Function at 0x180049b08
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004afe5
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.180055578
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r12d, r12d
lea rcx, str.rage_scripting_five.dll
add rax, 0x15fc0
mov byte [0x1800d01a0], r12b
mov qword [0x1800d0128], rax
mov byte [0x1800d01a1], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1800d01b0]
mov r13d, 0xe463da3c
test rax, rax
jne 0x180049c3b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049c20
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049c20
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049c1c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049bfd
cmp r11d, r13d
je 0x18004b007
test edx, edx
jne 0x180049be1
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x180049c31
cmp qword [rax + 0x30], r12
jne 0x180049bbd
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x180049d03
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x180049cf1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049cd6
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049cd6
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049cd2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049cb3
cmp r11d, r13d
je 0x18004b024
test edx, edx
jne 0x180049c98
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180049ce7
cmp qword [rax + 0x30], r12
jne 0x180049c74
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x180049dd2
lea rax, [r14 + 0x794784]
mov dword [0x1800d016c], 0x1098
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], 0x150c
mov dword [0x1800d0174], 0x250
mov dword [0x1800d0170], 0x10b8
mov dword [0x1800d0178], 0x10a8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov byte [0x1800d01a0], 1
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x180049e77
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049e5c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049e5c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049e58
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049e39
cmp r11d, r13d
je 0x18004b041
test edx, edx
jne 0x180049e1d
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180049e6d
cmp qword [rax + 0x30], r12
jne 0x180049df9
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x180049f49
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x180049f37
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049f1c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049f1c
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049f18
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049ef5
cmp r11d, 0xe463da3c
je 0x18004b05e
test edx, edx
jne 0x180049eda
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180049f2d
cmp qword [rax + 0x30], r12
jne 0x180049eb6
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004a00e
lea rax, [r14 + 0x78f450]
mov dword [0x1800d016c], 0x10b8
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], r13d
mov dword [0x1800d0174], 0x238
mov dword [0x1800d0170], 0x10d8
mov dword [0x1800d0178], 0x10c8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a0b7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a09c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a09c
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a098
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a075
cmp r11d, 0xe463da3c
je 0x18004b07b
test edx, edx
jne 0x18004a059
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a0ad
cmp qword [rax + 0x30], r12
jne 0x18004a035
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004a183
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a171
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a156
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a156
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a152
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a12f
cmp r11d, 0xe463da3c
je 0x18004b098
test edx, edx
jne 0x18004a114
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a167
cmp qword [rax + 0x30], r12
jne 0x18004a0f0
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004a248
lea rax, [r14 + 0x78c758]
mov dword [0x1800d016c], 0x10b8
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], r13d
mov dword [0x1800d0174], 0x238
mov dword [0x1800d0170], 0x10d8
mov dword [0x1800d0178], 0x10c8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a2f1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a2d6
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a2d6
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a2d2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a2af
cmp r11d, 0xe463da3c
je 0x18004b0b5
test edx, edx
jne 0x18004a293
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a2e7
cmp qword [rax + 0x30], r12
jne 0x18004a26f
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004a3bd
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a3ab
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a390
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a390
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a38c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a369
cmp r11d, 0xe463da3c
je 0x18004b0d2
test edx, edx
jne 0x18004a34e
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a3a1
cmp qword [rax + 0x30], r12
jne 0x18004a32a
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004a482
lea rax, [r14 + 0x78c5e4]
mov dword [0x1800d016c], 0x10b8
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], r13d
mov dword [0x1800d0174], 0x238
mov dword [0x1800d0170], 0x10d8
mov dword [0x1800d0178], 0x10c8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a52b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a510
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a510
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a50c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a4e9
cmp r11d, 0xe463da3c
je 0x18004b0ef
test edx, edx
jne 0x18004a4cd
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a521
cmp qword [rax + 0x30], r12
jne 0x18004a4a9
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18004a5fe
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a5ec
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a5d1
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a5d1
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a5cd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a5aa
cmp r11d, 0xe463da3c
je 0x18004b10c
test edx, edx
jne 0x18004a58e
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a5e2
cmp qword [rax + 0x30], r12
jne 0x18004a56a
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004a6c3
lea rax, [r14 + 0x787fe4]
mov dword [0x1800d016c], 0x10b8
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], r13d
mov dword [0x1800d0174], 0x218
mov dword [0x1800d0170], 0x10d8
mov dword [0x1800d0178], 0x10c8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a76b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a750
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a750
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a74c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a729
cmp r11d, 0xe463da3c
je 0x18004b129
test edx, edx
jne 0x18004a70e
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a761
cmp qword [rax + 0x30], r12
jne 0x18004a6ea
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004a838
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a826
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a80b
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a80b
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a807
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a7e4
cmp r11d, 0xe463da3c
je 0x18004b146
test edx, edx
jne 0x18004a7c8
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a81c
cmp qword [rax + 0x30], r12
jne 0x18004a7a4
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004a907
lea rax, [r14 + 0x79b5dc]
mov dword [0x1800d016c], 0x10b8
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], r13d
mov dword [0x1800d0174], 0x218
mov dword [0x1800d0170], 0x10d8
mov dword [0x1800d0178], 0x10c8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d019c], 0x908
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004a9af
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a994
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a994
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a990
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a96d
cmp r11d, 0xe463da3c
je 0x18004b163
test edx, edx
jne 0x18004a952
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a9a5
cmp qword [rax + 0x30], r12
jne 0x18004a92e
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004aa7b
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004aa69
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aa4e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aa4e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aa4a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aa27
cmp r11d, 0xe463da3c
je 0x18004b180
test edx, edx
jne 0x18004aa0c
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aa5f
cmp qword [rax + 0x30], r12
jne 0x18004a9e8
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004ab40
lea rax, [r14 + 0x7935d0]
mov dword [0x1800d016c], 0x10a8
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], r13d
mov dword [0x1800d0174], 0x218
mov dword [0x1800d0170], 0x10d8
mov dword [0x1800d0178], 0x10b8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004abe8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004abcd
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004abcd
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004abc9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aba6
cmp r11d, 0xe463da3c
je 0x18004b19d
test edx, edx
jne 0x18004ab8b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004abde
cmp qword [rax + 0x30], r12
jne 0x18004ab67
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004acb5
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004aca3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ac88
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ac88
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ac84
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ac61
cmp r11d, 0xe463da3c
je 0x18004b1ba
test edx, edx
jne 0x18004ac45
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004ac99
cmp qword [rax + 0x30], r12
jne 0x18004ac21
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004ad84
lea rax, [r14 + 0x795f9c]
mov dword [0x1800d016c], 0x1098
mov qword [0x1800d0150], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1800d0158], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x1800d0160], rax
mov dword [0x1800d0168], 0x150c
mov dword [0x1800d0174], 0x250
mov dword [0x1800d0170], 0x10b8
mov dword [0x1800d0178], 0x10a8
mov dword [0x1800d017c], 0x2f4
mov dword [0x1800d0180], 0x84
mov dword [0x1800d0194], 0x134
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5f0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x28c
mov byte [0x1800d01a1], 1
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004ae2d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ae12
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ae12
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ae0e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004adeb
cmp r11d, 0xe463da3c
je 0x18004b1d7
test edx, edx
jne 0x18004adcf
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004ae23
cmp qword [rax + 0x30], r12
jne 0x18004adab
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004aefa
mov rax, qword [0x1800d01b0]
test rax, rax
jne 0x18004aee8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aecd
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aecd
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aec9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aea6
cmp r11d, 0xe463da3c
je 0x18004b1f4
test edx, edx
jne 0x18004ae8a
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004aede
cmp qword [rax + 0x30], r12
jne 0x18004ae66
mov rax, r12
mov qword [0x1800d01b0], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004afc2
lea rax, [r14 + 0xcaf950]
mov dword [0x1800d016c], 0x10a8
mov qword [0x1800d0150], rax
lea rcx, [rbp + 0x2087780]
lea rax, [rbp + 0x247f840]
mov dword [0x1800d0168], 0x14b8
mov qword [0x1800d0140], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1800d0148], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1800d0158], rax
mov dword [0x1800d0174], 0x218
mov dword [0x1800d0170], 0x10c8
mov dword [0x1800d0178], 0x10b8
mov dword [0x1800d017c], 0x2e8
mov dword [0x1800d0180], 0x74
mov dword [0x1800d0194], 0x12c
mov dword [0x1800d0184], 0x20
mov dword [0x1800d018c], 0x24
mov dword [0x1800d0188], 0x5e0
mov dword [0x1800d0198], 0x146b
mov dword [0x1800d0190], 0x25c
mov qword [0x1800d0160], rcx
call fcn.180048ecc
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x180048ab8]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049c34
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049cea
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049e70
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049f30
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a0b0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a16a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a2ea
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a3a4
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a524
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a5e5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a764
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a81f
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a9a8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aa62
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004abe1
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ac9c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ae26
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aee1