Function at 0x10025de0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 8]
push esi
push edi
push eax
push 1
lea eax, [ebp - 1]
mov byte [ebp - 1], 0xe9
push eax
push 0x4dea4e
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call edi
mov eax, 0x10026230
sub eax, 0x4dea53
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push 0x4dea4f
call ebx
push eax
call edi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 3
push 0x4dea53
call esi
mov eax, 0x4dea53
mov ecx, 0x90909090
mov word [eax], cx
mov byte [eax + 2], cl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 3
push 0x4dea53
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44a9a0
call ebx
push eax
call edi
mov eax, 0x10025490
sub eax, 0x44a9a5
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44a9a1
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44a9a5
call esi
mov eax, 0x44a9a5
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44a9a5
call esi
mov byte [ebp - 1], 0xe9
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44a9ce
call ebx
push eax
call edi
mov eax, 0x10025400
sub eax, 0x44a9d3
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44a9cf
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 2
push 0x44a9d3
call esi
mov eax, 0x44a9d3
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 2
push 0x44a9d3
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44aa1e
call ebx
push eax
call edi
mov eax, 0x10025420
sub eax, 0x44aa23
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44aa1f
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44aa23
call esi
mov eax, 0x44aa23
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44aa23
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44abd9
call ebx
push eax
call edi
mov eax, 0x10025430
sub eax, 0x44abde
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44abda
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44abde
call esi
mov eax, 0x44abde
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44abde
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44ad94
call ebx
push eax
call edi
mov eax, 0x10025440
sub eax, 0x44ad99
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44ad95
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44ad99
call esi
mov eax, 0x44ad99
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44ad99
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44af4b
call ebx
push eax
call edi
mov eax, 0x10025450
sub eax, 0x44af50
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44af4c
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44af50
call esi
mov eax, 0x44af50
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44af50
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44aa92
call ebx
push eax
call edi
mov eax, 0x10025460
sub eax, 0x44aa97
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44aa93
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44aa97
call esi
mov eax, 0x44aa97
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44aa97
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44ac4d
call ebx
push eax
call edi
mov eax, 0x10025470
sub eax, 0x44ac52
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44ac4e
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44ac52
call esi
mov eax, 0x44ac52
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44ac52
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44ae06
call ebx
push eax
call edi
mov eax, 0x10025480
sub eax, 0x44ae0b
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44ae07
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44ae0b
call esi
mov eax, 0x44ae0b
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44ae0b
call esi
lea eax, [ebp - 0xc]
mov byte [ebp - 1], 0xe9
push eax
push 1
lea eax, [ebp - 1]
push eax
push 0x44afbf
call ebx
push eax
call edi
mov eax, 0x100253f0
sub eax, 0x44afc4
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 8]
push eax
push 0x44afc0
call ebx
push eax
call edi
lea eax, [ebp - 0x10]
push eax
push 0x40
push 1
push 0x44afc4
call esi
mov eax, 0x44afc4
mov byte [eax], 0x90
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x10]
push 1
push 0x44afc4
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret