Function at 0x100204d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7df0
push edi
call esi
test eax, eax
jne 0x10020507
push 0x10191104
lea ecx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push ecx
call fcn.10123527
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push 0xdd7df0
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7df1
push edi
call esi
test eax, eax
jne 0x10020544
push 0x10191104
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x1015ae8c
call fcn.10123527
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7df1
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7df2
push edi
call esi
test eax, eax
jne 0x10020581
push 0x10191104
lea eax, [ebp - 8]
push eax
mov dword [ebp - 8], 0x1015ae8c
call fcn.10123527
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0xa0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7df2
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7df4
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7df5
push edi
call esi
test eax, eax
jne 0x100205e6
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7df5
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7df6
push edi
call esi
test eax, eax
jne 0x10020623
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0xa0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7df6
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7df8
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7df9
push edi
call esi
test eax, eax
jne 0x10020688
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7df9
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7dfa
push edi
call esi
test eax, eax
jne 0x100206c5
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0xbe
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7dfa
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7dfc
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7dfd
push edi
call esi
test eax, eax
jne 0x1002072a
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7dfd
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7dfe
push edi
call esi
test eax, eax
jne 0x10020767
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0x50
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7dfe
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7dff
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0x43
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7e00
push edi
call esi
test eax, eax
jne 0x100207cc
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7e00
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7e01
push edi
call esi
test eax, eax
jne 0x10020809
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0x40
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7e01
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7e02
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0xbe
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7e28
push edi
call esi
test eax, eax
jne 0x1002086e
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7e28
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7e29
push edi
call esi
test eax, eax
jne 0x100208ab
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7e29
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7e2a
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0x4f
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7e2b
push edi
call esi
test eax, eax
jne 0x10020910
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0x43
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7e2b
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7e7e
push edi
call esi
test eax, eax
jne 0x1002094d
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0xbd
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7e7e
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7e84
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0xf0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7e85
push edi
call esi
test eax, eax
jne 0x100209b2
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0x85
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7e85
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7e86
push edi
call esi
test eax, eax
jne 0x100209ef
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0xf7
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7e86
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7e87
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0x40
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7cfc
push edi
call esi
test eax, eax
jne 0x10020a54
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0xe3
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7cfc
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7cfd
push edi
call esi
test eax, eax
jne 0x10020a91
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0x68
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7cfd
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7cfe
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0x4e
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7cff
push edi
call esi
test eax, eax
jne 0x10020af6
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0x43
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7cff
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7d00
push edi
call esi
test eax, eax
jne 0x10020b33
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7d00
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7d01
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7d02
push edi
call esi
test eax, eax
jne 0x10020b98
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0xa0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7d02
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7d03
push edi
call esi
test eax, eax
jne 0x10020bd5
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0x41
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7d03
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7d05
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7d06
push edi
call esi
test eax, eax
jne 0x10020c3a
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0xb9
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7d06
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7d08
push edi
call esi
test eax, eax
jne 0x10020c77
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0xe3
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7d08
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7d09
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0x68
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7d0a
push edi
call esi
test eax, eax
jne 0x10020cdc
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0x4e
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7d0a
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7d0b
push edi
call esi
test eax, eax
jne 0x10020d19
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0x43
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7d0b
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7d0c
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7d0d
push edi
call esi
test eax, eax
jne 0x10020d7e
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7d0d
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7d0e
push edi
call esi
test eax, eax
jne 0x10020dbb
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0xa0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7d0e
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7d0f
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0x41
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd7d10
push edi
call esi
test eax, eax
jne 0x10020e20
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd7d10
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7d11
push edi
call esi
test eax, eax
jne 0x10020e5d
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7d11
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7d12
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0xb9
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xd8ad3e
push edi
call esi
test eax, eax
jne 0x10020ec2
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0x87
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xd8ad3e
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd7ca6
push edi
call esi
test eax, eax
jne 0x10020eff
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd7ca6
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0xdd7ca7
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0xdd601e
push edi
call esi
test eax, eax
jne 0x10020f64
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0xdd601e
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0xdd601f
push edi
call esi
test eax, eax
jne 0x10020fa1
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 0
mov edx, dword [ebp - 4]
push edx
push 1
push 0xdd601f
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0x85f4fd
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 0xbc
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
lea ecx, [ebp - 4]
push ecx
push 4
push 1
mov edi, 0x85f4fe
push edi
call esi
test eax, eax
jne 0x10021006
push 0x10191104
lea edx, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push edx
jmp 0x10020502
lea eax, [ebp - 4]
push eax
mov byte [edi], 0x5f
mov ecx, dword [ebp - 4]
push ecx
push 1
push 0x85f4fe
call esi
lea edx, [ebp - 4]
push edx
push 4
push 1
mov edi, 0x5b542d
push edi
call esi
test eax, eax
jne 0x10021043
push 0x10191104
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x1015ae8c
push eax
jmp 0x10020502
lea ecx, [ebp - 4]
push ecx
mov byte [edi], 1
mov edx, dword [ebp - 4]
push edx
push 1
push 0x5b542d
call esi
lea eax, [ebp - 4]
push eax
push 4
push 1
mov edi, 0x5b53e0
push edi
call esi
test eax, eax
je 0x100204f2
lea edx, [ebp - 4]
push edx
mov byte [edi], 1
mov eax, dword [ebp - 4]
push eax
push 1
push edi
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret