Function at 0x180062170
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r15, rcx
mov rax, qword gs:[0x60]
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x180063a52
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, rax
mov ecx, 3
call fcn.1800743c0
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x15300
mov qword [0x1801595b0], rax
xor r12d, r12d
mov byte [0x1801597c8], r12b
mov byte [0x1801597c9], r12b
lea rcx, str.rage_scripting_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
lea r8, [rax + 0x313470]
mov qword [0x180159ac8], r8
lea rdi, [0x180157750]
cmp rdi, r8
je 0x180062254
mov qword [rsp + 0x98], rdi
mov edx, dword [r8]
mov dword [0x180157750], edx
mov r8, qword [r8 + 8]
mov rdx, qword [r8]
lea rcx, [0x180157758]
call fcn.18005cfe4
mov rdx, qword [0x180157760]
mov rcx, rdi
call fcn.180015aa4
mov rdx, rax
mov rcx, rdi
call fcn.1800607e0
nop
lea r8, [rbx + 0x313300]
lea rdi, [0x180157710]
cmp rdi, r8
je 0x1800622a6
mov qword [rsp + 0x98], rdi
mov eax, dword [r8]
mov dword [0x180157710], eax
mov r8, qword [r8 + 8]
mov rdx, qword [r8]
lea rcx, [0x180157718]
call fcn.18005cfe4
mov rdx, qword [0x180157720]
mov rcx, rdi
call fcn.180015aa4
mov rdx, rax
mov rcx, rdi
call fcn.180060934
nop
lea rax, [rbx + 0x134640]
mov qword [0x180159ac0], rax
lea rax, [rbx + 0x1359f0]
mov qword [0x180159ab8], rax
mov r13d, 0xe463da3c
mov rax, qword [0x180159af0]
test rax, rax
jne 0x18006236f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x180062354
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x180062354
mov esi, dword [r8 + 0x20]
dec r9d
lea rax, [rsi + r9*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006234f
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062330
cmp r11d, r13d
je 0x180063a75
test r9d, r9d
jne 0x180062314
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x180062365
cmp qword [rax + 0x30], r12
jne 0x1800622ef
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b3095_GameProcess.exe
call rax
test rax, rax
jne 0x18006243a
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062428
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x18006240d
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x18006240d
mov esi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rsi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180062408
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1800623e9
cmp r11d, r13d
je 0x180063a93
test r8d, r8d
jne 0x1800623cd
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006241e
cmp qword [rax + 0x30], r12
jne 0x1800623a8
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b3095_GTAProcess.exe
call rax
test rax, rax
je 0x18006251f
mov dword [0x180159794], 0x1098
mov dword [0x180159790], 0x150c
mov dword [0x180159798], 0x10b8
mov dword [0x1801597a0], 0x10a8
mov dword [0x1801597a4], 0x2f4
mov dword [0x1801597a8], 0x84
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [rbp + 0x2593320]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1f58b58]
mov qword [0x180159768], rax
lea rax, [rbp + 0x20025b8]
mov qword [0x180159778], rax
lea rax, [rbp + 0x20019e0]
mov qword [0x180159780], rax
lea rax, [rbp + 0x1624f80]
mov qword [0x1801597d8], rax
lea rax, [r14 + 0x2ef5870]
mov qword [0x1801595a8], rax
lea rax, [r14 + 0xa596b0]
mov qword [0x180159598], rax
mov qword [0x1801595a0], 0x161d8f9
mov rax, qword [0x180159af0]
test rax, rax
jne 0x1800625c6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x1800625ab
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x1800625ab
mov esi, dword [r9 + 0x20]
dec r8d
lea rax, [rsi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800625a6
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062587
cmp r11d, r13d
je 0x180063ab1
test r8d, r8d
jne 0x18006256b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x1800625bc
cmp qword [rax + 0x30], r12
jne 0x180062546
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x180062691
mov rax, qword [0x180159af0]
test rax, rax
jne 0x18006267f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180062664
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180062664
mov esi, dword [r9 + 0x20]
dec r8d
lea rax, [rsi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006265f
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062640
cmp r11d, r13d
je 0x180063acf
test r8d, r8d
jne 0x180062624
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180062675
cmp qword [rax + 0x30], r12
jne 0x1800625ff
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18006276e
mov dword [0x180159794], 0x1098
mov dword [0x180159790], 0x150c
mov dword [0x18015979c], 0x250
lea rax, [rbp + 0x15ea290]
mov qword [0x1801597d8], rax
mov dword [0x180159798], 0x10b8
mov dword [0x1801597a0], 0x10a8
mov dword [0x1801597a4], 0x2f4
mov dword [0x1801597a8], 0x84
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
lea rax, [r14 + 0x794784]
mov qword [0x180159770], rax
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
mov byte [0x1801597c8], 1
lea rax, [rbp + 0x254d448]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x180159768], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x180159778], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062815
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x1800627fa
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x1800627fa
mov esi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rsi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800627f5
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1800627d6
cmp r11d, r13d
je 0x180063aed
test r8d, r8d
jne 0x1800627ba
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006280b
cmp qword [rax + 0x30], r12
jne 0x180062795
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x1800628ea
mov rax, qword [0x180159af0]
test rax, rax
jne 0x1800628d8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x1800628bd
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x1800628bd
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800628b8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062895
cmp r11d, 0xe463da3c
je 0x180063b0b
test r8d, r8d
jne 0x180062879
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x1800628ce
cmp qword [rax + 0x30], r12
jne 0x180062854
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x1800629bd
mov dword [0x180159794], 0x10b8
mov dword [0x180159790], r13d
lea rax, [rbp + 0x15d6cec]
mov qword [0x1801597d8], rax
mov dword [0x18015979c], 0x238
lea rax, [r14 + 0x78f450]
mov qword [0x180159770], rax
mov dword [0x180159798], 0x10d8
mov dword [0x1801597a0], 0x10c8
mov dword [0x1801597a4], 0x2f4
mov dword [0x1801597a8], 0x84
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [rbp + 0x26684d8]
mov qword [0x180159760], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x180159768], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x180159778], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062a68
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180062a4d
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180062a4d
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rdi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180062a48
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062a25
cmp r11d, 0xe463da3c
je 0x180063b29
test r8d, r8d
jne 0x180062a09
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180062a5e
cmp qword [rax + 0x30], r12
jne 0x1800629e4
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x180062b37
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062b25
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180062b0a
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180062b0a
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180062b05
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062ae2
cmp r11d, 0xe463da3c
je 0x180063b47
test r8d, r8d
jne 0x180062ac6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180062b1b
cmp qword [rax + 0x30], r12
jne 0x180062aa1
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x180062c0a
mov dword [0x180159794], 0x10b8
mov dword [0x180159790], r13d
mov dword [0x18015979c], 0x238
lea rax, [rbp + 0x15dfe20]
mov qword [0x1801597d8], rax
mov dword [0x180159798], 0x10d8
mov dword [0x1801597a0], 0x10c8
mov dword [0x1801597a4], 0x2f4
lea rax, [r14 + 0x78c758]
mov qword [0x180159770], rax
mov dword [0x1801597a8], 0x84
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [rbp + 0x2567db0]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x180159768], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x180159778], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062cb5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180062c9a
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180062c9a
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rdi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180062c95
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062c72
cmp r11d, 0xe463da3c
je 0x180063b65
test r8d, r8d
jne 0x180062c56
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180062cab
cmp qword [rax + 0x30], r12
jne 0x180062c31
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x180062d84
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062d72
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180062d57
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180062d57
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180062d52
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062d2f
cmp r11d, 0xe463da3c
je 0x180063b83
test r8d, r8d
jne 0x180062d13
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180062d68
cmp qword [rax + 0x30], r12
jne 0x180062cee
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x180062e57
mov dword [0x180159794], 0x10b8
mov dword [0x180159790], r13d
mov dword [0x18015979c], 0x238
lea rax, [rbp + 0x15deeb0]
mov qword [0x1801597d8], rax
mov dword [0x180159798], 0x10d8
mov dword [0x1801597a0], 0x10c8
mov dword [0x1801597a4], 0x2f4
mov dword [0x1801597a8], 0x84
lea rax, [r14 + 0x78c5e4]
mov qword [0x180159770], rax
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [rbp + 0x25667e8]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x180159768], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x180159778], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062f02
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180062ee7
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180062ee7
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rdi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180062ee2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062ebf
cmp r11d, 0xe463da3c
je 0x180063ba1
test r8d, r8d
jne 0x180062ea3
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180062ef8
cmp qword [rax + 0x30], r12
jne 0x180062e7e
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x180062fd7
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180062fc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180062faa
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180062faa
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180062fa5
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180062f82
cmp r11d, 0xe463da3c
je 0x180063bbf
test r8d, r8d
jne 0x180062f66
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180062fbb
cmp qword [rax + 0x30], r12
jne 0x180062f41
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x1800630aa
mov dword [0x180159794], 0x10b8
mov dword [0x180159790], r13d
mov dword [0x18015979c], 0x218
lea rax, [rbp + 0x15cd2c0]
mov qword [0x1801597d8], rax
mov dword [0x180159798], 0x10d8
mov dword [0x1801597a0], 0x10c8
mov dword [0x1801597a4], 0x2f4
mov dword [0x1801597a8], 0x84
lea rax, [r14 + 0x787fe4]
mov qword [0x180159770], rax
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [rbp + 0x252dcd8]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x180159768], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x180159778], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180063155
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x18006313a
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x18006313a
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rdi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180063135
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180063112
cmp r11d, 0xe463da3c
je 0x180063bdd
test r8d, r8d
jne 0x1800630f6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18006314b
cmp qword [rax + 0x30], r12
jne 0x1800630d1
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x180063224
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180063212
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x1800631f7
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x1800631f7
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800631f2
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1800631cf
cmp r11d, 0xe463da3c
je 0x180063bfb
test r8d, r8d
jne 0x1800631b3
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180063208
cmp qword [rax + 0x30], r12
jne 0x18006318e
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x180063301
mov dword [0x180159794], 0x10b8
mov dword [0x180159790], r13d
lea rax, [rbp + 0x15b1008]
mov qword [0x1801597d8], rax
mov dword [0x18015979c], 0x218
mov dword [0x180159798], 0x10d8
mov dword [0x1801597a0], 0x10c8
mov dword [0x1801597a4], 0x2f4
mov dword [0x1801597a8], 0x84
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597c4], 0x908
lea rax, [r14 + 0x79b5dc]
mov qword [0x180159770], rax
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [rbp + 0x24e6d90]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x180159768], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x180159778], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x1800633ac
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x180063391
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x180063391
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006338c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180063369
cmp r11d, 0xe463da3c
je 0x180063c19
test r8d, r8d
jne 0x18006334d
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x1800633a2
cmp qword [rax + 0x30], r12
jne 0x180063328
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18006347b
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180063469
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x18006344e
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x18006344e
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180063449
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180063426
cmp r11d, 0xe463da3c
je 0x180063c37
test r8d, r8d
jne 0x18006340a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18006345f
cmp qword [rax + 0x30], r12
jne 0x1800633e5
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18006354e
mov dword [0x180159794], 0x10a8
mov dword [0x180159790], r13d
mov dword [0x18015979c], 0x218
mov dword [0x180159798], 0x10d8
mov dword [0x1801597a0], 0x10b8
mov dword [0x1801597a4], 0x2f4
lea rax, [rbp + 0x159b224]
mov qword [0x1801597d8], rax
mov dword [0x1801597a8], 0x84
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
lea rax, [r14 + 0x7935d0]
mov qword [0x180159770], rax
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [rbp + 0x24c8858]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x180159768], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x180159778], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x1800635f9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x1800635de
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x1800635de
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rdi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800635d9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1800635b6
cmp r11d, 0xe463da3c
je 0x180063c55
test r8d, r8d
jne 0x18006359a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x1800635ef
cmp qword [rax + 0x30], r12
jne 0x180063575
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x1800636c8
mov rax, qword [0x180159af0]
test rax, rax
jne 0x1800636b6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r9d, dword [rax + rdx + 0x88]
add r9, rdx
cmp r9, rdx
je 0x18006369b
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x18006369b
mov edi, dword [r9 + 0x20]
dec r8d
lea rax, [rdx + r8*4]
mov ecx, dword [rax + rdi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180063696
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180063673
cmp r11d, 0xe463da3c
je 0x180063c73
test r8d, r8d
jne 0x180063657
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x1800636ac
cmp qword [rax + 0x30], r12
jne 0x180063632
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x1800637a5
mov dword [0x180159794], 0x1098
mov dword [0x180159790], 0x150c
mov dword [0x18015979c], 0x250
mov dword [0x180159798], 0x10b8
mov dword [0x1801597a0], 0x10a8
lea rax, [rbp + 0x160ff90]
mov qword [0x1801597d8], rax
mov dword [0x1801597a4], 0x2f4
mov dword [0x1801597a8], 0x84
mov dword [0x1801597bc], 0x134
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5f0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x28c
lea rax, [r14 + 0x795f9c]
mov qword [0x180159770], rax
mov byte [0x1801597c9], 1
lea rax, [rbp + 0x257bea0]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x180159768], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x180159778], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x180159780], rax
mov rax, qword [0x180159af0]
test rax, rax
jne 0x180063850
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x180063835
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x180063835
mov esi, dword [r8 + 0x20]
dec r9d
lea rax, [rdx + r9*4]
mov ecx, dword [rax + rsi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x180063830
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006380d
cmp r11d, 0xe463da3c
je 0x180063c91
test r9d, r9d
jne 0x1800637f1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180063846
cmp qword [rax + 0x30], r12
jne 0x1800637cc
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18006391f
mov rax, qword [0x180159af0]
test rax, rax
jne 0x18006390d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x1800638f2
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x1800638f2
mov esi, dword [r8 + 0x20]
dec r9d
lea rax, [rdx + r9*4]
mov ecx, dword [rax + rsi]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1800638ed
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1800638ca
cmp r11d, 0xe463da3c
je 0x180063caf
test r9d, r9d
jne 0x1800638ae
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180063903
cmp qword [rax + 0x30], r12
jne 0x180063889
mov rax, r12
mov qword [0x180159af0], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x1800639f5
mov dword [0x180159794], 0x10a8
mov dword [0x180159790], 0x14b8
mov dword [0x18015979c], 0x218
mov dword [0x180159798], 0x10c8
lea rax, [rbp + 0x1561e30]
mov qword [0x1801597d8], rax
mov dword [0x1801597a0], 0x10b8
lea rax, [r14 + 0xcaf950]
mov qword [0x180159770], rax
mov dword [0x1801597a4], 0x2e8
mov dword [0x1801597a8], 0x74
mov dword [0x1801597bc], 0x12c
mov dword [0x1801597ac], 0x20
mov dword [0x1801597b4], 0x24
mov dword [0x1801597b0], 0x5e0
mov dword [0x1801597c0], 0x146b
mov dword [0x1801597b8], 0x25c
lea rax, [rbp + 0x247f840]
mov qword [0x180159760], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x180159768], rax
lea rax, [rbp + 0x2088360]
mov qword [0x180159778], rax
lea rax, [rbp + 0x2087780]
mov qword [0x180159780], rax
call fcn.18006138c
lea rdx, [0x180062088]
lea rcx, [rsp + 0x30]
call fcn.18005d390
nop
cmp dword [rsp + 0x38], r12d
je 0x180063ccd
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x180063ccd
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
mov r9, r15
lea r8, [0x18005f308]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov eax, 1
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062368
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062421
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x1800625bf
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062678
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x18006280e
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x1800628d1
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062a61
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062b1e
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062cae
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062d6b
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062efb
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180062fbe
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x18006314e
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x18006320b
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x1800633a5
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180063462
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x1800635f2
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x1800636af
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180063849
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov eax, dword [rcx + rax*4]
add rax, rdx
jmp 0x180063906
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3