Function at 0x180049fe0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004b772
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.180058244
xor r12d, r12d
lea rcx, str.rage_scripting_five.dll
mov byte [0x1800d2fd0], r12b
mov byte [0x1800d2fd1], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1800d2fe8]
mov r13d, 0xe463da3c
test rax, rax
jne 0x18004a0f9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a0de
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a0de
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a0da
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a0bb
cmp r11d, r13d
je 0x18004b794
test edx, edx
jne 0x18004a09f
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18004a0ef
cmp qword [rax + 0x30], r12
jne 0x18004a07b
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b3095_GameProcess.exe
call rax
test rax, rax
jne 0x18004a1c1
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004a1af
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a194
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a194
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a190
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a171
cmp r11d, r13d
je 0x18004b7b1
test edx, edx
jne 0x18004a156
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a1a5
cmp qword [rax + 0x30], r12
jne 0x18004a132
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b3095_GTAProcess.exe
call rax
test rax, rax
je 0x18004a2a6
lea rax, [rbp + 0x2593320]
mov dword [0x1800d2f9c], 0x1098
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1f58b58]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x20025b8]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x20019e0]
mov qword [0x1800d2f90], rax
lea rax, [rbp + 0x1624f80]
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x2ef5870]
mov qword [0x1800d2f48], rax
lea rax, [r14 + 0xa596b0]
mov qword [0x1800d2f38], rax
mov dword [0x1800d2f98], 0x150c
mov dword [0x1800d2fa0], 0x10b8
mov dword [0x1800d2fa8], 0x10a8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov qword [0x1800d2f40], 0x161d8f9
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004a34a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a32f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a32f
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a32b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a30c
cmp r11d, r13d
je 0x18004b7ce
test edx, edx
jne 0x18004a2f1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a340
cmp qword [rax + 0x30], r12
jne 0x18004a2cd
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004a412
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004a400
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a3e5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a3e5
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a3e1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a3c2
cmp r11d, r13d
je 0x18004b7eb
test edx, edx
jne 0x18004a3a7
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a3f6
cmp qword [rax + 0x30], r12
jne 0x18004a383
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004a4ef
lea rax, [rbp + 0x15ea290]
mov dword [0x1800d2f9c], 0x1098
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x794784]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], 0x150c
mov dword [0x1800d2fa4], 0x250
mov dword [0x1800d2fa0], 0x10b8
mov dword [0x1800d2fa8], 0x10a8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov byte [0x1800d2fd0], 1
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004a593
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a578
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a578
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a574
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a555
cmp r11d, r13d
je 0x18004b808
test edx, edx
jne 0x18004a53a
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a589
cmp qword [rax + 0x30], r12
jne 0x18004a516
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x18004a665
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004a653
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a638
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a638
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a634
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a611
cmp r11d, 0xe463da3c
je 0x18004b825
test edx, edx
jne 0x18004a5f6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a649
cmp qword [rax + 0x30], r12
jne 0x18004a5d2
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004a738
lea rax, [rbp + 0x15d6cec]
mov dword [0x1800d2f9c], 0x10b8
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x78f450]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], r13d
mov dword [0x1800d2fa4], 0x238
mov dword [0x1800d2fa0], 0x10d8
mov dword [0x1800d2fa8], 0x10c8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004a7e0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a7c5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a7c5
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a7c1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a79e
cmp r11d, 0xe463da3c
je 0x18004b842
test edx, edx
jne 0x18004a783
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a7d6
cmp qword [rax + 0x30], r12
jne 0x18004a75f
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004a8ad
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004a89b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a880
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a880
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a87c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a859
cmp r11d, 0xe463da3c
je 0x18004b85f
test edx, edx
jne 0x18004a83d
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a891
cmp qword [rax + 0x30], r12
jne 0x18004a819
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004a980
lea rax, [rbp + 0x15dfe20]
mov dword [0x1800d2f9c], 0x10b8
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x78c758]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], r13d
mov dword [0x1800d2fa4], 0x238
mov dword [0x1800d2fa0], 0x10d8
mov dword [0x1800d2fa8], 0x10c8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004aa28
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aa0d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aa0d
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aa09
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a9e6
cmp r11d, 0xe463da3c
je 0x18004b87c
test edx, edx
jne 0x18004a9cb
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aa1e
cmp qword [rax + 0x30], r12
jne 0x18004a9a7
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004aaf5
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004aae3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aac8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aac8
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aac4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aaa1
cmp r11d, 0xe463da3c
je 0x18004b899
test edx, edx
jne 0x18004aa85
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aad9
cmp qword [rax + 0x30], r12
jne 0x18004aa61
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004abc8
lea rax, [rbp + 0x15deeb0]
mov dword [0x1800d2f9c], 0x10b8
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x78c5e4]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], r13d
mov dword [0x1800d2fa4], 0x238
mov dword [0x1800d2fa0], 0x10d8
mov dword [0x1800d2fa8], 0x10c8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004ac70
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ac55
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ac55
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ac51
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ac2e
cmp r11d, 0xe463da3c
je 0x18004b8b6
test edx, edx
jne 0x18004ac13
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004ac66
cmp qword [rax + 0x30], r12
jne 0x18004abef
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18004ad43
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004ad31
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ad16
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ad16
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ad12
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004acef
cmp r11d, 0xe463da3c
je 0x18004b8d3
test edx, edx
jne 0x18004acd3
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ad27
cmp qword [rax + 0x30], r12
jne 0x18004acaf
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004ae16
lea rax, [rbp + 0x15cd2c0]
mov dword [0x1800d2f9c], 0x10b8
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x787fe4]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], r13d
mov dword [0x1800d2fa4], 0x218
mov dword [0x1800d2fa0], 0x10d8
mov dword [0x1800d2fa8], 0x10c8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004aebf
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aea4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aea4
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aea0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ae7d
cmp r11d, 0xe463da3c
je 0x18004b8f0
test edx, edx
jne 0x18004ae61
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aeb5
cmp qword [rax + 0x30], r12
jne 0x18004ae3d
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004af8c
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004af7a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004af5f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004af5f
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004af5b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004af38
cmp r11d, 0xe463da3c
je 0x18004b90d
test edx, edx
jne 0x18004af1c
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004af70
cmp qword [rax + 0x30], r12
jne 0x18004aef8
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004b069
lea rax, [rbp + 0x15b1008]
mov dword [0x1800d2f9c], 0x10b8
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x79b5dc]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], r13d
mov dword [0x1800d2fa4], 0x218
mov dword [0x1800d2fa0], 0x10d8
mov dword [0x1800d2fa8], 0x10c8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fcc], 0x908
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004b112
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b0f7
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b0f7
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b0f3
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b0d0
cmp r11d, 0xe463da3c
je 0x18004b92a
test edx, edx
jne 0x18004b0b4
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b108
cmp qword [rax + 0x30], r12
jne 0x18004b090
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004b1df
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004b1cd
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b1b2
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b1b2
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b1ae
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b18b
cmp r11d, 0xe463da3c
je 0x18004b947
test edx, edx
jne 0x18004b16f
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b1c3
cmp qword [rax + 0x30], r12
jne 0x18004b14b
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004b2b2
lea rax, [rbp + 0x159b224]
mov dword [0x1800d2f9c], 0x10a8
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x7935d0]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], r13d
mov dword [0x1800d2fa4], 0x218
mov dword [0x1800d2fa0], 0x10d8
mov dword [0x1800d2fa8], 0x10b8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004b35b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b340
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b340
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b33c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b319
cmp r11d, 0xe463da3c
je 0x18004b964
test edx, edx
jne 0x18004b2fd
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b351
cmp qword [rax + 0x30], r12
jne 0x18004b2d9
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004b428
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004b416
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b3fb
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b3fb
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b3f7
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b3d4
cmp r11d, 0xe463da3c
je 0x18004b981
test edx, edx
jne 0x18004b3b8
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b40c
cmp qword [rax + 0x30], r12
jne 0x18004b394
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004b505
lea rax, [rbp + 0x160ff90]
mov dword [0x1800d2f9c], 0x1098
mov qword [0x1800d2fe0], rax
lea rax, [r14 + 0x795f9c]
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1800d2f88], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x1800d2f90], rax
mov dword [0x1800d2f98], 0x150c
mov dword [0x1800d2fa4], 0x250
mov dword [0x1800d2fa0], 0x10b8
mov dword [0x1800d2fa8], 0x10a8
mov dword [0x1800d2fac], 0x2f4
mov dword [0x1800d2fb0], 0x84
mov dword [0x1800d2fc4], 0x134
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5f0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x28c
mov byte [0x1800d2fd1], 1
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004b5ad
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b592
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b592
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b58e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b56b
cmp r11d, 0xe463da3c
je 0x18004b99e
test edx, edx
jne 0x18004b550
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b5a3
cmp qword [rax + 0x30], r12
jne 0x18004b52c
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004b679
mov rax, qword [0x1800d2fe8]
test rax, rax
jne 0x18004b667
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b64c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b64c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b648
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b625
cmp r11d, 0xe463da3c
je 0x18004b9bb
test edx, edx
jne 0x18004b60a
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b65d
cmp qword [rax + 0x30], r12
jne 0x18004b5e6
mov rax, r12
mov qword [0x1800d2fe8], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004b74f
lea rax, [rbp + 0x1561e30]
mov dword [0x1800d2f9c], 0x10a8
mov qword [0x1800d2fe0], rax
lea rcx, [rbp + 0x2087780]
lea rax, [r14 + 0xcaf950]
mov dword [0x1800d2f98], 0x14b8
mov qword [0x1800d2f80], rax
lea rax, [rbp + 0x247f840]
mov qword [0x1800d2f70], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1800d2f78], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1800d2f88], rax
mov dword [0x1800d2fa4], 0x218
mov dword [0x1800d2fa0], 0x10c8
mov dword [0x1800d2fa8], 0x10b8
mov dword [0x1800d2fac], 0x2e8
mov dword [0x1800d2fb0], 0x74
mov dword [0x1800d2fc4], 0x12c
mov dword [0x1800d2fb4], 0x20
mov dword [0x1800d2fbc], 0x24
mov dword [0x1800d2fb8], 0x5e0
mov dword [0x1800d2fc8], 0x146b
mov dword [0x1800d2fc0], 0x25c
mov qword [0x1800d2f90], rcx
call fcn.1800493a4
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x180048f04]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a0f2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a1a8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a343
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a3f9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a58c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a64c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a7d9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a894
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aa21
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aadc
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ac69
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ad2a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aeb8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004af73
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b10b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b1c6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b354
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b40f
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b5a6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b660