Function at 0x100021d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0ab9
call esi
mov bl, 0xc3
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d0ab9], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d0ab9
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0bb3
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d0bb3], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d0bb3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0ccd
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d0ccd], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d0ccd
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0dc3
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d0dc3], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d0dc3
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d0ee0
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d0ee0], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d0ee0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d101a
call esi
mov byte [0x6d101a], bl
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 1
push 0x6d101a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d138f
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d138f], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d138f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d14ac
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d14ac], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d14ac
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d15ea
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d15ea], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d15ea
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d172b
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d172b], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d172b
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d188c
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d188c], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d188c
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d1a19
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d1a19], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d1a19
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d1bae
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d1bae], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d1bae
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d1d44
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d1d44], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d1d44
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d211e
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d211e], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d211e
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d225a
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d225a], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d225a
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2396
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d2396], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d2396
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d24e0
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d24e0], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d24e0
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2638
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d2638], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d2638
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2711
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d2711], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d2711
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x6d2869
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x6d2869], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x6d2869
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x4d6942
call esi
mov eax, 0x90909090
mov ecx, 0x4d6942
mov dword [ecx], eax
mov word [ecx + 4], ax
mov byte [ecx + 6], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 7
push 0x4d6942
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0x6d292f
call esi
mov eax, 0x90909090
mov ecx, 0x6d292f
mov dword [ecx], eax
mov word [ecx + 4], ax
mov byte [ecx + 6], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 7
push 0x6d292f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 7
push 0xad19baf
call esi
mov eax, 0x90909090
mov ecx, 0xad19baf
mov dword [ecx], eax
mov word [ecx + 4], ax
mov byte [ecx + 6], al
mov edx, dword [ebp - 4]
lea ecx, [ebp - 4]
push ecx
push edx
push 7
push 0xad19baf
call esi
push 0xa2a86ef
push 0x4e0a7c
or bl, 0xff
call fcn.1000d250
push 0xa2a86ef
push 0x4de068
or bl, 0xff
call fcn.1000d250
push 0xa2a86ef
push 0x4de767
or bl, 0xff
call fcn.1000d250
push 0xa61cf19
push 0x4de479
or bl, 0xff
call fcn.1000d250
push 0xa61cf19
push 0x4ddbe2
or bl, 0xff
call fcn.1000d250
push 0xa61cf19
push 0x4e05fb
or bl, 0xff
call fcn.1000d250
push 0xa2a2c77
push 0x638032
or bl, 0xff
call fcn.1000d250
push 0xa2a2c77
push 0x644f3d
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xa5d51b8
push 0x5a0db9
or bl, 0xff
call fcn.1000d250
push 0xa5d51b8
push 0x5a0de7
or bl, 0xff
call fcn.1000d250
push 0x9d67f23
push 0x4e1293
or bl, 0xff
call fcn.1000d250
push 0xa2de6ef
push 0x664b56
or bl, 0xff
call fcn.1000d250
push 0xa273d1e
push 0x4e0600
or bl, 0xff
call fcn.1000d250
push 0xacbda84
push 0x8fc0b0
or bl, 0xff
call fcn.1000d250
push 0xa571ad3
push 0x4e12a7
or bl, 0xff
call fcn.1000d250
push 0x9e57a4b
push 0x664b48
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0x9cfba90
push 0x66672e
or bl, 0xff
call fcn.1000d250
push 0xa714401
push 0x664975
or bl, 0xff
call fcn.1000d250
push 0xacbce0d
push 0x66495b
or bl, 0xff
call fcn.1000d250
push 0xa713af4
push 0x4e03f0
or bl, 0xff
call fcn.1000d250
push 0xa443df0
push 0x6658c5
or bl, 0xff
call fcn.1000d250
push 0xadd3732
push 0x6660b8
or bl, 0xff
call fcn.1000d250
push 0xa789228
push 0x664e28
or bl, 0xff
call fcn.1000d250
push 0x9d6996b
push 0x98226c
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xa48d5e5
push 0x6646bf
or bl, 0xff
call fcn.1000d250
push 0xa78a8d5
push 0x8fc088
or bl, 0xff
call fcn.1000d250
push 0xa6ddf0d
push 0x666e34
or bl, 0xff
call fcn.1000d250
push 0xa732638
push 0x6668eb
or bl, 0xff
call fcn.1000d250
push 0xa064795
push 0x665a31
or bl, 0xff
call fcn.1000d250
push 0x9d5429d
push 0x665a4d
or bl, 0xff
call fcn.1000d250
push 0xae589a9
push 0x665a3f
or bl, 0xff
call fcn.1000d250
push 0xa4db895
push 0x8fc0e2
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xa81d205
push 0x8fc0c9
or bl, 0xff
call fcn.1000d250
push 0xa99ccdc
push 0x8fc0fb
or bl, 0xff
call fcn.1000d250
push 0xad4461b
push 0x66493c
or bl, 0xff
call fcn.1000d250
push 0xa391923
push 0x66494a
or bl, 0xff
call fcn.1000d250
push 0xa278cd5
push 0x6658d0
or bl, 0xff
call fcn.1000d250
push 0xadd670d
push 0x666e0a
or bl, 0xff
call fcn.1000d250
push 0xa29b623
push 0x666e26
or bl, 0xff
call fcn.1000d250
push 0x9e5091d
push 0x6665b2
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xa6e491c
push 0x666610
or bl, 0xff
call fcn.1000d250
push 0x9e22b98
push 0x6666bd
or bl, 0xff
call fcn.1000d250
push 0xae5881c
push 0x665639
or bl, 0xff
call fcn.1000d250
push 0xabf83fb
push 0x66656d
or bl, 0xff
call fcn.1000d250
push 0xa425daa
push 0x6665c8
or bl, 0xff
call fcn.1000d250
push 0xadd76e0
push 0x6664e1
or bl, 0xff
call fcn.1000d250
push 0xa7368df
push 0x666ae9
or bl, 0xff
call fcn.1000d250
push 0xa6e56ba
push 0x666b15
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xaa1c555
push 0x666b0a
or bl, 0xff
call fcn.1000d250
push 0xabcfa67
push 0x666af4
or bl, 0xff
call fcn.1000d250
push 0x9d738a3
push 0x6668a9
or bl, 0xff
call fcn.1000d250
push 0xab847b3
push 0x6668b4
or bl, 0xff
call fcn.1000d250
push 0x9d4aef5
push 0x6668d5
or bl, 0xff
call fcn.1000d250
push 0xa78c9d2
push 0x6668e0
or bl, 0xff
call fcn.1000d250
push 0xaa1a247
push 0x6668bf
or bl, 0xff
call fcn.1000d250
push 0xabc703a
push 0x6668ca
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xa2ed520
push 0x6664d3
or bl, 0xff
call fcn.1000d250
push 0xa986173
push 0x666602
or bl, 0xff
call fcn.1000d250
push 0xa1c8c3e
push 0x6664fd
or bl, 0xff
call fcn.1000d250
push 0x9e43f3b
push 0x666519
or bl, 0xff
call fcn.1000d250
push 0x9e24ff3
push 0x6666c8
or bl, 0xff
call fcn.1000d250
push 0xa6db4f0
push 0x66657b
or bl, 0xff
call fcn.1000d250
push 0xa4302f3
push 0x66662c
or bl, 0xff
call fcn.1000d250
push 0x9d64540
push 0x6665d3
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xacbd4e0
push 0x6665e9
or bl, 0xff
call fcn.1000d250
push 0xa570a4e
push 0x6665a7
or bl, 0xff
call fcn.1000d250
push 0xa61b78e
push 0x66659c
or bl, 0xff
call fcn.1000d250
push 0xaeabac4
push 0x6665bd
or bl, 0xff
call fcn.1000d250
push 0xa425197
push 0x66650b
or bl, 0xff
call fcn.1000d250
push 0xab86794
push 0x66655f
or bl, 0xff
call fcn.1000d250
push 0x9cf818c
push 0x66661e
or bl, 0xff
call fcn.1000d250
push 0xa56e08b
push 0x6664ef
or bl, 0xff
call fcn.1000d250
add esp, 0x40
push 0xa2a2b15
push 0x6667af
or bl, 0xff
call fcn.1000d250
add esp, 8
pop esi
pop ebx
mov esp, ebp
pop ebp
ret