Function at 0x10053a70
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x101da11c], 0
push ebx
push esi
push edi
mov edi, dword [0x1018d7c4]
jne case.default.0x10053f55
cmp byte [0x10189f81], 0
xorps xmm2, xmm2
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
movss xmm0, dword [0x1012a650]
je 0x10053c83
cmp byte [0x1018318b], 0
je 0x10053b83
movss xmm1, dword [0x101da128]
comiss xmm1, xmm0
jb 0x10053b83
movss xmm0, dword [0x1012a688]
comiss xmm0, xmm1
jb 0x10053b83
movss xmm0, dword [0x10183190]
comiss xmm0, xmm1
jb 0x10053b65
movss xmm1, dword [0x1018318c]
movsd xmm0, qword [0x10186c58]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x10053b65
push 0x1018db28
push 0x40
push 8
push dword [0x10189758]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012a5b8]
mov eax, dword [0x10189758]
push 0x1018db28
movsd qword [eax], xmm0
push dword [0x1018db28]
mov esi, dword [0x10189758]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10186c58], xmm0
mov eax, dword [0x10188420]
movss xmm0, dword [eax + 0x9c]
comiss xmm0, xmm2
jbe 0x10053b83
or word [edi + 0x1e], 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x1018d560], 0
jbe 0x10053c20
movss xmm0, dword [0x10183190]
comiss xmm0, dword [0x101da128]
jb 0x10053c20
movss xmm1, dword [0x1018318c]
movsd xmm0, qword [0x10186c58]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x10053c20
push 0x1018db28
push 0x40
push 8
push dword [0x10189758]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012a5b8]
mov eax, dword [0x10189758]
push 0x1018db28
movsd qword [eax], xmm0
push dword [0x1018db28]
mov esi, dword [0x10189758]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10186c58], xmm0
cmp byte [0x10183189], 0
jne 0x10053c5f
mov eax, dword [0x1018d560]
test eax, eax
je 0x10053c56
cmp eax, dword [0x1018d564]
jb 0x10053c56
cmp byte [0x101da119], 0
jne 0x10053c56
mov al, byte [0x10188910]
shr al, 2
test al, 1
jne 0x10053c56
or word [edi + 0x1e], 4
jmp 0x10053c5f
mov eax, 0xfffb
and word [edi + 0x1e], ax
cmp byte [0x101831a4], 0
movss xmm0, dword [0x1012a650]
je 0x10053c83
mov eax, dword [0x1018d564]
inc eax
cmp dword [0x1018d560], eax
jne 0x10053c83
or word [edi + 0x1e], 2
cmp byte [0x10189f82], 0
je 0x10053eb0
cmp byte [0x101831af], 0
je 0x10053d61
movss xmm1, dword [0x101da128]
comiss xmm1, xmm0
jb 0x10053d61
movss xmm0, dword [0x1012a688]
comiss xmm0, xmm1
jb 0x10053d61
movss xmm0, dword [0x101831b4]
comiss xmm0, xmm1
jb 0x10053d4b
movss xmm1, dword [0x101831b0]
movsd xmm0, qword [0x10186c58]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x10053d4b
push 0x1018db28
push 0x40
push 8
push dword [0x10189758]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012a5b8]
mov eax, dword [0x10189758]
push 0x1018db28
movsd qword [eax], xmm0
push dword [0x1018db28]
mov esi, dword [0x10189758]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10186c58], xmm0
mov eax, dword [0x10188420]
movss xmm0, dword [eax + 0x9c]
comiss xmm0, xmm2
ja 0x10053b77
cmp dword [0x1018d560], 0
jbe 0x10053dfe
movss xmm0, dword [0x101831b4]
comiss xmm0, dword [0x101da128]
jb 0x10053dfe
movss xmm1, dword [0x101831b0]
movsd xmm0, qword [0x10186c58]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x10053dfe
push 0x1018db28
push 0x40
push 8
push dword [0x10189758]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012a5b8]
mov eax, dword [0x10189758]
push 0x1018db28
movsd qword [eax], xmm0
push dword [0x1018db28]
mov esi, dword [0x10189758]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10186c58], xmm0
cmp byte [0x101831ad], 0
jne 0x10053e3d
mov eax, dword [0x1018d560]
test eax, eax
je 0x10053e34
cmp eax, dword [0x1018d564]
jb 0x10053e34
cmp byte [0x101da119], 0
jne 0x10053e34
mov al, byte [0x10188910]
shr al, 2
test al, 1
jne 0x10053e34
or word [edi + 0x1e], 4
jmp 0x10053e3d
mov eax, 0xfffb
and word [edi + 0x1e], ax
cmp byte [0x101831c8], 0
je 0x10053e5b
mov eax, dword [0x1018d564]
add eax, 2
cmp dword [0x1018d560], eax
jne 0x10053e5b
or word [edi + 0x1e], 2
movss xmm0, dword [0x101da128]
comiss xmm0, xmm2
jbe 0x10053e6d
xorps xmm1, xmm1
jmp 0x10053e75
movss xmm1, dword [0x1012a6d8]
movss xmm0, dword [0x101da128]
comiss xmm0, xmm2
jbe 0x10053e8c
movss xmm0, dword [0x1012a870]
jmp 0x10053e94
movss xmm0, dword [0x1012a738]
mov eax, dword [0x10188420]
movss xmm2, dword [eax + 0x9c]
comiss xmm2, xmm1
jbe 0x10053eb0
comiss xmm0, xmm2
jbe 0x10053eb0
or word [edi + 0x1e], 4
mov eax, dword [0x10188420]
cmp dword [eax + 0xe0], 0xffffffff
je 0x10053fd1
mov edx, dword [0x101db094]
inc edx
mov dword [0x101db094], edx
mov ecx, edx
cmp edx, 0x32
jb 0x10053ee3
mov edx, 0x32
mov dword [0x101db094], edx
mov ecx, edx
test ecx, ecx
je case.default.0x10053f55
mov eax, dword [0x1018d7c4]
movzx eax, word [eax + 0x1e]
not eax
test al, 4
jne case.default.0x10053f55
mov al, byte [0x10188910]
shr al, 2
test al, 1
jne case.default.0x10053f55
cmp ecx, 5
ja case.default.0x10053f55
mov eax, dword [0x1018d570]
inc eax
mov dword [0x1018d570], eax
cmp eax, 0x64
jbe 0x10053f4b
mov dword [0x1018d570], 0
mov ecx, 0x28
mov eax, 0x1018d574
nop dword [eax + eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x10053f40
dec edx
cmp edx, 4
ja case.default.0x10053f55
jmp dword [edx*4 + 0x10053fe4]
inc dword [0x1018d59c]
inc dword [0x1018d574]
mov dword [0x1018d5a0], 0
mov dword [0x1018d5a4], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
inc dword [0x1018d5a0]
inc dword [0x1018d578]
mov dword [0x1018d59c], 0
mov dword [0x1018d5a4], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
inc dword [0x1018d5a4]
inc dword [0x1018d57c]
mov dword [0x1018d59c], 0
mov dword [0x1018d5a0], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x101db094], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret