Function at 0x14001b1d0
Capabilities:
Create thread
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rax, qword [0x14008c040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rbx, rcx
xor r12d, r12d
mov dword [rbp - 0x59], r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r12
mov qword [rbp - 0x21], r12
lea r8d, [r12 + 0x16]
lea rdx, str.FLiNGTrainerNamedPipe_
lea rcx, [rbp - 0x39]
call fcn.140007a60
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.140017030
test al, al
je 0x14001b822
lea rcx, [rbx + 0x448]
lea r8d, [r12 + 7]
lea rdx, [0x14007abb8]
call fcn.1400072e0
lea rcx, [rbx + 0x488]
lea r8d, [r12 + 7]
lea rdx, str._tNAS_Ny
call fcn.1400072e0
lea r8d, [r12 + 0x13]
lea rdx, str.My_Time_at_Sandrock
lea rcx, [rbx + 0x468]
call fcn.1400072e0
lea rcx, [rbx + 0x4a8]
mov esi, reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, esi
lea rdx, str.Plus_39_Trainer
call fcn.1400072e0
nop
mov r15, qword [rbx + 0x478]
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
mov ecx, r12d
mov qword [rbp + 0x17], rcx
mov qword [rbp + 0x1f], rsi
mov byte [rbp + 7], cl
mov dword [rbp - 0x59], 1
cmp r15, 0x10
jb 0x14001b2f0
mov rdx, r15
lea rcx, [rbp + 7]
call fcn.140010f60
mov ecx, r12d
mov qword [rbp + 0x17], rcx
mov edi, r12d
mov rsi, qword [rbp + 0x1f]
jmp 0x14001b300
mov rdi, r12
test r15, r15
je 0x14001b364
nop dword [rax + rax]
lea rax, [rbx + 0x468]
cmp qword [rbx + 0x480], 7
jbe 0x14001b318
mov rax, qword [rbx + 0x468]
movzx r9d, byte [rax + rdi*2]
cmp rcx, rsi
jae 0x14001b342
lea rax, [rcx + 1]
mov qword [rbp + 0x17], rax
lea rax, [rbp + 7]
cmp rsi, 0xf
cmova rax, qword [rbp + 7]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14001b352
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 7]
call fcn.140007d10
inc rdi
cmp rdi, r15
jae 0x14001b364
mov rsi, qword [rbp + 0x1f]
mov rcx, qword [rbp + 0x17]
jmp 0x14001b300
mov rdx, qword [0x14008f828]
cmp rdx, 0xf
jbe 0x14001b3a5
mov rcx, qword [0x14008f810]
inc rdx
cmp rdx, 0x1000
jb 0x14001b3a0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b868
mov rcx, r8
call fcn.140041810
movups xmm0, xmmword [rbp + 7]
movaps xmmword [0x14008f810], xmm0
movups xmm1, xmmword [rbp + 0x17]
movaps xmmword [0x14008f820], xmm1
mov r8d, 7
lea rdx, str.6360821
lea rcx, [0x14008f7f0]
call fcn.140007080
lea rcx, [rbx + 0x4c8]
mov r8d, 0x629
lea rdx, [0x14007ac30]
call fcn.1400072e0
lea rcx, [rbx + 0x4e8]
mov r8d, 0xaac
lea rdx, str._n_nNum_1___Infinite_Health_nNum_2___Infinite_Stamina_nNum_3___Infinite_Endurance_nNum_4___Infinite_Toughness_nNum_5___Infinite_Items_Takes_effect_when_you_move_an_item_to_the_tool_bar__that_items_amount_will_be_set_to_max_stackable_amount._n_nNote_if_the_item_is_already_in_the_tool_bar__you_will_need_to_remove_it_from_the_tool_bar_then_move_it_back_to_the_tool_bar_in_order_to_change_its_amount._nNum_6___Max_NPC_Relationship_Takes_effect_when_NPC_relationship_changes._nNum_7___Set_Game_Speed_nNum_8___Set_Movement_Speed_nNum_9___Set_Jump_Height_nNum_0___100__Drop_Rate_n_nCtrlNum_1___Edit_Money_nCtrlNum_2___Money_Multiplier_nCtrlNum_3___Infinite_Exp_Takes_effect_when_you_gain_exp._nCtrlNum_4___Exp_Multiplier_nCtrlNum_5___Infinite_Knowledge_Exp_Takes_effect_when_you_gain_knowledge_exp._nCtrlNum_6___Knowledge_Exp_Multiplier_nCtrlNum_7___Edit_Knowledge_Points_Takes_effect_when_opening_the_knowledge_menu._nCtrlNum_8___Max_Workshop_Reputation_Takes_effect_when_you_gain_workshop_reputation._nCtrlNum_9___Workshop_Rep._Multiplier_nCtrlNum_0___Freeze_Daytime_Note_when_time_is_frozen__some_events__such_as_production__cooking__etc.__can_not_progress__you_will_need_to_disable_this_option_during_those_events._nCtrlNum_.___Set_Time_Lapse_Speed_n_nCtrlF1___Water_Tank_Infinite_Water_Storage_Takes_effect_when_water_storage_decreases._nCtrlF2___Machines_Infinite_Fuel_Takes_effect_when_fuel_decreases._nCtrlF3___Fast_Production__Cooking_Note_when_time_is_frozen__production_and_cooking_progress_can_not_increase__youll_need_to_disable__Freeze_Daytime__option_in_order_to_complete_production_and_cooking._nCtrlF4___Minimum_Crafting_Requirements_Activate_before_opening_worktable_or_other_machines._n_nWhen_activated__you_only_need_1_wood_to_craft_any_items._n_nIf_you_want_to_disable_this_option_after_it_took_effects__you_will_need_to_restart_the_game_in_order_to_cancel_its_effects._n_nNote_this_option_does_not_work_for_assembly_station._nCtrlF5___Minimum_Cooking_Requirements_Activate_before_opening_cooking_station._n_nWhen_activated__you_only_need_1_wood_to_cook_any_food._n_nWhen_you_first_activate_this_option__you_may_need_to_open_the_cooking_station_twice_in_order_to_cook._n_nIf_you_want_to_disable_this_option_after_it_took_effects__you_will_need_to_restart_the_game_in_order_to_cancel_its_effects._nCtrlF6___Unlock_All_Blueprints_nCtrlF7___Unlock_All_Cooking_Recipes_nCtrlF8___Unlock_All_NPC_Preferences_n_nEdit_Player_Stats_n_nAltNum_1___Edit_Max_Health_nAltNum_2___Edit_Max_Stamina_nAltNum_3___Edit_Max_Endurance_nAltNum_4___Edit_Break_nAltNum_5___Edit_Max_Toughness_nAltNum_6___Edit_Attack_nAltNum_7___Edit_Defense_nAltNum_8___Edit_Critical_Chance_nAltNum_9___Edit_Critical_Damage_nAltNum_0___Edit_Luck_n_n
call fcn.1400072e0
mov rcx, rbx
call fcn.14001a470
mov rcx, rbx
call fcn.14001a770
lea r14, [0x14008f8a0]
mov esi, dword [0x14008f324]
test esi, esi
je 0x14001b4d2
mov edi, dword [0x14008f320]
test edi, edi
je 0x14001b4d2
mov rcx, r14
call fcn.140041014
test eax, eax
jne 0x14001b84a
mov eax, dword [0x14008f8ec]
cmp eax, 0x7fffffff
je 0x14001b855
mov dword [rbp - 0x49], 9
mov dword [rbp - 0x59], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x59]
mov r8d, 4
lea rdx, [rbp - 0x49]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp - 0x59], esi
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp - 0x59], edi
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call fcn.14004101c
mov rcx, rbx
call fcn.14001b8d0
lea rdi, [rbx + 0x5e8]
mov r8, rdi
lea rdx, str.Cover
mov ecx, 0x75
call fcn.14001e050
mov rax, qword [rdi + 8]
cmp rax, qword [rdi]
je 0x14001b5a6
mov rcx, r14
call fcn.140041014
test eax, eax
jne 0x14001b84a
mov eax, dword [0x14008f8ec]
cmp eax, 0x7fffffff
je 0x14001b855
mov dword [rbp - 0x59], 3
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rdi + 8]
sub rax, qword [rdi]
mov dword [rbp - 0x59], eax
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rdi]
mov qword [rbp - 0x59], rax
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 8
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call fcn.14004101c
mov rcx, r14
call fcn.140041014
test eax, eax
jne 0x14001b84a
mov eax, dword [0x14008f8ec]
cmp eax, 0x7fffffff
je 0x14001b855
mov dword [rbp - 0x59], 5
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rax, [0x14001a170]
mov qword [rbp - 0x59], rax
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 8
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call fcn.14004101c
lea r8, [rbx + 0x4e8]
lea rdx, [rbx + 0x4c8]
call fcn.140036310
mov qword [rbp + 7], r14
mov rcx, r14
call fcn.140041014
test eax, eax
jne 0x14001b84a
mov eax, dword [0x14008f8ec]
cmp eax, 0x7fffffff
je 0x14001b855
mov dword [rbp - 0x59], 4
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbx + 0x4c8]
lea rcx, [rbp - 0x19]
call fcn.14001da40
mov rdx, rax
mov rcx, rbx
call fcn.140017380
lea rdx, [rbx + 0x4e8]
lea rcx, [rbp - 0x19]
call fcn.14001da40
mov rdx, rax
mov rcx, rbx
call fcn.140017380
nop
mov rcx, r14
call fcn.14004101c
mov ecx, 8
call fcn.140041844
mov qword [rax], rbx
mov qword [rbp + 7], rax
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14001dfa0]
xor edx, edx
xor ecx, ecx
call fcn.14004fc18
mov qword [rbp - 0x49], rax
test rax, rax
je 0x14001b8b3
cmp dword [rbp - 0x41], 0
je 0x14001b8a8
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call fcn.140040f74
test eax, eax
jne 0x14001b8a8
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x49], xmm0
lea ecx, [rax + 8]
call fcn.140041844
mov qword [rax], rbx
mov qword [rbp + 7], rax
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14001dfd0]
xor edx, edx
xor ecx, ecx
call fcn.14004fc18
mov qword [rbp - 0x49], rax
test rax, rax
je 0x14001b899
cmp dword [rbp - 0x41], 0
je 0x14001b88e
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call fcn.140040f74
test eax, eax
jne 0x14001b88e
lea ecx, [rax + 8]
call fcn.140041844
mov qword [rax], rbx
mov qword [rbp + 7], rax
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x14001de20]
xor edx, edx
xor ecx, ecx
call fcn.14004fc18
mov qword [rbp - 0x39], rax
test rax, rax
je 0x14001b87f
cmp dword [rbp - 0x31], 0
je 0x14001b874
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call fcn.140040f74
test eax, eax
jne 0x14001b874
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x39], xmm0
cmp byte [rbx + 0x528], al
jne 0x14001b81c
nop
mov rcx, rbx
call fcn.140019fa0
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [rbx + 0x528], 0
je 0x14001b800
cmp dword [rbp - 0x31], 0
jne 0x14001b86e
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400417f0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 5
call fcn.140040ed8
int3
dec eax
mov dword [0x14008f8ec], eax
mov ecx, 6
call fcn.140040ed8
nop
call fcn.1400488e8
nop
call fcn.14004ecf8
nop
mov ecx, 1
call fcn.140040ed8
nop
mov dword [rbp - 0x31], r12d
mov ecx, 6
call fcn.140040ed8
nop
mov ecx, 1
call fcn.140040ed8
nop
mov dword [rbp - 0x41], r12d
mov ecx, 6
call fcn.140040ed8
nop
mov ecx, 1
call fcn.140040ed8
nop
mov dword [rbp - 0x41], r12d
mov ecx, 6
call fcn.140040ed8
int3