Function at 0x18004a064
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004b542
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.180056744
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r12d, r12d
lea rcx, str.rage_scripting_five.dll
add rax, 0x14f70
mov byte [0x1800d1380], r12b
mov qword [0x1800d1308], rax
mov byte [0x1800d1381], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1800d1390]
mov r13d, 0xe463da3c
test rax, rax
jne 0x18004a197
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a17c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a17c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a178
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a159
cmp r11d, r13d
je 0x18004b564
test edx, edx
jne 0x18004a13d
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18004a18d
cmp qword [rax + 0x30], r12
jne 0x18004a119
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004a25f
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004a24d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a232
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a232
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a22e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a20f
cmp r11d, r13d
je 0x18004b581
test edx, edx
jne 0x18004a1f4
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a243
cmp qword [rax + 0x30], r12
jne 0x18004a1d0
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004a32e
lea rax, [r14 + 0x794784]
mov dword [0x1800d134c], 0x1098
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], 0x150c
mov dword [0x1800d1354], 0x250
mov dword [0x1800d1350], 0x10b8
mov dword [0x1800d1358], 0x10a8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov byte [0x1800d1380], 1
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004a3d3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a3b8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a3b8
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a3b4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a395
cmp r11d, r13d
je 0x18004b59e
test edx, edx
jne 0x18004a379
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a3c9
cmp qword [rax + 0x30], r12
jne 0x18004a355
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x18004a4a5
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004a493
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a478
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a478
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a474
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a451
cmp r11d, 0xe463da3c
je 0x18004b5bb
test edx, edx
jne 0x18004a436
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a489
cmp qword [rax + 0x30], r12
jne 0x18004a412
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004a56a
lea rax, [r14 + 0x78f450]
mov dword [0x1800d134c], 0x10b8
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], r13d
mov dword [0x1800d1354], 0x238
mov dword [0x1800d1350], 0x10d8
mov dword [0x1800d1358], 0x10c8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004a613
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a5f8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a5f8
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a5f4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a5d1
cmp r11d, 0xe463da3c
je 0x18004b5d8
test edx, edx
jne 0x18004a5b5
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a609
cmp qword [rax + 0x30], r12
jne 0x18004a591
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004a6df
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004a6cd
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a6b2
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a6b2
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a6ae
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a68b
cmp r11d, 0xe463da3c
je 0x18004b5f5
test edx, edx
jne 0x18004a670
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a6c3
cmp qword [rax + 0x30], r12
jne 0x18004a64c
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004a7a4
lea rax, [r14 + 0x78c758]
mov dword [0x1800d134c], 0x10b8
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], r13d
mov dword [0x1800d1354], 0x238
mov dword [0x1800d1350], 0x10d8
mov dword [0x1800d1358], 0x10c8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004a84d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a832
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a832
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a82e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a80b
cmp r11d, 0xe463da3c
je 0x18004b612
test edx, edx
jne 0x18004a7ef
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a843
cmp qword [rax + 0x30], r12
jne 0x18004a7cb
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004a919
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004a907
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a8ec
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a8ec
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a8e8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a8c5
cmp r11d, 0xe463da3c
je 0x18004b62f
test edx, edx
jne 0x18004a8aa
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a8fd
cmp qword [rax + 0x30], r12
jne 0x18004a886
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004a9de
lea rax, [r14 + 0x78c5e4]
mov dword [0x1800d134c], 0x10b8
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], r13d
mov dword [0x1800d1354], 0x238
mov dword [0x1800d1350], 0x10d8
mov dword [0x1800d1358], 0x10c8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004aa87
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aa6c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aa6c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aa68
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aa45
cmp r11d, 0xe463da3c
je 0x18004b64c
test edx, edx
jne 0x18004aa29
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004aa7d
cmp qword [rax + 0x30], r12
jne 0x18004aa05
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18004ab5a
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004ab48
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ab2d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ab2d
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ab29
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ab06
cmp r11d, 0xe463da3c
je 0x18004b669
test edx, edx
jne 0x18004aaea
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ab3e
cmp qword [rax + 0x30], r12
jne 0x18004aac6
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004ac1f
lea rax, [r14 + 0x787fe4]
mov dword [0x1800d134c], 0x10b8
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], r13d
mov dword [0x1800d1354], 0x218
mov dword [0x1800d1350], 0x10d8
mov dword [0x1800d1358], 0x10c8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004acc7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004acac
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004acac
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aca8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ac85
cmp r11d, 0xe463da3c
je 0x18004b686
test edx, edx
jne 0x18004ac6a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004acbd
cmp qword [rax + 0x30], r12
jne 0x18004ac46
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004ad93
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004ad81
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ad66
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ad66
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ad62
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ad3f
cmp r11d, 0xe463da3c
je 0x18004b6a3
test edx, edx
jne 0x18004ad24
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ad77
cmp qword [rax + 0x30], r12
jne 0x18004ad00
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004ae62
lea rax, [r14 + 0x79b5dc]
mov dword [0x1800d134c], 0x10b8
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], r13d
mov dword [0x1800d1354], 0x218
mov dword [0x1800d1350], 0x10d8
mov dword [0x1800d1358], 0x10c8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d137c], 0x908
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004af0a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aeef
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aeef
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aeeb
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aec8
cmp r11d, 0xe463da3c
je 0x18004b6c0
test edx, edx
jne 0x18004aead
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004af00
cmp qword [rax + 0x30], r12
jne 0x18004ae89
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004afd7
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004afc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004afaa
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004afaa
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004afa6
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004af83
cmp r11d, 0xe463da3c
je 0x18004b6dd
test edx, edx
jne 0x18004af67
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004afbb
cmp qword [rax + 0x30], r12
jne 0x18004af43
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004b09c
lea rax, [r14 + 0x7935d0]
mov dword [0x1800d134c], 0x10a8
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], r13d
mov dword [0x1800d1354], 0x218
mov dword [0x1800d1350], 0x10d8
mov dword [0x1800d1358], 0x10b8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004b145
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b12a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b12a
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b126
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b103
cmp r11d, 0xe463da3c
je 0x18004b6fa
test edx, edx
jne 0x18004b0e7
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b13b
cmp qword [rax + 0x30], r12
jne 0x18004b0c3
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004b212
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004b200
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b1e5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b1e5
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b1e1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b1be
cmp r11d, 0xe463da3c
je 0x18004b717
test edx, edx
jne 0x18004b1a2
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b1f6
cmp qword [rax + 0x30], r12
jne 0x18004b17e
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004b2e1
lea rax, [r14 + 0x795f9c]
mov dword [0x1800d134c], 0x1098
mov qword [0x1800d1330], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1800d1338], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x1800d1340], rax
mov dword [0x1800d1348], 0x150c
mov dword [0x1800d1354], 0x250
mov dword [0x1800d1350], 0x10b8
mov dword [0x1800d1358], 0x10a8
mov dword [0x1800d135c], 0x2f4
mov dword [0x1800d1360], 0x84
mov dword [0x1800d1374], 0x134
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5f0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x28c
mov byte [0x1800d1381], 1
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004b38a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b36f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b36f
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b36b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b348
cmp r11d, 0xe463da3c
je 0x18004b734
test edx, edx
jne 0x18004b32c
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b380
cmp qword [rax + 0x30], r12
jne 0x18004b308
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004b457
mov rax, qword [0x1800d1390]
test rax, rax
jne 0x18004b445
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b42a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b42a
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b426
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b403
cmp r11d, 0xe463da3c
je 0x18004b751
test edx, edx
jne 0x18004b3e7
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b43b
cmp qword [rax + 0x30], r12
jne 0x18004b3c3
mov rax, r12
mov qword [0x1800d1390], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004b51f
lea rax, [r14 + 0xcaf950]
mov dword [0x1800d134c], 0x10a8
mov qword [0x1800d1330], rax
lea rcx, [rbp + 0x2087780]
lea rax, [rbp + 0x247f840]
mov dword [0x1800d1348], 0x14b8
mov qword [0x1800d1320], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1800d1328], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1800d1338], rax
mov dword [0x1800d1354], 0x218
mov dword [0x1800d1350], 0x10c8
mov dword [0x1800d1358], 0x10b8
mov dword [0x1800d135c], 0x2e8
mov dword [0x1800d1360], 0x74
mov dword [0x1800d1374], 0x12c
mov dword [0x1800d1364], 0x20
mov dword [0x1800d136c], 0x24
mov dword [0x1800d1368], 0x5e0
mov dword [0x1800d1378], 0x146b
mov dword [0x1800d1370], 0x25c
mov qword [0x1800d1340], rcx
call fcn.1800494dc
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x1800490c8]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a190
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a246
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a3cc
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a48c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a60c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a6c6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a846
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a900
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aa80
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ab41
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004acc0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ad7a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004af03
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004afbe
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b13e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b1f9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b383
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b43e