Function at 0x1101f9f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
mov eax, dword [0x110c679c]
sub esp, 0x10
push esi
test eax, eax
jg 0x1101fa09
mov dword [0x110c679c], 0x1e0
jmp 0x1101fa18
mov ecx, 0x140
cmp eax, ecx
cmovl eax, ecx
mov dword [0x110c679c], eax
mov eax, dword [0x110c6798]
test eax, eax
jg 0x1101fa2d
mov dword [0x110c6798], 0x190
jmp 0x1101fa3c
mov ecx, 0xf0
cmp eax, ecx
cmovl eax, ecx
mov dword [0x110c6798], eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4b12f8
call esi
mov eax, 0x1101f590
mov byte [0x4b12f8], 0xe9
sub eax, 0x4b12fd
mov dword [0x4b12f9], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4b12f8
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4b3924
call esi
mov eax, 0x1101f5a0
mov byte [0x4b3924], 0xe9
sub eax, 0x4b3929
mov dword [0x4b3925], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4b3924
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x4b2ac1
call esi
mov eax, 0x1101f600
sub eax, 0x4b2ac5
mov dword [0x4b2ac1], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x4b2ac1
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x4b2262
call esi
mov eax, 0x1101f690
sub eax, 0x4b2266
mov dword [0x4b2262], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x4b2262
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x4b2bf8
call esi
mov eax, 0x1101f6c0
sub eax, 0x4b2bfc
mov dword [0x4b2bf8], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x4b2bf8
call esi
push 1
push 0x1101f850
mov edx, 0x489730
mov cl, 0xe8
call fcn.1100fb30
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x4897e3
call esi
mov eax, 0x1101f870
mov byte [0x4897e3], 0xe8
sub eax, 0x4897e8
mov dword [0x4897e4], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x4897e3
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 5
push 0x489665
call esi
mov eax, 0x1101f890
mov byte [0x489665], 0xe8
sub eax, 0x48966a
mov dword [0x489666], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 5
push 0x489665
call esi
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x4895b8
call esi
mov eax, 0x1101f9d0
sub eax, 0x4895bc
mov dword [0x4895b8], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x4895b8
call esi
push 1
push 0x1101f8b0
mov edx, 0x48c66b
mov cl, 0xe8
call fcn.1100fb30
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x48c5f4
call esi
mov eax, 0x1101f9e0
sub eax, 0x48c5f8
mov dword [0x48c5f4], eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x48c5f4
call esi
mov eax, dword [0x110c0ac0]
mov dword [0x110e6d68], eax
mov eax, dword [0x110c0abc]
mov dword [0x110e6d6c], eax
lea eax, [esp + 4]
push eax
push 0x40
push 4
push 0x45c886
call esi
mov dword [0x45c886], 0x110e6d60
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push 4
push 0x45c886
call esi
call fcn.1101ea40
call fcn.1101f110
sub esp, 0x28
mov ecx, 0x110e5100
mov eax, esp
mov dword [eax], 0x110b441c
mov dword [eax + 0x24], eax
lea eax, [esp + 0x30]
push eax
call fcn.110053e0
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x1101fcde
push dword [esp + 4]
mov edx, dword [esp + 0x10]
push ecx
call fcn.11008d10
mov edx, dword [esp + 0x10]
mov eax, 0x66666667
mov ecx, dword [esp + 8]
sub edx, ecx
imul edx
push 0x28
mov eax, edx
sar eax, 4
mov edx, eax
shr edx, 0x1f
add edx, eax
call fcn.11004ac0
pop esi
add esp, 0x10
ret