Function at 0x1003e980
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10057365
mov eax, dword fs:[0]
push eax
sub esp, 0x18
mov eax, dword [0x10087040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x1003e960
sub eax, 0x10a8365c
mov byte [ebp - 0x24], 0xe9
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10a83657
call esi
mov edi, dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
test eax, eax
je 0x1003ea0a
mov eax, dword [ebp - 0x24]
mov ecx, 0x10a83657
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push ecx
call esi
test eax, eax
je 0x1003ea0a
push 5
push 0x10a83657
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
mov eax, 0x1003d300
mov byte [ebp - 0x24], 0xe9
sub eax, 0x10ab3916
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10ab3911
call esi
test eax, eax
je 0x1003ea5e
mov eax, dword [ebp - 0x24]
mov ecx, 0x10ab3911
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push ecx
call esi
test eax, eax
je 0x1003ea5e
push 5
push 0x10ab3911
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
mov eax, 0x1003d380
mov byte [ebp - 0x24], 0xe9
sub eax, 0x10ab3e3a
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10ab3e35
call esi
test eax, eax
je 0x1003eab2
mov eax, dword [ebp - 0x24]
mov ecx, 0x10ab3e35
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push ecx
call esi
test eax, eax
je 0x1003eab2
push 5
push 0x10ab3e35
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
mov eax, 0x1003d370
mov byte [ebp - 0x24], 0xe9
sub eax, 0x10a7fd75
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10a7fd70
call esi
test eax, eax
je 0x1003eb06
mov eax, dword [ebp - 0x24]
mov ecx, 0x10a7fd70
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push ecx
call esi
test eax, eax
je 0x1003eb06
push 5
push 0x10a7fd70
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
mov eax, 0x1003e410
mov byte [ebp - 0x24], 0xe9
sub eax, 0x10a80009
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x10a80004
call esi
test eax, eax
je 0x1003eb5a
mov eax, dword [ebp - 0x24]
mov ecx, 0x10a80004
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push ecx
call esi
test eax, eax
je 0x1003eb5a
push 5
push 0x10a80004
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
mov edx, 0x1003e7b0
mov ecx, 0x10bf8d48
call fcn.10004260
push 4
call fcn.10052796
mov dword [ebp - 0x14], eax
mov dword [eax], 0x1003e7c0
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0x14
push ecx
push 0
push eax
push 0x1003ffb0
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x1c
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1003ebfb
mov dword [ebp - 4], 0x15
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1003ebf3
push ecx
push eax
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
jne 0x1003ebf3
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
movlpd qword [ebp - 0x1c], xmm0
push 0x5e
movups xmmword [ecx], xmm0
push str.No_Match_FoundCould_not_resolve_Reloaded_master_server_IP.Please_refresh_and_try_again.
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.100044b0
call fcn.1003db60
add esp, 0x18
cmp dword [ebp - 0x18], 0
je 0x1003ec0a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x18], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10052757
mov esp, ebp
pop ebp
ret