Function at 0x10037350
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x1013f040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0xe8c240], 2
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x100373bd
lea eax, [ebp - 8]
mov dword [ebp - 0xc], 0x44108000
push eax
push 0x40
push 4
push 0xd461a4
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100373bb
mov eax, dword [ebp - 0xc]
mov dword [0xd461a4], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov dword [ebp - 0x10], 0
push 4
push 0xd461a4
call esi
test eax, eax
jne 0x100373bd
call edi
cmp dword [0xe8c240], 3
jne 0x10037420
lea eax, [ebp - 8]
mov dword [0x1014ff68], 0x68
push eax
push 0x40
push 4
push 0xd461a4
mov dword [0x1014ff64], 0xcc
mov dword [ebp - 0x10], 0x44434000
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x1003741e
mov eax, dword [ebp - 0x10]
mov dword [0xd461a4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0xd461a4
call esi
test eax, eax
jne 0x10037420
call edi
cmp dword [0xe8c240], 4
jne 0x10037479
lea eax, [ebp - 8]
mov dword [0x1014ff68], 0x8a
push eax
push 0x40
push 4
push 0xd461a4
mov dword [ebp - 0x10], 0x44108000
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x10037477
mov eax, dword [ebp - 0x10]
mov dword [0xd461a4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0xd461a4
call esi
test eax, eax
jne 0x10037479
call edi
cmp dword [0xe8c240], 5
jne 0x100374dc
lea eax, [ebp - 8]
mov dword [0x1014ff68], 0x26
push eax
push 0x40
push 4
push 0xd461a4
mov dword [0x1014ff64], 0xffffffcc
mov dword [ebp - 0x10], 0x44034000
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100374da
mov eax, dword [ebp - 0x10]
mov dword [0xd461a4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0xd461a4
call esi
test eax, eax
jne 0x100374dc
call edi
cmp dword [0xe8c240], 6
jne 0x1003753f
lea eax, [ebp - 8]
mov dword [0x1014ff68], 0x5a
push eax
push 0x40
push 4
push 0xd461a4
mov dword [0x1014ff64], 0xffffffcc
mov dword [ebp - 0x10], 0x44034000
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x1003753d
mov eax, dword [ebp - 0x10]
mov dword [0xd461a4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0xd461a4
call esi
test eax, eax
jne 0x1003753f
call edi
cmp dword [0xe8c240], 7
jne 0x100375a2
lea eax, [ebp - 8]
mov dword [0x1014ff68], 0x75
push eax
push 0x40
push 4
push 0xd461a4
mov dword [0x1014ff64], 0x2a
mov dword [ebp - 0x10], 0x441ac000
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x100375a0
mov eax, dword [ebp - 0x10]
mov dword [0xd461a4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0xd461a4
call esi
test eax, eax
jne 0x100375a2
call edi
cmp dword [0xe8c240], 8
jne 0x10037605
lea eax, [ebp - 8]
mov dword [0x1014ff68], 0xc6
push eax
push 0x40
push 4
push 0xd461a4
mov dword [0x1014ff64], 0x3b
mov dword [ebp - 0x10], 0x441f4000
mov dword [ebp - 8], 0
call esi
test eax, eax
je 0x10037603
mov eax, dword [ebp - 0x10]
mov dword [0xd461a4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0xd461a4
call esi
test eax, eax
jne 0x10037605
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1008eacb
mov esp, ebp
pop ebp
ret