Function at 0x55ad50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x55b001
sub esp, 0x20
lea eax, [0x5b0a60]
mov dword [esp], eax
call fcn.0040a590
mov eax, dword [esp + 4]
mov dword [esp + 0x14], eax
mov byte [eax], 0x4f
lea ecx, [0x5ad780]
mov dword [esp], ecx
call fcn.0040a590
mov eax, dword [esp + 4]
mov dword [esp + 0x1c], eax
mov dword [eax], 0
lea ecx, [0x5b1980]
mov dword [esp], ecx
call fcn.0040a590
mov eax, dword [esp + 4]
mov dword [esp + 0x18], eax
lea ecx, [0x5bb8e0]
mov dword [esp], ecx
call fcn.0040a590
mov eax, dword [esp + 4]
lea ecx, [0x55b010]
mov dword [eax], ecx
mov ecx, dword [0x6d6280]
test ecx, ecx
jne 0x55adf1
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
mov ebx, dword [esp + 0x14]
mov dword [eax + 8], ebx
mov ebx, dword [esp + 0x18]
mov dword [eax + 0xc], ebx
mov dword [ebx], eax
jmp 0x55ae22
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x1c]
call fcn.00452020
lea edi, [ecx + 8]
mov eax, dword [esp + 0x14]
call fcn.00452020
lea edi, [ecx + 0xc]
mov eax, dword [esp + 0x18]
call fcn.00452020
mov edi, eax
mov eax, ecx
call fcn.00452020
mov ebx, edi
mov edx, dword [ebx]
mov eax, dword [edx]
mov byte [esp], 0xb2
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x70
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xde
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xbf
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], pe_nt_image_headers32
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xf3
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xf4
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xe8
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xc2
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x83
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xc2
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xd2
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x97
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x3a
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x6c
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x93
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x6f
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xe3
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x78
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x23
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x45
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x8e
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xe6
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x1e
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x2f
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x6c
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xd4
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xae
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x59
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xa3
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x48
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x4b
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xda
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xb1
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0x75
call eax
mov edx, dword [esp + 4]
mov eax, dword [edx]
mov byte [esp], 0xd7
call eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00441fd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
add esp, 0x20
ret
call fcn.00450c10
jmp fcn.0055ad50