Function at 0x1003fd90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x1013e00c]
xor eax, ebp
mov dword [ebp - 4], eax
movaps xmm0, xmmword [0x10136560]
lea eax, [ebp - 8]
movaps xmmword [0x101895e0], xmm0
movaps xmm0, xmmword [0x101366a0]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
movaps xmmword [0x10189620], xmm0
movaps xmm0, xmmword [0x101366a0]
push edi
movaps xmmword [0x10189660], xmm0
movaps xmm0, xmmword [0x101366a0]
push eax
movaps xmmword [0x101896a0], xmm0
movaps xmm0, xmmword [0x101366a0]
push 0x40
movaps xmmword [0x101896e0], xmm0
movaps xmm0, xmmword [0x101366a0]
push 4
push 0x4d7530
mov dword [0x101895f8], 0
mov word [0x101895fc], 0
mov dword [0x101895dc], 0xc942
mov dword [0x101895f0], 0x43980000
mov dword [0x101895f4], 0x43a40000
mov byte [0x101895fe], 0
mov dword [0x10189638], 0
mov word [0x1018963c], 0
mov dword [0x1018961c], 0xc93f
mov dword [0x10189630], 0x43150000
mov dword [0x10189634], 0x42080000
mov byte [0x1018963e], 0
mov dword [0x10189678], 0
mov word [0x1018967c], 0
mov dword [0x1018965c], 0xc93f
mov dword [0x10189670], 0x43150000
mov dword [0x10189674], 0x42080000
mov byte [0x1018967e], 0
mov dword [0x101896b8], 0
mov word [0x101896bc], 0
mov dword [0x1018969c], 0xc93f
mov dword [0x101896b0], 0x43150000
mov dword [0x101896b4], 0x42080000
mov byte [0x101896be], 0
mov dword [0x101896f8], 0
mov word [0x101896fc], 0
mov dword [0x101896dc], 0xc93f
mov dword [0x101896f0], 0x43150000
mov dword [0x101896f4], 0x42080000
mov byte [0x101896fe], 0
mov dword [0x10189738], 0
mov word [0x1018973c], 0
mov dword [0x1018971c], 0xc93f
movaps xmmword [0x10189720], xmm0
mov dword [0x10189730], 0x43150000
mov dword [0x10189734], 0x42080000
mov byte [0x1018973e], 0
mov dword [ebp - 8], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1003ff93
mov eax, 0x4d7530
mov dword [eax], 0xc942
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x4d7530
call esi
test eax, eax
jne 0x1003ff95
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4d7564
call esi
test eax, eax
je 0x1003ffd5
mov eax, 0x4d7564
mov dword [eax], 0xc942
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x4d7564
call esi
test eax, eax
jne 0x1003ffd7
call edi
push 0x10040100
push 0x4d6c3e
push 0xe8
call fcn.100c88d0
movsd xmm0, qword [0x10135390]
lea eax, [ebp - 8]
add esp, 0xc
movsd qword [ebp - 0x14], xmm0
mov dword [ebp - 8], 0
push eax
push 0x40
push 8
push 0xd25508
call esi
test eax, eax
je 0x1004003c
mov eax, dword [ebp - 0x14]
mov ecx, 0xd25508
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + 4], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 8
push ecx
call esi
test eax, eax
jne 0x1004003e
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4d6c73
call esi
test eax, eax
je 0x1004007e
mov eax, 0x4d6c73
mov dword [eax], 0
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x4d6c73
call esi
test eax, eax
jne 0x10040080
call edi
lea eax, [ebp - 8]
mov dword [ebp - 8], 0
push eax
push 0x40
push 1
push 0x402106
xor bl, bl
call esi
test eax, eax
je 0x100400be
mov eax, 0x402106
mov byte [eax], bl
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 1
push 0x402106
call esi
test eax, eax
jne 0x100400c0
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x56faed
call esi
lea eax, [ebp - 8]
mov dword [0x56faed], 0xaf
push eax
push dword [ebp - 8]
push 4
push 0x56faed
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100d7712
mov esp, ebp
pop ebp
ret