Function at 0x454b90
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58cde9
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x600f80]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x10], 0
movdqu xmmword [edi], xmm0
movq qword [edi + 0x10], xmm0
mov dword [edi + 0x18], 0
call fcn.00457750
push ecx
mov dword [ebp - 4], 0
mov edx, str.action
push dword [esi + 4]
mov ecx, edi
mov dword [ebp - 0x10], 1
call fcn.00457cf0
add esp, 4
mov edx, str.type
mov ecx, edi
push dword [esi + 8]
call fcn.00457cf0
add esp, 4
mov edx, str.subaction
mov ecx, edi
push dword [esi + 0xc]
call fcn.00457cf0
add esp, 4
mov edx, str.browser
mov ecx, edi
push dword [esi + 0x10]
call fcn.00457cf0
push str.null
push dword [esi + 0x14]
mov edx, str.process
mov ecx, edi
call fcn.00457bf0
push str.CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
push dword [esi + 0x18]
mov edx, str.digest.sha1scp
mov ecx, edi
call fcn.00457bf0
push str.CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
push dword [esi + 0x1c]
mov edx, str.digest.sha256
mov ecx, edi
call fcn.00457bf0
add esp, 0x1c
mov edx, str.signed
cmp dword [esi + 0x28], 0
mov ecx, edi
setne al
movzx eax, al
push eax
call fcn.00457ec0
add esp, 4
mov edx, str.packed
cmp dword [esi + 0x2c], 0
mov ecx, edi
setne al
movzx eax, al
push eax
call fcn.00457ec0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.packed_v2
mov ecx, edi
movzx eax, byte [eax + 0x30]
push eax
call fcn.00457ec0
push str.bnVsbA
push dword [esi + 0x20]
mov edx, str.ico_image
mov ecx, edi
call fcn.00457bf0
push str.bnVsbA
push dword [esi + 0x24]
mov edx, str.screenshot
mov ecx, edi
call fcn.00457bf0
mov eax, dword [esi + 0x38]
push str.null
add eax, 0x31
push eax
mov edx, str.packer
mov ecx, edi
call fcn.00457bf0
mov eax, dword [esi + 0x38]
mov edx, str.compiler
add eax, 0x131
mov ecx, edi
push str.null
push eax
call fcn.00457bf0
add esp, 0x24
mov edx, str.tcp_port
mov ecx, edi
push dword [esi + 0x30]
call fcn.00457cf0
add esp, 4
mov edx, str.udp_port
mov ecx, edi
push dword [esi + 0x34]
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.pe_magic
mov ecx, edi
movzx eax, word [eax]
push eax
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.compile_time
mov ecx, edi
push dword [eax + 4]
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.characteristics
mov ecx, edi
movzx eax, word [eax + 8]
push eax
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.size_memory
mov ecx, edi
push dword [eax + 0xc]
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.size_disk
mov ecx, edi
push dword [eax + 0x10]
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.subsystem
mov ecx, edi
movzx eax, word [eax + 0x14]
push eax
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.resources.pe_count
mov ecx, edi
push dword [eax + 0x18]
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.resources.jpeg_count
mov ecx, edi
push dword [eax + 0x1c]
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
mov edx, str.resources.bmp_count
mov ecx, edi
push dword [eax + 0x20]
call fcn.00457cf0
mov eax, dword [esi + 0x38]
add esp, 4
push dword [eax + 0x24]
mov edx, str.resources.png_count
mov ecx, edi
call fcn.00457cf0
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret