Function at 0x18004a164
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004b6ca
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.180056848
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r12d, r12d
lea rcx, str.rage_scripting_five.dll
add rax, 0x14f70
mov byte [0x1800d13e8], r12b
mov qword [0x1800d1368], rax
mov byte [0x1800d13e9], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1800d13f8]
mov r13d, 0xe463da3c
test rax, rax
jne 0x18004a297
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a27c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a27c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a278
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a259
cmp r11d, r13d
je 0x18004b6ec
test edx, edx
jne 0x18004a23d
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18004a28d
cmp qword [rax + 0x30], r12
jne 0x18004a219
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004a35f
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004a34d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a332
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a332
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a32e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a30f
cmp r11d, r13d
je 0x18004b709
test edx, edx
jne 0x18004a2f4
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a343
cmp qword [rax + 0x30], r12
jne 0x18004a2d0
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004a442
lea rax, [r14 + 0x794784]
mov dword [0x1800d13ac], 0x1098
mov qword [0x1800d1390], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13a8], 0x150c
mov dword [0x1800d13b8], 0x250
mov dword [0x1800d13b0], 0x10b8
mov dword [0x1800d13bc], 0x10a8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13c0], 0x88
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov byte [0x1800d13e8], 1
mov dword [0x1800d13b4], 0x218
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004a4e7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a4cc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a4cc
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a4c8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a4a9
cmp r11d, r13d
je 0x18004b726
test edx, edx
jne 0x18004a48d
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a4dd
cmp qword [rax + 0x30], r12
jne 0x18004a469
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x18004a5b9
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004a5a7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a58c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a58c
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a588
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a565
cmp r11d, 0xe463da3c
je 0x18004b743
test edx, edx
jne 0x18004a54a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a59d
cmp qword [rax + 0x30], r12
jne 0x18004a526
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004a692
lea rax, [r14 + 0x78f450]
mov dword [0x1800d13ac], 0x10b8
mov qword [0x1800d1390], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13a8], r13d
mov dword [0x1800d13b8], 0x238
mov dword [0x1800d13b0], 0x10d8
mov dword [0x1800d13bc], 0x10c8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov dword [0x1800d13c0], 0x88
mov dword [0x1800d13b4], 0x218
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004a73b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a720
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a720
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a71c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a6f9
cmp r11d, 0xe463da3c
je 0x18004b760
test edx, edx
jne 0x18004a6dd
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a731
cmp qword [rax + 0x30], r12
jne 0x18004a6b9
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004a807
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004a7f5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a7da
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a7da
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a7d6
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a7b3
cmp r11d, 0xe463da3c
je 0x18004b77d
test edx, edx
jne 0x18004a798
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a7eb
cmp qword [rax + 0x30], r12
jne 0x18004a774
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004a8e0
lea rax, [r14 + 0x78c758]
mov dword [0x1800d13ac], 0x10b8
mov qword [0x1800d1390], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13a8], r13d
mov dword [0x1800d13b8], 0x238
mov dword [0x1800d13b0], 0x10d8
mov dword [0x1800d13bc], 0x10c8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov dword [0x1800d13c0], 0x88
mov dword [0x1800d13b4], 0x218
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004a989
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a96e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a96e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a96a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a947
cmp r11d, 0xe463da3c
je 0x18004b79a
test edx, edx
jne 0x18004a92b
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a97f
cmp qword [rax + 0x30], r12
jne 0x18004a907
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004aa55
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004aa43
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aa28
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aa28
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aa24
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aa01
cmp r11d, 0xe463da3c
je 0x18004b7b7
test edx, edx
jne 0x18004a9e6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aa39
cmp qword [rax + 0x30], r12
jne 0x18004a9c2
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004ab2e
lea rax, [r14 + 0x78c5e4]
mov dword [0x1800d13ac], 0x10b8
mov qword [0x1800d1390], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13a8], r13d
mov dword [0x1800d13b8], 0x238
mov dword [0x1800d13b0], 0x10d8
mov dword [0x1800d13bc], 0x10c8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov dword [0x1800d13c0], 0x88
mov dword [0x1800d13b4], 0x218
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004abd7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004abbc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004abbc
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004abb8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ab95
cmp r11d, 0xe463da3c
je 0x18004b7d4
test edx, edx
jne 0x18004ab79
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004abcd
cmp qword [rax + 0x30], r12
jne 0x18004ab55
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18004acaa
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004ac98
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ac7d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ac7d
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ac79
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ac56
cmp r11d, 0xe463da3c
je 0x18004b7f1
test edx, edx
jne 0x18004ac3a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ac8e
cmp qword [rax + 0x30], r12
jne 0x18004ac16
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004ad6f
lea rax, [r14 + 0x787fe4]
mov dword [0x1800d13ac], 0x10b8
mov qword [0x1800d1390], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13a8], r13d
mov dword [0x1800d13b8], 0x218
mov dword [0x1800d13b0], 0x10d8
mov dword [0x1800d13bc], 0x10c8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004ae18
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004adfd
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004adfd
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004adf9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004add6
cmp r11d, 0xe463da3c
je 0x18004b80e
test edx, edx
jne 0x18004adba
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ae0e
cmp qword [rax + 0x30], r12
jne 0x18004ad96
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004aee4
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004aed2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aeb7
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aeb7
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aeb3
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ae90
cmp r11d, 0xe463da3c
je 0x18004b82b
test edx, edx
jne 0x18004ae75
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aec8
cmp qword [rax + 0x30], r12
jne 0x18004ae51
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004afc4
lea rax, [r14 + 0x79b5dc]
mov dword [0x1800d13ac], 0x10b8
mov qword [0x1800d1390], rax
mov ecx, 0x218
lea rax, [rbp + 0x24e6d90]
mov dword [0x1800d13a8], r13d
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13b8], ecx
mov dword [0x1800d13b0], 0x10d8
mov dword [0x1800d13bc], 0x10c8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13e4], 0x908
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov dword [0x1800d13c0], 0x68
mov dword [0x1800d13b4], ecx
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004b06d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b052
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b052
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b04e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b02b
cmp r11d, 0xe463da3c
je 0x18004b848
test edx, edx
jne 0x18004b00f
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b063
cmp qword [rax + 0x30], r12
jne 0x18004afeb
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004b139
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004b127
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b10c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b10c
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b108
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b0e5
cmp r11d, 0xe463da3c
je 0x18004b865
test edx, edx
jne 0x18004b0ca
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b11d
cmp qword [rax + 0x30], r12
jne 0x18004b0a6
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004b212
lea rax, [r14 + 0x7935d0]
mov dword [0x1800d13ac], 0x10a8
mov qword [0x1800d1390], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13a8], r13d
mov dword [0x1800d13b8], 0x218
mov dword [0x1800d13b0], 0x10d8
mov dword [0x1800d13bc], 0x10b8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov dword [0x1800d13c0], 0x88
mov dword [0x1800d13b4], 0x218
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004b2ba
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b29f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b29f
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b29b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b278
cmp r11d, 0xe463da3c
je 0x18004b882
test edx, edx
jne 0x18004b25d
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b2b0
cmp qword [rax + 0x30], r12
jne 0x18004b239
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004b387
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004b375
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b35a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b35a
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b356
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b333
cmp r11d, 0xe463da3c
je 0x18004b89f
test edx, edx
jne 0x18004b317
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b36b
cmp qword [rax + 0x30], r12
jne 0x18004b2f3
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004b456
lea rax, [r14 + 0x795f9c]
mov dword [0x1800d13ac], 0x1098
mov qword [0x1800d1390], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1800d1398], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x1800d13a0], rax
mov dword [0x1800d13a8], 0x150c
mov dword [0x1800d13b8], 0x250
mov dword [0x1800d13b0], 0x10b8
mov dword [0x1800d13bc], 0x10a8
mov dword [0x1800d13c4], 0x2f4
mov dword [0x1800d13c8], 0x84
mov dword [0x1800d13dc], 0x134
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5f0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x28c
mov byte [0x1800d13e9], 1
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004b4fe
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b4e3
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b4e3
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b4df
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b4bc
cmp r11d, 0xe463da3c
je 0x18004b8bc
test edx, edx
jne 0x18004b4a1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b4f4
cmp qword [rax + 0x30], r12
jne 0x18004b47d
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004b5cb
mov rax, qword [0x1800d13f8]
test rax, rax
jne 0x18004b5b9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b59e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b59e
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b59a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b577
cmp r11d, 0xe463da3c
je 0x18004b8d9
test edx, edx
jne 0x18004b55b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b5af
cmp qword [rax + 0x30], r12
jne 0x18004b537
mov rax, r12
mov qword [0x1800d13f8], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004b6a7
lea rax, [r14 + 0xcaf950]
mov dword [0x1800d13ac], 0x10a8
mov qword [0x1800d1390], rax
lea rcx, [rbp + 0x2087780]
lea rax, [rbp + 0x247f840]
mov dword [0x1800d13a8], 0x14b8
mov qword [0x1800d1380], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1800d1388], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1800d1398], rax
mov dword [0x1800d13b8], 0x218
mov dword [0x1800d13c0], 0x68
mov dword [0x1800d13b0], 0x10c8
mov dword [0x1800d13bc], 0x10b8
mov dword [0x1800d13c4], 0x2e8
mov dword [0x1800d13c8], 0x74
mov dword [0x1800d13dc], 0x12c
mov dword [0x1800d13cc], 0x20
mov dword [0x1800d13d4], 0x24
mov dword [0x1800d13d0], 0x5e0
mov dword [0x1800d13e0], 0x146b
mov dword [0x1800d13d8], 0x25c
mov dword [0x1800d13b4], 0x1f8
mov qword [0x1800d13a0], rcx
call fcn.180049528
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x180049114]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a290
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a346
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a4e0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a5a0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a734
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a7ee
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a982
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aa3c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004abd0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ac91
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ae11
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aecb
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b066
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b120
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b2b3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b36e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b4f7
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b5b2