Function at 0x10012a00
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [0x100a900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [0x100b0294]
mov byte [0x100b0295], al
test al, al
je 0x10012c2a
mov ecx, dword [0x100cab48]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ecx + 0xcff0]
mov dword [ebp - 0xc], 4
mov dword [0x100b9a70], eax
lea eax, [ecx + 0xcd00]
mov dword [0x100b9af0], eax
add ecx, 0x49a4c
lea eax, [ebp - 8]
mov dword [ebp - 0x10], ecx
push eax
push 0x40
push 4
push ecx
call edi
mov eax, dword [ebp - 0x10]
mov ecx, 0x1005eb60
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x1c1ea
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov esi, 0x1005ebd0
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x2056d
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x20635
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
sub esi, eax
sub esi, 4
mov dword [eax], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x60099
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov esi, fcn.1005ec90
mov ecx, esi
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x60306
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
sub esi, eax
sub esi, 4
mov dword [eax], esi
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
push 0x40
add eax, 0x60530
mov dword [ebp - 0xc], 4
push 4
push eax
mov dword [ebp - 0x10], eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, fcn.1005ee10
sub ecx, eax
sub ecx, 4
mov dword [eax], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
mov eax, dword [0x100cab48]
lea ecx, [ebp - 8]
push ecx
add eax, 0xd5da
mov dword [ebp - 0xc], 5
push 0x40
mov dword [ebp - 0x10], eax
push 5
push eax
call edi
mov eax, dword [ebp - 0x10]
mov ecx, fcn.10012990
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x10]
sub ecx, eax
sub ecx, 5
mov dword [eax + 1], ecx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1007491a
mov esp, ebp
pop ebp
ret