Function at 0x403f30
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415e70
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x478010]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], str.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
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x42a8ae
mov dword [ebp - 0x24], str.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
push 0x40
push 0x3000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [0x4794b4]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x403fd2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4