Function at 0x18004d4f0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov rbx, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004ec55
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdi
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov r9, rbx
mov qword [rsp + 0x28], 0
lea r8, [0x18004d490]
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rax, qword [0x180200d60]
mov byte [0x180200f18], 0
test rax, rax
jne 0x18004d617
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004d5f8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004d5f8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov eax, dword [rax + r9]
add rax, r9
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x18004d5f3
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x18004d5d0
cmp edx, 0xe463da3c
je 0x18004ea39
test r8d, r8d
jne 0x18004d5b0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004d60e
cmp qword [rax + 0x30], 0
jne 0x18004d580
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004d6f9
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004d6e7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004d6c8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004d6c8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004d6c3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004d6a0
cmp edx, 0xe463da3c
je 0x18004ea57
test r8d, r8d
jne 0x18004d680
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004d6de
cmp qword [rax + 0x30], 0
jne 0x18004d650
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004d7a6
lea rax, [rbp + 0x257bea0]
mov dword [0x180200f3c], 0x1098
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x150c
mov dword [0x180200f08], 0x10b8
mov dword [0x180200f48], 0x10a8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov byte [0x180200f18], 1
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004d867
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop dword [rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004d848
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004d848
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004d843
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004d820
cmp edx, 0xe463da3c
je 0x18004ea75
test r8d, r8d
jne 0x18004d800
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004d85e
cmp qword [rax + 0x30], 0
jne 0x18004d7d0
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004d949
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004d937
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004d918
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004d918
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004d913
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004d8f0
cmp edx, 0xe463da3c
je 0x18004ea93
test r8d, r8d
jne 0x18004d8d0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004d92e
cmp qword [rax + 0x30], 0
jne 0x18004d8a0
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004d9ef
lea rax, [rbp + 0x254d448]
mov dword [0x180200f3c], 0x1098
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x150c
mov dword [0x180200f08], 0x10b8
mov dword [0x180200f48], 0x10a8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004dab7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004da98
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004da98
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004da93
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004da70
cmp edx, 0xe463da3c
je 0x18004eab1
test r8d, r8d
jne 0x18004da50
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004daae
cmp qword [rax + 0x30], 0
jne 0x18004da20
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
test rax, rax
jne 0x18004db99
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004db87
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004db68
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004db68
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004db63
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004db40
cmp edx, 0xe463da3c
je 0x18004eacf
test r8d, r8d
jne 0x18004db20
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004db7e
cmp qword [rax + 0x30], 0
jne 0x18004daf0
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004dc3f
lea rax, [rbp + 0x26684d8]
mov dword [0x180200f3c], 0x10b8
mov qword [0x180200f58], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x1530
mov dword [0x180200f08], 0x10d8
mov dword [0x180200f48], 0x10c8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004dd07
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004dce8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004dce8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004dce3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004dcc0
cmp edx, 0xe463da3c
je 0x18004eaed
test r8d, r8d
jne 0x18004dca0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004dcfe
cmp qword [rax + 0x30], 0
jne 0x18004dc70
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004dde9
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004ddd7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004ddb8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004ddb8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004ddb3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004dd90
cmp edx, 0xe463da3c
je 0x18004eb0b
test r8d, r8d
jne 0x18004dd70
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004ddce
cmp qword [rax + 0x30], 0
jne 0x18004dd40
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004de8f
lea rax, [rbp + 0x2567db0]
mov dword [0x180200f3c], 0x10b8
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x1530
mov dword [0x180200f08], 0x10d8
mov dword [0x180200f48], 0x10c8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004df57
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004df38
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004df38
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004df33
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004df10
cmp edx, 0xe463da3c
je 0x18004eb29
test r8d, r8d
jne 0x18004def0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004df4e
cmp qword [rax + 0x30], 0
jne 0x18004dec0
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004e039
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e027
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e008
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e008
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e003
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004dfe0
cmp edx, 0xe463da3c
je 0x18004eb47
test r8d, r8d
jne 0x18004dfc0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e01e
cmp qword [rax + 0x30], 0
jne 0x18004df90
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004e0df
lea rax, [rbp + 0x25667e8]
mov dword [0x180200f3c], 0x10b8
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x1530
mov dword [0x180200f08], 0x10d8
mov dword [0x180200f48], 0x10c8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e1a7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e188
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e188
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e183
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e160
cmp edx, 0xe463da3c
je 0x18004eb65
test r8d, r8d
jne 0x18004e140
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e19e
cmp qword [rax + 0x30], 0
jne 0x18004e110
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
test rax, rax
jne 0x18004e289
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e277
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e258
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e258
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e253
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e230
cmp edx, 0xe463da3c
je 0x18004eb83
test r8d, r8d
jne 0x18004e210
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e26e
cmp qword [rax + 0x30], 0
jne 0x18004e1e0
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004e32f
lea rax, [rbp + 0x252dcd8]
mov dword [0x180200f3c], 0x10b8
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x14e0
mov dword [0x180200f08], 0x10d8
mov dword [0x180200f48], 0x10c8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e3f7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e3d8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e3d8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e3d3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e3b0
cmp edx, 0xe463da3c
je 0x18004eba1
test r8d, r8d
jne 0x18004e390
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e3ee
cmp qword [rax + 0x30], 0
jne 0x18004e360
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004e4d9
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e4c7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e4a8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e4a8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e4a3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e480
cmp edx, 0xe463da3c
je 0x18004ebbf
test r8d, r8d
jne 0x18004e460
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e4be
cmp qword [rax + 0x30], 0
jne 0x18004e430
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004e57f
lea rax, [rbp + 0x24e6d90]
mov dword [0x180200f3c], 0x10b8
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x14e0
mov dword [0x180200f08], 0x10d8
mov dword [0x180200f48], 0x10c8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e647
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e628
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e628
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e623
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e600
cmp edx, 0xe463da3c
je 0x18004ebdd
test r8d, r8d
jne 0x18004e5e0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e63e
cmp qword [rax + 0x30], 0
jne 0x18004e5b0
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004e729
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e717
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e6f8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e6f8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e6f3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e6d0
cmp edx, 0xe463da3c
je 0x18004ebfb
test r8d, r8d
jne 0x18004e6b0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e70e
cmp qword [rax + 0x30], 0
jne 0x18004e680
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004e7cf
lea rax, [rbp + 0x24c8858]
mov dword [0x180200f3c], 0x10a8
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x14e0
mov dword [0x180200f08], 0x10d8
mov dword [0x180200f48], 0x10b8
mov dword [0x180200f20], 0x2f4
mov dword [0x180200f38], 0x84
mov dword [0x180200f0c], 0x134
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x28c
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e897
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e878
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e878
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e873
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e850
cmp edx, 0xe463da3c
je 0x18004ec19
test r8d, r8d
jne 0x18004e830
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e88e
cmp qword [rax + 0x30], 0
jne 0x18004e800
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004e979
mov rax, qword [0x180200d60]
test rax, rax
jne 0x18004e967
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18004e948
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18004e948
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18004e943
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18004e920
cmp edx, 0xe463da3c
je 0x18004ec37
test r8d, r8d
jne 0x18004e900
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18004e95e
cmp qword [rax + 0x30], 0
jne 0x18004e8d0
xor eax, eax
mov qword [0x180200d60], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004ea1f
lea rax, [rbp + 0x247f840]
mov dword [0x180200f3c], 0x10a8
mov qword [0x180200f58], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x180200f28], rax
lea rax, [rbp + 0x2088360]
mov qword [0x180200f30], rax
lea rax, [rbp + 0x2087780]
mov qword [0x180200f00], rax
mov dword [0x180200f40], 0x14b8
mov dword [0x180200f08], 0x10c8
mov dword [0x180200f48], 0x10b8
mov dword [0x180200f20], 0x2e8
mov dword [0x180200f38], 0x74
mov dword [0x180200f0c], 0x12c
mov dword [0x180200f50], 0x20
mov dword [0x180200f1c], 0x24
mov dword [0x180200f4c], 0x146b
mov dword [0x180200f44], 0x25c
mov rsi, qword [rsp + 0x40]
mov eax, 1
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004d610
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004d6e0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004d860
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004d930
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004dab0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004db80
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004dd00
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004ddd0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004df50
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e020
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e1a0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e270
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e3f0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e4c0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e640
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e710
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e890
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18004e960
mov rbx, qword [rsp + 0x50]
mov eax, 1
add rsp, 0x30
pop rbp
ret