Function at 0x100d0050
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x48
mov eax, dword [0x1014c1c0]
xor eax, esp
mov dword [esp + 0x44], eax
cmp dword [0x102cc2fc], 3
push esi
push edi
mov edi, ecx
mov dword [esp + 0x1c], 0
jne 0x100d009d
cmp dword [0x102cc2e4], 0
je 0x100d009d
mov edx, 5
mov dword [esp + 0x14], 0x51bf05c1
lea ecx, [esp + 0x14]
mov byte [esp + 0x18], 0
call fcn.100d0350
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x102cc300], 0
mov dword [0x102cc2fc], 0
call esi
mov dword [0x102cc2f8], eax
call esi
mov dword [0x102cc2f0], eax
xor ecx, ecx
mov eax, dword [edi + 0x48]
mov dword [0x102cc110], eax
mov eax, dword [edi + 0x4c]
mov dword [0x102cc1f0], eax
mov eax, dword [edi + 0x50]
mov dword [0x102cc0f4], eax
mov eax, dword [edi + 0x54]
mov dword [0x102cc0f8], eax
mov eax, dword [edi + 0x58]
mov dword [0x102cc0ec], eax
mov eax, dword [edi + 0x5c]
mov dword [0x102cc0f0], eax
mov eax, dword [edi + 0x60]
mov dword [0x102c9e7c], eax
mov eax, dword [edi + 0x64]
mov dword [0x102cc0e0], eax
mov eax, dword [edi + 0x68]
mov dword [0x102cc0e4], eax
mov eax, dword [edi + 0x6c]
mov dword [0x102cc0e8], eax
mov eax, dword [edi + 0x70]
mov dword [0x102cc1b4], eax
mov eax, dword [edi + 0x74]
mov dword [0x102cc1b0], eax
mov eax, dword [edi + 0x78]
mov dword [0x102cc1ac], eax
mov eax, dword [edi + 0x7c]
mov dword [0x102cc1a8], eax
mov eax, dword [edi + 0x80]
mov dword [0x102cc1a4], eax
mov eax, dword [0x7bc4f04]
mov dword [0x102cc2f4], 0
mov dword [0x102cc2e8], 0
mov dword [0x102cc2ec], 0
mov word [eax + 0x7e], cx
mov eax, dword [0x7bc4f04]
mov dword [0x102cc2e4], 0
mov byte [eax + 0x30c], cl
mov eax, dword [0x8128ac8]
movzx eax, byte [eax + 0xb]
and eax, 7
cmp eax, 6
ja case.default.0x100d0193
jmp dword [eax*4 + 0x100d032c]
cmp dword [0x101f65d8], 0xffff
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sbb al, al
and al, 0xd
add al, 2
mov byte [esp + 0x13], al
lea eax, [esp + 0x14]
push eax
push 0x40
push 1
push 0x556c38
call esi
mov al, byte [esp + 0x13]
mov byte [0x556c38], al
jmp 0x100d0228
cmp dword [0x101f65dc], 0xffff
jmp 0x100d01a4
cmp dword [0x101f65e0], 0xffff
jmp 0x100d01a4
cmp dword [0x101f65e4], 0xffff
jmp 0x100d01a4
cmp dword [0x101f65e8], 0xffff
jmp 0x100d01a4
cmp dword [0x101f65ec], 0xffff
jmp 0x100d01a4
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x14]
push eax
push 0x40
push 1
push 0x556c38
call esi
mov byte [0x556c38], 0xf
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x18]
push 1
push 0x556c38
call esi
mov ecx, 0x101f64e3
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100d0242
sub ecx, edx
je 0x100d02ba
push ecx
xorps xmm0, xmm0
mov dword [esp + 0x34], 0
push 0x101f64e3
lea ecx, [esp + 0x28]
movaps xmmword [esp + 0x28], xmm0
mov dword [esp + 0x3c], 0
call fcn.1000d0f0
mov edi, dword [esp + 0x34]
lea edx, [esp + 0x20]
mov ecx, dword [esp + 0x20]
cmp edi, 0xf
mov eax, dword [esp + 0x30]
cmova edx, ecx
mov dword [esp + 0x1c], 1
test eax, eax
je 0x100d02c2
lea esi, [eax + edx]
mov eax, edx
cmp edx, esi
jae 0x100d02c2
nop
cmp byte [eax], 0x20
jne 0x100d02ac
inc eax
cmp eax, esi
jb 0x100d02a0
jmp 0x100d02c2
sub eax, edx
cmp eax, 0xffffffff
je 0x100d02c2
mov byte [esp + 0x13], 0
jmp 0x100d02c7
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x13], 1
test byte [esp + 0x1c], 1
je 0x100d0300
cmp edi, 0xf
jbe 0x100d0300
lea edx, [edi + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x100d02f6
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100d02f6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10131b2c
add esp, 8
cmp byte [esp + 0x13], 0
je 0x100d031a
cmp byte [0x101f68af], 0
jne 0x100d031a
mov ecx, 0x1014d208
call fcn.1002f8d0
mov ecx, dword [esp + 0x4c]
pop edi
pop esi
xor ecx, esp
call fcn.10131804
mov esp, ebp
pop ebp
ret