Function at 0x18005ea0c
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r14, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18005fc0e
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov ecx, 3
call fcn.180070cf0
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r15d, r15d
or r13d, 0xffffffff
add rax, 0x14f70
mov byte [0x180181068], r15b
mov qword [0x180181008], rax
mov r12d, 0xe463da3c
mov rax, qword [0x180181078]
mov byte [0x180181069], r15b
test rax, rax
jne 0x18005eb2c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005eb11
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005eb11
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005eb0d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005eaee
cmp r11d, r12d
je 0x18005fc30
test edx, edx
jne 0x18005ead1
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18005eb22
cmp qword [rax + 0x30], r15
jne 0x18005eaad
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18005ebf6
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005ebe4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ebc9
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ebc9
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ebc5
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005eba6
cmp r11d, r12d
je 0x18005fc4d
test edx, edx
jne 0x18005eb89
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ebda
cmp qword [rax + 0x30], r15
jne 0x18005eb65
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18005ecad
lea rax, [rbp + 0x254d448]
mov dword [0x180181034], 0x1098
mov qword [0x180181010], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x180181018], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x180181020], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x180181028], rax
mov dword [0x180181030], 0x150c
mov dword [0x18018103c], 0x250
mov dword [0x180181038], 0x10b8
mov dword [0x180181040], 0x10a8
mov dword [0x180181044], 0x2f4
mov dword [0x180181048], 0x84
mov dword [0x18018105c], 0x134
mov dword [0x18018104c], 0x20
mov dword [0x180181050], 0x5f0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x28c
mov byte [0x180181068], 1
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005ed53
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ed38
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ed38
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ed34
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ed15
cmp r11d, r12d
je 0x18005fc6a
test edx, edx
jne 0x18005ecf8
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ed49
cmp qword [rax + 0x30], r15
jne 0x18005ecd4
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r12d, 0x1530
mov r13d, 0x238
test rax, rax
jne 0x18005ee2c
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005ee1a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005edff
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005edff
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005edfb
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005edd8
cmp r11d, 0xe463da3c
je 0x18005fc87
test edx, edx
jne 0x18005edbc
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ee10
cmp qword [rax + 0x30], r15
jne 0x18005ed98
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18005eee0
lea rax, [rbp + 0x26684d8]
mov dword [0x180181034], 0x10b8
mov qword [0x180181010], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x180181018], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x180181020], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x180181028], rax
mov dword [0x180181030], r12d
mov dword [0x18018103c], r13d
mov dword [0x180181038], 0x10d8
mov dword [0x180181040], 0x10c8
mov dword [0x180181044], 0x2f4
mov dword [0x180181048], 0x84
mov dword [0x18018105c], 0x134
mov dword [0x18018104c], 0x20
mov dword [0x180181054], 0x24
mov dword [0x180181050], 0x5f0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x28c
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005ef89
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ef6e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ef6e
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ef6a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ef47
cmp r11d, 0xe463da3c
je 0x18005fca4
test edx, edx
jne 0x18005ef2b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ef7f
cmp qword [rax + 0x30], r15
jne 0x18005ef07
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18005f056
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f044
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f029
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f029
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f025
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f002
cmp r11d, 0xe463da3c
je 0x18005fcc1
test edx, edx
jne 0x18005efe6
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f03a
cmp qword [rax + 0x30], r15
jne 0x18005efc2
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18005f10a
lea rax, [rbp + 0x2567db0]
mov dword [0x180181034], 0x10b8
mov qword [0x180181010], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x180181018], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x180181020], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x180181028], rax
mov dword [0x180181030], r12d
mov dword [0x18018103c], r13d
mov dword [0x180181038], 0x10d8
mov dword [0x180181040], 0x10c8
mov dword [0x180181044], 0x2f4
mov dword [0x180181048], 0x84
mov dword [0x18018105c], 0x134
mov dword [0x18018104c], 0x20
mov dword [0x180181054], 0x24
mov dword [0x180181050], 0x5f0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x28c
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f1b2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f197
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f197
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f193
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f170
cmp r11d, 0xe463da3c
je 0x18005fcde
test edx, edx
jne 0x18005f155
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f1a8
cmp qword [rax + 0x30], r15
jne 0x18005f131
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18005f27e
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f26c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f251
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f251
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f24d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f22a
cmp r11d, 0xe463da3c
je 0x18005fcfb
test edx, edx
jne 0x18005f20f
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f262
cmp qword [rax + 0x30], r15
jne 0x18005f1eb
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18005f332
lea rax, [rbp + 0x25667e8]
mov dword [0x180181034], 0x10b8
mov qword [0x180181010], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x180181018], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x180181020], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x180181028], rax
mov dword [0x180181030], r12d
mov dword [0x18018103c], r13d
mov dword [0x180181038], 0x10d8
mov dword [0x180181040], 0x10c8
mov dword [0x180181044], 0x2f4
mov dword [0x180181048], 0x84
mov dword [0x18018105c], 0x134
mov dword [0x18018104c], 0x20
mov dword [0x180181054], 0x24
mov dword [0x180181050], 0x5f0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x28c
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f3da
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f3bf
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f3bf
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f3bb
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f398
cmp r11d, 0xe463da3c
je 0x18005fd18
test edx, edx
jne 0x18005f37d
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f3d0
cmp qword [rax + 0x30], r15
jne 0x18005f359
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r12d, 0x14e0
mov r13d, 0x218
test rax, rax
jne 0x18005f4b2
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f4a0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f485
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f485
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f481
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f45e
cmp r11d, 0xe463da3c
je 0x18005fd35
test edx, edx
jne 0x18005f443
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f496
cmp qword [rax + 0x30], r15
jne 0x18005f41f
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18005f566
lea rax, [rbp + 0x252dcd8]
mov dword [0x180181034], 0x10b8
mov qword [0x180181010], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x180181018], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x180181020], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x180181028], rax
mov dword [0x180181030], r12d
mov dword [0x18018103c], r13d
mov dword [0x180181038], 0x10d8
mov dword [0x180181040], 0x10c8
mov dword [0x180181044], 0x2f4
mov dword [0x180181048], 0x84
mov dword [0x18018105c], 0x134
mov dword [0x18018104c], 0x20
mov dword [0x180181054], 0x24
mov dword [0x180181050], 0x5f0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x28c
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f60f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f5f4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f5f4
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f5f0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f5cd
cmp r11d, 0xe463da3c
je 0x18005fd52
test edx, edx
jne 0x18005f5b1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f605
cmp qword [rax + 0x30], r15
jne 0x18005f58d
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18005f6dc
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f6ca
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f6af
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f6af
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f6ab
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f688
cmp r11d, 0xe463da3c
je 0x18005fd6f
test edx, edx
jne 0x18005f66c
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f6c0
cmp qword [rax + 0x30], r15
jne 0x18005f648
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18005f79a
lea rax, [rbp + 0x24e6d90]
mov dword [0x180181034], 0x10b8
mov qword [0x180181010], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x180181018], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x180181020], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x180181028], rax
mov dword [0x180181030], r12d
mov dword [0x18018103c], r13d
mov dword [0x180181038], 0x10d8
mov dword [0x180181040], 0x10c8
mov dword [0x180181044], 0x2f4
mov dword [0x180181048], 0x84
mov dword [0x18018105c], 0x134
mov dword [0x18018104c], 0x20
mov dword [0x180181064], 0x908
mov dword [0x180181054], 0x24
mov dword [0x180181050], 0x5f0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x28c
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f843
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f828
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f828
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f824
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f801
cmp r11d, 0xe463da3c
je 0x18005fd8c
test edx, edx
jne 0x18005f7e5
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f839
cmp qword [rax + 0x30], r15
jne 0x18005f7c1
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18005f90f
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005f8fd
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f8e2
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f8e2
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f8de
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f8bb
cmp r11d, 0xe463da3c
je 0x18005fda9
test edx, edx
jne 0x18005f8a0
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f8f3
cmp qword [rax + 0x30], r15
jne 0x18005f87c
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18005f9c3
lea rax, [rbp + 0x24c8858]
mov dword [0x180181034], 0x10a8
mov qword [0x180181010], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x180181018], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x180181020], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x180181028], rax
mov dword [0x180181030], r12d
mov dword [0x18018103c], r13d
mov dword [0x180181038], 0x10d8
mov dword [0x180181040], 0x10b8
mov dword [0x180181044], 0x2f4
mov dword [0x180181048], 0x84
mov dword [0x18018105c], 0x134
mov dword [0x18018104c], 0x20
mov dword [0x180181054], 0x24
mov dword [0x180181050], 0x5f0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x28c
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005fa6c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fa51
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fa51
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fa4d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fa2a
cmp r11d, 0xe463da3c
je 0x18005fdc6
test edx, edx
jne 0x18005fa0e
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18005fa62
cmp qword [rax + 0x30], r15
jne 0x18005f9ea
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18005fb39
mov rax, qword [0x180181078]
test rax, rax
jne 0x18005fb27
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005fb0c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005fb0c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005fb08
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005fae5
cmp r11d, 0xe463da3c
je 0x18005fde3
test edx, edx
jne 0x18005fac9
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005fb1d
cmp qword [rax + 0x30], r15
jne 0x18005faa5
mov rax, r15
mov qword [0x180181078], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18005fbf0
lea rax, [rbp + 0x247f840]
mov dword [0x180181034], 0x10a8
lea rcx, [rbp + 0x2088360]
mov qword [0x180181010], rax
mov qword [0x180181020], rcx
lea rax, [rbp + 0x1efd4c8]
lea rcx, [rbp + 0x2087780]
mov qword [0x180181018], rax
mov qword [0x180181028], rcx
mov dword [0x180181030], 0x14b8
mov dword [0x18018103c], r13d
mov dword [0x180181038], 0x10c8
mov dword [0x180181040], 0x10b8
mov dword [0x180181044], 0x2e8
mov dword [0x180181048], 0x74
mov dword [0x18018105c], 0x12c
mov dword [0x18018104c], 0x20
mov dword [0x180181054], 0x24
mov dword [0x180181050], 0x5e0
mov dword [0x180181060], 0x146b
mov dword [0x180181058], 0x25c
mov qword [rsp + 0x28], r15
lea r8, [0x18005dfd4]
mov r9, r14
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005eb25
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ebdd
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ed4c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ee13
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ef82
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f03d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f1ab
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f265
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f3d3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f499
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f608
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f6c3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f83c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f8f6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fa65
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005fb20