Function at 0x10002f00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
xor edx, edx
nop dword [eax]
mov ecx, dword [edi + edx + 0x258]
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov eax, dword [eax]
cmp eax, dword [edx + str..text]
jne 0x100031ca
add edx, 4
cmp edx, 0x78
jl 0x10002f20
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea ecx, [ebp - 8]
push ecx
push 0x40
mov ebx, eax
mov dword [ebp - 0x14], 0x40
lea eax, [edi + 0x1000]
mov dword [ebp - 0x18], ebx
push 0x542000
push eax
push ebx
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 4
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], eax
call esi
lea ecx, [ebp - 0x10]
push ecx
push dword [ebp - 0xc]
lea eax, [edi + 0x543000]
push 0x71000
push eax
push ebx
mov dword [ebp - 0x28], eax
call esi
lea ebx, [edi + 0x5b3a00]
xor esi, esi
nop dword [eax]
mov eax, dword [esi + 0x100159d0]
mov eax, dword [edi + eax + 0x1000]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
cvttss2si eax, dword [ebp - 0x20]
add dword [esi + 0x100198b0], eax
movd xmm0, dword [esi + 0x100198b0]
cvtdq2ps xmm0, xmm0
call fcn.10002a10
mov dword [ebx], eax
mov eax, dword [esi + 0x100159d0]
add esi, 4
mov dword [edi + eax + 0x1000], ebx
add ebx, 4
cmp esi, 0x60
jl 0x10002fc0
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0xc]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push eax
push dword [ebp - 0x10]
lea eax, [edi + 0x543000]
push 0x71000
push eax
push esi
call ebx
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 8]
lea eax, [edi + 0x1000]
push 0x542000
push eax
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x14], 0x40
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 0x542000
lea eax, [edi + 0x1000]
push eax
push esi
call ebx
mov dword [edi + 0x3df59c], 0x8b660ceb
lea eax, [ebp - 0x14]
push eax
mov dword [edi + 0x3df5aa], 0x190419b8
lea eax, [edi + 0x1000]
mov dword [edi + 0x3df5ae], 0xebd08b04
mov dword [edi + 0x3df5b2], 0x850f90eb
push dword [ebp - 8]
push 0x542000
push eax
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
call fcn.10002bb0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x18], 4
lea eax, [ebp - 0xc]
mov dword [ebp - 0x14], esi
push eax
push 4
push 0x71000
lea eax, [edi + 0x543000]
mov dword [ebp - 0xc], 0
push eax
push esi
mov dword [ebp - 8], 0x40
mov dword [ebp - 0x10], 0
call ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
lea eax, [edi + 0x1000]
push 0x542000
push eax
push esi
call ebx
lea esi, [edi + 0x5b3a84]
xor edx, edx
mov eax, dword [edx + 0x10015b18]
lea esi, [esi + 0xc]
mov ecx, dword [edx + 0x10015c60]
mov dword [esi - 0x10], eax
mov eax, dword [edx + 0x10015b1c]
mov dword [esi - 0xc], eax
mov eax, dword [edx + 0x10015b20]
mov dword [esi - 8], eax
mov eax, dword [edx + 0x10015c64]
mov dword [ecx + edi + 0x1000], eax
mov eax, dword [edx + 0x10015c68]
add edx, 0xc
mov dword [ecx + edi + 0x1004], eax
cmp edx, 0x144
jl 0x10003130
lea eax, [ebp - 8]
add edi, 0x542aaf
push eax
push dword [ebp - 0x10]
mov ecx, 0x37
mov esi, 0x10015a38
push 0x542000
push dword [ebp - 0x24]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x14]
push esi
call ebx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0xc]
push 0x71000
push dword [ebp - 0x28]
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop esi
pop ebx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000346e
mov esp, ebp
pop ebp
ret
push 0
push 0x10015980
push 0x10015988
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
call fcn.1000346e
mov esp, ebp
pop ebp
ret