Function at 0x402f90
Capabilities:
Allocate or change rwx memory
Check for software breakpoints
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd8
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x14], edi
test edi, edi
je case.default.0x403126
call fcn.00403380
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 5
mov dword [ebp - 0x24], eax
mov ecx, edi
call fcn.00402f20
cmp byte [edi], 0xeb
je case.default.0x403126
xor ebx, ebx
mov byte [ebp - 0x1c], 0xe9
mov byte [ebp - 5], bl
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
lea edx, [ebp - 0xc]
call fcn.00404de0
add esp, 4
test al, al
je case.default.0x403126
cmp byte [ebp - 5], 0
je 0x403006
mov cl, byte [edi]
cmp cl, 0xcc
je 0x403006
xor edx, edx
movzx eax, al
cmp cl, 0x90
cmovne eax, edx
mov cl, byte [edi]
cmp cl, 0xc3
je 0x403012
cmp cl, 0xc2
jne 0x403016
mov byte [ebp - 5], 1
test al, al
je case.default.0x403126
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x40303d
cmp eax, 1
je 0x40303d
cmp eax, 2
je 0x40303d
cmp eax, 4
je 0x40303d
cmp eax, 3
jne case.default.0x403126
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x60]
push esi
add eax, ebx
push edi
push eax
call fcn.0043ae40
add ebx, esi
add esp, 0xc
add edi, esi
cmp ebx, 5
jb 0x402fd5
cmp ebx, 0x30
jg case.default.0x403126
mov esi, dword [ebp - 0x14]
mov ecx, esi
call fcn.00402aa0
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x403090
mov ecx, esi
call fcn.00402c10
mov ecx, esi
call fcn.00402aa0
mov dword [ebp - 0x10], eax
test eax, eax
je case.default.0x403126
movups xmm0, xmmword [ebp - 0x60]
mov ecx, dword [ebp + 0xc]
xor edi, edi
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd0], 0
mov dword [ecx], eax
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0x74], xmm0
movups xmm0, xmmword [ebp - 0x50]
movups xmmword [ebp - 0x84], xmm0
movups xmm0, xmmword [ebp - 0x40]
movups xmmword [ebp - 0x94], xmm0
test ebx, ebx
jle 0x4031ae
nop dword [eax]
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x14]
add eax, edi
push ecx
lea edx, [ebp - 0xc]
mov ecx, eax
call fcn.00404de0
add esp, 4
test al, al
je case.default.0x403126
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x40311d
cmp eax, 1
je 0x40311d
cmp eax, 2
je 0x40311d
cmp eax, 4
je switch.0x00403126
cmp eax, 3
jne case.default.0x403126
cmp eax, 4
ja case.default.0x403126
jmp dword [eax*4 + 0x403360]
mov eax, 2
jmp 0x403195
mov eax, 3
jmp 0x403195
cmp byte [ebp + edi - 0x60], 0xeb
jne case.default.0x403126
cmp dword [ebp - 0xc], 2
jne case.default.0x403126
cmp ebx, 0x2d
jg case.default.0x403126
mov eax, ebx
mov byte [ebp + edi - 0x60], 0xe9
sub eax, edi
sub eax, 2
push eax
lea eax, [ebp - 0x5e]
add eax, edi
push eax
lea eax, [ebp - 0x5b]
add eax, edi
push eax
call fcn.00439180
movsx eax, byte [ebp + edi - 0x5f]
add esp, 0xc
sub eax, 3
mov dword [ebp - 0xc], 5
mov dword [ebp + edi - 0x5f], eax
add ebx, 3
mov eax, 1
add eax, edi
lea ecx, [ebp - 0x60]
add ecx, eax
mov eax, esi
sub eax, dword [ebp - 0x10]
add dword [ecx], eax
add edi, dword [ebp - 0xc]
cmp edi, ebx
jl 0x4030e0
mov edi, dword [ebp - 0x10]
lea eax, [ebp - 0x60]
push ebx
push eax
push edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0xd0], edi
call fcn.0043ae40
mov ecx, dword [ebp - 0x10]
lea eax, [esi - 5]
add edi, ebx
add esp, 0xc
sub ebx, edi
add eax, ebx
mov dword [ebp - 0x1b], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], eax
mov al, byte [ebp - 0x18]
mov byte [edi + 4], al
add edi, 5
mov eax, 0x405d70
mov dword [ebp - 0xcc], edi
sub eax, edi
sub eax, 5
mov dword [ebp - 0x1b], eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], eax
mov al, byte [ebp - 0x18]
mov byte [edi + 4], al
mov eax, edi
sub eax, ecx
add eax, 5
push eax
push ecx
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
sub edi, esi
sub edi, 5
mov dword [ebp - 0x1b], edi
call fcn.00402a70
mov ecx, eax
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
xor edx, edx
mov dword [ebp - 0x20], 0
lea eax, [esi + 4]
mov dword [ebp - 0x2c], 0
div ecx
xor edx, edx
mov ebx, eax
mov eax, esi
div ecx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push esi
call edi
test eax, eax
je case.default.0x403126
cmp dword [ebp - 0xc], ebx
je 0x403288
lea eax, [ebp - 0x2c]
push eax
push 0x40
push 1
lea eax, [esi + 4]
push eax
call edi
test eax, eax
jne 0x403288
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x20]
push 1
push esi
call edi
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
xor bl, bl
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
lea eax, [ebp - 0x64]
push eax
push 5
lea eax, [ebp - 0x1c]
push eax
push esi
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x4032c1
mov eax, dword [ebp + 0xc]
mov bl, 1
push 5
push esi
push dword [ebp - 0x24]
mov dword [eax], 0
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x14]
je 0x4032e5
mov eax, dword [ebp - 0x2c]
cmp eax, 0x40
je 0x4032e5
cmp eax, 0x80
je 0x4032e5
lea ecx, [ebp - 0x30]
push ecx
push eax
push 1
lea eax, [esi + 4]
push eax
call edi
mov eax, dword [ebp - 0x20]
cmp eax, 0x40
je 0x4032fe
cmp eax, 0x80
je 0x4032fe
lea ecx, [ebp - 0x30]
push ecx
push eax
push 1
push esi
call edi
test bl, bl
je 0x403354
push 0x475d10
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00404460
mov ecx, dword [ebp - 0x28]
movups xmm0, xmmword [ebp - 0xd4]
push 0x475d10
movups xmmword [ecx + 0x14], xmm0
movups xmm0, xmmword [ebp - 0x74]
movups xmmword [ecx + 0x24], xmm0
movups xmm0, xmmword [ebp - 0x84]
movups xmmword [ecx + 0x34], xmm0
movups xmm0, xmmword [ebp - 0x94]
movups xmmword [ecx + 0x44], xmm0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret