Function at 0x1000b580
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x10]
push edi
push eax
push 0x40
push 5
push 0x52124e
call esi
mov byte [0x52124e], 0xe9
mov eax, 0x1000bef0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffadedad
mov dword [0x52124f], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x52124e
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x5214da
call esi
mov byte [0x5214da], 0xe9
mov eax, 0x1000bf10
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffadeb21
mov dword [0x5214db], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x5214da
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x52145f
call esi
mov byte [0x52145f], 0xe9
mov eax, 0x1000bf70
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffadeb9c
mov dword [0x521460], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x52145f
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x42fc70
call esi
mov byte [0x42fc70], 0xe9
mov eax, 0x1000c050
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffbd038b
mov dword [0x42fc71], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x42fc70
call esi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 5
push 0x42fca8
call esi
mov byte [0x42fca8], 0xe9
mov eax, 0x1000c090
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, 0xffbd0353
mov dword [0x42fca9], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 5
push 0x42fca8
call esi
mov eax, dword [0x10056068]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push 4
push eax
push 0x5215d8
call edi
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
mov eax, dword [0x10056068]
push 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push 4
push eax
push 0x52168c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x51b121
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x51b136
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x51b14a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x516c7d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x518a60
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x519b61
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x51a398
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x51b215
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x520d8d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x5210d4
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x5210dc
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x521756
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x521ef0
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x523f0b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x521572
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x5213fb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x5219ea
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521af8
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521beb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521cb1
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521e2b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521ebb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x51a2d6
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x51a2f6
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x51b2c9
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x5c
push eax
push 0x51a2dd
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 8
push eax
push 0x5212f4
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x5212f5
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 8
push eax
push 0x521301
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x521302
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 4
push eax
push 0x521359
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x52135a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 4
push eax
push 0x521372
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x521373
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x5213de
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x5213df
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0
push eax
push 0x5213eb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x5213ec
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 8
push eax
push 0x5218fe
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x5218ff
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 8
push eax
push 0x52190b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x52190c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 8
push eax
push 0x51bf36
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x12
push eax
push 0x51bf37
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x51b121
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x51b136
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x10
push eax
push 0x51b14a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x516c7d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x518a60
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x519b61
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x51a398
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x51b215
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x520d8d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x5210d4
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x5210dc
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x521756
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x521ef0
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x523f0b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x11
push eax
push 0x521572
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x5213fb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x5219ea
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521af8
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521beb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521cb1
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521e2b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x83
push eax
push 0x521ebb
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x51a2d6
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x51a2f6
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x54
push eax
push 0x51b2c9
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x5c
push eax
push 0x51a2dd
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x50
push eax
push 0x52119d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x20
push eax
push 0x521502
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x17
push eax
push 0x5214f0
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x44
push eax
push 0x521210
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1d
push eax
push 0x5214cf
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x40
push eax
push 0x52121c
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1c
push eax
push 0x5214c0
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x3c
push eax
push 0x5211dc
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x21
push eax
push 0x5214ae
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x38
push eax
push 0x5211e2
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1b
push eax
push 0x52149f
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x34
push eax
push 0x521241
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x22
push eax
push 0x52148d
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x30
push eax
push 0x521216
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1a
push eax
push 0x52147b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x2c
push eax
push 0x52123b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x28
push eax
push 0x5211d3
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1f
push eax
push 0x521454
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x24
push eax
push 0x52120a
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x1e
push eax
push 0x52143f
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x20
push eax
push 0x52125b
call edi
push eax
call esi
push 0
push 1
lea eax, [ebp - 4]
mov byte [ebp - 4], 0x2b
push eax
push 0x52142d
call edi
push eax
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret