Function at 0x10007460
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100810ad
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, dword [0x100ba040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.CG_Init___loading.._n
push 7
call fcn.1000aa50
call fcn.10007220
push str.preparing_to_load_perma_hooks_n
push 7
call fcn.1000aa50
add esp, 0x10
call fcn.100077a0
mov eax, dword [0x100bdd6c]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
add eax, 0x1b3b5
mov dword [0x100bdd98], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x4d76da
mov dword [0x100bddac], 0x4696b0
mov dword [0x100bdda8], 0x527670
mov dword [0x100bdda4], 0x46ca40
mov dword [0x100bdda0], 0x5f5360
mov dword [0x100bdd9c], 0x469120
call esi
mov eax, dword [0x100ade38]
mov ecx, 0x4d76da
push 0
mov dword [ecx], eax
mov al, byte [0x100ade3c]
mov byte [ecx + 4], al
push dword [ebp - 0x14]
push 5
push ecx
call esi
call fcn.1007df00
push 0x10008220
push 0x100bddac
call fcn.1007d980
call fcn.1007df60
call fcn.1007df00
push 0x1007b8d0
push 0x100bdda8
call fcn.1007d980
call fcn.1007df60
call fcn.1007df00
push 0x1006b3f0
push 0x100bdda4
call fcn.1007d980
call fcn.1007df60
call fcn.1007df00
push 0x1006b660
push 0x100bdda0
call fcn.1007d980
call fcn.1007df60
cmp dword [0x100bdd6c], 0
jne 0x1000759c
mov esi, 0x100bdd9c
mov edi, 0x10008230
jmp 0x100075a6
mov esi, 0x100bdd98
mov edi, 0x10008270
call fcn.1007df00
push edi
push esi
call fcn.1007d980
call fcn.1007df60
push str.Successfully_loaded_image_resources_n
push 7
call fcn.1000aa50
add esp, 4
mov edx, 0x10079690
mov ecx, str.getbuttonpressed
call fcn.100795b0
mov edx, 0x10079710
mov ecx, str.getforwardmove
call fcn.100795b0
mov edx, 0x100797c0
mov ecx, str.getrightmove
call fcn.100795b0
mov edx, 0x10079870
mov ecx, str.setvelocity
call fcn.100795b0
mov edx, 0x10079b50
mov ecx, str.weaponexists
call fcn.100794d0
mov edx, 0x10079980
mov ecx, str.worldtoscreen
call fcn.100794d0
mov edx, 0x10079be0
mov ecx, str.getevarint
call fcn.100794d0
mov edx, 0x10079c70
mov ecx, str.getevarfloat
call fcn.100794d0
mov edx, 0x10079d10
mov ecx, str.getevar
call fcn.100794d0
mov edx, 0x1007a100
mov ecx, str.writetoaddress
call fcn.100794d0
mov edx, 0x1007a4a0
mov ecx, str.getaddressint
call fcn.100794d0
mov edx, 0x1007a5f0
mov ecx, str.getaddressfloat
call fcn.100794d0
mov edx, 0x1007a7b0
mov ecx, str.canloadposition
call fcn.100794d0
mov edx, 0x1007a740
mov ecx, str.sendcommand
call fcn.100794d0
add esp, 4
call fcn.1007df00
push 0x1007a8e0
push 0x100ba194
call fcn.1007d980
call fcn.1007df60
call fcn.1007df00
push 0x1007a810
push 0x100ba198
call fcn.1007d980
call fcn.1007df60
call fcn.1000b870
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100ba1a4
call fcn.10007e70
mov dword [ebp - 4], 0
mov dword [ebp - 4], 0xffffffff
call fcn.1000f080
push str.21_kej_extension_has_been_loaded__n
push 7
call fcn.1000aa50
push str.Loading_1_kej_features.._n
push 7
call fcn.1000aa50
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 0x28
mov edx, str.Loading_1_kej_features.._n
call fcn.10007b10
call fcn.10007880
call fcn.10016130
call fcn.1007b810
call fcn.1006aeb0
test al, al
jne 0x10007749
push str.failed_to_hook_renderer_n
push 3
call fcn.10015b70
add esp, 8
mov ecx, 0x100be3f0
call fcn.1005b7c0
push str.2Done__n
push 7
mov dword [0x100bddd8], 0x42000000
mov dword [0x100bdddc], 0x42000000
mov dword [0x100bdde0], 0x42000000
call fcn.1000aa50
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007f5d0
mov esp, ebp
pop ebp
ret