Function at 0x10024920
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x1006e00c]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x10071928], 0
push ebx
mov ebx, ecx
jne 0x10024bb1
push esi
push edi
call fcn.10024130
mov eax, dword [0x100708e0]
mov ecx, fcn.100078d0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea esi, [eax + 0x40]
cmp esi, 0x1000
jbe 0x10024991
cmp ecx, 0x1000
jbe 0x10024991
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x2c]
mov dword [esi], fcn.100078d0
push eax
push dword [ebp - 8]
push 4
push esi
call edi
mov eax, dword [0x100708e0]
mov ecx, fcn.100078d0
lea esi, [eax + 0x44]
cmp esi, 0x1000
jbe 0x100249c6
cmp ecx, 0x1000
jbe 0x100249c6
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x30]
mov dword [esi], fcn.100078d0
push eax
push dword [ebp - 0xc]
push 4
push esi
call edi
mov eax, dword [0x100708e0]
lea esi, [eax + 0x48]
mov ecx, fcn.100078d0
cmp esi, 0x1000
jbe 0x10024a05
cmp ecx, 0x1000
jbe 0x10024a05
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x34]
mov dword [esi], fcn.100078d0
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
mov eax, dword [0x100708e0]
mov ecx, fcn.100078d0
lea esi, [eax + 0x4c]
cmp esi, 0x1000
jbe 0x10024a3a
cmp ecx, 0x1000
jbe 0x10024a3a
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x38]
mov dword [esi], fcn.100078d0
push eax
push dword [ebp - 0x14]
push 4
push esi
call edi
mov eax, dword [0x100708e0]
lea esi, [eax + 0x50]
mov ecx, fcn.100078d0
cmp esi, 0x1000
jbe 0x10024a79
cmp ecx, 0x1000
jbe 0x10024a79
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x3c]
mov dword [esi], fcn.100078d0
push eax
push dword [ebp - 0x18]
push 4
push esi
call edi
mov eax, dword [0x100708e0]
mov ecx, fcn.100078d0
lea esi, [eax + 0x54]
cmp esi, 0x1000
jbe 0x10024aae
cmp ecx, 0x1000
jbe 0x10024aae
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x40]
mov dword [esi], fcn.100078d0
push eax
push dword [ebp - 0x1c]
push 4
push esi
call edi
mov eax, dword [0x100708e0]
lea esi, [eax + 0x58]
cmp esi, 0x1000
jbe 0x10024ae8
mov ecx, fcn.100078d0
cmp ecx, 0x1000
jbe 0x10024ae8
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x44]
mov dword [esi], fcn.100078d0
push eax
push dword [ebp - 0x20]
push 4
push esi
call edi
mov eax, dword [0x100708e0]
cmp dword [0x100724c0], 0
jne 0x10024b36
lea esi, [eax + 0x38]
cmp esi, 0x1000
jbe 0x10024b2f
mov eax, 0x10023fc0
cmp eax, 0x1000
jbe 0x10024b2f
mov eax, dword [esi]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 4
push esi
call edi
lea eax, [ebp - 0x28]
mov dword [esi], 0x10023fc0
push eax
push dword [ebp - 0x24]
push 4
push esi
call edi
mov eax, dword [ebp - 0x48]
jmp 0x10024b31
xor eax, eax
mov dword [0x100724c0], eax
cmp dword [0x10070708], 0
jne 0x10024ba5
mov ecx, dword [0x10070314]
mov eax, dword [0x10072860]
add eax, 0x2f8
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov dword [ebp - 0x48], eax
cmp eax, 0x1000
jbe 0x10024b9e
push 0xc
call fcn.1004cb0e
add esp, 4
mov esi, eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push 0xc
push esi
call edi
mov edx, dword [ebp - 0x48]
mov ecx, dword [edx]
mov dword [esi], ecx
mov ax, word [edx + 4]
mov word [esi + 4], ax
mov al, byte [edx + 6]
mov byte [esi + 6], al
lea eax, [esi + 7]
sub edx, eax
mov byte [eax], 0xe9
add edx, 2
mov dword [eax + 1], edx
add eax, 0xfffffff9
jmp 0x10024ba0
xor eax, eax
mov dword [0x10070708], eax
pop edi
mov dword [0x10071928], 1
pop esi
call fcn.1001cae0
mov ecx, dword [0x10070758]
test ecx, ecx
jne 0x10024bcc
mov dword [0x10070074], 0x32
jmp 0x10024c00
cmp ecx, 1
jne 0x10024bdd
mov dword [0x10070074], 6
jmp 0x10024c00
cmp ecx, 2
jne 0x10024bee
mov dword [0x10070074], 5
jmp 0x10024c00
mov eax, dword [0x10070074]
xor edx, edx
cmp ecx, 3
cmove eax, edx
mov dword [0x10070074], eax
call fcn.1001a950
call fcn.1001a9f0
mov ecx, ebx
call fcn.1001ab60
mov ecx, ebx
call fcn.1001c790
call fcn.100226d0
mov ecx, ebx
call fcn.1001e120
mov ecx, ebx
call fcn.1001e6a0
call fcn.10021270
call fcn.10021c70
call fcn.10021380
call fcn.1001fa50
call fcn.10021bc0
call fcn.1001fb10
call fcn.10022520
call fcn.10022610
call fcn.100220f0
call fcn.10021de0
call fcn.10022810
call fcn.10022f40
call fcn.10022be0
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.1004c1d9
mov esp, ebp
pop ebp
ret