Function at 0x18006e870
Capabilities:
Create thread
Enumerate threads
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x180119070]
xor rax, rsp
mov qword [rbp + 0xf8], rax
cmp edx, 1
jne 0x180070615
lea rcx, [rbp + 0xb8]
call fcn.180055d20
lea rdi, [0x180119f08]
cmp rdi, rax
je 0x18006e8d7
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call fcn.180075d70
lea rcx, [rbp + 0xb8]
call fcn.1800503e0
lea rcx, [rbp + 0xb8]
call fcn.180055fe0
lea r14, [0x180119f88]
cmp r14, rax
je 0x18006e909
xor r8d, r8d
mov rdx, rax
mov rcx, r14
call fcn.180075d70
lea rcx, [rbp + 0xb8]
call fcn.1800503e0
lea rcx, [rbp + 0xb8]
call fcn.180056ae0
lea r15, [0x180119f28]
cmp r15, rax
je 0x18006e93b
xor r8d, r8d
mov rdx, rax
mov rcx, r15
call fcn.180075d70
lea rcx, [rbp + 0xb8]
call fcn.1800503e0
mov dword [rsp + 0x60], 0x85979f9f
mov dword [rsp + 0x64], 0xf7939195
mov dword [rsp + 0x68], 0x9e8c909e
mov word [rsp + 0x6c], __WSAFDIsSet
mov byte [rsp + 0x6e], 1
lea rcx, [rsp + 0x60]
call fcn.180070970
lea rax, [rsp + 0x60]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x18006e984
lea rdx, [rsp + 0x60]
lea rcx, [0x180119fc8]
call fcn.180075c10
xor edx, edx
lea rcx, [rbp + 0x98]
call fcn.180072f10
nop
lea rax, [rsp + 0x60]
mov qword [rbp - 0x68], rax
mov dword [rsp + 0x50], 0xb4bcb8a3
mov dword [rsp + 0x54], 0x100bbbd
lea rcx, [rsp + 0x50]
call fcn.180070910
lea rax, [rsp + 0x50]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x60]
call fcn.180078910
mov rbx, rax
mov dword [rsp + 0x40], 0xbba6b4bd
mov dword [rsp + 0x44], 0x100b1bb
lea rcx, [rsp + 0x40]
call fcn.180070910
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x98]
call fcn.180078400
mov rcx, rax
mov rdx, rbx
call fcn.180072bc0
lea rax, [rsp + 0x60]
mov qword [rbp - 0x68], rax
lea rdx, [0x180119fc8]
lea rcx, [rsp + 0x60]
call fcn.180078250
mov rbx, rax
mov dword [rsp + 0x40], 0xb6bfb0be
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180070f10
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x98]
call fcn.180078400
mov rcx, rax
mov rdx, rbx
call fcn.180072bc0
lea rax, [rsp + 0x60]
mov qword [rbp - 0x68], rax
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.180078250
mov rdi, rax
mov dword [rsp + 0x40], 0xbcb4bfb9
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180070f10
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x98]
call fcn.180078400
mov rbx, rax
mov dword [rsp + 0x50], 0xb7bba4a5
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.180070f10
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.180078400
mov rcx, rax
mov rdx, rdi
call fcn.180072bc0
lea rax, [rsp + 0x60]
mov qword [rbp - 0x68], rax
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.180078250
mov rdi, rax
mov dword [rsp + 0x50], 0xbcb4bfb9
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.180070f10
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x98]
call fcn.180078400
mov rbx, rax
mov dword [rsp + 0x40], 0xe7b5bd
mov byte [rsp + 0x44], 1
lea rcx, [rsp + 0x40]
call fcn.180070940
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.180078400
mov rcx, rax
mov rdx, rdi
call fcn.180072bc0
lea rax, [rsp + 0x60]
mov qword [rbp - 0x68], rax
mov rdx, r15
lea rcx, [rsp + 0x60]
call fcn.180078250
mov rdi, rax
mov dword [rsp + 0x50], 0xbcb4bfb9
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.180070f10
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x98]
call fcn.180078400
mov rbx, rax
mov dword [rsp + 0x40], 0xb6b6b0a6
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180070f10
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.180078400
mov rcx, rax
mov rdx, rdi
call fcn.180072bc0
lea rax, [rsp + 0x60]
mov qword [rbp - 0x68], rax
lea rdx, [rbp + 0x98]
lea rcx, [rsp + 0x60]
call fcn.180072c30
mov rbx, rax
movdqa xmm0, xmmword [0x180104aa0]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0xcd8e86
mov byte [rbp + 0xc], 1
lea rcx, [rbp - 8]
call fcn.180070e50
nop
mov r8, rbx
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xd8]
call fcn.180054190
nop
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0xb8]
call fcn.180073a00
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.1800509b0
lea rcx, [rbp + 0xd8]
cmp rcx, rax
je 0x18006ec66
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.180075d70
lea rcx, [rbp + 0x58]
call fcn.1800503e0
xor r15d, r15d
mov qword [rbp + 0x50], r15
lea rcx, [rbp + 0xd8]
call fcn.1800738e0
mov qword [rbp + 0x10], rax
mov byte [rsp + 0x20], r15b
mov r9b, 1
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xa8]
call fcn.180078120
nop
mov dword [rsp + 0x60], 0x87938583
mov dword [rsp + 0x64], 0x84898681
mov dword [rsp + 0x68], 0x9e999a8d
mov dword [rsp + 0x6c], 0x1008e8f
lea rcx, [rsp + 0x60]
call fcn.180070e20
mov dword [rsp + 0x50], 0xb6b6beb3
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.180070f10
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xa8]
call fcn.180078400
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.1800789e0
test al, al
je 0x1800705c4
mov dword [rsp + 0x50], 0xbcb4bfb9
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.180070f10
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xa8]
call fcn.180078400
mov rbx, rax
mov dword [rsp + 0x40], 0xb6a4b8b6
mov word [rsp + 0x44], 0xb9
mov byte [rsp + 0x46], 1
lea rcx, [rsp + 0x40]
call fcn.180070eb0
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.180078400
mov rdx, rax
lea rcx, [0x180119f68]
call fcn.180080840
mov dword [rsp + 0x50], 0xbcb4bfb9
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.180070f10
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xa8]
call fcn.180078400
mov rbx, rax
mov dword [rsp + 0x60], 0xb6a4b8b6
mov dword [rsp + 0x64], 0xbea28ab9
mov dword [rsp + 0x68], 0x100bcb5
lea rcx, [rsp + 0x60]
call fcn.180070810
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.180078400
mov rdx, rax
lea rcx, [0x180119ec8]
call fcn.180080840
mov dword [rsp + 0x50], 0xbcb4bfb9
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.180070f10
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xa8]
call fcn.180078400
mov rbx, rax
mov dword [rsp + 0x60], 0xb6a4b8b6
mov dword [rsp + 0x64], 0xa3a58ab9
mov dword [rsp + 0x68], 0xa8afadb9
mov word [rsp + 0x6c], 0x100
lea rcx, [rsp + 0x60]
call fcn.180070f50
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.180078400
mov rdx, rax
lea rcx, [0x180119ea8]
call fcn.180080840
mov dword [rsp + 0x40], 0x100acab
lea rcx, [rsp + 0x40]
call fcn.180070e80
lea rdx, [rsp + 0x40]
lea rcx, [0x180119f68]
call fcn.18007cef0
test al, al
jne 0x1800705c4
movzx eax, byte [0x1800f4880]
xor al, 0xd0
mov byte [rsp + 0x40], al
mov word [rsp + 0x41], 0x100
lea rcx, [rsp + 0x40]
call fcn.180070f40
lea rdx, [rsp + 0x40]
lea rcx, [0x180119ea8]
call fcn.18007cef0
test al, al
jne 0x18006eee5
movzx eax, byte [0x1800f4888]
xor al, 0xd0
mov byte [rsp + 0x40], al
mov word [rsp + 0x41], 0x100
lea rcx, [rsp + 0x40]
call fcn.180070f40
lea rdx, [rsp + 0x40]
lea rcx, [0x180119ea8]
call fcn.18007cef0
test al, al
je 0x1800705c4
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x18006ef51
xor edx, edx
lea rcx, [rbp + 0xa8]
call fcn.1800759b0
movzx edx, byte [rbp + 0xa8]
lea rcx, [rbp + 0xb0]
call fcn.180074fe0
nop
lea rcx, [rbp + 0xd8]
call fcn.1800503e0
nop
xor edx, edx
lea rcx, [rbp + 0x98]
call fcn.1800759b0
movzx edx, byte [rbp + 0x98]
lea rcx, [rbp + 0xa0]
call fcn.180074fe0
nop
xor eax, eax
jmp 0x18007061a
mov dword [rbp + 0x58], Ordinal_30
lea rdx, [rbp + 0x58]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Thread32First]
test eax, eax
je 0x18006f037
mov dword [rbp - 0x68], 0xfdb9a2bf
mov dword [rbp - 0x64], 0xb3adb1
mov byte [rbp - 0x60], 1
lea rcx, [rbp - 0x68]
call fcn.180070ee0
lea rcx, [rbp - 0x68]
call fcn.180050c50
mov rdi, rax
mov eax, dword [rbp + 0x64]
cmp rax, rdi
jne 0x18006f022
mov r8d, dword [rbp + 0x60]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rbx, rax
mov rcx, rax
call fcn.18006dde0
mov r8d, eax
mov edx, edi
lea rcx, [rbp + 0x78]
call fcn.18006dcf0
nop
mov dword [rsp + 0x60], 0xa0b0b0a4
mov dword [rsp + 0x64], 0xb3f8b7bf
mov dword [rsp + 0x68], 0x100b5b4
lea rcx, [rsp + 0x60]
call fcn.180070810
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x78]
call fcn.180073750
cmp rax, 0xffffffffffffffff
je 0x18006f00f
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x78]
call fcn.1800503e0
lea rdx, [rbp + 0x58]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x18006ef94
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x18011b294], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x18011b290], eax
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x18006dc50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movdqa xmm0, xmmword [0x180104ca0]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0xcccfce
mov byte [rsp + 0x74], 1
lea rcx, [rsp + 0x60]
call fcn.180070e50
lea rax, [rsp + 0x60]
inc rsi
cmp byte [rax + rsi], 0
jne 0x18006f0a7
mov r8, rsi
lea rdx, [rsp + 0x60]
lea rcx, [0x180119ee8]
call fcn.180075c10
lea rdi, str.FiveM_b3095_GTAProcess.exe
lea rsi, str.FiveM_b2944_GTAProcess.exe
lea r14, str.FiveM_b2802_GTAProcess.exe
lea r12, str.FiveM_b2699_GTAProcess.exe
lea r13, str.FiveM_b2612_GTAProcess.exe
lea rbx, str.FiveM_b2545_GTAProcess.exe
lea r15, str.FiveM_b2372_GTAProcess.exe
nop word [rax + rax]
movdqa xmm0, xmmword [0x1801048c0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x869a84ce
mov word [rbp + 0x8c], 0x100
lea rcx, [rbp + 0x78]
call fcn.1800708a0
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x1800702df
movdqa xmm0, xmmword [0x180104e50]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x879985
mov byte [rbp - 0x74], 1
lea rcx, [rsp + 0x78]
call fcn.180070e50
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x1800702df
movdqa xmm0, xmmword [0x180104710]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18007017a
movdqa xmm0, xmmword [0x180104980]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18007017a
movdqa xmm0, xmmword [0x1801046d0]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x180070015
movdqa xmm0, xmmword [0x180104970]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x180070015
movdqa xmm0, xmmword [0x180104700]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006feb7
movdqa xmm0, xmmword [0x180104990]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006feb7
movdqa xmm0, xmmword [0x180104740]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006fd59
movdqa xmm0, xmmword [0x1801049d0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006fd59
movdqa xmm0, xmmword [0x1801046e0]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006fbfb
movdqa xmm0, xmmword [0x1801049a0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006fbfb
movdqa xmm0, xmmword [0x1801046c0]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006fa9d
movdqa xmm0, xmmword [0x180104960]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006fa9d
movdqa xmm0, xmmword [0x1801046f0]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006f92f
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006f92f
movdqa xmm0, xmmword [0x180104720]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006f7c1
movdqa xmm0, xmmword [0x1801049c0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006f7c1
movdqa xmm0, xmmword [0x180104730]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x86818e92
mov dword [rbp - 0x74], 0x82c89697
mov dword [rbp - 0x70], 0x1008c90
lea rcx, [rsp + 0x78]
call fcn.180070840
lea rcx, [rsp + 0x78]
call fcn.180050c50
test rax, rax
jne 0x18006f659
movdqa xmm0, xmmword [0x1801049e0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
test rax, rax
je 0x18007043c
movdqa xmm0, xmmword [0x1801049e0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b3095_GameProcess.exe
test rax, rax
cmove rcx, rdi
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x2593320
mov dword [0x18011b2f8], 0x1f58b58
mov dword [0x18011b314], 0x20019e0
mov dword [0x18011b31c], 0x105dfa9
mov dword [0x18011b2e4], 0x105df64
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd10
mov dword [0x18011b328], 0x960
mov dword [0x18011b310], 0x10a8
mov dword [0x18011b324], 0xe8
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x150c
mov dword [0x18011b334], 0x1098
mov dword [0x18011b304], 0x10b8
mov dword [0x1801190bc], 0x410
mov dword [rbp - 0x68], 0x84b1a3b7
mov dword [rbp - 0x64], 0xb8b2bbbd
mov word [rbp - 0x60], 0xaf
mov byte [rbp - 0x5e], 1
lea rcx, [rbp - 0x68]
call fcn.1800708e0
lea rcx, [rbp - 0x68]
jmp 0x18007042f
movdqa xmm0, xmmword [0x1801049c0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2944_GameProcess.exe
test rax, rax
cmove rcx, rsi
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x257bea0
mov dword [0x18011b2f8], 0x1f42068
mov dword [0x18011b314], 0x1feaac0
mov dword [0x18011b31c], 0x1052879
mov dword [0x18011b2e4], 0x1052834
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd10
mov dword [0x18011b328], 0x918
mov dword [0x18011b310], 0x10a8
mov dword [0x18011b324], 0xe8
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x150c
mov dword [0x18011b334], 0x1098
mov dword [0x18011b304], 0x10b8
mov dword [0x1801190bc], 0x410
mov dword [rsp + 0x50], 0x84b1a3b7
mov dword [rsp + 0x54], 0xb8b2bbbd
mov word [rsp + 0x58], 0xaf
mov byte [rsp + 0x5a], 1
lea rcx, [rsp + 0x50]
call fcn.1800708e0
lea rcx, [rsp + 0x50]
jmp 0x18007042f
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2802_GameProcess.exe
test rax, rax
cmove rcx, r14
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x254d448
mov dword [0x18011b2f8], 0x1f5b820
mov dword [0x18011b314], 0x1fbc100
mov dword [0x18011b31c], 0x10455f5
mov dword [0x18011b2e4], 0x10455b0
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd10
mov dword [0x18011b328], 0x918
mov dword [0x18011b310], 0x10a8
mov dword [0x18011b324], 0x88
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x150c
mov dword [0x18011b334], 0x1098
mov dword [0x18011b304], 0x10b8
mov dword [0x1801190bc], 0x410
mov dword [rsp + 0x40], 0x84b1a3b7
mov dword [rsp + 0x44], 0xb8b2bbbd
mov word [rsp + 0x48], 0xaf
mov byte [rsp + 0x4a], 1
lea rcx, [rsp + 0x40]
call fcn.1800708e0
lea rcx, [rsp + 0x40]
jmp 0x18007042f
movdqa xmm0, xmmword [0x180104960]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2699_GameProcess.exe
test rax, rax
cmove rcx, r12
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x26684d8
mov dword [0x18011b2f8], 0x20304c8
mov dword [0x18011b314], 0x20d8c90
mov dword [0x18011b31c], 0x10479f9
mov dword [0x18011b2e4], 0x10479b4
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd10
mov dword [0x18011b328], 0x918
mov dword [0x18011b310], 0x10c8
mov dword [0x18011b324], 0x88
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x1530
mov dword [0x18011b334], 0x10b8
mov dword [0x18011b304], 0x10d8
mov dword [rbp - 0x58], 0x84b1a3b7
mov dword [rbp - 0x54], 0xb8b2bbbd
mov word [rbp - 0x50], 0xaf
mov byte [rbp - 0x4e], 1
lea rcx, [rbp - 0x58]
call fcn.1800708e0
lea rcx, [rbp - 0x58]
jmp 0x18007042f
movdqa xmm0, xmmword [0x1801049a0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2612_GameProcess.exe
test rax, rax
cmove rcx, r13
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x2567db0
mov dword [0x18011b2f8], 0x1f77ef0
mov dword [0x18011b314], 0x1fd8570
mov dword [0x18011b31c], 0x1040dbd
mov dword [0x18011b2e4], 0x1040d78
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd30
mov dword [0x18011b328], 0x938
mov dword [0x18011b310], 0x10c8
mov dword [0x18011b324], 0x88
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x1530
mov dword [0x18011b334], 0x10b8
mov dword [0x18011b304], 0x10d8
mov dword [rbp - 0x48], 0x84b1a3b7
mov dword [rbp - 0x44], 0xb8b2bbbd
mov word [rbp - 0x40], 0xaf
mov byte [rbp - 0x3e], 1
lea rcx, [rbp - 0x48]
call fcn.1800708e0
lea rcx, [rbp - 0x48]
jmp 0x18007042f
movdqa xmm0, xmmword [0x1801049d0]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2545_GameProcess.exe
test rax, rax
cmove rcx, rbx
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x25667e8
mov dword [0x18011b2f8], 0x1f2e7a8
mov dword [0x18011b314], 0x1fd6f70
mov dword [0x18011b31c], 0x103f4ad
mov dword [0x18011b2e4], 0x103f468
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd30
mov dword [0x18011b328], 0x938
mov dword [0x18011b310], 0x10c8
mov dword [0x18011b324], 0x88
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x1530
mov dword [0x18011b334], 0x10b8
mov dword [0x18011b304], 0x10d8
mov dword [rbp - 0x38], 0x84b1a3b7
mov dword [rbp - 0x34], 0xb8b2bbbd
mov word [rbp - 0x30], 0xaf
mov byte [rbp - 0x2e], 1
lea rcx, [rbp - 0x38]
call fcn.1800708e0
lea rcx, [rbp - 0x38]
jmp 0x18007042f
movdqa xmm0, xmmword [0x180104990]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2372_GameProcess.exe
test rax, rax
cmove rcx, r15
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x252dcd8
mov dword [0x18011b2f8], 0x1f05208
mov dword [0x18011b314], 0x1f9e9f0
mov dword [0x18011b31c], 0x1035665
mov dword [0x18011b2e4], 0x1035620
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd30
mov dword [0x18011b328], 0x938
mov dword [0x18011b310], 0x10c8
mov dword [0x18011b324], 0x88
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x14e0
mov dword [0x18011b334], 0x10b8
mov dword [0x18011b304], 0x10d8
mov dword [rbp - 0x28], 0x84b1a3b7
mov dword [rbp - 0x24], 0xb8b2bbbd
mov word [rbp - 0x20], 0xaf
mov byte [rbp - 0x1e], 1
lea rcx, [rbp - 0x28]
call fcn.1800708e0
lea rcx, [rbp - 0x28]
jmp 0x18007042f
movdqa xmm0, xmmword [0x180104970]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2189_GameProcess.exe
test rax, rax
lea rax, str.FiveM_b2189_GTAProcess.exe
cmove rcx, rax
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x24e6d90
mov dword [0x18011b2f8], 0x1ee18a8
mov dword [0x18011b314], 0x1f888c0
mov dword [0x18011b31c], 0x102f8e9
mov dword [0x18011b2e4], 0x102f8a4
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd30
mov dword [0x18011b328], 0x938
mov dword [0x18011b310], 0x10c8
mov dword [0x18011b324], 0x78
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x14e0
mov dword [0x18011b334], 0x10b8
mov dword [0x18011b304], 0x10d8
mov dword [rbp - 0x18], 0x84b1a3b7
mov dword [rbp - 0x14], 0xb8b2bbbd
mov word [rbp - 0x10], 0xaf
mov byte [rbp - 0xe], 1
lea rcx, [rbp - 0x18]
call fcn.1800708e0
lea rcx, [rbp - 0x18]
jmp 0x18007042f
movdqa xmm0, xmmword [0x180104980]
movdqu xmmword [rbp + 0x78], xmm0
mov dword [rbp + 0x88], 0x9087828f
mov dword [rbp + 0x8c], 0x9f83cb97
mov word [rbp + 0x90], Ordinal_143
mov byte [rbp + 0x92], 1
lea rcx, [rbp + 0x78]
call fcn.180070870
lea rcx, [rbp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_b2060_GameProcess.exe
test rax, rax
lea rax, str.FiveM_b2060_GTAProcess.exe
cmove rcx, rax
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x24c8858
mov dword [0x18011b2f8], 0x1ec3828
mov dword [0x18011b314], 0x1f6a7e0
mov dword [0x18011b31c], 0x101b6d9
mov dword [0x18011b2e4], 0x101b694
mov dword [0x18011b2e0], 0x134
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2f4
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x11c
mov dword [0x18011b2e8], 0x110
mov dword [0x18011b318], 0xd30
mov dword [0x18011b328], 0x938
mov dword [0x18011b310], 0x10c8
mov dword [0x18011b324], 0x78
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x14e0
mov dword [0x18011b334], 0x10b8
mov dword [0x18011b304], 0x10d8
mov dword [rbp - 8], 0x84b1a3b7
mov dword [rbp - 4], 0xb8b2bbbd
mov word [rbp], 0xaf
mov byte [rbp + 2], 1
lea rcx, [rbp - 8]
call fcn.1800708e0
lea rcx, [rbp - 8]
jmp 0x18007042f
movdqa xmm0, xmmword [0x180104e50]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x879985
mov byte [rbp - 0x74], 1
lea rcx, [rsp + 0x78]
call fcn.180070e50
lea rcx, [rsp + 0x78]
call fcn.180050c50
lea rcx, str.VMP_GameProcess.exe
test rax, rax
lea rax, str.FiveM_GTAProcess.exe
cmove rcx, rax
mov qword [0x18011b2b0], rcx
mov dword [0x18011b308], 0x247f840
mov dword [0x18011b2f8], 0x1efd4c8
mov dword [0x18011b314], 0x2087780
mov dword [0x18011b31c], 0xec58f1
mov dword [0x18011b2e4], 0xec58ac
mov dword [0x18011b2e0], 0x12c
mov dword [0x18011b2ec], 0x74
mov dword [0x18011b2fc], 0x2e8
mov dword [0x18011b320], 0x28c
mov dword [0x18011b32c], 0xb0
mov dword [0x18011b2f0], 0x114
mov dword [0x18011b2e8], 0x108
mov dword [0x18011b318], 0xd28
mov dword [0x18011b328], 0x918
mov dword [0x18011b310], 0x10b8
mov dword [0x18011b324], 0x60
mov dword [0x18011b2f4], 0x60
mov dword [0x18011b30c], 0x90
mov dword [0x18011b300], 0x280
mov dword [0x18011b330], 0x14b8
mov dword [0x18011b334], 0x10a8
mov dword [0x18011b304], 0x10c8
mov dword [rsp + 0x60], 0x84b1a3b7
mov dword [rsp + 0x64], 0xb8b2bbbd
mov word [rsp + 0x68], 0xaf
mov byte [rsp + 0x6a], 1
lea rcx, [rsp + 0x60]
call fcn.1800708e0
lea rcx, [rsp + 0x60]
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x18007044c
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18006f100
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..METABL
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x18011b2c8], rax
mov dword [rsp + 0x60], 0x84b1a3b7
mov dword [rsp + 0x64], 0xb8b2bbbd
mov word [rsp + 0x68], 0xaf
mov byte [rsp + 0x6a], 1
lea rcx, [rsp + 0x60]
call fcn.1800708e0
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, str._Founded
lea rcx, [rbp + 0xb8]
call fcn.1800739c0
nop
lea r8, [rbp + 0xb8]
mov rdx, qword [0x18011b2b0]
lea rcx, [rbp + 0x78]
call fcn.180077860
lea rbx, [0x180119ee8]
cmp rbx, rax
je 0x1800704fb
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.180075d70
lea rcx, [rbp + 0x78]
call fcn.1800503e0
xor r8d, r8d
lea rdx, [0x1800f2e32]
mov rcx, rbx
call fcn.180075c10
mov rcx, qword [0x18011b2b0]
call fcn.180050c50
mov dword [0x18011b338], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x18011b348], rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180050d30
mov qword [0x18011b340], rax
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x180057a40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x180059570]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x18006ded0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [0x18011b089], 1
lea rcx, [rbp + 0xb8]
call fcn.1800503e0
nop
xor edx, edx
lea rcx, [rbp + 0xa8]
call fcn.1800759b0
movzx edx, byte [rbp + 0xa8]
lea rcx, [rbp + 0xb0]
call fcn.180074fe0
nop
lea rcx, [rbp + 0xd8]
call fcn.1800503e0
nop
xor edx, edx
lea rcx, [rbp + 0x98]
call fcn.1800759b0
movzx edx, byte [rbp + 0x98]
lea rcx, [rbp + 0xa0]
call fcn.180074fe0
nop
mov eax, 1
mov rcx, qword [rbp + 0xf8]
xor rcx, rsp
call fcn.1800ded70
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret