Function at 0x180049b40
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004b01d
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.1800561a0
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r12d, r12d
lea rcx, str.rage_scripting_five.dll
add rax, 0x14f70
mov byte [0x1800d1420], r12b
mov qword [0x1800d13a8], rax
mov byte [0x1800d1421], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1800d1430]
mov r13d, 0xe463da3c
test rax, rax
jne 0x180049c73
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049c58
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049c58
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049c54
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049c35
cmp r11d, r13d
je 0x18004b03f
test edx, edx
jne 0x180049c19
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x180049c69
cmp qword [rax + 0x30], r12
jne 0x180049bf5
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x180049d3b
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x180049d29
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049d0e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049d0e
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049d0a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049ceb
cmp r11d, r13d
je 0x18004b05c
test edx, edx
jne 0x180049cd0
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180049d1f
cmp qword [rax + 0x30], r12
jne 0x180049cac
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x180049e0a
lea rax, [r14 + 0x794784]
mov dword [0x1800d13ec], 0x1098
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], 0x150c
mov dword [0x1800d13f4], 0x250
mov dword [0x1800d13f0], 0x10b8
mov dword [0x1800d13f8], 0x10a8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov byte [0x1800d1420], 1
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x180049eaf
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049e94
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049e94
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049e90
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049e71
cmp r11d, r13d
je 0x18004b079
test edx, edx
jne 0x180049e55
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x180049ea5
cmp qword [rax + 0x30], r12
jne 0x180049e31
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x180049f81
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x180049f6f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180049f54
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x180049f54
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x180049f50
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x180049f2d
cmp r11d, 0xe463da3c
je 0x18004b096
test edx, edx
jne 0x180049f12
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180049f65
cmp qword [rax + 0x30], r12
jne 0x180049eee
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004a046
lea rax, [r14 + 0x78f450]
mov dword [0x1800d13ec], 0x10b8
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], r13d
mov dword [0x1800d13f4], 0x238
mov dword [0x1800d13f0], 0x10d8
mov dword [0x1800d13f8], 0x10c8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a0ef
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a0d4
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a0d4
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a0d0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a0ad
cmp r11d, 0xe463da3c
je 0x18004b0b3
test edx, edx
jne 0x18004a091
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a0e5
cmp qword [rax + 0x30], r12
jne 0x18004a06d
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004a1bb
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a1a9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a18e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a18e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a18a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a167
cmp r11d, 0xe463da3c
je 0x18004b0d0
test edx, edx
jne 0x18004a14c
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a19f
cmp qword [rax + 0x30], r12
jne 0x18004a128
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004a280
lea rax, [r14 + 0x78c758]
mov dword [0x1800d13ec], 0x10b8
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], r13d
mov dword [0x1800d13f4], 0x238
mov dword [0x1800d13f0], 0x10d8
mov dword [0x1800d13f8], 0x10c8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a329
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a30e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a30e
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a30a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a2e7
cmp r11d, 0xe463da3c
je 0x18004b0ed
test edx, edx
jne 0x18004a2cb
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a31f
cmp qword [rax + 0x30], r12
jne 0x18004a2a7
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004a3f5
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a3e3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a3c8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a3c8
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a3c4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a3a1
cmp r11d, 0xe463da3c
je 0x18004b10a
test edx, edx
jne 0x18004a386
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a3d9
cmp qword [rax + 0x30], r12
jne 0x18004a362
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004a4ba
lea rax, [r14 + 0x78c5e4]
mov dword [0x1800d13ec], 0x10b8
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], r13d
mov dword [0x1800d13f4], 0x238
mov dword [0x1800d13f0], 0x10d8
mov dword [0x1800d13f8], 0x10c8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a563
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a548
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a548
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a544
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a521
cmp r11d, 0xe463da3c
je 0x18004b127
test edx, edx
jne 0x18004a505
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004a559
cmp qword [rax + 0x30], r12
jne 0x18004a4e1
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18004a636
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a624
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a609
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a609
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a605
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a5e2
cmp r11d, 0xe463da3c
je 0x18004b144
test edx, edx
jne 0x18004a5c6
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a61a
cmp qword [rax + 0x30], r12
jne 0x18004a5a2
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004a6fb
lea rax, [r14 + 0x787fe4]
mov dword [0x1800d13ec], 0x10b8
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], r13d
mov dword [0x1800d13f4], 0x218
mov dword [0x1800d13f0], 0x10d8
mov dword [0x1800d13f8], 0x10c8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a7a3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a788
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a788
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a784
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a761
cmp r11d, 0xe463da3c
je 0x18004b161
test edx, edx
jne 0x18004a746
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a799
cmp qword [rax + 0x30], r12
jne 0x18004a722
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004a870
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a85e
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a843
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a843
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a83f
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a81c
cmp r11d, 0xe463da3c
je 0x18004b17e
test edx, edx
jne 0x18004a800
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a854
cmp qword [rax + 0x30], r12
jne 0x18004a7dc
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004a93f
lea rax, [r14 + 0x79b5dc]
mov dword [0x1800d13ec], 0x10b8
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], r13d
mov dword [0x1800d13f4], 0x218
mov dword [0x1800d13f0], 0x10d8
mov dword [0x1800d13f8], 0x10c8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d141c], 0x908
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004a9e7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a9cc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a9cc
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a9c8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a9a5
cmp r11d, 0xe463da3c
je 0x18004b19b
test edx, edx
jne 0x18004a98a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004a9dd
cmp qword [rax + 0x30], r12
jne 0x18004a966
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004aab3
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004aaa1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aa86
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aa86
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aa82
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aa5f
cmp r11d, 0xe463da3c
je 0x18004b1b8
test edx, edx
jne 0x18004aa44
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aa97
cmp qword [rax + 0x30], r12
jne 0x18004aa20
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004ab78
lea rax, [r14 + 0x7935d0]
mov dword [0x1800d13ec], 0x10a8
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], r13d
mov dword [0x1800d13f4], 0x218
mov dword [0x1800d13f0], 0x10d8
mov dword [0x1800d13f8], 0x10b8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004ac20
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ac05
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ac05
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ac01
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004abde
cmp r11d, 0xe463da3c
je 0x18004b1d5
test edx, edx
jne 0x18004abc3
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004ac16
cmp qword [rax + 0x30], r12
jne 0x18004ab9f
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004aced
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004acdb
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004acc0
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004acc0
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004acbc
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ac99
cmp r11d, 0xe463da3c
je 0x18004b1f2
test edx, edx
jne 0x18004ac7d
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004acd1
cmp qword [rax + 0x30], r12
jne 0x18004ac59
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004adbc
lea rax, [r14 + 0x795f9c]
mov dword [0x1800d13ec], 0x1098
mov qword [0x1800d13d0], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1800d13d8], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x1800d13e0], rax
mov dword [0x1800d13e8], 0x150c
mov dword [0x1800d13f4], 0x250
mov dword [0x1800d13f0], 0x10b8
mov dword [0x1800d13f8], 0x10a8
mov dword [0x1800d13fc], 0x2f4
mov dword [0x1800d1400], 0x84
mov dword [0x1800d1414], 0x134
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5f0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x28c
mov byte [0x1800d1421], 1
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004ae65
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ae4a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ae4a
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ae46
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ae23
cmp r11d, 0xe463da3c
je 0x18004b20f
test edx, edx
jne 0x18004ae07
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004ae5b
cmp qword [rax + 0x30], r12
jne 0x18004ade3
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004af32
mov rax, qword [0x1800d1430]
test rax, rax
jne 0x18004af20
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004af05
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004af05
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004af01
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004aede
cmp r11d, 0xe463da3c
je 0x18004b22c
test edx, edx
jne 0x18004aec2
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004af16
cmp qword [rax + 0x30], r12
jne 0x18004ae9e
mov rax, r12
mov qword [0x1800d1430], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004affa
lea rax, [r14 + 0xcaf950]
mov dword [0x1800d13ec], 0x10a8
mov qword [0x1800d13d0], rax
lea rcx, [rbp + 0x2087780]
lea rax, [rbp + 0x247f840]
mov dword [0x1800d13e8], 0x14b8
mov qword [0x1800d13c0], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1800d13c8], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1800d13d8], rax
mov dword [0x1800d13f4], 0x218
mov dword [0x1800d13f0], 0x10c8
mov dword [0x1800d13f8], 0x10b8
mov dword [0x1800d13fc], 0x2e8
mov dword [0x1800d1400], 0x74
mov dword [0x1800d1414], 0x12c
mov dword [0x1800d1404], 0x20
mov dword [0x1800d140c], 0x24
mov dword [0x1800d1408], 0x5e0
mov dword [0x1800d1418], 0x146b
mov dword [0x1800d1410], 0x25c
mov qword [0x1800d13e0], rcx
call fcn.180048f04
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x180048af0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049c6c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049d22
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049ea8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180049f68
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a0e8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a1a2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a322
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a3dc
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a55c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a61d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a79c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a857
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a9e0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aa9a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ac19
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004acd4
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ae5e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004af19