Function at 0x452bd0
Capabilities:
Access peb ldr_data
Get process heap force flags
Hash data using fnv
Hash data with md5
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fba18
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x188
mov eax, dword [0x672494]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0x108], edi
xor eax, eax
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 7
mov word [edi + 8], ax
mov dword [ebp - 4], eax
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], 7
mov word [edi + 0x20], ax
mov dword [edi + 0x38], eax
mov dword [edi + 0x50c], eax
mov dword [edi + 0x510], eax
mov dword [edi + 0x528], eax
mov dword [edi + 0x52c], 7
mov word [edi + 0x518], ax
mov dword [edi + 0x540], eax
mov dword [edi + 0x544], 7
mov word [edi + 0x530], ax
mov dword [edi + 0x558], eax
mov dword [edi + 0x55c], 7
mov word [edi + 0x548], ax
mov dword [edi + 0x570], eax
mov dword [edi + 0x574], 7
mov word [edi + 0x560], ax
mov dword [edi + 0x588], eax
mov dword [edi + 0x58c], 7
mov word [edi + 0x578], ax
mov dword [edi + 0x590], eax
mov dword [edi + 0x594], eax
mov dword [edi + 0x598], 1
mov dword [edi + 0x5b4], eax
mov dword [edi + 0x5b8], 0xf
mov byte [edi + 0x5a4], al
mov dword [edi + 0x5cc], eax
mov dword [edi + 0x5d0], 7
mov word [edi + 0x5bc], ax
mov dword [edi + 0x5d4], 0xffffffff
mov dword [edi + 0x5d8], eax
mov dword [edi + 0x5dc], 1
mov dword [edi + 0x5e0], eax
mov dword [edi + 0x5e4], eax
mov dword [edi + 0x5e8], eax
mov dword [edi + 0x5ec], eax
mov dword [edi + 0x5f0], eax
mov dword [edi + 0x5f4], eax
xor ecx, ecx
mov dword [edi + 0x608], eax
mov dword [edi + 0x60c], 7
mov word [edi + 0x5f8], cx
mov dword [edi + 0x620], ecx
mov dword [edi + 0x624], 7
mov word [edi + 0x610], ax
mov dword [edi + 0x638], ecx
mov dword [edi + 0x63c], 7
mov word [edi + 0x628], ax
mov dword [edi + 0x640], ecx
mov dword [edi + 0x644], ecx
mov dword [edi + 0x648], ecx
mov dword [edi + 0x65c], ecx
mov dword [edi + 0x660], 7
mov word [edi + 0x64c], ax
mov dword [edi + 0x664], ecx
mov dword [edi + 0x668], ecx
mov dword [edi + 0x66c], ecx
mov dword [edi + 0x670], ecx
mov dword [edi + 0x674], ecx
mov dword [edi + 0x678], ecx
mov byte [ebp - 4], 0x10
lea esi, [edi + 0xa3c]
mov dword [edi + 0x680], ecx
mov dword [ebp - 0xd8], esi
push ecx
mov dword [esi + 0x10], ecx
mov ecx, esi
mov dword [esi + 0x14], 7
push 0x647520
mov word [esi], ax
call fcn.00417d60
xor eax, eax
mov byte [ebp - 4], 0x11
lea ecx, [esi + 0x18]
mov dword [ecx + 0x10], 0
push eax
mov dword [ecx + 0x14], 7
push 0x647520
mov word [ecx], ax
call fcn.00417d60
xor eax, eax
mov byte [ebp - 4], 0x12
lea ecx, [esi + 0x30]
mov dword [ecx + 0x10], 0
push eax
mov dword [ecx + 0x14], 7
push 0x647520
mov word [ecx], ax
call fcn.00417d60
lea esi, [edi + 0xa84]
mov byte [ebp - 4], 0x13
xor eax, eax
mov dword [ebp - 0xd8], esi
push eax
mov dword [esi + 0x10], 0
mov ecx, esi
mov dword [esi + 0x14], 7
push 0x647520
mov word [esi], ax
call fcn.00417d60
xor eax, eax
mov byte [ebp - 4], 0x14
lea ecx, [esi + 0x18]
mov dword [ecx + 0x10], 0
push eax
mov dword [ecx + 0x14], 7
push 0x647520
mov word [ecx], ax
call fcn.00417d60
lea esi, [edi + 0xab4]
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0xd8], esi
push eax
mov dword [esi + 0x10], 0
mov ecx, esi
mov dword [esi + 0x14], 7
push 0x647520
mov word [esi], ax
call fcn.00417d60
mov byte [ebp - 4], 0x16
lea ecx, [esi + 0x1c]
xor eax, eax
mov dword [esi + 0x18], 0
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x647520
mov word [ecx], ax
call fcn.00417d60
xor eax, eax
mov byte [ebp - 4], 0x17
lea ecx, [esi + 0x34]
mov dword [ecx + 0x10], 0
push eax
mov dword [ecx + 0x14], 7
push 0x647520
mov word [ecx], ax
call fcn.00417d60
mov dword [edi + 0xb00], 0
mov dword [edi + 0xb04], 0
mov dword [edi + 0xb08], 0
mov dword [edi + 0xb0c], 0
sub esp, 8
mov byte [ebp - 4], 0x1a
lea ecx, [edi + 0xb38]
call fcn.004136d0
mov dword [edi + 0xbec], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1c
call fcn.0041b6d0
movups xmm0, xmmword [ebp - 0x2c]
mov byte [ebp - 0x2c], 0
movups xmmword [ebp - 0x104], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [ebp - 0xf4], xmm0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x1d
call fcn.0041bd60
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x1e
call fcn.0041c170
mov esi, eax
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x1f
call fcn.0041c430
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x104]
cmp dword [ebp - 0xf0], 0x10
mov ecx, dword [ebp - 0xd8]
cmovae edx, dword [ebp - 0x104]
cmp dword [ecx + 0x14], 0x10
jb 0x453025
mov ecx, dword [ecx]
cmp dword [esi + 0x14], 0x10
jb 0x45302d
mov esi, dword [esi]
cmp dword [eax + 0x14], 0x10
jb 0x453035
mov eax, dword [eax]
push edx
push ecx
push esi
push eax
lea eax, [ebp - 0x5c]
push str._s_s_s_s
push eax
call fcn.0041a500
add esp, 0x18
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x10c]
cmp edx, 0x10
jb 0x453088
mov ecx, dword [ebp - 0x120]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45307e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45373e
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x124]
cmp edx, 0x10
jb 0x4530e1
mov ecx, dword [ebp - 0x138]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4530d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x453743
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x13c]
cmp edx, 0x10
jb 0x45313a
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453130
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x453748
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0xf0]
cmp edx, 0x10
jb 0x453193
mov ecx, dword [ebp - 0x104]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453189
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45374d
push edx
push ecx
call fcn.004d0c91
add esp, 8
lea ecx, [ebp - 0x180]
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
call fcn.0049cfa0
mov esi, eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x26
call fcn.0049d2a0
push esi
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x44]
call fcn.0048ece0
add esp, 4
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x154]
cmp edx, 0x10
jb 0x45321a
mov ecx, dword [ebp - 0x168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453210
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x453752
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x16c]
cmp edx, 0x10
jb 0x453273
mov ecx, dword [ebp - 0x180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453269
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x453757
push edx
push ecx
call fcn.004d0c91
add esp, 8
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
push dword [ebp - 0x34]
cmovae eax, dword [ebp - 0x44]
lea ecx, [ebp - 0xd0]
push eax
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
mov byte [ebp - 0x68], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xd0], 0x67452301
mov dword [ebp - 0xcc], 0xefcdab89
mov dword [ebp - 0xc8], 0x98badcfe
mov dword [ebp - 0xc4], 0x10325476
call fcn.0040ff20
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00410830
mov esi, eax
lea ecx, [edi + 0x5f8]
cmp ecx, esi
je 0x453335
call fcn.0040f8c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [edi + 0x5f8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x608], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x198]
call fcn.0040f8c0
push 0x2c8
lea eax, [edi + 0x3c]
push 0
push eax
call fcn.0056c1d0
add esp, 0xc
lea eax, [edi + 0x304]
mov dword [ebp - 0xd8], eax
push 0x208
push 0
push eax
call fcn.0056c1d0
mov eax, dword fs:[0x30]
add esp, 0xc
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx edx, word [eax + 0x2c]
mov ecx, 0x811c9dc5
mov esi, dword [eax + 0x30]
and edx, 0xfffffffe
mov dword [ebp - 0xd4], ecx
xor edi, edi
mov dword [ebp - 0xdc], eax
lea ecx, [edx + esi]
inc edx
shr edx, 1
cmp esi, ecx
cmova edx, edi
mov dword [ebp - 0xe4], edx
test edx, edx
je 0x4533ef
mov eax, dword [ebp - 0xd4]
mov dl, byte [esi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x4533c3
or ecx, 0x20
xor ecx, eax
inc edi
imul eax, ecx, 0x1000193
add esi, 2
cmp edi, dword [ebp - 0xe4]
jne 0x4533b3
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xa3e6f6c3
mov eax, dword [ebp - 0xdc]
je 0x4533f3
mov eax, dword [eax]
jmp 0x45337b
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f7b8]
mov dword [ebp - 0xe4], esi
test eax, eax
jne 0x4534d7
test esi, esi
je 0x4534d0
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0xdc], eax
xor eax, eax
mov dword [ebp - 0xdc], ecx
cmp ecx, esi
je 0x4534d2
mov dword [ebp - 0xd4], eax
cmp dword [ecx + 0x18], eax
je 0x4534d0
mov edi, dword [ecx + 0x20]
add edi, esi
nop dword [eax + eax]
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x45348a
lea eax, [ecx - 0x41]
cmp al, 0x19
movsx eax, cl
ja 0x45346d
or eax, 0x20
mov cl, byte [edx]
xor eax, esi
imul esi, eax, 0x1000193
inc edx
test cl, cl
jne 0x453460
cmp esi, 0xeb3e491b
je 0x4534a7
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xdc]
inc eax
add edi, 4
mov dword [ebp - 0xd4], eax
cmp eax, dword [ecx + 0x18]
je 0x4534d0
mov esi, dword [ebp - 0xe4]
jmp 0x453450
mov esi, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xe4]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x4534d2
xor eax, eax
mov dword [0x67f7b8], eax
push 0x104
push dword [ebp - 0xd8]
push 0
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx edx, word [eax + 0x2c]
mov ecx, 0x811c9dc5
mov esi, dword [eax + 0x30]
and edx, 0xfffffffe
mov dword [ebp - 0xd4], ecx
xor edi, edi
mov dword [ebp - 0xe4], eax
lea ecx, [edx + esi]
inc edx
shr edx, 1
cmp esi, ecx
cmova edx, edi
mov dword [ebp - 0xdc], edx
test edx, edx
je 0x45356c
mov eax, dword [ebp - 0xd4]
nop word [eax + eax]
mov dl, byte [esi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x453540
or ecx, 0x20
xor ecx, eax
inc edi
imul eax, ecx, 0x1000193
add esi, 2
cmp edi, dword [ebp - 0xdc]
jne 0x453530
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x8ec4c73b
mov eax, dword [ebp - 0xe4]
je 0x453570
mov eax, dword [eax]
jmp 0x4534f2
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f7bc]
mov dword [ebp - 0xdc], esi
test eax, eax
jne 0x45364c
test esi, esi
je 0x453645
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0xe4], eax
xor eax, eax
mov dword [ebp - 0xe4], ecx
cmp ecx, esi
je 0x453647
mov dword [ebp - 0xd4], eax
cmp dword [ecx + 0x18], eax
je 0x453645
mov edi, dword [ecx + 0x20]
add edi, esi
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4535ff
lea eax, [ecx - 0x41]
cmp al, 0x19
movsx eax, cl
ja 0x4535e2
or eax, 0x20
mov cl, byte [edx]
xor eax, esi
imul esi, eax, 0x1000193
inc edx
test cl, cl
jne 0x4535d5
cmp esi, 0xf1cc2f70
je 0x45361c
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xe4]
inc eax
add edi, 4
mov dword [ebp - 0xd4], eax
cmp eax, dword [ecx + 0x18]
je 0x453645
mov esi, dword [ebp - 0xdc]
jmp 0x4535c5
mov esi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xdc]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x453647
xor eax, eax
mov dword [0x67f7bc], eax
push dword [ebp - 0xd8]
call eax
mov esi, dword [ebp - 0xec]
mov edx, dword [ebp - 0x30]
mov dword [esi + 0xb10], 0
mov dword [esi + 0xb14], 0
mov dword [esi + 0xb18], 0
mov dword [esi + 0xb1c], 0
mov dword [esi + 0xb34], 0
mov dword [esi + 0xb20], 0
mov dword [esi + 0xb2c], 0
mov dword [esi + 0xb28], 0
mov dword [esi + 0x67c], 0
mov dword [esi + 0xbe8], 0
cmp edx, 0x10
jb 0x4536ee
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4536e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45375c
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x45371e
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x453714
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x453761
push edx
push ecx
call fcn.004d0c91
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d0a85
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0056efe9
call fcn.0056efe9
call fcn.0056efe9
call fcn.0056efe9
call fcn.0056efe9
call fcn.0056efe9
call fcn.0056efe9
call fcn.0056efe9
int3