Function at 0x18005e64c
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r14, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18005f852
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov ecx, 3
call fcn.1800717cc
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r15d, r15d
or r13d, 0xffffffff
add rax, 0x14f70
mov byte [0x180182018], r15b
mov qword [0x180181fb8], rax
mov r12d, 0xe463da3c
mov rax, qword [0x180182028]
mov byte [0x180182019], r15b
test rax, rax
jne 0x18005e76c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005e751
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005e751
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005e74d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005e72e
cmp r11d, r12d
je 0x18005f874
test edx, edx
jne 0x18005e711
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18005e762
cmp qword [rax + 0x30], r15
jne 0x18005e6ed
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18005e836
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005e824
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005e809
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005e809
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005e805
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005e7e6
cmp r11d, r12d
je 0x18005f891
test edx, edx
jne 0x18005e7c9
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005e81a
cmp qword [rax + 0x30], r15
jne 0x18005e7a5
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18005e8f7
lea rax, [rbp + 0x254d448]
mov dword [0x180181fe4], 0x1098
mov qword [0x180181fc0], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x180181fc8], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x180181fd0], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x180181fd8], rax
mov dword [0x180181fe0], 0x150c
mov dword [0x180181fec], 0x250
mov dword [0x180181fe8], 0x10b8
mov dword [0x180181ff0], 0x10a8
mov dword [0x180181ff4], 0x2f4
mov dword [0x180181ff8], 0x84
mov dword [0x18018200c], 0x134
mov dword [0x180181ffc], 0x20
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5f0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x28c
mov byte [0x180182018], 1
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005e99c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005e981
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005e981
mov esi, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005e97d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005e95e
cmp r11d, r12d
je 0x18005f8ae
test edx, edx
jne 0x18005e942
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005e992
cmp qword [rax + 0x30], r15
jne 0x18005e91e
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r12d, 0x1530
mov r13d, 0x238
test rax, rax
jne 0x18005ea74
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005ea62
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ea47
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ea47
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ea43
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ea20
cmp r11d, 0xe463da3c
je 0x18005f8cb
test edx, edx
jne 0x18005ea05
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ea58
cmp qword [rax + 0x30], r15
jne 0x18005e9e1
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18005eb28
lea rax, [rbp + 0x26684d8]
mov dword [0x180181fe4], 0x10b8
mov qword [0x180181fc0], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x180181fc8], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x180181fd0], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x180181fd8], rax
mov dword [0x180181fe0], r12d
mov dword [0x180181fec], r13d
mov dword [0x180181fe8], 0x10d8
mov dword [0x180181ff0], 0x10c8
mov dword [0x180181ff4], 0x2f4
mov dword [0x180181ff8], 0x84
mov dword [0x18018200c], 0x134
mov dword [0x180181ffc], 0x20
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5f0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x28c
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005ebd0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ebb5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ebb5
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ebb1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005eb8e
cmp r11d, 0xe463da3c
je 0x18005f8e8
test edx, edx
jne 0x18005eb73
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ebc6
cmp qword [rax + 0x30], r15
jne 0x18005eb4f
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18005ec9c
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005ec8a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ec6f
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ec6f
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ec6b
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ec48
cmp r11d, 0xe463da3c
je 0x18005f905
test edx, edx
jne 0x18005ec2d
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005ec80
cmp qword [rax + 0x30], r15
jne 0x18005ec09
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18005ed50
lea rax, [rbp + 0x2567db0]
mov dword [0x180181fe4], 0x10b8
mov qword [0x180181fc0], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x180181fc8], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x180181fd0], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x180181fd8], rax
mov dword [0x180181fe0], r12d
mov dword [0x180181fec], r13d
mov dword [0x180181fe8], 0x10d8
mov dword [0x180181ff0], 0x10c8
mov dword [0x180181ff4], 0x2f4
mov dword [0x180181ff8], 0x84
mov dword [0x18018200c], 0x134
mov dword [0x180181ffc], 0x20
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5f0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x28c
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005edf8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005eddd
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005eddd
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005edd9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005edb6
cmp r11d, 0xe463da3c
je 0x18005f922
test edx, edx
jne 0x18005ed9b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005edee
cmp qword [rax + 0x30], r15
jne 0x18005ed77
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18005eec4
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005eeb2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005ee97
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005ee97
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005ee93
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005ee70
cmp r11d, 0xe463da3c
je 0x18005f93f
test edx, edx
jne 0x18005ee55
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005eea8
cmp qword [rax + 0x30], r15
jne 0x18005ee31
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18005ef78
lea rax, [rbp + 0x25667e8]
mov dword [0x180181fe4], 0x10b8
mov qword [0x180181fc0], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x180181fc8], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x180181fd0], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x180181fd8], rax
mov dword [0x180181fe0], r12d
mov dword [0x180181fec], r13d
mov dword [0x180181fe8], 0x10d8
mov dword [0x180181ff0], 0x10c8
mov dword [0x180181ff4], 0x2f4
mov dword [0x180181ff8], 0x84
mov dword [0x18018200c], 0x134
mov dword [0x180181ffc], 0x20
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5f0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x28c
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f020
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f005
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f005
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f001
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005efde
cmp r11d, 0xe463da3c
je 0x18005f95c
test edx, edx
jne 0x18005efc3
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f016
cmp qword [rax + 0x30], r15
jne 0x18005ef9f
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r12d, 0x14e0
mov r13d, 0x218
test rax, rax
jne 0x18005f0f8
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f0e6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f0cb
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f0cb
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f0c7
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f0a4
cmp r11d, 0xe463da3c
je 0x18005f979
test edx, edx
jne 0x18005f089
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f0dc
cmp qword [rax + 0x30], r15
jne 0x18005f065
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18005f1ac
lea rax, [rbp + 0x252dcd8]
mov dword [0x180181fe4], 0x10b8
mov qword [0x180181fc0], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x180181fc8], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x180181fd0], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x180181fd8], rax
mov dword [0x180181fe0], r12d
mov dword [0x180181fec], r13d
mov dword [0x180181fe8], 0x10d8
mov dword [0x180181ff0], 0x10c8
mov dword [0x180181ff4], 0x2f4
mov dword [0x180181ff8], 0x84
mov dword [0x18018200c], 0x134
mov dword [0x180181ffc], 0x20
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5f0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x28c
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f255
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f23a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f23a
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f236
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f213
cmp r11d, 0xe463da3c
je 0x18005f996
test edx, edx
jne 0x18005f1f7
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f24b
cmp qword [rax + 0x30], r15
jne 0x18005f1d3
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18005f322
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f310
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f2f5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f2f5
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f2f1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f2ce
cmp r11d, 0xe463da3c
je 0x18005f9b3
test edx, edx
jne 0x18005f2b2
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f306
cmp qword [rax + 0x30], r15
jne 0x18005f28e
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18005f3e0
lea rax, [rbp + 0x24e6d90]
mov dword [0x180181fe4], 0x10b8
mov qword [0x180181fc0], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x180181fc8], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x180181fd0], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x180181fd8], rax
mov dword [0x180181fe0], r12d
mov dword [0x180181fec], r13d
mov dword [0x180181fe8], 0x10d8
mov dword [0x180181ff0], 0x10c8
mov dword [0x180181ff4], 0x2f4
mov dword [0x180181ff8], 0x84
mov dword [0x18018200c], 0x134
mov dword [0x180181ffc], 0x20
mov dword [0x180182014], 0x908
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5f0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x28c
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f489
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f46e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f46e
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f46a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f447
cmp r11d, 0xe463da3c
je 0x18005f9d0
test edx, edx
jne 0x18005f42b
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f47f
cmp qword [rax + 0x30], r15
jne 0x18005f407
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18005f555
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f543
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f528
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f528
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f524
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f501
cmp r11d, 0xe463da3c
je 0x18005f9ed
test edx, edx
jne 0x18005f4e6
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f539
cmp qword [rax + 0x30], r15
jne 0x18005f4c2
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18005f609
lea rax, [rbp + 0x24c8858]
mov dword [0x180181fe4], 0x10a8
mov qword [0x180181fc0], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x180181fc8], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x180181fd0], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x180181fd8], rax
mov dword [0x180181fe0], r12d
mov dword [0x180181fec], r13d
mov dword [0x180181fe8], 0x10d8
mov dword [0x180181ff0], 0x10b8
mov dword [0x180181ff4], 0x2f4
mov dword [0x180181ff8], 0x84
mov dword [0x18018200c], 0x134
mov dword [0x180181ffc], 0x20
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5f0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x28c
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f6b1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f696
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f696
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f692
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f66f
cmp r11d, 0xe463da3c
je 0x18005fa0a
test edx, edx
jne 0x18005f654
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18005f6a7
cmp qword [rax + 0x30], r15
jne 0x18005f630
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18005f77d
mov rax, qword [0x180182028]
test rax, rax
jne 0x18005f76b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18005f750
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18005f750
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18005f74c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18005f729
cmp r11d, 0xe463da3c
je 0x18005fa27
test edx, edx
jne 0x18005f70e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18005f761
cmp qword [rax + 0x30], r15
jne 0x18005f6ea
mov rax, r15
mov qword [0x180182028], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18005f834
lea rax, [rbp + 0x247f840]
mov dword [0x180181fe4], 0x10a8
lea rcx, [rbp + 0x2088360]
mov qword [0x180181fc0], rax
mov qword [0x180181fd0], rcx
lea rax, [rbp + 0x1efd4c8]
lea rcx, [rbp + 0x2087780]
mov qword [0x180181fc8], rax
mov qword [0x180181fd8], rcx
mov dword [0x180181fe0], 0x14b8
mov dword [0x180181fec], r13d
mov dword [0x180181fe8], 0x10c8
mov dword [0x180181ff0], 0x10b8
mov dword [0x180181ff4], 0x2e8
mov dword [0x180181ff8], 0x74
mov dword [0x18018200c], 0x12c
mov dword [0x180181ffc], 0x20
mov dword [0x180182004], 0x24
mov dword [0x180182000], 0x5e0
mov dword [0x180182010], 0x146b
mov dword [0x180182008], 0x25c
mov qword [rsp + 0x28], r15
lea r8, [0x18005dc88]
mov r9, r14
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005e765
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005e81d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005e995
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ea5b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ebc9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005ec83
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005edf1
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005eeab
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f019
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f0df
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f24e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f309
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f482
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f53c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f6aa
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18005f764