Function at 0x100af5d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x874108
push edi
mov ecx, 0x1025a358
mov dword [ebp - 8], eax
mov dword [ebp - 4], ecx
push ebx
nop
mov edi, dword [ecx - 4]
lea ebx, [eax - 0xd]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0xc]
mov dword [ebx], edi
push eax
push dword [ebp - 0xc]
push 4
push ebx
call esi
mov edi, dword [ebp - 4]
lea eax, [ebp - 0x10]
mov ebx, dword [ebp - 8]
push eax
push 0x40
mov edi, dword [edi]
push 4
push ebx
call esi
lea eax, [ebp - 0x10]
mov dword [ebx], edi
push eax
push dword [ebp - 0x10]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
add ebx, 0xc3
mov edi, dword [eax + 0x34]
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x14]
mov dword [ebx], edi
push eax
push dword [ebp - 0x14]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 8]
add ebx, 0xd0
mov edi, dword [eax + 0x38]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x18]
mov dword [ebx], edi
push eax
push dword [ebp - 0x18]
push 4
push ebx
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add ecx, 8
add eax, 0x1a
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, 0x1025a390
jl 0x100af5f0
mov eax, 0x877c18
mov ecx, 0x1025a3c8
mov dword [ebp - 8], eax
mov dword [ebp - 4], ecx
nop dword [eax + eax]
mov edi, dword [ecx - 4]
lea ebx, [eax - 0xd]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x18]
mov dword [ebx], edi
push eax
push dword [ebp - 0x18]
push 4
push ebx
call esi
mov edi, dword [ebp - 4]
lea eax, [ebp - 0x14]
mov ebx, dword [ebp - 8]
push eax
push 0x40
mov edi, dword [edi]
push 4
push ebx
call esi
lea eax, [ebp - 0x14]
mov dword [ebx], edi
push eax
push dword [ebp - 0x14]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
add ebx, 0xa9
mov edi, dword [eax + 0x2c]
lea eax, [ebp - 0x10]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0x10]
mov dword [ebx], edi
push eax
push dword [ebp - 0x10]
push 4
push ebx
call esi
mov eax, dword [ebp - 4]
mov ebx, dword [ebp - 8]
add ebx, 0xb6
mov edi, dword [eax + 0x30]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 4
push ebx
call esi
lea eax, [ebp - 0xc]
mov dword [ebx], edi
push eax
push dword [ebp - 0xc]
push 4
push ebx
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add ecx, 8
add eax, 0x1a
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, 0x1025a3f8
jl 0x100af6b0
pop ebx
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x30
push 0xd457c8
call esi
movups xmm0, xmmword [0x1025a424]
mov eax, 0xd457c8
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025a434]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025a444]
movups xmmword [eax + 0x20], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x30
push 0xd457c8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x30
push 0xd457f8
call esi
movups xmm0, xmmword [0x1025a454]
mov eax, 0xd457f8
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025a464]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025a474]
movups xmmword [eax + 0x20], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x30
push 0xd457f8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x38
push 0xd4dcf0
call esi
movups xmm0, xmmword [0x1025a484]
mov eax, 0xd4dcf0
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025a494]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025a4a4]
movups xmmword [eax + 0x20], xmm0
movq xmm0, qword [0x1025a4b4]
movq qword [eax + 0x30], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x38
push 0xd4dcf0
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x38
push 0xd4dd28
call esi
movups xmm0, xmmword [0x1025a4bc]
mov eax, 0xd4dd28
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1025a4cc]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1025a4dc]
movups xmmword [eax + 0x20], xmm0
movq xmm0, qword [0x1025a4ec]
movq qword [eax + 0x30], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x38
push 0xd4dd28
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x14
push 0xd48eac
call esi
movups xmm0, xmmword [0x1025a4f4]
mov ecx, 0xd48eac
movups xmmword [ecx], xmm0
mov eax, dword [0x1025a504]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x14
push ecx
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x14
push 0xd48ec0
call esi
movups xmm0, xmmword [0x1025a508]
mov ecx, 0xd48ec0
movups xmmword [ecx], xmm0
mov eax, dword [0x1025a518]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x14
push ecx
call esi
mov edi, dword [0x1025a338]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x7e4bb8
call esi
lea eax, [ebp - 0x18]
mov dword [0x7e4bb8], edi
push eax
push dword [ebp - 0x18]
push 4
push 0x7e4bb8
call esi
mov edi, dword [0x1025a338]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x8ff543
call esi
lea eax, [ebp - 0x18]
mov dword [0x8ff543], edi
push eax
push dword [ebp - 0x18]
push 4
push 0x8ff543
call esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret