Function at 0x1011d0e0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push 0x1011cfe0
push 0x4eae1a
mov bl, 0xe9
call fcn.10110d60
push 0x1011d020
push 0x58dcf0
call fcn.10110d60
push 0x1011d060
push 0x58de5a
call fcn.10110d60
push 0x1011d0a0
push 0x58dee2
call fcn.10110d60
push 0x1011cfd0
push 0x857dc0
call fcn.10110d60
push 0x1011b630
push 0x80f865
mov bl, 0xe8
call fcn.10110d60
push 0x1011cce0
push 0x7dc904
mov bl, 0xe9
call fcn.10110d60
push 0x1011ce90
push 0x7dc9e6
mov bl, 0xe8
call fcn.10110d60
add esp, 0x40
push 0x1011ce90
push 0x7dca78
call fcn.10110d60
push 0x1011ce90
push 0x7dcb05
call fcn.10110d60
push 0x1011ce90
push 0x7dcb96
call fcn.10110d60
push 0x1011ce90
push 0x7dcc16
call fcn.10110d60
push 0x1011ce90
push 0x7dcca8
call fcn.10110d60
push 0x1011ce90
push 0x7dcd35
call fcn.10110d60
push 0x1011ce90
push 0x7dcdb4
call fcn.10110d60
push 0x1011ce90
push 0x7dce51
call fcn.10110d60
add esp, 0x40
push 0x1011ce90
push 0x7dcee7
call fcn.10110d60
xor eax, eax
push 0x1011be30
push 0x7dd4f3
mov bl, 0xe9
mov dword [0x10a76a28], eax
mov dword [0x10a76a18], eax
mov dword [0x10a76a24], eax
mov dword [0x108c7894], eax
mov dword [0x10a76a20], eax
call fcn.10110d60
push 0x1011be70
push 0x7dd5c0
mov bl, 0xe8
call fcn.10110d60
push 0x1011bde0
push 0x7dc4c9
mov bl, 0xe9
call fcn.10110d60
push 0x10119e30
push 0x7db239
call fcn.10110d60
push 0x1011c540
push 0x8679d0
call fcn.10110d60
push 0x1011bfa0
push 0x78e390
call fcn.10110d60
push 0x1011b6e0
push 0x842460
mov bl, 0xe8
call fcn.10110d60
add esp, 0x40
push 0x10114f00
push 0x84f406
call fcn.10110d60
push 0x10114f60
push 0x84f43a
call fcn.10110d60
push 0x10114f60
push 0x84f477
call fcn.10110d60
push 0x10114f60
push 0x84f4c0
call fcn.10110d60
push 0x10114f60
push 0x84f4ff
call fcn.10110d60
push 0x10114f00
push 0x8643b6
call fcn.10110d60
push 0x10114f60
push 0x8643ea
call fcn.10110d60
push 0x10114f60
push 0x864427
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x864470
call fcn.10110d60
push 0x10114f60
push 0x8644af
call fcn.10110d60
mov esi, 5
mov ebx, 0x847046
call fcn.1010cff0
mov ebx, 0x847036
call fcn.1010cff0
push 0x1011ab80
push 0x84702e
mov bl, 0xe8
call fcn.10110d60
mov ebx, 0x856776
call fcn.1010cff0
push 0x1011a940
push 0x85676e
mov bl, 0xe8
call fcn.10110d60
mov ebx, 0x858016
call fcn.1010cff0
mov ebx, 0x857898
call fcn.1010cff0
push 0x1011a170
push 0x857890
mov bl, 0xe8
call fcn.10110d60
push 0x1011a010
push 0x7db4d8
call fcn.10110d60
push 0x1011a010
push 0x7dbd3d
call fcn.10110d60
push 0x1011a010
push 0x7dc197
call fcn.10110d60
add esp, 0x40
push 0x10119eb0
push 0x7db5d0
call fcn.10110d60
push 0x10119eb0
push 0x7db63e
call fcn.10110d60
push 0x10119eb0
push 0x7db6d2
call fcn.10110d60
push 0x10119eb0
push 0x7db737
call fcn.10110d60
push 0x10119960
push 0x7d4f9e
call fcn.10110d60
push 0x10115960
push 0x77f7ee
call fcn.10110d60
mov ebx, 0x7d4fa6
call fcn.1010cff0
push 0x10114f60
push 0x7d582d
mov bl, 0xe8
call fcn.10110d60
mov ebx, 0x835116
call fcn.1010cff0
mov ebx, 0x8337b0
call fcn.1010cff0
mov ebx, 0x83443c
call fcn.1010cff0
mov ebx, 0x8337b8
call fcn.1010cff0
push 0x10119920
push 0x835cb1
mov bl, 0xe9
call fcn.10110d60
add esp, 0x40
push 0x101198e0
push 0x835c86
call fcn.10110d60
push 0x101198c0
push 0x83516f
call fcn.10110d60
push 0x101198d0
push 0x8352b1
call fcn.10110d60
push 0x10119850
push 0x83538a
mov bl, 0xe8
call fcn.10110d60
push 0x10119800
push 0x834c8d
call fcn.10110d60
push 0x10114f60
push 0x7db7b0
call fcn.10110d60
push 0x10114f60
push 0x7db812
call fcn.10110d60
push 0x10114f60
push 0x7db874
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x7db8e0
call fcn.10110d60
push 0x10114f60
push 0x7db959
call fcn.10110d60
push 0x10114f60
push 0x7db9a2
call fcn.10110d60
push 0x10114f60
push 0x7dba20
call fcn.10110d60
push 0x10114f60
push 0x7dba69
call fcn.10110d60
push 0x10115030
push 0x83baf4
mov bl, 0xe9
call fcn.10110d60
push 0x10115040
push 0x83bb94
call fcn.10110d60
mov ebx, 0x77e906
call fcn.1010cff0
push 0x10118480
push 0x77f8ca
mov bl, 0xe9
call fcn.10110d60
add esp, 0x40
push 0x10118490
push 0x77fa1c
call fcn.10110d60
push 0x101184a0
push 0x77faa7
call fcn.10110d60
mov ebx, 0x77f822
call fcn.1010cff0
push 0x10117a70
push 0x7801d7
mov bl, 0xe9
call fcn.10110d60
push 0x10117ae0
push 0x780215
call fcn.10110d60
push 0x10117bb0
push 0x781758
call fcn.10110d60
push 0x10117bf0
push 0x781805
call fcn.10110d60
push 0x10117c30
push 0x78190b
call fcn.10110d60
push 0x10117ca0
push 0x78194c
call fcn.10110d60
add esp, 0x40
push 0x10117d70
push 0x782854
call fcn.10110d60
push 0x10117db0
push 0x782a30
call fcn.10110d60
push 0x10117df0
push 0x782b83
call fcn.10110d60
push 0x10117e50
push 0x782d13
call fcn.10110d60
push 0x10117ec0
push 0x782d54
call fcn.10110d60
push 0x10117ff0
push 0x782f69
call fcn.10110d60
push 0x10118030
push 0x782fdf
call fcn.10110d60
push 0x10118070
push 0x7830ed
call fcn.10110d60
add esp, 0x40
push 0x101180e0
push 0x78312e
call fcn.10110d60
push 0x101181b0
push 0x7832d5
call fcn.10110d60
push 0x101181f0
push 0x784029
call fcn.10110d60
push 0x10118220
push 0x78482d
call fcn.10110d60
push 0x10118250
push 0x7848a5
call fcn.10110d60
push 0x10118280
push 0x784904
call fcn.10110d60
push 0x101182b0
push 0x784973
call fcn.10110d60
push 0x101182e0
push 0x7849e4
call fcn.10110d60
add esp, 0x40
push 0x10118310
push 0x784a64
call fcn.10110d60
push 0x10118340
push 0x784b6b
call fcn.10110d60
push 0x101183b0
push 0x784bac
call fcn.10110d60
push 0x10114f00
push 0x7c1872
mov bl, 0xe8
call fcn.10110d60
push 0x10114f60
push 0x7c18ac
call fcn.10110d60
push 0x10114f60
push 0x7c18f5
call fcn.10110d60
push 0x10114f60
push 0x7c1950
call fcn.10110d60
push 0x10114f60
push 0x7c199b
call fcn.10110d60
add esp, 0x40
push 0x10114f00
push 0x7c2676
call fcn.10110d60
push 0x10114f60
push 0x7c26aa
call fcn.10110d60
push 0x10114f60
push 0x7c26ea
call fcn.10110d60
push 0x10114f60
push 0x7c273c
call fcn.10110d60
push 0x10114f60
push 0x7c2782
call fcn.10110d60
push 0x10114f00
push 0x7c46e6
call fcn.10110d60
push 0x10114f60
push 0x7c471a
call fcn.10110d60
push 0x10114f60
push 0x7c4757
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x7c47a0
call fcn.10110d60
push 0x10114f60
push 0x7c47df
call fcn.10110d60
push 0x10114f00
push 0x7c6bcc
call fcn.10110d60
push 0x10114f60
push 0x7c6c06
call fcn.10110d60
push 0x10114f60
push 0x7c6c49
call fcn.10110d60
push 0x10114f60
push 0x7c6c98
call fcn.10110d60
push 0x10114f60
push 0x7c6cdd
call fcn.10110d60
push 0x10114f00
push 0x7c7d0c
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x7c7d46
call fcn.10110d60
push 0x10114f60
push 0x7c7d89
call fcn.10110d60
push 0x10114f60
push 0x7c7dd8
call fcn.10110d60
push 0x10114f60
push 0x7c7e1d
call fcn.10110d60
push 0x10114f00
push 0x7cb6f6
call fcn.10110d60
push 0x10114f60
push 0x7cb72a
call fcn.10110d60
push 0x10114f60
push 0x7cb767
call fcn.10110d60
push 0x10114f60
push 0x7cb7b0
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x7cb7ef
call fcn.10110d60
push 0x10114f00
push 0x7d1786
call fcn.10110d60
push 0x10114f60
push 0x7d17ba
call fcn.10110d60
push 0x10114f60
push 0x7d17f7
call fcn.10110d60
push 0x10114f60
push 0x7d1840
call fcn.10110d60
push 0x10114f60
push 0x7d187f
call fcn.10110d60
push 0x10114f00
push 0x7f65a6
call fcn.10110d60
push 0x10114f60
push 0x7f65e6
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x7f6638
call fcn.10110d60
push 0x10114f60
push 0x7f66a2
call fcn.10110d60
push 0x10114f60
push 0x7f66fa
call fcn.10110d60
push 0x10114f00
push 0x80c848
call fcn.10110d60
push 0x10114f60
push 0x80c87c
call fcn.10110d60
push 0x10114f60
push 0x80c8bc
call fcn.10110d60
push 0x10114f60
push 0x80c90e
call fcn.10110d60
push 0x10114f60
push 0x80c954
call fcn.10110d60
add esp, 0x40
push 0x1011b310
push 0x82c750
call fcn.10110d60
push 0x1011b530
push 0x82ca22
call fcn.10110d60
push 0x10114f60
push 0x82cb4b
call fcn.10110d60
push 0x10114f60
push 0x82cb00
call fcn.10110d60
push 0x10114f60
push 0x82caa5
call fcn.10110d60
push 0x10114f60
push 0x82ca5c
call fcn.10110d60
push 0x10114f00
push 0x836ef6
call fcn.10110d60
push 0x10114f60
push 0x836f2a
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x836f67
call fcn.10110d60
push 0x10114f60
push 0x836fb0
call fcn.10110d60
push 0x10114f60
push 0x836fef
call fcn.10110d60
push 0x10114f00
push 0x83ea46
call fcn.10110d60
push 0x10114f60
push 0x83ea7a
call fcn.10110d60
push 0x10114f60
push 0x83eab7
call fcn.10110d60
push 0x10114f60
push 0x83eb00
call fcn.10110d60
push 0x10114f60
push 0x83eb3f
call fcn.10110d60
add esp, 0x40
push 0x10114f00
push 0x841e49
call fcn.10110d60
push 0x10114f60
push 0x841e7d
call fcn.10110d60
push 0x10114f60
push 0x841eba
call fcn.10110d60
push 0x10114f60
push 0x841f03
call fcn.10110d60
push 0x10114f60
push 0x841f42
call fcn.10110d60
push 0x10114f00
push 0x843826
call fcn.10110d60
push 0x10114f60
push 0x84385a
call fcn.10110d60
push 0x10114f60
push 0x843897
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x8438e0
call fcn.10110d60
push 0x10114f60
push 0x84391f
call fcn.10110d60
push 0x10114f00
push 0x845956
call fcn.10110d60
push 0x10114f60
push 0x84598a
call fcn.10110d60
push 0x10114f60
push 0x8459c7
call fcn.10110d60
push 0x10114f60
push 0x845a10
call fcn.10110d60
push 0x10114f60
push 0x845a4f
call fcn.10110d60
push 0x10114f00
push 0x8470a6
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x8470da
call fcn.10110d60
push 0x10114f60
push 0x847117
call fcn.10110d60
push 0x10114f60
push 0x847160
call fcn.10110d60
push 0x10114f60
push 0x84719f
call fcn.10110d60
push 0x10114f00
push 0x77f209
call fcn.10110d60
push 0x10114f60
push 0x77f23d
call fcn.10110d60
push 0x10114f60
push 0x77f27a
call fcn.10110d60
push 0x10114f60
push 0x77f2c3
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x77f302
call fcn.10110d60
push 0x10114f00
push 0x894226
call fcn.10110d60
push 0x10114f60
push 0x89425a
call fcn.10110d60
push 0x10114f60
push 0x894297
call fcn.10110d60
push 0x10114f60
push 0x8942e0
call fcn.10110d60
push 0x10114f60
push 0x89431f
call fcn.10110d60
push 0x10114f00
push 0x850966
call fcn.10110d60
push 0x10114f60
push 0x85099a
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x8509d7
call fcn.10110d60
push 0x10114f60
push 0x850a20
call fcn.10110d60
push 0x10114f60
push 0x850a5f
call fcn.10110d60
push 0x10114f00
push 0x852476
call fcn.10110d60
push 0x10114f60
push 0x8524aa
call fcn.10110d60
push 0x10114f60
push 0x8524e7
call fcn.10110d60
push 0x10114f60
push 0x852530
call fcn.10110d60
push 0x10114f60
push 0x85256f
call fcn.10110d60
add esp, 0x40
push 0x10114f00
push 0x8540b6
call fcn.10110d60
push 0x10114f60
push 0x8540ea
call fcn.10110d60
push 0x10114f60
push 0x854127
call fcn.10110d60
push 0x10114f60
push 0x854170
call fcn.10110d60
push 0x10114f60
push 0x8541af
call fcn.10110d60
push 0x10114f00
push 0x87f886
call fcn.10110d60
push 0x10114f60
push 0x87f8ba
call fcn.10110d60
push 0x10114f60
push 0x87f8f7
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x87f940
call fcn.10110d60
push 0x10114f60
push 0x87f97f
call fcn.10110d60
push 0x10114f00
push 0x882f52
call fcn.10110d60
push 0x10114f60
push 0x882f8c
call fcn.10110d60
push 0x10114f60
push 0x882fd5
call fcn.10110d60
push 0x10114f60
push 0x883030
call fcn.10110d60
push 0x10114f60
push 0x88307b
call fcn.10110d60
push 0x10114f00
push 0x893102
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x89313c
call fcn.10110d60
push 0x10114f60
push 0x893185
call fcn.10110d60
push 0x10114f60
push 0x8931e0
call fcn.10110d60
push 0x10114f60
push 0x89322b
call fcn.10110d60
push 0x10114f00
push 0x8812a2
call fcn.10110d60
push 0x10114f60
push 0x8812dc
call fcn.10110d60
push 0x10114f60
push 0x881325
call fcn.10110d60
push 0x10114f60
push 0x881380
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x8813cb
call fcn.10110d60
push 0x10114f00
push 0x879ee2
call fcn.10110d60
push 0x10114f60
push 0x879f1c
call fcn.10110d60
push 0x10114f60
push 0x879f65
call fcn.10110d60
push 0x10114f60
push 0x879fc0
call fcn.10110d60
push 0x10114f60
push 0x87a00b
call fcn.10110d60
push 0x10114f00
push 0x8747b6
call fcn.10110d60
push 0x10114f60
push 0x8747f0
call fcn.10110d60
add esp, 0x40
push 0x10114f60
push 0x87483c
call fcn.10110d60
push 0x10114f60
push 0x8748a0
call fcn.10110d60
push 0x10114f60
push 0x8748f2
call fcn.10110d60
push 0x10114f00
push 0x8781bc
call fcn.10110d60
push 0x10114f60
push 0x8781f0
call fcn.10110d60
push 0x10114f60
push 0x878230
call fcn.10110d60
push 0x10114f60
push 0x878282
call fcn.10110d60
push 0x10114f60
push 0x8782c8
call fcn.10110d60
add esp, 0x40
push 0x10114f00
push 0x84d01a
call fcn.10110d60
push 0x10114f60
push 0x84d05a
call fcn.10110d60
push 0x10114f60
push 0x84d0ac
call fcn.10110d60
push 0x10114f60
push 0x84d116
call fcn.10110d60
push 0x10114f60
push 0x84d16e
call fcn.10110d60
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x28
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7dc924
call esi
mov bl, 0x11
lea ecx, [ebp - 4]
push ecx
mov byte [0x7dc924], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7dc924
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7dc93f
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x7dc93f], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7dc93f
call esi
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x7dc95a
call esi
lea ecx, [ebp - 4]
push ecx
mov byte [0x7dc95a], bl
mov edx, dword [ebp - 4]
push edx
push 1
push 0x7dc95a
call esi
push 0x10118500
push 0x83510e
mov bl, 0xe8
call fcn.10110d60
add esp, 8
pop esi
pop ebx
mov esp, ebp
pop ebp
ret