Function at 0x18005f2f0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x1800607cd
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.180071cfc
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r12d, r12d
lea rcx, str.rage_scripting_five.dll
add rax, 0x14f70
mov byte [0x1802b43b0], r12b
mov qword [0x1802b4308], rax
mov byte [0x1802b43b1], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1802b43c0]
mov r13d, 0xe463da3c
test rax, rax
jne 0x18005f423
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f408
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f408
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f404
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f3e5
cmp r11d, r13d
je 0x1800607ef
test edx, edx
jne 0x18005f3c9
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18005f419
cmp qword [rax + 0x30], r12
jne 0x18005f3a5
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18005f4eb
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005f4d9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f4be
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f4be
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f4ba
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f49b
cmp r11d, r13d
je 0x18006080c
test edx, edx
jne 0x18005f480
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f4cf
cmp qword [rax + 0x30], r12
jne 0x18005f45c
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18005f5ba
lea rax, [r14 + 0x794784]
mov dword [0x1802b437c], 0x1098
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], 0x150c
mov dword [0x1802b4384], 0x250
mov dword [0x1802b4380], 0x10b8
mov dword [0x1802b4388], 0x10a8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov byte [0x1802b43b0], 1
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005f65f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f644
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f644
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f640
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f621
cmp r11d, r13d
je 0x180060829
test edx, edx
jne 0x18005f605
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f655
cmp qword [rax + 0x30], r12
jne 0x18005f5e1
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x18005f731
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005f71f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f704
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f704
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f700
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f6dd
cmp r11d, 0xe463da3c
je 0x180060846
test edx, edx
jne 0x18005f6c2
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f715
cmp qword [rax + 0x30], r12
jne 0x18005f69e
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18005f7f6
lea rax, [r14 + 0x78f450]
mov dword [0x1802b437c], 0x10b8
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], r13d
mov dword [0x1802b4384], 0x238
mov dword [0x1802b4380], 0x10d8
mov dword [0x1802b4388], 0x10c8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005f89f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f884
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f884
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f880
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f85d
cmp r11d, 0xe463da3c
je 0x180060863
test edx, edx
jne 0x18005f841
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f895
cmp qword [rax + 0x30], r12
jne 0x18005f81d
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18005f96b
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005f959
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f93e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f93e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f93a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f917
cmp r11d, 0xe463da3c
je 0x180060880
test edx, edx
jne 0x18005f8fc
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005f94f
cmp qword [rax + 0x30], r12
jne 0x18005f8d8
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18005fa30
lea rax, [r14 + 0x78c758]
mov dword [0x1802b437c], 0x10b8
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], r13d
mov dword [0x1802b4384], 0x238
mov dword [0x1802b4380], 0x10d8
mov dword [0x1802b4388], 0x10c8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005fad9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fabe
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fabe
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005faba
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fa97
cmp r11d, 0xe463da3c
je 0x18006089d
test edx, edx
jne 0x18005fa7b
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005facf
cmp qword [rax + 0x30], r12
jne 0x18005fa57
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18005fba5
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005fb93
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fb78
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fb78
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fb74
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fb51
cmp r11d, 0xe463da3c
je 0x1800608ba
test edx, edx
jne 0x18005fb36
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005fb89
cmp qword [rax + 0x30], r12
jne 0x18005fb12
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18005fc6a
lea rax, [r14 + 0x78c5e4]
mov dword [0x1802b437c], 0x10b8
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], r13d
mov dword [0x1802b4384], 0x238
mov dword [0x1802b4380], 0x10d8
mov dword [0x1802b4388], 0x10c8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005fd13
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fcf8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fcf8
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fcf4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fcd1
cmp r11d, 0xe463da3c
je 0x1800608d7
test edx, edx
jne 0x18005fcb5
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005fd09
cmp qword [rax + 0x30], r12
jne 0x18005fc91
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18005fde6
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005fdd4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fdb9
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fdb9
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fdb5
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fd92
cmp r11d, 0xe463da3c
je 0x1800608f4
test edx, edx
jne 0x18005fd76
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005fdca
cmp qword [rax + 0x30], r12
jne 0x18005fd52
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18005feab
lea rax, [r14 + 0x787fe4]
mov dword [0x1802b437c], 0x10b8
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], r13d
mov dword [0x1802b4384], 0x218
mov dword [0x1802b4380], 0x10d8
mov dword [0x1802b4388], 0x10c8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18005ff54
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ff39
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ff39
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ff35
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ff12
cmp r11d, 0xe463da3c
je 0x180060911
test edx, edx
jne 0x18005fef6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18005ff4a
cmp qword [rax + 0x30], r12
jne 0x18005fed2
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x180060020
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18006000e
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fff3
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fff3
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ffef
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ffcc
cmp r11d, 0xe463da3c
je 0x18006092e
test edx, edx
jne 0x18005ffb1
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180060004
cmp qword [rax + 0x30], r12
jne 0x18005ff8d
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x1800600ef
lea rax, [r14 + 0x79b5dc]
mov dword [0x1802b437c], 0x10b8
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], r13d
mov dword [0x1802b4384], 0x218
mov dword [0x1802b4380], 0x10d8
mov dword [0x1802b4388], 0x10c8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b43ac], 0x908
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x180060198
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006017d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18006017d
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180060179
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180060156
cmp r11d, 0xe463da3c
je 0x18006094b
test edx, edx
jne 0x18006013a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18006018e
cmp qword [rax + 0x30], r12
jne 0x180060116
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x180060264
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x180060252
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180060237
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180060237
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180060233
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180060210
cmp r11d, 0xe463da3c
je 0x180060968
test edx, edx
jne 0x1800601f5
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180060248
cmp qword [rax + 0x30], r12
jne 0x1800601d1
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x180060329
lea rax, [r14 + 0x7935d0]
mov dword [0x1802b437c], 0x10a8
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], r13d
mov dword [0x1802b4384], 0x218
mov dword [0x1802b4380], 0x10d8
mov dword [0x1802b4388], 0x10b8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x1800603d1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1800603b6
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x1800603b6
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800603b2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006038f
cmp r11d, 0xe463da3c
je 0x180060985
test edx, edx
jne 0x180060374
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x1800603c7
cmp qword [rax + 0x30], r12
jne 0x180060350
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18006049e
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x18006048c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180060471
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180060471
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006046d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006044a
cmp r11d, 0xe463da3c
je 0x1800609a2
test edx, edx
jne 0x18006042e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180060482
cmp qword [rax + 0x30], r12
jne 0x18006040a
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18006056d
lea rax, [r14 + 0x795f9c]
mov dword [0x1802b437c], 0x1098
mov qword [0x1802b4358], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1802b4360], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x1802b4368], rax
mov dword [0x1802b4378], 0x150c
mov dword [0x1802b4384], 0x250
mov dword [0x1802b4380], 0x10b8
mov dword [0x1802b4388], 0x10a8
mov dword [0x1802b438c], 0x2f4
mov dword [0x1802b4390], 0x84
mov dword [0x1802b43a4], 0x134
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5f0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x28c
mov byte [0x1802b43b1], 1
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x180060615
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1800605fa
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x1800605fa
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800605f6
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1800605d3
cmp r11d, 0xe463da3c
je 0x1800609bf
test edx, edx
jne 0x1800605b8
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006060b
cmp qword [rax + 0x30], r12
jne 0x180060594
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x1800606e2
mov rax, qword [0x1802b43c0]
test rax, rax
jne 0x1800606d0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1800606b5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x1800606b5
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800606b1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006068e
cmp r11d, 0xe463da3c
je 0x1800609dc
test edx, edx
jne 0x180060672
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x1800606c6
cmp qword [rax + 0x30], r12
jne 0x18006064e
mov rax, r12
mov qword [0x1802b43c0], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x1800607aa
lea rax, [r14 + 0xcaf950]
mov dword [0x1802b437c], 0x10a8
mov qword [0x1802b4358], rax
lea rcx, [rbp + 0x2087780]
lea rax, [rbp + 0x247f840]
mov dword [0x1802b4378], 0x14b8
mov qword [0x1802b4348], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1802b4350], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1802b4360], rax
mov dword [0x1802b4384], 0x218
mov dword [0x1802b4380], 0x10c8
mov dword [0x1802b4388], 0x10b8
mov dword [0x1802b438c], 0x2e8
mov dword [0x1802b4390], 0x74
mov dword [0x1802b43a4], 0x12c
mov dword [0x1802b4394], 0x20
mov dword [0x1802b439c], 0x24
mov dword [0x1802b4398], 0x5e0
mov dword [0x1802b43a8], 0x146b
mov dword [0x1802b43a0], 0x25c
mov qword [0x1802b4368], rcx
call fcn.18005e6b4
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x18005e028]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f41c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f4d2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f658
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f718
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f898
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f952
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fad2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fb8c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fd0c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fdcd
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ff4d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180060007
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180060191
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006024b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x1800603ca
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180060485
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006060e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x1800606c9