Function at 0x180009a3c
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1c0
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180106040]
xor rax, rsp
mov qword [rbp + 0x140], rax
cmp edx, 1
jne 0x18000ad6f
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
movabs rax, 0xf39ea6aa411d3383
lea rcx, [rbp + 0xc0]
mov qword [rbp], rax
movabs rdi, 0x2906056c959b6a
movabs rax, 0x3c05ef9f95d8f864
mov qword [rbp + 0x78], rdi
mov qword [rbp + 8], rax
movabs r12, 0xc6ae86e8793d0bb7
movabs rax, 0xfe31a97c23ef1995
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x10], rax
movabs r15, 0x325d0bfaaf8c744
movabs rax, 0x8b1a10e38c448688
mov qword [rbp + 0x48], r15
movups xmm0, xmmword [rbp + 0x40]
movabs rbx, 0x28cdcd1df1b2476
mov qword [rbp + 0x28], rax
movabs r13, 0x97ea6d5e18a69747
movaps xmmword [rbp + 0xc0], xmm0
movabs rax, 0xca11eb4403d72db5
mov qword [rbp + 0x50], rax
movabs rsi, 0xc0e45980df7756f9
movabs rax, 0x22b4e8f1e72b044e
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x58], rax
mov r14d, 7
movups xmm1, xmmword [rbp + 0x50]
movabs rax, 0xa3dd4d675b86a27f
movaps xmmword [rbp + 0xd0], xmm1
mov r8d, r14d
mov qword [rbp + 0x60], rax
movabs rax, 0xb33a52dbac76b3a8
mov qword [rbp + 0x68], rax
movabs rax, 0xc0e45980df7756c8
movups xmm0, xmmword [rbp + 0x60]
movaps xmmword [rbp + 0xe0], xmm0
vmovdqu ymm0, ymmword [rbp]
mov qword [rbp + 0x70], rax
vmovups xmm1, xmmword [rbp + 0x70]
vmovaps xmmword [rbp + 0xf0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rdi
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call fcn.180009794
mov qword [0x180107430], rax
movabs rax, 0xf39ea6aa411d3383
mov qword [rbp], rax
movabs rax, 0x3c05ef9f95d8f864
mov qword [rbp + 8], rax
movabs rax, 0xfe31a97c23ef1995
mov qword [rbp + 0x10], rax
movabs rax, 0x8b1a10e38c448688
mov qword [rbp + 0x28], rax
movabs rax, 0xb7ae86ee793d0bb7
mov qword [rbp + 0x40], rax
movabs rax, 0xcc119d4803d621b5
mov qword [rbp + 0x50], rax
movabs rax, 0x22b499f1ef280442
mov qword [rbp + 0x58], rax
movabs rax, 0xb7d54d613899b778
mov qword [rbp + 0x60], rax
movabs rax, 0xbf5930d0b464bebc
mov qword [rbp + 0x68], rax
movabs rax, 0xf4c46ac3ff4f64d9
mov qword [rbp + 0x70], rax
movabs rax, 0x1c36252eadbb52
mov qword [rbp + 0x48], r15
movups xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rdi
movaps xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rbp + 0x50]
lea rcx, [rbp + 0xc0]
movups xmm0, xmmword [rbp + 0x60]
mov r8d, r14d
movaps xmmword [rbp + 0xd0], xmm1
movups xmm1, xmmword [rbp + 0x70]
movaps xmmword [rbp + 0xf0], xmm1
movaps xmmword [rbp + 0xe0], xmm0
vmovdqu ymm0, ymmword [rbp]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call fcn.180009794
mov qword [0x180107460], rax
lea rcx, [rbp + 0xc0]
movabs rax, 0xf39ea6aa411d3383
mov qword [rbp + 0x18], rbx
mov qword [rbp], rax
movabs rbx, 0xb0ab8693793d0bb7
movabs rax, 0x3c05ef9f95d8f864
mov qword [rbp + 0x40], rbx
mov qword [rbp + 8], rax
xor r8d, r8d
movabs rax, 0xfe31a97c23ef1995
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x10], rax
movabs rax, 0x8b1a10e38c448688
mov qword [rbp + 0x28], rax
movabs rax, 0x925d0a0b5ecca44
mov qword [rbp + 0x48], rax
movabs rax, 0xde069c5c15da39a0
movups xmm0, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0x50], rax
movabs rax, 0x41c9fce2e73b1c42
mov qword [rbp + 0x58], rax
movabs rax, 0xa3ca58683896a067
movups xmm1, xmmword [rbp + 0x50]
movaps xmmword [rbp + 0xd0], xmm1
mov qword [rbp + 0x60], rax
movabs rax, 0xab5920c3ce7ca6cb
mov qword [rbp + 0x68], rax
movabs rax, 0xc0e45980df7763cb
movups xmm0, xmmword [rbp + 0x60]
movaps xmmword [rbp + 0xe0], xmm0
vmovdqu ymm0, ymmword [rbp]
mov qword [rbp + 0x70], rax
vmovups xmm1, xmmword [rbp + 0x70]
vmovaps xmmword [rbp + 0xf0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rdi
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call fcn.180009794
mov qword [0x180107470], rax
movabs rax, 0xf39ea6aa411d3383
mov qword [rbp + 0xc0], rax
movabs rax, 0x3c05ef9f95d8f864
mov qword [rbp + 0xc8], rax
movabs rax, 0xfe31a97c23ef1995
mov qword [rbp + 0xd0], rax
movabs rax, 0x28cdcd1df1b2476
mov qword [rbp + 0xd8], rax
movabs rax, 0x8b1a10e38c448688
mov qword [rbp + 0xe8], rax
movabs rax, 0x72f16382ace8188b
mov qword [rbp + 0x100], rax
movabs rax, 0x5a61d417ab7ee6ec
mov qword [rbp + 0x108], rax
movabs rax, 0x496fdc7432fede9d
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], rdi
vmovdqu ymm0, ymmword [rbp + 0xc0]
mov qword [rbp + 0x110], rax
movabs rcx, 0xae33cfbb4964e90
movabs rax, 0xb0aa6ee94b2f953e
mov qword [rbp + 0xa8], rcx
mov qword [rbp + 0x118], rax
xor r8d, r8d
movabs rax, 0x1a4f5776063108af
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x120], rax
movabs rax, 0x825d0a0b5ecca44
mov qword [rbp + 0x48], rax
movabs rax, 0xde729f5c1ad739ad
mov qword [rbp + 0x50], rax
movabs rax, 0x3ab8fceee03b1044
mov qword [rbp + 0x58], rax
movabs rax, 0xa5ca5969389faf67
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0xe0]
mov qword [rbp + 0x60], rax
movabs rax, 0xab2d25c3b37ba6bc
mov qword [rbp + 0x68], rax
movabs rax, 0x83a179b3e7576ecd
mov qword [rbp + 0x70], rax
movabs rax, 0x38093e314ca5ad4a
mov qword [rbp + 0x78], rax
movabs rax, 0x52c057a29dd838c9
mov qword [rbp + 0x80], rax
movabs rax, 0x6255f42fee5ea4d4
mov qword [rbp + 0x88], rax
movabs rax, 0x7d4fee3212bce6bd
mov qword [rbp + 0x90], rax
movabs rax, 0x909328c90917b506
mov qword [rbp + 0x98], rax
movabs rax, 0x1a4f573442113b9c
vmovdqa ymmword [rbp + 0x40], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp + 0x100]
mov qword [rbp + 0xa0], rax
vmovdqa xmm2, xmmword [rbp + 0xa0]
mov qword [rbp + 0x128], rcx
lea rcx, [rbp + 0x40]
vxorps xmm2, xmm2, xmmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x60], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa xmmword [rbp + 0xa0], xmm2
vmovdqa ymmword [rbp + 0x80], ymm1
vzeroupper
call fcn.180009794
mov qword [0x180107450], rax
movabs rcx, 0x8b1a10e38c448688
movabs rax, 0xf39ea6aa411d3383
mov qword [rbp], r12
mov qword [rbp + 0x40], rax
mov r8d, r14d
movabs rax, 0x3c05ef9f95d8f864
mov qword [rbp + 8], r15
movups xmm0, xmmword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xfe31a97c23ef1995
mov qword [rbp + 0x50], rax
movabs rax, 0x28cdcd1df1b2476
mov qword [rbp + 0x58], rax
movabs rax, 0xc711eb4403d72db5
mov qword [rbp + 0x10], rax
movabs rax, 0x22b3fceeff24044e
movaps xmmword [rbp + 0xc0], xmm0
vmovdqu ymm0, ymmword [rbp + 0x40]
mov qword [rbp + 0x18], rax
movabs rax, 0x97ea6d5e5ae3b778
vmovups xmm1, xmmword [rbp + 0x10]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rcx
vmovups xmm2, xmmword [rbp + 0x20]
mov qword [rbp + 0x60], r13
vmovaps xmmword [rbp + 0xd0], xmm1
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
mov qword [rbp + 0x68], rcx
vxorps xmm2, xmm2, xmmword [rbp + 0x60]
vmovdqa xmmword [rbp + 0xe0], xmm2
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.180009794
xor r14d, r14d
mov qword [0x180107458], rax
mov rax, qword [0x1801073c8]
or r13d, 0xffffffff
mov r12d, 0xe463da3c
lea r15d, [r14 + 1]
test rax, rax
jne 0x18000a198
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a17d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a17d
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a179
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a15a
cmp r11d, r12d
je 0x18000ada1
test edx, edx
jne 0x18000a13d
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a18e
cmp qword [rax + 0x30], r14
jne 0x18000a119
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18000a25e
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a250
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a235
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a235
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a231
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a212
cmp r11d, r12d
je 0x18000adbe
test edx, edx
jne 0x18000a1f5
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a246
cmp qword [rax + 0x30], r14
jne 0x18000a1d1
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18000a2c2
mov dword [0x180107448], 0x10a8
mov dword [0x180107444], 0x14b8
mov dword [0x18010747c], 0x10c8
mov dword [0x180107468], 0x2e8
mov dword [0x18010744c], 0x74
mov dword [0x180107478], 0x12c
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x25c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a367
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a34c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a34c
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a348
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a329
cmp r11d, r12d
je 0x18000addb
test edx, edx
jne 0x18000a30d
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18000a35d
cmp qword [rax + 0x30], r14
jne 0x18000a2e9
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18000a42c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a41e
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a403
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a403
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a3ff
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a3e0
cmp r11d, r12d
je 0x18000adf8
test edx, edx
jne 0x18000a3c4
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a414
cmp qword [rax + 0x30], r14
jne 0x18000a3a0
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18000a490
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x14e0
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a535
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a51a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a51a
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a516
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a4f7
cmp r11d, r12d
je 0x18000ae15
test edx, edx
jne 0x18000a4db
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a52b
cmp qword [rax + 0x30], r14
jne 0x18000a4b7
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18000a5fa
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a5ec
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a5d1
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a5d1
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a5cd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a5ae
cmp r11d, r12d
je 0x18000ae32
test edx, edx
jne 0x18000a592
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a5e2
cmp qword [rax + 0x30], r14
jne 0x18000a56e
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18000a65e
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x1530
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a703
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a6e8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a6e8
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a6e4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a6c5
cmp r11d, r12d
je 0x18000ae4f
test edx, edx
jne 0x18000a6a9
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a6f9
cmp qword [rax + 0x30], r14
jne 0x18000a685
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18000a938
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a7ba
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a79f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a79f
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a79b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a77c
cmp r11d, r12d
je 0x18000ae6c
test edx, edx
jne 0x18000a760
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a7b0
cmp qword [rax + 0x30], r14
jne 0x18000a73c
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
jne 0x18000a938
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a872
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a857
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a857
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a853
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a834
cmp r11d, r12d
je 0x18000ae89
test edx, edx
jne 0x18000a817
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a868
cmp qword [rax + 0x30], r14
jne 0x18000a7f3
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
test rax, rax
jne 0x18000a938
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000a92a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000a90f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000a90f
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000a90b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000a8ec
cmp r11d, r12d
je 0x18000aea6
test edx, edx
jne 0x18000a8cf
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000a920
cmp qword [rax + 0x30], r14
jne 0x18000a8ab
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18000a99c
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x1530
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000aa41
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000aa26
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000aa26
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000aa22
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000aa03
cmp r11d, r12d
je 0x18000aec3
test edx, edx
jne 0x18000a9e7
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000aa37
cmp qword [rax + 0x30], r14
jne 0x18000a9c3
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18000ab06
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000aaf8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000aadd
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000aadd
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000aad9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000aaba
cmp r11d, r12d
je 0x18000aee0
test edx, edx
jne 0x18000aa9e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000aaee
cmp qword [rax + 0x30], r14
jne 0x18000aa7a
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18000ab6a
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x14e0
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000ac0f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000abf4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000abf4
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000abf0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000abd1
cmp r11d, r12d
je 0x18000aefd
test edx, edx
jne 0x18000abb5
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000ac05
cmp qword [rax + 0x30], r14
jne 0x18000ab91
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
test rax, rax
jne 0x18000acd4
mov rax, qword [0x1801073c8]
test rax, rax
jne 0x18000acc6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000acab
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18000acab
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
add rcx, r15
test al, al
je 0x18000aca7
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r15
test al, al
jne 0x18000ac88
cmp r11d, r12d
je 0x18000af1a
test edx, edx
jne 0x18000ac6c
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18000acbc
cmp qword [rax + 0x30], r14
jne 0x18000ac48
mov rax, r14
mov qword [0x1801073c8], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18000ad38
mov dword [0x180107448], 0x10b8
mov dword [0x180107444], 0x14e0
mov dword [0x18010747c], 0x10d8
mov dword [0x180107468], 0x2f4
mov dword [0x18010744c], 0x84
mov dword [0x180107478], 0x134
mov dword [0x180107438], 0x20
mov dword [0x18010746c], 0x24
mov dword [0x18010743c], 0x146b
mov dword [0x180107440], 0x28c
mov qword [rsp + 0x48], r14
lea rcx, [0x1800072fc]
mov qword [rsp + 0x40], r14
xor r9d, r9d
mov qword [rsp + 0x38], r14
xor r8d, r8d
mov qword [rsp + 0x30], rcx
xor edx, edx
mov qword [rsp + 0x28], r14
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
call qword [0x180107148]
mov al, 1
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.18004c690
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a191
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a249
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a360
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a417
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a52e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a5e5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a6fc
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a7b3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a86b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000a923
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000aa3a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000aaf1
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000ac08
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18000acbf