Function at 0x1006e68f
Capabilities:
Allocate or change rwx memory
Resolve function by parsing pe exports

Disassembly:
push 0x48
mov eax, 0x100eda97
call fcn.100e35bc
mov ebx, ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x50], ebx
lea esi, [ebx + 0x144]
mov dword [ebx], vtable.CGameSA.0
mov edi, 0xffff
mov ecx, esi
call fcn.10071be6
add esi, 0x1c
sub edi, 1
jne 0x1006e6b7
lea esi, [ebx + 0x1c01e0]
mov dword [ebp - 0x2c], esi
and dword [esi], edi
and dword [esi + 4], edi
push 0x2c
call fcn.100e147f
pop ecx
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov dword [ebp - 4], 1
lea eax, [ebp - 0x54]
push eax
push 0x40
push 0x4a3000
push 0x401000
mov dword [0x101b09ec], ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov cl, byte [0x748add]
mov edx, 0xff
mov al, byte [0x748ade]
mov dword [ebp - 0x38], edx
cmp cl, dl
jne 0x1006e76e
cmp al, 0x53
jne 0x1006e7c9
push 0xb
pop eax
mov dword [ebx + 0x1c01dc], eax
mov dword [ebp - 0x38], eax
call fcn.10074b42
mov dword [0x101b17c0], 0x7f2d20
mov eax, 0x7f0990
mov dword [0x101b17b8], 0x7f2cc0
mov dword [0x101b17bc], 0x7f2cf0
mov dword [0x101b09b8], eax
mov dword [0x101b09b4], eax
jmp 0x1006e7cf
cmp cl, 0xf
jne 0x1006e7ad
cmp al, 0x84
jne 0x1006e7c9
push 5
pop eax
mov dword [ebx + 0x1c01dc], eax
mov dword [ebp - 0x38], eax
call fcn.10074b42
mov dword [0x101b17c0], 0x7f2d60
mov eax, 0x7f09d0
mov dword [0x101b17b8], 0x7f2d00
mov dword [0x101b17bc], 0x7f2d30
jmp 0x1006e762
cmp cl, 0xfe
jne 0x1006e7c9
cmp al, 0x10
jne 0x1006e7c9
push 0xf
pop eax
mov dword [ebx + 0x1c01dc], eax
mov dword [ebp - 0x38], eax
call fcn.10074a9e
jmp 0x1006e7cf
mov dword [ebx + 0x1c01dc], edx
xor eax, eax
lea ecx, [ebx + 0x14c]
mov dword [ecx], eax
inc eax
lea ecx, [ecx + 0x1c]
cmp eax, 0xffff
jl 0x1006e7d7
push 4
call fcn.100e147f
push 4
mov dword [eax], vtable.CAudioSA.0
mov dword [ebx + 0x1c01ac], eax
call fcn.100e147f
push 0x13888
mov dword [eax], vtable.CWorldSA.0
mov dword [ebx + 0x1c0160], eax
call fcn.100e147f
add esp, 0xc
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.10078ada
mov byte [ebp - 4], 1
push 4
mov dword [ebx + 0x1c0128], eax
call fcn.100e147f
push 4
mov dword [eax], vtable.CClockSA.0
mov dword [ebx + 0x1c013c], eax
call fcn.100e147f
pop ecx
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 3
mov edi, 0x101b14f8
mov dword [eax], vtable.CRadarSA.0
mov esi, 0xba86f0
push 8
call fcn.100e147f
pop ecx
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 4
mov dword [eax], vtable.CMarkerSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 3
add esi, 0x28
mov dword [edi], eax
lea edi, [edi + 4]
cmp esi, 0xbaa248
jl 0x1006e862
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2c]
push 0x14
mov dword [ebx + 0x1c0134], eax
call fcn.100e147f
mov esi, eax
pop ecx
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 5
xor edi, edi
mov dword [esi], vtable.CCameraSA.0
lea ebx, [esi + 8]
mov dword [esi + 4], 0xb6f028
push 8
call fcn.100e147f
pop ecx
mov ecx, eax
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 4], 6
mov eax, dword [esi + 4]
add eax, 0x174
mov dword [ecx], vtable.CCamSA.0
add eax, edi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 5
add edi, 0x238
mov dword [ebx], ecx
lea ebx, [ebx + 4]
cmp edi, 0x6a8
jl 0x1006e8be
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x34]
push 0x104
mov dword [ebx + 0x1c0164], esi
call fcn.100e147f
mov edi, eax
pop ecx
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 7
mov esi, 0xc3e058
mov dword [edi], vtable.CCoronasSA.0
lea ebx, [edi + 4]
push 8
call fcn.100e147f
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 8
mov dword [eax], vtable.CRegisteredCoronaSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 7
add esi, 0x3c
mov dword [ebx], eax
lea ebx, [ebx + 4]
cmp esi, 0xc3ef58
jl 0x1006e928
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x34]
push 0x84
mov dword [ebx + 0x1c0140], edi
call fcn.100e147f
mov edi, eax
pop ecx
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 9
mov esi, 0xc7f158
mov dword [edi], vtable.CCheckpointsSA.0
lea ebx, [edi + 4]
push 8
call fcn.100e147f
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0xa
mov dword [eax], vtable.CCheckpointSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 9
add esi, 0x38
mov dword [ebx], eax
lea ebx, [ebx + 4]
cmp esi, 0xc7f858
jl 0x1006e983
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x34]
push 0x9b4
mov dword [ebx + 0x1c0144], edi
call fcn.100e147f
mov edi, eax
pop ecx
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0xb
mov esi, 0x9788c0
mov dword [edi], vtable.CPickupsSA.0
lea ebx, [edi + 4]
push 0x10
call fcn.100e147f
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0xc
and dword [eax + 0xc], 0
and dword [eax + 8], 0
mov dword [eax], vtable.CPickupSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 0xb
add esi, 0x20
mov dword [ebx], eax
lea ebx, [ebx + 4]
cmp esi, 0x97d640
jl 0x1006e9de
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x34]
push 0xc4
mov dword [ebx + 0x1c016c], edi
call fcn.100e147f
mov edi, eax
pop ecx
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0xd
mov esi, 0xc88950
mov dword [edi], vtable.CExplosionManagerSA.0
lea ebx, [edi + 4]
push 8
call fcn.100e147f
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0xe
mov dword [eax], vtable.CExplosionSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 0xd
add esi, 0x7c
mov dword [ebx], eax
lea ebx, [ebx + 4]
cmp esi, 0xc8a090
jl 0x1006ea41
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x34]
push 4
mov dword [ebx + 0x1c0174], edi
call fcn.100e147f
push 0xf4
mov dword [eax], vtable.CHudSA.0
mov dword [ebx + 0x1c0154], eax
call fcn.100e147f
pop ecx
mov edi, eax
pop ecx
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0xf
mov esi, 0xb71f80
mov dword [edi], vtable.CFireManagerSA.0
lea ebx, [edi + 4]
push 8
call fcn.100e147f
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x10
mov dword [eax], vtable.CFireSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 0xf
add esi, 0x28
mov dword [ebx], eax
lea ebx, [ebx + 4]
cmp esi, 0xb728e0
jl 0x1006eab0
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x34]
push 0x84
mov dword [ebx + 0x1c014c], edi
call fcn.100e147f
mov edi, eax
pop ecx
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0x11
mov esi, 0xc7dd58
mov dword [edi], vtable.C3DMarkersSA.0
lea ebx, [edi + 4]
push 8
call fcn.100e147f
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x12
mov dword [eax], vtable.C3DMarker.0
mov byte [ebp - 4], 0x13
mov dword [eax], vtable.C3DMarkerSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 0x11
add esi, 0xa0
mov dword [ebx], eax
lea ebx, [ebx + 4]
cmp esi, 0xc7f158
jl 0x1006eb0b
mov byte [ebp - 4], 1
mov ebx, dword [ebp - 0x34]
push 0x13c
mov dword [ebx + 0x1c0178], edi
call fcn.100e147f
mov edi, eax
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0x14
lea esi, [edi + 8]
push 0x30
push 0
push esi
mov dword [edi], vtable.CPadSA.0
call sub.VCRUNTIME140.dll_memset
push 0x30
lea eax, [esi + 0x30]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x30
lea eax, [esi + 0x78]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x30
lea eax, [esi + 0xa8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x30
lea eax, [esi + 0xd8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x40
mov dword [edi + 4], 0xb73458
mov byte [ebp - 4], 1
push 0x7d0
mov dword [ebx + 0x1c01a0], edi
call fcn.100e147f
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x15
mov edi, eax
mov esi, 0xc27ad0
push 4
call fcn.100e147f
pop ecx
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x16
mov dword [eax], esi
mov byte [ebp - 4], 0x15
add esi, 0x20
mov dword [edi], eax
lea edi, [edi + 4]
cmp esi, 0xc2b950
jl 0x1006ebde
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2c]
push 4
mov dword [ebx + 0x1c01a4], eax
call fcn.100e147f
push 4
pop esi
push esi
mov dword [eax], vtable.CAERadioTrackManagerSA.0
mov dword [ebx + 0x1c01a8], eax
call fcn.100e147f
push 8
mov dword [eax], vtable.CWeatherSA.0
mov dword [ebx + 0x1c015c], eax
call fcn.100e147f
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x17
mov edi, 0xba6748
mov dword [eax], vtable.CMenuManagerSA.0
mov dword [eax + 4], edi
mov byte [ebp - 4], 1
push esi
mov dword [ebx + 0x1c01b0], eax
call fcn.100e147f
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0x18
mov dword [eax], vtable.CTextSA.0
mov byte [ebp - 4], 1
push esi
mov dword [ebx + 0x1c01b4], eax
call fcn.100e147f
push esi
mov dword [eax], vtable.CStatsSA.0
mov dword [ebx + 0x1c01b8], eax
call fcn.100e147f
push esi
mov dword [eax], vtable.CFontSA.0
mov dword [ebx + 0x1c01bc], eax
call fcn.100e147f
push 1
mov dword [eax], vtable.CPathFindSA.0
mov dword [ebx + 0x1c01c0], eax
call fcn.100e147f
push 8
mov dword [ebx + 0x1c01c4], eax
call fcn.100e147f
mov esi, eax
mov dword [ebp - 0x4c], esi
mov byte [ebp - 4], 0x19
and dword [esi], 0
and dword [esi + 4], 0
push 0xc
call fcn.100e147f
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [esi], eax
mov byte [ebp - 4], 1
push 8
mov dword [ebx + 0x1c01c8], esi
call fcn.100e147f
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x1b
mov dword [eax], vtable.CSettingsSA.0
mov dword [eax + 4], edi
mov byte [ebp - 4], 1
push 4
mov dword [ebx + 0x1c01d0], eax
call fcn.100e147f
push 4
mov dword [eax], vtable.CCarEnterExitSA.0
mov dword [ebx + 0x1c01d4], eax
call fcn.100e147f
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x1c
mov dword [eax], vtable.CControllerConfigManagerSA.0
mov byte [ebp - 4], 1
push 0x88
mov dword [ebx + 0x1c01d8], eax
call fcn.100e147f
add esp, 0x38
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x1d
mov esi, 0xc891a8
mov dword [eax], vtable.CProjectileInfoSA.0
lea edi, [eax + 4]
push 0x88
call fcn.100e147f
pop ecx
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x1e
mov dword [eax], vtable.CProjectileInfoSA.0
mov dword [eax + 0x84], esi
mov byte [ebp - 4], 0x1d
add esi, 0x24
mov dword [edi], eax
lea edi, [edi + 4]
cmp esi, 0xc89628
jl 0x1006ed61
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2c]
push 4
mov dword [ebx + 0x1c0130], eax
call fcn.100e147f
pop ecx
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x1f
mov ecx, eax
push dword [ebp - 0x38]
call fcn.1007ed08
mov byte [ebp - 4], 1
push 4
mov dword [ebx + 0x1c017c], eax
call fcn.100e147f
pop ecx
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x20
mov ecx, eax
call fcn.10071293
mov byte [ebp - 4], 1
push 4
mov dword [ebx + 0x1c0180], eax
call fcn.100e147f
push 0xd0
mov dword [eax], vtable.CEventListSA.0
mov dword [ebx + 0x1c0148], eax
call fcn.100e147f
pop ecx
pop ecx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x21
mov esi, 0x96c048
mov dword [eax], vtable.CGaragesSA.0
lea edi, [eax + 8]
mov dword [eax + 4], esi
push 8
call fcn.100e147f
pop ecx
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x22
mov dword [eax], vtable.CGarageSA.0
mov dword [eax + 4], esi
mov byte [ebp - 4], 0x21
add esi, 0xd8
mov dword [edi], eax
lea edi, [edi + 4]
cmp esi, 0x96ea78
jl 0x1006ee1a
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2c]
push 8
mov dword [ebx + 0x1c0150], eax
call fcn.100e147f
mov ecx, eax
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 4], 0x23
mov eax, dword [ebx + 0x1c01c8]
mov dword [ecx], vtable.CTasksSA.0
mov dword [ecx + 4], eax
mov byte [ebp - 4], 1
mov dword [ebx + 0x1c01cc], ecx
mov dword [esp], 0xe1c
call fcn.100e147f
mov esi, eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0x24
mov dword [esi], vtable.CAnimManagerSA.0
and dword [esi + 0xe14], 0
and dword [esi + 0xe18], 0
push 0xc
call fcn.100e147f
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [esi + 0xe14], eax
mov byte [ebp - 4], 0x25
mov edi, 0x320
push edi
lea eax, [esi + 4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x7d0
lea eax, [esi + 0x324]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push edi
lea eax, [esi + 0xaf4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov byte [ebp - 4], 1
push 4
mov dword [ebx + 0x1c0184], esi
pop esi
push esi
call fcn.100e147f
push esi
mov dword [eax], vtable.CStreamingSA.0
mov dword [ebx + 0x1c0188], eax
call fcn.100e147f
push esi
mov dword [eax], vtable.CVisibilityPluginsSA.0
mov dword [ebx + 0x1c018c], eax
call fcn.100e147f
push esi
mov dword [eax], vtable.CKeyGenSA.0
mov dword [ebx + 0x1c0190], eax
call fcn.100e147f
push 8
mov dword [eax], vtable.CRopesSA.0
mov dword [ebx + 0x1c0194], eax
call fcn.100e147f
add esp, 0x40
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x26
mov dword [eax], vtable.CFxSA.0
mov dword [eax + 4], 0xa9ae00
mov byte [ebp - 4], 1
push 0xe0cc
mov dword [ebx + 0x1c0198], eax
call fcn.100e147f
pop ecx
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0x27
mov ecx, eax
call fcn.1008876d
mov byte [ebp - 4], 1
mov edi, 0xc8aab8
and dword [ebp - 0x2c], 0
mov esi, 0xc8bf48
mov dword [ebx + 0x1c019c], eax
lea eax, [ebx + 4]
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
push 0xc
call fcn.100e147f
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 4], 0x28
lea eax, [ebx + 0x16]
mov dword [ecx], vtable.CWeaponInfoSA.0
mov dword [ecx + 8], edi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 1
add edi, 0x70
mov eax, dword [ebp - 0x38]
inc ebx
mov dword [eax], ecx
add eax, 4
mov dword [ebp - 0x38], eax
cmp edi, esi
jl 0x1006efa8
mov edi, dword [ebp - 0x34]
add edi, 0xc0
xor ebx, ebx
push 0xc
call fcn.100e147f
pop ecx
mov ecx, eax
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 4], 0x29
lea eax, [ebx + 0x16]
mov dword [ecx], vtable.CWeaponInfoSA.0
mov dword [ecx + 8], esi
mov dword [ecx + 4], eax
mov byte [ebp - 4], 1
inc ebx
mov dword [edi], ecx
add esi, 0x70
add edi, 4
cmp ebx, 0xb
jl 0x1006efea
cmp esi, 0xc8cdb8
jl 0x1006efe8
push 0xc
call fcn.100e147f
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x2a
and dword [eax + 8], 0
mov dword [eax], vtable.CPlayerInfoSA.0
mov dword [eax + 4], 0xb7cd98
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
mov ebx, dword [ebp - 0x34]
mov dword [esp], str.hovercars
mov dword [ebx + 0x1c012c], eax
call fcn.100054df
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
lea esi, [ebx + 0x1c01e0]
push eax
mov ecx, esi
call fcn.1006ff53
mov eax, dword [eax]
mov dword [eax + 0x28], 0x969152
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10004f4d
push str.aircars
lea ecx, [ebp - 0x28]
call fcn.100054df
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.1006ff53
mov eax, dword [eax]
mov dword [eax + 0x28], 0x969160
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10004f4d
push str.extrabunny
lea ecx, [ebp - 0x28]
call fcn.100054df
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.1006ff53
mov eax, dword [eax]
mov dword [eax + 0x28], 0x969161
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10004f4d
push str.extrajump
lea ecx, [ebp - 0x28]
call fcn.100054df
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.1006ff53
mov ecx, dword [eax]
mov dword [ecx + 0x28], 0x96916c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10004f4d
or dword [ebp - 4], 0xffffffff
mov eax, ebx
call fcn.100e356b
ret