Function at 0x429a30
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push ebx
push 0x40
push 0x3000
push 0x65
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ebx, eax
mov byte [ebx], 0x55
mov byte [ebx + 1], 0x89
mov byte [ebx + 2], 0xe5
mov byte [ebx + 3], 0x68
mov byte [ebx + 4], 0
mov byte [ebx + 5], 0
mov byte [ebx + 6], 0
mov byte [ebx + 7], 0
mov byte [ebx + 8], 0xe8
mov byte [ebx + 9], 0
mov byte [ebx + 0xa], 0
mov byte [ebx + 0xb], 0
mov byte [ebx + 0xc], 0
mov byte [ebx + 0xd], 0x83
mov byte [ebx + 0xe], 0xc4
mov byte [ebx + 0xf], 4
mov byte [ebx + 0x10], 0x68
mov byte [ebx + 0x11], 0
mov byte [ebx + 0x12], 0
mov byte [ebx + 0x13], 0
mov byte [ebx + 0x14], 0
mov byte [ebx + 0x15], 0xe8
mov byte [ebx + 0x16], 0
mov byte [ebx + 0x17], 0
mov byte [ebx + 0x18], 0
mov byte [ebx + 0x19], 0
mov byte [ebx + 0x1a], 0x83
mov byte [ebx + 0x1b], 0xc4
mov byte [ebx + 0x1c], 4
mov byte [ebx + 0x1d], 0x8b
mov byte [ebx + 0x1e], 0x45
mov byte [ebx + 0x1f], 8
mov byte [ebx + 0x20], 0x50
mov byte [ebx + 0x21], 0xe8
mov byte [ebx + 0x22], 0
mov byte [ebx + 0x23], 0
mov byte [ebx + 0x24], 0
mov byte [ebx + 0x25], 0
mov byte [ebx + 0x26], 0x83
mov byte [ebx + 0x27], 0xc4
mov byte [ebx + 0x28], 4
mov byte [ebx + 0x29], 0x8b
mov byte [ebx + 0x2a], 0x45
mov byte [ebx + 0x2b], 0xc
mov byte [ebx + 0x2c], 0x50
mov byte [ebx + 0x2d], 0xe8
mov byte [ebx + 0x2e], 0
mov byte [ebx + 0x2f], 0
mov byte [ebx + 0x30], 0
mov byte [ebx + 0x31], 0
mov byte [ebx + 0x32], 0x83
mov byte [ebx + 0x33], 0xc4
mov byte [ebx + 0x34], 4
mov byte [ebx + 0x35], 0x8b
mov byte [ebx + 0x36], 0x45
mov byte [ebx + 0x37], 0x10
mov byte [ebx + 0x38], 0x50
mov byte [ebx + 0x39], 0xe8
mov byte [ebx + 0x3a], 0
mov byte [ebx + 0x3b], 0
mov byte [ebx + 0x3c], 0
mov byte [ebx + 0x3d], 0
mov byte [ebx + 0x3e], 0x83
mov byte [ebx + 0x3f], 0xc4
mov byte [ebx + 0x40], 4
mov byte [ebx + 0x41], 0x8b
mov byte [ebx + 0x42], 0x45
mov byte [ebx + 0x43], 0x14
mov byte [ebx + 0x44], 0x50
mov byte [ebx + 0x45], 0xe8
mov byte [ebx + 0x46], 0
mov byte [ebx + 0x47], 0
mov byte [ebx + 0x48], 0
mov byte [ebx + 0x49], 0
mov byte [ebx + 0x4a], 0x83
mov byte [ebx + 0x4b], 0xc4
mov byte [ebx + 0x4c], 4
mov byte [ebx + 0x4d], 0x6a
mov byte [ebx + 0x4e], 4
mov byte [ebx + 0x4f], 0xe8
mov byte [ebx + 0x50], 0
mov byte [ebx + 0x51], 0
mov byte [ebx + 0x52], 0
mov byte [ebx + 0x53], 0
mov byte [ebx + 0x54], 0x83
mov byte [ebx + 0x55], 0xc4
mov byte [ebx + 0x56], 4
mov byte [ebx + 0x57], 0x6a
mov byte [ebx + 0x58], 0xff
mov byte [ebx + 0x59], 0xe8
mov byte [ebx + 0x5a], 0
mov byte [ebx + 0x5b], 0
mov byte [ebx + 0x5c], 0
mov byte [ebx + 0x5d], 0
mov byte [ebx + 0x5e], 0x83
mov byte [ebx + 0x5f], 0xc4
mov byte [ebx + 0x60], 4
mov byte [ebx + 0x61], 0x5d
mov byte [ebx + 0x62], 0xc2
mov byte [ebx + 0x63], 0x10
mov byte [ebx + 0x64], 0
mov eax, dword [ebp + 8]
push eax
push 4
push ebx
call fcn.00429710
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
push eax
push 0x11
push ebx
call fcn.00429710
add esp, 0xc
push 0xd
push fcn.0044f750
push 9
push ebx
call fcn.00429770
add esp, 0x10
push 0x1a
push 0x451dc0
push 0x16
push ebx
call fcn.00429770
add esp, 0x10
push 0x26
push fcn.0044f3d0
push 0x22
push ebx
call fcn.00429770
add esp, 0x10
push 0x32
push fcn.0044f3d0
push 0x2e
push ebx
call fcn.00429770
add esp, 0x10
push 0x3e
push fcn.0044f3d0
push 0x3a
push ebx
call fcn.00429770
add esp, 0x10
push 0x4a
push fcn.0044f3d0
push 0x46
push ebx
call fcn.00429770
add esp, 0x10
push 0x54
push fcn.0044d020
push 0x50
push ebx
call fcn.00429770
add esp, 0x10
push 0x5e
push fcn.00486bc0
push 0x5a
push ebx
call fcn.00429770
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x10
push 0x65
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x429ca5
mov eax, ebx
jmp 0x429ca7
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret