Function at 0x1400014d0
Capabilities:
Create thread
Enumerate process modules
Enumerate processes
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor r15d, r15d
lea rcx, str.title_by__undisputzd_on_discord.
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Multiplier_Options_Are:_0.1__0.2__0.3__etc__etc__etc__0.9
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001ae0
mov rcx, rax
lea rdx, [0x140001cc0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.How_much_should_the_sensitivity_decrease_when_looking_at_entity_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001ae0
lea rdx, [0x14000570c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___float____ptr64____ptr64]
xorps xmm0, xmm0
mov qword [rsp + 0x58], 0x20
mov qword [rsp + 0x60], 8
mov qword [rsp + 0x68], 0x10
mov qword [rsp + 0x70], 0xd60
mov qword [rsp + 0x78], 0x30
mov qword [rbp - 0x80], 0x40
mov qword [rbp - 0x78], 0x14
lea rbx, [rsp + 0x58]
movdqu xmmword [rbp + 0x208], xmm0
mov ecx, 0x38
call fcn.140001e00
mov rdi, rax
mov qword [rbp + 0x208], rax
lea r12, [rax + 0x38]
mov qword [rbp + 0x218], r12
mov r8d, 0x38
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + 0x38]
mov qword [rbp + 0x210], rax
xorps xmm0, xmm0
mov qword [rsp + 0x30], 0x698
mov qword [rsp + 0x38], 0x30
mov qword [rsp + 0x40], 0x10
mov qword [rsp + 0x48], 0x228
mov qword [rsp + 0x50], 0x28
lea rbx, [rsp + 0x30]
movdqu xmmword [rbp + 0x1f0], xmm0
mov ecx, 0x28
call fcn.140001e00
mov rsi, rax
mov qword [rbp + 0x1f0], rax
add rax, 0x28
mov qword [rbp + 0x200], rax
mov r8d, 0x28
mov rdx, rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + 0x28]
mov qword [rbp + 0x1f8], rax
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.DLL_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400016c2
mov dword [rbp - 0x70], 0x130
lea rdx, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_Process32First]
test eax, eax
je 0x1400016b9
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x44]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov rcx, rbx
test eax, eax
je 0x14000173e
lea rdx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.DLL_Process32Next]
test eax, eax
jne 0x140001690
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
lea rdx, str.Failed_to_get_process_ID.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001ae0
lea rdx, [0x140001cc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15d, 0xffffffff
mov rcx, qword [rbp + 0x1f0]
test rcx, rcx
je 0x1400019ff
lea rax, [rcx + 0x28]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400019f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ebx, dword [rbp - 0x68]
test ebx, ebx
je 0x1400016c2
mov r8d, ebx
xor edx, edx
mov ecx, 0x38
call qword [sym.imp.KERNEL32.DLL_OpenProcess]
mov r14, rax
test rax, rax
jne 0x140001773
lea rdx, str.Failed_to_open_process.
jmp 0x1400016c9
mov edx, ebx
mov ecx, 0x18
call qword [sym.imp.KERNEL32.DLL_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400017de
mov dword [rbp - 0x70], 0x238
lea rdx, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_Module32First]
test eax, eax
je 0x1400017d5
nop dword [rax]
nop word [rax + rax]
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x40]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov rcx, rbx
test eax, eax
je 0x1400017e7
lea rdx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.DLL_Module32Next]
test eax, eax
jne 0x1400017b0
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
lea rdx, str.Failed_to_get_module_base_address.
jmp 0x140001866
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov r13, qword [rbp - 0x58]
test r13, r13
je 0x1400017de
lea rbx, [r13 + 0x5a80f38]
mov qword [rbp + 0x1d0], rbx
cmp rdi, qword [rbp + 0x210]
je 0x14000185a
nop dword [rax]
mov rsi, qword [rdi]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x1d0]
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
test eax, eax
je 0x14000185f
mov rbx, qword [rbp + 0x1d0]
add rbx, rsi
mov qword [rbp + 0x1d0], rbx
add rdi, 8
cmp rdi, qword [rbp + 0x210]
jne 0x140001810
mov rsi, qword [rbp + 0x1f0]
test rbx, rbx
jne 0x140001890
lea rdx, str.Failed_to_resolve_sensitivity_address.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001ae0
mov rcx, rax
lea rdx, [0x140001cc0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x1400016e5
lea rdi, [r13 + 0x5a13a40]
mov qword [rbp + 0x1d0], rdi
cmp rsi, qword [rbp + 0x1f8]
je 0x1400018f3
nop word [rax + rax]
mov r13, qword [rsi]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x1d0]
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
test eax, eax
je 0x1400018f8
mov rdi, qword [rbp + 0x1d0]
add rdi, r13
mov qword [rbp + 0x1d0], rdi
add rsi, 8
cmp rsi, qword [rbp + 0x1f8]
jne 0x1400018b0
test rdi, rdi
jne 0x140001904
lea rdx, str.Failed_to_resolve_condition_address.
jmp 0x140001866
mov ecx, 0x20
call fcn.140001e00
mov qword [rax], rbx
mov qword [rax + 8], rdi
mov qword [rax + 0x10], r14
lea rcx, [0x140001280]
mov qword [rax + 0x18], rcx
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x1e8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140001d90]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1e0], rax
test rax, rax
je 0x1400019e6
cmp dword [rbp + 0x1e8], 0
jne 0x140001975
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x1e8], eax
jne 0x14000198f
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x1d0], xmm0
xor edx, edx
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x1400019bd
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
nop
cmp dword [rbp + 0x1e8], 0
je 0x1400016eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0x1e8], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140001e3c
nop
mov rcx, qword [rbp + 0x208]
test rcx, rcx
je 0x140001a42
sub r12, rcx
and r12, 0xfffffffffffffff8
mov rax, rcx
cmp r12, 0x1000
jb 0x140001a3a
add r12, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001a3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r12
call fcn.140001e3c
mov eax, r15d
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140001de0
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret