Function at 0x11054a20
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [0x110e51e0]
push ebx
mov bl, cl
push esi
mov edx, dword [eax + 0x28]
mov esi, 0x110e5230
mov eax, dword [0x110c0a1c]
push edi
mov edi, 0x5970f8
push 0x110e51f0
mov dword [eax], edx
mov edx, dword [0x110e51e0]
mov eax, dword [0x110c09b8]
push 0x20
push 0x56d75c
mov dword [eax], edx
mov eax, dword [0x110c0a38]
mov edx, dword [0x110e51e0]
mov dword [eax], edx
mov eax, dword [0x110e51e0]
mov ecx, dword [eax + 0x64]
mov eax, dword [0x110c0a34]
mov dword [eax], ecx
mov eax, dword [0x110c0aa0]
mov ecx, dword [0x110e51e4]
mov dword [eax], ecx
mov eax, dword [0x110c09bc]
mov ecx, dword [0x110e522c]
mov dword [eax], ecx
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x110e51e8]
mov ecx, 0x77
mov dword [0x66be40], eax
mov esi, 0x110e5260
mov eax, dword [0x110e51ec]
mov dword [0x66be44], eax
mov edi, dword [0x51c120]
rep movsd dword es:[edi], dword [esi]
call fcn.1108b8f5
mov ecx, dword [0x110e5214]
add esp, 0xc
mov eax, dword [0x110c0a28]
mov dword [eax], ecx
mov eax, dword [0x110c0a2c]
mov ecx, dword [0x110e5210]
mov dword [eax], ecx
mov eax, dword [0x110c0a74]
mov ecx, dword [0x110e5218]
mov dword [eax], ecx
mov eax, dword [0x110c0a5c]
mov cl, byte [0x110e521c]
mov byte [eax], cl
mov eax, dword [0x110e5220]
mov dword [0x6681ac], eax
mov eax, dword [0x110c09ec]
mov dword [eax], 0
cmp dword [0x110e5228], 0
je 0x11054b50
mov eax, 0
call dword [0x110af438]
test eax, eax
je 0x11054b50
mov eax, dword [0x110c0a70]
mov ecx, dword [0x110e5228]
mov edx, dword [0x110e51e0]
push 0xa
sub ecx, dword [eax]
push 0
call fcn.11014c60
mov eax, dword [0x110c09ec]
mov ecx, dword [0x110e5224]
mov dword [eax], ecx
mov dword [ebp - 4], 4
mov edx, dword [ebp - 4]
mov eax, 0x110e545c
call dword [0x110af0c8]
mov eax, dword [0x110f6aac]
test eax, eax
jle 0x11054b7a
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call dword [0x110af080]
mov edx, dword [0x5191d0]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e543c]
mov dword [ecx + edx*4], eax
mov edx, dword [0x5191dc]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e5440]
mov dword [ecx + edx*4], eax
mov edx, dword [0x5191e8]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e5444]
mov dword [ecx + edx*4], eax
mov edx, dword [0x5191f4]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e5448]
mov dword [ecx + edx*4], eax
mov edx, dword [0x519200]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e544c]
mov dword [ecx + edx*4], eax
mov edx, dword [0x51920c]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e5450]
mov dword [ecx + edx*4], eax
mov edx, dword [0x519224]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e5454]
mov dword [ecx + edx*4], eax
mov edx, dword [0x519230]
mov ecx, dword [0x5186c0]
mov eax, dword [0x110e5458]
mov dword [ecx + edx*4], eax
cmp dword [0x110e546c], 0
je 0x11054c28
call fcn.11054160
test bl, bl
je 0x11054c6e
cmp byte [0x110f6973], 2
jne 0x11054c68
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x422bde
mov byte [0x110f6973], 1
call esi
lea eax, [ebp - 4]
mov byte [0x422bde], 1
push eax
push dword [ebp - 4]
push 1
push 0x422bde
call esi
call dword [0x110af490]
cmp byte [0x110c6683], 0
mov byte [0x110e5470], 0
mov byte [0x110d720d], 0
je 0x11054c92
push str._n_SFALL__Restore_control_to_dude._n
call fcn.11014530
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret