Function at 0x18004a640
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1e0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1800cf500]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov rax, qword gs:[0x60]
mov r12, rcx
mov rbx, qword [rax + 0x10]
cmp edx, 1
jne 0x18004bdaf
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r15, rax
call fcn.18005597c
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x15300
movabs rcx, 0xae6802144752b342
mov qword [0x1800d00e8], rax
xor r13d, r13d
movabs rax, 0x9a90c6614ad3d595
mov qword [rbp + 0x68], rcx
mov qword [rbp + 0x100], rax
movabs rax, 0xb05d7fb0e34c23c6
mov qword [rbp + 0x108], rax
movabs rax, 0xf0aa7fc7cdd805c7
mov qword [rbp + 0x110], rax
movabs rax, 0x155aaf0ea8d48408
mov qword [rbp + 0x118], rax
movabs rax, 0xd381ab2df96240d9
mov qword [rbp + 0x120], rax
movabs rax, 0xce8e145cdc9827fa
mov qword [rbp + 0x128], rax
movabs rax, 0x47fac5a3a0fbc22b
mov qword [rbp + 0x130], rax
movabs rax, 0x6719edca9a01045c
mov qword [rbp + 0x138], rax
movabs rax, 0x75b288398b07ebfd
mov qword [rbp + 0x140], rax
movabs rax, 0x4afa24482b815a8e
mov qword [rbp + 0x148], rax
movabs rax, 0xf105ce9f646f230f
mov qword [rbp + 0x150], rax
movabs rax, 0x40f83a6caeef750
mov qword [rbp + 0x158], rax
movabs rax, 0x17400ce56aa8dec1
mov qword [rbp + 0x160], rax
movabs rax, 0xd9a5e65872f3eda1
mov qword [rbp], rax
movabs rax, 0x847d408fc37811e6
mov qword [rbp + 8], rax
movabs rax, 0xd0e949e7f4e025ff
movups xmm0, xmmword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0x2d6e8f3197f4b03a
mov qword [rbp + 0x18], rax
movabs rax, 0xe1a19f1ad95b78f9
movups xmm1, xmmword [rbp + 0x10]
mov qword [rbp + 0x20], rax
movabs rax, 0xeeb9217ce3a707ce
mov qword [rbp + 0x28], rax
movabs rax, 0x4bfe59098dbfa1f
mov qword [rbp + 0x30], rax
movabs rax, 0x5f39d5feba31327c
mov qword [rbp + 0x38], rax
movabs rax, 0x5583bc19ba37cbbf
mov qword [rbp + 0x40], rax
movabs rax, 0x72ce04706ea118b6
mov qword [rbp + 0x48], rax
movabs rax, 0xc525fcd9442d1b2f
mov qword [rbp + 0x50], rax
movabs rax, 0x2436c58688d6d768
movaps xmmword [rbp + 0x80], xmm0
movups xmm0, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x90], xmm1
movups xmm1, xmmword [rbp + 0x30]
mov qword [rbp + 0x58], rax
movabs rax, 0x17400ca72e88edf2
movaps xmmword [rbp + 0xa0], xmm0
movups xmm0, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0xb0], xmm1
movups xmm1, xmmword [rbp + 0x50]
mov qword [rbp + 0x60], rax
movups xmm2, xmmword [rbp + 0x60]
mov byte [0x1800d0168], r13b
mov byte [0x1800d0169], r13b
mov qword [rbp + 0x168], rcx
movaps xmmword [rbp + 0xc0], xmm0
movaps xmmword [rbp + 0xd0], xmm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqu ymm0, ymmword [rbp + 0xa0]
vxorps xmm2, xmm2, xmmword [rbp + 0x160]
lea rcx, [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0xa0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqa xmmword [rbp + 0xe0], xmm2
xor r8d, r8d
xor edx, edx
vzeroupper
call fcn.180049410
lea rcx, str.rage_scripting_five.dll
mov qword [0x1800d0118], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004a9ef
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a9d4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a9d4
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a9d0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a9ad
cmp r11d, 0xe463da3c
je 0x18004bde4
test edx, edx
jne 0x18004a991
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a9e5
cmp qword [rax + 0x30], r13
jne 0x18004a96d
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004aabc
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004aaaa
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aa8f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aa8f
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aa8b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aa68
cmp r11d, 0xe463da3c
je 0x18004be01
test edx, edx
jne 0x18004aa4c
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aaa0
cmp qword [rax + 0x30], r13
jne 0x18004aa28
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004ab8b
lea rax, [r15 + 0x794784]
mov dword [0x1800d0134], 0x1098
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x254d448]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1f5b820]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x1fbccd8]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x1fbc100]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x150c
mov dword [0x1800d013c], 0x250
mov dword [0x1800d0138], 0x10b8
mov dword [0x1800d0140], 0x10a8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov byte [0x1800d0168], 1
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004ac34
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ac19
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ac19
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ac15
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004abf2
cmp r11d, 0xe463da3c
je 0x18004be1e
test edx, edx
jne 0x18004abd6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ac2a
cmp qword [rax + 0x30], r13
jne 0x18004abb2
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
test rax, rax
jne 0x18004ad01
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004acef
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004acd4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004acd4
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004acd0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004acad
cmp r11d, 0xe463da3c
je 0x18004be3b
test edx, edx
jne 0x18004ac91
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ace5
cmp qword [rax + 0x30], r13
jne 0x18004ac6d
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004adc9
lea rax, [r15 + 0x78f450]
mov dword [0x1800d0134], 0x10b8
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x26684d8]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x20304c8]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x20d9868]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x20d8c90]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x1530
mov dword [0x1800d013c], 0x238
mov dword [0x1800d0138], 0x10d8
mov dword [0x1800d0140], 0x10c8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004ae72
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ae57
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ae57
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ae53
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ae30
cmp r11d, 0xe463da3c
je 0x18004be58
test edx, edx
jne 0x18004ae14
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ae68
cmp qword [rax + 0x30], r13
jne 0x18004adf0
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004af3f
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004af2d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004af12
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004af12
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004af0e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aeeb
cmp r11d, 0xe463da3c
je 0x18004be75
test edx, edx
jne 0x18004aecf
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004af23
cmp qword [rax + 0x30], r13
jne 0x18004aeab
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004b007
lea rax, [r15 + 0x78c758]
mov dword [0x1800d0134], 0x10b8
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x2567db0]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1f77ef0]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x1fd9148]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x1fd8570]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x1530
mov dword [0x1800d013c], 0x238
mov dword [0x1800d0138], 0x10d8
mov dword [0x1800d0140], 0x10c8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b0b0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b095
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b095
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b091
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b06e
cmp r11d, 0xe463da3c
je 0x18004be92
test edx, edx
jne 0x18004b052
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b0a6
cmp qword [rax + 0x30], r13
jne 0x18004b02e
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004b17d
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b16b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b150
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b150
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b14c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b129
cmp r11d, 0xe463da3c
je 0x18004beaf
test edx, edx
jne 0x18004b10d
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b161
cmp qword [rax + 0x30], r13
jne 0x18004b0e9
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004b245
lea rax, [r15 + 0x78c5e4]
mov dword [0x1800d0134], 0x10b8
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x25667e8]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1f2e7a8]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x1fd7b48]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x1fd6f70]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x1530
mov dword [0x1800d013c], 0x238
mov dword [0x1800d0138], 0x10d8
mov dword [0x1800d0140], 0x10c8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b2ee
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b2d3
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b2d3
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b2cf
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b2ac
cmp r11d, 0xe463da3c
je 0x18004becc
test edx, edx
jne 0x18004b290
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b2e4
cmp qword [rax + 0x30], r13
jne 0x18004b26c
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
test rax, rax
jne 0x18004b3bb
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b3a9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b38e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b38e
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b38a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b367
cmp r11d, 0xe463da3c
je 0x18004bee9
test edx, edx
jne 0x18004b34b
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b39f
cmp qword [rax + 0x30], r13
jne 0x18004b327
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004b483
lea rax, [r15 + 0x787fe4]
mov dword [0x1800d0134], 0x10b8
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x252dcd8]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1f05208]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x1f9f5c8]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x1f9e9f0]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x14e0
mov dword [0x1800d013c], 0x218
mov dword [0x1800d0138], 0x10d8
mov dword [0x1800d0140], 0x10c8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b52c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b511
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b511
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b50d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b4ea
cmp r11d, 0xe463da3c
je 0x18004bf06
test edx, edx
jne 0x18004b4ce
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b522
cmp qword [rax + 0x30], r13
jne 0x18004b4aa
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004b5f9
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b5e7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b5cc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b5cc
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b5c8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b5a5
cmp r11d, 0xe463da3c
je 0x18004bf23
test edx, edx
jne 0x18004b589
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b5dd
cmp qword [rax + 0x30], r13
jne 0x18004b565
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004b6cb
lea rax, [r15 + 0x79b5dc]
mov dword [0x1800d0134], 0x10b8
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x24e6d90]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1ee18a8]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x1f89498]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x1f888c0]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x14e0
mov dword [0x1800d013c], 0x218
mov dword [0x1800d0138], 0x10d8
mov dword [0x1800d0140], 0x10c8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0164], 0x908
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b774
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b759
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b759
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b755
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b732
cmp r11d, 0xe463da3c
je 0x18004bf40
test edx, edx
jne 0x18004b716
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b76a
cmp qword [rax + 0x30], r13
jne 0x18004b6f2
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004b841
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b82f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b814
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b814
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b810
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b7ed
cmp r11d, 0xe463da3c
je 0x18004bf5d
test edx, edx
jne 0x18004b7d1
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b825
cmp qword [rax + 0x30], r13
jne 0x18004b7ad
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004b909
lea rax, [r15 + 0x7935d0]
mov dword [0x1800d0134], 0x10a8
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x24c8858]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1ec3828]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x1f6b3c0]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x1f6a7e0]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x14e0
mov dword [0x1800d013c], 0x218
mov dword [0x1800d0138], 0x10d8
mov dword [0x1800d0140], 0x10b8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004b9b2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b997
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b997
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b993
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b970
cmp r11d, 0xe463da3c
je 0x18004bf7a
test edx, edx
jne 0x18004b954
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b9a8
cmp qword [rax + 0x30], r13
jne 0x18004b930
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004ba7f
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004ba6d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ba52
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ba52
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ba4e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ba2b
cmp r11d, 0xe463da3c
je 0x18004bf97
test edx, edx
jne 0x18004ba0f
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ba63
cmp qword [rax + 0x30], r13
jne 0x18004b9eb
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004bb4e
lea rax, [r15 + 0x795f9c]
mov dword [0x1800d0134], 0x1098
mov qword [0x1800d0118], rax
lea rax, [rbx + 0x257bea0]
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1f42068]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x1feb698]
mov qword [0x1800d0120], rax
lea rax, [rbx + 0x1feaac0]
mov qword [0x1800d0128], rax
mov dword [0x1800d0130], 0x150c
mov dword [0x1800d013c], 0x250
mov dword [0x1800d0138], 0x10b8
mov dword [0x1800d0140], 0x10a8
mov dword [0x1800d0144], 0x2f4
mov dword [0x1800d0148], 0x84
mov dword [0x1800d015c], 0x134
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5f0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x28c
mov byte [0x1800d0169], 1
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004bbf7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004bbdc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004bbdc
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004bbd8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004bbb5
cmp r11d, 0xe463da3c
je 0x18004bfb4
test edx, edx
jne 0x18004bb99
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004bbed
cmp qword [rax + 0x30], r13
jne 0x18004bb75
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004bcc4
mov rax, qword [0x1800d0178]
test rax, rax
jne 0x18004bcb2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004bc97
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004bc97
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004bc93
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004bc70
cmp r11d, 0xe463da3c
je 0x18004bfd1
test edx, edx
jne 0x18004bc54
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004bca8
cmp qword [rax + 0x30], r13
jne 0x18004bc30
mov rax, r13
mov qword [0x1800d0178], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004bd8c
lea rax, [r15 + 0xcaf950]
mov dword [0x1800d0134], 0x10a8
mov qword [0x1800d0118], rax
lea rcx, [rbx + 0x2087780]
lea rax, [rbx + 0x247f840]
mov dword [0x1800d0130], 0x14b8
mov qword [0x1800d0108], rax
lea rax, [rbx + 0x1efd4c8]
mov qword [0x1800d0110], rax
lea rax, [rbx + 0x2088360]
mov qword [0x1800d0120], rax
mov dword [0x1800d013c], 0x218
mov dword [0x1800d0138], 0x10c8
mov dword [0x1800d0140], 0x10b8
mov dword [0x1800d0144], 0x2e8
mov dword [0x1800d0148], 0x74
mov dword [0x1800d015c], 0x12c
mov dword [0x1800d014c], 0x20
mov dword [0x1800d0154], 0x24
mov dword [0x1800d0150], 0x5e0
mov dword [0x1800d0160], 0x146b
mov dword [0x1800d0158], 0x25c
mov qword [0x1800d0128], rcx
call fcn.180049a04
mov r9, r12
mov qword [rsp + 0x28], r13
lea r8, [0x1800493b0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov eax, 1
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.180055f00
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a9e8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aaa3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ac2d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ace8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ae6b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004af26
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b0a9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b164
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b2e7
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b3a2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b525
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b5e0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b76d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b828
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b9ab
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ba66
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004bbf0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004bcab