Function at 0x18004a374
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004bcdd
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.18005a914
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r8d, r8d
lea rdx, str.40_57_48_83_EC___48_8B_05
mov rcx, rax
call fcn.180049054
xor r12d, r12d
mov qword [0x180107448], rax
lea rcx, str.rage_scripting_five.dll
mov byte [0x1801074c8], r12b
mov byte [0x1801074c9], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1801074e0]
mov r13d, 0xe463da3c
test rax, rax
jne 0x18004a4b3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a498
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a498
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a494
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a475
cmp r11d, r13d
je 0x18004b421
test edx, edx
jne 0x18004a459
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18004a4a9
cmp qword [rax + 0x30], r12
jne 0x18004a435
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004a57b
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004a569
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a54e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a54e
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a54a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a52b
cmp r11d, r13d
je 0x18004b43e
test edx, edx
jne 0x18004a510
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a55f
cmp qword [rax + 0x30], r12
jne 0x18004a4ec
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004a658
lea rax, [r14 + 0x794784]
mov dword [0x180107494], 0x1098
mov qword [0x180107478], rax
lea rax, [rbp + 0x254d448]
mov qword [0x180107468], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x180107470], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x180107480], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x180107488], rax
lea rax, [r14 + 0x15ea290]
mov qword [0x1801074d8], rax
mov dword [0x180107490], 0x150c
mov dword [0x18010749c], 0x250
mov dword [0x180107498], 0x10b8
mov dword [0x1801074a0], 0x10a8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov byte [0x1801074c8], 1
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004a6fc
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a6e1
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a6e1
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a6dd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a6be
cmp r11d, r13d
je 0x18004b45b
test edx, edx
jne 0x18004a6a3
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a6f2
cmp qword [rax + 0x30], r12
jne 0x18004a67f
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x18004a7ce
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004a7bc
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a7a1
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a7a1
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a79d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a77a
cmp r11d, 0xe463da3c
je 0x18004b478
test edx, edx
jne 0x18004a75f
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a7b2
cmp qword [rax + 0x30], r12
jne 0x18004a73b
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004a8a1
lea rax, [r14 + 0x78f450]
mov dword [0x180107494], 0x10b8
mov qword [0x180107478], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x180107468], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x180107470], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x180107480], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x180107488], rax
lea rax, [r14 + 0x15d6cec]
mov qword [0x1801074d8], rax
mov dword [0x180107490], r13d
mov dword [0x18010749c], 0x238
mov dword [0x180107498], 0x10d8
mov dword [0x1801074a0], 0x10c8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004a949
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a92e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a92e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a92a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a907
cmp r11d, 0xe463da3c
je 0x18004b495
test edx, edx
jne 0x18004a8ec
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a93f
cmp qword [rax + 0x30], r12
jne 0x18004a8c8
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004aa15
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004aa03
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a9e8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a9e8
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a9e4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a9c1
cmp r11d, 0xe463da3c
je 0x18004b4b2
test edx, edx
jne 0x18004a9a6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a9f9
cmp qword [rax + 0x30], r12
jne 0x18004a982
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004aae8
lea rax, [r14 + 0x78c758]
mov dword [0x180107494], 0x10b8
mov qword [0x180107478], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x180107468], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x180107470], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x180107480], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x180107488], rax
lea rax, [r14 + 0x15dfe20]
mov qword [0x1801074d8], rax
mov dword [0x180107490], r13d
mov dword [0x18010749c], 0x238
mov dword [0x180107498], 0x10d8
mov dword [0x1801074a0], 0x10c8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004ab90
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ab75
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ab75
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ab71
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ab4e
cmp r11d, 0xe463da3c
je 0x18004b4cf
test edx, edx
jne 0x18004ab33
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ab86
cmp qword [rax + 0x30], r12
jne 0x18004ab0f
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004ac5d
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004ac4b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ac30
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ac30
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ac2c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ac09
cmp r11d, 0xe463da3c
je 0x18004b4ec
test edx, edx
jne 0x18004abed
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ac41
cmp qword [rax + 0x30], r12
jne 0x18004abc9
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004ad30
lea rax, [r14 + 0x78c5e4]
mov dword [0x180107494], 0x10b8
mov qword [0x180107478], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x180107468], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x180107470], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x180107480], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x180107488], rax
lea rax, [r14 + 0x15deeb0]
mov qword [0x1801074d8], rax
mov dword [0x180107490], r13d
mov dword [0x18010749c], 0x238
mov dword [0x180107498], 0x10d8
mov dword [0x1801074a0], 0x10c8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004add8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004adbd
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004adbd
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004adb9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ad96
cmp r11d, 0xe463da3c
je 0x18004b509
test edx, edx
jne 0x18004ad7b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004adce
cmp qword [rax + 0x30], r12
jne 0x18004ad57
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18004aeab
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004ae99
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ae7e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ae7e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ae7a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ae57
cmp r11d, 0xe463da3c
je 0x18004b526
test edx, edx
jne 0x18004ae3b
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ae8f
cmp qword [rax + 0x30], r12
jne 0x18004ae17
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004af7e
lea rax, [r14 + 0x787fe4]
mov dword [0x180107494], 0x10b8
mov qword [0x180107478], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x180107468], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x180107470], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x180107480], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x180107488], rax
lea rax, [r14 + 0x15cd2c0]
mov qword [0x1801074d8], rax
mov dword [0x180107490], r13d
mov dword [0x18010749c], 0x218
mov dword [0x180107498], 0x10d8
mov dword [0x1801074a0], 0x10c8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b026
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b00b
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b00b
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b007
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004afe4
cmp r11d, 0xe463da3c
je 0x18004b543
test edx, edx
jne 0x18004afc9
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b01c
cmp qword [rax + 0x30], r12
jne 0x18004afa5
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004b0f3
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b0e1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b0c6
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b0c6
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b0c2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b09f
cmp r11d, 0xe463da3c
je 0x18004b560
test edx, edx
jne 0x18004b083
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b0d7
cmp qword [rax + 0x30], r12
jne 0x18004b05f
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004b1d0
lea rax, [r14 + 0x79b5dc]
mov dword [0x180107494], 0x10b8
mov qword [0x180107478], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x180107468], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x180107470], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x180107480], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x180107488], rax
lea rax, [r14 + 0x15b1008]
mov qword [0x1801074d8], rax
mov dword [0x180107490], r13d
mov dword [0x18010749c], 0x218
mov dword [0x180107498], 0x10d8
mov dword [0x1801074a0], 0x10c8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074c4], 0x908
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b279
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b25e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b25e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b25a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b237
cmp r11d, 0xe463da3c
je 0x18004b57d
test edx, edx
jne 0x18004b21b
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b26f
cmp qword [rax + 0x30], r12
jne 0x18004b1f7
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004b346
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b334
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b319
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b319
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b315
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b2f2
cmp r11d, 0xe463da3c
je 0x18004b59a
test edx, edx
jne 0x18004b2d6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b32a
cmp qword [rax + 0x30], r12
jne 0x18004b2b2
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004b5b7
lea rax, [r14 + 0x7935d0]
mov dword [0x180107490], r13d
mov qword [0x180107478], rax
mov r13d, 0x10b8
lea rax, [rbp + 0x24c8858]
mov dword [0x180107494], 0x10a8
mov qword [0x180107468], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x180107470], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x180107480], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x180107488], rax
lea rax, [r14 + 0x159b224]
mov qword [0x1801074d8], rax
mov dword [0x18010749c], 0x218
mov dword [0x180107498], 0x10d8
mov dword [0x1801074a0], r13d
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
jmp 0x18004b5bd
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a4ac
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a562
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a6f5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a7b5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a942
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a9fc
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ab89
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ac44
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004add1
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ae92
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b01f
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b0da
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b272
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b32d
mov r13d, 0x10b8
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b666
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b64b
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b64b
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b647
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b624
cmp r11d, 0xe463da3c
je 0x18004bcff
test edx, edx
jne 0x18004b608
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b65c
cmp qword [rax + 0x30], r12
jne 0x18004b5e4
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004b733
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b721
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b706
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b706
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b702
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b6df
cmp r11d, 0xe463da3c
je 0x18004bd1c
test edx, edx
jne 0x18004b6c3
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b717
cmp qword [rax + 0x30], r12
jne 0x18004b69f
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004b80d
lea rax, [r14 + 0x795f9c]
mov dword [0x180107494], 0x1098
mov qword [0x180107478], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x180107468], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x180107470], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x180107480], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x180107488], rax
lea rax, [r14 + 0x160ff90]
mov qword [0x1801074d8], rax
mov dword [0x180107490], 0x150c
mov dword [0x18010749c], 0x250
mov dword [0x180107498], r13d
mov dword [0x1801074a0], 0x10a8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov byte [0x1801074c9], 1
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b8b6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b89b
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b89b
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b897
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b874
cmp r11d, 0xe463da3c
je 0x18004bd39
test edx, edx
jne 0x18004b858
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b8ac
cmp qword [rax + 0x30], r12
jne 0x18004b834
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004b983
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004b971
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b956
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b956
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b952
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b92f
cmp r11d, 0xe463da3c
je 0x18004bd56
test edx, edx
jne 0x18004b913
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b967
cmp qword [rax + 0x30], r12
jne 0x18004b8ef
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004ba56
lea rax, [r14 + 0xcaf950]
mov dword [0x180107494], 0x10a8
mov qword [0x180107478], rax
lea rax, [rbp + 0x247f840]
mov qword [0x180107468], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x180107470], rax
lea rax, [rbp + 0x2088360]
mov qword [0x180107480], rax
lea rax, [rbp + 0x2087780]
mov qword [0x180107488], rax
lea rax, [r14 + 0x1561e30]
mov qword [0x1801074d8], rax
mov dword [0x180107490], 0x14b8
mov dword [0x18010749c], 0x218
mov dword [0x180107498], 0x10c8
mov dword [0x1801074a0], r13d
mov dword [0x1801074a4], 0x2e8
mov dword [0x1801074a8], 0x74
mov dword [0x1801074bc], 0x12c
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5e0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x25c
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004bafe
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004bae3
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004bae3
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004badf
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004babc
cmp r11d, 0xe463da3c
je 0x18004bd73
test edx, edx
jne 0x18004baa1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004baf4
cmp qword [rax + 0x30], r12
jne 0x18004ba7d
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b3095_GameProcess.exe
call rax
test rax, rax
jne 0x18004bbca
mov rax, qword [0x1801074e0]
test rax, rax
jne 0x18004bbb8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004bb9d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004bb9d
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004bb99
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004bb76
cmp r11d, 0xe463da3c
je 0x18004bd90
test edx, edx
jne 0x18004bb5b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004bbae
cmp qword [rax + 0x30], r12
jne 0x18004bb37
mov rax, r12
mov qword [0x1801074e0], rax
lea rcx, str.FiveM_b3095_GTAProcess.exe
call rax
test rax, rax
je 0x18004bcba
lea rax, [r14 + 0x430]
mov dword [0x180107494], 0x1098
mov qword [0x180107478], rax
lea rcx, [r14 + 0xa596b0]
lea rax, [rbp + 0x2593320]
mov dword [0x180107490], 0x150c
mov qword [0x180107468], rax
lea rax, [rbp + 0x1f58b58]
mov qword [0x180107470], rax
lea rax, [rbp + 0x20025b8]
mov qword [0x180107480], rax
lea rax, [rbp + 0x20019e0]
mov qword [0x180107488], rax
lea rax, [rbp + 0x1624f80]
mov qword [0x1801074d8], rax
lea rax, [r14 + 0x2ef5870]
mov qword [0x180107438], rax
mov dword [0x180107498], r13d
mov dword [0x1801074a0], 0x10a8
mov dword [0x1801074a4], 0x2f4
mov dword [0x1801074a8], 0x84
mov dword [0x1801074bc], 0x134
mov dword [0x1801074ac], 0x20
mov dword [0x1801074b4], 0x24
mov dword [0x1801074b0], 0x5f0
mov dword [0x1801074c0], 0x146b
mov dword [0x1801074b8], 0x28c
mov qword [0x180107428], rcx
mov qword [0x180107430], 0x161d8f9
call fcn.1800496b0
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x180048ff4]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b65f
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b71a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b8af
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b96a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004baf7
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004bbb1