Function at 0x10044730
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1013e00c]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
push 0x10071a30
push 0x968180
push 0xe9
call fcn.100c88d0
push 0x10007f20
push 0x4fcb58
push 0xe9
mov dword [0x102b77dc], 0
mov dword [0x102b77e0], 0
mov dword [0x102b77e4], 0
mov dword [0x102b77ec], 0
mov dword [0x102b77e8], 0
call fcn.100c88d0
push 0x10007f40
push 0x4fd0b9
push 0xe9
call fcn.100c88d0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add esp, 0x24
cmp dword [0x101eb07c], 1
mov dword [0x102c08e4], 0
mov dword [0x102c08e8], 0
mov byte [0x102c08ec], 0
jne 0x10044867
push 0x100a9a70
push 0x853950
push 0xe9
call fcn.100c88d0
push 0x100a9e50
push 0x8533a0
push 0xe9
call fcn.100c88d0
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x85375b
call edi
mov eax, 0x85375b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x85375b
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x85374b
call edi
mov eax, 0x85374b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x85374b
call edi
push 0x100446e0
push 0x8350e9
push 0xe8
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eb084], 1
jne 0x100448b2
push 0x1000bc90
push 0x5bafab
push 0xe8
call fcn.100c88d0
push 0x1000bbf0
push 0x7c5db0
push 0xe8
call fcn.100c88d0
add esp, 0x18
cmp dword [0x101eb080], 1
jne 0x100448e1
lea eax, [ebp - 8]
push eax
push 0x40
push 1
push 0x81c03fa
call edi
lea eax, [ebp - 8]
mov byte [0x81c03fa], 1
push eax
push dword [ebp - 8]
push 1
push 0x81c03fa
call edi
mov dword [0x102e59ac], 0x42f6e9df
mov eax, 0x51eb851f
imul dword [0xe61e58]
sar edx, 8
mov eax, edx
shr eax, 0x1f
add eax, edx
movd xmm0, eax
mov eax, 0x1b4e81b5
cvtdq2ps xmm0, xmm0
movss dword [0x102e59b0], xmm0
imul dword [0xe61e5c]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [0x101eb094], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x102e59b4], xmm0
jne 0x100449c5
mov byte [0x102b784c], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10035a60
sub eax, 0x1388
mov byte [0x102b7854], 0
push 0x7d2bc0
push 0xe9
mov dword [0x102b7850], eax
call fcn.100c88d0
push fcn.10036730
push 0x80b8e0
push 0xe9
call fcn.100c88d0
push 0x10036740
push 0x7d26b5
push 0xe9
call fcn.100c88d0
push 0x100368e0
push 0x7d2751
push 0xe9
call fcn.100c88d0
push 0x10036a80
push 0x7d27fc
push 0xe9
call fcn.100c88d0
add esp, 0x3c
mov eax, dword [0x101eb09c]
sub eax, 1
je 0x10044b7c
sub eax, 1
je 0x10044aa9
sub eax, 1
jne 0x10044c72
push 0x100b5fb0
push 0x848cb6
push 0xe8
mov dword [0x102c0870], eax
call fcn.100c88d0
push 0x100b6090
push 0x8491ae
push 0xe8
call fcn.100c88d0
push 0x100b6370
push 0x8491b6
push 0xe8
call fcn.100c88d0
push 0x100b6bb0
push 0x8491be
push 0xe8
call fcn.100c88d0
push 0x100b7e70
push 0x849087
push 0xe8
call fcn.100c88d0
push 0x100b7df0
push 0x848f07
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100b7d70
push 0x848e5d
push 0xe8
call fcn.100c88d0
push 0x100b7db0
push 0x848eb2
push 0xe8
call fcn.100c88d0
push 0x100b7e30
push 0x848f4b
push 0xe8
call fcn.100c88d0
add esp, 0x24
jmp 0x10044c72
push 0x1000db30
push 0x848cb6
push 0xe8
call fcn.100c88d0
push 0x1000dbf0
push 0x8491ae
push 0xe8
call fcn.100c88d0
push 0x1000dda0
push 0x8491b6
push 0xe8
call fcn.100c88d0
push 0x1000e230
push 0x8491be
push 0xe8
call fcn.100c88d0
push 0x1000f760
push 0x849087
push 0xe8
call fcn.100c88d0
push 0x1000f730
push 0x848f07
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x1000f6d0
push 0x848e5d
push 0xe8
call fcn.100c88d0
push 0x1000f700
push 0x848eb2
push 0xe8
call fcn.100c88d0
push 0x1000f760
push 0x848f4b
push 0xe8
call fcn.100c88d0
push 0x1000f770
push 0x8490f5
push 0xe8
call fcn.100c88d0
add esp, 0x30
jmp 0x10044c72
push 0x10051c30
push 0x848cb6
push 0xe8
call fcn.100c88d0
push 0x10051cf0
push 0x8491ae
push 0xe8
call fcn.100c88d0
push 0x10051fb0
push 0x8491b6
push 0xe8
call fcn.100c88d0
push 0x100523a0
push 0x8491be
push 0xe8
call fcn.100c88d0
push 0x10054910
push 0x849087
push 0xe8
call fcn.100c88d0
push 0x100548b0
push 0x848f07
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x10054850
push 0x848e5d
push 0xe8
call fcn.100c88d0
push 0x10054880
push 0x848eb2
push 0xe8
call fcn.100c88d0
push 0x100548e0
push 0x848f4b
push 0xe8
call fcn.100c88d0
push 0x10054940
push 0x8490f5
push 0xe8
call fcn.100c88d0
push 0x100549a0
push 0x772960
push 0xe8
call fcn.100c88d0
push 0x100549c0
push 0x7729b3
push 0xe8
call fcn.100c88d0
add esp, 0x48
mov eax, dword [0x101eb0a8]
sub eax, 1
je 0x10044c88
sub eax, 1
jne 0x10044c8d
call fcn.100d4f80
jmp 0x10044c8d
call fcn.10037c00
mov eax, dword [0x101eb0d8]
push esi
sub eax, 1
je 0x10044d3d
sub eax, 1
je 0x10044cb4
sub eax, 2
jne 0x10044daa
call fcn.1003e550
jmp 0x10044daa
push 0x1006d270
push 0x4d7eb1
push 0xe8
call fcn.100c88d0
push 0x1006d080
push 0x4d76fb
push 0xe8
call fcn.100c88d0
push 0x1006d080
push 0x4d79c3
push 0xe8
call fcn.100c88d0
mov esi, dword [0x101eb0dc]
lea eax, [ebp - 8]
add esp, 0x24
mov dword [ebp - 8], 0
push eax
push 0x40
push 4
push 0x4d75f0
call edi
test eax, eax
je 0x10044d35
mov eax, 0x4d75f0
mov dword [eax], esi
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 4
push 0x4d75f0
call edi
test eax, eax
jne 0x10044daa
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10044daa
push 0x10013fd0
push 0x4d76fb
push 0xe8
call fcn.100c88d0
push 0x10013fd0
push 0x4d79c3
push 0xe8
call fcn.100c88d0
mov esi, dword [0x101eb0dc]
lea eax, [ebp - 8]
add esp, 0x18
push eax
push 0x40
push 4
push 0x4d75f0
call edi
lea eax, [ebp - 8]
mov dword [0x4d75f0], esi
push eax
push dword [ebp - 8]
push 4
push 0x4d75f0
call edi
push 0x100140b0
push 0x5edda9
push 0xe8
call fcn.100c88d0
add esp, 0xc
mov eax, dword [0x101eb0e0]
pop esi
sub eax, 1
je 0x10044dd2
sub eax, 1
je 0x10044dcb
sub eax, 2
jne 0x10044dd7
call fcn.1003e550
call fcn.1003fd90
jmp 0x10044dd7
call fcn.1006c9b0
jmp 0x10044dd7
call fcn.10014540
mov eax, dword [0x101eb0b0]
cmp eax, 1
jne 0x10044f4d
push 0x10037770
push 0x7d2b3d
push 0xe8
call fcn.100c88d0
push 0x10037720
push 0x789099
push 0xe9
call fcn.100c88d0
push 0x100376d0
push 0x7890e2
push 0xe9
call fcn.100c88d0
push 0x10037210
push 0x78b0cf
push 0xe8
call fcn.100c88d0
push 0x10036fc0
push 0x78b09a
push 0xe8
call fcn.100c88d0
push 0x10036d10
push 0x787620
push 0xe8
call fcn.100c88d0
add esp, 0x48
push fcn.10036730
push 0x787628
push 0xe8
call fcn.100c88d0
push 0x10036f10
push 0x787748
push 0xe8
call fcn.100c88d0
push 0x7867b3
push 0x7867a5
push 0xe9
call fcn.100c88d0
add esp, 0x24
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x787c7d
call edi
mov eax, 0x787c7d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x787c7d
call edi
push 0x10036c30
push 0x7864b3
push 0xe8
call fcn.100c88d0
push 0x10036c30
push 0x78641e
push 0xe8
call fcn.100c88d0
push 0x10036c30
push 0x7863a8
push 0xe8
call fcn.100c88d0
push 0x10036c30
push 0x786347
push 0xe8
call fcn.100c88d0
push 0x10036c30
push 0x7862e2
push 0xe8
call fcn.100c88d0
push 0x1000f760
push 0x78628e
push 0xe8
call fcn.100c88d0
mov eax, dword [0x101eb0b0]
add esp, 0x48
cmp eax, 2
jne 0x100450d3
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x785b44
call edi
mov eax, 0x785b44
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x785b44
call edi
lea eax, [ebp - 8]
push eax
push 0x40
push 5
push 0x787630
call edi
mov eax, 0x787630
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 5
push 0x787630
call edi
push 0x100304b0
push 0x78adcc
push 0xe8
call fcn.100c88d0
push 0x100304b0
push 0x78ae15
push 0xe8
call fcn.100c88d0
push 0x100304b0
push 0x78ae5e
push 0xe8
call fcn.100c88d0
push 0x1002f2c0
push 0x78b09a
push 0xe8
call fcn.100c88d0
push 0x1002f510
push 0x78b0cf
push 0xe8
call fcn.100c88d0
push 0x1002fff0
push 0x787620
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x1002f6b0
push 0x787628
push 0xe8
call fcn.100c88d0
push 0x10030460
push 0x787748
push 0xe8
call fcn.100c88d0
push 0x10030350
push 0x7864b3
push 0xe8
call fcn.100c88d0
push 0x10030350
push 0x78641e
push 0xe8
call fcn.100c88d0
push 0x10030350
push 0x7863a8
push 0xe8
call fcn.100c88d0
push 0x10030350
push 0x786347
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x10030350
push 0x7862e2
push 0xe8
call fcn.100c88d0
push 0x10030350
push 0x78628e
push 0xe8
call fcn.100c88d0
add esp, 0x18
cmp dword [0x101eb0f8], 2
jne 0x10045107
push 0x100d7380
push 0x7e020c
push 0xe8
call fcn.100c88d0
push 0x100d7380
push 0x7e0298
push 0xe8
call fcn.100c88d0
add esp, 0x18
call fcn.1003a310
call fcn.100d4d20
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push 0x556cc6
call edi
mov eax, 0x556cc6
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push 6
push 0x556cc6
call edi
push 0x100b5f90
push 0x556cc6
push 0xe9
call fcn.100c88d0
add esp, 0xc
mov ecx, 0x101eabfc
push str.Data__KGData__Lua__CharacterSystem__SkillCroma.lua
call fcn.100b07c0
push dword [0x101eac00]
call fcn.10095250
call fcn.100b1a10
cmp byte [0x101eb18c], 1
jne 0x100451aa
push 0x100aecd0
push 0x842ac7
push 0xe8
call fcn.100c88d0
push 0x100aecd0
push 0x842b8d
push 0xe8
call fcn.100c88d0
add esp, 0x18
cmp dword [0x101eb070], 1
jne 0x1004521e
mov dword [0x105413a4], 0
call fcn.1006c560
cmp dword [0x101eb070], 1
jne 0x1004521e
push 0x1006b270
push 0x40b5a9
push 0xe8
call fcn.100c88d0
push 0x1006acc0
push 0x40b400
push 0xe8
call fcn.100c88d0
push 0x1006acc0
push 0x40b44f
push 0xe8
call fcn.100c88d0
push 0x1006c4f0
push 0x483711
push 0xe8
call fcn.100c88d0
add esp, 0x30
cmp byte [0x101eb190], 1
jne 0x1004534a
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x40c98c
call edi
lea eax, [ebp - 8]
mov dword [0x40c98c], 2
push eax
push dword [ebp - 8]
push 4
push 0x40c98c
call edi
push 0x100b0450
push 0x4d7602
push 0xe8
call fcn.100c88d0
push 0x100b0270
push 0x40b331
push 0xe8
call fcn.100c88d0
push 0x100b00a0
push 0x40ada2
push 0xe8
call fcn.100c88d0
push 0x100b0170
push 0x40b2e2
push 0xe8
call fcn.100c88d0
push 0x100b0370
push 0x40c3af
push 0xe8
call fcn.100c88d0
push 0x100b0370
push 0x40c40b
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100b0370
push 0x40c45f
push 0xe8
call fcn.100c88d0
push 0x100b0330
push 0x40b422
push 0xe8
call fcn.100c88d0
push 0x100b0330
push 0x40b47c
push 0xe8
call fcn.100c88d0
push 0x100b0290
push 0x40b3f1
push 0xe8
call fcn.100c88d0
push 0x100b0310
push 0x40b515
push 0xe8
call fcn.100c88d0
push 0x100b0430
push 0x40ab50
push 0xe8
call fcn.100c88d0
add esp, 0x48
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
call fcn.100d7712
mov esp, ebp
pop ebp
ret