Function at 0x18005e9fc
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18006020a
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.180071ae8
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r12d, r12d
mov r13d, 0xe463da3c
add rax, 0x15300
mov byte [0x18018254c], r12b
mov qword [0x1801824c8], rax
mov rax, qword [0x180182560]
mov byte [0x18018254d], r12b
test rax, rax
jne 0x18005eb22
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005eb07
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005eb07
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005eb03
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005eae4
cmp r11d, r13d
je 0x18006022c
test edx, edx
jne 0x18005eac8
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18005eb18
cmp qword [rax + 0x30], r12
jne 0x18005eaa4
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b3095_GameProcess.exe
call rax
test rax, rax
jne 0x18005ebea
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005ebd8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ebbd
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ebbd
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ebb9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005eb9a
cmp r11d, r13d
je 0x180060249
test edx, edx
jne 0x18005eb7f
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ebce
cmp qword [rax + 0x30], r12
jne 0x18005eb5b
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b3095_GTAProcess.exe
call rax
test rax, rax
je 0x18005ece0
lea rax, [rbp + 0x2593320]
mov dword [0x180182514], 8
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1f58b58]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x20025b8]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x20019e0]
mov qword [0x180182500], rax
lea rax, [rbp + 0x1624f80]
mov qword [0x180182558], rax
lea rax, [r14 + 0x2ef5870]
mov qword [0x1801824b8], rax
lea rax, [r14 + 0xa596b0]
mov qword [0x1801824a8], rax
mov dword [0x180182518], 0x1098
mov dword [0x180182510], 0x150c
mov dword [0x18018251c], 0x10b8
mov dword [0x180182524], 0x10a8
mov dword [0x180182528], 0x2f4
mov dword [0x18018252c], 0x84
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov qword [0x1801824b0], 0x161d8f9
mov byte [0x18018254e], 1
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005ed84
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ed69
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ed69
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ed65
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ed46
cmp r11d, r13d
je 0x180060266
test edx, edx
jne 0x18005ed2b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ed7a
cmp qword [rax + 0x30], r12
jne 0x18005ed07
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18005ee4c
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005ee3a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ee1f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ee1f
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ee1b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005edfc
cmp r11d, r13d
je 0x180060283
test edx, edx
jne 0x18005ede1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ee30
cmp qword [rax + 0x30], r12
jne 0x18005edbd
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18005ef33
lea rax, [rbp + 0x15ea290]
mov dword [0x180182518], 0x1098
mov qword [0x180182558], rax
lea rax, [r14 + 0x794784]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x180182500], rax
mov dword [0x180182510], 0x150c
mov dword [0x180182520], 0x250
mov dword [0x18018251c], 0x10b8
mov dword [0x180182524], 0x10a8
mov dword [0x180182528], 0x2f4
mov dword [0x18018252c], 0x84
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182514], 8
mov dword [0x180182534], 0x5f0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov byte [0x18018254c], 1
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005efd7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005efbc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005efbc
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005efb8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ef99
cmp r11d, r13d
je 0x1800602a0
test edx, edx
jne 0x18005ef7e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005efcd
cmp qword [rax + 0x30], r12
jne 0x18005ef5a
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x18005f0a9
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f097
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f07c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f07c
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f078
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f055
cmp r11d, 0xe463da3c
je 0x1800602bd
test edx, edx
jne 0x18005f03a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f08d
cmp qword [rax + 0x30], r12
jne 0x18005f016
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18005f18d
lea rax, [rbp + 0x15d6cec]
mov dword [0x180182518], 0x10b8
mov qword [0x180182558], rax
lea rax, [r14 + 0x78f450]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x180182500], rax
mov dword [0x180182510], r13d
mov dword [0x180182520], 0x238
mov dword [0x18018251c], 0x10d8
mov dword [0x180182524], 0x10c8
mov dword [0x180182528], 0x2f4
mov dword [0x18018252c], 0x84
mov dword [0x180182514], 8
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov byte [0x18018254f], 1
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f235
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f21a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f21a
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f216
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f1f3
cmp r11d, 0xe463da3c
je 0x1800602da
test edx, edx
jne 0x18005f1d8
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f22b
cmp qword [rax + 0x30], r12
jne 0x18005f1b4
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18005f302
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f2f0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f2d5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f2d5
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f2d1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f2ae
cmp r11d, 0xe463da3c
je 0x1800602f7
test edx, edx
jne 0x18005f292
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f2e6
cmp qword [rax + 0x30], r12
jne 0x18005f26e
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18005f3df
lea rax, [rbp + 0x15dfe20]
mov dword [0x180182518], 0x10b8
mov qword [0x180182558], rax
lea rax, [r14 + 0x78c758]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x180182500], rax
mov dword [0x180182510], r13d
mov dword [0x180182520], 0x238
mov dword [0x18018251c], 0x10d8
mov dword [0x180182524], 0x10c8
mov dword [0x180182528], 0x2f4
mov dword [0x180182514], 8
mov dword [0x18018252c], 0x84
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f488
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f46d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f46d
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f469
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f446
cmp r11d, 0xe463da3c
je 0x180060314
test edx, edx
jne 0x18005f42a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f47e
cmp qword [rax + 0x30], r12
jne 0x18005f406
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18005f555
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f543
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f528
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f528
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f524
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f501
cmp r11d, 0xe463da3c
je 0x180060331
test edx, edx
jne 0x18005f4e5
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f539
cmp qword [rax + 0x30], r12
jne 0x18005f4c1
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18005f632
lea rax, [rbp + 0x15deeb0]
mov dword [0x180182518], 0x10b8
mov qword [0x180182558], rax
lea rax, [r14 + 0x78c5e4]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x180182500], rax
mov dword [0x180182510], r13d
mov dword [0x180182520], 0x238
mov dword [0x18018251c], 0x10d8
mov dword [0x180182524], 0x10c8
mov dword [0x180182528], 0x2f4
mov dword [0x18018252c], 0x84
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182514], 8
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f6db
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f6c0
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f6c0
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f6bc
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f699
cmp r11d, 0xe463da3c
je 0x18006034e
test edx, edx
jne 0x18005f67d
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f6d1
cmp qword [rax + 0x30], r12
jne 0x18005f659
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18005f7ad
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f79b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f780
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f780
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f77c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f759
cmp r11d, 0xe463da3c
je 0x18006036b
test edx, edx
jne 0x18005f73e
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f791
cmp qword [rax + 0x30], r12
jne 0x18005f71a
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18005f88a
lea rax, [rbp + 0x15cd2c0]
mov dword [0x180182518], 0x10b8
mov qword [0x180182558], rax
lea rax, [r14 + 0x787fe4]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x180182500], rax
mov dword [0x180182510], r13d
mov dword [0x180182520], 0x218
mov dword [0x18018251c], 0x10d8
mov dword [0x180182524], 0x10c8
mov dword [0x180182528], 0x2f4
mov dword [0x18018252c], 0x84
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182514], 8
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f933
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f918
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f918
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f914
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f8f1
cmp r11d, 0xe463da3c
je 0x180060388
test edx, edx
jne 0x18005f8d5
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f929
cmp qword [rax + 0x30], r12
jne 0x18005f8b1
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18005f9ff
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005f9ed
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f9d2
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f9d2
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f9ce
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f9ab
cmp r11d, 0xe463da3c
je 0x1800603a5
test edx, edx
jne 0x18005f990
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f9e3
cmp qword [rax + 0x30], r12
jne 0x18005f96c
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18005fae6
lea rax, [rbp + 0x15b1008]
mov dword [0x180182518], 0x10b8
mov qword [0x180182558], rax
lea rax, [r14 + 0x79b5dc]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x180182500], rax
mov dword [0x180182510], r13d
mov dword [0x180182520], 0x218
mov dword [0x18018251c], 0x10d8
mov dword [0x180182524], 0x10c8
mov dword [0x180182528], 0x2f4
mov dword [0x18018252c], 0x84
mov dword [0x180182514], 8
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182548], 0x908
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005fb8f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fb74
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fb74
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fb70
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fb4d
cmp r11d, 0xe463da3c
je 0x1800603c2
test edx, edx
jne 0x18005fb31
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005fb85
cmp qword [rax + 0x30], r12
jne 0x18005fb0d
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18005fc5c
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005fc4a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fc2f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fc2f
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fc2b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fc08
cmp r11d, 0xe463da3c
je 0x1800603df
test edx, edx
jne 0x18005fbec
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005fc40
cmp qword [rax + 0x30], r12
jne 0x18005fbc8
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18005fd39
lea rax, [rbp + 0x159b224]
mov dword [0x180182518], 0x10a8
mov qword [0x180182558], rax
lea rax, [r14 + 0x7935d0]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x180182500], rax
mov dword [0x180182510], r13d
mov dword [0x180182520], 0x218
mov dword [0x18018251c], 0x10d8
mov dword [0x180182524], 0x10b8
mov dword [0x180182528], 0x2f4
mov dword [0x180182514], 8
mov dword [0x18018252c], 0x84
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005fde2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fdc7
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fdc7
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fdc3
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fda0
cmp r11d, 0xe463da3c
je 0x1800603fc
test edx, edx
jne 0x18005fd84
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005fdd8
cmp qword [rax + 0x30], r12
jne 0x18005fd60
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18005feaf
mov rax, qword [0x180182560]
test rax, rax
jne 0x18005fe9d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fe82
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fe82
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fe7e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fe5b
cmp r11d, 0xe463da3c
je 0x180060419
test edx, edx
jne 0x18005fe3f
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005fe93
cmp qword [rax + 0x30], r12
jne 0x18005fe1b
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18005ff96
lea rax, [rbp + 0x160ff90]
mov dword [0x180182518], 0x1098
mov qword [0x180182558], rax
lea rax, [r14 + 0x795f9c]
mov qword [0x1801824f0], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1801824e8], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1801824f8], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x180182500], rax
mov dword [0x180182510], 0x150c
mov dword [0x180182520], 0x250
mov dword [0x180182514], 8
mov dword [0x18018251c], 0x10b8
mov dword [0x180182524], 0x10a8
mov dword [0x180182528], 0x2f4
mov dword [0x18018252c], 0x84
mov dword [0x180182540], 0x134
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5f0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x28c
mov byte [0x18018254d], 1
mov rax, qword [0x180182560]
test rax, rax
jne 0x18006003f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180060024
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180060024
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180060020
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fffd
cmp r11d, 0xe463da3c
je 0x180060436
test edx, edx
jne 0x18005ffe1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180060035
cmp qword [rax + 0x30], r12
jne 0x18005ffbd
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18006010c
mov rax, qword [0x180182560]
test rax, rax
jne 0x1800600fa
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1800600df
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x1800600df
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800600db
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1800600b8
cmp r11d, 0xe463da3c
je 0x180060453
test edx, edx
jne 0x18006009c
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x1800600f0
cmp qword [rax + 0x30], r12
jne 0x180060078
mov rax, r12
mov qword [0x180182560], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x1800601ec
lea rax, [rbp + 0x1561e30]
mov dword [0x180182518], 0x10a8
mov qword [0x180182558], rax
lea rcx, [rbp + 0x2088360]
lea rax, [r14 + 0xcaf950]
mov qword [0x1801824f8], rcx
mov qword [0x1801824f0], rax
lea rcx, [rbp + 0x2087780]
lea rax, [rbp + 0x247f840]
mov dword [0x180182510], 0x14b8
mov qword [0x1801824e0], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1801824e8], rax
mov dword [0x180182520], 0x218
mov dword [0x18018251c], 0x10c8
mov dword [0x180182524], 0x10b8
mov dword [0x180182528], 0x2e8
mov dword [0x180182514], 8
mov dword [0x18018252c], 0x74
mov dword [0x180182540], 0x12c
mov dword [0x180182530], 0x20
mov dword [0x180182538], 0x24
mov dword [0x180182534], 0x5e0
mov dword [0x180182544], 0x146b
mov dword [0x18018253c], 0x25c
mov qword [0x180182500], rcx
mov qword [rsp + 0x28], r12
lea r8, [0x18005e0f0]
mov r9, r15
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005eb1b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ebd1
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ed7d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ee33
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005efd0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f090
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f22e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f2e9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f481
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f53c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f6d4
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f794
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f92c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f9e6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fb88
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fc43
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fddb
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fe96
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180060038
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x1800600f3