Function at 0x100721b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [0x101f6804]
lea eax, [ebp - 4]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push 0x4d6c2c
call edi
lea eax, [ebp - 4]
mov dword [0x4d6c2c], esi
push eax
push dword [ebp - 4]
push 4
push 0x4d6c2c
call edi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x4d8af0
mov byte [ebx + 4], 0x90
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x10072246
mov eax, dword [ebx]
mov ecx, 0x4d8af0
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10072248
call esi
mov eax, 0x10071f40
mov byte [ebp - 0x10], 0xe9
sub eax, 0x4d8af5
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x4d8af0
call edi
test eax, eax
je 0x1007229a
mov eax, dword [ebp - 0x10]
mov ecx, 0x4d8af0
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007229c
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d1ce
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x100722f2
mov eax, dword [ebx]
mov ecx, 0x63d1ce
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100722f4
call esi
mov eax, 0x10071fd0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d1d3
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d1ce
call edi
test eax, eax
je 0x10072346
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d1ce
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10072348
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d40f
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x1007239e
mov eax, dword [ebx]
mov ecx, 0x63d40f
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100723a0
call esi
mov eax, 0x10072000
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d414
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d40f
call edi
test eax, eax
je 0x100723f2
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d40f
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100723f4
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d1eb
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x1007244a
mov eax, dword [ebx]
mov ecx, 0x63d1eb
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007244c
call esi
mov eax, 0x10072030
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d1f0
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d1eb
call edi
test eax, eax
je 0x1007249e
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d1eb
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100724a0
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d42c
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x100724f6
mov eax, dword [ebx]
mov ecx, 0x63d42c
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100724f8
call esi
mov eax, 0x10072060
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d431
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d42c
call edi
test eax, eax
je 0x1007254a
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d42c
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007254c
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d208
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x100725a2
mov eax, dword [ebx]
mov ecx, 0x63d208
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100725a4
call esi
mov eax, 0x10072090
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d20d
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d208
call edi
test eax, eax
je 0x100725f6
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d208
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100725f8
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d449
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x1007264e
mov eax, dword [ebx]
mov ecx, 0x63d449
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10072650
call esi
mov eax, 0x100720c0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d44e
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d449
call edi
test eax, eax
je 0x100726a2
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d449
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100726a4
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d225
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x100726fa
mov eax, dword [ebx]
mov ecx, 0x63d225
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100726fc
call esi
mov eax, 0x100720f0
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d22a
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d225
call edi
test eax, eax
je 0x1007274e
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d225
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10072750
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d466
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x100727a6
mov eax, dword [ebx]
mov ecx, 0x63d466
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100727a8
call esi
mov eax, 0x10072120
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d46b
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d466
call edi
test eax, eax
je 0x100727fa
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d466
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100727fc
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d242
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x10072852
mov eax, dword [ebx]
mov ecx, 0x63d242
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10072854
call esi
mov eax, 0x10072150
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d247
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d242
call edi
test eax, eax
je 0x100728a6
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d242
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100728a8
call esi
push 5
call fcn.10131c6d
add esp, 4
mov dword [ebp - 4], 0
mov ebx, eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
mov dword [ebx], 0x90909090
push 0x63d483
mov byte [ebx + 4], 0x90
call edi
test eax, eax
je 0x100728fe
mov eax, dword [ebx]
mov ecx, 0x63d483
mov dword [ecx], eax
mov al, byte [ebx + 4]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10072900
call esi
mov eax, 0x10072180
mov byte [ebp - 0x10], 0xe9
sub eax, 0x63d488
mov dword [ebp - 4], 0
mov dword [ebp - 0xf], eax
lea eax, [ebp - 4]
push eax
push 0x40
push 5
push 0x63d483
call edi
test eax, eax
je 0x10072952
mov eax, dword [ebp - 0x10]
mov ecx, 0x63d483
mov dword [ecx], eax
mov al, byte [ebp - 0xc]
mov byte [ecx + 4], al
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10072954
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0fc
mov bl, 0xe9
call edi
test eax, eax
je 0x10072991
lea eax, [ebp - 8]
mov byte [0x57f0fc], bl
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0fc
call edi
test eax, eax
jne 0x10072993
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0fd
mov bl, 0x4a
call edi
test eax, eax
je 0x100729d0
lea eax, [ebp - 8]
mov byte [0x57f0fd], bl
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0fd
call edi
test eax, eax
jne 0x100729d2
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0fe
mov bl, 1
call edi
test eax, eax
je 0x10072a0f
lea eax, [ebp - 8]
mov byte [0x57f0fe], bl
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0fe
call edi
test eax, eax
jne 0x10072a11
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f0ff
xor bl, bl
call edi
test eax, eax
je 0x10072a4e
lea eax, [ebp - 8]
mov byte [0x57f0ff], bl
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f0ff
call edi
test eax, eax
jne 0x10072a50
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f100
xor bl, bl
call edi
test eax, eax
je 0x10072a8d
lea eax, [ebp - 8]
mov byte [0x57f100], bl
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f100
call edi
test eax, eax
jne 0x10072a8f
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x57f101
mov bl, 0x90
call edi
test eax, eax
je 0x10072acc
lea eax, [ebp - 8]
mov byte [0x57f101], bl
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x57f101
call edi
test eax, eax
jne 0x10072ace
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push eax
push 0x40
push 1
push 0x503834
mov bl, 0xeb
call edi
test eax, eax
je 0x10072b0b
lea eax, [ebp - 8]
mov byte [0x503834], bl
push eax
push dword [ebp - 4]
mov dword [ebp - 8], 0
push 1
push 0x503834
call edi
test eax, eax
jne 0x10072b0d
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret