Function at 0x18004a304
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x2c0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x18029aa40]
xor rax, rsp
mov qword [rbp + 0x260], rax
mov r12, rcx
mov rax, qword gs:[0x60]
mov rbx, qword [rax + 0x10]
mov r14d, 1
cmp edx, r14d
jne 0x18004c479
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
lea ecx, [r14 + 2]
call fcn.18006dc6c
movabs r13, 0xf3558726652b5d77
mov qword [rbp + 0x180], r13
movabs rsi, 0x9fde38d72a5410d4
mov qword [rbp + 0x188], rsi
movabs r15, 0x37fbd824d3eb6ec9
mov qword [rbp + 0x190], r15
movabs r14, 0xe769d155b79ae16
mov qword [rbp + 0x198], r14
movabs rax, 0x8136f40b004c3c05
mov qword [rbp + 8], rax
movabs rax, 0xf9f35fb9432060bd
mov qword [rbp + 0x10], rax
movabs rax, 0x3797b440fd8e18a0
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], r14
movups xmm0, xmmword [rbp + 8]
movaps xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rbp + 0x18]
movaps xmmword [rbp + 0xf0], xmm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0xe0], ymm1
lea rcx, [rbp + 0xe0]
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], rsi
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0xf8], r14
movabs rax, 0x73971ae29604f6fb
mov qword [rbp + 0x100], rax
movabs r15, 0x7f2bfa8360c34948
mov qword [rbp + 0x108], r15
movabs rax, 0x4a60ae90e405d71d
mov qword [rbp + 0x110], rax
movabs rax, 0xbbc895f134e6cc6a
mov qword [rbp + 0x118], rax
movabs rax, 0xb765a7625d0b6543
mov qword [rbp + 0x120], rax
movabs rax, 0xa0fe07f715742ff4
mov qword [rbp + 0x128], rax
movabs rax, 0x17c4f81bf3d32be9
mov qword [rbp + 0x130], rax
movabs rax, 0x3656a5217b468e29
mov qword [rbp + 0x138], rax
movabs rax, 0x53af2ec2ae34d6b9
mov qword [rbp + 0x140], rax
movabs rax, 0x5f14daba55e37070
mov qword [rbp + 0x148], rax
movabs rax, 0x9548ed2dc259429
mov qword [rbp + 0x150], rax
movabs rax, 0xbbc895f134d2fe4a
mov qword [rbp + 0x158], rax
movups xmm0, xmmword [rbp + 0x120]
movaps xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rbp + 0x130]
movaps xmmword [rbp + 0x190], xmm1
movups xmm0, xmmword [rbp + 0x140]
movaps xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rbp + 0x150]
movaps xmmword [rbp + 0x1b0], xmm1
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x1a0], ymm1
mov r9d, 7
xor r8d, r8d
lea rdx, [rbp + 0x180]
mov rcx, rdi
vzeroupper
call fcn.180049008
mov r8, rax
lea rsi, [0x18015a9a0]
cmp rsi, rax
je 0x18004a5d2
mov qword [rbp], rsi
mov eax, dword [rax]
mov dword [0x18015a9a0], eax
mov r8, qword [r8 + 8]
mov rdx, qword [r8]
lea rcx, [0x18015a9a8]
call fcn.180047908
mov rdx, qword [0x18015a9b0]
mov rcx, rsi
call fcn.1800048c0
mov rdx, rax
mov rcx, rsi
call fcn.1800493a8
nop
mov qword [rbp + 0xe0], r13
movabs rax, 0x9fde38d72a5410d4
mov qword [rbp + 0xe8], rax
movabs rax, 0x37fbd824d3eb6ec9
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], r14
movabs rax, 0x73971ae29604f6fb
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], r15
movabs rax, 0xb765a7625d0b6543
mov qword [rbp + 0x1c0], rax
movabs rax, 0xa0fe07f715742ff4
mov qword [rbp + 0x1c8], rax
movabs rax, 0x17c4f81bf3d32be9
mov qword [rbp + 0x1d0], rax
movabs rax, 0x3656ac217b468e29
mov qword [rbp + 0x1d8], rax
movabs rax, 0x73971ae2a034d6b9
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1e8], r15
movups xmm0, xmmword [rbp + 0x1c0]
movaps xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rbp + 0x1d0]
movaps xmmword [rbp + 0x130], xmm1
movups xmm2, xmmword [rbp + 0x1e0]
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0x120], ymm1
vxorps xmm2, xmm2, xmmword [rbp + 0x100]
vmovdqa xmmword [rbp + 0x140], xmm2
mov r9d, 7
xor r8d, r8d
lea rdx, [rbp + 0x120]
mov rcx, rdi
vzeroupper
call fcn.180049008
mov r8, rax
lea rsi, [0x18015a9e0]
cmp rsi, rax
je 0x18004a725
mov qword [rbp], rsi
mov eax, dword [rax]
mov dword [0x18015a9e0], eax
mov r8, qword [r8 + 8]
mov rdx, qword [r8]
lea rcx, [0x18015a9e8]
call fcn.180047908
mov rdx, qword [0x18015a9f0]
mov rcx, rsi
call fcn.1800048c0
mov rdx, rax
mov rcx, rsi
call fcn.1800494fc
nop
mov qword [rbp + 0xe0], r13
movabs rsi, 0x9fde38d72a5410d4
mov qword [rbp + 0xe8], rsi
movabs rax, 0x37fbd824d3eb6ec9
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], r14
movabs rax, 0xc560a713500b6d43
mov qword [rbp + 0x28], rax
movabs rax, 0xa7fe00e30a6325f4
mov qword [rbp + 0x30], rax
movabs rax, 0x37fbd82490ae4efa
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x40], r14
movups xmm0, xmmword [rbp + 0x28]
movaps xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rbp + 0x38]
movaps xmmword [rbp + 0x190], xmm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x180], ymm1
xor r8d, r8d
lea rdx, [rbp + 0x180]
mov rcx, rdi
vzeroupper
call fcn.180048eec
mov qword [0x18029cfa8], rax
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], rsi
movabs rax, 0x37fbd824d3eb6ec9
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], r14
movabs rax, 0xb011a7645d0b1e43
mov qword [rbp + 0x48], rax
movabs rax, 0xaafe0ee20a6125f4
mov qword [rbp + 0x50], rax
movabs rax, 0x37cced04e2df4efe
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], r14
movups xmm0, xmmword [rbp + 0x48]
movaps xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rbp + 0x58]
movaps xmmword [rbp + 0x190], xmm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x180], ymm1
xor r8d, r8d
lea rdx, [rbp + 0x180]
mov rcx, rdi
vzeroupper
call fcn.180048eec
mov qword [0x18029cfb0], rax
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], rsi
movabs rdi, 0x37fbd824d3eb6ec9
mov qword [rbp + 0x1d0], rdi
mov qword [rbp + 0x1d8], r14
movabs rax, 0x73971ae29604f6fb
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1e8], r15
movabs rax, 0xd36aa7645d0b6543
mov qword [rbp + 0x200], rax
movabs rax, 0xbfe118e80a6b30eb
mov qword [rbp + 0x208], rax
movabs rax, 0x74cff86590cb2cf1
mov qword [rbp + 0x210], rax
movabs rax, 0x4d56de257b3b9636
mov qword [rbp + 0x218], rax
movabs rax, 0x73971ae2a330d6c3
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x228], r15
movups xmm0, xmmword [rbp + 0x200]
movaps xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rbp + 0x210]
movaps xmmword [rbp + 0x130], xmm1
movups xmm2, xmmword [rbp + 0x220]
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x120], ymm1
vxorps xmm2, xmm2, xmmword [rbp + 0x1e0]
vmovdqa xmmword [rbp + 0x140], xmm2
xor edx, edx
lea r8d, [rdx + 7]
lea rcx, [rbp + 0x120]
vzeroupper
call fcn.180048d8c
mov qword [0x18029cf50], rax
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x208], rsi
mov qword [rbp + 0x210], rdi
mov qword [rbp + 0x218], r14
movabs rax, 0x73971ae29604f6fb
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x228], r15
movabs rax, 0x4a60ae90e405d71d
mov qword [rbp + 0x230], rax
movabs rax, 0xbbc895f134e6cc6a
mov qword [rbp + 0x238], rax
movabs rax, 0x164a608ef5f08b1f
mov qword [rbp + 0x240], rax
movabs rax, 0x8370aedf813d7fbc
mov qword [rbp + 0x248], rax
movabs rdx, 0xc46a7f8c4605df31
mov qword [rbp + 0x250], rdx
movabs rcx, 0x55d9f0ddacdca8be
mov qword [rbp + 0x258], rcx
movabs rdi, 0xb060a71f5d0b6543
mov qword [rbp + 0x120], rdi
movabs rax, 0xabfe00e70a6022f4
mov qword [rbp + 0x128], rax
movabs rax, 0x17cfef04ead34ef1
mov qword [rbp + 0x130], rax
movabs rax, 0x3943bd256a599a24
mov qword [rbp + 0x138], rax
movabs rax, 0x36b729dab63cc2db
mov qword [rbp + 0x140], rax
movabs rax, 0x5f13cea350f1690b
mov qword [rbp + 0x148], rax
movabs rax, 0x755f8ed4d7259525
mov qword [rbp + 0x150], rax
movabs rax, 0x84e8aace14d9f34a
mov qword [rbp + 0x158], rax
movabs rax, 0x360824aec6c3ab20
mov qword [rbp + 0x160], rax
movabs rax, 0xba438ee9c71d4c8f
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rdx
mov qword [rbp + 0x178], rcx
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x160], ymm1
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x120]
vzeroupper
call fcn.180048d8c
mov qword [0x18029cf10], rax
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], rsi
movabs rax, 0x37fbd824d3eb6ec9
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], r14
movabs rax, 0xca13a7645d0b6543
mov qword [rbp + 0x68], rax
movabs rax, 0xdcfe0bef0a6c24f4
mov qword [rbp + 0x70], rax
movabs rax, 0x17c8eb04e3da4ef8
mov qword [rbp + 0x78], rax
movabs rax, 0xe769d155b79ec52
mov qword [rbp + 0x80], rax
movups xmm0, xmmword [rbp + 0x68]
movaps xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rbp + 0x78]
movaps xmmword [rbp + 0x190], xmm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x180], ymm1
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x180]
vzeroupper
call fcn.180048d8c
sub rax, 0x15
mov qword [0x18029cfa0], rax
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x15090
mov qword [0x18029cf08], rax
xor r13d, r13d
mov byte [0x18029cf90], r13b
mov byte [0x18029cf91], r13b
movabs rax, 0xf3558726652b5d77
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], rsi
movabs rax, 0x37fbd824d3eb6ec9
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x138], r14
movabs rax, 0x73971ae29604f6fb
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], r15
movabs rax, 0x4a60ae90e405d71d
mov qword [rbp + 0x150], rax
movabs rcx, 0xbbc895f134e6cc6a
mov qword [rbp + 0x158], rcx
mov qword [rbp + 0x90], rdi
movabs rax, 0xaafe07e80a6022f4
mov qword [rbp + 0x98], rax
movabs rax, 0x17c8e004ebdf4efe
mov qword [rbp + 0xa0], rax
movabs rax, 0x4c4ebd256959ed53
mov qword [rbp + 0xa8], rax
movabs rax, 0x4cb722a7b63db2db
mov qword [rbp + 0xb0], rax
movabs rax, 0x5f14c5a35ffc6977
mov qword [rbp + 0xb8], rax
movabs rax, 0x7a238ea4dc25e822
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rcx
movups xmm0, xmmword [rbp + 0x90]
movaps xmmword [rbp + 0x200], xmm0
movups xmm1, xmmword [rbp + 0xa0]
movaps xmmword [rbp + 0x210], xmm1
movups xmm0, xmmword [rbp + 0xb0]
movaps xmmword [rbp + 0x220], xmm0
movups xmm1, xmmword [rbp + 0xc0]
movaps xmmword [rbp + 0x230], xmm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x220], ymm1
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x200]
vzeroupper
call fcn.180048d8c
mov qword [0x18029cf18], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r15, rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004ae0f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004adf4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004adf4
mov r14d, dword [r9 + 0x20]
dec edx
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004adf0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004adcd
cmp r11d, 0xe463da3c
je 0x18004b1f8
test edx, edx
jne 0x18004adb1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004ae05
cmp qword [rax + 0x30], r13
jne 0x18004ad8d
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b3095_GameProcess.exe
call rax
test rax, rax
jne 0x18004aedc
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004aeca
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aeaf
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aeaf
mov r14d, dword [r9 + 0x20]
dec edx
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aeab
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ae88
cmp r11d, 0xe463da3c
je 0x18004b215
test edx, edx
jne 0x18004ae6c
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aec0
cmp qword [rax + 0x30], r13
jne 0x18004ae48
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b3095_GTAProcess.exe
call rax
test rax, rax
je 0x18004afab
mov dword [0x18029cf5c], 0x1098
mov dword [0x18029cf58], 0x150c
mov dword [0x18029cf64], 0x250
mov dword [0x18029cf60], 0x10b8
mov dword [0x18029cf68], 0x10a8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
mov byte [0x18029cf91], 1
lea rax, [rbx + 0x2593320]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1f58b58]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x20025b8]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x20019e0]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0xcd07c8]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b054
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b039
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b039
mov r14d, dword [r9 + 0x20]
dec edx
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b035
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b012
cmp r11d, 0xe463da3c
je 0x18004b232
test edx, edx
jne 0x18004aff6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b04a
cmp qword [rax + 0x30], r13
jne 0x18004afd2
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004b121
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b10f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b0f4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b0f4
mov r14d, dword [r9 + 0x20]
dec edx
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b0f0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b0cd
cmp r11d, 0xe463da3c
je 0x18004b24f
test edx, edx
jne 0x18004b0b1
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b105
cmp qword [rax + 0x30], r13
jne 0x18004b08d
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004b26c
mov dword [0x18029cf5c], 0x1098
mov dword [0x18029cf58], 0x150c
mov dword [0x18029cf64], 0x250
mov dword [0x18029cf60], 0x10b8
mov dword [0x18029cf68], 0x10a8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
mov r14d, 1
mov byte [0x18029cf91], r14b
lea rax, [rbx + 0x257bea0]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1f42068]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x1feb698]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x1feaac0]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0xcd07c8]
mov qword [0x18029cf38], rax
jmp 0x18004b272
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ae08
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aec3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b04d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b108
mov r14d, 1
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b319
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004b2fe
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004b2fe
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004b2f9
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004b2d9
cmp ecx, 0xe463da3c
je 0x18004c4ac
test r8d, r8d
jne 0x18004b2be
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004b30f
cmp qword [rax + 0x30], r13
jne 0x18004b299
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004b3e5
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b3d3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004b3b8
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004b3b8
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [rsi + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004b3b3
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004b393
cmp ecx, 0xe463da3c
je 0x18004c4cb
test r8d, r8d
jne 0x18004b377
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004b3c9
cmp qword [rax + 0x30], r13
jne 0x18004b352
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004b4b4
mov dword [0x18029cf5c], 0x1098
mov dword [0x18029cf58], 0x150c
mov dword [0x18029cf64], 0x250
mov dword [0x18029cf60], 0x10b8
mov dword [0x18029cf68], 0x10a8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
mov byte [0x18029cf90], r14b
lea rax, [rbx + 0x254d448]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1f5b820]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x1fbccd8]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x1fbc100]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0x794784]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b55b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004b540
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004b540
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004b53b
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004b51b
cmp ecx, 0xe463da3c
je 0x18004c4ea
test r8d, r8d
jne 0x18004b500
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004b551
cmp qword [rax + 0x30], r13
jne 0x18004b4db
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
test rax, rax
jne 0x18004b626
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b614
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004b5f9
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004b5f9
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004b5f4
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004b5d4
cmp ecx, 0xe463da3c
je 0x18004c509
test r8d, r8d
jne 0x18004b5b9
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004b60a
cmp qword [rax + 0x30], r13
jne 0x18004b594
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004b6ee
mov dword [0x18029cf5c], 0x10b8
mov dword [0x18029cf58], 0x1530
mov dword [0x18029cf64], 0x238
mov dword [0x18029cf60], 0x10d8
mov dword [0x18029cf68], 0x10c8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
lea rax, [rbx + 0x26684d8]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x20304c8]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x20d9868]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x20d8c90]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0x78f450]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b795
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004b77a
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004b77a
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004b775
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004b755
cmp ecx, 0xe463da3c
je 0x18004c528
test r8d, r8d
jne 0x18004b73a
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004b78b
cmp qword [rax + 0x30], r13
jne 0x18004b715
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004b861
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b84f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r8, qword [r11 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18004b834
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18004b834
mov esi, dword [r10 + 0x20]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004b82f
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004b80f
cmp ecx, 0xe463da3c
je 0x18004c547
test r9d, r9d
jne 0x18004b7f3
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004b845
cmp qword [rax + 0x30], r13
jne 0x18004b7ce
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004b929
mov dword [0x18029cf5c], 0x10b8
mov dword [0x18029cf58], 0x1530
mov dword [0x18029cf64], 0x238
mov dword [0x18029cf60], 0x10d8
mov dword [0x18029cf68], 0x10c8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
lea rax, [rbx + 0x2567db0]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1f77ef0]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x1fd9148]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x1fd8570]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0x78c758]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004b9d0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004b9b5
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004b9b5
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004b9b0
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004b990
cmp ecx, 0xe463da3c
je 0x18004c565
test r8d, r8d
jne 0x18004b975
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004b9c6
cmp qword [rax + 0x30], r13
jne 0x18004b950
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004ba9c
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004ba8a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r8, qword [r11 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18004ba6f
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18004ba6f
mov esi, dword [r10 + 0x20]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004ba6a
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004ba4a
cmp ecx, 0xe463da3c
je 0x18004c584
test r9d, r9d
jne 0x18004ba2e
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004ba80
cmp qword [rax + 0x30], r13
jne 0x18004ba09
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004bb64
mov dword [0x18029cf5c], 0x10b8
mov dword [0x18029cf58], 0x1530
mov dword [0x18029cf64], 0x238
mov dword [0x18029cf60], 0x10d8
mov dword [0x18029cf68], 0x10c8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
lea rax, [rbx + 0x25667e8]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1f2e7a8]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x1fd7b48]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x1fd6f70]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0x78c5e4]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004bc0b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004bbf0
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004bbf0
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004bbeb
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004bbcb
cmp ecx, 0xe463da3c
je 0x18004c5a2
test r8d, r8d
jne 0x18004bbb0
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004bc01
cmp qword [rax + 0x30], r13
jne 0x18004bb8b
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
test rax, rax
jne 0x18004bcd7
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004bcc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r8, qword [r11 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18004bcaa
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18004bcaa
mov esi, dword [r10 + 0x20]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004bca5
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004bc85
cmp ecx, 0xe463da3c
je 0x18004c5c1
test r9d, r9d
jne 0x18004bc69
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004bcbb
cmp qword [rax + 0x30], r13
jne 0x18004bc44
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004bd9f
mov dword [0x18029cf5c], 0x10b8
mov dword [0x18029cf58], 0x14e0
mov dword [0x18029cf64], 0x218
mov dword [0x18029cf60], 0x10d8
mov dword [0x18029cf68], 0x10c8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
lea rax, [rbx + 0x252dcd8]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1f05208]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x1f9f5c8]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x1f9e9f0]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0x787fe4]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004be46
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004be2b
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004be2b
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004be26
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004be06
cmp ecx, 0xe463da3c
je 0x18004c5df
test r8d, r8d
jne 0x18004bdeb
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004be3c
cmp qword [rax + 0x30], r13
jne 0x18004bdc6
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004bf12
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004bf00
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r8, qword [r11 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18004bee5
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18004bee5
mov esi, dword [r10 + 0x20]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004bee0
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004bec0
cmp ecx, 0xe463da3c
je 0x18004c5fe
test r9d, r9d
jne 0x18004bea4
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004bef6
cmp qword [rax + 0x30], r13
jne 0x18004be7f
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004bfe4
mov dword [0x18029cf5c], 0x10b8
mov dword [0x18029cf58], 0x14e0
mov dword [0x18029cf64], 0x218
mov dword [0x18029cf60], 0x10d8
mov dword [0x18029cf68], 0x10c8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf8c], 0x908
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
lea rax, [rbx + 0x24e6d90]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1ee18a8]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x1f89498]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x1f888c0]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0x79b5dc]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004c08b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004c070
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004c070
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + rsi]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004c06b
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004c04b
cmp ecx, 0xe463da3c
je 0x18004c61c
test r8d, r8d
jne 0x18004c030
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004c081
cmp qword [rax + 0x30], r13
jne 0x18004c00b
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004c157
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004c145
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r8, qword [r11 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18004c12a
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18004c12a
mov esi, dword [r10 + 0x20]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004c125
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004c105
cmp ecx, 0xe463da3c
je 0x18004c63b
test r9d, r9d
jne 0x18004c0e9
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004c13b
cmp qword [rax + 0x30], r13
jne 0x18004c0c4
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004c21f
mov dword [0x18029cf5c], 0x10a8
mov dword [0x18029cf58], 0x14e0
mov dword [0x18029cf64], 0x218
mov dword [0x18029cf60], 0x10d8
mov dword [0x18029cf68], 0x10b8
mov dword [0x18029cf6c], 0x2f4
mov dword [0x18029cf70], 0x84
mov dword [0x18029cf84], 0x134
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5f0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x28c
lea rax, [rbx + 0x24c8858]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1ec3828]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x1f6b3c0]
mov qword [0x18029cf40], rax
lea rax, [rbx + 0x1f6a7e0]
mov qword [0x18029cf48], rax
lea rax, [r15 + 0x7935d0]
mov qword [0x18029cf38], rax
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004c2c7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r8, qword [r11 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18004c2ac
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18004c2ac
mov esi, dword [r10 + 0x20]
dec r9d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004c2a7
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004c287
cmp ecx, 0xe463da3c
je 0x18004c659
test r9d, r9d
jne 0x18004c26b
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004c2bd
cmp qword [rax + 0x30], r13
jne 0x18004c246
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004c393
mov rax, qword [0x18029cfb8]
test rax, rax
jne 0x18004c381
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r11, rdi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r10d, dword [rax + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18004c366
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18004c366
mov esi, dword [r10 + 0x20]
dec r8d
lea rcx, [rsi + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov ecx, 0x811c9dc5
mov al, byte [rdx]
add rdx, r14
test al, al
je 0x18004c361
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
add rdx, r14
test al, al
jne 0x18004c341
cmp ecx, 0xe463da3c
je 0x18004c677
test r8d, r8d
jne 0x18004c325
mov rax, qword [r11]
mov r11, rax
cmp rax, rdi
je 0x18004c377
cmp qword [rax + 0x30], r13
jne 0x18004c300
mov rax, r13
mov qword [0x18029cfb8], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004c45b
mov dword [0x18029cf5c], 0x10a8
mov dword [0x18029cf58], 0x14b8
mov dword [0x18029cf64], 0x218
mov dword [0x18029cf60], 0x10c8
mov dword [0x18029cf68], 0x10b8
mov dword [0x18029cf6c], 0x2e8
mov dword [0x18029cf70], 0x74
mov dword [0x18029cf84], 0x12c
mov dword [0x18029cf74], 0x20
mov dword [0x18029cf7c], 0x24
mov dword [0x18029cf78], 0x5e0
mov dword [0x18029cf88], 0x146b
mov dword [0x18029cf80], 0x25c
lea rax, [rbx + 0x247f840]
mov qword [0x18029cf28], rax
lea rax, [rbx + 0x1efd4c8]
mov qword [0x18029cf30], rax
lea rax, [rbx + 0x2088360]
mov qword [0x18029cf40], rax
lea rcx, [rbx + 0x2087780]
mov qword [0x18029cf48], rcx
lea rcx, [r15 + 0xcaf950]
mov qword [0x18029cf38], rcx
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
mov r9, r12
lea r8, [0x180048d4c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov eax, r14d
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.1800b3aa0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004b312
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004b3cc
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004b554
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004b60d
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004b78e
mov eax, dword [r10 + 0x24]
add rax, r8
movzx edx, word [rax + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b848
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004b9c9
mov eax, dword [r10 + 0x24]
add rax, r8
movzx edx, word [rax + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ba83
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004bc04
mov eax, dword [r10 + 0x24]
add rax, r8
movzx edx, word [rax + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004bcbe
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004be3f
mov eax, dword [r10 + 0x24]
add rax, r8
movzx edx, word [rax + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004bef9
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004c084
mov eax, dword [r10 + 0x24]
add rax, r8
movzx edx, word [rax + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004c13e
mov eax, dword [r10 + 0x24]
add rax, r8
movzx edx, word [rax + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004c2c0
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
jmp 0x18004c37a