Function at 0x10035ff0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 8]
push esi
push edi
push eax
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xe9
push eax
push 0x567be5
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov eax, 0x10034130
sub eax, 0x567bea
mov dword [ebp - 0x10], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push 0x567be6
call ebx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x567bea
call esi
mov eax, 0x567bea
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x567bea
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x567bf4
call ebx
push eax
call edi
mov eax, 0x10034060
sub eax, 0x567bf9
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x567bf5
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x546c01
call ebx
push eax
call edi
mov eax, 0x10035e60
sub eax, 0x546c06
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x546c02
call ebx
push eax
call edi
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x10095140], eax
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xe9
push eax
push 0x51e8a9
call ebx
push eax
call edi
mov eax, 0x10035fd0
sub eax, 0x51e8ae
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x51e8aa
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x7e945b
call ebx
push eax
call edi
mov eax, 0x10031980
sub eax, 0x7e9460
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x7e945c
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x7e9460
call esi
mov eax, 0x7e9460
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x7e9460
call esi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x7eb5b6
call esi
mov eax, 0x7eb5b6
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x7eb5b6
call esi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x7eb599
call esi
mov eax, 0x7eb599
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x7eb599
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x7eb5b8
call ebx
push eax
call edi
mov eax, 0x10034290
sub eax, 0x7eb5bd
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x7eb5b9
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x7eb5bd
call esi
mov eax, 0x7eb5bd
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x7eb5bd
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xeb
push eax
push 0x522bcf
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xeb
push eax
push 0x522c59
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xeb
push eax
push 0x522cab
call ebx
push eax
call edi
mov byte [ebp - 4], 0xeb
push 0
push 1
lea eax, [ebp - 4]
push eax
push 0x522f39
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x43
push eax
push 0x522f3a
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x522f3b
call esi
mov eax, 0x522f3b
mov dword [eax], 0x90909090
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 4
push 0x522f3b
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x546755
call ebx
push eax
call edi
mov eax, 0x10035f10
sub eax, 0x54675a
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x546756
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x522c51
call ebx
push eax
call edi
mov eax, 0x10034fc0
sub eax, 0x522c56
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x522c52
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x522c56
call esi
mov eax, 0x522c56
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x522c56
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x45af93
call ebx
push eax
call edi
mov eax, 0x10034230
sub eax, 0x45af98
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x45af94
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x5231a6
call ebx
push eax
call edi
mov eax, 0x10034ff0
sub eax, 0x5231ab
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x5231a7
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x5231ab
call esi
mov eax, 0x5231ab
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x5231ab
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x5231bc
call ebx
push eax
call edi
mov eax, 0x10035030
sub eax, 0x5231c1
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x5231bd
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x522fb4
call ebx
push eax
call edi
mov eax, 0x100341d0
sub eax, 0x522fb9
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x522fb5
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x51e5ee
call ebx
push eax
call edi
mov eax, 0x10035e10
sub eax, 0x51e5f3
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x51e5ef
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x45235b
call ebx
push eax
call edi
mov eax, 0x100341f0
sub eax, 0x452360
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x45235c
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 2
push 0x452360
call esi
mov eax, 0x452360
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 2
push 0x452360
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x522cf8
call ebx
push eax
call edi
mov eax, 0x10034210
sub eax, 0x522cfd
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x522cf9
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x522cfd
call esi
mov eax, 0x522cfd
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x522cfd
call esi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x544baf
call ebx
push eax
call edi
mov eax, 0x10035e30
sub eax, 0x544bb4
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x544bb0
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x523072
call ebx
push eax
call edi
mov eax, 0x10035010
sub eax, 0x523077
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x523073
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x546d71
call ebx
push eax
call edi
mov eax, 0x10035f30
sub eax, 0x546d76
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x546d72
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x546d76
call esi
mov eax, 0x546d76
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x546d76
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xeb
push eax
push 0x522a76
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x3e
push eax
push 0x51714a
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x42
push eax
push 0x51714b
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf
push eax
push 0x51714c
call ebx
push eax
call edi
push 0
mov byte [ebp - 4], 0x3d
push 1
lea eax, [ebp - 4]
push eax
push 0x517063
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x42
push eax
push 0x517064
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf
push eax
push 0x517065
call ebx
push eax
call edi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x7c1c9c
call esi
mov byte [0x7c1c9c], 0xe9
mov eax, 0x10034160
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0xff83e35f
mov dword [0x7c1c9d], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x7c1c9c
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push 0x7c1c0a
call esi
mov byte [0x7c1c0a], 0xe9
mov eax, 0x10035d90
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0xff83e3f1
mov dword [0x7c1c0b], eax
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
push 5
push 0x7c1c0a
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xda
push eax
push 0x7c0e73
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x2a
push eax
push 0x7c0e7d
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x2a
push eax
push 0x7c126e
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xbb
push eax
push 0x7c1264
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x4528dc
call ebx
push eax
call edi
mov eax, 0x10035c20
sub eax, 0x4528e1
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x4528dd
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x555440
call ebx
push eax
call edi
mov eax, 0x10035b30
sub eax, 0x555445
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x555441
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x555445
call esi
mov eax, 0x555445
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x555445
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 1
push eax
push 0x52237d
call ebx
push eax
call edi
mov byte [ebp - 4], 0xe9
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x522368
call ebx
push eax
call edi
mov eax, 0x10035a00
sub eax, 0x52236d
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x522369
call ebx
push eax
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 1
push 0x52236d
call esi
mov eax, 0x52236d
mov byte [eax], 0x90
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
push 1
push 0x52236d
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x66
push eax
push 0x522390
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 2
push eax
push 0x52238e
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 9
push eax
push 0x4529d5
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1f
push eax
push 0x4529de
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 1
push eax
push 0x4529df
call ebx
push eax
call edi
mov byte [ebp - 4], 0xa8
push 0
push 1
lea eax, [ebp - 4]
push eax
push 0x452881
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xff
push eax
push 0x4528a9
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x56
push eax
push 0x4528d2
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xa
push eax
push 0x452847
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xe9
push eax
push 1
lea eax, [ebp - 4]
push eax
push 0x452852
call ebx
push eax
call edi
mov eax, 0x10035b10
sub eax, 0x452857
mov dword [ebp - 8], eax
lea eax, [ebp - 0x10]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x452853
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x30
push eax
push 0x7c0e8c
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf0
push eax
push 0x7c0e8e
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x30
push eax
push 0x7c127d
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0xf0
push eax
push 0x7c127f
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c1090
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c10aa
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c10c4
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c10de
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c10f8
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c148b
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c14a5
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c14bf
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c14d9
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x32
push eax
push 0x7c14f3
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c1094
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c10ae
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c10c8
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c10e2
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c10fc
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c148f
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c14a9
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c14c3
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c14dd
call ebx
push eax
call edi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x7c14f7
call ebx
push eax
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret