Function at 0x1400792d0
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14030b0c0]
xor rax, rsp
mov qword [rbp + 0x88], rax
xor r14d, r14d
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140355734], eax
jle 0x1400793a6
lea rcx, [0x140355734]
call fcn.1400e82d0
cmp dword [0x140355734], 0xffffffff
jne 0x1400793a6
mov qword [0x140355840], r14
mov qword [0x140355848], r14
mov byte [0x140355740], r14b
mov dword [0x140355850], r14d
mov r8d, 0xff
lea rdx, [0x1400fd4a8]
lea rcx, [0x140355740]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x14035583f], r14b
lea rcx, [0x140355740]
call fcn.14002e000
nop
lea rcx, [0x1400eda20]
call fcn.1400e81d4
nop
lea rcx, [0x140355734]
call fcn.1400e8264
mov eax, dword [rdi + rbx]
cmp dword [0x140355710], eax
jle 0x1400793de
lea rcx, [0x140355710]
call fcn.1400e82d0
cmp dword [0x140355710], 0xffffffff
jne 0x1400793de
lea rcx, [0x1400ed9b0]
call fcn.1400e81d4
lea rcx, [0x140355710]
call fcn.1400e8264
mov ecx, dword [0x140352924]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm7, dword [0x1402f4b10]
test ax, ax
jns 0x14007968f
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r14
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x20], rbx
mov byte [rbp - 0x38], 0
mov dword [rbp - 0x10], 0xffffffff
movss xmm6, dword [0x1402f4b30]
cmp qword [0x140355530], 0
je 0x1400795eb
lea rdx, [0x140355550]
lea rcx, [rbp + 0x20]
call fcn.14001f230
nop
mov rsi, qword [rbp + 0x28]
mov rax, qword [rbp + 0x20]
cmp rax, rsi
je 0x14007959e
lea rbx, [rax + 0x28]
nop word [rax + rax]
mov rax, qword [rbx - 0x28]
mov qword [rbp - 0x78], rax
lea rdx, [rbx - 0x20]
lea rcx, [rbp - 0x70]
call fcn.14000f330
mov rax, qword [rbx]
mov qword [rbp - 0x50], rax
mov eax, dword [rbx + 8]
mov dword [rbp - 0x48], eax
mov rdi, qword [rbp - 0x78]
test rdi, rdi
je 0x14007954e
mov rcx, qword [0x1403541e8]
test rcx, rcx
je 0x1400794c0
cmp dword [0x140354154], 0
je 0x1400794c0
lea rdx, [rdi + 0x90]
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
subss xmm2, dword [0x140355544]
movss xmm0, dword [rbp + 0x14]
subss xmm0, dword [0x140355548]
movss xmm1, dword [rbp + 0x18]
subss xmm1, dword [0x14035554c]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14007950c
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140079514
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm6, xmm0
jbe 0x14007954e
comiss xmm7, xmm0
jbe 0x14007954e
movaps xmm6, xmm0
mov qword [rbp - 0x40], rdi
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
mov r8, qword [rbp - 0x60]
lea rcx, [rbp - 0x38]
call fcn.1400105d0
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x18], rax
mov eax, dword [rbp - 0x48]
mov dword [rbp - 0x10], eax
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140079589
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079584
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400796a4
call fcn.1400e81f4
add rbx, 0x38
lea rax, [rbx - 0x28]
cmp rax, rsi
jne 0x140079460
mov rbx, qword [rbp - 0x20]
lea rcx, [rbp + 0x20]
call fcn.140003540
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x1400795eb
mov dword [rbp - 8], 1
mov rdx, qword [0x140354138]
add rdx, rcx
mov rcx, qword [0x1403541e8]
test rcx, rcx
je 0x1400795eb
cmp dword [0x140354154], 0
je 0x1400795eb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 8
call fcn.1400e7f70
lea rcx, [0x140078f60]
mov qword [rax], rcx
mov qword [rbp + 0x20], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14007cd00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1400796b7
cmp dword [rbp + 0x18], 0
je 0x1400796ab
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400796ab
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
cmp rbx, 0xf
jbe 0x14007968f
lea rdx, [rbx + 1]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007968a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400797e5
call fcn.1400e81f4
mov rdx, qword [0x140352730]
test rdx, rdx
jne 0x1400796c7
mov qword [rbp + 0x20], rdx
mov dword [rbp + 0x28], edx
jmp 0x1400796f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x18], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rcx, qword [0x1403541e8]
test rcx, rcx
je 0x1400796f8
cmp dword [0x140354154], 0
je 0x1400796f8
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x20]
subss xmm2, dword [0x140355544]
movss xmm0, dword [rbp + 0x24]
subss xmm0, dword [0x140355548]
movss xmm1, dword [rbp + 0x28]
subss xmm1, dword [0x14035554c]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140079744
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14007974c
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, xmm7
jbe 0x1400797f1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rax
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], al
mov dword [rbp - 0x48], 0xffffffff
mov rax, qword [rbp - 0x78]
mov qword [0x140352730], rax
lea rdx, [rbp - 0x70]
lea rcx, [0x140352738]
call fcn.140029560
mov rax, qword [rbp - 0x50]
mov qword [0x140352758], rax
mov eax, dword [rbp - 0x48]
mov dword [0x140352760], eax
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400797f1
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400797ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400797ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e81f4
mov rcx, qword [0x140354148]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm6, dword [0x1402f4a64]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, dword [0x1402f4a88]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm7, dword [0x1402f4974]
mulss xmm0, xmm7
subss xmm0, dword [0x1402f4a78]
movss dword [rbp - 8], xmm0
mov dword [rbp - 4], 0x439b0000
lea rdx, [rbp - 8]
lea rcx, str.Vehicle_list
call fcn.140034f00
mov qword [rbp - 8], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x140355740]
xor edx, edx
lea rcx, str.In_List
call fcn.1400695d0
test al, al
je 0x1400798d9
lea rcx, [0x140355740]
call fcn.14002e000
mov rax, qword [0x140354148]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm6
movss dword [rbp - 8], xmm0
mov dword [rbp - 4], 0x43870000
lea rdx, [rbp - 8]
lea rcx, str.VehList
call fcn.140071410
test al, al
je 0x140079a62
cmp qword [0x140355530], 0
je 0x140079a58
lea rdx, [0x140355550]
lea rcx, [rbp + 0x70]
call fcn.14001f230
nop
mov r13, qword [rbp + 0x78]
mov qword [rbp + 0x20], r13
mov rax, qword [rbp + 0x70]
cmp rax, r13
je 0x140079a4f
lea r12, [rax + 0x28]
mov qword [rbp - 8], r12
movzx ebx, byte [rsp + 0x40]
nop word [rax + rax]
mov rax, qword [r12 - 0x28]
mov qword [rbp - 0x78], rax
lea rdx, [r12 - 0x20]
lea rcx, [rbp - 0x70]
call fcn.14000f330
mov rax, qword [r12]
mov qword [rbp - 0x50], rax
mov eax, dword [r12 + 8]
mov dword [rbp - 0x48], eax
lea rax, [rbp - 0x70]
mov r15, qword [rbp - 0x58]
cmp r15, 0xf
cmova rax, qword [rbp - 0x70]
movsxd rcx, dword [0x140355840]
test ecx, ecx
je 0x140079b70
lea rsi, [0x1400fd4a8]
test rax, rax
cmovne rsi, rax
mov rdi, qword [0x140355848]
mov r14, rcx
shl r14, 4
add r14, rdi
cmp rdi, r14
je 0x140079b5b
nop
mov r8, qword [rdi]
mov r9, qword [rdi + 8]
cmp r8, r9
je 0x140079b4e
mov rcx, rsi
cmp byte [r8], 0x2d
jne 0x140079b44
inc r8
call fcn.14002d440
test rax, rax
je 0x140079b4e
xor r14d, r14d
cmp r15, 0xf
jbe 0x140079a39
lea rdx, [r15 + 1]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079a34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140079f1c
call fcn.1400e81f4
add r12, 0x38
mov qword [rbp - 8], r12
lea rax, [r12 - 0x28]
cmp rax, r13
jne 0x140079960
lea rcx, [rbp + 0x70]
call fcn.140003540
call fcn.140035bb0
call fcn.14003ea70
call fcn.140035590
mov rcx, qword [0x140354148]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, dword [0x1402f4af8]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm6
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm7
subss xmm0, dword [0x1402f4a78]
movss dword [rbp + 0x20], xmm0
mov dword [rbp + 0x24], 0x42f00000
lea rdx, [rbp + 0x20]
lea rcx, str.Actions
call fcn.140034f00
cmp dword [0x140352760], 0xffffffff
je 0x14007a121
mov qword [rbp + 0x20], 0
lea rdx, [rbp + 0x20]
lea rcx, str.Teleport_to_vehicle
call fcn.140061180
test al, al
je 0x14007a05f
mov rdx, qword [0x140352730]
mov rcx, qword [0x1403541e8]
test rdx, rdx
jne 0x140079f23
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x140079f5b
call fcn.14002d440
test rax, rax
jne 0x140079b6d
add rdi, 0x10
cmp rdi, r14
jne 0x1400799d0
xor r14d, r14d
cmp dword [0x140355850], r14d
jne 0x140079a01
jmp 0x140079b70
xor r14d, r14d
mov rdx, qword [rbp - 0x78]
test rdx, rdx
jne 0x140079b82
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x140079bb3
mov rcx, qword [0x1403541e8]
test rcx, rcx
je 0x140079bb3
cmp dword [0x140354154], 0
je 0x140079bb3
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
subss xmm2, dword [0x140355544]
movss xmm0, dword [rbp + 0x14]
subss xmm0, dword [0x140355548]
movss xmm1, dword [rbp + 0x18]
subss xmm1, dword [0x14035554c]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140079bff
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140079c07
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp - 0x40]
call fcn.140001c70
mov r13, rax
mov r15, qword [rbp - 0x60]
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, r15
cmp rcx, 2
jb 0x14007a16c
lea r12, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r12, qword [rbp - 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r14
lea r14, [r15 + 2]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rsp + 0x48]
cmp r14, rdi
jbe 0x140079ce3
mov rdi, r14
or rdi, 0xf
cmp rdi, rax
jbe 0x140079c87
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140079cb7
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140079ca1
xor esi, esi
jmp 0x140079cde
cmp rcx, 0x1000
jb 0x140079cd6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007a172
mov rcx, rax
call fcn.1400e7f70
test rax, rax
je 0x140079ef9
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140079cde
call fcn.1400e7f70
mov rsi, rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], rdi
mov r8, r15
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movzx ecx, word [0x1402f439c]
mov word [rsi + r15], cx
mov byte [rsi + r14], 0
mov r9, r13
lea r8, [rsp + 0x48]
movzx edx, bl
lea rcx, [rsp + 0x68]
call fcn.14007c7f0
nop
mov r8d, 2
lea rdx, [0x1402f4358]
lea rcx, [rsp + 0x68]
call fcn.1400036b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xor r14d, r14d
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r14b
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x140079da5
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079da0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140079f00
call fcn.1400e81f4
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x68], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140079df5
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079def
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140079f07
call fcn.1400e81f4
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140079e30
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079e2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140079f0e
call fcn.1400e81f4
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov rax, qword [0x140352730]
cmp qword [rbp - 0x78], rax
sete dl
mov qword [rbp + 0x40], 0
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rcx, qword [rbp + 0x50]
lea r9, [rbp + 0x40]
xor r8d, r8d
call fcn.140070b20
test al, al
je 0x140079eb1
mov rax, qword [rbp - 0x78]
mov qword [0x140352730], rax
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova rdx, qword [rbp - 0x70]
mov r8, qword [rbp - 0x60]
lea rcx, [0x140352738]
call fcn.1400105d0
mov rax, qword [rbp - 0x50]
mov qword [0x140352758], rax
mov eax, dword [rbp - 0x48]
mov dword [0x140352760], eax
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x140079ee8
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079ee3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140079f15
call fcn.1400e81f4
mov r15, qword [rbp - 0x58]
mov r12, qword [rbp - 8]
mov r13, qword [rbp + 0x20]
jmp 0x140079a01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x140079f5b
cmp dword [0x140354154], 0
je 0x140079f5b
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140352730]
mov rcx, qword [0x1403541e8]
movsd xmm7, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x140079f71
mov qword [rbp - 8], rdx
mov dword [rbp], edx
jmp 0x140079fa2
test rcx, rcx
je 0x140079fa2
cmp dword [0x140354154], 0
je 0x140079fa2
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1403541e8]
movsd xmm6, qword [rbp - 8]
mov edi, dword [rbp]
mov rdx, qword [0x140355530]
test rdx, rdx
jne 0x140079fbb
mov rbx, r14
jmp 0x140079ff4
test rcx, rcx
je 0x140079ff0
cmp dword [0x140354154], 0
je 0x140079ff0
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140355530]
mov rcx, qword [0x1403541e8]
mov rbx, qword [rbp + 0x20]
test rdx, rdx
jne 0x140079ffe
mov r8, r14
jmp 0x14007a030
test rcx, rcx
je 0x14007a02c
cmp dword [0x140354154], 0
je 0x14007a02c
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140355530]
mov r8, qword [rbp + 0x40]
movsd qword [rbp + 0x20], xmm7
mov dword [rbp + 0x28], esi
movsd qword [rbp + 0x40], xmm6
mov dword [rbp + 0x48], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0x20]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.140028750
mov qword [rbp + 0x20], 0
lea rdx, [rbp + 0x20]
lea rcx, str.Unlock_vehicle
call fcn.140061180
test al, al
je 0x14007a0bf
mov rdx, qword [0x140352730]
test rdx, rdx
je 0x14007a0bf
mov dword [rbp - 8], 1
mov rcx, qword [0x1403541e8]
test rcx, rcx
je 0x14007a0bf
cmp dword [0x140354154], 0
je 0x14007a0bf
add rdx, qword [0x140354138]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x20], 0
lea rdx, [rbp + 0x20]
lea rcx, str.Lock_vehicle
call fcn.140061180
test al, al
je 0x14007a12d
mov rdx, qword [0x140352730]
test rdx, rdx
je 0x14007a12d
mov dword [rbp - 8], 2
mov rcx, qword [0x1403541e8]
test rcx, rcx
je 0x14007a12d
cmp dword [0x140354154], 0
je 0x14007a12d
add rdx, qword [0x140354138]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14007a12d
lea rcx, str.Select_vehicle_first_
call fcn.140060800
call fcn.140035590
mov rcx, qword [rbp + 0x88]
xor rcx, rsp
call fcn.1400e7f50
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001c50
nop
call fcn.140001bb0
int3