Function at 0x401c75
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
fld dword [0x49ca7c]
fstp dword [ebp - 0xc]
fld dword [0x49ca80]
fstp dword [ebp - 0xc]
fld dword [0x49ca84]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401cb1
fld dword [0x49ca88]
fstp dword [ebp - 0xc]
fld dword [0x49ca8c]
fstp dword [ebp - 0xc]
fld dword [0x49ca90]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401cd5
fld dword [0x49ca94]
fstp dword [ebp - 0xc]
fld dword [0x49ca98]
fstp dword [ebp - 0xc]
fld dword [0x49ca9c]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401cf9
fld dword [0x49caa0]
fstp dword [ebp - 0xc]
fld dword [0x49caa4]
fstp dword [ebp - 0xc]
fld dword [0x49caa8]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401d1d
fld dword [0x49caac]
fstp dword [ebp - 0xc]
fld dword [0x49cab0]
fstp dword [ebp - 0xc]
fld dword [0x49cab4]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401d41
fld dword [0x49cab8]
fstp dword [ebp - 0xc]
fld dword [0x49cabc]
fstp dword [ebp - 0xc]
fld dword [0x49cac0]
fstp dword [ebp - 0x10]
fld dword [0x49cac4]
fstp dword [ebp - 0x10]
fld dword [0x49cac8]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401d77
fld dword [0x49cacc]
fstp dword [ebp - 0x10]
fld dword [0x49cad0]
fstp dword [ebp - 0x10]
fld dword [0x49cad4]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401d9b
fld dword [0x49cad8]
fstp dword [ebp - 0x10]
fld dword [0x49cadc]
fstp dword [ebp - 0x10]
fld dword [0x49cae0]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401dbf
fld dword [0x49cae4]
fstp dword [ebp - 0x10]
fld dword [0x49cae8]
fstp dword [ebp - 0x10]
fld dword [0x49caec]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401de3
fld dword [0x49caf0]
fstp dword [ebp - 0x10]
fld dword [0x49caf4]
fstp dword [ebp - 0x10]
fld dword [0x49caf8]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401e07
fld dword [0x49cafc]
fstp dword [ebp - 0x10]
fld dword [0x49cb00]
fstp dword [ebp - 0x10]
fld dword [0x49cb04]
fstp dword [ebp - 0x14]
fld dword [0x49cb08]
fstp dword [ebp - 0x14]
fld dword [0x49cb0c]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401e3d
fld dword [0x49cb10]
fstp dword [ebp - 0x14]
fld dword [0x49cb14]
fstp dword [ebp - 0x14]
fld dword [0x49cb18]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401e61
fld dword [0x49cb1c]
fstp dword [ebp - 0x14]
fld dword [0x49cb20]
fstp dword [ebp - 0x14]
fld dword [0x49cb24]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401e85
fld dword [0x49cb28]
fstp dword [ebp - 0x14]
fld dword [0x49cb2c]
fstp dword [ebp - 0x14]
fld dword [0x49cb30]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401ea9
fld dword [0x49cb34]
fstp dword [ebp - 0x14]
fld dword [0x49cb38]
fstp dword [ebp - 0x14]
fld dword [0x49cb3c]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401ecd
fld dword [0x49cb40]
fstp dword [ebp - 0x14]
fld dword [0x49cb44]
fstp dword [ebp - 0x14]
fld dword [0x49cb48]
fstp dword [ebp - 0x18]
fld dword [0x49cb4c]
fstp dword [ebp - 0x18]
fld dword [0x49cb50]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f03
fld dword [0x49cb54]
fstp dword [ebp - 0x18]
fld dword [0x49cb58]
fstp dword [ebp - 0x18]
fld dword [0x49cb5c]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f27
fld dword [0x49cb60]
fstp dword [ebp - 0x18]
fld dword [0x49cb64]
fstp dword [ebp - 0x18]
fld dword [0x49cb68]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f4b
fld dword [0x49cb6c]
fstp dword [ebp - 0x18]
fld dword [0x49cb70]
fstp dword [ebp - 0x18]
fld dword [0x49cb74]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f6f
fld dword [0x49cb78]
fstp dword [ebp - 0x18]
fld dword [0x49cb7c]
fstp dword [ebp - 0x18]
fld dword [0x49cb80]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f93
fld dword [0x49cb84]
fstp dword [ebp - 0x18]
fld dword [0x49cb88]
fstp dword [ebp - 0x18]
fld dword [0x49cb8c]
fstp dword [ebp - 0x1c]
fld dword [0x49cb90]
fstp dword [ebp - 0x1c]
fld dword [0x49cb94]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x401fc9
fld dword [0x49cb98]
fstp dword [ebp - 0x1c]
fld dword [0x49cb9c]
fstp dword [ebp - 0x1c]
fld dword [0x49cba0]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x401fed
fld dword [0x49cba4]
fstp dword [ebp - 0x1c]
fld dword [0x49cba8]
fstp dword [ebp - 0x1c]
fld dword [0x49cbac]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x402011
fld dword [0x49cbb0]
fstp dword [ebp - 0x1c]
fld dword [0x49cbb4]
fstp dword [ebp - 0x1c]
fld dword [0x49cbb8]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x402035
fld dword [0x49cbbc]
fstp dword [ebp - 0x1c]
fld dword [0x49cbc0]
fstp dword [ebp - 0x1c]
fld dword [0x49cbc4]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x402059
fld dword [0x49cbc8]
fstp dword [ebp - 0x1c]
fld dword [0x49cbcc]
fstp dword [ebp - 0x1c]
fld dword [0x49cbd0]
fstp dword [ebp - 0x20]
fld dword [0x49cbd4]
fstp dword [ebp - 0x20]
fld dword [0x49cbd8]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x40208f
fld dword [0x49cbdc]
fstp dword [ebp - 0x20]
fld dword [0x49cbe0]
fstp dword [ebp - 0x20]
fld dword [0x49cbe4]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x4020b3
fld dword [0x49cbe8]
fstp dword [ebp - 0x20]
fld dword [0x49cbec]
fstp dword [ebp - 0x20]
fld dword [0x49cbf0]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x4020d7
fld dword [0x49cbf4]
fstp dword [ebp - 0x20]
fld dword [0x49cbf8]
fstp dword [ebp - 0x20]
fld dword [0x49cbfc]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x4020fb
fld dword [0x49cc00]
fstp dword [ebp - 0x20]
fld dword [0x49cc04]
fstp dword [ebp - 0x20]
fld dword [0x49cc08]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x40211f
fld dword [0x49cc0c]
fstp dword [ebp - 0x20]
fld dword [0x49cc10]
fstp dword [ebp - 0x20]
fld dword [0x49cc14]
fstp dword [ebp - 0x24]
fld dword [0x49cc18]
fstp dword [ebp - 0x24]
fld dword [0x49cc1c]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x402155
fld dword [0x49cc20]
fstp dword [ebp - 0x24]
fld dword [0x49cc24]
fstp dword [ebp - 0x24]
fld dword [0x49cc28]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x402179
fld dword [0x49cc2c]
fstp dword [ebp - 0x24]
fld dword [0x49cc30]
fstp dword [ebp - 0x24]
fld dword [0x49cc34]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x40219d
fld dword [0x49cc38]
fstp dword [ebp - 0x24]
fld dword [0x49cc3c]
fstp dword [ebp - 0x24]
fld dword [0x49cc40]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x4021c1
fld dword [0x49cc44]
fstp dword [ebp - 0x24]
fld dword [0x49cc48]
fstp dword [ebp - 0x24]
fld dword [0x49cc4c]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x4021e5
fld dword [0x49cc50]
fstp dword [ebp - 0x24]
fld dword [0x49cc54]
fstp dword [ebp - 0x24]
fld dword [0x49cc58]
fstp dword [ebp - 0x28]
fld dword [0x49cc5c]
fstp dword [ebp - 0x28]
fld dword [0x49cc60]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x40221b
fld dword [0x49cc64]
fstp dword [ebp - 0x28]
fld dword [0x49cc68]
fstp dword [ebp - 0x28]
fld dword [0x49cc6c]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x40223f
fld dword [0x49cc70]
fstp dword [ebp - 0x28]
fld dword [0x49cc74]
fstp dword [ebp - 0x28]
fld dword [0x49cc78]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x402263
fld dword [0x49cc7c]
fstp dword [ebp - 0x28]
fld dword [0x49cc80]
fstp dword [ebp - 0x28]
fld dword [0x49cc84]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x402287
fld dword [0x49cc88]
fstp dword [ebp - 0x28]
fld dword [0x49cc8c]
fstp dword [ebp - 0x28]
fld dword [0x49cc90]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x4022ab
fld dword [0x49cc94]
fstp dword [ebp - 0x28]
fld dword [0x49cc98]
fstp dword [ebp - 0x28]
sub ebx, 0x84
not eax
neg edi
sub esi, 0x40
mov edx, 0x5e
neg ebx
imul edx
dec eax
rcl edi, 0xe4
add eax, 0xa3
inc ebx
rol edi, 0x30
mov eax, 0xf8
sbb edx, 0x3a
dec edx
dec esi
bswap eax
ror esi, 0x93
imul edx
and edx, 0x39
dec esi
imul eax
or esi, 0x10
neg edi
dec edx
inc ebx
and edx, 0xf
ror esi, 0xf9
imul eax
rcl esi, 0xa0
dec esi
rcr eax, 0x14
dec esi
bswap ebx
add ebx, 0x11
sbb ebx, 0xf3
imul ebx
neg edi
inc eax
neg ebx
bswap eax
not esi
ror eax, 0xf7
imul eax
imul eax
bswap eax
ror esi, 0xf
mov ebx, 0x42
bswap edi
sbb ebx, 0x2f
sub esi, 0x35
sbb edi, 0xca
ror esi, 0xe2
not edx
dec edx
mov edi, 0x42
dec ebx
rcl esi, 0x3d
bswap eax
inc eax
dec edi
inc eax
not eax
and edi, 9
imul eax
imul esi
bswap edx
inc esi
neg esi
inc edx
rol edi, 0x80
neg edx
add esi, 0x12
bswap ebx
not ebx
and ebx, 0x83
add edx, 0xf
not edx
bswap edx
imul esi
rcl eax, 0x91
neg edx
rcr edi, 0xa1
not ebx
mov edi, 0x8e
imul esi
ror ebx, 0x76
rol edx, 0x33
dec edx
sbb esi, 0xb7
rcr esi, 0xba
ror ebx, 0x95
rol eax, 0xa2
rcl edx, 0xdc
or edx, 0xee
inc esi
imul esi
sbb edi, 0x51
ror edi, 0x1d
bswap edi
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
nop
leave
ret