Function at 0x10025580
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x10]
push edi
push eax
push 0x40
push 5
push 0x4e0b7e
call esi
mov byte [0x4e0b7e], 0xe9
mov eax, 0x10025bf0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffb1f47d
mov dword [0x4e0b7f], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x4e0b7e
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x4e0e13
call esi
mov byte [0x4e0e13], 0xe9
mov eax, 0x10025c10
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffb1f1e8
mov dword [0x4e0e14], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x4e0e13
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x4e0d98
call esi
mov byte [0x4e0d98], 0xe9
mov eax, 0x10025c70
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffb1f263
mov dword [0x4e0d99], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x4e0d98
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x5c67a0
call esi
mov byte [0x5c67a0], 0xe9
mov eax, 0x10025d50
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffa3985b
mov dword [0x5c67a1], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x5c67a0
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x5c67d8
call esi
mov byte [0x5c67d8], 0xe9
mov eax, 0x10025d90
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffa39823
mov dword [0x5c67d9], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x5c67d8
call esi
mov eax, dword [0x10058c1c]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push 4
push eax
push 0x4e0f14
call edi
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
mov eax, dword [0x10058c1c]
push 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push 4
push eax
push 0x4e0fc8
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x4db3eb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x4db400
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x4db414
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4d735e
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4d9048
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4d9eea
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4da6c8
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4db4df
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4e06bd
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4e0a03
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4e0a0b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4e109a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4e17c7
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4e359b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x4e0eae
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x7d
push eax
push 0x4e0d34
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x7d
push eax
push 0x4e1312
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x7d
push eax
push 0x4e141a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x7d
push eax
push 0x4e14fe
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x7d
push eax
push 0x4e15a3
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x7d
push eax
push 0x4e1705
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x7d
push eax
push 0x4e178f
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x4da606
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x4da626
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x4db593
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x5c
push eax
push 0x4da60d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf0
push eax
push 0x4e0c27
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf0
push eax
push 0x4e0c34
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xec
push eax
push 0x4e0c8c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xec
push eax
push 0x4e0ca8
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xe8
push eax
push 0x4e0d17
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xe8
push eax
push 0x4e0d24
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf0
push eax
push 0x4e1232
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf0
push eax
push 0x4e1245
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf0
push eax
push 0x4dc086
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x50
push eax
push 0x4e0acd
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x20
push eax
push 0x4e0e3b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x17
push eax
push 0x4e0e29
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x44
push eax
push 0x4e0b40
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1d
push eax
push 0x4e0e08
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x40
push eax
push 0x4e0b4c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1c
push eax
push 0x4e0df9
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x3c
push eax
push 0x4e0b0c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x21
push eax
push 0x4e0de7
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x38
push eax
push 0x4e0b12
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1b
push eax
push 0x4e0dd8
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x34
push eax
push 0x4e0b71
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x22
push eax
push 0x4e0dc6
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x30
push eax
push 0x4e0b46
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1a
push eax
push 0x4e0db4
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x2c
push eax
push 0x4e0b6b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x28
push eax
push 0x4e0b03
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1f
push eax
push 0x4e0d8d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x24
push eax
push 0x4e0b3a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1e
push eax
push 0x4e0d78
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x20
push eax
push 0x4e0b8b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x2b
push eax
push 0x4e0d66
call edi
push eax
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret