Function at 0x100365e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x1018b06c]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x1017f240]
lea eax, [ebp - 8]
movups xmmword [0x101d64e8], xmm0
push ebx
movaps xmm0, xmmword [0x1017f380]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
movups xmmword [0x101d6528], xmm0
push edi
movaps xmm0, xmmword [0x1017f380]
movups xmmword [0x101d6568], xmm0
push eax
movaps xmm0, xmmword [0x1017f380]
movups xmmword [0x101d65a8], xmm0
push 0x40
movaps xmm0, xmmword [0x1017f380]
movups xmmword [0x101d65e8], xmm0
push 4
movaps xmm0, xmmword [0x1017f380]
push 0x4d7530
mov dword [0x101d6500], 0
mov word [0x101d6504], 0
mov dword [0x101d64e4], 0xc942
mov dword [0x101d64f8], 0x43980000
mov dword [0x101d64fc], 0x43a40000
mov byte [0x101d6506], 0
mov dword [0x101d6540], 0
mov word [0x101d6544], 0
mov dword [0x101d6524], 0xc93f
mov dword [0x101d6538], 0x43150000
mov dword [0x101d653c], 0x42080000
mov byte [0x101d6546], 0
mov dword [0x101d6580], 0
mov word [0x101d6584], 0
mov dword [0x101d6564], 0xc93f
mov dword [0x101d6578], 0x43150000
mov dword [0x101d657c], 0x42080000
mov byte [0x101d6586], 0
mov dword [0x101d65c0], 0
mov word [0x101d65c4], 0
mov dword [0x101d65a4], 0xc93f
mov dword [0x101d65b8], 0x43150000
mov dword [0x101d65bc], 0x42080000
mov byte [0x101d65c6], 0
mov dword [0x101d6600], 0
mov word [0x101d6604], 0
mov dword [0x101d65e4], 0xc93f
mov dword [0x101d65f8], 0x43150000
mov dword [0x101d65fc], 0x42080000
mov byte [0x101d6606], 0
mov dword [0x101d6640], 0
mov word [0x101d6644], 0
mov dword [0x101d6624], 0xc93f
movups xmmword [0x101d6628], xmm0
mov dword [0x101d6638], 0x43150000
mov dword [0x101d663c], 0x42080000
mov byte [0x101d6646], 0
mov dword [ebp - 8], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x100367e3
mov eax, 0x4d7530
mov dword [eax], 0xc942
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x4d7530
call esi
test eax, eax
jne 0x100367e5
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4d7564
call esi
test eax, eax
je 0x10036825
mov eax, 0x4d7564
mov dword [eax], 0xc942
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x4d7564
call esi
test eax, eax
jne 0x10036827
call edi
push 0x10036950
push 0x4d6c3e
push 0xe8
call fcn.100b1680
movsd xmm0, qword [0x1017e390]
lea eax, [ebp - 8]
add esp, 0xc
movsd qword [ebp - 0x14], xmm0
mov dword [ebp - 8], 0
push eax
push 0x40
push 8
push 0xd25508
call esi
test eax, eax
je 0x1003688c
mov eax, dword [ebp - 0x14]
mov ecx, 0xd25508
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 8
push ecx
call esi
test eax, eax
jne 0x1003688e
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4d6c73
call esi
test eax, eax
je 0x100368ce
mov eax, 0x4d6c73
mov dword [eax], 0
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x4d6c73
call esi
test eax, eax
jne 0x100368d0
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x402106
xor bl, bl
call esi
test eax, eax
je 0x1003690e
mov eax, 0x402106
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x402106
call esi
test eax, eax
jne 0x10036910
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x56faed
call esi
lea eax, [ebp - 8]
mov dword [0x56faed], 0xaf
push eax
push dword [ebp - 8]
push 4
push 0x56faed
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100d52b0
mov esp, ebp
pop ebp
ret