Function at 0x402a10
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413fa0
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x463090]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], str.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
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x41a532
push 0x40
push 0x3000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [0x4651f0]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x402aa4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4