Function at 0x45a88f
Capabilities:
Check for peb beingdebugged flag
Check os version

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48bd43
mov eax, dword fs:[0]
push eax
sub esp, 0x4c0
mov eax, dword [0x4970c0]
xor eax, esp
mov dword [esp + 0x4b8], eax
push ebx
push esi
push edi
mov eax, dword [0x4970c0]
xor eax, esp
push eax
lea eax, [esp + 0x4d0]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 4]
movzx ecx, byte [eax + 0x3c4]
mov ebx, edx
xor edx, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax + 0x468]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], edx
mov esi, edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x28], eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [esp + 0x14]
jne 0x45a904
mov eax, dword [ebx + 8]
sub ecx, edx
mov edx, dword [ebx]
sar ecx, 1
add eax, edx
cmp eax, ecx
jae 0x45a938
mov eax, dword [ebx + 0x10]
movzx eax, word [eax + edx*2]
push eax
call fcn.00454d9d
test eax, eax
je 0x45a938
mov byte [ebx + 0xbd], 1
lea eax, [ebx + 0xcc]
mov dword [esp + 0x24], eax
lea edx, [ebx + 0xd4]
mov dword [esp + 0x2c], 0x94
mov ecx, esi
mov eax, dword [edx + 4]
sub eax, dword [edx]
cdq
idiv dword [esp + 0x2c]
test eax, eax
je 0x45a994
mov ecx, dword [esp + 0x24]
call fcn.00454fa1
mov eax, dword [eax + 0x8c]
add eax, dword [esp + 0x1c]
cmp esi, eax
jl 0x45a990
mov ecx, dword [esp + 0x24]
call fcn.00454fa1
mov eax, dword [eax + 0x8c]
add eax, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
jmp 0x45a9a8
mov ecx, dword [esp + 0x10]
mov eax, dword [edi + 4]
movzx edx, byte [eax + 0x3c3]
lea eax, [ecx + 1]
imul edx, eax
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x28]
xor eax, eax
mov ecx, eax
mov dword [esp + 0x20], eax
mov eax, dword [edx + 0x290]
test eax, eax
jle 0x45ab03
cmp ecx, eax
jb 0x45a9cd
call fcn.00446d3e
jmp 0x45a9d6
mov eax, dword [edx + 0x28c]
lea eax, [eax + ecx*4]
mov esi, dword [eax]
mov eax, dword [esi]
mov ecx, esi
mov dword [esp + 0x34], esi
call dword [eax + 0x28]
test eax, eax
je 0x45aae8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
cmp eax, 7
je 0x45aae8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
cmp eax, 2
jne 0x45aa16
mov eax, dword [edi + 4]
cmp esi, dword [eax + 0x43c]
jne 0x45aae8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
cmp eax, 1
jne 0x45aa31
mov eax, dword [edi + 4]
cmp esi, dword [eax + 0x43c]
jne 0x45aae8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
cmp eax, 4
je 0x45aae8
mov eax, dword [edi + 4]
mov al, byte [eax + 0x21d]
test al, al
jne 0x45aa5e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
cmp eax, 3
je 0x45aae8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x40]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x20]
mov edi, eax
mov dword [esp + 0x38], edi
mov ecx, dword [esp + 0x34]
xor eax, eax
mov dword [esp + 0x4d8], eax
mov eax, dword [ecx]
mov esi, dword [edi]
call dword [eax + 0x40]
push eax
mov ecx, edi
call dword [esi]
push dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
push dword [esp + 0x18]
mov dword [edi + 8], eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x454]
push eax
push edi
mov eax, ebx
lea esi, [esp + 0x4c]
call fcn.00460aa4
mov byte [esp + 0x4d8], 1
call fcn.00464f98
push dword [esp + 0x4bc]
mov esi, dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete_void__]
mov byte [ebx + 0xac], 1
call esi
or dword [esp + 0x4dc], 0xffffffff
pop ecx
push edi
call esi
mov edi, dword [esp + 0x1c]
pop ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x290]
inc ecx
mov dword [esp + 0x20], ecx
cmp ecx, eax
jl 0x45a9c4
mov ebx, dword [esp + 0x24]
call fcn.00455147
mov ebx, dword [esp + 0x30]
push ebx
push dword [edi + 4]
call fcn.00453f81
mov ecx, dword [esp + 0x10]
test ecx, ecx
jne 0x45ab30
push ebx
push edi
call fcn.0045abc7
test al, al
jne 0x45ab69
mov ecx, dword [esp + 0x10]
lea edx, [ebx + 0xd4]
mov eax, dword [edx + 4]
sub eax, dword [edx]
mov esi, 0x94
cdq
idiv esi
cmp eax, 5
jae 0x45ab69
mov eax, dword [edi + 4]
movzx eax, byte [eax + 0x3c5]
mov esi, dword [esp + 0x14]
inc ecx
mov dword [esp + 0x10], ecx
lea edx, [ebx + 0xd4]
cmp ecx, eax
jl 0x45a952
cmp byte [ebx + 0xb6], 0
je 0x45ab9e
mov edi, ebx
call fcn.0045b2a8
cmp byte [ebx + 0xb6], 0
je 0x45ab9e
cmp byte [ebx + 0xaa], 0
je 0x45ab9e
xor eax, eax
mov byte [ebx + 0xaa], al
mov eax, dword [esp + 0x18]
push ebx
push eax
call fcn.0045abc7
mov ecx, dword [esp + 0x4d0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x4b8]
xor ecx, esp
call fcn.00484deb
mov esp, ebp
pop ebp
ret