Function at 0x42d7e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Resume thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x2d0
push esi
mov esi, ecx
cmp dword [esi + 0x44], 0x10
push edi
lea edi, [esi + 0x30]
mov dword [ebp - 8], esi
mov dword [ebp - 0x18], edi
mov eax, edi
jb 0x42d813
mov eax, dword [edi]
push dword [ebx + 8]
push dword [ebx + 0xc]
push eax
push str.SyringeDebugger::Run:_Running_process_to_debug._cmd____s__.s_
call fcn.0042a9c0
add esp, 0x10
mov ecx, esi
push dword [ebx + 0xc]
push dword [ebx + 8]
call fcn.0042cac0
push 0x244
push str.SyringeDebugger::Run:_Allocating_0x_u_bytes...
call fcn.0042a9c0
mov eax, dword [esi + 8]
add esp, 8
mov dword [ebp - 0x10], eax
test eax, eax
je 0x42dace
push 0x40
push 0x3000
push 0x244
push 0
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test eax, eax
je 0x42dace
mov edx, dword [esi + 0x54]
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0x58]
mov dword [esi + 0x58], ecx
test edx, edx
je 0x42d897
test eax, eax
je 0x42d897
push 0x8000
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push dword [esi + 0x54]
push str.SyringeDebugger::Run:_pAlloc__0x_08X
call fcn.0042a9c0
push str.SyringeDebugger::Run:_Writing_DLL_loader__caller_code...
call fcn.0042a9c0
mov ecx, 0xa
lea edi, [ebp - 0x2d0]
mov esi, str.PQRh
add esp, 0xc
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 8]
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x244
mov ecx, dword [esi + 0x54]
lea eax, [ecx + 0x44]
mov dword [ebp - 0x2cc], eax
mov eax, dword [esi + 0x4c]
mov dword [ebp - 0x2c6], eax
lea eax, [ecx + 0x144]
mov dword [ebp - 0x2bd], eax
mov eax, dword [esi + 0x50]
mov dword [ebp - 0x2b6], eax
lea eax, [ecx + 0x40]
mov dword [ebp - 0x2b1], eax
lea eax, [ebp - 0x2d0]
push eax
push ecx
push dword [esi + 8]
call edi
test eax, eax
je 0x42dad6
push dword [esi + 0x54]
push str.SyringeDebugger::Run:_pcLoadLibrary__0x_08X
call fcn.0042a9c0
mov eax, dword [esi + 0x48]
lea ecx, [esi + 0x14]
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.004043c0
cmp byte [eax], 0
jne 0x42d977
push 0
push 1
push eax
push dword [ebp - 0x10]
mov byte [ebp - 1], 0xcc
push dword [esi + 8]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x42dad6
push 0
push 1
lea eax, [ebp - 1]
push eax
push dword [ebp - 0x10]
push dword [esi + 8]
call edi
test eax, eax
je 0x42dad6
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [esi + 0xc]
mov dword [esi + 0xc], 0
test eax, eax
je 0x42d995
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.SyringeDebugger::Run:_Entering_debug_loop...
mov byte [esi + 0x68], 0
call fcn.0042a9c0
add esp, 4
push 0xffffffffffffffff
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForDebugEvent]
mov eax, dword [ebp - 0x80]
mov edi, 0x10002
dec eax
cmp eax, 8
ja case.0x42d9c0.7
jmp dword [eax*4 + 0x42daf0]
mov eax, dword [ebp - 0x6c]
mov ecx, esi
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x78]
mov dword [ebp - 8], 0
push eax
call fcn.00407060
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00407090
push dword [ebp - 0x74]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
jmp 0x42d9a6
mov eax, dword [ebp - 0x74]
mov ecx, esi
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x18], 0
push eax
call fcn.00407060
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x88]
mov ecx, esi
push eax
call fcn.00407090
push edi
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
jmp 0x42d9a6
lea eax, [ebp - 0x78]
mov ecx, esi
push eax
call fcn.00404430
push edi
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
jmp 0x42d9a6
lea eax, [ebp - 0x80]
mov ecx, esi
push eax
call fcn.0042c2d0
mov edi, eax
push edi
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
jmp 0x42d9a6
lea eax, [ebp - 0x78]
mov ecx, esi
push eax
call fcn.00404430
mov eax, dword [ebp - 0x74]
jmp 0x42da9d
or eax, 0xffffffff
push eax
push eax
push str.SyringeDebugger::Run:_Done_with_exit_code__X___u_.
call fcn.0042a9c0
mov eax, dword [0x441a4c]
add esp, 0xc
test eax, eax
je 0x42dac3
push eax
push 0x43c9c8
call fcn.0040fbdf
add esp, 8
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
sub esp, 0x18
mov ecx, esp
push edi
jmp 0x42dade
sub esp, 0x18
mov ecx, esp
push dword [ebp - 0x18]
call fcn.00404690
mov ecx, 0x306
call fcn.00403c50
lea ecx, [ecx]
imul ebx, edx, 0x42
add byte [edx + ebx*8], cl
inc edx
add bh, al
fld dword [edx]
dec esi
fiadd dword [edx]
mov bl, dl
inc edx
add ah, dh
fld dword [edx]
std
fld dword [edx]
std
fld dword [edx]
lcall 0xcccc, 0xcc0042da
int3