Function at 0x10070550
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x101ac06c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [0x102599e4]
lea eax, [ebp - 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 8]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d6c2c
call edi
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x4d8af0
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x100702e0
mov ecx, 0x4d8af0
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d1ce
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x10070370
mov ecx, 0x63d1ce
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d40f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x100703a0
mov ecx, 0x63d40f
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d1eb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x100703d0
mov ecx, 0x63d1eb
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d42c
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x10070400
mov ecx, 0x63d42c
call fcn.100ced10
push 5
call fcn.100f4ca4
add esp, 0x40
mov dword [eax], 0x90909090
mov edx, eax
push 5
mov ecx, 0x63d208
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x10070430
mov ecx, 0x63d208
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d449
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x10070460
mov ecx, 0x63d449
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d225
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x10070490
mov ecx, 0x63d225
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d466
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x100704c0
mov ecx, 0x63d466
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d242
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
push 0xe9
mov edx, 0x100704f0
mov ecx, 0x63d242
call fcn.100ced10
push 5
call fcn.100f4ca4
push 5
mov edx, eax
mov ecx, 0x63d483
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
call fcn.100cebf0
add esp, 0x40
mov edx, 0x10070520
mov ecx, 0x63d483
push 0xe9
call fcn.100ced10
add esp, 4
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
mov bl, 0xe9
push eax
push 0x40
push 1
push 0x57f0fc
call edi
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x10070812
mov eax, 0x57f0fc
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fc
call edi
test eax, eax
jne 0x10070814
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fd
mov bl, 0x4a
call edi
test eax, eax
je 0x10070852
mov eax, 0x57f0fd
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fd
call edi
test eax, eax
jne 0x10070854
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0fe
mov bl, 1
call edi
test eax, eax
je 0x10070892
mov eax, 0x57f0fe
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0fe
call edi
test eax, eax
jne 0x10070894
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f0ff
xor bl, bl
call edi
test eax, eax
je 0x100708d2
mov eax, 0x57f0ff
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f0ff
call edi
test eax, eax
jne 0x100708d4
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f100
xor bl, bl
call edi
test eax, eax
je 0x10070912
mov eax, 0x57f100
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f100
call edi
test eax, eax
jne 0x10070914
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x57f101
mov bl, 0x90
call edi
test eax, eax
je 0x10070952
mov eax, 0x57f101
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x57f101
call edi
test eax, eax
jne 0x10070954
call esi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x503834
mov bl, 0xeb
call edi
test eax, eax
je 0x10070992
mov eax, 0x503834
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x503834
call edi
test eax, eax
jne 0x10070994
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100f4653
mov esp, ebp
pop ebp
ret