00839000 > $ 6A 40 PUSH 40 ; /Protect = PAGE_EXECUTE_READWRITE 00839002 . 68 00100000 PUSH 1000 ; |AllocationType = MEM_COMMIT 00839007 . 68 00003800 PUSH 380000 ; |Size = 380000 (3670016.) 0083900C . 6A 00 PUSH 0 ; |Address = NULL 0083900E . E8 3E0AFD7B CALL kernel32.VirtualAlloc ; \VirtualAlloc 00839013 . A3 FCEF8300 MOV DWORD PTR DS:[83EFFC],EAX 00839018 . 68 00003800 PUSH 380000 ; /n = 380000 (3670016.) 0083901D . 68 00004000 PUSH VAMC.00400000 ; |src = VAMC.00400000 00839022 . FF35 FCEF8300 PUSH DWORD PTR DS:[83EFFC] ; |dest = NULL 00839028 . E8 43DF4077 CALL msvcrt.memcpy ; \memcpy 0083902D .- E9 2529EEFF JMP VAMC.0071B957 00839032 . 81F9 00004000 CMP ECX,VAMC.00400000 00839038 . 72 13 JB SHORT VAMC.0083904D 0083903A . 81F9 00007800 CMP ECX,VAMC.00780000 00839040 . 77 0B JA SHORT VAMC.0083904D 00839042 . B8 FCEF4300 MOV EAX,VAMC.0043EFFC 00839047 . 81C1 FCEF8300 ADD ECX,VAMC.0083EFFC 0083904D > 8B45 10 MOV EAX,DWORD PTR SS:[EBP+10] 00839050 . 56 PUSH ESI 00839051 . 57 PUSH EDI 00839052 .- E9 16C2C2FF JMP VAMC.0046526D