Function at 0x402340
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4140a0
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x465148]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x41720f
mov dword [ebp - 0x20], str.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
push 0x40
push 0x3000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [0x4662c4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x4023eb
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4