Function at 0x1800099e8
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp + 0x140], rax
cmp edx, 1
jne 0x18000ad1b
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
movabs rax, 0xcf18372c8f01167b
lea rcx, [rbp + 0xc0]
mov qword [rbp], rax
movabs rdi, 0xf3a7ae5b13ee87ee
movabs rax, 0x2196d7c9bac33b78
mov qword [rbp + 0x78], rdi
mov qword [rbp + 8], rax
movabs r12, 0xfa28176eb7212e4f
movabs rax, 0x86d1b8e239873fdd
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x10], rax
movabs r15, 0x1eb6e8e985e30458
movabs rax, 0x9dade7e5f5f7f10c
mov qword [rbp + 0x48], r15
movups xmm0, xmmword [rbp + 0x40]
movabs rbx, 0x762c4d6f4dcc642a
mov qword [rbp + 0x28], rax
movabs r13, 0x6b3e2d7843d6c47f
movaps xmmword [rbp + 0xc0], xmm0
movabs rax, 0xb2f1fada19bf0bfd
mov qword [rbp + 0x50], rax
movabs rsi, 0x3609ccbeb0323201
movabs rax, 0x5614794f75fc4412
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x58], rax
mov r14d, 7
movups xmm1, xmmword [rbp + 0x50]
movabs rax, 0x5f090d4100f6f147
movaps xmmword [rbp + 0xd0], xmm1
mov r8d, r14d
mov qword [rbp + 0x60], rax
movabs rax, 0xa58da5ddd5c5c42c
mov qword [rbp + 0x68], rax
movabs rax, 0x3609ccbeb0323230
movups xmm0, xmmword [rbp + 0x60]
movaps xmmword [rbp + 0xe0], xmm0
vmovdqu ymm0, ymmword [rbp]
mov qword [rbp + 0x70], rax
vmovups xmm1, xmmword [rbp + 0x70]
vmovaps xmmword [rbp + 0xf0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rdi
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call fcn.180009740
mov qword [0x180107430], rax
movabs rax, 0xcf18372c8f01167b
mov qword [rbp], rax
movabs rax, 0x2196d7c9bac33b78
mov qword [rbp + 8], rax
movabs rax, 0x86d1b8e239873fdd
mov qword [rbp + 0x10], rax
movabs rax, 0x9dade7e5f5f7f10c
mov qword [rbp + 0x28], rax
movabs rax, 0x8b281768b7212e4f
mov qword [rbp + 0x40], rax
movabs rax, 0xb4f18cd619be07fd
mov qword [rbp + 0x50], rax
movabs rax, 0x5614084f7dff441e
mov qword [rbp + 0x58], rax
movabs rax, 0x4b010d4763e9e440
mov qword [rbp + 0x60], rax
movabs rax, 0xa9eec7d6cdd7c938
mov qword [rbp + 0x68], rax
movabs rax, 0x229fffd900a0021
mov qword [rbp + 0x70], rax
movabs rax, 0xf3929e7b51d6a7d6
mov qword [rbp + 0x48], r15
movups xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rdi
movaps xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rbp + 0x50]
lea rcx, [rbp + 0xc0]
movups xmm0, xmmword [rbp + 0x60]
mov r8d, r14d
movaps xmmword [rbp + 0xd0], xmm1
movups xmm1, xmmword [rbp + 0x70]
movaps xmmword [rbp + 0xf0], xmm1
movaps xmmword [rbp + 0xe0], xmm0
vmovdqu ymm0, ymmword [rbp]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call fcn.180009740
mov qword [0x180107460], rax
lea rcx, [rbp + 0xc0]
movabs rax, 0xcf18372c8f01167b
mov qword [rbp + 0x18], rbx
mov qword [rbp], rax
movabs rbx, 0x8c2d1715b7212e4f
movabs rax, 0x2196d7c9bac33b78
mov qword [rbp + 0x40], rbx
mov qword [rbp + 8], rax
xor r8d, r8d
movabs rax, 0x86d1b8e239873fdd
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x10], rax
movabs rax, 0x9dade7e5f5f7f10c
mov qword [rbp + 0x28], rax
movabs rax, 0x14b6e8f69af70958
mov qword [rbp + 0x48], rax
movabs rax, 0xa6e68dc20fb21fe8
movups xmm0, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0x50], rax
movabs rax, 0x35696d5c75ec5c1e
mov qword [rbp + 0x58], rax
movabs rax, 0x5f1e184e63e6f35f
movups xmm1, xmmword [rbp + 0x50]
movaps xmmword [rbp + 0xd0], xmm1
mov qword [rbp + 0x60], rax
movabs rax, 0xbdeed7c5b7cfd14f
mov qword [rbp + 0x68], rax
movabs rax, 0x3609ccbeb0320733
movups xmm0, xmmword [rbp + 0x60]
movaps xmmword [rbp + 0xe0], xmm0
vmovdqu ymm0, ymmword [rbp]
mov qword [rbp + 0x70], rax
vmovups xmm1, xmmword [rbp + 0x70]
vmovaps xmmword [rbp + 0xf0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rdi
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call fcn.180009740
mov qword [0x180107470], rax
movabs rax, 0xcf18372c8f01167b
mov qword [rbp + 0xc0], rax
movabs rax, 0x2196d7c9bac33b78
mov qword [rbp + 0xc8], rax
movabs rax, 0x86d1b8e239873fdd
mov qword [rbp + 0xd0], rax
movabs rax, 0x762c4d6f4dcc642a
mov qword [rbp + 0xd8], rax
movabs rax, 0x9dade7e5f5f7f10c
mov qword [rbp + 0xe8], rax
movabs rax, 0xcaa26014a8dfa543
mov qword [rbp + 0x100], rax
movabs rax, 0x8219cd31916ca860
mov qword [rbp + 0x108], rax
movabs rax, 0x664c1c4adca2fb65
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], rdi
vmovdqu ymm0, ymmword [rbp + 0xc0]
mov qword [rbp + 0x110], rax
movabs rcx, 0xbe6bbd2d89b84b34
movabs rax, 0x5b003d17f8473d52
mov qword [rbp + 0xa8], rcx
mov qword [rbp + 0x118], rax
xor r8d, r8d
movabs rax, 0x886ee8c0f77fb6e7
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x120], rax
movabs rax, 0x15b6e8f69af70958
mov qword [rbp + 0x48], rax
movabs rax, 0xa6928ec200bf1fe5
mov qword [rbp + 0x50], rax
movabs rax, 0x4e186d5072ec5018
mov qword [rbp + 0x58], rax
movabs rax, 0x591e194f63effc5f
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0xe0]
mov qword [rbp + 0x60], rax
movabs rax, 0xbd9ad2c5cac8d138
mov qword [rbp + 0x68], rax
movabs rax, 0x754cec8d88120a35
mov qword [rbp + 0x70], rax
movabs rax, 0xcb87966f33deb1ce
mov qword [rbp + 0x78], rax
movabs rax, 0xea93543499ef8501
mov qword [rbp + 0x80], rax
movabs rax, 0xba2ded09d44cea58
mov qword [rbp + 0x88], rax
movabs rax, 0x526c2e0cfce0c345
mov qword [rbp + 0x90], rax
movabs rax, 0x7b397b37ba7f1d6a
mov qword [rbp + 0x98], rax
movabs rax, 0x886ee882b35f85d4
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp + 0x100]
mov qword [rbp + 0xa0], rax
vmovdqa xmm2, xmmword [rbp + 0xa0]
mov qword [rbp + 0x128], rcx
lea rcx, [rbp + 0x40]
vxorps xmm2, xmm2, xmmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x60], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa xmmword [rbp + 0xa0], xmm2
vmovdqa ymmword [rbp + 0x80], ymm1
vzeroupper
call fcn.180009740
mov qword [0x180107450], rax
movabs rcx, 0x9dade7e5f5f7f10c
movabs rax, 0xcf18372c8f01167b
mov qword [rbp], r12
mov qword [rbp + 0x40], rax
mov r8d, r14d
movabs rax, 0x2196d7c9bac33b78
mov qword [rbp + 8], r15
movups xmm0, xmmword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x86d1b8e239873fdd
mov qword [rbp + 0x50], rax
movabs rax, 0x762c4d6f4dcc642a
mov qword [rbp + 0x58], rax
movabs rax, 0xbff1fada19bf0bfd
mov qword [rbp + 0x10], rax
movabs rax, 0x56136d506df34412
movaps xmmword [rbp + 0xc0], xmm0
vmovdqu ymm0, ymmword [rbp + 0x40]
mov qword [rbp + 0x18], rax
movabs rax, 0x6b3e2d780193e440
vmovups xmm1, xmmword [rbp + 0x10]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rcx
vmovups xmm2, xmmword [rbp + 0x20]
mov qword [rbp + 0x60], r13
vmovaps xmmword [rbp + 0xd0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
mov qword [rbp + 0x68], rcx
vxorps xmm2, xmm2, xmmword [rbp + 0x60]
vmovdqa xmmword [rbp + 0xe0], xmm2
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.180009740
xor r14d, r14d
mov qword [0x180107458], rax
mov rax, qword [0x1801073c8]
or r13d, 0xffffffff
mov r12d, 0xe463da3c
lea r15d, [r14 + 1]
test rax, rax
jne 0x18000a144
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a129
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a129
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a125
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a106
cmp r11d, r12d
je 0x18000ad4d
test edx, edx
jne 0x18000a0e9
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a13a
cmp qword [rax + 0x30], r14
jne 0x18000a0c5
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18000a20a
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a1fc
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a1e1
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a1e1
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a1dd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a1be
cmp r11d, r12d
je 0x18000ad6a
test edx, edx
jne 0x18000a1a1
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a1f2
cmp qword [rax + 0x30], r14
jne 0x18000a17d
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18000a26e
mov dword [0x180107448], 0x10a8
mov dword [0x180107444], 0x14b8
mov dword [0x18010747c], 0x10c8
mov dword [0x180107468], 0x2e8
mov dword [0x18010744c], 0x74
mov dword [0x180107478], 0x12c
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x25c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a313
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a2f8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a2f8
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a2f4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a2d5
cmp r11d, r12d
je 0x18000ad87
test edx, edx
jne 0x18000a2b9
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a309
cmp qword [rax + 0x30], r14
jne 0x18000a295
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18000a3d8
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a3ca
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a3af
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a3af
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a3ab
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a38c
cmp r11d, r12d
je 0x18000ada4
test edx, edx
jne 0x18000a370
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a3c0
cmp qword [rax + 0x30], r14
jne 0x18000a34c
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18000a43c
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x14e0
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a4e1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a4c6
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a4c6
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a4c2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a4a3
cmp r11d, r12d
je 0x18000adc1
test edx, edx
jne 0x18000a487
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a4d7
cmp qword [rax + 0x30], r14
jne 0x18000a463
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18000a5a6
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a598
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a57d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a57d
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a579
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a55a
cmp r11d, r12d
je 0x18000adde
test edx, edx
jne 0x18000a53e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a58e
cmp qword [rax + 0x30], r14
jne 0x18000a51a
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18000a60a
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x1530
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a6af
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a694
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a694
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a690
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a671
cmp r11d, r12d
je 0x18000adfb
test edx, edx
jne 0x18000a655
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a6a5
cmp qword [rax + 0x30], r14
jne 0x18000a631
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18000a8e4
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a766
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a74b
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a74b
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a747
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a728
cmp r11d, r12d
je 0x18000ae18
test edx, edx
jne 0x18000a70c
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a75c
cmp qword [rax + 0x30], r14
jne 0x18000a6e8
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
jne 0x18000a8e4
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a81e
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a803
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a803
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a7ff
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a7e0
cmp r11d, r12d
je 0x18000ae35
test edx, edx
jne 0x18000a7c3
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a814
cmp qword [rax + 0x30], r14
jne 0x18000a79f
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
test rax, rax
jne 0x18000a8e4
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a8d6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a8bb
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a8bb
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a8b7
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a898
cmp r11d, r12d
je 0x18000ae52
test edx, edx
jne 0x18000a87b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a8cc
cmp qword [rax + 0x30], r14
jne 0x18000a857
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18000a948
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x1530
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a9ed
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a9d2
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a9d2
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a9ce
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a9af
cmp r11d, r12d
je 0x18000ae6f
test edx, edx
jne 0x18000a993
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a9e3
cmp qword [rax + 0x30], r14
jne 0x18000a96f
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18000aab2
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000aaa4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000aa89
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000aa89
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000aa85
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000aa66
cmp r11d, r12d
je 0x18000ae8c
test edx, edx
jne 0x18000aa4a
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000aa9a
cmp qword [rax + 0x30], r14
jne 0x18000aa26
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18000ab16
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x14e0
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000abbb
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000aba0
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000aba0
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000ab9c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000ab7d
cmp r11d, r12d
je 0x18000aea9
test edx, edx
jne 0x18000ab61
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000abb1
cmp qword [rax + 0x30], r14
jne 0x18000ab3d
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
test rax, rax
jne 0x18000ac80
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000ac72
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000ac57
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000ac57
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000ac53
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000ac34
cmp r11d, r12d
je 0x18000aec6
test edx, edx
jne 0x18000ac18
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000ac68
cmp qword [rax + 0x30], r14
jne 0x18000abf4
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18000ace4
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x14e0
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov qword [rsp + 0x48], r14
lea rcx, [0x1800072f8]
mov qword [rsp + 0x40], r14
xor r9d, r9d
mov qword [rsp + 0x38], r14
xor r8d, r8d
mov qword [rsp + 0x30], rcx
xor edx, edx
mov qword [rsp + 0x28], r14
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
call qword [0x180107148]
mov al, 1
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.18004c6f0
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a13d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a1f5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a30c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a3c3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a4da
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a591
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a6a8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a75f
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a817
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a8cf
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a9e6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000aa9d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000abb4
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000ac6b