Function at 0x45c510
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xffffffe0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4df280
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x208
mov eax, dword [0x508040]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1b0], 0xb2769225
mov dword [ebp - 0x1ac], 0xdbafb7f8
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x1b0], 0x2f3fad3f
mov dword [ebp - 0x1ac], 0xd36d7eb5
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x1b0], 0x73676969
mov dword [ebp - 0x1ac], 0xb37c030b
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x1b0], 0xd9496d2
mov dword [ebp - 0x1ac], 0x2836384f
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x1b0], 0xd725e66b
mov dword [ebp - 0x1ac], 0xbdc1fe8c
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x1b0], 0x4e52df50
mov dword [ebp - 0x1ac], 0xbd0217c1
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1b0], 0x1615013d
mov dword [ebp - 0x1ac], 0xb37c676a
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1b0], 0xd9496d2
mov dword [ebp - 0x1ac], 0x2836384f
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
vmovdqu ymm0, ymmword [ebp - 0x200]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
vpxor ymm0, ymm0, ymmword [ebp - 0x60]
vmovdqa ymmword [ebp - 0x200], ymm0
mov dword [ebp - 0x1b0], 0xbb419205
mov dword [ebp - 0x1ac], 0xd1a5d0e0
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x1b0], 0x4e52df3c
mov dword [ebp - 0x1ac], 0xbd0217c1
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x1b0], 0xd725e66b
mov dword [ebp - 0x1ac], 0xbdc1fe8c
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1b0], 0x4e52df50
mov dword [ebp - 0x1ac], 0xbd0217c1
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
vmovaps xmm1, xmmword [ebp - 0x1d0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x44], ecx
vxorps xmm1, xmm1, xmmword [ebp - 0x50]
vmovaps xmmword [ebp - 0x1d0], xmm1
push eax
vzeroupper
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call edi
lea ecx, [ebp - 0x200]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push 0x11
push 0xfffffffffffffffe
call eax
test eax, eax
je 0x45c7e0
push 0x40
push 0x3000
push 0x1000
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x1b4], eax
mov edx, dword fs:[0xc0]
movups xmm0, xmmword ds:[edx]
mov eax, dword [ebp - 0x1b4]
mov dword ss:[ebp - 8], eax
movups xmmword ds:[eax], xmm0
push 0
push 0
push 0x11
push 0xfffffffffffffffe
call 0x45c7d5
mov eax, 0xd
call dword [ebp - 0x1b4]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx + 0x18]
add eax, 0x100000
mov dword [ecx + 0x20], eax
call fcn.0043ce10
test al, al
jne 0x45cee2
call fcn.00440290
test al, al
jne 0x45cee2
call fcn.00442400
test al, al
jne 0x45cee2
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
mov dword [ebp - 0x1ac], esi
cmp esi, 0xffffffff
je 0x45c957
push 0x104
lea eax, [ebp - 0x184]
mov dword [ebp - 0x1a8], 0x128
push 0
push eax
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0
call fcn.004b25e0
add esp, 0xc
lea eax, [ebp - 0x1a8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x45c957
nop
mov esi, dword [0x57ecd8]
mov dword [ebp - 0x1b4], 0
cmp esi, dword [0x57ecdc]
je 0x45c936
lea edi, [ebp - 0x184]
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x45c8e1
sub edi, ecx
nop word [eax + eax]
cmp dword [esi + 0x14], 0xf
mov ecx, esi
jbe 0x45c8fa
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
lea eax, [ebp - 0x184]
push edi
push eax
call fcn.0043c250
mov edx, dword [ebp - 0x1b4]
add esp, 8
test al, al
lea ecx, [edx + 1]
cmove ecx, edx
add esi, 0x18
mov edx, ecx
mov dword [ebp - 0x1b4], edx
cmp esi, dword [0x57ecdc]
jne 0x45c8f0
test edx, edx
jg 0x45cee2
lea eax, [ebp - 0x1a8]
push eax
push dword [ebp - 0x1ac]
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x45c8c0
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call fcn.0043b7e0
test al, al
jne 0x45cee2
lea eax, [ebp - 0x58]
push eax
call fcn.0045cf90
mov esi, eax
cmp esi, 0x57ed74
je 0x45c9f3
mov ecx, dword [0x57ed88]
cmp ecx, 0xf
jbe 0x45c9b0
mov eax, dword [0x57ed74]
inc ecx
cmp ecx, 0x1000
jb 0x45c9a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45cf18
mov eax, edx
push ecx
push eax
call fcn.004af3d3
add esp, 8
mov dword [0x57ed84], 0
mov dword [0x57ed88], 0xf
mov byte [0x57ed74], 0
movups xmm0, xmmword [esi]
movups xmmword [0x57ed74], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x57ed84], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x45ca27
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45ca1d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45cf18
push ecx
push edx
call fcn.004af3d3
add esp, 8
push 0
mov dword [0x57ef54], 0x30
mov dword [0x57ef58], 0x20000
mov dword [0x57ef5c], 0x4583c0
mov dword [0x57ef60], 0
mov dword [0x57ef64], 0
call edi
push 0x65
push eax
mov dword [0x57ef68], eax
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x57ef54
mov dword [0x57ef6c], eax
mov dword [0x57ef78], 0
mov dword [0x57ef7c], 0x4fb76c
mov dword [0x57ef80], eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
cvttss2si eax, dword [0x57edac]
push 0
push dword [0x57ef68]
push 0
push 0
push eax
cvttss2si eax, dword [0x57eda8]
push eax
push 0x64
push 0x64
push closesocket
push str.Memedora.club
push str.menu_class
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x57ef8c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x57ef8c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x57ef88], ecx
test ecx, ecx
je 0x45cb8d
push 0x57ef50
push 0x57ef90
push 0x40
push dword [0x57ef8c]
xorps xmm0, xmm0
mov dword [0x57efa4], 0
push 1
movlpd qword [0x57ef90], xmm0
movlpd qword [0x57ef9c], xmm0
mov dword [0x57efac], 0
movlpd qword [0x57efbc], xmm0
mov dword [0x57efb0], 1
mov dword [0x57efa8], 1
mov dword [0x57ef98], 0
mov dword [0x57efb4], 1
mov dword [0x57efb8], 0x50
mov dword [0x57efc4], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.004586b0
cmp byte [0x57ed8c], 0
jne 0x45cd3c
mov esi, dword [sym.imp.USER32.dll_PeekMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
nop dword [eax + eax]
push dword [0x57ef8c]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x45cbd4
push dword [0x57ef8c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x45cd3c
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x7c]
mov dword [ebp - 4], 1
push eax
call esi
test eax, eax
je 0x45cc12
nop dword [eax]
lea eax, [ebp - 0x7c]
push eax
call edi
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x7c]
push eax
call esi
test eax, eax
jne 0x45cbf0
mov eax, dword [0x57ecb0]
test eax, eax
je 0x45cc20
mov ecx, dword [eax + 0x70]
jmp 0x45cc22
xor ecx, ecx
cmp dword [ecx + 0xc], 0
jne 0x45cc41
test eax, eax
je 0x45cc31
mov eax, dword [eax + 0x70]
jmp 0x45cc33
xor eax, eax
test eax, eax
je 0x45cc41
cmp dword [eax], 0
je 0x45cc41
call fcn.0042e5a0
call fcn.0042eef0
call fcn.0040be20
call fcn.0045b050
mov dword [ebp - 4], 2
call fcn.0040e710
mov ecx, dword [0x57ef50]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x57ef50]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x57ef50]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x57ef50]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x57ef50]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x45ccfd
call fcn.0040ea60
mov eax, dword [0x57ecb0]
xor ecx, ecx
mov eax, dword [eax + 0x4010]
mov eax, dword [eax]
add eax, 0x38
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042e070
mov eax, dword [0x57ef50]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x57ef50]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x45cd2f
mov eax, dword [0x57ef50]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x45cd2f
call fcn.004585e0
cmp byte [0x57ed8c], 0
je 0x45cbb0
mov dword [ebp - 4], 3
mov ecx, dword [0x57ecb0]
test ecx, ecx
je 0x45cd52
mov edi, dword [ecx + 0x70]
jmp 0x45cd54
xor edi, edi
lea eax, [ecx + 8]
mov dword [ebp - 0x1ac], eax
test ecx, ecx
je 0x45cd66
mov esi, dword [ecx + 0x70]
jmp 0x45cd68
xor esi, esi
test esi, esi
je 0x45cdc9
cmp dword [esi], 0
je 0x45cdc9
mov edx, dword [esi + 4]
test edx, edx
je 0x45cd8b
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x57ecb0]
mov dword [esi + 4], 0
mov edx, dword [esi + 8]
test edx, edx
je 0x45cda5
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x57ecb0]
mov dword [esi + 8], 0
mov edx, dword [esi + 0xc]
test edx, edx
je 0x45cdc9
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x57ecb0]
mov dword [esi + 0xc], 0
mov eax, dword [ecx + 0x40]
mov dword [eax + 4], 0
mov edx, dword [edi]
test edx, edx
je 0x45cddb
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x57ecb0]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + 0x60], 0
mov dword [eax + 0x68], 0
test ecx, ecx
je 0x45cdf9
dec dword [ecx + 0xa8]
push edi
call fcn.004ba650
mov eax, dword [0x57ecb0]
add esp, 4
test eax, eax
je 0x45ce10
mov esi, dword [eax + 0x6c]
jmp 0x45ce12
xor esi, esi
mov ecx, dword [esi + 0x28]
lea edi, [eax + 8]
test ecx, ecx
je 0x45ce28
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x57ecb0]
mov dword [edi + 0x5c], 0
mov dword [edi + 0x64], 0
test eax, eax
je 0x45ce40
dec dword [eax + 0xa8]
push esi
call fcn.004ba650
mov esi, dword [0x57ecb0]
add esp, 4
mov dword [0x57ecb0], esi
call fcn.0040d480
mov dword [0x57ecb0], 0
test esi, esi
je 0x45ce87
mov ecx, esi
call fcn.0041c560
mov eax, dword [0x57ecb0]
test eax, eax
je 0x45ce7e
dec dword [eax + 0xa8]
push esi
call fcn.004ba650
add esp, 4
mov dword [ebp - 4], 4
mov ecx, dword [0x57ef50]
test ecx, ecx
je 0x45cea8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x57ef50], 0
mov ecx, dword [0x57ef88]
test ecx, ecx
je 0x45cec2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x57ef88], 0
push dword [0x57ef8c]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x57ef68]
push dword [0x57ef7c]
call dword [sym.imp.USER32.dll_UnregisterClassA]
jmp 0x45cef6
push 0
push str.nigeris_1
push str.Nigeris_1
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.004af2b0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.004bf6cd
int3