Function at 0x1005feb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
call fcn.1009bd40
test eax, eax
jne 0x1005feca
push eax
call fcn.10096aa0
add esp, 4
call fcn.1009c5c0
cmp byte [0x101d2bbd], 0
mov esi, eax
je 0x10060198
push 0x5f03d8
call fcn.100173c0
mov ecx, dword fs:[0x2c]
add esp, 4
mov edx, dword [0x101d86e4]
mov esi, eax
mov edx, dword [ecx + edx*4]
mov ecx, dword [0x101d95e4]
cmp ecx, dword [edx + 4]
jg 0x10060279
lea eax, [ebp - 0x10]
mov dword [ebp - 0x14], 1
push eax
push 0x40
push 1
push esi
mov dword [ebp - 0x18], esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
setne byte [ebp - 0xc]
mov bl, byte [esi]
test eax, eax
je 0x1005ff4b
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 8]
push ecx
push eax
push dword [ebp - 0x14]
mov dword [ebp - 8], eax
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test bl, bl
jne 0x1005ff77
mov bl, byte [0x101d2bbc]
test bl, bl
je 0x1005ff7d
push 0
call fcn.10019310
add esp, 4
test eax, eax
je 0x1005ff77
cmp byte [0x101d2bbc], 0
setne cl
mov byte [eax + 0xdf], cl
mov bl, byte [0x101d2bbc]
cmp byte [0x101d2bbe], bl
je 0x10060018
call fcn.1009c5c0
push 1
mov byte [eax + 0x58], bl
cmp byte [0x101d2bbc], 0
je 0x1005ffbe
push 0xc3
push 0x580d20
call fcn.10018d80
push 1
push 5
push 0x49272f
call fcn.10018c40
add esp, 0x18
jmp 0x1005ffe0
push 0x53
push 0x580d20
call fcn.10018d80
push 1
push 5
push 0x10184f5c
push 0x49272f
call fcn.10018ef0
add esp, 0x1c
call fcn.10019320
mov eax, dword [0x101c6ef0]
push 0
mov dword [eax + 8], 0
mov eax, dword [0x101c6ef0]
mov dword [eax + 0xc], 0
call fcn.10019310
add esp, 4
mov ecx, eax
call fcn.10019300
mov al, byte [0x101d2bbc]
mov byte [0x101d2bbe], al
call fcn.10017c40
fstp dword [ebp - 8]
call fcn.10017c60
movss xmm0, dword [0x101c3174]
fstp dword [ebp - 4]
ucomiss xmm0, dword [ebp - 4]
lahf
test ah, 0x44
jnp 0x10060107
movss xmm0, dword [0x101c3178]
ucomiss xmm0, dword [ebp - 8]
lahf
test ah, 0x44
jnp 0x10060107
call fcn.100778a0
cmp dword [0x101c3110], 0
jne 0x10060069
call fcn.1011d500
jmp 0x1006006e
call fcn.1011fcb0
call fcn.1009d820
movss xmm6, dword [ebp - 4]
movss xmm5, dword [ebp - 8]
movaps xmm3, xmm6
divss xmm3, dword [0x10184f74]
movaps xmm1, xmm5
movss dword [0x101c3174], xmm6
divss xmm1, dword [0x10184f70]
movaps xmm0, xmm3
movss dword [0x101c3178], xmm5
mulss xmm0, dword [0x10184f64]
movaps xmm4, xmm3
mulss xmm4, dword [0x101846a8]
movaps xmm2, xmm1
mulss xmm2, dword [0x101846a8]
mulss xmm1, dword [0x101846a4]
movss dword [eax + 0x4c], xmm0
movaps xmm0, xmm3
mulss xmm0, dword [0x10184f68]
mulss xmm3, dword [0x10184f6c]
movss dword [eax + 0x3c], xmm4
movss dword [eax + 0x40], xmm2
movss dword [eax + 0x50], xmm1
movss dword [eax + 0x74], xmm0
movss dword [eax + 0x6c], xmm3
movss dword [eax + 0x54], xmm4
movss dword [eax + 0x58], xmm2
call fcn.10121c30
cmp dword [0x101c3110], 0
jne 0x1006011c
call fcn.1011d600
jmp 0x10060121
call fcn.1011ff30
call fcn.100aafa0
mov ecx, dword [0x101d0d74]
test ecx, ecx
je 0x10060135
mov eax, dword [ecx]
call dword [eax + 8]
call fcn.10098440
call fcn.100ad5e0
cmp dword [0x101c3110], 0
jne 0x10060155
call fcn.1009bf20
push eax
call fcn.1011d680
jmp 0x10060160
call fcn.1009bf20
push eax
call fcn.1011ffb0
add esp, 4
call fcn.10077470
test al, al
je 0x10060271
call fcn.100778a0
cmp dword [0x101c3110], 0
jne 0x1006018b
call fcn.1011d500
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.1011fcb0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [0x101c6ee4]
mov byte [0x101d2bbd], 1
mov eax, dword [eax + 0x1c]
push dword [eax]
call fcn.10121930
add esp, 4
cmp dword [0x101c3110], 0
jne 0x100601c7
push dword [ebp + 8]
call fcn.1011d390
add esp, 4
jmp 0x100601f7
mov eax, dword [ebp + 8]
lea edx, [ebp + 8]
push edx
push 0x10184f08
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp + 8]
lea edx, [ebp - 8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa0]
push dword [ebp - 8]
push dword [ebp + 8]
call fcn.1011f990
add esp, 8
call fcn.10121710
push ecx
mov dword [esp], 0x3f933333
push 0x10184f18
call fcn.10017820
add esp, 4
push eax
push str.text
call fcn.10077580
add esp, 8
mov dword [esi + 0x4c], eax
mov dword [esp], 0x40000000
push str.CheatMenuIII_fonts_title.ttf
call fcn.10017820
add esp, 4
push eax
push str.title
call fcn.10077580
or dword [esi], 2
add esp, 0xc
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov eax, dword [0x101c6ee4]
push 0x10060330
push 0xfffffffffffffffc
mov eax, dword [eax + 0x1c]
push dword [eax]
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [0x101d2bac], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x101d95e4
call fcn.10128100
add esp, 4
cmp dword [0x101d95e4], 0xffffffff
jne 0x1005ff0f
mov ecx, 0x101d95d8
mov dword [0x101d95d8], 0x101b2fcc
mov dword [0x101d95e0], 0
mov dword [0x101d95dc], 0
call fcn.100189c0
push 0x101d95e4
call fcn.101280b6
add esp, 4
jmp 0x1005ff0f