Function at 0x100e7760
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x24]
mov ecx, 9
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x101d6d64]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], ecx
mov ecx, 0x101e97b3
call fcn.1019d101
mov ecx, dword [ebp - 0xc]
call fcn.100e6db0
mov dword [0x101e139c], eax
cmp dword [0x101e139c], 0
jne 0x100e77b1
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e7140
mov dword [0x101e144c], eax
cmp dword [0x101e144c], 0
jne 0x100e77ce
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e93b0
mov dword [0x101e1720], eax
cmp dword [0x101e1720], 0
jne 0x100e77eb
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e9490
mov dword [0x101e1730], eax
cmp dword [0x101e1730], 0
jne 0x100e7808
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e9560
mov dword [0x101e1734], eax
cmp dword [0x101e1734], 0
jne 0x100e7825
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e8e20
mov dword [0x101e1380], eax
cmp dword [0x101e1380], 0
jne 0x100e7842
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e8ee0
mov dword [0x101e3068], eax
cmp dword [0x101e3068], 0
jne 0x100e785f
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e7050
mov dword [0x101e308c], eax
cmp dword [0x101e308c], 0
jne 0x100e787c
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e7200
mov dword [0x101e17b4], eax
cmp dword [0x101e17b4], 0
jne 0x100e7899
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e6e70
mov dword [0x101e17a8], eax
cmp dword [0x101e17a8], 0
jne 0x100e78b6
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e6f50
mov dword [0x101e17ac], eax
cmp dword [0x101e17ac], 0
jne 0x100e78d3
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e6a90
mov dword [0x101e306c], eax
cmp dword [0x101e306c], 0
jne 0x100e78f0
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e6b80
mov dword [0x101e3070], eax
cmp dword [0x101e3070], 0
jne 0x100e790d
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e9020
mov dword [0x101e3074], eax
cmp dword [0x101e3074], 0
jne 0x100e792a
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e8b30
mov dword [0x101e3078], eax
cmp dword [0x101e3078], 0
jne 0x100e7947
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e8d30
push eax
mov ecx, 0x101e85c4
call fcn.101953a0
movzx eax, al
test eax, eax
jne 0x100e7968
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e87e0
mov dword [ebp - 0xe0], eax
mov ecx, 0x101e3064
call fcn.10068420
mov ecx, dword [ebp - 0xe0]
mov dword [eax + 0x90], ecx
cmp dword [ebp - 0xe0], 0
jne 0x100e799c
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e8a70
mov dword [ebp - 0xe0], eax
mov ecx, 0x101e3064
call fcn.10068420
mov ecx, dword [ebp - 0xe0]
mov dword [eax + 0x9c], ecx
cmp dword [ebp - 0xe0], 0
jne 0x100e79d0
xor al, al
jmp 0x100e7f7b
mov ecx, dword [ebp - 0xc]
call fcn.100e69c0
mov dword [ebp - 0xe0], eax
mov ecx, 0x101e3064
call fcn.10068420
mov ecx, dword [ebp - 0xe0]
mov dword [eax + 0xf4], ecx
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e139c]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pClient:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e144c]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pEngine:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e1720]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pStudio:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e1730]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pStudioAPI:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e1380]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_pmove:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3068]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pPreS_DynamicSound:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e308c]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pClientUserMsgs:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e17a8]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_client_state:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e17ac]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_client_static:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3090]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pIN_MouseMove:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e306c]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pCL_DriftInterpolationAmount:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3070]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pCL_RecordHUDCommand:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3084]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pHost_FilterTime:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3088]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pSCR_UpdateScreen:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e1734]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pStudioModelRenderer:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3074]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pR_DrawEntitiesOnList:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3078]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pInitiateGameConnection:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e3080]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pCL_RunUsercmd:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov esi, esp
mov eax, dword [0x101e307c]
push eax
push str.COffsets::FindGameOffsets
push str.___s:_g_pNET_SendPacket:_0x_X_n
mov ecx, dword [0x101e1398]
push ecx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov ecx, 0x101e3064
call fcn.10068420
mov eax, dword [eax + 0x90]
mov dword [ebp - 0xe4], eax
mov esi, esp
mov ecx, dword [ebp - 0xe4]
push ecx
push str.COffsets::FindGameOffsets
push str.___s:_g_pGlobals__m_iGameBuild:__i_n
mov edx, dword [0x101e1398]
push edx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
mov eax, dword [0x101e1398]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe0], edx
mov ecx, 0x101e3064
call fcn.10068420
mov eax, dword [eax + 0x9c]
mov dword [ebp - 0xe4], eax
mov esi, esp
mov ecx, dword [ebp - 0xe4]
push ecx
push str.COffsets::FindGameOffsets
push str.___s:_g_pGlobals__m_dwInitPoint:_0x_X_n
mov edx, dword [0x101e1398]
push edx
call dword [ebp - 0xe0]
add esp, 0x10
cmp esi, esp
call fcn.1019d0de
push 0xac
mov eax, dword [0x101e139c]
push eax
push 0x101e13a0
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x218
mov eax, dword [0x101e144c]
push eax
push 0x101e1450
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0xb8
mov eax, dword [0x101e1720]
push eax
push 0x101e1668
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0xc
mov eax, dword [0x101e1730]
push eax
push 0x101e1724
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x70
mov eax, dword [0x101e1734]
push eax
push 0x101e1738
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov esi, esp
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x70
mov ecx, dword [0x101e1734]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp esi, esp
call fcn.1019d0de
test eax, eax
jne 0x100e7f79
push str.COffsets::FindGameOffsets
push str._s:_g_pStudioModelRenderer_memory_protected._n
call fcn.1018d870
add esp, 8
xor al, al
jmp 0x100e7f7b
mov al, 1
push edx
mov ecx, ebp
push eax
lea edx, [0x100e7fac]
call fcn.1019d088
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1019d133
add esp, 0xe4
cmp ebp, esp
call fcn.1019d0de
mov esp, ebp
pop ebp
ret