Function at 0x1400572a0
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rsi
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xa0
mov rax, qword [0x140141080]
xor rax, rsp
mov qword [rbp + 0x37], rax
movups xmm0, xmmword [0x14012aa98]
movzx eax, word [0x14012aab0]
xor esi, esi
mov qword [r11 + 8], rbx
mov ecx, esi
mov qword [r11 + 0x10], rdi
mov edi, dword [reloc.WS2_32.dll_accept]
mov word [rbp + 0x2f], ax
movzx eax, byte [0x14012aab2]
movaps xmmword [r11 - 0x18], xmm6
mov byte [rbp + 0x31], al
movups xmmword [rbp + 0x17], xmm0
movsd xmm0, qword [str.4__98b_6P]
movsd qword [rbp + 0x27], xmm0
cmp edi, 2
jl 0x140057444
movdqa xmm0, xmmword [0x14012ba20]
lea rdx, [rbp + 0x1b]
movdqa xmm5, xmmword [0x14012b940]
movdqa xmm4, xmmword [0x14012bb40]
movdqa xmm6, xmmword [0x14012ba10]
movdqa xmmword [rbp - 9], xmm0
mov r8d, dword [rbp - 9]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 0x19
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14012ba00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 0x19
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14012ba00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x18
jl 0x140057340
cmp ecx, 0x1b
jge 0x14005747d
movsxd rax, ecx
lea r8, [rbp + 0x17]
add r8, rax
nop
mov eax, 0x45b74e4d
lea r8, [r8 + 1]
imul ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x79
movzx eax, cl
inc ecx
sub al, dl
add al, 0x36
xor byte [r8 - 1], al
cmp ecx, 0x1b
jl 0x140057450
xorps xmm0, xmm0
mov qword [rbp + 7], rsi
mov rbx, 0xffffffffffffffff
mov qword [rbp + 0xf], rsi
movups xmmword [rbp - 9], xmm0
mov r8, rbx
lea rax, [rbp + 0x17]
nop word [rax + rax]
inc r8
cmp byte [rax + r8], sil
jne 0x1400574a0
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 9]
call fcn.140050030
lea rcx, [rbp - 9]
call fcn.140054e10
test al, al
jne 0x1400576af
cmp byte [0x14012b32b], sil
movups xmm0, xmmword [str.pNwd]
mov eax, dword [0x14012b328]
mov dword [rbp + 0x2f], eax
movups xmmword [rbp + 0x17], xmm0
movsd xmm0, qword [0x14012b320]
movsd qword [rbp + 0x27], xmm0
je 0x140057672
mov r8d, esi
cmp edi, 2
jl 0x140057637
movdqa xmm0, xmmword [0x14012ba20]
lea rcx, [rbp + 0x1b]
movdqa xmm5, xmmword [0x14012b940]
movdqa xmm4, xmmword [0x14012bb40]
movdqa xmm6, xmmword [0x14012ba10]
movdqa xmmword [rbp - 9], xmm0
mov edx, dword [rbp - 9]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 0x19
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14012ba00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 0x19
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14012ba00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140057530
cmp r8d, 0x1c
jge 0x140057672
movsxd rax, r8d
lea r9, [rbp + 0x17]
add r9, rax
mov eax, 0x45b74e4d
lea r9, [r9 + 1]
imul r8d
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x79
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x36
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x140057641
xorps xmm0, xmm0
mov qword [rbp + 7], rsi
movups xmmword [rbp - 9], xmm0
mov qword [rbp + 0xf], rsi
lea rax, [rbp + 0x17]
inc rbx
cmp byte [rax + rbx], sil
jne 0x140057685
mov r8, rbx
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 9]
call fcn.140050030
lea rcx, [rbp - 9]
call fcn.140054e10
test al, al
je 0x140057866
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rcx, qword [0x140295d60]
add rdx, 0x257bea0
mov r9d, 8
mov byte [0x140295a73], 1
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x1f42068
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1feaac0
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x1feb698
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 9]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10a8
mov qword [0x140295d90], 0x10b8
mov qword [0x140295da8], 0xd10
mov qword [0x140295e30], 0x918
mov qword [0x140295d98], 0xc5c
mov qword [0x140295db0], 0x8e8
mov qword [0x140295dd0], 0x2f4
mov qword [0x140295e08], 0x84
mov qword [0x140295da0], 0x134
mov qword [0x140295e48], 0xe8
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0xd40
mov qword [0x140295df0], 0x150c
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x143c
mov qword [0x140295e18], 0x218
mov qword [0x140295e28], 0x1052879
mov qword [0x140295dd8], 0x1ff3130
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2802_GTAProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_26
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128b28]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128b30]
mov word [rax + 0x18], cx
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1a], sil
call fcn.140054e10
movaps xmm6, xmmword [rsp + 0x90]
mov rdi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xb0]
test al, al
jne 0x140057936
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2802_GameProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_27
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128b48]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128b50]
mov word [rax + 0x18], cx
movzx ecx, byte [0x140128b52]
mov byte [rax + 0x1a], cl
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1b], sil
call fcn.140054e10
test al, al
je 0x140057aed
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 0x254d448
mov r9d, 8
mov byte [0x140295a71], 1
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1f5b820
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x1fbc100
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1fbccd8
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x19]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10a8
mov qword [0x140295d90], 0x10b8
mov qword [0x140295da8], 0xd10
mov qword [0x140295e30], 0x918
mov qword [0x140295d98], 0xc5c
mov qword [0x140295db0], 0x8e8
mov qword [0x140295dd0], 0x2f4
mov qword [0x140295e08], 0x84
mov qword [0x140295da0], 0x134
mov qword [0x140295e48], 0xe8
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0xcf0
mov qword [0x140295df0], 0x150c
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x143c
mov qword [0x140295e18], 0x218
mov qword [0x140295e28], 0x10455f5
mov qword [0x140295dd8], 0x1fbd6e0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2699_GTAProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_26
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128b68]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128b70]
mov word [rax + 0x18], cx
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1a], sil
call fcn.140054e10
test al, al
jne 0x140057ba5
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2699_GameProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_27
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128b88]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128b90]
mov word [rax + 0x18], cx
movzx ecx, byte [0x140128b92]
mov byte [rax + 0x1a], cl
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1b], sil
call fcn.140054e10
test al, al
je 0x140057d55
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 0x26684d8
mov r9d, 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x20304c8
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x20d8c90
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x20d9868
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x19]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10c8
mov qword [0x140295d90], 0x10d8
mov qword [0x140295da8], 0xd30
mov qword [0x140295e30], 0x938
mov qword [0x140295d98], 0xc5c
mov qword [0x140295db0], 0x908
mov qword [0x140295dd0], 0x2f4
mov qword [0x140295e08], 0x84
mov qword [0x140295da0], 0x134
mov qword [0x140295e48], 0x88
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0xcf0
mov qword [0x140295df0], 0x1530
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x13ec
mov qword [0x140295e18], 0x218
mov qword [0x140295e28], 0x10479f9
mov qword [0x140295dd8], 0x20e1420
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2612_GTAProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_26
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128ba8]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128bb0]
mov word [rax + 0x18], cx
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1a], sil
call fcn.140054e10
test al, al
jne 0x140057e0d
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2612_GameProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_27
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128bc8]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128bd0]
mov word [rax + 0x18], cx
movzx ecx, byte [0x140128bd2]
mov byte [rax + 0x1a], cl
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1b], sil
call fcn.140054e10
test al, al
je 0x140057fbd
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 0x2567db0
mov r9d, 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1f77ef0
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x1fd8570
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1fd9148
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x19]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10c8
mov qword [0x140295d90], 0x10d8
mov qword [0x140295da8], 0xd30
mov qword [0x140295e30], 0x938
mov qword [0x140295d98], 0xc5c
mov qword [0x140295db0], 0x908
mov qword [0x140295dd0], 0x2f4
mov qword [0x140295e08], 0x84
mov qword [0x140295da0], 0x134
mov qword [0x140295e48], 0x88
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0xcf0
mov qword [0x140295df0], 0x1530
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x13ec
mov qword [0x140295e18], 0x218
mov qword [0x140295e28], 0x1040dbd
mov qword [0x140295dd8], 0x1fddd20
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2545_GTAProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_26
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128be8]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128bf0]
mov word [rax + 0x18], cx
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1a], sil
call fcn.140054e10
test al, al
jne 0x140058075
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2545_GameProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_27
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128c08]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128c10]
mov word [rax + 0x18], cx
movzx ecx, byte [0x140128c12]
mov byte [rax + 0x1a], cl
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1b], sil
call fcn.140054e10
test al, al
je 0x140058225
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 0x25667e8
mov r9d, 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1f2e7a8
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x1fd6f70
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1fd7b48
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x19]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10c8
mov qword [0x140295d90], 0x10d8
mov qword [0x140295da8], 0xd30
mov qword [0x140295e30], 0x938
mov qword [0x140295d98], 0xc5c
mov qword [0x140295db0], 0x908
mov qword [0x140295dd0], 0x2f4
mov qword [0x140295e08], 0x84
mov qword [0x140295da0], 0x134
mov qword [0x140295e48], 0x88
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0xcf0
mov qword [0x140295df0], 0x1530
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x13ec
mov qword [0x140295e18], 0x218
mov qword [0x140295e28], 0x103f4ad
mov qword [0x140295dd8], 0x1fdf560
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2372_GTAProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_26
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128c28]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128c30]
mov word [rax + 0x18], cx
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1a], sil
call fcn.140054e10
test al, al
jne 0x1400582dd
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2372_GameProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_27
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128c48]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128c50]
mov word [rax + 0x18], cx
movzx ecx, byte [0x140128c52]
mov byte [rax + 0x1a], cl
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1b], sil
call fcn.140054e10
test al, al
je 0x14005848d
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 0x252dcd8
mov r9d, 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1f05208
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x1f9e9f0
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1f9f5c8
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x19]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10c8
mov qword [0x140295d90], 0x10d8
mov qword [0x140295da8], 0xd30
mov qword [0x140295e30], 0x938
mov qword [0x140295d98], 0xc5c
mov qword [0x140295db0], 0x908
mov qword [0x140295dd0], 0x2f4
mov qword [0x140295e08], 0x84
mov qword [0x140295da0], 0x134
mov qword [0x140295e48], 0x88
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0xcf0
mov qword [0x140295df0], 0x14e0
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x13ec
mov qword [0x140295e18], 0x218
mov qword [0x140295e28], 0x1035665
mov qword [0x140295dd8], 0x1f9ffa0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2189_GTAProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_26
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128c68]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128c70]
mov word [rax + 0x18], cx
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1a], sil
call fcn.140054e10
test al, al
jne 0x140058545
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_b2189_GameProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_27
movups xmmword [rax], xmm0
mov qword [rbp + 0x2f], Ordinal_33
movsd xmm0, qword [0x140128c88]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140128c90]
mov word [rax + 0x18], cx
movzx ecx, byte [0x140128c92]
mov byte [rax + 0x1a], cl
lea rcx, [rbp + 0x17]
mov byte [rax + 0x1b], sil
call fcn.140054e10
test al, al
je 0x1400586f5
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 0x24e6d90
mov r9d, 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1ee18a8
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x1f888c0
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1f89498
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x19]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10c8
mov qword [0x140295d90], 0x10d8
mov qword [0x140295da8], 0xd30
mov qword [0x140295e30], 0x938
mov qword [0x140295d98], 0xc5c
mov qword [0x140295db0], 0x908
mov qword [0x140295dd0], 0x2f4
mov qword [0x140295e08], 0x84
mov qword [0x140295da0], 0x134
mov qword [0x140295e48], 0x68
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0xcf0
mov qword [0x140295df0], 0x14e0
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x13ec
mov qword [0x140295e18], 0x218
mov qword [0x140295e28], 0x102f8e9
mov qword [0x140295dd8], 0x1f6ef80
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_GTAProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WS2_32.dll_sendto
movups xmmword [rax], xmm0
mov ecx, dword [0x140128ca8]
mov dword [rax + 0x10], ecx
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x2f], Ordinal_33
mov byte [rax + 0x14], sil
call fcn.140054e10
test al, al
jne 0x14005878f
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1f], rsi
call fcn.14010cbec
movups xmm0, xmmword [str.FiveM_GameProcess.exe]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x27], reloc.WS2_32.dll_setsockopt
movups xmmword [rax], xmm0
mov ecx, dword [0x140128cc0]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x140128cc4]
mov byte [rax + 0x14], cl
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x2f], Ordinal_33
mov byte [rax + 0x15], sil
call fcn.140054e10
test al, al
je 0x14005893f
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 0x247f840
mov r9d, 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x1efd4c8
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295dc8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 9]
mov rax, qword [rbp - 0x19]
add rdx, 0x2087780
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295de8], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140295d68]
lea r8, [rbp - 0x19]
mov rax, qword [rbp - 9]
add rdx, 0x2088360
mov rcx, qword [0x140295d60]
mov r9d, 8
mov qword [0x140295d88], rax
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x19]
mov qword [0x140295e20], rax
mov qword [0x140295e38], 0x10b8
mov qword [0x140295d90], 0x10c8
mov qword [0x140295da8], 0xd28
mov qword [0x140295e30], 0x938
mov qword [0x140295d98], 0xb7c
mov qword [0x140295db0], 0x908
mov qword [0x140295dd0], 0x2e8
mov qword [0x140295e08], 0x74
mov qword [0x140295da0], 0x12c
mov qword [0x140295e48], 0x68
mov qword [0x140295e40], 0x20
mov qword [0x140295dc0], 0x24
mov qword [0x140295db8], 0x14c
mov qword [0x140295df0], 0x14b8
mov qword [0x140295de0], 0x280
mov qword [0x140295e10], 0x189
mov qword [0x140295e00], 0x13ec
mov qword [0x140295e18], 0x1f8
mov qword [0x140295e28], 0xec58f1
mov qword [0x140295dd8], 0x206b4e0
mov rdx, qword [0x140295dc8]
lea r8, [rbp - 9]
mov rcx, qword [0x140295d60]
add rdx, 8
mov r9d, 8
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 9]
mov qword [0x140295df8], rax
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14010c810
mov rsi, qword [rsp + 0xc0]
add rsp, 0xa0
pop rbp
ret