Function at 0x10002ef0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1001717c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0xe9
push 0x10002b60
push 0x4293ca
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x100034e0
push 0x414b1e
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10001030
push 0x40a12d
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10001050
push 0x40aa10
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x100024e0
push 0x432c40
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10001080
push 0x419119
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x100024f0
push 0x40fa1a
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x100020f0
push 0x4011bd
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x100025a0
push 0x404598
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x100025f0
push 0x42d2d1
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10002760
push 0x4011ef
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10002c00
push 0x41afcd
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x8d46fc
call esi
lea eax, [ebp - 0xc]
mov byte [0x8d46fc], 0x3c
push eax
push dword [ebp - 0xc]
push 1
push 0x8d46fc
call esi
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push 0x484457
call esi
lea eax, [ebp - 0xc]
mov byte [0x484457], 0x3c
push eax
push dword [ebp - 0xc]
push 1
push 0x484457
call esi
push 0xe9
push 0x10002ab0
push 0x8d456c
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10002aa0
push 0x8d4703
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10002890
push 0x421828
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10002960
push 0x4083c3
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
push 0xe9
push 0x10002ad0
push 0x42fcfc
call fcn.10002e50
mov ecx, eax
call fcn.10002de0
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x5da987
call esi
lea eax, [ebp - 8]
mov byte [0x5da987], 0xfa
push eax
push dword [ebp - 8]
push 1
push 0x5da987
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4843e5
call esi
lea eax, [ebp - 8]
mov dword [0x4843e5], 0x10017a50
push eax
push dword [ebp - 8]
push 4
push 0x4843e5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4843fc
call esi
lea eax, [ebp - 8]
mov dword [0x4843fc], 0x10017a50
push eax
push dword [ebp - 8]
push 4
push 0x4843fc
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x48441d
call esi
lea eax, [ebp - 8]
mov dword [0x48441d], 0x10017a50
push eax
push dword [ebp - 8]
push 4
push 0x48441d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484474
call esi
lea eax, [ebp - 8]
mov dword [0x484474], 0x10017b40
push eax
push dword [ebp - 8]
push 4
push 0x484474
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484464
call esi
lea eax, [ebp - 8]
mov dword [0x484464], 0x10017c30
push eax
push dword [ebp - 8]
push 4
push 0x484464
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484893
call esi
lea eax, [ebp - 8]
mov dword [0x484893], 0x10017c30
push eax
push dword [ebp - 8]
push 4
push 0x484893
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4848b5
call esi
lea eax, [ebp - 8]
mov dword [0x4848b5], 0x10017c30
push eax
push dword [ebp - 8]
push 4
push 0x4848b5
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484a1f
call esi
mov dword [0x484a1f], 0x10017d20
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 4
push 0x484a1f
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4bc1a0
call esi
lea eax, [ebp - 8]
mov dword [0x4bc1a0], 0x10017d20
push eax
push dword [ebp - 8]
push 4
push 0x4bc1a0
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x4bc23a
call esi
lea eax, [ebp - 8]
mov dword [0x4bc23a], 0x10017d20
push eax
push dword [ebp - 8]
push 4
push 0x4bc23a
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x484c77
call esi
lea eax, [ebp - 8]
mov dword [0x484c77], 0x10017e10
push eax
push dword [ebp - 8]
push 4
push 0x484c77
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8d4574
call esi
lea eax, [ebp - 8]
mov byte [0x8d4574], 0
push eax
push dword [ebp - 8]
push 1
push 0x8d4574
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x8d45ae
call esi
lea eax, [ebp - 8]
mov byte [0x8d45ae], 0
push eax
push dword [ebp - 8]
push 1
push 0x8d45ae
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d45bd
call esi
lea eax, [ebp - 8]
mov edi, 0xf0
push eax
mov word [0x8d45bd], di
push dword [ebp - 8]
push 2
push 0x8d45bd
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d45f8
call esi
lea eax, [ebp - 8]
mov word [0x8d45f8], di
push eax
push dword [ebp - 8]
push 2
push 0x8d45f8
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d45ff
call esi
lea eax, [ebp - 8]
mov edi, 0x1e0
push eax
mov word [0x8d45ff], di
push dword [ebp - 8]
push 2
push 0x8d45ff
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d463d
call esi
lea eax, [ebp - 8]
mov word [0x8d463d], di
push eax
push dword [ebp - 8]
push 2
push 0x8d463d
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d4678
call esi
lea eax, [ebp - 8]
mov edi, 0x2d0
push eax
mov word [0x8d4678], di
push dword [ebp - 8]
push 2
push 0x8d4678
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d46b3
call esi
lea eax, [ebp - 8]
mov word [0x8d46b3], di
push eax
push dword [ebp - 8]
push 2
push 0x8d46b3
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d46ba
call esi
lea eax, [ebp - 8]
mov edi, 0x3c0
push eax
mov word [0x8d46ba], di
push dword [ebp - 8]
push 2
push 0x8d46ba
call esi
lea eax, [ebp - 8]
push eax
push 0x40
push 2
push 0x8d46f5
call esi
lea eax, [ebp - 8]
mov word [0x8d46f5], di
push eax
push dword [ebp - 8]
push 2
push 0x8d46f5
call esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10003576
mov esp, ebp
pop ebp
ret