Function at 0x140003cb0
Capabilities:
Create thread
Enumerate processes

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0xa8]
sub rsp, 0x1a0
mov rax, qword [0x140066040]
xor rax, rsp
mov qword [rbp + 0x70], rax
cmp byte [0x1400f0550], 0
je 0x14000427a
mov rcx, qword [0x1400f1010]
lea rdx, [0x1400f0550]
movss xmm1, dword [0x1400f0544]
mov r8d, 0x12a
movss xmm0, dword [0x1400f0540]
unpcklps xmm0, xmm1
xorps xmm1, xmm1
mov eax, dword [rcx + 0x1dc0]
movsd qword [rcx + 0x1dd4], xmm0
or eax, 1
mov dword [rcx + 0x1dc0], eax
or eax, 0x42
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
mov qword [r11 + 0x10], rdi
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
xorps xmm7, xmm7
unpcklps xmm1, xmm7
movsd qword [rcx + 0x1ddc], xmm1
movss xmm0, dword [0x1400f0548]
movss xmm1, dword [0x1400f054c]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1dc8], 1
mov dword [rcx + 0x1e20], 0x3f800000
lea rcx, str.PUBG_Mobile_Mod_Skin
call fcn.140011170
lea rcx, str.Unreal_Engine_Game:
call fcn.1400444a0
movss xmm6, dword [0x14005cc2c]
xorps xmm0, xmm0
movaps xmm1, xmm6
call fcn.140015f40
lea rcx, str.PUBG_Mobile
call fcn.140044640
lea rcx, str.Version:
call fcn.1400444a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140015f40
lea rcx, str.Global
call fcn.140044640
lea rcx, str.Game_Architecture:
call fcn.1400444a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140015f40
lea rcx, [0x14004fbb4]
call fcn.140044640
mov rax, qword [0x1400f1010]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140003e2e
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140046690
lea rcx, str.How_to_use_:
call fcn.1400444a0
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140003e75
movaps xmm1, xmm6
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.140015c90
lea rcx, str.First_Open_Gameloop_Emulator___
call fcn.140044640
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140015f40
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], 0
lea rcx, str.Start_Emulator
call fcn.140044e60
xor edi, edi
test al, al
je 0x140003f59
xor edx, edx
mov qword [rsp + 0x1b0], rbx
lea ecx, [rdi + 2]
mov dword [rsp + 0x40], 0x130
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rsp + 0x40]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
jmp 0x140003f04
lea rdx, str.AndroidEmulatorEn.exe
lea rcx, [rsp + 0x6c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov rcx, rbx
test eax, eax
je 0x140003f39
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140003ee0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x1400017d0]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140003f51
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x18
lea rdx, str.Emulator_Already_Running
call fcn.140003680
mov rbx, qword [rsp + 0x1b0]
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], dil
jne 0x140003f97
movaps xmm1, xmm6
mov qword [rsp + 0x30], rdi
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], dil
jne 0x140003fc0
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140046690
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], dil
jne 0x140003ff7
movaps xmm1, xmm6
mov qword [rsp + 0x30], rdi
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], dil
jne 0x140004027
movaps xmm1, xmm6
mov qword [rsp + 0x30], rdi
lea rcx, [rsp + 0x30]
call fcn.140015c90
lea rcx, str.Then_Open_PUBGM_Game___
call fcn.140044640
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.140015f40
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], rdi
lea rcx, str.Start_Game
call fcn.140044e60
test al, al
je 0x14000409f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
cmp byte [0x1400f1000], dil
jne 0x140004098
mov qword [rsp + 0x28], rdi
lea r8, [0x140001e70]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x1400f1000], 1
mov rcx, qword [0x1400f1010]
mov rdi, qword [rsp + 0x1b8]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x1400040e9
movaps xmm1, xmm6
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140004124
movaps xmm1, xmm6
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x14000415f
movaps xmm1, xmm6
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x14000419a
movaps xmm1, xmm6
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x1400041d5
movaps xmm1, xmm6
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140004210
movaps xmm1, xmm6
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.140015c90
mov rcx, qword [0x1400f1010]
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140004232
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140046690
lea rcx, str.Status_:
call fcn.1400444a0
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.140015f40
cmp qword [0x1400f0370], 0xf
lea rcx, str.Idle
cmova rcx, qword [str.Idle]
call fcn.140044640
call fcn.1400143e0
movaps xmm7, xmmword [rsp + 0x180]
movaps xmm6, xmmword [rsp + 0x190]
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.14004cf00
add rsp, 0x1a0
pop rbp
ret