Function at 0x180009924
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180106010]
xor rax, rsp
mov qword [rbp + 0x140], rax
cmp edx, 1
jne 0x18000ac2a
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
movabs rax, 0x7ccd91e3db71ab11
lea rdx, [rbp]
mov qword [rbp + 0x40], rax
lea rcx, [rbp + 0xc0]
movabs rax, 0x5e8d817e72954f66
movabs rsi, 0x202aa264a040f64c
mov qword [rbp + 0x48], rax
mov edi, 0x40
movabs rax, 0x73de815dcf64ec8b
mov qword [rbp + 0x78], rsi
mov qword [rbp + 0x50], rax
movabs rbx, 0xa03cc6df47782905
movabs rax, 0xdeb07c28884e4cc8
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x58], rax
movabs r14, 0x1dc06a91cc1b6ff
movabs rax, 0x966829cad61e0dca
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x68], rax
movabs r13, 0x49fdb1a1e3519325
movabs rax, 0x47fec365ef5cd8ab
mov qword [rbp], r13
mov qword [rbp + 0x10], rax
movabs r12, 0x61adbe5e4db57046
movabs rax, 0xfe884808b07e6cf0
mov qword [rbp + 8], r12
mov qword [rbp + 0x18], rax
mov r8d, edi
movabs rax, 0x940be6e604581c3d
mov qword [rbp + 0x38], rsi
mov qword [rbp + 0x20], rax
movabs rax, 0xae486bf2f62c38ea
mov qword [rbp + 0x28], rax
movabs rax, 0x1dc06a91cc1b6ce
mov qword [rbp + 0x30], rax
call sub.VCRUNTIME140.dll_memcpy
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
lea r15d, [rdi - 0x39]
vmovdqa ymmword [rbp + 0xe0], ymm1
mov r8d, r15d
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.180009678
mov qword [0x1801073e8], rax
lea rdx, [rbp]
movabs rax, 0x7ccd91e3db71ab11
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x40], rax
lea rcx, [rbp + 0xc0]
movabs rax, 0x5e8d817e72954f66
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x48], rax
mov r8d, edi
movabs rax, 0x73de815dcf64ec8b
mov qword [rbp + 0x78], rsi
mov qword [rbp + 0x50], rax
movabs rax, 0xdeb07c28884e4cc8
mov qword [rbp + 0x58], rax
movabs rax, 0x966829cad61e0dca
mov qword [rbp + 0x68], rax
movabs rax, 0x38fdb1a7e3519325
mov qword [rbp], rax
movabs rax, 0x41feb569ef5dd4ab
mov qword [rbp + 0x10], rax
movabs rax, 0xfe883908b87d6cfc
mov qword [rbp + 0x18], rax
movabs rax, 0x8003e6e06747093a
mov qword [rbp + 0x20], rax
movabs rax, 0xa22b09f9ee3e35fe
mov qword [rbp + 0x28], rax
movabs rax, 0x35fc35ea3cf984df
mov qword [rbp + 0x30], rax
movabs rax, 0x201f9244e278d674
mov qword [rbp + 0x38], rax
mov qword [rbp + 8], r12
call sub.VCRUNTIME140.dll_memcpy
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0xe0], ymm1
mov r8d, r15d
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.180009678
mov qword [0x180107418], rax
lea rdx, [rbp]
movabs rax, 0x7ccd91e3db71ab11
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x40], rax
lea rcx, [rbp + 0xc0]
movabs rax, 0x5e8d817e72954f66
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x48], rax
movabs rbx, 0x3ff8b1dae3519325
movabs rax, 0x73de815dcf64ec8b
mov qword [rbp + 0x78], rsi
mov qword [rbp + 0x50], rax
mov r8d, edi
movabs rax, 0xdeb07c28884e4cc8
mov qword [rbp], rbx
mov qword [rbp + 0x58], rax
movabs rax, 0x966829cad61e0dca
mov qword [rbp + 0x68], rax
movabs rax, 0x6badbe4152a17d46
mov qword [rbp + 8], rax
movabs rax, 0x53e9b47df951ccbe
mov qword [rbp + 0x10], rax
movabs rax, 0x9df55c1bb06e74fc
mov qword [rbp + 0x18], rax
movabs rax, 0x941cf3e967481e25
mov qword [rbp + 0x20], rax
movabs rax, 0xb62b19ea94262d89
mov qword [rbp + 0x28], rax
movabs rax, 0x1dc06a91cc183cd
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rsi
call sub.VCRUNTIME140.dll_memcpy
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0xe0], ymm1
xor r8d, r8d
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.180009678
mov qword [0x180107428], rax
movabs rdi, 0xa03cc6df47782905
movabs rax, 0x7ccd91e3db71ab11
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xc0], rax
movabs rcx, 0x37e01ba26322db12
movabs rax, 0x5e8d817e72954f66
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0xc8], rax
movabs rax, 0x73de815dcf64ec8b
mov qword [rbp + 0xd0], rax
movabs rax, 0xdeb07c28884e4cc8
mov qword [rbp + 0xd8], rax
movabs rax, 0x966829cad61e0dca
mov qword [rbp + 0xe8], rax
movabs rax, 0xc8731cdbbc35c2d9
mov qword [rbp + 0x100], rax
movabs rax, 0x919e1c56efdca6ae
mov qword [rbp + 0x108], rax
movabs rax, 0xee5386d56e10a993
mov qword [rbp + 0x110], rax
movabs rax, 0xd04cbd60bf372310
mov qword [rbp + 0x118], rax
movabs rax, 0x89db82372ece13ad
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xf8], rsi
mov qword [rbp + 0x128], rcx
mov qword [rbp + 0x40], rbx
vmovdqu ymm0, ymmword [rbp + 0xc0]
movabs rax, 0x6aadbe4152a17d46
mov qword [rbp + 0xa8], rcx
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x40]
movabs rax, 0x539db77df65cccb3
xor r8d, r8d
mov qword [rbp + 0x50], rax
movabs rax, 0xe6845c17b76e78fa
mov qword [rbp + 0x58], rax
movabs rax, 0x921cf2e867411125
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0xe0]
mov qword [rbp + 0x60], rax
movabs rax, 0xb65f1ceae9212dfe
mov qword [rbp + 0x68], rax
movabs rax, 0x4299269a24e18ecb
mov qword [rbp + 0x70], rax
movabs rax, 0x180a9a508070c06c
mov qword [rbp + 0x78], rax
movabs rax, 0xe84228fb8d05e29b
mov qword [rbp + 0x80], rax
movabs rax, 0xa9aa3c6eaafce496
mov qword [rbp + 0x88], rax
movabs rax, 0xda73b4934e5291b3
mov qword [rbp + 0x90], rax
movabs rax, 0xf075fb40fd0f0328
mov qword [rbp + 0x98], rax
movabs rax, 0x89db82756aee209e
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp + 0x100]
mov qword [rbp + 0xa0], rax
vmovdqa xmm2, xmmword [rbp + 0xa0]
vpxor xmm2, xmm2, xmmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x60], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa xmmword [rbp + 0xa0], xmm2
vmovdqa ymmword [rbp + 0x80], ymm1
vzeroupper
call fcn.180009678
mov qword [0x180107408], rax
movabs rcx, 0x966829cad61e0dca
movabs rax, 0x7ccd91e3db71ab11
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x40], rax
mov r8d, r15d
movabs rax, 0x5e8d817e72954f66
mov qword [rbp + 0x68], rcx
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0xc0]
movabs rax, 0x73de815dcf64ec8b
mov qword [rbp], r13
mov qword [rbp + 0x50], rax
movabs rax, 0xdeb07c28884e4cc8
mov qword [rbp + 0x58], rax
movabs rax, 0x4afec365ef5cd8ab
mov qword [rbp + 0x10], rax
movabs rax, 0xfe8f5c17a8716cf0
mov qword [rbp + 0x18], rax
movabs rax, 0xa03cc6df053d093a
movups xmm1, xmmword [rbp + 0x10]
mov qword [rbp + 8], r12
movups xmm0, xmmword [rbp]
mov qword [rbp + 0x20], rax
movups xmm2, xmmword [rbp + 0x20]
mov qword [rbp + 0x60], rdi
movups xmmword [rbp + 0xc0], xmm0
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor xmm2, xmm2, xmmword [rbp + 0x60]
vmovups xmmword [rbp + 0xd0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa xmmword [rbp + 0xe0], xmm2
vmovdqa ymmword [rbp + 0xc0], ymm1
vzeroupper
call fcn.180009678
or r13d, 0xffffffff
mov qword [0x180107410], rax
mov rax, qword [0x180107380]
xor r14d, r14d
mov r12d, 0xe463da3c
lea r15d, [r14 + 1]
test rax, rax
jne 0x18000a050
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a035
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a035
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a031
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a012
cmp r11d, r12d
je 0x18000ac5c
test edx, edx
jne 0x180009ff5
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a046
cmp qword [rax + 0x30], r14
jne 0x180009fd1
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18000a115
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a107
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a0ec
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a0ec
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a0e8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a0c9
cmp r11d, r12d
je 0x18000ac79
test edx, edx
jne 0x18000a0ad
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a0fd
cmp qword [rax + 0x30], r14
jne 0x18000a089
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18000a179
mov dword [0x180107400], 0x10a8
mov dword [0x1801073fc], 0x14b8
mov dword [0x180107434], 0x10c8
mov dword [0x180107420], 0x2e8
mov dword [0x180107404], 0x74
mov dword [0x180107430], 0x12c
mov dword [0x1801073f0], 0x20
mov dword [0x180107424], 0x24
mov dword [0x1801073f4], 0x146b
mov dword [0x1801073f8], 0x25c
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a21e
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a203
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a203
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a1ff
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a1e0
cmp r11d, r12d
je 0x18000ac96
test edx, edx
jne 0x18000a1c4
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a214
cmp qword [rax + 0x30], r14
jne 0x18000a1a0
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18000a2e3
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a2d5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a2ba
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a2ba
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a2b6
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a297
cmp r11d, r12d
je 0x18000acb3
test edx, edx
jne 0x18000a27b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a2cb
cmp qword [rax + 0x30], r14
jne 0x18000a257
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18000a347
mov dword [0x180107400], 0x10b8
mov dword [0x1801073fc], 0x14e0
mov dword [0x180107434], 0x10d8
mov dword [0x180107420], 0x2f4
mov dword [0x180107404], 0x84
mov dword [0x180107430], 0x134
mov dword [0x1801073f0], 0x20
mov dword [0x180107424], 0x24
mov dword [0x1801073f4], 0x146b
mov dword [0x1801073f8], 0x28c
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a3ec
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a3d1
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a3d1
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a3cd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a3ae
cmp r11d, r12d
je 0x18000acd0
test edx, edx
jne 0x18000a392
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a3e2
cmp qword [rax + 0x30], r14
jne 0x18000a36e
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18000a4b1
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a4a3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a488
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a488
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a484
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a465
cmp r11d, r12d
je 0x18000aced
test edx, edx
jne 0x18000a449
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a499
cmp qword [rax + 0x30], r14
jne 0x18000a425
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18000a515
mov dword [0x180107400], 0x10b8
mov dword [0x1801073fc], 0x1530
mov dword [0x180107434], 0x10d8
mov dword [0x180107420], 0x2f4
mov dword [0x180107404], 0x84
mov dword [0x180107430], 0x134
mov dword [0x1801073f0], 0x20
mov dword [0x180107424], 0x24
mov dword [0x1801073f4], 0x146b
mov dword [0x1801073f8], 0x28c
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a5ba
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a59f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a59f
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a59b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a57c
cmp r11d, r12d
je 0x18000ad0a
test edx, edx
jne 0x18000a560
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a5b0
cmp qword [rax + 0x30], r14
jne 0x18000a53c
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18000a7ef
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a671
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a656
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a656
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a652
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a633
cmp r11d, r12d
je 0x18000ad27
test edx, edx
jne 0x18000a617
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a667
cmp qword [rax + 0x30], r14
jne 0x18000a5f3
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
jne 0x18000a7ef
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a729
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a70e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a70e
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a70a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a6eb
cmp r11d, r12d
je 0x18000ad44
test edx, edx
jne 0x18000a6ce
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a71f
cmp qword [rax + 0x30], r14
jne 0x18000a6aa
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
test rax, rax
jne 0x18000a7ef
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a7e1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a7c6
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a7c6
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a7c2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a7a3
cmp r11d, r12d
je 0x18000ad61
test edx, edx
jne 0x18000a786
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a7d7
cmp qword [rax + 0x30], r14
jne 0x18000a762
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18000a853
mov dword [0x180107400], 0x10b8
mov dword [0x1801073fc], 0x1530
mov dword [0x180107434], 0x10d8
mov dword [0x180107420], 0x2f4
mov dword [0x180107404], 0x84
mov dword [0x180107430], 0x134
mov dword [0x1801073f0], 0x20
mov dword [0x180107424], 0x24
mov dword [0x1801073f4], 0x146b
mov dword [0x1801073f8], 0x28c
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a8f9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a8de
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a8de
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a8da
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a8bb
cmp r11d, r12d
je 0x18000ad7e
test edx, edx
jne 0x18000a89e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a8ef
cmp qword [rax + 0x30], r14
jne 0x18000a87a
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18000a9bf
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000a9b1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a996
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a996
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a992
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a973
cmp r11d, r12d
je 0x18000ad9b
test edx, edx
jne 0x18000a956
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a9a7
cmp qword [rax + 0x30], r14
jne 0x18000a932
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18000aa23
mov dword [0x180107400], 0x10b8
mov dword [0x1801073fc], 0x14e0
mov dword [0x180107434], 0x10d8
mov dword [0x180107420], 0x2f4
mov dword [0x180107404], 0x84
mov dword [0x180107430], 0x134
mov dword [0x1801073f0], 0x20
mov dword [0x180107424], 0x24
mov dword [0x1801073f4], 0x146b
mov dword [0x1801073f8], 0x28c
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000aac9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000aaae
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000aaae
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000aaaa
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000aa8b
cmp r11d, r12d
je 0x18000adb8
test edx, edx
jne 0x18000aa6e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000aabf
cmp qword [rax + 0x30], r14
jne 0x18000aa4a
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
test rax, rax
jne 0x18000ab8f
mov rax, qword [0x180107380]
test rax, rax
jne 0x18000ab81
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000ab66
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000ab66
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000ab62
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000ab43
cmp r11d, r12d
je 0x18000add5
test edx, edx
jne 0x18000ab26
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000ab77
cmp qword [rax + 0x30], r14
jne 0x18000ab02
mov rax, r14
mov qword [0x180107380], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18000abf3
mov dword [0x180107400], 0x10b8
mov dword [0x1801073fc], 0x14e0
mov dword [0x180107434], 0x10d8
mov dword [0x180107420], 0x2f4
mov dword [0x180107404], 0x84
mov dword [0x180107430], 0x134
mov dword [0x1801073f0], 0x20
mov dword [0x180107424], 0x24
mov dword [0x1801073f4], 0x146b
mov dword [0x1801073f8], 0x28c
mov qword [rsp + 0x48], r14
lea rcx, [0x1800071dc]
mov qword [rsp + 0x40], r14
xor r9d, r9d
mov qword [rsp + 0x38], r14
xor r8d, r8d
mov qword [rsp + 0x30], rcx
xor edx, edx
mov qword [rsp + 0x28], r14
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
call qword [0x180107108]
mov al, 1
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.18004c060
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a049
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a100
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a217
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a2ce
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a3e5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a49c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a5b3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a66a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a722
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a7da
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a8f2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a9aa
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000aac2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000ab7a