Function at 0x10038220
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x100530b4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push edi
mov edi, dword [0x10054d10]
push eax
push 0x40
push 4
add edi, 0xa09fc
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x25b2fe
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x13d9c
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x7ef5c
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x13db0
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x1dc130
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add edi, 0x98b83
push edi
call esi
lea eax, [ebp - 0xc]
mov byte [edi], 0xb8
push eax
push dword [ebp - 8]
push 1
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x98b84
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 1
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
add edi, 0x13e0b
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push edi
call esi
lea eax, [ebp - 0xc]
mov byte [edi], 0xb8
push eax
push dword [ebp - 8]
push 1
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x13e0c
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 1
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add edi, 0x13e17
push edi
call esi
lea eax, [ebp - 0xc]
mov byte [edi], 8
push eax
push dword [ebp - 8]
push 1
push edi
call esi
xor ebx, ebx
nop word [eax + eax]
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
add edi, 0x98b88
push 1
add edi, ebx
push edi
call esi
lea eax, [ebp - 0xc]
mov byte [edi], 0x90
push eax
push dword [ebp - 8]
push 1
push edi
call esi
inc ebx
cmp ebx, 8
jl 0x10038380
xor ebx, ebx
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
add edi, 0x13e10
push 1
add edi, ebx
push edi
call esi
lea eax, [ebp - 0xc]
mov byte [edi], 0x90
push eax
push dword [ebp - 8]
push 1
push edi
call esi
inc ebx
cmp ebx, 5
jl 0x100383b0
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x880bb
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x3fa28
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x8818d
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x3fa28
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x881b8
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x3fa28
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x98c68
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x3fa28
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x98c7f
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x3fa28
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
add edi, 0x98c9a
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x3fa28
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x9920d
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x3fa28
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x8821f
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x7f1c8
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x98cb1
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x7f1c8
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
add edi, 0x99274
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0x7f1c8
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
add edi, 0x13e01
push 4
push edi
call esi
lea eax, [ebp - 0xc]
mov dword [edi], 0xe5dfb
push eax
push dword [ebp - 8]
push 4
push edi
call esi
mov edi, dword [0x10054d10]
lea eax, [ebp - 8]
push eax
push 0x40
push 1
add edi, 0x13e06
push edi
call esi
lea eax, [ebp - 0xc]
mov byte [edi], 0xb7
push eax
push dword [ebp - 8]
push 1
push edi
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1003ec02
mov esp, ebp
pop ebp
ret 4