Function at 0x11040950
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ecx
cmp byte [0x110c6683], 0
je 0x11040974
test byte [0x110c66ec], 1
je 0x11040974
push 1
mov edx, 1
mov ecx, str.Initializing_critical_table_override...
call fcn.11011060
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x423f96
mov dword [0x110e8184], 0x110f61f8
call esi
lea eax, [esp + 4]
mov dword [0x423f96], 0x110f61f8
push eax
push dword [esp + 8]
push 4
push 0x423f96
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x423fb3
call esi
lea eax, [esp + 4]
mov dword [0x423fb3], 0x110e8188
push eax
push dword [esp + 8]
push 4
push 0x423fb3
call esi
mov eax, dword [0x110e8180]
pop esi
cmp eax, 2
je 0x110409f1
cmp eax, 3
jne 0x11040d93
mov dword [0x511814], 0
mov dword [0x511818], 0x1460
mov dword [0x51181c], 0x1388
mov dword [0x511830], 0
mov dword [0x511834], 0x1460
mov dword [0x511838], 0x1388
mov dword [0x5118bc], 0
mov dword [0x5118c0], 0x1460
mov dword [0x5118c4], 0x1388
mov dword [0x5118d8], 0
mov dword [0x5118dc], 0x1460
mov dword [0x5118e0], 0x1388
mov dword [0x511eac], 0x14ba
mov dword [0x512190], 0xffffffff
mov dword [0x512778], 0xffffffff
mov dword [0x512fb4], 2
mov dword [0x51305c], 2
mov dword [0x513080], 0x15e8
mov dword [0x5140fc], 2
mov dword [0x5159b4], 4
mov dword [0x5159d0], 4
mov dword [0x5159ec], 4
mov dword [0x515a08], 4
mov dword [0x515a24], 4
mov dword [0x5173dc], 0x1389
mov dword [0x5173f8], 0x1389
mov dword [0x517414], 0x1389
mov dword [0x517430], 0x1bc1
mov dword [0x51744c], 0x1bbd
mov dword [0x517450], 0x1bc0
mov dword [0x517468], 0x1bbd
mov dword [0x517484], 0x1390
mov dword [0x5174a0], 0x1390
mov dword [0x5174bc], 0x1391
mov dword [0x5174d8], 0x1391
mov dword [0x5174f4], 0x1bbe
mov dword [0x517510], 0x1bbe
mov dword [0x51752c], 0x1390
mov dword [0x517548], 0x1390
mov dword [0x517564], 0x1391
mov dword [0x517580], 0x1391
mov dword [0x51759c], 0x1bbe
mov dword [0x5175b8], 0x1bbe
mov dword [0x517644], 0x1bbd
mov dword [0x517660], 0x1bbd
mov dword [0x51767c], 0x139f
mov dword [0x517698], 0x1bbd
mov dword [0x51769c], 0x1bbf
mov dword [0x5176b4], 0x1bbd
mov dword [0x5176b8], 0x1bbf
mov dword [0x5176d0], 0x1bbf
mov dword [0x5176ec], 0x1bbf
mov dword [0x517708], 0x1bbf
mov dword [0x517724], 0x139f
mov dword [0x517740], 0x1bbd
mov dword [0x517744], 0x1bbf
mov dword [0x51775c], 0x1bbd
mov dword [0x517760], 0x1bbf
mov dword [0x517778], 0x1bbf
mov dword [0x517794], 0x1bbf
mov dword [0x5177b0], 0x1bbf
mov dword [0x5177cc], 0x13a3
mov dword [0x5177e8], 0x13a3
mov dword [0x517804], 0x13a3
mov dword [0x517820], 0x13a3
mov dword [0x51783c], 0x1bc0
mov dword [0x517858], 0x1bc0
mov dword [0x517874], 0x13a9
mov dword [0x517890], 0x13a3
mov dword [0x517894], 0x1bbd
mov dword [0x5178ac], 0x1bbd
mov dword [0x5178c8], 0x1bbd
mov dword [0x5178e4], 0x1bbd
mov dword [0x517900], 0x1bbd
mov dword [0x510ef4], 0x802
mov dword [0x510f04], 0x139b
mov dword [0x511aa4], 4
mov dword [0x511ac4], 0x802
mov dword [0x511ad4], 0x145c
mov dword [0x514444], 2
mov dword [0x516764], 0x1a2d
mov dword [0x516780], 0x1a2d
mov dword [0x51678c], 0x802
mov dword [0x51679c], 0x1a30
mov dword [0x5167b8], 0x1a30
mov dword [0x5167d4], 0x1a30
mov dword [0x5167f0], 0x1a30
mov dword [0x516d74], 0x802
mov dword [0x51735c], 0x802
mov dword [0x517940], 3
mov dword [0x517978], 4
mov dword [0x51798c], 0x1bbd
mov dword [0x5179a8], 0x1bbd
call fcn.11040450
test eax, eax
je 0x11040db5
cmp byte [0x110c6683], 0
je 0x11040dd8
test byte [0x110c66ec], 1
je 0x11040dd8
mov ecx, str.Failed_to_initialize_critical_hit_table_from_file.
jmp 0x11040dcc
cmp byte [0x110c6683], 0
je 0x11040dd8
test byte [0x110c66ec], 1
je 0x11040dd8
mov ecx, str.Completed_applying_critical_hit_table.
push 1
mov edx, 1
call fcn.11011060
mov byte [0x110c6942], 1
pop ecx
ret