Function at 0x100ab040
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
cmp dword [0x107dce8c], 3
push ebx
push esi
push edi
mov edi, ecx
jne 0x100ab07c
cmp dword [0x107dce74], 0
je 0x100ab07c
mov dword [ebp - 7], 0
lea ecx, [ebp - 8]
mov edx, 5
mov dword [ebp - 8], 0x51bf05c1
mov byte [ebp - 4], 0
call fcn.100aba10
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x107dce90], 0
mov dword [0x107dce8c], 0
call esi
mov dword [0x107dce88], eax
call esi
mov ecx, dword [0x107dce2c]
mov dword [0x107dce84], eax
mov eax, dword [edi + 0x48]
mov dword [0x107dce34], eax
mov eax, dword [edi + 0x4c]
cmp dword [edi + 0x50], 3
mov dword [0x107dce30], eax
cmovbe ecx, dword [edi + 0x50]
mov eax, dword [edi + 0x54]
mov dword [0x107dce20], eax
mov eax, dword [edi + 0x58]
mov dword [0x107dce68], eax
mov eax, dword [edi + 0x5c]
mov dword [0x107dce64], eax
mov eax, dword [edi + 0x60]
mov dword [0x107dce60], eax
mov eax, dword [edi + 0x64]
mov dword [0x107dcd14], eax
mov eax, dword [edi + 0x68]
mov dword [0x107dcd04], eax
mov eax, dword [edi + 0x6c]
mov dword [0x107dcd10], eax
mov eax, dword [edi + 0x70]
mov dword [0x107dce70], eax
mov eax, dword [edi + 0x74]
mov dword [0x107dce6c], eax
mov eax, dword [edi + 0x78]
mov dword [0x107dcdec], eax
mov eax, dword [edi + 0x7c]
mov dword [0x107dcde8], eax
mov eax, dword [edi + 0x80]
mov dword [0x107dcde4], eax
mov eax, dword [edi + 0x84]
mov dword [0x107dcd00], eax
mov eax, dword [edi + 0x88]
mov dword [0x107dccf8], eax
mov al, byte [edi + 0x44]
mov byte [0x1069aa9d], al
mov eax, dword [0x7bc4f04]
mov dword [0x107dce2c], ecx
xor ecx, ecx
mov dword [0x107dce80], 0
mov dword [0x107dce7c], 0
mov word [eax + 0x7e], cx
mov eax, dword [0x7bc4f04]
mov dword [0x107dce78], 0
mov dword [0x107dce74], 0
mov byte [eax + 0x30c], cl
mov eax, dword [edi + 0x90]
mov ecx, dword [edi + 0x94]
mov dword [0x107dce48], eax
mov dword [0x107dce4c], ecx
mov eax, dword [edi + 0x98]
mov ecx, dword [edi + 0x9c]
mov dword [0x107dce50], eax
mov dword [0x107dce54], ecx
mov eax, dword [edi + 0xa0]
mov ecx, dword [edi + 0xa4]
mov dword [0x107dcd08], eax
mov eax, dword [0x8128ac8]
mov dword [0x107dcd0c], ecx
movzx eax, byte [eax + 0xb]
and eax, 7
cmp eax, 6
ja case.default.0x100ab1e1
jmp dword [eax*4 + 0x100ab2a4]
cmp dword [0x102bc0e4], 0xffff
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
sbb bl, bl
push 1
and bl, 0xd
push 0x556c38
add bl, 2
call esi
mov byte [0x556c38], bl
jmp 0x100ab26f
cmp dword [0x102bc0e8], 0xffff
jmp 0x100ab1f2
cmp dword [0x102bc0ec], 0xffff
jmp 0x100ab1f2
cmp dword [0x102bc0f0], 0xffff
jmp 0x100ab1f2
cmp dword [0x102bc0f4], 0xffff
jmp 0x100ab1f2
cmp dword [0x102bc0f8], 0xffff
jmp 0x100ab1f2
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x556c38
call esi
mov byte [0x556c38], 0xf
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 1
push 0x556c38
call esi
mov dword [ebp - 8], 0xf304c1
lea ecx, [ebp - 8]
mov edx, 4
mov byte [ebp - 5], 0xf7
call fcn.100aba10
call fcn.100599c0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret