Function at 0x4297e0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push ebx
push 0x40
push 0x3000
push 0x5d
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ebx, eax
mov byte [ebx], 0x55
mov byte [ebx + 1], 0x89
mov byte [ebx + 2], 0xe5
mov byte [ebx + 3], 0x68
mov byte [ebx + 4], 0
mov byte [ebx + 5], 0
mov byte [ebx + 6], 0
mov byte [ebx + 7], 0
mov byte [ebx + 8], 0xe8
mov byte [ebx + 9], 0
mov byte [ebx + 0xa], 0
mov byte [ebx + 0xb], 0
mov byte [ebx + 0xc], 0
mov byte [ebx + 0xd], 0x83
mov byte [ebx + 0xe], 0xc4
mov byte [ebx + 0xf], 4
mov byte [ebx + 0x10], 0xe8
mov byte [ebx + 0x11], 0
mov byte [ebx + 0x12], 0
mov byte [ebx + 0x13], 0
mov byte [ebx + 0x14], 0
mov byte [ebx + 0x15], 0x8b
mov byte [ebx + 0x16], 0x45
mov byte [ebx + 0x17], 8
mov byte [ebx + 0x18], 0x50
mov byte [ebx + 0x19], 0xe8
mov byte [ebx + 0x1a], 0
mov byte [ebx + 0x1b], 0
mov byte [ebx + 0x1c], 0
mov byte [ebx + 0x1d], 0
mov byte [ebx + 0x1e], 0x83
mov byte [ebx + 0x1f], 0xc4
mov byte [ebx + 0x20], 4
mov byte [ebx + 0x21], 0x8b
mov byte [ebx + 0x22], 0x45
mov byte [ebx + 0x23], 0xc
mov byte [ebx + 0x24], 0x50
mov byte [ebx + 0x25], 0xe8
mov byte [ebx + 0x26], 0
mov byte [ebx + 0x27], 0
mov byte [ebx + 0x28], 0
mov byte [ebx + 0x29], 0
mov byte [ebx + 0x2a], 0x83
mov byte [ebx + 0x2b], 0xc4
mov byte [ebx + 0x2c], 4
mov byte [ebx + 0x2d], 0x8b
mov byte [ebx + 0x2e], 0x45
mov byte [ebx + 0x2f], 0x10
mov byte [ebx + 0x30], 0x50
mov byte [ebx + 0x31], 0xe8
mov byte [ebx + 0x32], 0
mov byte [ebx + 0x33], 0
mov byte [ebx + 0x34], 0
mov byte [ebx + 0x35], 0
mov byte [ebx + 0x36], 0x83
mov byte [ebx + 0x37], 0xc4
mov byte [ebx + 0x38], 4
mov byte [ebx + 0x39], 0x8b
mov byte [ebx + 0x3a], 0x45
mov byte [ebx + 0x3b], 0x14
mov byte [ebx + 0x3c], 0x50
mov byte [ebx + 0x3d], 0xe8
mov byte [ebx + 0x3e], 0
mov byte [ebx + 0x3f], 0
mov byte [ebx + 0x40], 0
mov byte [ebx + 0x41], 0
mov byte [ebx + 0x42], 0x83
mov byte [ebx + 0x43], 0xc4
mov byte [ebx + 0x44], 4
mov byte [ebx + 0x45], 0x6a
mov byte [ebx + 0x46], 4
mov byte [ebx + 0x47], 0xe8
mov byte [ebx + 0x48], 0
mov byte [ebx + 0x49], 0
mov byte [ebx + 0x4a], 0
mov byte [ebx + 0x4b], 0
mov byte [ebx + 0x4c], 0x83
mov byte [ebx + 0x4d], 0xc4
mov byte [ebx + 0x4e], 4
mov byte [ebx + 0x4f], 0x6a
mov byte [ebx + 0x50], 0xff
mov byte [ebx + 0x51], 0xe8
mov byte [ebx + 0x52], 0
mov byte [ebx + 0x53], 0
mov byte [ebx + 0x54], 0
mov byte [ebx + 0x55], 0
mov byte [ebx + 0x56], 0x83
mov byte [ebx + 0x57], 0xc4
mov byte [ebx + 0x58], 4
mov byte [ebx + 0x59], 0x5d
mov byte [ebx + 0x5a], 0xc2
mov byte [ebx + 0x5b], 0x10
mov byte [ebx + 0x5c], 0
mov eax, dword [ebp + 8]
push eax
push 4
push ebx
call fcn.00429710
add esp, 0xc
push 0xd
push fcn.0044f750
push 9
push ebx
call fcn.00429770
add esp, 0x10
push 0x15
push fcn.0044f130
push 0x11
push ebx
call fcn.00429770
add esp, 0x10
push 0x1e
push fcn.0044f3d0
push 0x1a
push ebx
call fcn.00429770
add esp, 0x10
push 0x2a
push fcn.0044f3d0
push 0x26
push ebx
call fcn.00429770
add esp, 0x10
push 0x36
push fcn.0044f3d0
push 0x32
push ebx
call fcn.00429770
add esp, 0x10
push 0x42
push fcn.0044f3d0
push 0x3e
push ebx
call fcn.00429770
add esp, 0x10
push 0x4c
push fcn.0044cd40
push 0x48
push ebx
call fcn.00429770
add esp, 0x10
push 0x56
push fcn.00486bc0
push 0x52
push ebx
call fcn.00429770
add esp, 0x10
lea eax, [ebp - 4]
push eax
push 0x10
push 0x5d
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x429a23
mov eax, ebx
jmp 0x429a25
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret