Function at 0x100024c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068765
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
push ebx
push esi
push edi
mov eax, dword [0x100854b4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov edx, dword [ebp + 0xc]
mov eax, edx
mov ebx, dword [ebp + 8]
neg eax
and eax, 7
add eax, edx
mov dword [ebp + 0xc], eax
cmp eax, edx
jb 0x10002663
mov eax, dword [esi + 4]
xor edi, edi
mov ecx, dword [esi]
sub eax, ecx
mov edx, dword [sym.imp.KERNEL32.dll_VirtualFree]
sar eax, 2
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edi
test eax, eax
je 0x100025cb
mov ebx, esi
nop dword [eax]
mov esi, dword [ebp - 0x18]
mov esi, dword [ecx + esi*4]
test esi, esi
je 0x1000253c
inc dword [esi]
mov ecx, dword [esi + 0xc]
sub ecx, dword [esi + 8]
cmp dword [ebp + 0xc], ecx
jbe 0x1000254c
add dword [esi], 0xffffffff
jmp 0x1000258a
test edi, edi
je 0x10002580
mov eax, dword [edi + 0xc]
sub eax, dword [edi + 8]
cmp ecx, eax
jae 0x1000260a
add dword [edi], 0xffffffff
jne 0x10002580
push 0x8000
push 0
push dword [edi + 4]
call edx
push 0x14
push edi
call fcn.10041ba1
mov edx, dword [sym.imp.KERNEL32.dll_VirtualFree]
add esp, 8
mov eax, dword [esi]
mov edi, esi
inc eax
add eax, 0xffffffff
mov dword [esi], eax
jne 0x100025a3
push 0x8000
push 0
push dword [esi + 4]
call edx
push 0x14
push esi
call fcn.10041ba1
add esp, 8
mov eax, dword [ebx + 4]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx]
inc edx
sub eax, ecx
mov dword [ebp - 0x18], edx
sar eax, 2
cmp edx, eax
mov edx, dword [sym.imp.KERNEL32.dll_VirtualFree]
jb 0x10002530
mov ebx, dword [ebp + 8]
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0
test edi, edi
je 0x10002611
push dword [ebp + 0xc]
push ecx
mov eax, esp
mov ecx, esi
push ebx
mov dword [eax], edi
inc dword [edi]
call fcn.100028b0
add dword [edi], 0xffffffff
jne 0x100027c8
mov eax, dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0x8000
push 0
push dword [edi + 4]
call eax
push 0x14
push edi
jmp 0x100027c0
mov eax, dword [esi]
jmp 0x10002585
mov edi, dword [0x100870a4]
test edi, edi
jne 0x1000262e
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [ebp - 0x2c]
mov dword [0x100870a4], edi
mov esi, dword [0x1008508c]
mov ecx, dword [ebp + 0xc]
cmp ecx, esi
jb 0x1000264c
xor edx, edx
mov eax, ecx
div edi
mov eax, edi
sub eax, edx
xor edx, edx
div edi
lea esi, [ecx + edx]
push 0x40
push 0x3000
push esi
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x1000267c
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
jmp 0x100027c8
push 0x14
call fcn.10041b71
mov edi, eax
add esp, 4
mov dword [ebp - 0x14], edi
test edi, edi
je 0x100026ad
mov eax, dword [ebp - 0x18]
mov dword [edi + 0x10], esi
mov dword [edi], 0
mov dword [edi + 4], eax
lea ecx, [eax + esi]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov esi, edi
inc dword [edi]
jmp 0x100026b1
xor esi, esi
xor edi, edi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
test edi, edi
je 0x10002663
push dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp - 0x10]
mov eax, esp
mov dword [eax], edi
lea eax, [ebp - 0x24]
inc dword [edi]
push eax
call fcn.100028b0
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 1
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp + 0xc], ecx
mov ecx, edx
sub ecx, dword [eax]
sar ecx, 2
mov dword [ebp - 0x10], ecx
cmp ecx, 8
jae 0x10002712
cmp edx, dword [eax + 8]
je 0x10002701
mov dword [edx], edi
inc dword [edi]
add dword [eax + 4], 4
jmp 0x1000278c
lea ecx, [ebp - 0x14]
push ecx
push edx
mov ecx, eax
call fcn.10002a40
mov esi, dword [ebp - 0x14]
jmp 0x1000278c
mov esi, dword [ebp + 0xc]
xor ebx, ebx
mov edi, 1
nop dword [eax]
mov eax, dword [esi + edi*4]
mov ecx, dword [esi + ebx*4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 8]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 8]
mov ecx, edi
cmp edx, eax
cmovae ecx, ebx
inc edi
mov ebx, ecx
cmp edi, dword [ebp - 0x10]
jb 0x10002720
mov edi, dword [esi + ebx*4]
lea eax, [esi + ebx*4]
mov esi, dword [ebp - 0x18]
mov ebx, dword [ebp + 8]
mov dword [ebp + 0xc], eax
mov ecx, dword [edi + 0xc]
mov eax, dword [esi + 0xc]
sub ecx, dword [edi + 8]
sub eax, dword [esi + 8]
cmp ecx, eax
jae 0x1000278c
test edi, edi
je 0x10002785
add dword [edi], 0xffffffff
jne 0x10002785
mov eax, dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0x8000
push 0
push dword [edi + 4]
call eax
push 0x14
push edi
call fcn.10041ba1
add esp, 8
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
inc dword [esi]
mov eax, dword [ebp - 0x24]
mov dword [ebx], eax
mov eax, dword [ebp - 0x20]
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], 0
mov dword [ebx + 8], eax
test esi, esi
je 0x100027c8
add dword [esi], 0xffffffff
jne 0x100027c8
push 0x8000
push 0
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0x14
push esi
call fcn.10041ba1
add esp, 8
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8