Function at 0x403ee0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415e70
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x479010]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x42d9f7
mov dword [ebp - 0x20], str.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
push 0x40
push 0x3000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [0x47a4b4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x403f74
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4