Function at 0x100b2850
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x874108
push edi
mov ecx, 0x1025e338
mov dword [ebp - 8], eax
mov dword [ebp - 4], ecx
push ebx
nop
mov edi, dword [ecx - 4]
lea ebx, [eax - 0xd]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0xc]
mov dword [ebx], edi
push eax
push dword [ebp - 0xc]
push 4
push ebx
call esi
mov edi, dword [ebp - 4]
lea eax, [ebp - 0x10]
mov ebx, dword [ebp - 8]
push eax
push 0x40
mov edi, dword [edi]
push 4
push ebx
call esi
lea eax, [ebp - 0x10]
mov dword [ebx], edi
push eax
push dword [ebp - 0x10]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
add ebx, 0xc3
mov edi, dword [eax + 0x34]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x14]
mov dword [ebx], edi
push eax
push dword [ebp - 0x14]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 8]
add ebx, 0xd0
mov edi, dword [eax + 0x38]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x18]
mov dword [ebx], edi
push eax
push dword [ebp - 0x18]
push 4
push ebx
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add ecx, 8
add eax, 0x1a
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, 0x1025e370
jl 0x100b2870
mov eax, 0x877c18
mov ecx, 0x1025e3a8
mov dword [ebp - 8], eax
mov dword [ebp - 4], ecx
nop dword [eax + eax]
mov edi, dword [ecx - 4]
lea ebx, [eax - 0xd]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x18]
mov dword [ebx], edi
push eax
push dword [ebp - 0x18]
push 4
push ebx
call esi
mov edi, dword [ebp - 4]
lea eax, [ebp - 0x14]
mov ebx, dword [ebp - 8]
push eax
push 0x40
mov edi, dword [edi]
push 4
push ebx
call esi
lea eax, [ebp - 0x14]
mov dword [ebx], edi
push eax
push dword [ebp - 0x14]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
add ebx, 0xa9
mov edi, dword [eax + 0x2c]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x10]
mov dword [ebx], edi
push eax
push dword [ebp - 0x10]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 8]
add ebx, 0xb6
mov edi, dword [eax + 0x30]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0xc]
mov dword [ebx], edi
push eax
push dword [ebp - 0xc]
push 4
push ebx
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add ecx, 8
add eax, 0x1a
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, 0x1025e3d8
jl 0x100b2930
pop ebx
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x30
push 0xd457c8
call esi
movups xmm0, xmmword [0x1025e404]
mov eax, 0xd457c8
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025e414]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025e424]
movups xmmword [eax + 0x20], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x30
push 0xd457c8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x30
push 0xd457f8
call esi
movups xmm0, xmmword [0x1025e434]
mov eax, 0xd457f8
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025e444]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025e454]
movups xmmword [eax + 0x20], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x30
push 0xd457f8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x38
push 0xd4dcf0
call esi
movups xmm0, xmmword [0x1025e464]
mov eax, 0xd4dcf0
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025e474]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025e484]
movups xmmword [eax + 0x20], xmm0
movq xmm0, qword [0x1025e494]
movq qword [eax + 0x30], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x38
push 0xd4dcf0
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x38
push 0xd4dd28
call esi
movups xmm0, xmmword [0x1025e49c]
mov eax, 0xd4dd28
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025e4ac]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025e4bc]
movups xmmword [eax + 0x20], xmm0
movq xmm0, qword [0x1025e4cc]
movq qword [eax + 0x30], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x38
push 0xd4dd28
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x14
push 0xd48eac
call esi
movups xmm0, xmmword [0x1025e4d4]
mov ecx, 0xd48eac
movups xmmword [ecx], xmm0
mov eax, dword [0x1025e4e4]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x14
push ecx
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x14
push 0xd48ec0
call esi
movups xmm0, xmmword [0x1025e4e8]
mov ecx, 0xd48ec0
movups xmmword [ecx], xmm0
mov eax, dword [0x1025e4f8]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x14
push ecx
call esi
mov edi, dword [0x1025e318]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x7e4bb8
call esi
lea eax, [ebp - 0x18]
mov dword [0x7e4bb8], edi
push eax
push dword [ebp - 0x18]
push 4
push 0x7e4bb8
call esi
mov edi, dword [0x1025e318]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x8ff543
call esi
lea eax, [ebp - 0x18]
mov dword [0x8ff543], edi
push eax
push dword [ebp - 0x18]
push 4
push 0x8ff543
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret