Function at 0x10121c20
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x101e6b6c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
mov ecx, 0x102b8404
call fcn.10124b2c
cmp byte [0x1026cbd4], 0
jne 0x10121e61
mov ecx, 0xab
xor edx, edx
mov al, byte [edx + 0x101c4054]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x2c], al
and ecx, 0x800000ff
jns 0x10121c6e
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1b
jl 0x10121c51
push esi
mov esi, dword [ebx + 4]
lea eax, [ebp - 0x2c]
push edi
mov edi, dword [ebx + 0xc]
push 0
push edi
push esi
push eax
mov byte [ebp - 0x11], 0
mov byte [ebp - 0xc], 0x68
mov byte [ebp - 7], 0
call fcn.10121190
push 0
push edi
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push esi
push eax
call fcn.10121190
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x20
lea esi, [eax - 0x18]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push esi
call edi
lea eax, [ebp - 0xc]
mov byte [esi], 0xeb
push eax
push dword [ebp - 0xc]
push 1
push esi
call edi
mov ecx, 0xed
xor edx, edx
mov al, byte [edx + 0x101c4070]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x2c], al
and ecx, 0x800000ff
jns 0x10121cef
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1b
jl 0x10121cd2
mov esi, dword [ebx + 0xc]
lea eax, [ebp - 0x2c]
mov edi, dword [ebx + 4]
push 0
push esi
push edi
push eax
mov byte [ebp - 0x11], 0
mov byte [ebp - 0xc], 0x68
mov byte [ebp - 7], 0
call fcn.10121190
push 0
push esi
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push edi
push eax
call fcn.10121190
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x20
lea esi, [eax - 0x18]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push esi
call edi
lea eax, [ebp - 0xc]
mov byte [esi], 0xeb
push eax
push dword [ebp - 0xc]
push 1
push esi
call edi
mov ecx, 0x20
xor edx, edx
mov al, byte [edx + str.EYJJQCUX_tLDNKK]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x30], al
and ecx, 0x800000ff
jns 0x10121d6e
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1f
jl 0x10121d51
mov esi, dword [ebx + 0xc]
lea eax, [ebp - 0x30]
mov edi, dword [ebx + 4]
push 0
push esi
push edi
push eax
mov byte [ebp - 0x11], 0
mov byte [ebp - 0xc], 0x68
mov byte [ebp - 7], 0
call fcn.10121190
push 0
push esi
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push edi
push eax
call fcn.10121190
push 0
push eax
add eax, 0xfffffff7
push eax
push 0x1016cf48
call fcn.10121190
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x30
mov esi, eax
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push esi
call edi
lea eax, [ebp - 0xc]
mov byte [esi], 0xeb
push eax
push dword [ebp - 0xc]
push 1
push esi
call edi
mov ecx, 0x1f
xor edx, edx
mov al, byte [edx + str.zXKMP_TW_bOEYOHJ]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x30], al
and ecx, 0x800000ff
jns 0x10121dfd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x21
jl 0x10121de0
mov esi, dword [ebx + 0xc]
lea eax, [ebp - 0x30]
mov edi, dword [ebx + 4]
push 0
push esi
push edi
push eax
mov byte [ebp - 0xf], 0
mov byte [ebp - 0xc], 0x68
mov byte [ebp - 7], 0
call fcn.10121190
push 0
push esi
mov dword [ebp - 0xb], eax
lea eax, [ebp - 0xc]
push edi
push eax
call fcn.10121190
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x20
lea esi, [eax - 5]
lea eax, [ebp - 0xc]
push eax
push 0x40
push 1
push esi
call ebx
lea eax, [ebp - 0xc]
mov byte [esi], 0xeb
push eax
push dword [ebp - 0xc]
push 1
push esi
call ebx
pop edi
mov byte [0x1026cbd4], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.10124b5e
mov esp, ebp
pop ebp
ret