Function at 0x1006d4f0
Capabilities:
Allocate or change rwx memory
Check for time delay via gettickcount
Execute shellcode via indirect call
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10077696
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x10092c4c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
test esi, esi
je 0x1007102d
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0x43b40000
push 4
push eax
mov dword [ebp - 0x10c], 0x43a50000
call fcn.10022a00
push 0x2000
push esi
push str.M2Ext
call fcn.100098e0
add esp, 0x14
test al, al
je 0x10071028
push dword [0x1009479c]
push dword [0x10092948]
call fcn.100130a0
sub esp, 8
movss xmm0, dword [eax + 0x94]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.WIP_FPS__3.1f_Key__s_0x_02x
call fcn.10059880
add esp, 0x14
cmp dword [0x100946a4], 0x101
jne 0x1006d5bf
push dword [0x10094740]
call fcn.1005fdf0
mov dword [0x10092948], eax
add esp, 4
mov eax, dword [0x1009473c]
mov dword [0x1009479c], eax
call fcn.10055570
call fcn.10013f90
fmul dword [0x10079278]
push ecx
fstp dword [esp]
call fcn.1001e310
push 0
push str.tabs
call fcn.10047d50
add esp, 0xc
test al, al
je 0x10071023
push 0
push 0
push str.Main
call fcn.10048140
add esp, 0xc
test al, al
je 0x1006f327
call fcn.10071900
test eax, eax
je 0x1006e720
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006e720
push str.timescale
call fcn.1001e140
call fcn.10013f90
fstp dword [ebp - 0x114]
movss xmm0, dword [ebp - 0x114]
mulss xmm0, dword [0x10079278]
subss xmm0, dword [0x100792bc]
movss dword [esp], xmm0
call fcn.1001e310
add esp, 4
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x3dcccccd
push 0x100928b4
push str.sfts
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006d6bb
movss xmm0, dword [0x100928b4]
movss dword [ebp - 0x114], xmm0
call fcn.10071da0
test eax, eax
je 0x1006d6bb
call fcn.10071da0
movss xmm0, dword [ebp - 0x114]
movss dword [eax + 0x30], xmm0
call fcn.1001dc20
push dword [0x1009377c]
call fcn.1006c330
mov dword [esp], 0xbf800000
push ecx
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Reset_Time
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006d72a
mov dword [0x100928b4], 0x3f800000
call fcn.10071da0
test eax, eax
je 0x1006d72a
call fcn.10071da0
mov dword [eax + 0x30], 0x3f800000
call fcn.1001db30
mov eax, dword [0x10093760]
cmp dword [0x100947a4], eax
je 0x1006d746
mov dword [0x100947a4], eax
mov dword [0x100947a0], eax
push str.savegame
call fcn.1001e140
call fcn.10013f90
fstp dword [ebp - 0x114]
movss xmm0, dword [ebp - 0x114]
mulss xmm0, dword [0x10079278]
subss xmm0, dword [0x100792bc]
movss dword [esp], xmm0
call fcn.1001e310
push 0
push 0x64
push 1
push 0x100947a0
push str.sisid
call fcn.1004fb10
call fcn.1001dc20
push 1
push 0x10078480
push str.game.game:SaveGame___
call fcn.1006c3a0
add esp, 0x1c
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Save_Game.
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006d7fe
push dword [0x100947a0]
push str.game.game:SaveGame__i_
call fcn.10072220
add esp, 8
call fcn.1001db30
call fcn.10055570
mov eax, dword fs:[0x2c]
mov edi, dword [0x10098ca0]
mov edi, dword [eax + edi*4]
mov dword [ebp - 0x120], edi
call fcn.10071900
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006d864
mov eax, dword [eax]
cmp dword [eax + 0x90], 0
jne 0x1006d864
push 0xc
call fcn.10074a94
add esp, 4
mov dword [ebp - 0x10c], eax
test eax, eax
je 0x1006d864
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
movss xmm0, dword [0x100947b0]
sub esp, 0x18
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
movss xmm0, dword [0x100947ac]
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100947a8]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Pos___4.3f__4.3f__4.3f
call fcn.10059880
movss xmm0, dword [0x100947bc]
add esp, 4
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
movss xmm0, dword [0x100947b8]
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100947b4]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Dir___4.3f__4.3f__4.3f
call fcn.10059880
add esp, 0x1c
cmp dword [0x1cbfeac], 0
je 0x1006d928
cmp dword [0x1cbfeb0], 0
je 0x1006d928
movss xmm0, dword [0x1cbfeb0]
sub esp, 0x10
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x1cbfeac]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Rain___f_Snow___f
call fcn.10059880
add esp, 0x14
mov eax, dword [0x10098bf8]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x1006d93e
push 0x100947c0
call fcn.10072560
movss xmm0, dword [0x100947c8]
sub esp, 0x18
cvtps2pd xmm0, xmm0
movsd qword [esp + 0x10], xmm0
movss xmm0, dword [0x100947c4]
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [0x100947c0]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Cam___4.3f__4.3f__4.3f
call fcn.10059880
mov esi, dword [0x1ac1a94]
add esp, 0x1c
test esi, esi
je 0x1006da4d
mov eax, dword [esi + 0x10]
test eax, eax
je 0x1006da4d
movss xmm0, dword [eax + 0x34]
lea eax, [ebp - 0xb0]
push 0
cvtps2pd xmm0, xmm0
push str._.10f
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x110]
push eax
movsd qword [ebp - 0x110], xmm0
movsd xmm0, qword [str.333333]
movsd qword [ebp - 0x134], xmm0
movsd xmm0, qword [0x1008a9a0]
push 9
push str.gametime
movsd qword [ebp - 0xb0], xmm0
call fcn.10056380
add esp, 0x1c
test al, al
je 0x1006da39
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x118], eax
test eax, eax
je 0x1006da39
movsd xmm0, qword [ebp - 0x110]
cvtpd2ps xmm0, xmm0
mov byte [eax + 0x3c], 1
mov dword [ebp - 0x124], 0x1370ef0
movss dword [ebp - 0x114], xmm0
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x118]
call dword [ebp - 0x124]
push 1
push 0x10078480
push str.Ingame_time
call fcn.1006c3a0
add esp, 0xc
call fcn.10071900
mov eax, dword [eax + 0x118]
mov al, byte [eax + 0xe8]
mov byte [0x100947cc], al
call fcn.10055570
push 0x100947cc
push str.Invulnerable
call fcn.10048db0
add esp, 8
test al, al
je 0x1006da94
call fcn.10071900
mov ecx, dword [eax + 0x118]
mov al, byte [0x100947cc]
mov byte [ecx + 0xe8], al
mov eax, dword [0x10098bf8]
mov al, byte [eax + 0xed]
mov byte [0x100947cd], al
call fcn.10055570
push 0x100947cd
push str.Free_Fly
call fcn.10048db0
movzx ecx, byte [0x10093765]
test al, al
mov edx, 1
mov dword [esp + 4], 0xbf800000
cmovne ecx, edx
mov dword [esp], 0
mov byte [0x10093765], cl
call fcn.10021380
push dword [0x100937b4]
call fcn.1006c330
call fcn.10055570
push 0x100947ce
push str.Police
call fcn.10048db0
add esp, 0x14
cmp byte [0x100947ce], 0
je 0x1006ddc4
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006ddc4
call fcn.10071fb0
fstp dword [ebp - 0x118]
call fcn.10055570
movss xmm0, dword [0x1009294c]
lea eax, [ebp - 0x118]
push 0
push str._.3f
sub esp, 8
movss dword [esp + 4], xmm0
mov dword [esp], 0
push eax
push str.Density
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006db81
movss xmm0, dword [ebp - 0x118]
push ecx
movss dword [esp], xmm0
call fcn.10071fc0
add esp, 4
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x41200000
mov dword [esp], 0
push 0x1009294c
push str.Density_Max
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006dbc6
movss xmm0, dword [0x1009294c]
push ecx
movss dword [esp], xmm0
call fcn.10071fe0
add esp, 4
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Despawn
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 8
test al, al
je 0x1006dbf7
call fcn.10071f90
call fcn.10072000
test al, al
push 0x100947cf
push str.cbtr
sete byte [0x100947cf]
call fcn.10048db0
add esp, 8
test al, al
je 0x1006dc2b
movzx eax, byte [0x100947cf]
push eax
call fcn.10072070
add esp, 4
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.Time_dilation_disabled
call fcn.100597b0
push 0x10092950
push str.cbst
call fcn.10048db0
add esp, 0x14
test al, al
je 0x1006dc93
mov al, byte [0x10092950]
test al, al
jne 0x1006dc75
call fcn.10071f90
mov al, byte [0x10092950]
movzx eax, al
push eax
call fcn.10072140
movzx eax, byte [0x10092950]
push eax
push str.setpolice___i
call fcn.1006b790
add esp, 0xc
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.Enable___Disable_police
call fcn.100597b0
push 0x100947d0
push str.cknow
call fcn.10048db0
add esp, 0x14
test al, al
je 0x1006dd1c
mov ecx, dword [0x10098bf8]
call fcn.10064420
test eax, eax
je 0x1006dd1c
mov ecx, dword [0x10098bf8]
call fcn.10064420
cmp dword [eax + 4], 0
je 0x1006dd1c
call fcn.10071dc0
mov ecx, dword [0x10098bf8]
test al, al
sete byte [0x100947d0]
call fcn.10064420
push 0
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x1c]
movzx eax, byte [0x100947d0]
push eax
push ecx
call fcn.100720c0
add esp, 0xc
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.Wanted_Vehicle
call fcn.100597b0
call fcn.10071dc0
push 0x100947d1
push str.pknow
mov byte [0x100947d0], al
call fcn.10048db0
add esp, 0x14
test al, al
je 0x1006dd96
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006dd96
call fcn.10071de0
test al, al
sete byte [0x100947d1]
xor ecx, ecx
test al, al
jne 0x1006dd8d
call fcn.10071900
mov eax, dword [eax + 0x118]
mov ecx, dword [eax + 0x1c]
push ecx
call fcn.100720e0
add esp, 4
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.Wanted_Player
call fcn.100597b0
add esp, 0xc
call fcn.10071de0
mov byte [0x100947d1], al
movss xmm0, dword [0x1aa92b8]
movss dword [0x100947d4], xmm0
movss xmm0, dword [0x1aa92c0]
movss dword [0x100947d8], xmm0
call fcn.10055570
push 0x100947dc
push str.Traffic
call fcn.10048db0
add esp, 8
cmp byte [0x100947dc], 0
je 0x1006e0d9
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006e0d9
mov eax, dword [0x100947e0]
push 0
mov dword [ebp - 0xa8], 0x1007c324
mov dword [ebp - 0xa4], 0x1008a4c4
mov dword [ebp - 0xa0], 0x1008a4c8
mov dword [ebp - 0x9c], 0x1008a4cc
mov dword [ebp - 0x98], 0x1008a4d0
mov dword [ebp - 0x94], 0x1008a4d4
mov dword [ebp - 0x90], 0x1008a4d8
mov dword [ebp - 0x8c], 0x1008a4dc
mov dword [ebp - 0x88], 0x1008a4e0
mov dword [ebp - 0x84], 0x1008a4e4
mov dword [ebp - 0x80], 0x1008a4e8
mov dword [ebp - 0x7c], 0x1008a4ec
mov dword [ebp - 0x78], 0x1008a4f0
mov dword [ebp - 0x74], 0x1008a4f4
mov dword [ebp - 0x70], 0x1008a4f8
mov dword [ebp - 0x6c], 0x1008a4fc
mov dword [ebp - 0x68], 0x1008a500
mov dword [ebp - 0x64], 0x1008a504
mov dword [ebp - 0x60], 0x1008a508
mov dword [ebp - 0x5c], 0x1008a50c
mov dword [ebp - 0x58], 0x1008a510
mov dword [ebp - 0x54], 0x1008a514
push dword [ebp + eax*4 - 0xa8]
push str.bcose
call fcn.10047220
add esp, 0xc
test al, al
je 0x1006df5c
xor esi, esi
cmp dword [0x100947e0], esi
lea eax, [ebp - 0x110]
push eax
push 0
sete byte [ebp - 0x118]
mov dword [ebp - 0x110], 0
push dword [ebp - 0x118]
mov dword [ebp - 0x10c], 0
push dword [ebp + esi*4 - 0xa8]
call fcn.10054fe0
mov ecx, dword [0x100947e0]
add esp, 0x10
test al, al
cmovne ecx, esi
cmp byte [ebp - 0x118], 0
mov dword [0x100947e0], ecx
je 0x1006df51
call fcn.10022190
inc esi
cmp esi, 0x16
jl 0x1006def3
call fcn.1004f440
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Open
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006dfcb
mov eax, dword [0x100947e0]
push 0xa
push 0
push dword [ebp + eax*4 - 0xa8]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov esi, eax
push esi
call fcn.10072120
push esi
push str.open_season___i
call fcn.1006b790
add esp, 0x18
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Close
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006e013
call fcn.10072100
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x44fa0000
mov dword [esp], 0
push 0x100947d4
push str.stsnsc
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006e052
movss xmm0, dword [0x100947d4]
movss dword [0x1aa92b8], xmm0
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.No_Ambient_Radius
call fcn.100597b0
add esp, 0xc
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x44fa0000
mov dword [esp], 0
push 0x100947d8
push str.sfnar
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006e0b5
movss xmm0, dword [0x100947d8]
movss dword [0x1aa92c0], xmm0
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.Far_Ambient_Radius
call fcn.100597b0
add esp, 0xc
call fcn.10055570
push 0x100947e4
push str.Inventory
call fcn.10048db0
add esp, 8
cmp byte [0x100947e4], 0
je 0x1006e6a6
call fcn.10071900
test eax, eax
je 0x1006e6a6
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006e6a6
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006e6a6
call fcn.10071900
mov eax, dword [eax + 0x118]
cmp dword [eax + 0xa0], 0
je 0x1006e6a6
call fcn.10071900
mov eax, dword [eax + 0x118]
cmp dword [eax + 0xac], 0
je 0x1006e6a6
call fcn.10071900
mov eax, dword [eax + 0x118]
mov eax, dword [eax + 0xac]
mov esi, dword [eax + 0x170]
call fcn.10071900
mov eax, dword [eax + 0x118]
mov eax, dword [eax + 0xac]
push dword [eax + 0x3b4]
push esi
push str.Selected_Weapon__d___d_
call fcn.10059880
push dword [0x10092954]
push str.Table_Name____s
call fcn.10059880
push 0
push 0x64
push 1
push 0x10092958
push str.wpnid
call fcn.1004fb10
add esp, 0x28
test al, al
je 0x1006e22c
mov ecx, dword [0x10092958]
mov eax, 2
mov edx, dword [0x10093814]
cmp ecx, eax
mov edi, dword [0x10093810]
cmovl ecx, eax
mov dword [0x10092954], 0x1007c324
sub edx, edi
sar edx, 2
lea eax, [edx + 1]
cmp ecx, eax
cmova ecx, eax
xor eax, eax
mov dword [0x10092958], ecx
test edx, edx
je 0x1006e226
cmp ecx, 1
jle 0x1006e20e
mov esi, dword [edi + eax*4]
cmp ecx, dword [esi]
je 0x1006e215
inc eax
cmp eax, edx
jb 0x1006e202
jmp 0x1006e226
add esi, 4
cmp dword [esi + 0x14], 0x10
jb 0x1006e220
mov esi, dword [esi]
mov dword [0x10092954], esi
mov edi, dword [ebp - 0x120]
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Weapon
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 8
test al, al
je 0x1006e3a6
call fcn.10071900
mov eax, dword [eax + 0x118]
cmp dword [eax + 0xa4], 0
je 0x1006e3a6
mov eax, dword [0x10092958]
mov dword [ebp - 0x124], 0x1f4
mov dword [ebp - 0x114], eax
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e2c0
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x1006e2c0
mov dword [ebp - 0x118], eax
push dword [ebp - 0x124]
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x118]
call dword [0x10098a18]
mov al, byte [0x10092958]
mov byte [ebp - 0x124], al
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e3a6
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x1006e3a6
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], eax
push dword [ebp - 0x124]
mov ecx, dword [ebp - 0x114]
call dword [0x10098a48]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x1006e3a6
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e350
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x1006e350
mov dword [ebp - 0x124], eax
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x124]
call dword [0x10098a5c]
mov eax, dword [0x10092958]
mov byte [ebp - 0x124], 0
mov byte [ebp - 0x114], 1
mov dword [ebp - 0x118], eax
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e3a6
mov eax, dword [eax + 0xa4]
test eax, eax
je 0x1006e3a6
mov dword [ebp - 0x120], eax
push dword [ebp - 0x124]
push dword [ebp - 0x114]
push dword [ebp - 0x118]
mov ecx, dword [ebp - 0x120]
call dword [0x10098a14]
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push 0x10078514
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006e4eb
mov eax, dword [0x10092958]
mov dword [ebp - 0x124], eax
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e433
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x1006e433
mov dword [ebp - 0x118], 0x943080
mov dword [ebp - 0x114], eax
push dword [ebp - 0x124]
mov ecx, dword [ebp - 0x114]
call dword [ebp - 0x118]
mov al, byte [0x10092958]
add al, 0xa
mov byte [ebp - 0x124], al
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e4eb
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x1006e4eb
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], eax
push dword [ebp - 0x124]
mov ecx, dword [ebp - 0x114]
call dword [0x10098a48]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x1006e4eb
mov eax, dword [0x10092958]
add eax, 0xa
mov byte [ebp - 0x124], 0
mov byte [ebp - 0x114], 1
mov dword [ebp - 0x118], eax
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e4eb
mov eax, dword [eax + 0xa4]
test eax, eax
je 0x1006e4eb
mov dword [ebp - 0x120], eax
push dword [ebp - 0x124]
push dword [ebp - 0x114]
push dword [ebp - 0x118]
mov ecx, dword [ebp - 0x120]
call dword [0x10098a14]
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Remove
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 8
test al, al
je 0x1006e60d
mov al, byte [0x10092958]
mov byte [ebp - 0x124], al
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e60d
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x1006e60d
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], eax
push dword [ebp - 0x124]
mov ecx, dword [ebp - 0x114]
call dword [0x10098a48]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x1006e60d
mov eax, dword [0x10092958]
mov dword [ebp - 0x12c], eax
call fcn.10071900
mov esi, dword [eax + 0x118]
test esi, esi
je 0x1006e60d
cmp dword [esi + 0xa0], 0
je 0x1006e60d
mov eax, dword [esi + 0xb0]
mov byte [ebp - 0x125], 0
test eax, eax
je 0x1006e5ef
mov dword [ebp - 0x120], 0x4311e0
mov dword [ebp - 0x114], 1
mov byte [ebp - 0x124], 1
mov dword [ebp - 0x118], eax
push dword [ebp - 0x124]
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x118]
call dword [ebp - 0x120]
mov byte [ebp - 0x125], al
mov eax, dword [esi + 0xa0]
mov dword [ebp - 0x124], eax
push dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x124]
call dword [0x10098a1c]
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Select
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006e6a6
mov eax, dword [0x10092958]
mov byte [ebp - 0x12c], 0
mov byte [ebp - 0x124], 1
mov dword [ebp - 0x114], eax
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x1006e6a6
mov eax, dword [eax + 0xa4]
test eax, eax
je 0x1006e6a6
mov dword [ebp - 0x118], eax
push dword [ebp - 0x12c]
push dword [ebp - 0x124]
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x118]
call dword [0x10098a14]
mov eax, dword [0x100947ec]
cmp eax, dword [edi + 4]
jg 0x10071048
call fcn.10055570
push 0x100947f0
push str.Minimap
call fcn.10048db0
add esp, 8
cmp byte [0x100947f0], 0
je 0x1006e720
call fcn.10071900
test eax, eax
je 0x1006e720
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006e720
push 0
push 0x10078430
push 0xa
push 0
push 0x100947e8
push str.rdrc
call fcn.10056350
mov ecx, dword [0x100937d0]
add esp, 0x18
test al, al
cmovne ecx, dword [0x100947e8]
mov dword [0x100937d0], ecx
call fcn.10071900
test eax, eax
je 0x1006f322
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x1006f322
mov ecx, dword [0x10098bf8]
call fcn.10064420
test eax, eax
je 0x1006f322
call fcn.10055570
push 0x100947f1
push str.Speedometer
call fcn.10048db0
add esp, 8
cmp byte [0x100947f1], 0
je 0x1006e8eb
call fcn.10055570
push 0x10093751
push str.Enable
call fcn.10048db0
call fcn.10013f90
fmul dword [0x10079278]
add esp, 4
fstp dword [esp]
call fcn.1001e310
push 0
push 0x64
push 1
push 0x10093754
push str.XYZAB
call fcn.1004fb10
add esp, 0x10
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push dword [0x10093754]
push 0x1008a5d0
call fcn.100597b0
push 0
push 0x64
push 1
push 0x10093758
push 0x10078504
call fcn.1004fb10
add esp, 0x1c
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push dword [0x10093758]
push 0x1008a5d0
call fcn.100597b0
movzx eax, byte [0x1009374f]
mov ecx, dword [0x1009374c]
mov dword [ebp - 0xb8], eax
movzx eax, byte [0x1009374e]
mov dword [ebp - 0xb4], eax
push 0
movzx eax, ch
push 0x10078430
mov dword [ebp - 0xb0], eax
movzx eax, cl
push 0xff
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0xb8]
push 0
push eax
push str.spdcl
call fcn.10056320
add esp, 0x28
test al, al
je 0x1006e8ab
mov al, byte [ebp - 0xac]
mov byte [ebp - 0x120], al
mov al, byte [ebp - 0xb0]
mov byte [ebp - 0x11f], al
mov al, byte [ebp - 0xb4]
mov byte [ebp - 0x11e], al
mov al, byte [ebp - 0xb8]
mov byte [ebp - 0x11d], al
mov eax, dword [ebp - 0x120]
mov dword [0x1009374c], eax
call fcn.1001dc20
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Save
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 8
test al, al
je 0x1006e8e1
call fcn.10061e20
call fcn.10055570
call fcn.10053830
call fcn.10055570
push 0x100947f2
push str.Vehicle
call fcn.10048db0
add esp, 8
cmp byte [0x100947f2], 0
je 0x1006f322
mov ecx, dword [0x10098bf8]
call fcn.10064420
test eax, eax
je 0x1006f322
mov ecx, dword [0x10098bf8]
call fcn.10064420
mov ecx, dword [0x10098bf8]
push 0
mov esi, dword [eax + 4]
call fcn.10064420
mov ecx, eax
call fcn.10073b10
mov ecx, dword [0x10098bf8]
push 1
fstp dword [0x100947f4]
call fcn.10064420
mov ecx, eax
call fcn.10073b10
mov ecx, dword [0x10098bf8]
push 0x1009480c
push 0x10094800
fstp dword [0x100947f8]
call fcn.10064420
mov ecx, eax
call fcn.10073b60
mov ecx, dword [0x10098bf8]
call fcn.10064420
mov ecx, eax
call fcn.10073cd0
mov dword [0x100947fc], eax
mov al, byte [esi + 0x8e0]
mov byte [0x10094818], al
mov al, byte [esi + 0x8e1]
mov byte [0x10094819], al
mov al, byte [esi + 0x8e2]
mov byte [0x1009481a], al
mov al, byte [esi + 0x8e3]
mov byte [0x1009481b], al
mov al, byte [esi + 0x8e4]
mov byte [0x1009481c], al
mov al, byte [esi + 0x8e5]
mov byte [0x1009481d], al
call fcn.10013f90
fmul dword [0x10079278]
push ecx
fstp dword [esp]
call fcn.1001e310
push 0xffffffffffffffff
push 0x1b
push 0x10092960
push 0x10094820
push str.cwhl
call fcn.1004db60
add esp, 0x18
test al, al
jne 0x1006ea18
cmp byte [0x10094824], al
je 0x1006eab9
mov eax, dword [0x10094820]
lea ecx, [ebp - 0xf0]
push dword [eax*4 + 0x10092960]
call fcn.1005eab0
mov ecx, dword [0x10098bf8]
mov eax, dword [0x100929cc]
mov dword [ecx + 0x7c], eax
lea eax, [ebp - 0xf0]
mov byte [ecx + 0x78], 1
add ecx, 0x60
mov dword [ebp - 4], 0
cmp ecx, eax
je 0x1006ea6f
cmp dword [ebp - 0xdc], 0x10
push dword [ebp - 0xe0]
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.1005dbf0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1006eab2
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006eaa8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006eaa8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100746a5
add esp, 8
mov byte [0x10094824], 0
push 1
push 0x10078480
push str.Wheel_Index
call fcn.1006c3a0
add esp, 4
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push 0x100800b8
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006eb29
mov eax, dword [0x10094820]
mov ecx, 0x1a
sub eax, 1
mov byte [0x10094824], 1
cmovs eax, ecx
mov dword [0x10094820], eax
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push 0x100800bc
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006eb86
mov eax, dword [0x10094820]
xor ecx, ecx
inc eax
mov byte [0x10094824], 1
cmp eax, 0x1a
cmovg eax, ecx
mov dword [0x10094820], eax
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
add esp, 4
mov dword [esp], 0x41f00000
call fcn.1001e310
push 0
push 0x10078430
push 2
push 0xffffffffffffffff
push 0x100929cc
push str.slindex
call fcn.10056350
call fcn.1001dc20
push str.painting
call fcn.1001e140
call fcn.10013f90
fmul dword [0x10079278]
add esp, 0x1c
fstp dword [esp]
call fcn.1001e310
push 0xffffffffffffffff
push 9
push 0x100929d0
push 0x10094828
push str.cpnt
call fcn.1004db60
add esp, 0x18
test al, al
jne 0x1006ec16
cmp byte [0x1009482c], al
je 0x1006ecb5
mov eax, dword [0x10094828]
lea ecx, [ebp - 0xf0]
push dword [eax*4 + 0x100929d0]
call fcn.1005eab0
mov esi, dword [0x10098bf8]
lea ecx, [esi + 0x90]
mov dword [ebp - 4], 1
lea eax, [ebp - 0xf0]
cmp ecx, eax
je 0x1006ec64
cmp dword [ebp - 0xdc], 0x10
push dword [ebp - 0xe0]
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.1005dbf0
mov byte [esi + 0x8d], 1
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1006ecae
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006eca4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006eca4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100746a5
add esp, 8
mov byte [0x1009482c], 0
call fcn.1001dc20
push 1
push 0x10078480
push str.Painting
call fcn.1006c3a0
add esp, 4
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push 0x100800b8
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006ed2a
mov eax, dword [0x10094828]
mov ecx, 8
sub eax, 1
mov byte [0x1009482c], 1
cmovs eax, ecx
mov dword [0x10094828], eax
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push 0x100800bc
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006ed87
mov eax, dword [0x10094828]
xor ecx, ecx
inc eax
mov byte [0x1009482c], 1
cmp eax, 8
cmovg eax, ecx
mov dword [0x10094828], eax
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push dword [0x10094828]
push 0x10078430
call fcn.100597b0
add esp, 0x10
call fcn.1001db30
mov ecx, dword [0x10098bf8]
call fcn.10064420
mov ecx, eax
call fcn.10073be0
fstp dword [0x10094830]
call fcn.10013f90
fmul dword [0x10079278]
push ecx
fstp dword [esp]
call fcn.1001e310
add esp, 4
push 1
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x42c80000
mov dword [esp], 0
push 0x10094830
push str.engdmg
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006ee34
movss xmm0, dword [0x10094830]
push ecx
mov ecx, dword [0x10098bf8]
movss dword [esp], xmm0
call fcn.10064420
mov ecx, eax
call fcn.10073e60
call fcn.1001dc20
push dword [0x10093788]
call fcn.1006c330
mov dword [esp], 0xbf800000
push ecx
mov dword [esp], 0
call fcn.10021380
push str.Engine
call fcn.10059880
call fcn.10013f90
fmul dword [0x10079278]
add esp, 8
fstp dword [esp]
call fcn.1001e310
add esp, 4
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x42c80000
mov dword [esp], 0
push 0x10094834
push str.fdmg
call fcn.100562f0
call fcn.1001dc20
push dword [0x10093784]
call fcn.1006c330
add esp, 0x14
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Damage
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006ef12
mov eax, dword [0x10098bf8]
movss xmm0, dword [0x10094834]
mov byte [eax + 0x81], 1
movss dword [eax + 0x84], xmm0
mov ecx, dword [0x10098bf8]
call fcn.10064420
mov ecx, eax
call fcn.10073bc0
fstp dword [0x10094838]
call fcn.10013f90
fmul dword [0x10079278]
push ecx
fstp dword [esp]
call fcn.1001e310
add esp, 4
push 1
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0
push 0x10094838
push str.dirt
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006ef90
movss xmm0, dword [0x10094838]
push ecx
mov ecx, dword [0x10098bf8]
movss dword [esp], xmm0
call fcn.10064420
mov ecx, eax
call fcn.10073e40
call fcn.1001dc20
push dword [0x10093780]
call fcn.1006c330
mov dword [esp], 0xbf800000
push ecx
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Repair
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006efec
mov eax, dword [0x10098bf8]
mov byte [eax + 0x80], 1
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0
push 0x100929f4
push str.trans
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006f03b
movss xmm0, dword [0x100929f4]
push ecx
mov ecx, dword [0x10098bf8]
movss dword [esp], xmm0
call fcn.10064420
mov ecx, eax
call fcn.10073f30
push 1
push 0x10078480
push str.Transparency
call fcn.1006c3a0
call fcn.10013f90
fmul dword [0x10079278]
add esp, 8
fstp dword [esp]
call fcn.1001e310
push 0
push 0x10078430
push 3
push 0
push 0x100947fc
push str.itng
call fcn.10056350
add esp, 0x1c
test al, al
je 0x1006f094
mov ecx, dword [0x10098bf8]
mov eax, dword [0x100947fc]
mov dword [ecx + 0x88], eax
call fcn.1001dc20
push dword [0x100937a0]
call fcn.1006c330
mov dword [esp], 0xbf800000
push ecx
mov dword [esp], 0
call fcn.10021380
push str.Tuning
call fcn.10059880
push 0
push 0x10094800
push str.sclpri
call fcn.10049c80
add esp, 0x18
test al, al
je 0x1006f0f6
mov ecx, dword [0x10098bf8]
push 0x1009480c
push 0x10094800
call fcn.10064420
mov ecx, eax
call fcn.10073dd0
push ecx
mov dword [esp], 0xbf800000
call fcn.1000d2d0
fadd dword [0x1008a9a8]
push ecx
fstp dword [esp]
call fcn.10021380
push 0
push 0x10078480
push str.Color_Primary
call fcn.1006c3a0
push 0
push 0x1009480c
push str.sclsec
call fcn.10049c80
add esp, 0x20
test al, al
je 0x1006f157
mov ecx, dword [0x10098bf8]
push 0x1009480c
push 0x10094800
call fcn.10064420
mov ecx, eax
call fcn.10073dd0
push ecx
mov dword [esp], 0xbf800000
call fcn.1000d2d0
fadd dword [0x1008a9a8]
push ecx
fstp dword [esp]
call fcn.10021380
push 0
push 0x10078480
push str.Color_Secondary
call fcn.1006c3a0
movss xmm0, dword [0x100947f8]
add esp, 0x14
push 0
push str._.3f
sub esp, 8
movss dword [esp + 4], xmm0
mov dword [esp], 0
push 0x100947f4
push str.fuel
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006f1dc
movss xmm0, dword [0x100947f4]
push ecx
mov ecx, dword [0x10098bf8]
movss dword [esp], xmm0
call fcn.10064420
mov ecx, eax
call fcn.10073d90
push 1
push 0x10078480
push str.Fuel
call fcn.1006c3a0
add esp, 4
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
movss xmm0, dword [0x100947f8]
subss xmm0, dword [0x100947f4]
mulss xmm0, dword [0x1008a990]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.__.2f
call fcn.10059880
call fcn.10013f90
fmul dword [0x10079278]
add esp, 8
fstp dword [esp]
call fcn.1001e310
push 0
push 0
push 0
push 7
push 0x10094818
push str.plate
call fcn.10050090
add esp, 0x1c
test al, al
je 0x1006f279
mov ecx, dword [0x10098bf8]
push 0x10094818
call fcn.10064420
mov ecx, eax
call fcn.10073ef0
call fcn.1001dc20
push 1
push 0x10078480
push str.Plate_Text
call fcn.1006c3a0
call fcn.10013f90
fmul dword [0x10079278]
add esp, 8
fstp dword [esp]
call fcn.1001e310
add esp, 4
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0
push 0x100929f8
push str.stspd
call fcn.100562f0
add esp, 0x18
test al, al
je 0x1006f2ec
mov eax, dword [0x10098bf8]
movss xmm0, dword [0x100929f8]
movss dword [eax + 0xa8], xmm0
call fcn.1001dc20
push dword [0x100937a8]
push str.Pressed
call fcn.1006c230
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.Racing
call fcn.10059880
add esp, 0xc
call fcn.1004f610
push 0
push 0
push str.Script
call fcn.10048140
add esp, 0xc
test al, al
je 0x1006f482
cmp byte [0x10098840], 0
mov byte [0x10093766], 1
jne 0x1006f364
push 0x10094840
call fcn.1006c620
add esp, 4
mov byte [0x10098840], 1
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Execute
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 8
test al, al
je 0x1006f3cf
sub esp, 0x18
mov ecx, 0x10094840
mov edx, esp
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f3b1
sub ecx, esi
push ecx
push 0x10094840
mov ecx, edx
call fcn.1005c650
call fcn.10072160
add esp, 0x18
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.Save
mov dword [ebp - 0x10c], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x1006f41f
push 0x10094840
call fcn.1006cc50
add esp, 4
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push str.pcuserscript_script.lua
call fcn.10059880
push 0
push 0
push 0x400
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0xbf800000
push eax
push 0x4000
push 0x10094840
push str.source
mov dword [ebp - 0x10c], 0xbf800000
call fcn.10053360
add esp, 0x28
call fcn.1004f610
jmp 0x1006f489
mov byte [0x10093766], 0
push 0
push 0
push str.Settings
call fcn.10048140
add esp, 0xc
test al, al
je 0x1006f79d
push 0x10094745
push 0x100783f8
call fcn.10048db0
push 0x10093753
push str.HdGraphicsMode
call fcn.10048db0
call fcn.10055570
push dword [0x10093768]
call fcn.1005fe20
push eax
push str.Key_ShowCursor
push str.Key__s__s
call fcn.10059880
push dword [0x1009376c]
call fcn.1005fe20
push eax
push str.Key_Window_Main
push str.Key__s__s
call fcn.10059880
push dword [0x1009377c]
call fcn.1005fe20
push eax
push str.Key_Game_SlowTime
push str.Key__s__s
call fcn.10059880
add esp, 0x40
push dword [0x10093780]
call fcn.1005fe20
push eax
push str.Key_Car_Repair
push str.Key__s__s
call fcn.10059880
push dword [0x10093784]
call fcn.1005fe20
push eax
push str.Key_Car_Damage
push str.Key__s__s
call fcn.10059880
push dword [0x10093788]
call fcn.1005fe20
push eax
push str.Key_Car_MotorDamage
push str.Key__s__s
call fcn.10059880
push dword [0x1009378c]
call fcn.1005fe20
push eax
push str.Key_Car_TurnRight
push str.Key__s__s
call fcn.10059880
add esp, 0x40
push dword [0x10093790]
call fcn.1005fe20
push eax
push str.Key_Car_TurnLeft
push str.Key__s__s
call fcn.10059880
push dword [0x10093794]
call fcn.1005fe20
push eax
push str.Key_Car_Wiper
push str.Key__s__s
call fcn.10059880
push dword [0x10093798]
call fcn.1005fe20
push eax
push str.Key_Car_Light
push str.Key__s__s
call fcn.10059880
push dword [0x1009379c]
call fcn.1005fe20
push eax
push str.Key_Car_Freeze
push str.Key__s__s
call fcn.10059880
add esp, 0x40
push dword [0x100937a0]
call fcn.1005fe20
push eax
push str.Key_Car_Tuning
push str.Key__s__s
call fcn.10059880
push dword [0x100937a4]
call fcn.1005fe20
push eax
push str.Key_Car_Engine
push str.Key__s__s
call fcn.10059880
push dword [0x100937a8]
call fcn.1005fe20
push eax
push str.Key_Car_SetSpeed
push str.Key__s__s
call fcn.10059880
push dword [0x10093770]
call fcn.1005fe20
push eax
push str.Key_Car_Create
push str.Key__s__s
call fcn.10059880
add esp, 0x40
push dword [0x10093774]
call fcn.1005fe20
push eax
push str.Key_Car_PageUp
push str.Key__s__s
call fcn.10059880
push dword [0x10093778]
call fcn.1005fe20
push eax
push str.Key_Car_PageDown
push str.Key__s__s
call fcn.10059880
push dword [0x100937ac]
call fcn.1005fe20
push eax
push str.Key_Car_Free
push str.Key__s__s
call fcn.10059880
push dword [0x100937b0]
call fcn.1005fe20
push eax
push str.Key_Ped_Free
push str.Key__s__s
call fcn.10059880
add esp, 0x40
push dword [0x100937b4]
call fcn.1005fe20
push eax
push str.Key_Fly_Enable
push str.Key__s__s
call fcn.10059880
push dword [0x100937b8]
call fcn.1005fe20
push eax
push str.Key_Fly_Forward
push str.Key__s__s
call fcn.10059880
push dword [0x100937bc]
call fcn.1005fe20
push eax
push str.Key_Fly_Backward
push str.Key__s__s
call fcn.10059880
push dword [0x100937c0]
call fcn.1005fe20
push eax
push str.Key_Fly_RotLeft
push str.Key__s__s
call fcn.10059880
add esp, 0x40
push dword [0x100937c4]
call fcn.1005fe20
push eax
push str.Key_Fly_RotRight
push str.Key__s__s
call fcn.10059880
push dword [0x100937c8]
call fcn.1005fe20
push eax
push str.Key_Fly_Up
push str.Key__s__s
call fcn.10059880
push dword [0x100937cc]
call fcn.1005fe20
push eax
push str.Key_Fly_Down
push str.Key__s__s
call fcn.10059880
add esp, 0x30
call fcn.1004f610
push 0
push 0
push str.Create
call fcn.10048140
add esp, 0xc
test al, al
je 0x100705f5
call fcn.10071900
test eax, eax
je 0x100705f0
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x100705f0
push 0x10098841
push str.Create_Vehicle
call fcn.10048db0
push dword [0x100937ac]
push str.Despawn
call fcn.1006c230
add esp, 0x10
cmp byte [0x10098841], 0
je 0x1006fca6
mov esi, dword [0x10093808]
lea eax, [ebp - 0x110]
sub esi, dword [0x10093804]
push eax
sar esi, 2
push str.Create
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
call fcn.100483d0
push 1
push str._Keys
push dword [0x10093778]
mov byte [0x10098867], al
push dword [0x10093774]
push dword [0x10093770]
call fcn.1006c2a0
add esp, 0x1c
cmp byte [0x10098867], 0
jne 0x1006f88a
movzx eax, byte [0x10093770]
push 0xfa
push eax
call fcn.1006b750
add esp, 8
test al, al
je 0x1006fa62
cmp byte [0x10098844], 0
je 0x1006fa62
push 0
call fcn.10063990
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
movups xmmword [ebp - 0xd8], xmm0
add esp, 4
mov dword [ebp - 0xc4], 0xf
mov edx, eax
mov byte [ebp - 0xd8], 0
mov ecx, edx
mov dword [ebp - 4], 2
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f8d4
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xd8]
call fcn.1005dbf0
push 9
push str.sdscars_
lea ecx, [ebp - 0xd8]
call fcn.1005daa0
mov ecx, 0x10098844
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f904
sub ecx, edx
push ecx
push 0x10098844
lea ecx, [ebp - 0xd8]
call fcn.1005daa0
push 4
push str..sds
lea ecx, [ebp - 0xd8]
call fcn.1005daa0
cmp dword [ebp - 0xc4], 0x10
lea edi, [ebp - 0xd8]
cmovae edi, dword [ebp - 0xd8]
push edi
call fcn.100638c0
add esp, 4
test al, al
jne 0x1006f971
mov eax, dword [0x10098bf8]
push edi
push str.file_not_found___s
push 0xfa0
push dword [eax + 8]
call fcn.10068920
add esp, 0x10
jmp 0x1006fa1f
mov ecx, 0x10098844
mov dword [ebp - 0xb0], 0
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xc0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f997
sub ecx, edx
push ecx
push 0x10098844
lea ecx, [ebp - 0xc0]
call fcn.1005c650
mov eax, dword [0x10098bf8]
lea ecx, [eax + 0x44]
mov byte [eax + 0x5c], 1
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 3
cmp ecx, eax
je 0x1006f9e5
cmp dword [ebp - 0xac], 0x10
push dword [ebp - 0xb0]
cmovae eax, dword [ebp - 0xc0]
push eax
call fcn.1005dbf0
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 2
cmp ecx, 0x10
jb 0x1006fa1f
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006fa15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006fa52
push ecx
push edx
call fcn.100746a5
add esp, 8
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x1006fa62
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006fa58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006fa58
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100746a5
add esp, 8
push 1
push 0x1008a7a8
push str.Destroy
call fcn.1006c3a0
add esp, 4
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push 0x10098865
push str.destroy
call fcn.10048db0
add esp, 0x10
test al, al
je 0x1006fac7
mov ecx, dword [0x10098bf8]
cmp byte [ecx + 0x5d], 0
sete al
mov byte [ecx + 0x5d], al
mov eax, dword [0x10098bf8]
movzx eax, byte [eax + 0x5d]
push eax
push str.set_destroy___i
call fcn.1006b790
add esp, 8
push 1
push 0x10078480
push str.EngineOn
call fcn.1006c3a0
add esp, 4
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push 0x10092a00
push str.engineon
call fcn.10048db0
add esp, 0x10
test al, al
je 0x1006fb13
mov ecx, dword [0x10098bf8]
mov al, byte [0x10092a00]
mov byte [ecx + 0x5e], al
push 1
push 0x10078480
push str.SetCar
call fcn.1006c3a0
add esp, 4
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push 0x10098866
push str.setcar
call fcn.10048db0
add esp, 0x10
test al, al
je 0x1006fb5f
mov ecx, dword [0x10098bf8]
mov al, byte [0x10098866]
mov byte [ecx + 0x5f], al
push 0x4000
push 1
lea eax, [ebp - 0x110]
mov dword [ebp - 0x110], 0
push eax
push str.crtveh
mov dword [ebp - 0x10c], 0
call fcn.1000c0b0
add esp, 0x10
xor edi, edi
test esi, esi
je 0x1006fc44
nop dword [eax + eax]
mov eax, dword [0x10093804]
mov esi, dword [eax + edi*4]
add esi, 8
cmp dword [esi + 0x14], 0x10
jb 0x1006fbb3
mov esi, dword [esi]
cmp dword [0x100929fc], edi
lea eax, [ebp - 0x110]
push eax
sete al
mov dword [ebp - 0x110], 0
push 2
movzx eax, al
push eax
push esi
mov dword [ebp - 0x10c], 0
call fcn.10054fe0
add esp, 0x10
test al, al
je 0x1006fc00
push esi
push 0x10098844
mov dword [0x100929fc], edi
call fcn.100694b0
add esp, 8
jmp 0x1006fc35
cmp byte [0x10098864], 0
je 0x1006fc35
cmp edi, dword [0x100929fc]
jne 0x1006fc35
push esi
push 0x10098844
mov byte [0x10098864], 0
call fcn.100694b0
add esp, 4
mov dword [esp], 0x3f000000
call fcn.10022d10
add esp, 4
mov esi, dword [ebp - 0x12c]
inc edi
cmp edi, esi
jb 0x1006fba0
movzx eax, byte [0x10093774]
push 0x64
push eax
call fcn.1006b750
add esp, 8
test al, al
je 0x1006fc70
mov eax, dword [0x100929fc]
test eax, eax
jle 0x1006fc70
dec eax
mov byte [0x10098864], 1
mov dword [0x100929fc], eax
movzx eax, byte [0x10093778]
push 0x64
push eax
call fcn.1006b750
add esp, 8
test al, al
je 0x1006fca1
mov ecx, dword [0x100929fc]
lea eax, [esi - 1]
cmp ecx, eax
jge 0x1006fca1
inc ecx
mov byte [0x10098864], 1
mov dword [0x100929fc], ecx
call fcn.100107e0
call fcn.10055570
mov eax, dword [0x10098ca0]
mov ecx, dword fs:[0x2c]
mov edi, dword [0x100937f4]
sub edi, dword [0x100937f0]
sar edi, 2
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x10098878]
mov dword [ebp - 0x10c], edi
cmp eax, dword [ecx + 4]
jg 0x1007107e
push 1
push 0x10098870
push str.Change_Ped
call fcn.10053900
call fcn.10055570
push 0
push 0x10098870
push str.Create_Ped
call fcn.10053900
push dword [0x100937b0]
push str.Despawn
call fcn.1006c230
add esp, 0x20
call fcn.10055570
cmp dword [0x10098870], 0
jne 0x1006fe59
cmp dword [0x10092a28], 0x10
mov eax, 0x10092a14
cmovae eax, dword [0x10092a14]
push eax
push 0x100784fc
call fcn.10059880
call fcn.10013f90
fmul dword [0x10079278]
add esp, 4
fstp dword [esp]
call fcn.1001e310
push 0
push 0x64
push 1
push 0x10092a04
push str.Table
call fcn.1004fb10
add esp, 0x18
test al, al
je 0x1006fdc1
mov eax, dword [0x10092a04]
test eax, eax
jns 0x1006fd8c
mov eax, 0x12e
jmp 0x1006fd96
xor ecx, ecx
cmp eax, 0x12e
cmovg eax, ecx
push eax
mov dword [0x10092a04], eax
lea eax, [ebp - 0x108]
push eax
call fcn.10071910
add esp, 8
mov ecx, 0x10092a14
push eax
call fcn.100697d0
lea ecx, [ebp - 0x108]
call fcn.1005c790
push 0
push 0x10092a08
push str.Weapon
call fcn.1004fae0
add esp, 0xc
test al, al
je 0x1006fe0a
mov eax, dword [0x10092a08]
xor ecx, ecx
test eax, eax
cmovs eax, ecx
mov dword [0x10092a08], eax
mov eax, dword [0x10092a0c]
test eax, eax
jns 0x1006fdfb
mov dword [0x10092a0c], ecx
jmp 0x1006fe0a
mov ecx, 0x1f4
cmp eax, ecx
cmovg eax, ecx
mov dword [0x10092a0c], eax
push 0
push str._.3f
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0
push 0x10092a10
push str.Health
call fcn.1004fa90
add esp, 0x18
test al, al
je 0x1006fe4f
xorps xmm0, xmm0
comiss xmm0, dword [0x10092a10]
jbe 0x1006fe4f
mov dword [0x10092a10], 0
call fcn.1001dc20
call fcn.10055570
call fcn.10053830
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0
push eax
push str.Change_Create
mov dword [ebp - 0x130], 0
call fcn.100483d0
push 1
push 0x10078480
push dword [0x10093778]
mov byte [0x10098874], al
push dword [0x10093774]
push dword [0x10093770]
call fcn.1006c2a0
add esp, 0x1c
cmp byte [0x10098874], 0
jne 0x1006fecf
movzx eax, byte [0x10093770]
push 0xfa
push eax
call fcn.1006b750
add esp, 8
test al, al
je 0x100701eb
mov esi, dword [0x10098868]
test esi, esi
js 0x100701eb
cmp esi, edi
jae 0x100701eb
mov eax, dword [0x100937f0]
mov esi, dword [eax + esi*4]
mov dword [ebp - 0x120], esi
cmp dword [esi + 0x14], 0x10
jb 0x1006ff01
mov eax, dword [esi]
mov dword [ebp - 0x120], eax
add esi, 0x18
cmp dword [esi + 0x14], 0x10
jb 0x1006ff0c
mov esi, dword [esi]
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xac], 0xf
lea eax, [ebp - 0xc0]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.10063a40
add esp, 8
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 7
cmp ecx, 0x10
jb 0x1006ff87
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006ff7d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006ff7d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100746a5
add esp, 8
lea eax, [ebp - 0x108]
mov dword [ebp - 0xb0], 0
push eax
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.1005cff0
push dword [ebp - 0x120]
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 8
call fcn.10069810
push esi
lea ecx, [ebp - 0xd8]
call fcn.10069810
push 4
push str..sds
lea ecx, [ebp - 0xd8]
call fcn.1005daa0
mov edx, dword [ebp - 0xc8]
xor eax, eax
test edx, edx
je 0x10070016
cmp dword [ebp - 0xc4], 0x10
lea ecx, [ebp - 0xd8]
cmovae ecx, dword [ebp - 0xd8]
cmp byte [eax + ecx], 0x2f
jne 0x10070011
mov byte [eax + ecx], 0x5c
inc eax
cmp eax, edx
jb 0x1006fff3
cmp dword [ebp - 0xc4], 0x10
lea eax, [ebp - 0xd8]
cmovae eax, dword [ebp - 0xd8]
push eax
mov dword [ebp - 0x12c], eax
call fcn.100638c0
add esp, 4
test al, al
jne 0x10070062
push dword [ebp - 0x12c]
mov eax, dword [0x10098bf8]
push str.file_not_found___s
push 0xfa0
push dword [eax + 8]
call fcn.10068920
add esp, 0x10
jmp 0x100701ce
push esi
lea ecx, [ebp - 0xf0]
call fcn.1005eab0
push dword [ebp - 0x120]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 9
call fcn.1005eab0
mov eax, dword [0x10092a04]
cmp dword [0x10098870], 0
movss xmm0, dword [0x10092a10]
mov esi, dword [0x10098bf8]
mov dword [ebp - 0x12c], eax
setne al
movss dword [ebp - 0x124], xmm0
mov byte [esi + 0xad], al
lea ecx, [esi + 0xb0]
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0xb
cmp ecx, eax
je 0x100700e2
cmp dword [ebp - 0xac], 0x10
push dword [ebp - 0xb0]
cmovae eax, dword [ebp - 0xc0]
push eax
call fcn.1005dbf0
lea ecx, [esi + 0xc8]
lea eax, [ebp - 0xf0]
cmp ecx, eax
je 0x1007010c
cmp dword [ebp - 0xdc], 0x10
push dword [ebp - 0xe0]
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.1005dbf0
movss xmm0, dword [ebp - 0x124]
mov eax, dword [ebp - 0x12c]
mov dword [esi + 0xe0], eax
mov dword [esi + 0xe4], 0x10092a08
movss dword [esi + 0xe8], xmm0
mov byte [esi + 0xac], 1
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 0xa
cmp ecx, 0x10
jb 0x10070173
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10070169
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100701be
push ecx
push edx
call fcn.100746a5
add esp, 8
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
mov byte [ebp - 4], 8
cmp ecx, 0x10
jb 0x100701ce
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100701c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100701c4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100746a5
add esp, 8
lea ecx, [ebp - 0xd8]
call fcn.1005c790
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0xffffffff
call fcn.1005c790
push 0x4000
push 1
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0
push eax
push str.clit2
mov dword [ebp - 0x130], 0
call fcn.1000c0b0
add esp, 0x10
xor esi, esi
test edi, edi
je 0x10070520
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [0x100937f0]
lea ecx, [ebp - 0xf0]
push dword [eax + esi*4]
call fcn.1005cff0
mov eax, dword [0x100937f0]
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0xc
mov eax, dword [eax + esi*4]
add eax, 0x18
push eax
call fcn.1005cff0
mov edx, dword [ebp - 0xf8]
mov eax, 0x7fffffff
sub eax, dword [ebp - 0xe0]
mov byte [ebp - 4], 0xd
cmp eax, edx
jb 0x100710bb
cmp dword [ebp - 0xdc], 0x10
lea eax, [ebp - 0xf0]
mov edi, dword [ebp - 0xf0]
lea ecx, [ebp - 0x108]
cmovae eax, edi
mov dword [ebp - 0xc8], 0
setae byte [ebp - 0x119]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0xf4], 0x10
xorps xmm0, xmm0
mov eax, dword [ebp - 0x108]
cmovae ecx, eax
mov dword [ebp - 0x130], eax
setae byte [ebp - 0x125]
mov dword [ebp - 0x138], ecx
add edx, dword [ebp - 0xe0]
lea eax, [ebp - 0xd8]
mov ecx, 0xf
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x120], eax
movups xmmword [ebp - 0xd8], xmm0
cmp edx, ecx
jbe 0x1007036c
mov ecx, edx
or ecx, 0xf
mov dword [ebp - 0x124], ecx
cmp ecx, 0x7fffffff
jbe 0x10070323
mov eax, 0x7fffffff
jmp 0x10070341
cmp ecx, 0x16
mov dword [ebp - 0x12c], 0x16
lea eax, [ebp - 0x12c]
lea edx, [ebp - 0x124]
cmovae eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0xd8]
inc eax
push eax
call fcn.1005cab0
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0xd8], eax
push dword [ebp - 0xe0]
mov dword [ebp - 0xc8], edx
push dword [ebp - 0x13c]
mov dword [ebp - 0xc4], ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
push dword [ebp - 0xf8]
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 0xe0]
push dword [ebp - 0x138]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x114]
mov byte [eax + ecx], 0
cmp dword [ebp - 0xc4], 0x10
lea ecx, [ebp - 0xd8]
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0xe
cmovae ecx, dword [ebp - 0xd8]
cmp dword [0x10098868], esi
push eax
sete al
mov dword [ebp - 0xb0], 0
push 2
movzx eax, al
push eax
push ecx
mov dword [ebp - 0xac], 0
call fcn.10054fe0
add esp, 0x28
test al, al
je 0x1007040f
mov dword [0x10098868], esi
jmp 0x10070437
cmp byte [0x1009886c], 0
je 0x10070437
cmp esi, dword [0x10098868]
jne 0x10070437
push ecx
mov byte [0x1009886c], 0
mov dword [esp], 0x3f000000
call fcn.10022d10
add esp, 4
mov ecx, dword [ebp - 0xc4]
mov byte [ebp - 4], 0xd
cmp ecx, 0x10
jb 0x10070475
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1007046b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006eaa2
push ecx
push edx
call fcn.100746a5
add esp, 8
cmp byte [ebp - 0x125], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov byte [ebp - 4], 0xc
je 0x100704d2
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100704c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006eaa2
push ecx
push edx
call fcn.100746a5
add esp, 8
cmp byte [ebp - 0x119], 0
mov dword [ebp - 4], 0xffffffff
je 0x10070511
mov ecx, dword [ebp - 0xdc]
mov eax, edi
inc ecx
cmp ecx, 0x1000
jb 0x10070507
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006eaa2
push ecx
push edi
call fcn.100746a5
add esp, 8
mov edi, dword [ebp - 0x10c]
inc esi
cmp esi, edi
jb 0x10070230
mov al, byte [0x10093774]
mov byte [ebp - 0x119], al
call fcn.100130a0
movzx ecx, byte [ebp - 0x119]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x114], ecx
cmp byte [ecx + eax + 0xae4], 0
je 0x10070586
call esi
mov ecx, dword [ebp - 0x114]
cmp dword [ecx*4 + 0x100942a0], eax
jae 0x10070586
call esi
mov ecx, dword [ebp - 0x114]
add eax, 0x64
mov dword [ecx*4 + 0x100942a0], eax
mov eax, dword [0x10098868]
test eax, eax
jle 0x10070586
dec eax
mov byte [0x1009886c], 1
mov dword [0x10098868], eax
mov al, byte [0x10093778]
mov byte [ebp - 0x119], al
call fcn.100130a0
movzx ecx, byte [ebp - 0x119]
mov dword [ebp - 0x114], ecx
cmp byte [eax + ecx + 0xae4], 0
je 0x100705eb
call esi
mov ecx, dword [ebp - 0x114]
cmp dword [ecx*4 + 0x100942a0], eax
jae 0x100705eb
call esi
mov ecx, dword [ebp - 0x114]
add eax, 0x64
mov dword [ecx*4 + 0x100942a0], eax
lea eax, [edi - 1]
mov ecx, dword [0x10098868]
cmp ecx, eax
jae 0x100705eb
inc ecx
mov byte [0x1009886c], 1
mov dword [0x10098868], ecx
call fcn.100107e0
call fcn.1004f610
push 0
push 0
push str.Debug
call fcn.10048140
add esp, 0xc
test al, al
je 0x1007101e
call fcn.10055570
push 0x10094746
push str.Memory
call fcn.10048db0
add esp, 8
call fcn.10055570
mov eax, dword [0x10098bf8]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x1007093c
cmp dword [eax], 0
je 0x1007093c
mov eax, dword [eax + 4]
test eax, eax
je 0x1007093c
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x130], 0x1082530
mov ecx, dword [ebp - 0x10c]
call dword [ebp - 0x130]
mov dword [0x1009887c], eax
push dword [0x1009887c]
push str.Mode_Get__i
call fcn.10059880
push 0
push 0x64
push 1
push 0x10092a2c
push str.sltcm
call fcn.1004fb10
add esp, 0x14
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push 0x10098880
push str.chkbunk1
call fcn.10048db0
add esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push 0x10092a30
push str.chkbunk2
call fcn.10048db0
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
push eax
push str.Select
mov dword [ebp - 0xac], 0
call fcn.100483d0
add esp, 0x18
test al, al
je 0x10070804
mov eax, dword [0x100989dc]
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x130], 0
push 1
mov ecx, dword [ebp - 0x10c]
call dword [0x100989e0]
mov dword [ebp - 0x130], eax
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x120]
push eax
push 0x40
push 1
push 0xb2b880
call esi
mov al, byte [0x10098880]
mov byte [0xb2b880], al
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x120]
push 1
push 0xb2b880
call esi
lea eax, [ebp - 0x120]
push eax
push 0x40
push 1
push 0xb2b882
call esi
mov al, byte [0x10092a30]
mov byte [0xb2b882], al
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x120]
push 1
push 0xb2b882
call esi
lea eax, [ebp - 0x120]
push eax
push 0x40
push 1
push 0xb2b885
call esi
mov al, byte [0x10092a2c]
mov byte [0xb2b885], al
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x120]
push 1
push 0xb2b885
call esi
push str.game.cameramanager:GetPlayerMainCamera_0_:EnableFPV_game.game:GetActivePlayer____true_
call fcn.10072220
movzx eax, byte [0x10092a30]
push eax
movzx eax, byte [0x10098880]
push eax
push dword [0x10092a2c]
push str.camera_mode_change__i__i__i
call fcn.1006b790
add esp, 0x14
push 0
push 0x64
push 1
push 0x10098884
push str.sltcmo
call fcn.1004fb10
add esp, 0x14
test al, al
je 0x10070831
mov eax, dword [0x10098884]
xor ecx, ecx
test eax, eax
cmovs eax, ecx
mov dword [0x10098884], eax
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push 0x10098888
push str.chbmp
call fcn.10048db0
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
push eax
push str.ModePop
mov dword [ebp - 0xac], 0
call fcn.100483d0
add esp, 0x18
test al, al
je 0x100708dc
mov eax, dword [0x100989dc]
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], 0
push 1
mov ecx, dword [ebp - 0x10c]
call dword [0x100989e0]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x130], 0x1082b30
mov dword [ebp - 0x10c], eax
push dword [0x10098884]
push dword [0x10098888]
mov ecx, dword [ebp - 0x10c]
call dword [ebp - 0x130]
mov ecx, dword [0x10098bf8]
mov ecx, dword [ecx + 0x1c]
call fcn.10072550
push 0
push str._.3f
sub esp, 8
fstp dword [0x1009888c]
mov dword [esp + 4], 0x43480000
mov dword [esp], 0
push 0x1009888c
push 0x1008a900
call fcn.100562f0
add esp, 0x18
test al, al
je 0x10070937
mov eax, dword [0x10098bf8]
movss xmm0, dword [0x1009888c]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 4]
movss dword [eax + 0x5c], xmm0
call fcn.10055570
push 0
push str.Vehicles
call fcn.10049690
add esp, 8
test al, al
je 0x10070c5e
lea eax, [ebp - 0xb0]
xor esi, esi
push eax
push 0x1008a904
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xac], esi
call fcn.100483d0
add esp, 8
test al, al
je 0x10070a18
mov ecx, dword [0x10098bf8]
call fcn.10064420
test eax, eax
je 0x10070a18
call fcn.10071900
mov ecx, dword [0x10098bf8]
mov eax, dword [eax + 0x118]
mov esi, dword [eax + 0x64]
call fcn.10064420
mov ecx, esi
mov edi, dword [eax + 4]
mov eax, dword [esi]
mov eax, dword [eax + 0xa0]
call eax
mov edx, dword [edi]
mov ecx, edi
mov dword [ebp - 0x13c], eax
mov edx, dword [edx + 0xa0]
call edx
lea ecx, [edi + 0xa8]
mov dword [ebp - 0x138], 0
mov esi, eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x130], 0x12637e0
push 8
push 0
mov ecx, dword [ebp - 0x10c]
call dword [ebp - 0x130]
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x13c]
push 1
push 1
mov eax, dword [ecx]
push ecx
mov ecx, esi
mov eax, dword [eax + 0x20]
call eax
xor esi, esi
mov ecx, dword [0x10098bf8]
call fcn.10064420
test eax, eax
je 0x10070a37
mov ecx, dword [0x10098bf8]
call fcn.10064420
mov eax, dword [eax]
mov esi, dword [eax + 0x1c]
push esi
push str.Active_vehicle__i
call fcn.10059880
call fcn.10013d50
fmul dword [0x100792a4]
lea eax, [ebp - 0xb0]
push eax
push str.listbox_2
mov dword [ebp - 0xb0], 0x80800000
fstp dword [ebp - 0x10c]
movss xmm0, dword [ebp - 0x10c]
movss dword [ebp - 0xac], xmm0
call fcn.10047ab0
add esp, 0x10
test al, al
je 0x10070c5e
mov esi, dword [0x10098bf8]
lea eax, [ebp - 0x110]
xor edi, edi
mov dword [ebp - 0xb0], eax
push 0x18
mov dword [ebp - 0x110], edi
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0xac], eax
call fcn.10074a94
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x110], eax
push eax
mov eax, dword [esi + 0xf8]
lea ecx, [ebp - 0x110]
mov dword [ebp - 4], 0xf
push dword [eax + 4]
call fcn.100693a0
mov ecx, dword [ebp - 0x110]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0xfc]
mov esi, dword [ebp - 0x110]
mov dword [ebp - 0x10c], eax
mov edx, dword [esi + 4]
cmp byte [edx + 0xd], 0
jne 0x10070b45
mov ecx, dword [edx]
cmp byte [ecx + 0xd], 0
jne 0x10070b21
mov eax, dword [ecx]
mov edx, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x10070b15
mov dword [esi], edx
mov edx, dword [ebp - 0x110]
mov ecx, dword [edx + 4]
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
jne 0x10070b40
mov ecx, eax
mov eax, dword [ecx + 8]
cmp byte [eax + 0xd], 0
je 0x10070b35
mov dword [edx + 8], ecx
jmp 0x10070b50
mov dword [esi], esi
mov eax, dword [ebp - 0x110]
mov dword [eax + 8], eax
mov edx, dword [ebp - 0x110]
mov dword [ebp - 4], 0x10
mov esi, dword [edx]
cmp esi, edx
je 0x10070c44
nop word [eax + eax]
mov eax, dword [esi + 0x14]
test eax, eax
je 0x10070bfc
push dword [0x10098890]
push edi
push dword [eax + 0x1c]
lea eax, [ebp - 0x50]
push str.GUID__i_n__i_current__i
push eax
call fcn.10005d60
cmp dword [0x10098890], edi
lea eax, [ebp - 0xb0]
push eax
push 0
sete byte [ebp - 0x114]
mov dword [ebp - 0xb0], 0
push dword [ebp - 0x114]
lea eax, [ebp - 0x50]
mov dword [ebp - 0xac], 0
push eax
call fcn.10054fe0
add esp, 0x24
test al, al
je 0x10070be7
push dword [esi + 0x14]
mov ecx, dword [0x10098bf8]
mov dword [0x10098890], edi
call fcn.100667d0
cmp byte [ebp - 0x114], 0
je 0x10070bf5
call fcn.10022190
mov edx, dword [ebp - 0x110]
inc edi
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x10070c24
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x10070c20
nop
cmp esi, dword [eax + 8]
jne 0x10070c20
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x10070c10
mov esi, eax
jmp 0x10070c3c
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x10070c3c
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x10070c30
cmp esi, edx
jne 0x10070b70
call fcn.1004f450
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 0xffffffff
push eax
mov ecx, eax
call fcn.10064170
push 0
push str.InventoryItems
call fcn.10049690
add esp, 8
test al, al
je 0x10070dcc
call fcn.10071900
cmp dword [eax + 0x118], 0
je 0x10070dcc
call fcn.10071900
mov eax, dword [eax + 0x118]
cmp dword [eax + 0xa4], 0
je 0x10070dcc
mov eax, dword [0x10093814]
xor ecx, ecx
mov edx, dword [0x10093810]
sub eax, edx
sar eax, 2
mov dword [ebp - 0x120], ecx
test eax, eax
je 0x10070dcc
nop
mov eax, dword [edx + ecx*4]
cmp dword [eax + 0x18], 0x10
lea edi, [eax + 4]
jb 0x10070cce
mov edi, dword [edi]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov byte [ebp - 0x10c], cl
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x10070d25
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x10070d25
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x130], eax
push dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x130]
call dword [0x10098a48]
mov dword [ebp - 0x114], eax
mov esi, dword [ebp - 0x114]
jmp 0x10070d27
xor esi, esi
call fcn.10071900
mov eax, dword [eax + 0x118]
test eax, eax
je 0x10070d55
cmp dword [eax + 0xa4], 0
je 0x10070d55
test esi, esi
je 0x10070d55
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
call eax
mov dword [ebp - 0x118], eax
jmp 0x10070d5f
mov dword [ebp - 0x118], 0
lea eax, [ebp - 0x119]
test esi, esi
push eax
push str.item
setne byte [ebp - 0x119]
call fcn.10048db0
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
push edi
push dword [ebp - 0x118]
push dword [ebp - 0x138]
push str._i_Category__i_Name__s
call fcn.100597b0
mov eax, dword [0x10093814]
add esp, 0x18
mov ecx, dword [ebp - 0x120]
mov edx, dword [0x10093810]
inc ecx
sub eax, edx
mov dword [ebp - 0x120], ecx
sar eax, 2
cmp ecx, eax
jb 0x10070cc0
push 0
push str.Style_Editor
call fcn.10049690
add esp, 8
test al, al
je 0x10070dff
push 0
push 0x10098894
push str.Style_Editor
call fcn.100098e0
push 0
call fcn.10004650
add esp, 0x10
call fcn.10010250
push 0
push str.CarParts
call fcn.10049690
add esp, 8
test al, al
je 0x10071019
mov ecx, dword [0x10098bf8]
call fcn.10064420
mov esi, eax
test esi, esi
je 0x10071019
mov ecx, dword [esi + 4]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov eax, dword [ecx + 0xc8]
mov edi, dword [ecx + 0xcc]
sub edi, eax
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0xb0]
shr edi, 2
push eax
push str.SetOnPart
call fcn.100483d0
add esp, 8
test al, al
je 0x10070e8c
mov ecx, dword [0x10098898]
test ecx, ecx
js 0x10070e8c
lea eax, [edi - 1]
cmp ecx, eax
jae 0x10070e8c
push 1
push ecx
mov ecx, esi
call fcn.10074000
sub esp, 8
mov dword [esp + 4], 0xbf800000
mov dword [esp], 0
call fcn.10021380
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
push eax
push str.SetOffPart
mov dword [ebp - 0xac], 0
call fcn.100483d0
add esp, 0x10
test al, al
je 0x10070eea
mov ecx, dword [0x10098898]
test ecx, ecx
js 0x10070eea
lea eax, [edi - 1]
cmp ecx, eax
jae 0x10070eea
push 0
push ecx
mov ecx, esi
call fcn.10074000
push 0x4000
push 1
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0
push eax
push str.bcprt
mov dword [ebp - 0xac], 0
call fcn.1000c0b0
add esp, 0x10
xor esi, esi
test edi, edi
je 0x10070fbf
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + esi*4]
test eax, eax
je 0x10070fb6
push dword [eax + 4]
call fcn.10067f60
push eax
push esi
lea eax, [ebp - 0x50]
push str._02d__s
push eax
call fcn.10005d60
cmp dword [0x10098898], esi
lea eax, [ebp - 0x144]
push eax
sete al
mov dword [ebp - 0x144], 0
movzx eax, al
push 2
push eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x140], 0
push eax
call fcn.10054fe0
add esp, 0x24
test al, al
je 0x10070f8e
mov dword [0x10098898], esi
jmp 0x10070fb6
cmp byte [0x10098895], 0
je 0x10070fb6
cmp esi, dword [0x10098898]
jne 0x10070fb6
push ecx
mov byte [0x10098895], 0
mov dword [esp], 0x3f000000
call fcn.10022d10
add esp, 4
inc esi
cmp esi, edi
jb 0x10070f23
push dword [0x10093774]
call fcn.10016890
add esp, 4
test al, al
je 0x10070fe7
mov eax, dword [0x10098898]
test eax, eax
jle 0x10070fe7
dec eax
mov byte [0x10098895], 1
mov dword [0x10098898], eax
push dword [0x10093778]
call fcn.10016890
add esp, 4
test al, al
je 0x10071014
mov ecx, dword [0x10098898]
lea eax, [edi - 1]
cmp ecx, eax
jae 0x10071014
inc ecx
mov byte [0x10098895], 1
mov dword [0x10098898], ecx
call fcn.100107e0
call fcn.1004f610
call fcn.1004f490
call fcn.1001dc20
call fcn.10010250
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10074697
mov esp, ebp
pop ebp
ret
push 0x100947ec
call fcn.100745c1
add esp, 4
cmp dword [0x100947ec], 0xffffffff
jne 0x1006e6b7
mov eax, dword [0x100937d0]
push 0x100947ec
mov dword [0x100947e8], eax
call fcn.10074577
add esp, 4
jmp 0x1006e6b7
push 0x10098878
call fcn.100745c1
add esp, 4
cmp dword [0x10098878], 0xffffffff
jne 0x1006fce0
push 0x10077b10
call fcn.10074479
push 0x10098878
mov dword [ebp - 4], 0xffffffff
call fcn.10074577
add esp, 8
jmp 0x1006fce0
call fcn.1005caa0
int3