Function at 0x18004a844
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov r15, rcx
mov rbp, qword [rax + 0x10]
cmp edx, 1
jne 0x18004bd21
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, 3
mov r14, rax
call fcn.180057eb8
lea rcx, str.citizen_playernames_five.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r12d, r12d
lea rcx, str.rage_scripting_five.dll
add rax, 0x15300
mov byte [0x1800d31a0], r12b
mov qword [0x1800d3128], rax
mov byte [0x1800d31a1], r12b
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [0x1800d31b0]
mov r13d, 0xe463da3c
test rax, rax
jne 0x18004a977
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r10, rbx
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004a95c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004a95c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004a958
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a939
cmp r11d, r13d
je 0x18004bd43
test edx, edx
jne 0x18004a91d
mov rax, qword [r10]
mov r10, rax
cmp rax, rbx
je 0x18004a96d
cmp qword [rax + 0x30], r12
jne 0x18004a8f9
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2802_GameProcess.exe
call rax
test rax, rax
jne 0x18004aa3f
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004aa2d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004aa12
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004aa12
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004aa0e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004a9ef
cmp r11d, r13d
je 0x18004bd60
test edx, edx
jne 0x18004a9d4
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004aa23
cmp qword [rax + 0x30], r12
jne 0x18004a9b0
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call rax
test rax, rax
je 0x18004ab0e
lea rax, [r14 + 0x794784]
mov dword [0x1800d316c], 0x1098
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x254d448]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1f5b820]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x1fbccd8]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x1fbc100]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], 0x150c
mov dword [0x1800d3174], 0x250
mov dword [0x1800d3170], 0x10b8
mov dword [0x1800d3178], 0x10a8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov byte [0x1800d31a0], 1
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004abb3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ab98
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ab98
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ab94
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ab75
cmp r11d, r13d
je 0x18004bd7d
test edx, edx
jne 0x18004ab59
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004aba9
cmp qword [rax + 0x30], r12
jne 0x18004ab35
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call rax
mov r13d, 0x1530
test rax, rax
jne 0x18004ac85
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004ac73
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ac58
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ac58
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ac54
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ac31
cmp r11d, 0xe463da3c
je 0x18004bd9a
test edx, edx
jne 0x18004ac16
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ac69
cmp qword [rax + 0x30], r12
jne 0x18004abf2
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2699_GameProcess.exe
call rax
test rax, rax
je 0x18004ad4a
lea rax, [r14 + 0x78f450]
mov dword [0x1800d316c], 0x10b8
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x26684d8]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x20304c8]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x20d9868]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x20d8c90]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], r13d
mov dword [0x1800d3174], 0x238
mov dword [0x1800d3170], 0x10d8
mov dword [0x1800d3178], 0x10c8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004adf3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004add8
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004add8
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004add4
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004adb1
cmp r11d, 0xe463da3c
je 0x18004bdb7
test edx, edx
jne 0x18004ad95
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004ade9
cmp qword [rax + 0x30], r12
jne 0x18004ad71
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2612_GameProcess.exe
call rax
test rax, rax
jne 0x18004aebf
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004aead
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004ae92
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004ae92
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004ae8e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004ae6b
cmp r11d, 0xe463da3c
je 0x18004bdd4
test edx, edx
jne 0x18004ae50
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004aea3
cmp qword [rax + 0x30], r12
jne 0x18004ae2c
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2612_GTAProcess.exe
call rax
test rax, rax
je 0x18004af84
lea rax, [r14 + 0x78c758]
mov dword [0x1800d316c], 0x10b8
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x2567db0]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1f77ef0]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x1fd9148]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x1fd8570]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], r13d
mov dword [0x1800d3174], 0x238
mov dword [0x1800d3170], 0x10d8
mov dword [0x1800d3178], 0x10c8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b02d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b012
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b012
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b00e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004afeb
cmp r11d, 0xe463da3c
je 0x18004bdf1
test edx, edx
jne 0x18004afcf
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b023
cmp qword [rax + 0x30], r12
jne 0x18004afab
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2545_GameProcess.exe
call rax
test rax, rax
jne 0x18004b0f9
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b0e7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b0cc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b0cc
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b0c8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b0a5
cmp r11d, 0xe463da3c
je 0x18004be0e
test edx, edx
jne 0x18004b08a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b0dd
cmp qword [rax + 0x30], r12
jne 0x18004b066
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2545_GTAProcess.exe
call rax
test rax, rax
je 0x18004b1be
lea rax, [r14 + 0x78c5e4]
mov dword [0x1800d316c], 0x10b8
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x25667e8]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1f2e7a8]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x1fd7b48]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x1fd6f70]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], r13d
mov dword [0x1800d3174], 0x238
mov dword [0x1800d3170], 0x10d8
mov dword [0x1800d3178], 0x10c8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b267
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b24c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b24c
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b248
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b225
cmp r11d, 0xe463da3c
je 0x18004be2b
test edx, edx
jne 0x18004b209
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b25d
cmp qword [rax + 0x30], r12
jne 0x18004b1e5
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2372_GameProcess.exe
call rax
mov r13d, 0x14e0
test rax, rax
jne 0x18004b33a
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b328
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b30d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b30d
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b309
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b2e6
cmp r11d, 0xe463da3c
je 0x18004be48
test edx, edx
jne 0x18004b2ca
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b31e
cmp qword [rax + 0x30], r12
jne 0x18004b2a6
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2372_GTAProcess.exe
call rax
test rax, rax
je 0x18004b3ff
lea rax, [r14 + 0x787fe4]
mov dword [0x1800d316c], 0x10b8
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x252dcd8]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1f05208]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x1f9f5c8]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x1f9e9f0]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], r13d
mov dword [0x1800d3174], 0x218
mov dword [0x1800d3170], 0x10d8
mov dword [0x1800d3178], 0x10c8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b4a8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b48d
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b48d
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b489
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b466
cmp r11d, 0xe463da3c
je 0x18004be65
test edx, edx
jne 0x18004b44a
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b49e
cmp qword [rax + 0x30], r12
jne 0x18004b426
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2189_GameProcess.exe
call rax
test rax, rax
jne 0x18004b574
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b562
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b547
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b547
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b543
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b520
cmp r11d, 0xe463da3c
je 0x18004be82
test edx, edx
jne 0x18004b505
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b558
cmp qword [rax + 0x30], r12
jne 0x18004b4e1
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2189_GTAProcess.exe
call rax
test rax, rax
je 0x18004b643
lea rax, [r14 + 0x79b5dc]
mov dword [0x1800d316c], 0x10b8
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x24e6d90]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1ee18a8]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x1f89498]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x1f888c0]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], r13d
mov dword [0x1800d3174], 0x218
mov dword [0x1800d3170], 0x10d8
mov dword [0x1800d3178], 0x10c8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d319c], 0x908
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b6ec
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b6d1
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b6d1
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rdi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b6cd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b6aa
cmp r11d, 0xe463da3c
je 0x18004be9f
test edx, edx
jne 0x18004b68e
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b6e2
cmp qword [rax + 0x30], r12
jne 0x18004b66a
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2060_GameProcess.exe
call rax
test rax, rax
jne 0x18004b7b8
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b7a6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b78b
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b78b
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rdi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b787
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b764
cmp r11d, 0xe463da3c
je 0x18004bebc
test edx, edx
jne 0x18004b749
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18004b79c
cmp qword [rax + 0x30], r12
jne 0x18004b725
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2060_GTAProcess.exe
call rax
test rax, rax
je 0x18004b87d
lea rax, [r14 + 0x7935d0]
mov dword [0x1800d316c], 0x10a8
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x24c8858]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1ec3828]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x1f6b3c0]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x1f6a7e0]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], r13d
mov dword [0x1800d3174], 0x218
mov dword [0x1800d3170], 0x10d8
mov dword [0x1800d3178], 0x10b8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b925
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b90a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b90a
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b906
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b8e3
cmp r11d, 0xe463da3c
je 0x18004bed9
test edx, edx
jne 0x18004b8c8
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b91b
cmp qword [rax + 0x30], r12
jne 0x18004b8a4
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2944_GameProcess.exe
call rax
test rax, rax
jne 0x18004b9f2
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004b9e0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004b9c5
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004b9c5
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004b9c1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004b99e
cmp r11d, 0xe463da3c
je 0x18004bef6
test edx, edx
jne 0x18004b982
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004b9d6
cmp qword [rax + 0x30], r12
jne 0x18004b95e
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call rax
test rax, rax
je 0x18004bac1
lea rax, [r14 + 0x795f9c]
mov dword [0x1800d316c], 0x1098
mov qword [0x1800d3150], rax
lea rax, [rbp + 0x257bea0]
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1f42068]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x1feb698]
mov qword [0x1800d3158], rax
lea rax, [rbp + 0x1feaac0]
mov qword [0x1800d3160], rax
mov dword [0x1800d3168], 0x150c
mov dword [0x1800d3174], 0x250
mov dword [0x1800d3170], 0x10b8
mov dword [0x1800d3178], 0x10a8
mov dword [0x1800d317c], 0x2f4
mov dword [0x1800d3180], 0x84
mov dword [0x1800d3194], 0x134
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5f0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x28c
mov byte [0x1800d31a1], 1
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004bb69
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004bb4e
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004bb4e
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + rsi]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004bb4a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004bb27
cmp r11d, 0xe463da3c
je 0x18004bf13
test edx, edx
jne 0x18004bb0c
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004bb5f
cmp qword [rax + 0x30], r12
jne 0x18004bae8
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_GameProcess.exe
call rax
test rax, rax
jne 0x18004bc36
mov rax, qword [0x1800d31b0]
test rax, rax
jne 0x18004bc24
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18004bc09
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18004bc09
mov esi, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [rsi + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18004bc05
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18004bbe2
cmp r11d, 0xe463da3c
je 0x18004bf30
test edx, edx
jne 0x18004bbc6
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18004bc1a
cmp qword [rax + 0x30], r12
jne 0x18004bba2
mov rax, r12
mov qword [0x1800d31b0], rax
lea rcx, str.FiveM_GTAProcess.exe
call rax
test rax, rax
je 0x18004bcfe
lea rax, [r14 + 0xcaf950]
mov dword [0x1800d316c], 0x10a8
mov qword [0x1800d3150], rax
lea rcx, [rbp + 0x2087780]
lea rax, [rbp + 0x247f840]
mov dword [0x1800d3168], 0x14b8
mov qword [0x1800d3140], rax
lea rax, [rbp + 0x1efd4c8]
mov qword [0x1800d3148], rax
lea rax, [rbp + 0x2088360]
mov qword [0x1800d3158], rax
mov dword [0x1800d3174], 0x218
mov dword [0x1800d3170], 0x10c8
mov dword [0x1800d3178], 0x10b8
mov dword [0x1800d317c], 0x2e8
mov dword [0x1800d3180], 0x74
mov dword [0x1800d3194], 0x12c
mov dword [0x1800d3184], 0x20
mov dword [0x1800d318c], 0x24
mov dword [0x1800d3188], 0x5e0
mov dword [0x1800d3198], 0x146b
mov dword [0x1800d3190], 0x25c
mov qword [0x1800d3160], rcx
call fcn.180049c08
mov r9, r15
mov qword [rsp + 0x28], r12
lea r8, [0x180049768]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov rbx, qword [rsp + 0x60]
mov eax, 1
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004a970
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aa26
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004abac
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004ac6c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004adec
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004aea6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b026
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b0e0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b260
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b321
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b4a1
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b55b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b6e5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b79f
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b91e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004b9d9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004bb62
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18004bc1d