Function at 0x10054320
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x1013b3dc]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x101861d4], 0
push esi
push edi
jne 0x10054368
mov byte [0x1018d29b], 0
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c55b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [0x101de398]
mov esi, dword [0x10190afc]
test ecx, ecx
je 0x10054396
movzx eax, word [esi + 0x1e]
dec ecx
mov dword [0x101de398], ecx
test cl, 1
jne 0x1005438d
or eax, 2
jmp 0x10054392
and eax, 0xfffd
mov word [esi + 0x1e], ax
cmp byte [0x1018d29b], 0
xorps xmm3, xmm3
mov cl, byte [0x101861e1]
movss xmm7, dword [0x101dd460]
mov edi, dword [0x1018b6e0]
movss xmm4, dword [0x10189d7c]
jne 0x100544c4
movss xmm2, dword [edi + 0x9c]
xor dl, dl
movaps xmm1, xmm2
movss dword [ebp - 0x24], xmm2
comiss xmm3, xmm1
jae 0x10054435
movss xmm2, dword [0x101dd468]
ucomiss xmm2, xmm3
lahf
test ah, 0x44
jp 0x100543ef
movaps xmm2, xmm1
jmp 0x10054435
mov eax, dword [edi + 0x4f4f0]
movss xmm5, dword [eax]
ucomiss xmm5, xmm3
lahf
test ah, 0x44
jp 0x10054407
movaps xmm2, xmm1
jmp 0x10054435
comiss xmm2, xmm3
xorps xmm6, xmm6
jbe 0x1005442d
mulss xmm5, xmm4
movaps xmm0, xmm5
movaps xmm6, xmm1
addss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm0, xmm4
subss xmm2, xmm0
comiss xmm2, xmm3
ja 0x10054413
movss xmm2, dword [ebp - 0x24]
movaps xmm1, xmm6
subss xmm1, dword [0x1012d19c]
mov eax, dword [0x101861dc]
mulss xmm1, dword [0x1012d0b4]
divss xmm1, dword [0x1012d190]
maxss xmm1, xmm3
test eax, eax
je 0x10054467
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
setae dl
cmp byte [0x101861e0], 0
je 0x10054480
movd xmm0, dword [0x101dd438]
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jae 0x10054488
test dl, dl
je 0x10054729
test cl, cl
je 0x10054491
comiss xmm7, xmm3
ja 0x100544c4
mov eax, dword [edi + 0x4f4f0]
movss xmm0, dword [0x101dd464]
movss xmm1, dword [eax]
mulss xmm1, xmm4
addss xmm1, xmm2
mulss xmm1, xmm4
mulss xmm1, dword [0x1012cfe0]
subss xmm0, xmm1
comiss xmm0, xmm3
ja 0x10054729
movss xmm4, dword [0x1012d03c]
comiss xmm7, xmm4
ja 0x10054729
comiss xmm3, dword [edi + 0x9c]
jae 0x10054729
test cl, cl
je 0x100545c1
comiss xmm7, xmm3
jbe 0x100545c1
movss xmm2, dword [edi + 0x60]
movss xmm0, dword [edi + 0x5c]
movss xmm1, dword [edi + 0x64]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.10002f50
movss xmm1, dword [edi + 0x5c]
lea eax, [ebp - 0x10]
divss xmm1, xmm0
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x14], 0
push eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
movss dword [ebp - 0x24], xmm0
movss dword [ebp - 0x1c], xmm1
movss xmm1, dword [edi + 0x60]
divss xmm1, xmm0
movss dword [ebp - 0x18], xmm1
call fcn.100a5c50
movss xmm2, dword [0x10189d7c]
movaps xmm1, xmm2
mov dword [esi + 0x14], 0
mulss xmm1, dword [ebp - 0x24]
push esi
mulss xmm2, dword [0x1012d0b4]
addss xmm1, dword [ebp - 0x24]
divss xmm1, xmm2
xorps xmm2, xmm2
xorps xmm1, xmmword [0x1012eb90]
movss dword [esi + 0x10], xmm1
movss xmm1, dword [ebp - 0xc]
subss xmm1, dword [esi + 8]
xorps xmm1, xmmword [0x1012eb90]
call fcn.100a8df0
mov edi, dword [0x1018b6e0]
movss xmm4, dword [0x1012d03c]
mov ax, word [esi + 0x1e]
mov ecx, 0xfffd
and ax, cx
or ax, 4
movzx ecx, ax
mov word [esi + 0x1e], cx
mov eax, dword [edi + 0x4f4f0]
movss xmm2, dword [eax]
mulss xmm2, dword [0x10189d7c]
mov eax, dword [0x101de388]
addss xmm2, dword [edi + 0x9c]
mulss xmm2, dword [0x10189d7c]
sub eax, 0
je 0x1005463c
sub eax, 1
jne 0x10054729
and ecx, 0xfffb
mov dword [0x101de398], 5
or ecx, 2
mov dword [0x101de388], eax
mov word [esi + 0x1e], cx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100c55b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movss xmm3, dword [0x101dd464]
comiss xmm3, dword [0x1012cfd8]
jb 0x10054729
movaps xmm0, xmm2
movaps xmm1, xmm3
addss xmm0, xmm2
subss xmm1, xmm0
movss xmm0, dword [0x1012cfe0]
comiss xmm0, xmm1
jb 0x10054729
movss xmm0, dword [0x101dd460]
ucomiss xmm0, xmm4
lahf
test ah, 0x44
jp 0x1005468b
movsd xmm0, qword [0x1012cf18]
jmp 0x10054693
movsd xmm0, qword [0x1012cf10]
cvtps2pd xmm1, xmm3
subsd xmm1, xmm0
cvtps2pd xmm0, xmm2
divsd xmm1, xmm0
movsd xmm0, qword [0x10189f20]
andps xmm1, xmmword [0x1012eb70]
ucomisd xmm0, xmm1
movsd qword [ebp - 0x28], xmm1
lahf
test ah, 0x44
jnp 0x1005471f
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0x10190e60
push 0x40
push 8
push dword [0x1018ca5c]
call edi
movsd xmm0, qword [ebp - 0x28]
mulsd xmm0, qword [0x1012cf70]
mov eax, dword [0x1018ca5c]
push 0x10190e60
movsd qword [eax], xmm0
push dword [0x10190e60]
mov esi, dword [0x1018ca5c]
push 8
push esi
call edi
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 0x28]
movsd qword [0x10189f20], xmm0
mov dword [0x101de388], 1
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.100c55b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret