword [esp + 4]
mov dword [esp + 0x1c], eax
mov dword [eax], 0
lea ecx, [0x5b1ac0]
mov dword [esp], ecx
call fcn.0040a590
mov eax, dword [esp + 4]
mov dword [esp + 0x18], eax
lea ecx, [0x5bbac0]
mov dword [esp], ecx
call fcn.0040a590
mov eax, dword [esp + 4]
lea ecx, [0x5543b0]
mov dword [eax], ecx
mov ecx, dword [0x6d6280]
test ecx, ecx
jne 0x5541a1
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
mov ebx, dword [esp + 0x14]
mov dword [eax + 8], ebx
mov ebx, dword [esp + 0x18]
mov dword [eax + 0xc], ebx
mov dword [ebx], eax
jmp 0x5541d2
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x1c]
call fcn.00452020
lea edi, [ecx + 8]
mov eax, dword [esp + 0x14]
call fcn.00452020
lea edi, [ecx + 0xc]
mov eax, dword [esp + 0x18]
call fcn.00452020
mov edi, eax
mov eax, ecx
call fcn.00452020
mov ebx, edi
mov edx, dword [ebx]
mov eax, dword [edx]
mov byte [esp], 0x32
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x6d
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xcf
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xaa
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x49
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x97
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x33
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x5f
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x86
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x45
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x87
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x21
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 4
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xee
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x2b
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x4b
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x96
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xe8
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x1c
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x31
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x6b
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xcf
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xab
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x4a
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x4c
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xe0
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xbd
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x8d
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xc2
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xd7
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xaf
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x5c
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xaf
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x63
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xbf
call eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
call fcn.00450c10
jmp fcn.00554100