Function at 0x1002b010
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100a700c]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x100a98fc]
push ebx
push esi
push edi
mov eax, dword [ecx]
push 0x100aa55c
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ebx, fcn.10009b10
mov eax, dword [eax]
mov dword [0x100a9ef8], eax
lea edi, [eax + 0x10]
cmp edi, 0x1000
jbe 0x1002b07a
cmp ebx, 0x1000
jbe 0x1002b07a
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x3c]
cmp edi, 0x1000
jbe 0x1002b0af
cmp ebx, 0x1000
jbe 0x1002b0af
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x40]
cmp edi, 0x1000
jbe 0x1002b0e4
cmp ebx, 0x1000
jbe 0x1002b0e4
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x44]
cmp edi, 0x1000
jbe 0x1002b119
cmp ebx, 0x1000
jbe 0x1002b119
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x48]
cmp edi, 0x1000
jbe 0x1002b14e
cmp ebx, 0x1000
jbe 0x1002b14e
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x4c]
cmp edi, 0x1000
jbe 0x1002b183
cmp ebx, 0x1000
jbe 0x1002b183
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x50]
cmp edi, 0x1000
jbe 0x1002b1b8
cmp ebx, 0x1000
jbe 0x1002b1b8
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x54]
cmp edi, 0x1000
jbe 0x1002b1ed
cmp ebx, 0x1000
jbe 0x1002b1ed
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
lea edi, [eax + 0x58]
cmp edi, 0x1000
jbe 0x1002b222
cmp ebx, 0x1000
jbe 0x1002b222
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], fcn.10009b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov eax, dword [0x100a9ef8]
cmp dword [0x100a9d24], 0
jne 0x1002b26b
lea edi, [eax + 0x34]
cmp edi, 0x1000
jbe 0x1002b263
mov eax, 0x10029b10
cmp eax, 0x1000
jbe 0x1002b263
mov ebx, dword [edi]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x10029b10
push eax
push dword [ebp - 8]
push 4
push edi
call esi
jmp 0x1002b265
xor ebx, ebx
mov dword [0x100a9d24], ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10073bc9
mov esp, ebp
pop ebp
ret