Function at 0x454e36
Capabilities:
Check for software breakpoints
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
mov eax, dword [0x49dd48]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [ebp - 0x70], eax
xor ebx, ebx
push esi
mov eax, 0x6c006c
mov dword [ebp - 0x44], 0x53005c
mov dword [ebp - 0x14], eax
mov esi, ebx
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x74]
push 1
push eax
lea eax, [ebp - 0x68]
mov dword [ebp - 0x40], 0x730079
push eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x3c], 0x650074
push eax
mov dword [ebp - 0x38], 0x52006d
mov dword [ebp - 0x34], 0x6f006f
mov dword [ebp - 0x30], 0x5c0074
mov dword [ebp - 0x2c], 0x790073
mov dword [ebp - 0x28], 0x740073
mov dword [ebp - 0x24], 0x6d0065
mov dword [ebp - 0x20], 0x320033
mov dword [ebp - 0x1c], 0x6e005c
mov dword [ebp - 0x18], 0x640074
mov dword [ebp - 0x10], 0x64002e
mov dword [ebp - 8], ebx
mov dword [ebp - 0x60], esi
call fcn.00439b16
test eax, eax
jne 0x45510d
push ebx
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x74]
push dword [ebp - 0x68]
call fcn.00405020
cmp al, 1
jne 0x455105
mov edx, dword [ebp - 0x5c]
mov ebx, dword [ebp - 0x50]
push edi
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
mov ecx, dword [eax + edx + 0x7c]
lea esi, [ecx + edi]
mov dword [ebp - 0x58], esi
cmp edi, ebx
jae 0x4550f9
lea eax, [edi + 0x28]
cmp eax, ebx
jae 0x4550f9
cmp ecx, ebx
jae 0x4550f9
cmp esi, ebx
jae 0x4550f9
mov eax, dword [edi + edx + 0x14]
mov esi, dword [edi + edx + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [edi + edx + 0x20]
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x54], eax
cmp eax, edi
jb 0x4550f9
shl esi, 2
add eax, esi
cmp eax, dword [ebp - 0x58]
jae 0x4550f9
cmp esi, ecx
jae 0x4550f9
mov esi, dword [edi + edx + 0x24]
cmp esi, edi
jb 0x4550f9
mov eax, dword [ebp - 0x4c]
lea eax, [esi + eax*2]
cmp eax, dword [ebp - 0x58]
jae 0x4550f9
mov ecx, dword [edi + edx + 0x1c]
cmp ecx, edi
jb 0x4550f9
mov eax, dword [ebp - 0x48]
lea eax, [ecx + eax*4]
cmp eax, dword [ebp - 0x58]
jae 0x4550f9
mov eax, dword [ebp - 0x54]
add eax, edx
mov dword [ebp - 0x7c], eax
lea eax, [esi + edx]
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x80], eax
lea eax, [ecx + edx]
xor ecx, ecx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x54], ecx
test esi, esi
je 0x4550f9
mov eax, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x80]
movzx ecx, word [ebx + ecx*2]
mov ebx, dword [ebp - 0x50]
cmp ecx, eax
jae 0x4550ea
mov esi, dword [ebp - 0x6c]
mov ecx, dword [esi + ecx*4]
mov esi, dword [ebp - 0x4c]
cmp ecx, ebx
jae 0x4550ea
cmp ecx, edi
jb 0x454ff3
cmp ecx, dword [ebp - 0x58]
jb 0x4550ea
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x54]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x5c]
add eax, edx
mov dword [ebp - 0x64], eax
cmp eax, edx
jb 0x4550e7
lea esi, [edx + ebx]
cmp eax, esi
jae 0x4550e4
add eax, 2
cmp eax, esi
jae 0x4550e4
mov eax, dword [ebp - 0x64]
mov ebx, 0x744e
cmp word [eax], bx
jne 0x4550e4
add ecx, edx
cmp ecx, edx
jb 0x4550e4
cmp ecx, esi
jae 0x4550e4
lea eax, [ecx + 0xb]
cmp eax, esi
jae 0x4550e4
cmp byte [ecx], 0xb8
jne 0x4550e4
cmp byte [ecx + 3], 0
jne 0x4550e4
cmp byte [ecx + 4], 0
jne 0x4550e4
mov ah, byte [ecx + 9]
cmp ah, 0xcd
jne 0x455077
cmp byte [ecx + 0xa], 0x2e
je 0x4550a4
mov al, byte [ecx + 5]
cmp al, 0xba
jne 0x455095
cmp byte [ecx + 6], 0
jne 0x455095
cmp byte [ecx + 7], 3
jne 0x455095
cmp byte [ecx + 8], 0xfe
jne 0x455095
cmp ah, 0x7f
je 0x4550a4
cmp al, 0xe8
jne 0x4550e4
mov al, byte [ecx + 0xa]
cmp al, 0xc2
je 0x4550a4
cmp al, 0xc3
jne 0x4550e4
push dword [ebp - 0x64]
mov ebx, dword [ecx + 1]
call fcn.0047d690
mov ecx, eax
mov dword [ebp - 0x78], ecx
cmp ebx, dword [ebp + 0xc]
jae 0x4550e1
cmp ecx, 0x40
jae 0x4550e1
inc dword [ebp - 0x60]
imul esi, ebx, 0x50
push ecx
push dword [ebp - 0x64]
add esi, dword [ebp - 0x70]
lea eax, [esi + 4]
mov dword [esi], ebx
push eax
call sub.ntoskrnl.exe_memcpy
mov eax, dword [ebp - 0x78]
add esp, 0xc
mov byte [esi + eax + 4], 0
mov edx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x54]
inc ecx
mov dword [ebp - 0x54], ecx
cmp ecx, esi
jb 0x454fc3
push edx
call fcn.00478d8c
mov esi, dword [ebp - 0x60]
xor ebx, ebx
pop edi
push dword [ebp - 0x68]
call fcn.00478d8c
cmp esi, dword [ebp + 0xc]
jne 0x455118
test esi, esi
je 0x455118
mov bl, 1
mov ecx, dword [ebp - 4]
mov al, bl
pop esi
xor ecx, ebp
pop ebx
call fcn.00489f30
mov esp, ebp
pop ebp
ret 8