Function at 0x11054290
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x110c09b8]
mov ecx, 0xc
push esi
push edi
mov esi, 0x5970f8
mov edi, 0x110e5230
mov eax, dword [eax]
mov dword [0x110e51e0], eax
mov eax, dword [0x110c0aa0]
push 0x56d75c
push 0x20
push 0x110e51f0
mov eax, dword [eax]
mov dword [0x110e51e4], eax
mov eax, dword [0x110c09bc]
mov eax, dword [eax]
mov dword [0x110e522c], eax
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x66be40]
mov ecx, 0x77
mov dword [0x110e51e8], eax
mov edi, 0x110e5260
mov eax, dword [0x66be44]
mov dword [0x110e51ec], eax
mov esi, dword [0x51c120]
rep movsd dword es:[edi], dword [esi]
call fcn.1108b8f5
mov eax, dword [0x110c0a28]
add esp, 0xc
mov eax, dword [eax]
mov dword [0x110e5214], eax
mov eax, dword [0x110c0a2c]
mov eax, dword [eax]
mov dword [0x110e5210], eax
mov eax, dword [0x110c0a74]
mov eax, dword [eax]
mov dword [0x110e5218], eax
mov eax, dword [0x110c0a5c]
mov al, byte [eax]
mov byte [0x110e521c], al
mov eax, dword [0x6681ac]
mov dword [0x110e5220], eax
mov eax, dword [0x110c09ec]
mov eax, dword [eax]
mov dword [0x110e5224], eax
mov eax, 0
call dword [0x110af438]
test eax, eax
je 0x110543a4
mov esi, dword [0x6648c0]
mov eax, dword [0x110e51e0]
test esi, esi
je 0x11054384
cmp dword [esi + 8], eax
je 0x11054386
mov edi, edi
cmp dword [esi + 4], 0xa
je 0x11054386
mov esi, dword [esi + 0x10]
test esi, esi
je 0x11054386
cmp dword [esi + 8], eax
jne 0x11054370
jmp 0x11054386
xor esi, esi
mov dword [ebp - 4], eax
mov edx, 0xa
mov eax, dword [ebp - 4]
call dword [0x110af1a8]
test esi, esi
je 0x110543a4
mov eax, dword [esi]
mov dword [0x110e5228], eax
jmp 0x110543ae
mov dword [0x110e5228], 0
mov dword [ebp - 4], 4
mov edx, dword [ebp - 4]
mov eax, 0x110e545c
call dword [0x110af0dc]
cmp dword [0x110e546c], 0
mov ecx, dword [0x5191d0]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e543c], eax
mov ecx, dword [0x5191dc]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e5440], eax
mov ecx, dword [0x5191e8]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e5444], eax
mov ecx, dword [0x5191f4]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e5448], eax
mov ecx, dword [0x519200]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e544c], eax
mov ecx, dword [0x51920c]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e5450], eax
mov ecx, dword [0x519224]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e5454], eax
mov ecx, dword [0x519230]
mov eax, dword [0x5186c0]
mov eax, dword [eax + ecx*4]
mov dword [0x110e5458], eax
je 0x11054469
call fcn.11054120
cmp byte [0x110f6973], 1
mov byte [0x110e5470], 1
jne 0x110544ac
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x422bde
mov byte [0x110f6973], 2
call esi
lea eax, [ebp - 4]
mov byte [0x422bde], 0
push eax
push dword [ebp - 4]
push 1
push 0x422bde
call esi
cmp byte [0x110c6683], 0
je 0x110544c2
push 0x110b87d4
call fcn.11014530
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret