Function at 0x14003cd60
Capabilities:
Create thread
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rdi, rcx
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
lea r8d, [r14 + 0x16]
lea rdx, str.FLiNGTrainerNamedPipe_
lea rcx, [rbp - 0x20]
call fcn.1400073e0
mov r8d, ebx
lea rdx, [rbp - 0x20]
mov rcx, rdi
call fcn.140035060
test al, al
je 0x14003d2d2
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
lea r8d, [r14 + 0x39]
lea rdx, [0x1400ce720]
lea rcx, [rbp - 0x20]
call fcn.1400073e0
lea rdx, [rbp - 0x20]
mov rcx, rdi
call fcn.14003b7b0
lea r8d, [r14 + 7]
lea rdx, str.5875398
lea rcx, [0x1400e9340]
call fcn.140022190
lea r8d, [r14 + 0xb]
lea rdx, str.World_War_Z
lea rcx, [0x1400e9360]
call fcn.140022190
lea rcx, [rdi + 0x458]
cmp qword [rcx + 0x18], 0x167
jb 0x14003ce53
mov rbx, qword [rcx]
mov qword [rcx + 0x10], 0x167
mov r8d, 0x2ce
lea rdx, [0x1400ce7a0]
mov rcx, rbx
call fcn.1400a37e0
mov word [rbx + 0x2ce], r14w
jmp 0x14003ce64
lea r9, [0x1400ce7a0]
mov edx, 0x167
call fcn.140024630
lea rcx, [rdi + 0x478]
cmp qword [rcx + 0x18], 0x12d
jb 0x14003ce9f
mov rbx, qword [rcx]
mov qword [rcx + 0x10], 0x12d
mov r8d, 0x25a
lea rdx, str._n_nNum_1___Infinite_Health_nNum_2___Infinite_Ammo_Takes_effect_when_reloading_ammo._nNum_3___No_Reload_nNum_4___Super_Speed_nNum_5___Slow_Motion_nNum_6___Edit_Money_Take_effects_when_you_open_different_menus._nNum_7___Edit_Challenge_Coins_Take_effects_when_you_open_different_menus._nNum_0___Easy_Kill_n_n
mov rcx, rbx
call fcn.1400a37e0
mov word [rbx + 0x25a], r14w
jmp 0x14003ceb0
lea r9, str._n_nNum_1___Infinite_Health_nNum_2___Infinite_Ammo_Takes_effect_when_reloading_ammo._nNum_3___No_Reload_nNum_4___Super_Speed_nNum_5___Slow_Motion_nNum_6___Edit_Money_Take_effects_when_you_open_different_menus._nNum_7___Edit_Challenge_Coins_Take_effects_when_you_open_different_menus._nNum_0___Easy_Kill_n_n
mov edx, 0x12d
call fcn.140024630
mov rcx, rdi
call fcn.14003a440
mov rcx, rdi
call fcn.14003a730
lea r15, [0x1400e93f0]
mov esi, dword [0x1400e95ec]
test esi, esi
je 0x14003cf7c
mov ebx, dword [0x1400e95e8]
test ebx, ebx
je 0x14003cf7c
mov rcx, r15
call fcn.14007bde8
test eax, eax
jne 0x14003d2e6
mov eax, dword [0x1400e943c]
cmp eax, 0x7fffffff
je 0x14003d2f1
mov dword [rbp + 0x40], 9
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp + 0x40], esi
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp + 0x40], ebx
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r15
call fcn.14007bdf0
mov rcx, rdi
call fcn.14003d360
lea rbx, [rdi + 0x578]
mov r8, rbx
lea rdx, str.Cover
mov ecx, 0x75
call fcn.140046ff0
mov rax, qword [rbx + 8]
cmp rax, qword [rbx]
je 0x14003d050
mov rcx, r15
call fcn.14007bde8
test eax, eax
jne 0x14003d2e6
mov eax, dword [0x1400e943c]
cmp eax, 0x7fffffff
je 0x14003d2f1
mov dword [rbp + 0x40], 3
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rbx + 8]
sub rax, qword [rbx]
mov dword [rbp + 0x40], eax
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rbx]
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 8
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r15
call fcn.14007bdf0
mov rcx, r15
call fcn.14007bde8
test eax, eax
jne 0x14003d2e6
mov eax, dword [0x1400e943c]
cmp eax, 0x7fffffff
je 0x14003d2f1
mov dword [rbp + 0x40], 5
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rax, [0x14003a120]
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 8
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r15
call fcn.14007bdf0
lea r8, [rdi + 0x478]
lea rdx, [rdi + 0x458]
call fcn.1400535d0
mov qword [rbp + 0x48], r15
mov rcx, r15
call fcn.14007bde8
test eax, eax
jne 0x14003d2e6
mov eax, dword [0x1400e943c]
cmp eax, 0x7fffffff
je 0x14003d2f1
mov dword [rbp + 0x40], 4
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rdi + 0x458]
lea rcx, [rbp - 0x20]
call fcn.140021200
mov rdx, rax
mov rcx, rdi
call fcn.140035490
lea rdx, [rdi + 0x478]
lea rcx, [rbp - 0x20]
call fcn.140021200
mov rdx, rax
mov rcx, rdi
call fcn.140035490
nop
mov rcx, r15
call fcn.14007bdf0
mov ecx, 8
call fcn.14007d284
mov qword [rax], rdi
mov qword [rbp + 0x38], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400426f0]
xor edx, edx
xor ecx, ecx
call fcn.14008d61c
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14003d349
cmp dword [rbp - 0x28], 0
je 0x14003d33e
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.14007c5c0
test eax, eax
jne 0x14003d33e
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
lea ecx, [rax + 8]
call fcn.14007d284
mov qword [rax], rdi
mov qword [rbp + 0x38], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140042720]
xor edx, edx
xor ecx, ecx
call fcn.14008d61c
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14003d32f
cmp dword [rbp - 0x28], 0
je 0x14003d324
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.14007c5c0
test eax, eax
jne 0x14003d324
call fcn.140038b00
mov ecx, 8
call fcn.14007d284
mov qword [rax], rdi
mov qword [rbp + 0x38], rax
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140042560]
xor edx, edx
xor ecx, ecx
call fcn.14008d61c
mov qword [rbp - 0x40], rax
test rax, rax
je 0x14003d315
cmp dword [rbp - 0x38], 0
je 0x14003d30a
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.14007c5c0
test eax, eax
jne 0x14003d30a
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
cmp byte [0x1400e95f0], al
jne 0x14003d2cc
nop dword [rax]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
call fcn.140039df0
cmp byte [0x1400e95f0], 0
je 0x14003d2b0
cmp dword [rbp - 0x38], 0
jne 0x14003d304
mov rbx, qword [rsp + 0xa0]
add rsp, 0x70
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 5
call fcn.14007bd8c
int3
dec eax
mov dword [0x1400e943c], eax
mov ecx, 6
call fcn.14007bd8c
int3
call fcn.14008d4d0
nop
mov ecx, 1
call fcn.14007bd8c
nop
mov dword [rbp - 0x38], r14d
mov ecx, 6
call fcn.14007bd8c
nop
mov ecx, 1
call fcn.14007bd8c
nop
mov dword [rbp - 0x28], r14d
mov ecx, 6
call fcn.14007bd8c
nop
mov ecx, 1
call fcn.14007bd8c
nop
mov dword [rbp - 0x28], r14d
mov ecx, 6
call fcn.14007bd8c
int3