Function at 0x1800502f0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov rbx, rcx
mov rbp, qword [rax + 0x10]
test edx, edx
je 0x1800517e9
cmp edx, 1
jne 0x180051819
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdi
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov r9, rbx
mov qword [rsp + 0x28], 0
lea r8, [0x180050290]
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add rax, 0x14f70
mov byte [0x1801917d8], 0
mov qword [0x180191528], rax
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050437
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop dword [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050418
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050418
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov eax, dword [rax + r9]
add rax, r9
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x180050413
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x1800503f0
cmp edx, 0xe463da3c
je 0x180051609
test r8d, r8d
jne 0x1800503d0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005042e
cmp qword [rax + 0x30], 0
jne 0x1800503a0
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x180050519
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050507
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800504e8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800504e8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800504e3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800504c0
cmp edx, 0xe463da3c
je 0x180051627
test r8d, r8d
jne 0x1800504a0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x1800504fe
cmp qword [rax + 0x30], 0
jne 0x180050470
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x1800505bf
lea rax, [rbp + 0x254d448]
mov dword [0x1801917fc], 0x1098
mov qword [0x180191818], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x150c
mov dword [0x1801917c8], 0x10b8
mov dword [0x180191808], 0x10a8
mov dword [0x1801917e0], 0x2f4
mov dword [0x1801917f8], 0x84
mov dword [0x1801917cc], 0x134
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x28c
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050687
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050668
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050668
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050663
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050640
cmp edx, 0xe463da3c
je 0x180051645
test r8d, r8d
jne 0x180050620
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005067e
cmp qword [rax + 0x30], 0
jne 0x1800505f0
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
test rax, rax
jne 0x180050769
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050757
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050738
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050738
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050733
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050710
cmp edx, 0xe463da3c
je 0x180051663
test r8d, r8d
jne 0x1800506f0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005074e
cmp qword [rax + 0x30], 0
jne 0x1800506c0
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18005080f
lea rax, [rbp + 0x26684d8]
mov dword [0x1801917fc], 0x10b8
mov qword [0x180191818], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x1530
mov dword [0x1801917c8], 0x10d8
mov dword [0x180191808], 0x10c8
mov dword [0x1801917e0], 0x2f4
mov dword [0x1801917f8], 0x84
mov dword [0x1801917cc], 0x134
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x28c
mov rax, qword [0x180191628]
test rax, rax
jne 0x1800508d7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800508b8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800508b8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800508b3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050890
cmp edx, 0xe463da3c
je 0x180051681
test r8d, r8d
jne 0x180050870
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x1800508ce
cmp qword [rax + 0x30], 0
jne 0x180050840
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x1800509b9
mov rax, qword [0x180191628]
test rax, rax
jne 0x1800509a7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050988
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050988
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050983
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050960
cmp edx, 0xe463da3c
je 0x18005169f
test r8d, r8d
jne 0x180050940
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005099e
cmp qword [rax + 0x30], 0
jne 0x180050910
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x180050a5f
lea rax, [rbp + 0x2567db0]
mov dword [0x1801917fc], 0x10b8
mov qword [0x180191818], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x1530
mov dword [0x1801917c8], 0x10d8
mov dword [0x180191808], 0x10c8
mov dword [0x1801917e0], 0x2f4
mov dword [0x1801917f8], 0x84
mov dword [0x1801917cc], 0x134
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x28c
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050b27
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050b08
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050b08
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050b03
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050ae0
cmp edx, 0xe463da3c
je 0x1800516bd
test r8d, r8d
jne 0x180050ac0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x180050b1e
cmp qword [rax + 0x30], 0
jne 0x180050a90
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x180050c09
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050bf7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050bd8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050bd8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050bd3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050bb0
cmp edx, 0xe463da3c
je 0x1800516db
test r8d, r8d
jne 0x180050b90
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x180050bee
cmp qword [rax + 0x30], 0
jne 0x180050b60
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x180050caf
lea rax, [rbp + 0x25667e8]
mov dword [0x1801917fc], 0x10b8
mov qword [0x180191818], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x1530
mov dword [0x1801917c8], 0x10d8
mov dword [0x180191808], 0x10c8
mov dword [0x1801917e0], 0x2f4
mov dword [0x1801917f8], 0x84
mov dword [0x1801917cc], 0x134
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x28c
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050d77
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050d58
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050d58
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050d53
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050d30
cmp edx, 0xe463da3c
je 0x1800516f9
test r8d, r8d
jne 0x180050d10
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x180050d6e
cmp qword [rax + 0x30], 0
jne 0x180050ce0
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
test rax, rax
jne 0x180050e59
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050e47
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050e28
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050e28
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050e23
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050e00
cmp edx, 0xe463da3c
je 0x180051717
test r8d, r8d
jne 0x180050de0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x180050e3e
cmp qword [rax + 0x30], 0
jne 0x180050db0
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x180050eff
lea rax, [rbp + 0x252dcd8]
mov dword [0x1801917fc], 0x10b8
mov qword [0x180191818], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x14e0
mov dword [0x1801917c8], 0x10d8
mov dword [0x180191808], 0x10c8
mov dword [0x1801917e0], 0x2f4
mov dword [0x1801917f8], 0x84
mov dword [0x1801917cc], 0x134
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x28c
mov rax, qword [0x180191628]
test rax, rax
jne 0x180050fc7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180050fa8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180050fa8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180050fa3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180050f80
cmp edx, 0xe463da3c
je 0x180051735
test r8d, r8d
jne 0x180050f60
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x180050fbe
cmp qword [rax + 0x30], 0
jne 0x180050f30
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x1800510a9
mov rax, qword [0x180191628]
test rax, rax
jne 0x180051097
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180051078
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180051078
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180051073
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180051050
cmp edx, 0xe463da3c
je 0x180051753
test r8d, r8d
jne 0x180051030
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005108e
cmp qword [rax + 0x30], 0
jne 0x180051000
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18005114f
lea rax, [rbp + 0x24e6d90]
mov dword [0x1801917fc], 0x10b8
mov qword [0x180191818], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x14e0
mov dword [0x1801917c8], 0x10d8
mov dword [0x180191808], 0x10c8
mov dword [0x1801917e0], 0x2f4
mov dword [0x1801917f8], 0x84
mov dword [0x1801917cc], 0x134
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x28c
mov rax, qword [0x180191628]
test rax, rax
jne 0x180051217
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800511f8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800511f8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800511f3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800511d0
cmp edx, 0xe463da3c
je 0x180051771
test r8d, r8d
jne 0x1800511b0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005120e
cmp qword [rax + 0x30], 0
jne 0x180051180
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x1800512f9
mov rax, qword [0x180191628]
test rax, rax
jne 0x1800512e7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800512c8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800512c8
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800512c3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800512a0
cmp edx, 0xe463da3c
je 0x18005178f
test r8d, r8d
jne 0x180051280
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x1800512de
cmp qword [rax + 0x30], 0
jne 0x180051250
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18005139f
lea rax, [rbp + 0x24c8858]
mov dword [0x1801917fc], 0x10a8
mov qword [0x180191818], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x14e0
mov dword [0x1801917c8], 0x10d8
mov dword [0x180191808], 0x10b8
mov dword [0x1801917e0], 0x2f4
mov dword [0x1801917f8], 0x84
mov dword [0x1801917cc], 0x134
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x28c
mov rax, qword [0x180191628]
test rax, rax
jne 0x180051467
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180051448
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180051448
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180051443
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180051420
cmp edx, 0xe463da3c
je 0x1800517ad
test r8d, r8d
jne 0x180051400
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005145e
cmp qword [rax + 0x30], 0
jne 0x1800513d0
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x180051549
mov rax, qword [0x180191628]
test rax, rax
jne 0x180051537
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180051518
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180051518
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180051513
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800514f0
cmp edx, 0xe463da3c
je 0x1800517cb
test r8d, r8d
jne 0x1800514d0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x18005152e
cmp qword [rax + 0x30], 0
jne 0x1800514a0
xor eax, eax
mov qword [0x180191628], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x1800515ef
lea rax, [rbp + 0x247f840]
mov dword [0x1801917fc], 0x10a8
mov qword [0x180191818], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1801917e8], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1801917f0], rax
lea rax, [rbp + 0x2087780]
mov qword [0x1801917c0], rax
mov dword [0x180191800], 0x14b8
mov dword [0x1801917c8], 0x10c8
mov dword [0x180191808], 0x10b8
mov dword [0x1801917e0], 0x2e8
mov dword [0x1801917f8], 0x74
mov dword [0x1801917cc], 0x12c
mov dword [0x180191810], 0x20
mov dword [0x1801917dc], 0x24
mov dword [0x18019180c], 0x146b
mov dword [0x180191804], 0x25c
mov rsi, qword [rsp + 0x40]
mov eax, 1
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop rbp
ret
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050430
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050500
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050680
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050750
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1800508d0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1800509a0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050b20
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050bf0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050d70
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050e40
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180050fc0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180051090
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180051210
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1800512e0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180051460
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180051530
cmp dword [0x180191608], 0
je 0x180051819
call fcn.180041d60
mov rcx, qword [0x180191600]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x180191600], 0
mov dword [0x180191608], 0
mov rbx, qword [rsp + 0x50]
mov eax, 1
add rsp, 0x30
pop rbp
ret