Function at 0x10007370
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007f6cd
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, dword [0x100b6018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.CG_Init___loading.._n
push 7
call fcn.1000acd0
call fcn.10007130
push str.preparing_to_load_perma_hooks_n
push 7
call fcn.1000acd0
add esp, 0x10
call fcn.10007640
mov eax, dword [0x100b9cfc]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add eax, 0x1b3b5
mov dword [0x100b9d28], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x4d76da
mov dword [0x100b9d3c], 0x4696b0
mov dword [0x100b9d38], 0x527670
mov dword [0x100b9d34], 0x46ca40
mov dword [0x100b9d30], 0x5f5360
mov dword [0x100b9d2c], 0x469120
call esi
mov eax, dword [0x100aae70]
mov ecx, 0x4d76da
push 0
mov dword [ecx], eax
mov al, byte [0x100aae74]
mov byte [ecx + 4], al
push dword [ebp - 0x14]
push 5
push ecx
call esi
call fcn.1007c520
push 0x10008360
push 0x100b9d3c
call fcn.1007bdc0
call fcn.1007c580
call fcn.1007c520
push 0x10079c70
push 0x100b9d38
call fcn.1007bdc0
call fcn.1007c580
call fcn.1007c520
push 0x10069d40
push 0x100b9d34
call fcn.1007bdc0
call fcn.1007c580
call fcn.1007c520
push 0x10069fb0
push 0x100b9d30
call fcn.1007bdc0
call fcn.1007c580
cmp dword [0x100b9cfc], 0
jne 0x100074ac
mov esi, 0x100b9d2c
mov edi, 0x100084b0
jmp 0x100074b6
mov esi, 0x100b9d28
mov edi, 0x100084f0
call fcn.1007c520
push edi
push esi
call fcn.1007bdc0
call fcn.1007c580
push str.Successfully_loaded_image_resources_n
push 7
call fcn.1000acd0
add esp, 4
mov edx, 0x10077b00
mov ecx, str.getbuttonpressed
call fcn.10077a20
mov edx, 0x10077b80
mov ecx, str.getforwardmove
call fcn.10077a20
mov edx, 0x10077c30
mov ecx, str.getrightmove
call fcn.10077a20
mov edx, 0x10077ce0
mov ecx, str.setvelocity
call fcn.10077a20
mov edx, 0x10077fc0
mov ecx, str.weaponexists
call fcn.10077940
mov edx, 0x10077df0
mov ecx, str.worldtoscreen
call fcn.10077940
mov edx, 0x10078050
mov ecx, str.getevarint
call fcn.10077940
mov edx, 0x100780e0
mov ecx, str.getevarfloat
call fcn.10077940
mov edx, 0x10078170
mov ecx, str.getevar
call fcn.10077940
mov edx, 0x10078560
mov ecx, str.writetoaddress
call fcn.10077940
mov edx, 0x10078900
mov ecx, str.getaddressint
call fcn.10077940
mov edx, 0x10078a50
mov ecx, str.getaddressfloat
call fcn.10077940
mov edx, 0x10078c10
mov ecx, str.canloadposition
call fcn.10077940
mov edx, 0x10078ba0
mov ecx, str.sendcommand
call fcn.10077940
add esp, 4
call fcn.1007c520
push 0x10078d40
push 0x100b6124
call fcn.1007bdc0
call fcn.1007c580
call fcn.1007c520
push 0x10078c70
push 0x100b6128
call fcn.1007bdc0
call fcn.1007c580
call fcn.1000bdd0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100b6134
call fcn.10007fb0
mov dword [ebp - 4], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1000f860
push str.21_kej_extension_has_been_loaded__n
push 7
call fcn.1000acd0
add esp, 0x20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007dbea
mov esp, ebp
pop ebp
ret