Function at 0x100259d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 0x10025980
push 0x812120
mov bl, 0xe9
call fcn.100b6700
push 0x10025360
push 0x89580c
mov bl, 0xe8
call fcn.100b6700
push 0x10025360
push 0x89787c
call fcn.100b6700
push 0x10025360
push 0x897a6c
call fcn.100b6700
push 0x10025360
push 0x897c7c
call fcn.100b6700
push 0x10025700
push 0x4d98db
call fcn.100b6700
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x30
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x4d9749
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x4d9749], 0x1e0
mov edx, dword [ebp - 4]
push edx
push 4
push 0x4d9749
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x894b55
call esi
mov edi, 0x1039d76c
lea ecx, [ebp - 4]
push ecx
mov dword [0x894b55], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x894b55
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x894b61
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x894b61], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x894b61
call esi
push 0x10025310
push 0x895600
mov bl, 0xe9
call fcn.100b6700
push 0x100253c0
push 0x895a73
mov bl, 0xe8
call fcn.100b6700
push 0x100254c0
push 0x895ae8
call fcn.100b6700
push 0x10025580
push 0x895b5d
call fcn.100b6700
push 0x10025640
push 0x895bd2
call fcn.100b6700
push 0x100251d0
push 0x80ff28
call fcn.100b6700
push 0x10025220
push 0x8100bb
call fcn.100b6700
push 0x10025270
push 0x810389
call fcn.100b6700
add esp, 0x40
push 0x100252c0
push 0x810659
call fcn.100b6700
push 0x100250c0
push 0x810f45
call fcn.100b6700
push 0x100250c0
push 0x8117ee
call fcn.100b6700
push 0x10025040
push 0x810f97
call fcn.100b6700
push 0x10025040
push 0x811840
call fcn.100b6700
push 0x10025080
push 0x814e63
call fcn.100b6700
push 0x10024ff0
push 0x8129a3
call fcn.100b6700
push 0x10024ff0
push 0x8129fc
call fcn.100b6700
add esp, 0x40
push 0x10024ff0
push 0x812a55
call fcn.100b6700
push 0x10024ff0
push 0x812b16
call fcn.100b6700
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812a8a
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812a8a], 0x1039d770
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812a8a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81295b
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x81295b], 0x1039d774
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81295b
call esi
push 0x10023b30
push 0x80f0ef
call fcn.100b6700
push 0x10023e40
push 0x80f9a3
call fcn.100b6700
push 0x10024670
push 0x80fe56
call fcn.100b6700
push 0x10024670
push 0x80feef
call fcn.100b6700
push 0x10024670
push 0x810083
call fcn.100b6700
push 0x10024670
push 0x810354
call fcn.100b6700
push 0x10024670
push 0x810624
call fcn.100b6700
push 0x10024670
push 0x8112a6
call fcn.100b6700
add esp, 0x40
push 0x10024670
push 0x81147f
call fcn.100b6700
push 0x10024670
push 0x8115c9
call fcn.100b6700
push 0x10024670
push 0x811660
call fcn.100b6700
push 0x10024670
push 0x811790
call fcn.100b6700
push 0x10024670
push 0x810a1a
call fcn.100b6700
push 0x10024670
push 0x810be5
call fcn.100b6700
push 0x10024670
push 0x810d2c
call fcn.100b6700
push 0x10024670
push 0x810dc3
call fcn.100b6700
add esp, 0x40
push 0x10024670
push 0x810ef0
call fcn.100b6700
push 0x10024ba0
push 0x814d4d
call fcn.100b6700
push 0x10024ba0
push 0x814dc1
call fcn.100b6700
push 0x10024fc0
push 0x81276f
call fcn.100b6700
push 0x10024fc0
push 0x8127c8
call fcn.100b6700
push 0x10024fc0
push 0x81282d
call fcn.100b6700
push 0x10024fc0
push 0x812899
call fcn.100b6700
add esp, 0x38
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x81271e
call esi
mov edi, 0x1039d778
lea ecx, [ebp - 4]
push ecx
mov dword [0x81271e], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x81271e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812952
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812952], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812952
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812a81
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x812a81], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812a81
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x812d4a
call esi
mov edi, 0x1039d77c
lea ecx, [ebp - 4]
push ecx
mov dword [0x812d4a], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x812d4a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8139ab
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8139ab], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8139ab
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 0x4d1
push 0x80f270
call esi
push 0x4d1
push 0x90
push 0x80f270
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 4]
add esp, 0xc
lea ecx, [ebp - 4]
push ecx
push edx
push 0x4d1
push 0x80f270
call esi
push 0x1002bae0
push 0x80f92d
call fcn.100b6700
push 0x1002bae0
push 0x80f968
call fcn.100b6700
push 0x1002bae0
push 0x80fa02
call fcn.100b6700
push 0x1002bae0
push 0x811b61
call fcn.100b6700
push 0x1002bae0
push 0x8119e6
call fcn.100b6700
push 0x1002bae0
push 0x811b1a
call fcn.100b6700
push 0x1002bae0
push 0x811b61
call fcn.100b6700
add esp, 0x38
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x813784
call esi
mov edi, 0x1039d780
lea ecx, [ebp - 4]
push ecx
mov dword [0x813784], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x813784
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x8138ea
call esi
lea ecx, [ebp - 4]
push ecx
mov dword [0x8138ea], edi
mov edx, dword [ebp - 4]
push edx
push 4
push 0x8138ea
call esi
push 0x1002bae0
push 0x80ff56
call fcn.100b6700
push 0x1002bae0
push 0x8100e9
call fcn.100b6700
push 0x1002bae0
push 0x8103b7
call fcn.100b6700
push 0x1002bae0
push 0x810699
call fcn.100b6700
add esp, 0x20
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret