Function at 0x452820
Capabilities:
Contain obfuscated stackstrings
Inspect section memory permissions

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52b5fc
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e8
mov eax, dword [0x566090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
xor edx, edx
lea ecx, [ebp - 0x190]
xor esi, esi
xor edi, edi
mov dword [ebp - 0x2d0], esi
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x2d0], edi
mov dword [ebp - 0x2cc], edx
mov byte [ebp - 0x5c], dl
mov edx, 0x547790
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x2d4], edi
mov dword [ebp - 0x60], 0x203e2d20
call fcn.00459050
push eax
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 0x5244425b
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x4c], 0x494e4945
mov dword [ebp - 0x48], 0x3a205d54
mov word [ebp - 0x44], 0x203a
mov byte [ebp - 0x42], 0
call fcn.00459130
add esp, 4
lea ecx, [ebp - 0x60]
mov edx, eax
push ecx
lea ecx, [ebp - 0x260]
call fcn.00459280
add esp, 4
mov dword [ebp - 0x60], 0x202d3c20
mov edx, 0x547790
mov byte [ebp - 0x5c], 0
lea ecx, [ebp - 0x190]
call fcn.00459050
push eax
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 0x5244425b
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x4c], 0x494e4945
mov dword [ebp - 0x48], 0x3a205d54
mov word [ebp - 0x44], 0x203a
mov byte [ebp - 0x42], 0
call fcn.00459130
add esp, 4
lea ecx, [ebp - 0x60]
mov edx, eax
push ecx
lea ecx, [ebp - 0x22c]
call fcn.00459280
add esp, 4
call fcn.00441aa0
mov esi, eax
mov dword [ebp - 0x180], edi
xorps xmm0, xmm0
mov dword [ebp - 0x184], esi
lea eax, [ebp - 0x22c]
movlpd qword [ebp - 0x190], xmm0
mov dword [ebp - 0x188], eax
mov ecx, dword [esi]
cmp dword [ecx], edi
je 0x4529ca
lea eax, [ebp - 0x2f8]
movlpd qword [ebp - 0x2f8], xmm0
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [ebp - 0x2f4]
push 0x546f10
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x260]
push eax
push str._s_s
push 0x546f10
push edi
push esi
mov dword [ebp - 0x18c], ecx
call fcn.0043d760
add esp, 0x18
mov dword [ebp - 4], 0
call fcn.00441aa0
mov edx, 0x807d
mov dword [ebp - 0x2e0], 0x803d
mov dword [ebp - 0x2e4], 0x8000
mov dword [ebp - 0x2e8], 0x28
mov eax, dword [eax]
lea esi, [edx - 0x5d]
mov dword [ebp - 0x2ec], 0x29
mov dword [ebp - 0x2f0], 0x20
mov dword [ebp - 0x60], 0x2d
cmp dword [eax], 0
je 0x452b80
mov eax, dword [ebp - 0x2e0]
lea ecx, [ebp - 0xb0]
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x2e4]
mov word [ebp - 0x22], ax
xor eax, eax
mov word [ebp - 0x24], dx
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0x807d807b
mov word [ebp - 0x2c], si
mov dword [ebp - 0x28], 0x807b8020
mov word [ebp - 0x20], ax
call fcn.00419a70
mov byte [ebp - 4], 1
lea eax, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 8
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x2d0], 1
cmovae eax, dword [ebp - 0xb0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2dc]
add eax, 4
push eax
push str.InvokeBdSubWiz
call fcn.004594a0
add esp, 8
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x58]
push eax
mov dword [ebp - 0x2d0], 3
call fcn.00444e70
mov edi, 0x300000
mov dword [ebp - 0x2d4], edi
mov eax, dword [ebp - 0x2e8]
lea edi, [ebp - 0x58]
mov dword [ebp - 4], 3
mov esi, 7
cmp dword [ebp - 0x44], 8
mov edx, str.BdchSettingsManager::DumpToLog
mov ecx, dword [ebp - 0x60]
cmovae edi, dword [ebp - 0x58]
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x3e], ax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x3c], ax
mov word [ebp - 0x38], ax
xor eax, eax
mov word [ebp - 0x3a], cx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x2d0], esi
mov word [ebp - 0x36], ax
call fcn.004194d0
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x170]
call fcn.004195d0
add esp, 4
lea ecx, [ebp - 0x40]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1f8]
call fcn.00419770
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov edi, 0x300000
mov esi, 0x8020
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x2d8]
test al, 4
je 0x452bee
mov edx, dword [ebp - 0x44]
and eax, 0xfffffffb
mov dword [ebp - 0x2d8], eax
cmp edx, 8
jb 0x452bda
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452bca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4566a6
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d8]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], cx
mov dword [ebp - 4], 1
test al, 2
je 0x452c56
mov edx, dword [ebp - 0x64]
and eax, 0xfffffffd
mov dword [ebp - 0x2d8], eax
cmp edx, 8
jb 0x452c42
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452c32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4566a6
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d8]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], cx
mov dword [ebp - 4], 0
test al, 1
je 0x452caa
mov edx, dword [ebp - 0x9c]
and eax, 0xfffffffe
mov dword [ebp - 0x2d8], eax
cmp edx, 8
jb 0x452caa
mov ecx, dword [ebp - 0xb0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452ca0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4566a6
push edx
push ecx
call fcn.004fc7e0
add esp, 8
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x452e82
mov eax, dword [ebp - 0x2e4]
mov ecx, 0x807d
mov edx, dword [ebp - 0x2e0]
mov word [ebp - 0x22], ax
xor eax, eax
mov word [ebp - 0x2a], dx
lea edx, [ebp - 0x30]
mov word [ebp - 0x24], cx
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x30], 0x807d807b
mov word [ebp - 0x2c], si
mov dword [ebp - 0x28], 0x807b8020
mov word [ebp - 0x20], ax
call fcn.00419a70
or edi, 0x400000
mov dword [ebp - 0x2d4], edi
mov eax, dword [ebp - 0x2dc]
lea edx, [ebp - 0x94]
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x3c]
or esi, 8
cmp dword [ebp - 0x80], 8
mov al, byte [eax + 2]
cmovae edx, dword [ebp - 0x94]
mov byte [ebp - 0x40], al
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x44], ecx
mov ecx, edx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x2d0], esi
mov dword [ebp - 0x50], str.KeepArchives
mov dword [ebp - 0x38], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x452d60
sub ecx, dword [ebp - 0x38]
lea edi, [ebp - 0x50]
sub esp, 0x10
sar ecx, 1
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x7c
mov dword [eax + 4], 0
mov dword [eax + 8], edi
call fcn.00426fd0
mov edi, dword [ebp - 0x2d4]
add esp, 0x18
or edi, 0x800000
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 5
or esi, 0x10
lea ecx, [ebp - 0xb0]
push eax
mov dword [ebp - 0x2d0], esi
call fcn.00444e70
or edi, 0x1000000
mov dword [ebp - 0x2d4], edi
mov eax, dword [ebp - 0x2e8]
lea edi, [ebp - 0xb0]
mov dword [ebp - 4], 6
or esi, 0x20
cmp dword [ebp - 0x9c], 8
mov edx, str.BdchSettingsManager::DumpToLog
mov ecx, dword [ebp - 0x60]
cmovae edi, dword [ebp - 0xb0]
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x3e], ax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x3c], ax
mov word [ebp - 0x38], ax
xor eax, eax
mov word [ebp - 0x3a], cx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x2d0], esi
mov word [ebp - 0x36], ax
call fcn.004194d0
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xd0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x170]
call fcn.004195d0
add esp, 4
lea ecx, [ebp - 0x40]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1f8]
call fcn.00419770
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x2d8]
test al, 0x20
je 0x452eff
mov edx, dword [ebp - 0x9c]
and eax, 0xffffffdf
mov dword [ebp - 0x2d8], eax
cmp edx, 8
jb 0x452ee2
mov ecx, dword [ebp - 0xb0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452ed2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4566ab
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d8]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], cx
mov dword [ebp - 4], 4
test al, 0x10
je 0x452f67
mov edx, dword [ebp - 0x64]
and eax, 0xffffffef
mov dword [ebp - 0x2d8], eax
cmp edx, 8
jb 0x452f53
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452f43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4566ab
push edx
push ecx
call fcn.004fc7e0
mov eax, dword [ebp - 0x2d8]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], cx
mov dword [ebp - 4], 0
test al, 8
je 0x452fb8
mov edx, dword [ebp - 0x80]
and eax, 0xfffffff7
mov dword [ebp - 0x2d8], eax
cmp edx, 8
jb 0x452fb8
mov ecx, dword [ebp - 0x94]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x452fae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4566ab
push edx
push ecx
call fcn.004fc7e0
add esp, 8
call fcn.00441aa0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x453198
mov esi, dword [ebp - 0x2e0]
lea ecx, [ebp - 0x94]
mov eax, 0x8020
mov dword [ebp - 0x30], 0x807d807b
mov word [ebp - 0x2c], ax
mov edx, 0x807d
mov eax, dword [ebp - 0x2e4]
mov word [ebp - 0x22], ax
xor eax, eax
mov word [ebp - 0x24], dx
lea edx, [ebp - 0x30]
mov word [ebp - 0x2a], si
mov dword [ebp - 0x28], 0x807b8020
mov word [ebp - 0x20], ax
call fcn.00419a70
or dword [ebp - 0x2d4], 0x2000000
mov eax, dword [ebp - 0x2dc]
lea edx, [ebp - 0x94]
mov byte [ebp - 4], 7
mov esi, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x3c]
or esi, 0x40
cmp dword [ebp - 0x80], 8
mov al, byte [eax + 1]
cmovae edx, dword [ebp - 0x94]
mov byte [ebp - 0x40], al
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x44], ecx
mov ecx, edx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x2d0], esi
mov dword [ebp - 0x50], str.KeepDumps
mov dword [ebp - 0x38], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x453070
sub ecx, dword [ebp - 0x38]
lea edi, [ebp - 0x50]
sub esp, 0x10
sar ecx, 1
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x7c
mov dword [eax + 4], 0
mov dword [eax + 8], edi
call fcn.00426fd0
mov edi, dword [ebp - 0x2d4]
add esp, 0x18
or edi, 0x4000000
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 8
or esi, 0x80
lea ecx, [ebp - 0xb0]
push eax
mov dword [ebp - 0x2d0], esi
call fcn.00444e70
or edi, 0x8000000
mov dword [ebp - 0x2d4], edi
mov eax, dword [ebp - 0x2e8]
lea edi, [ebp - 0xb0]
mov dword [ebp - 4], 9
or esi, 0x100
cmp dword [ebp - 0x9c], 8
mov edx, str.BdchSettingsManager::DumpToLog
mov ecx, dword [ebp - 0x60]
cmovae edi, dword [ebp - 0xb0]
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x2ec]
mov word [ebp - 0x3e], ax
mov eax, dword [ebp - 0x2f0]
mov word [ebp - 0x3c], ax
mov word [ebp - 0x38], ax
xor eax, eax
mov word [ebp - 0x3a], cx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x2d0], esi
mov word [ebp - 0x36], ax
call fcn.004194d0
mov edx, str._BDREINIT__::
lea ecx, [ebp - 0xd0]
mov esi, eax
call fcn.00419450
push esi
mov edx, eax
lea ecx, [ebp - 0x170]
call fcn.004195d0
add esp, 4
lea ecx, [ebp - 0x40]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1f8]
call fcn.00419770
add esp, 4
mov esi, eax
call fcn.00441aa0
push edi
push 0
push esi
push 0
push eax
call fcn.0043ebb0
add esp, 0x14
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0x2d8]
test eax, 0x100
je 0x45321a
mov edx, dword [ebp - 0x9c]
and eax, 0xfffffeff
mov dword [ebp - 0x2d8], eax
cmp edx, 8
jb 0x4531fd
mov ecx, dword [ebp - 0xb0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4531ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
invalid
invalid