Function at 0x1401350da
Capabilities:
Create thread
Terminate process

Disassembly:
jmp 0x1402eb0c0
push rbp
push rsi
push rdi
mov eax, 0x1060
call fcn.14012f239
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x2ec
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1404edd40]
xor rax, rbp
mov qword [rbp + 0x1020], rax
mov byte [rbp + 0xfa4], 0
mov byte [rbp + 0xf84], 0
mov byte [rbp + 0xfc4], 0
lea rcx, [0x14052772d]
call fcn.1401347d9
xor edx, edx
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1404f8e68], rax
lea rax, [rbp + 0x548]
mov qword [rbp + 0x588], rax
lea rax, [rbp + 0x5a4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x5c8]
lea rcx, [rbp + 0x5a4]
call fcn.1402b8d10
mov rcx, rax
call fcn.140132c4f
mov rdx, rax
mov rcx, qword [rbp + 0x588]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb220
mov byte [rbp + 0xf84], 1
mov eax, dword [0x1404ab35c]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x1404ab358]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x1404ab360]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0x5f4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x618]
lea rcx, [rbp + 0x5f4]
call fcn.1402b8ed0
mov rcx, rax
call fcn.140135152
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov qword [0x1404f8ec0], 0x10d8
mov qword [0x1404f8eb8], 0x14b8
jmp 0x1402eb927
lea rax, [rbp + 0x648]
mov qword [rbp + 0x688], rax
lea rax, [rbp + 0x6a4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x6c8]
lea rcx, [rbp + 0x6a4]
call fcn.1402b8f40
mov rcx, rax
call fcn.1401349a5
mov rdx, rax
mov rcx, qword [rbp + 0x688]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb31c
mov byte [rbp + 0xf84], 1
mov eax, dword [0x1404ab350]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x1404ab34c]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x1404ab354]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0x704]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x728]
lea rcx, [rbp + 0x704]
call fcn.1402b8fb0
mov rcx, rax
call fcn.140133433
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov qword [0x1404f8ec0], 0x10d8
mov qword [0x1404f8ed8], 0x20d9868
mov qword [0x1404f8eb8], 0x14e0
jmp 0x1402eb927
lea rax, [rbp + 0x768]
mov qword [rbp + 0x7a8], rax
lea rax, [rbp + 0x7c4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x7e8]
lea rcx, [rbp + 0x7c4]
call fcn.1402b9020
mov rcx, rax
call fcn.1401349a5
mov rdx, rax
mov rcx, qword [rbp + 0x7a8]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb420
mov byte [rbp + 0xf84], 1
mov eax, dword [0x1404ab344]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x1404ab340]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x1404ab348]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0x824]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x848]
lea rcx, [rbp + 0x824]
call fcn.1402b9090
mov rcx, rax
call fcn.140133433
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov qword [0x1404f8ec0], 0x10d8
mov rcx, qword [0x1404f6e28]
call fcn.14012facc
mov qword [0x1404f8ed8], rax
mov qword [0x1404f8eb8], 0x14e0
jmp 0x1402eb927
lea rax, [rbp + 0x888]
mov qword [rbp + 0x8c8], rax
lea rax, [rbp + 0x8e4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x908]
lea rcx, [rbp + 0x8e4]
call fcn.1402b9100
mov rcx, rax
call fcn.1401349a5
mov rdx, rax
mov rcx, qword [rbp + 0x8c8]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb51c
mov byte [rbp + 0xf84], 1
mov eax, dword [0x1404ab338]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x1404ab334]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x1404ab33c]
mov dword [rbp + 0x44], eax
mov qword [0x1404f8ec0], 0x10d8
lea rax, [rbp + 0x944]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0x968]
lea rcx, [rbp + 0x944]
call fcn.1402b9170
mov rcx, rax
call fcn.140133433
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov qword [0x1404f8eb8], 0x14e0
mov qword [0x1404f8ed8], 0x1fd8570
jmp 0x1402eb927
lea rax, [rbp + 0x9a8]
mov qword [rbp + 0x9e8], rax
lea rax, [rbp + 0xa04]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xa28]
lea rcx, [rbp + 0xa04]
call fcn.1402b91e0
mov rcx, rax
call fcn.1401349a5
mov rdx, rax
mov rcx, qword [rbp + 0x9e8]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb618
mov byte [rbp + 0xf84], 1
mov eax, dword [0x1404ab32c]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x1404ab328]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x1404ab330]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0xa64]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xa88]
lea rcx, [rbp + 0xa64]
call fcn.1402b8030
mov rcx, rax
call fcn.140133433
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov qword [0x1404f8ec0], 0x10d8
mov qword [0x1404f8ed8], 0x1fd7b48
mov qword [0x1404f8eb8], 0x1530
jmp 0x1402eb927
lea rax, [rbp + 0xac8]
mov qword [rbp + 0xb08], rax
lea rax, [rbp + 0xb24]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xb48]
lea rcx, [rbp + 0xb24]
call fcn.1402b80a0
mov rcx, rax
call fcn.1401349a5
mov rdx, rax
mov rcx, qword [rbp + 0xb08]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb725
mov byte [rbp + 0xf84], 1
mov eax, dword [0x1404ab320]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x1404ab31c]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x1404ab324]
mov dword [rbp + 0x44], eax
mov qword [0x1404f8ec0], 0x10d8
lea rax, [rbp + 0xb84]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xba8]
lea rcx, [rbp + 0xb84]
call fcn.1402b8110
mov rcx, rax
call fcn.140133433
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov rax, qword [0x1404f6e28]
add rax, 0x20d9868
mov rcx, rax
call fcn.14012facc
mov qword [0x1404f8ed8], rax
mov qword [0x1404f8eb8], 0x1530
jmp 0x1402eb927
lea rax, [rbp + 0xbe8]
mov qword [rbp + 0xc28], rax
lea rax, [rbp + 0xc44]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xc68]
lea rcx, [rbp + 0xc44]
call fcn.1402b8180
mov rcx, rax
call fcn.1401349a5
mov rdx, rax
mov rcx, qword [rbp + 0xc28]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb821
mov byte [rbp + 0xf84], 1
mov eax, dword [0x1404aad58]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x14048576c]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x1404aad5c]
mov dword [rbp + 0x44], eax
mov qword [0x1404f8ec0], 0x10d8
lea rax, [rbp + 0xca4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xcc8]
lea rcx, [rbp + 0xca4]
call fcn.1402b81f0
mov rcx, rax
call fcn.140133433
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov qword [0x1404f8ed8], 0x20d9868
mov qword [0x1404f8eb8], 0x1530
jmp 0x1402eb927
lea rax, [rbp + 0xd08]
mov qword [rbp + 0xd48], rax
lea rax, [rbp + 0xd64]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xd88]
lea rcx, [rbp + 0xd64]
call fcn.1402b8260
mov rcx, rax
call fcn.1401349a5
mov rdx, rax
mov rcx, qword [rbp + 0xd48]
call fcn.140130f0d
mov qword [rbp + 0xfd8], rax
mov rcx, qword [rbp + 0xfd8]
call fcn.1401301b1
movzx eax, al
test eax, eax
je 0x1402eb927
mov byte [0x1404f8efd], 1
mov qword [0x1404f8ec0], 0x10b8
mov rcx, qword [0x1404f6e28]
call fcn.14012facc
mov qword [0x1404f8ed8], rax
mov byte [rbp + 0xf84], 1
mov eax, dword [0x140485764]
mov dword [rbp + 4], eax
mov byte [rbp + 0xfa4], 1
mov eax, dword [0x140460bdc]
mov dword [rbp + 0x24], eax
mov byte [rbp + 0xfc4], 1
mov eax, dword [0x140485768]
mov dword [rbp + 0x44], eax
lea rax, [rbp + 0xdc4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rbp + 0xde8]
lea rcx, [rbp + 0xdc4]
call fcn.1402b82d0
mov rcx, rax
call fcn.140133433
mov rdx, rax
lea rcx, [0x1404f9000]
call fcn.14012e3b6
mov qword [0x1404f8eb8], 0x150c
cmp qword [0x1404f8e68], 0
jne 0x1402eb96b
lea rax, str.Could_not_find_FiveM_process.
mov qword [rbp + 0x68], rax
lea rax, str.FiveM_Cheats
mov qword [rbp + 0x88], rax
mov r9d, 0x10
mov r8, qword [rbp + 0x88]
mov rdx, qword [rbp + 0x68]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rdx, [rbp + 0xa4]
mov rcx, qword [0x1404f8e68]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp + 0xa4]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1404f6e20], rax
lea rcx, [rbp + 0xe94]
call fcn.1401317f0
mov qword [rbp + 0xfd8], rax
lea rax, [rbp + 0xeb8]
mov qword [rbp + 0xee8], rax
mov rdx, qword [rbp + 0xee8]
lea rcx, [0x1404f9000]
call fcn.14012ebb8
mov qword [rbp + 0xfe0], rax
mov rax, qword [rbp + 0xfe0]
mov qword [rbp + 0xfe8], rax
lea rax, [rbp + 0xf08]
mov qword [rbp + 0xf38], rax
mov rdx, qword [rbp + 0xf38]
lea rcx, [0x1404f9000]
call fcn.140134a3b
mov qword [rbp + 0xff0], rax
mov rax, qword [rbp + 0xff0]
mov qword [rbp + 0xff8], rax
mov r9, qword [rbp + 0xfd8]
mov r8, qword [rbp + 0xfe8]
mov rdx, qword [rbp + 0xff8]
lea rcx, [rbp + 0xe58]
call fcn.14013348d
mov qword [rbp + 0x1000], rax
mov rax, qword [rbp + 0x1000]
mov qword [rbp + 0x1008], rax
mov rcx, qword [rbp + 0x1008]
call fcn.140130314
mov qword [rbp + 0x1010], rax
mov eax, dword [rbp + 0xa4]
mov qword [rbp + 0x1018], rax
mov r8, qword [rbp + 0x1010]
mov rdx, qword [rbp + 0x1018]
lea rcx, [rbp + 0xf58]
call fcn.14012f653
lea rcx, [rbp + 0xe28]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
lea rax, [0x1404f6e28]
lea rcx, [rbp + 0xe28]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x18
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0xe58]
call fcn.140133839
cmp byte [rbp + 0xfa4], 0
jne 0x1402ebad9
lea rcx, str.off_replay
call fcn.14012f086
mov eax, dword [rbp + 0x24]
mov rcx, qword [0x1404f6e28]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14012facc
mov qword [0x1404f6e40], rax
cmp byte [rbp + 0xf84], 0
jne 0x1402ebb0d
lea rcx, str.off_world
call fcn.14012f086
mov eax, dword [rbp + 4]
mov rcx, qword [0x1404f6e28]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14012facc
mov qword [0x1404f6e48], rax
cmp byte [rbp + 0xfc4], 0
jne 0x1402ebb41
lea rcx, str.off_view
call fcn.14012f086
mov eax, dword [rbp + 0x44]
mov rcx, qword [0x1404f6e28]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.14012facc
mov qword [0x1404f6e50], rax
mov rax, qword [0x1404f6e48]
add rax, 8
mov rcx, rax
call fcn.14012facc
mov qword [0x1404f6e58], rax
call fcn.1401331f9
cmp qword [0x1404f8ee8], 0
jne 0x1402ebb90
mov eax, 1
jmp 0x1402ebbdb
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14012ef9b]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140132a7e
mov rcx, qword [0x1404f8ee8]
call fcn.14012e3b1
test eax, eax
jne 0x1402ebbd6
call fcn.140130698
call fcn.14013366d
jmp 0x1402ebbba
call fcn.14012eb0e
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x1403f6450]
call fcn.1401335c3
mov rax, rdi
mov rcx, qword [rbp + 0x1020]
xor rcx, rbp
call fcn.1401311e7
lea rsp, [rbp + 0x1030]
pop rdi
pop rsi
pop rbp
ret