Function at 0x100c8350
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x18
mov eax, dword [0x1013e00c]
xor eax, esp
mov dword [esp + 0x14], eax
mov ecx, dword [0x8128ac8]
mov dword [0x102c0904], ecx
mov eax, dword [0x7bc4f04]
push esi
mov dword [0x102c0908], eax
mov esi, dword [0xe6172c]
push edi
cmp esi, 0xffffffff
je 0x100c83f1
mov eax, 0x402bc0
call eax
push esi
mov edx, 0x96a4c0
mov ecx, eax
call edx
cmp dword [0x101eb014], 1
mov esi, eax
mov dword [0x102c090c], esi
jne 0x100c83e2
movzx ecx, byte [esi + 0x2e]
movzx eax, word [esi + 0x84]
push ecx
movzx ecx, byte [esi + 0x2d]
push ecx
push dword [0xe61e18]
push eax
call fcn.10043450
test eax, eax
je 0x100c83e2
movups xmm0, xmmword [eax + 0x14]
movups xmmword [esi + 0x38], xmm0
movq xmm0, qword [eax + 0x24]
movq qword [esi + 0x48], xmm0
mov al, byte [eax + 0x2c]
mov byte [esi + 0x50], al
mov ecx, dword [0x102c0904]
mov byte [0x102c0910], 1
jmp 0x100c843b
mov esi, dword [0xe61730]
cmp esi, 0xffffffff
je 0x100c8421
mov eax, 0x402bc0
call eax
push esi
mov edx, 0x96a4c0
mov ecx, eax
call edx
mov ecx, dword [0x102c0904]
mov dword [0x102c090c], eax
mov byte [0x102c0910], 2
jmp 0x100c843b
cmp dword [0x102c090c], 0
je 0x100c8434
mov dword [0x102c090c], 0
mov byte [0x102c0910], 0
mov eax, dword [0x879340c]
mov dword [0x102c0918], eax
mov eax, dword [0x8793410]
mov dword [0x102c0920], eax
mov eax, dword [0xe61e18]
push ecx
mov dword [0x102c0914], eax
movsx eax, word [ecx + 0xe]
push 0x1012f990
push 0x102c08f8
mov dword [0x102c08f0], eax
call sym.Main.dll_sprintf
mov eax, dword [0x7bc4f04]
add esp, 0xc
movzx ecx, byte [eax + 0x32]
mov eax, dword [0x8128ac8]
movzx eax, word [eax + ecx*2 + 0x78]
mov ecx, 0x105
cmp ax, cx
je 0x100c8518
mov ecx, 0x228
cmp ax, cx
je 0x100c8518
mov ecx, 0x22b
cmp ax, cx
je 0x100c8518
movsd xmm0, qword [0x101350b8]
lea eax, [esp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 8
push 0xd27c88
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x18], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x100c850c
mov eax, dword [esp + 0x10]
mov ecx, 0xd27c88
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
lea eax, [esp + 0xc]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x14], 0
push 8
push ecx
call esi
test eax, eax
jne 0x100c850e
call edi
movsd xmm0, qword [0x10135090]
jmp 0x100c8584
movsd xmm0, qword [0x10135060]
lea eax, [esp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 8
push 0xd27c88
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x18], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x100c857a
mov eax, dword [esp + 0x10]
mov ecx, 0xd27c88
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
lea eax, [esp + 0xc]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x14], 0
push 8
push ecx
call esi
test eax, eax
jne 0x100c857c
call edi
movsd xmm0, qword [0x10135040]
lea eax, [esp + 8]
movsd qword [esp + 0x10], xmm0
push eax
push 0x40
push 8
push 0xd281c0
mov dword [esp + 0x18], 0
call esi
test eax, eax
je 0x100c85d2
mov eax, dword [esp + 0x10]
mov ecx, 0xd281c0
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [ecx + 4], eax
lea eax, [esp + 0xc]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x14], 0
push 8
push ecx
call esi
test eax, eax
jne 0x100c85d4
call edi
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
xor ecx, esp
call fcn.100d7712
mov esp, ebp
pop ebp
ret