Function at 0x10011450
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x100b0558]
mov byte [0x100b0559], al
test al, al
je 0x10011879
movups xmm0, xmmword [0x1009bcd8]
mov eax, dword [0x100cab48]
lea ecx, [ebp - 0x18]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add eax, 0x148ea
push edi
push ecx
push 0x40
movups xmmword [ebp - 0x14], xmm0
push 0x1f
movups xmm0, xmmword [0x1009bce8]
push eax
mov dword [ebp - 0x20], eax
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x1c], 0x1f
call esi
mov eax, dword [ebp - 0x20]
mov ebx, fcn.10071720
movups xmm0, xmmword [ebp - 0x14]
movups xmm1, xmmword [ebp - 0x30]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x20]
movaps xmm0, xmm1
psrldq xmm0, 8
pextrw ecx, xmm1, 6
movq qword [eax + 0x10], xmm1
mov eax, dword [ebp - 0x20]
psrldq xmm1, 0xe
movd dword [eax + 0x18], xmm0
mov eax, dword [ebp - 0x20]
mov word [eax + 0x1c], cx
mov eax, dword [ebp - 0x20]
movd ecx, xmm1
mov byte [eax + 0x1e], cl
mov ecx, ebx
mov eax, dword [ebp - 0x20]
sub ecx, eax
sub ecx, 0x17
mov dword [eax + 0x13], ecx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call esi
movups xmm0, xmmword [0x1009bcf8]
movzx eax, word [0x1009bd20]
lea ecx, [ebp - 8]
push ecx
movups xmmword [ebp - 0x30], xmm0
mov word [ebp - 0x44], ax
movups xmm0, xmmword [0x1009bd08]
mov eax, dword [0x100cab48]
push 0x40
add eax, 0x14e79
mov dword [ebp - 0xc], 0x29
movups xmmword [ebp - 0x40], xmm0
push 0x29
movq xmm0, qword [0x1009bd18]
push eax
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
movups xmm0, xmmword [ebp - 0x30]
movzx ecx, byte [ebp - 0x44]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
movups xmm0, xmmword [ebp - 0x40]
movups xmmword [eax + 0x10], xmm0
mov eax, dword [ebp - 0x10]
movq xmm0, qword [ebp - 0x1c]
movq qword [eax + 0x20], xmm0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x28], cl
mov ecx, 0x100718c0
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x1d
mov dword [eax + 0x19], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x14e3b
mov dword [ebp - 0xc], 1
push 1
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x14fa9
mov dword [ebp - 0xc], 1
push 1
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x14fb4
mov dword [ebp - 0xc], 1
push 1
push eax
mov dword [ebp - 0x10], eax
call esi
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call esi
movups xmm0, xmmword [0x1009bd24]
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
mov esi, dword [0x1009bd44]
add eax, 0x14bb3
mov di, word [0x1009bd48]
push ecx
push 0x40
movups xmmword [ebp - 0x40], xmm0
push 0x26
movups xmm0, xmmword [0x1009bd34]
push eax
mov dword [ebp - 0x10], eax
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0xc], 0x26
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebp - 0x10]
movups xmm0, xmmword [ebp - 0x40]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
movups xmm0, xmmword [ebp - 0x30]
movups xmmword [eax + 0x10], xmm0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x20], esi
mov eax, dword [ebp - 0x10]
mov word [eax + 0x24], di
mov eax, dword [ebp - 0x10]
sub ebx, eax
sub ebx, 0x17
mov dword [eax + 0x13], ebx
lea eax, [ebp - 8]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
movups xmm0, xmmword [0x1009bd4c]
movzx eax, word [0x1009bd78]
lea ecx, [ebp - 8]
mov esi, dword [0x1009bd74]
movups xmmword [ebp - 0x40], xmm0
push ecx
movups xmm0, xmmword [0x1009bd5c]
mov word [ebp - 0x44], ax
mov eax, dword [0x100cab48]
push 0x40
add eax, 0x1523d
mov dword [ebp - 0xc], 0x2d
movups xmmword [ebp - 0x30], xmm0
push 0x2d
movq xmm0, qword [0x1009bd6c]
push eax
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
movups xmm0, xmmword [ebp - 0x40]
movzx ecx, byte [ebp - 0x44]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
movups xmm0, xmmword [ebp - 0x30]
movups xmmword [eax + 0x10], xmm0
mov eax, dword [ebp - 0x10]
movq xmm0, qword [ebp - 0x1c]
movq qword [eax + 0x20], xmm0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x28], esi
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x2c], cl
mov ecx, 0x100718c0
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 0x1d
mov dword [eax + 0x19], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x15210
mov dword [ebp - 0xc], 1
push 1
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
add eax, 0x1536e
lea ecx, [ebp - 8]
mov dword [ebp - 0x10], eax
push ecx
push 0x40
push 1
push eax
mov dword [ebp - 0xc], 1
call ebx
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x1537b
mov dword [ebp - 0xc], 1
push 1
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x1545e
mov dword [ebp - 0xc], 1
push 1
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x15469
mov dword [ebp - 0xc], 1
push 1
push eax
mov dword [ebp - 0x10], eax
call ebx
mov eax, dword [ebp - 0x10]
mov byte [eax], 0x1c
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
ret