Function at 0x10053d90
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
cmp byte [0x101dd454], 0
push ebx
push esi
push edi
mov edi, dword [0x10190afc]
jne case.default.0x10054275
cmp byte [0x1018d299], 0
xorps xmm2, xmm2
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
movss xmm0, dword [0x1012d008]
je 0x10053fa3
cmp byte [0x10186193], 0
je 0x10053ea3
movss xmm1, dword [0x101dd460]
comiss xmm1, xmm0
jb 0x10053ea3
movss xmm0, dword [0x1012d03c]
comiss xmm0, xmm1
jb 0x10053ea3
movss xmm0, dword [0x10186198]
comiss xmm0, xmm1
jb 0x10053e85
movss xmm1, dword [0x10186194]
movsd xmm0, qword [0x10189f20]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x10053e85
push 0x10190e60
push 0x40
push 8
push dword [0x1018ca5c]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012cf70]
mov eax, dword [0x1018ca5c]
push 0x10190e60
movsd qword [eax], xmm0
push dword [0x10190e60]
mov esi, dword [0x1018ca5c]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10189f20], xmm0
mov eax, dword [0x1018b6e0]
movss xmm0, dword [eax + 0x9c]
comiss xmm0, xmm2
jbe 0x10053ea3
or word [edi + 0x1e], 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x10190898], 0
jbe 0x10053f40
movss xmm0, dword [0x10186198]
comiss xmm0, dword [0x101dd460]
jb 0x10053f40
movss xmm1, dword [0x10186194]
movsd xmm0, qword [0x10189f20]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x10053f40
push 0x10190e60
push 0x40
push 8
push dword [0x1018ca5c]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012cf70]
mov eax, dword [0x1018ca5c]
push 0x10190e60
movsd qword [eax], xmm0
push dword [0x10190e60]
mov esi, dword [0x1018ca5c]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10189f20], xmm0
cmp byte [0x10186191], 0
jne 0x10053f7f
mov eax, dword [0x10190898]
test eax, eax
je 0x10053f76
cmp eax, dword [0x1019089c]
jb 0x10053f76
cmp byte [0x101dd451], 0
jne 0x10053f76
mov al, byte [0x1018bbd0]
shr al, 2
test al, 1
jne 0x10053f76
or word [edi + 0x1e], 4
jmp 0x10053f7f
mov eax, 0xfffb
and word [edi + 0x1e], ax
cmp byte [0x101861ac], 0
movss xmm0, dword [0x1012d008]
je 0x10053fa3
mov eax, dword [0x1019089c]
inc eax
cmp dword [0x10190898], eax
jne 0x10053fa3
or word [edi + 0x1e], 2
cmp byte [0x1018d29a], 0
je 0x100541d0
cmp byte [0x101861b7], 0
je 0x10054081
movss xmm1, dword [0x101dd460]
comiss xmm1, xmm0
jb 0x10054081
movss xmm0, dword [0x1012d03c]
comiss xmm0, xmm1
jb 0x10054081
movss xmm0, dword [0x101861bc]
comiss xmm0, xmm1
jb 0x1005406b
movss xmm1, dword [0x101861b8]
movsd xmm0, qword [0x10189f20]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x1005406b
push 0x10190e60
push 0x40
push 8
push dword [0x1018ca5c]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012cf70]
mov eax, dword [0x1018ca5c]
push 0x10190e60
movsd qword [eax], xmm0
push dword [0x10190e60]
mov esi, dword [0x1018ca5c]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10189f20], xmm0
mov eax, dword [0x1018b6e0]
movss xmm0, dword [eax + 0x9c]
comiss xmm0, xmm2
ja 0x10053e97
cmp dword [0x10190898], 0
jbe 0x1005411e
movss xmm0, dword [0x101861bc]
comiss xmm0, dword [0x101dd460]
jb 0x1005411e
movss xmm1, dword [0x101861b8]
movsd xmm0, qword [0x10189f20]
cvtps2pd xmm1, xmm1
ucomisd xmm0, xmm1
movsd qword [ebp - 8], xmm1
lahf
test ah, 0x44
jnp 0x1005411e
push 0x10190e60
push 0x40
push 8
push dword [0x1018ca5c]
call ebx
movsd xmm0, qword [ebp - 8]
mulsd xmm0, qword [0x1012cf70]
mov eax, dword [0x1018ca5c]
push 0x10190e60
movsd qword [eax], xmm0
push dword [0x10190e60]
mov esi, dword [0x1018ca5c]
push 8
push esi
call ebx
push 8
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
movsd xmm0, qword [ebp - 8]
xorps xmm2, xmm2
movsd qword [0x10189f20], xmm0
cmp byte [0x101861b5], 0
jne 0x1005415d
mov eax, dword [0x10190898]
test eax, eax
je 0x10054154
cmp eax, dword [0x1019089c]
jb 0x10054154
cmp byte [0x101dd451], 0
jne 0x10054154
mov al, byte [0x1018bbd0]
shr al, 2
test al, 1
jne 0x10054154
or word [edi + 0x1e], 4
jmp 0x1005415d
mov eax, 0xfffb
and word [edi + 0x1e], ax
cmp byte [0x101861d0], 0
je 0x1005417b
mov eax, dword [0x1019089c]
add eax, 2
cmp dword [0x10190898], eax
jne 0x1005417b
or word [edi + 0x1e], 2
movss xmm0, dword [0x101dd460]
comiss xmm0, xmm2
jbe 0x1005418d
xorps xmm1, xmm1
jmp 0x10054195
movss xmm1, dword [0x1012d08c]
movss xmm0, dword [0x101dd460]
comiss xmm0, xmm2
jbe 0x100541ac
movss xmm0, dword [0x1012d1fc]
jmp 0x100541b4
movss xmm0, dword [0x1012d0e0]
mov eax, dword [0x1018b6e0]
movss xmm2, dword [eax + 0x9c]
comiss xmm2, xmm1
jbe 0x100541d0
comiss xmm0, xmm2
jbe 0x100541d0
or word [edi + 0x1e], 4
mov eax, dword [0x1018b6e0]
cmp dword [eax + 0xe0], 0xffffffff
je 0x100542f1
mov edx, dword [0x101de394]
inc edx
mov dword [0x101de394], edx
mov ecx, edx
cmp edx, 0x32
jb 0x10054203
mov edx, 0x32
mov dword [0x101de394], edx
mov ecx, edx
test ecx, ecx
je case.default.0x10054275
mov eax, dword [0x10190afc]
movzx eax, word [eax + 0x1e]
not eax
test al, 4
jne case.default.0x10054275
mov al, byte [0x1018bbd0]
shr al, 2
test al, 1
jne case.default.0x10054275
cmp ecx, 5
ja case.default.0x10054275
mov eax, dword [0x101908a8]
inc eax
mov dword [0x101908a8], eax
cmp eax, 0x64
jbe 0x1005426b
mov dword [0x101908a8], 0
mov ecx, 0x28
mov eax, 0x101908ac
nop dword [eax + eax]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x10054260
dec edx
cmp edx, 4
ja case.default.0x10054275
jmp dword [edx*4 + 0x10054304]
inc dword [0x101908d4]
inc dword [0x101908ac]
mov dword [0x101908d8], 0
mov dword [0x101908dc], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
inc dword [0x101908d8]
inc dword [0x101908b0]
mov dword [0x101908d4], 0
mov dword [0x101908dc], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
inc dword [0x101908dc]
inc dword [0x101908b4]
mov dword [0x101908d4], 0
mov dword [0x101908d8], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x101de394], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret