Function at 0x4545a0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58cde9
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x600f80]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x10], 0
movdqu xmmword [edi], xmm0
movq qword [edi + 0x10], xmm0
mov dword [edi + 0x18], 0
call fcn.00457750
mov dword [ebp - 4], 0
mov edx, str.process
push str.null
push dword [esi + 0xc]
mov ecx, edi
mov dword [ebp - 0x10], 1
call fcn.00457bf0
push str.CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
push dword [esi + 0x10]
mov edx, str.digest.sha1scp
mov ecx, edi
call fcn.00457bf0
push str.CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
push dword [esi + 0x14]
mov edx, str.digest.sha256
mov ecx, edi
call fcn.00457bf0
add esp, 0x14
mov edx, str.versao_lista
mov ecx, edi
push 0
call fcn.00457cf0
push 0xffffffffffffffff
push 0
mov edx, str.sig_id
mov ecx, edi
call fcn.00457de0
mov eax, dword [esi + 0x1c]
add esp, 0xc
mov edx, str.signed
mov ecx, edi
cmp dword [eax + 0x14c], 0
setne al
movzx eax, al
push eax
call fcn.00457ec0
mov eax, dword [esi + 0x1c]
add esp, 4
mov edx, str.packed
mov ecx, edi
movzx eax, byte [eax + 0x154]
push eax
call fcn.00457ec0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.packed_v2
mov ecx, edi
movzx eax, byte [eax + 0x30]
push eax
call fcn.00457ec0
mov eax, dword [esi + 0x1c]
add esp, 4
mov edx, str.suspect_status
mov ecx, edi
push dword [eax + 0x150]
call fcn.00457cf0
push str.bnVsbA
push dword [esi + 0x18]
mov edx, str.ico_image
mov ecx, edi
call fcn.00457bf0
mov eax, dword [esi + 0x20]
mov edx, str.packer
add eax, 0x31
mov ecx, edi
push str.null
push eax
call fcn.00457bf0
mov eax, dword [esi + 0x20]
mov edx, str.compiler
push str.null
add eax, 0x131
push eax
mov ecx, edi
call fcn.00457bf0
mov eax, dword [esi + 0x1c]
add esp, 0x1c
mov edx, str.tcp_port
mov ecx, edi
push dword [eax + 0x140]
call fcn.00457cf0
mov eax, dword [esi + 0x1c]
add esp, 4
mov edx, str.udp_port
mov ecx, edi
push dword [eax + 0x144]
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.pe_magic
mov ecx, edi
movzx eax, word [eax]
push eax
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.compile_time
mov ecx, edi
push dword [eax + 4]
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.characteristics
mov ecx, edi
movzx eax, word [eax + 8]
push eax
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.size_memory
mov ecx, edi
push dword [eax + 0xc]
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.size_disk
mov ecx, edi
push dword [eax + 0x10]
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.subsystem
mov ecx, edi
movzx eax, word [eax + 0x14]
push eax
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.resources.pe_count
mov ecx, edi
push dword [eax + 0x18]
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.resources.jpeg_count
mov ecx, edi
push dword [eax + 0x1c]
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.resources.bmp_count
mov ecx, edi
push dword [eax + 0x20]
call fcn.00457cf0
mov eax, dword [esi + 0x20]
add esp, 4
mov edx, str.resources.png_count
mov ecx, edi
push dword [eax + 0x24]
call fcn.00457cf0
add esp, 4
mov edx, str.suspect.window_style
mov ecx, edi
push dword [esi + 0x28]
call fcn.00457fb0
add esp, 4
mov edx, str.suspect.window_style_ex
mov ecx, edi
push dword [esi + 0x2c]
call fcn.00457fb0
add esp, 4
mov edx, str.suspect.rule_id
mov ecx, edi
push dword [esi + 0x24]
call fcn.00457cf0
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret