Function at 0x10003de0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov eax, dword [0x1010607c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x10106b04]
mov dword [ebp - 0x48], eax
mov eax, dword [0x10128174]
push ebx
push esi
push edi
mov edx, dword [eax]
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x50], edx
mov eax, dword [edx + 8]
test eax, eax
jle 0x1000406f
mov ecx, dword [edx + 4]
cmp byte [ecx + edi], bl
jge 0x10003e33
inc edi
cmp edi, eax
jl 0x10003e24
jmp 0x1000406f
cmp edi, 0xffffffff
je 0x1000406f
mov ecx, 0x4bc120
imul ebx, edi, 0x6d8
mov esi, 0x5778b0
add ebx, dword [edx]
call ecx
movss xmm3, dword [ebx + 0x34]
push 0
movss dword [ebp - 0x4c], xmm3
movss xmm0, dword [eax + 0x34]
movss xmm1, dword [eax + 0x38]
movss xmm2, dword [eax + 0x3c]
lea eax, [ebp - 0x74]
movss xmm3, dword [ebx + 0x38]
push eax
lea eax, [ebp - 0x78]
movss dword [ebp - 0x44], xmm3
movss xmm3, dword [ebx + 0x3c]
push eax
lea eax, [ebp - 0x34]
movss dword [ebp - 0x38], xmm3
push eax
lea eax, [ebp - 0x10]
movss dword [ebp - 0x10], xmm0
push eax
movss dword [ebp - 0xc], xmm1
movss dword [ebp - 8], xmm2
call esi
movss xmm0, dword [ebp - 0x4c]
lea eax, [ebp - 0x7c]
add esp, 0x14
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x44]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [ebp - 0x38]
push 0
push eax
lea eax, [ebp - 0x80]
movss dword [ebp - 0x14], xmm0
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1c]
push eax
call esi
add esp, 0x14
mov ecx, 0xa0fd08
call fcn.1005f250
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x84]
push eax
call fcn.100108c0
mov dword [ebp - 0x5c], 4
mov esi, dword [eax]
lea eax, [ebp - 0x58]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x60], esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
setne byte [ebp - 0x54]
mov esi, dword [esi]
test eax, eax
je 0x10003f32
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x38]
push ecx
push eax
push dword [ebp - 0x5c]
mov dword [ebp - 0x38], eax
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
movd xmm0, esi
mov ecx, 0xa0fd04
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
divsd xmm0, qword [0x100fda90]
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x44], xmm0
call fcn.1005f250
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x88]
push eax
call fcn.100108c0
mov dword [ebp - 0x6c], 4
mov esi, dword [eax]
lea eax, [ebp - 0x68]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x70], esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
setne byte [ebp - 0x64]
mov esi, dword [esi]
test eax, eax
je 0x10003fa7
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x38]
push ecx
push eax
push dword [ebp - 0x6c]
mov dword [ebp - 0x38], eax
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
xorps xmm0, xmm0
movss xmm2, dword [ebp - 0x28]
cvtsi2ss xmm0, esi
movss xmm1, dword [ebp - 0x20]
xorps xmm3, xmm3
cvtps2pd xmm0, xmm0
subss xmm1, xmm3
divsd xmm0, qword [0x100fda68]
mulss xmm1, xmm1
cvtpd2ps xmm0, xmm0
subss xmm2, xmm0
movss xmm0, dword [ebp - 0x24]
subss xmm0, dword [ebp - 0x44]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.10003980
xorps xmm1, xmm1
movss dword [ebp - 0x38], xmm0
cvtsi2ss xmm1, dword [ebp - 0x48]
comiss xmm1, xmm0
jb 0x1000403b
mov eax, 0x4bc120
call eax
movss xmm1, dword [ebx + 0x34]
ucomiss xmm1, dword [eax + 0x34]
lahf
test ah, 0x44
jnp 0x1000403b
cmp dword [ebx + 0x244], 0x37
je 0x1000403b
cvttss2si eax, dword [ebp - 0x38]
mov esi, 1
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x48], eax
jmp 0x10004041
mov ebx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x50]
inc edi
mov eax, dword [edx + 8]
cmp edi, eax
jge 0x1000406b
mov ecx, dword [edx + 4]
nop
cmp byte [ecx + edi], 0
jge 0x1000405d
inc edi
cmp edi, eax
jl 0x10004050
jmp 0x1000406b
mov ecx, 0x4bc120
cmp edi, 0xffffffff
jne 0x10003e41
test esi, esi
jne 0x10004079
mov dword [0x10109d38], 0x2710
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100ab558
mov esp, ebp
pop ebp
ret