Function at 0x403ef0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415e80
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x479010]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], str.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
mov dword [ebp - 0x14], 0x42fc37
push 0x40
push 0x3000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [0x47a4b4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x403f84
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4