Function at 0x14000fb70
Capabilities:
Create thread
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
mov rax, qword [0x14007e040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rbx, rcx
xor r12d, r12d
mov dword [rbp - 0x59], r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r12
mov qword [rbp - 0x21], r12
lea r8d, [r12 + 0x16]
lea rdx, str.FLiNGTrainerNamedPipe_
lea rcx, [rbp - 0x39]
call fcn.140002800
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.14000b970
test al, al
je 0x1400101c2
lea rcx, [rbx + 0x380]
lea r8d, [r12 + 8]
lea rdx, [0x14006cd28]
call fcn.140002310
lea rcx, [rbx + 0x3c0]
lea r8d, [r12 + 0x16]
lea rdx, str.v1.0_v20240712
call fcn.140002310
mov esi, reloc.OLEAUT32.dll_SafeArrayDestroy
mov r8d, esi
lea rdx, str.Hogwarts_Legacy
lea rcx, [rbx + 0x3a0]
call fcn.140002310
lea rcx, [rbx + 0x3e0]
lea r8d, [r12 + 0x1e]
lea rdx, str.v1.0_v20240712_Plus_33_Trainer
call fcn.140002310
nop
mov r15, qword [rbx + 0x3b0]
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
mov ecx, r12d
mov qword [rbp + 0x17], rcx
mov qword [rbp + 0x1f], rsi
mov byte [rbp + 7], cl
mov dword [rbp - 0x59], 1
cmp r15, 0x10
jb 0x14000fc90
mov rdx, r15
lea rcx, [rbp + 7]
call fcn.1400061b0
mov ecx, r12d
mov qword [rbp + 0x17], rcx
mov edi, r12d
mov rsi, qword [rbp + 0x1f]
jmp 0x14000fca0
mov rdi, r12
test r15, r15
je 0x14000fd04
nop dword [rax + rax]
lea rax, [rbx + 0x3a0]
cmp qword [rbx + 0x3b8], 7
jbe 0x14000fcb8
mov rax, qword [rbx + 0x3a0]
movzx r9d, byte [rax + rdi*2]
cmp rcx, rsi
jae 0x14000fce2
lea rax, [rcx + 1]
mov qword [rbp + 0x17], rax
lea rax, [rbp + 7]
cmp rsi, 0xf
cmova rax, qword [rbp + 7]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000fcf2
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 7]
call fcn.140002ab0
inc rdi
cmp rdi, r15
jae 0x14000fd04
mov rsi, qword [rbp + 0x1f]
mov rcx, qword [rbp + 0x17]
jmp 0x14000fca0
mov rdx, qword [0x1400817e8]
cmp rdx, 0xf
jbe 0x14000fd45
mov rcx, qword [0x1400817d0]
inc rdx
cmp rdx, 0x1000
jb 0x14000fd40
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140010208
mov rcx, r8
call fcn.140036ec0
movups xmm0, xmmword [rbp + 7]
movaps xmmword [0x1400817d0], xmm0
movups xmm1, xmmword [rbp + 0x17]
movaps xmmword [0x1400817e0], xmm1
mov r8d, 7
lea rdx, str.6382497
lea rcx, [0x1400817b0]
call fcn.140002100
lea rcx, [rbx + 0x400]
mov r8d, 0x676
lea rdx, [0x14006cde0]
call fcn.140002310
lea rcx, [rbx + 0x420]
mov r8d, 0xd25
lea rdx, str._n_nNum_1___Infinite_Health_Takes_effect_when_health_value_changes._nNum_2___Edit_Max_Health_Takes_effect_when_health_value_changes._nNum_3___Infinite_Ancient_Magic_Energy_Takes_effect_when_ancient_magic_energy_value_changes._nNum_4___Max_Combo_nNum_5___Infinite_Item_Usage_Takes_effect_when_you_use_item__the_item_amount_wont_decrease._n_nWorks_for_most_usable_items_such_as_potions._nNum_6___Spells_Instant_Cooldown_nNum_7___Set_Player_Speed_nNum_8___Set_Movement_Speed_nNum_9___Set_Game_Speed_nNum_0___One_Hit_Kills_nNum_.___Damage_Multiplier_nNum____Defense_Multiplier_nNum_____Life_Leech_____When_activated__you_will_gain_health_when_you_damage_enemies._n_nThe_input_value_is_the_percentage_of_damage_that_would_go_toward_your_health._n_nCtrlNum_1___Stealth_Mode_nCtrlNum_2___Infinite_Exp_Takes_effect_when_you_gain_exp._nCtrlNum_3___Exp_Multiplier_Takes_effect_when_you_gain_exp._nCtrlNum_4___Shop_Items_Cost_0_Money_nCtrlNum_5___Gain_Money_When_Buying_Items_When_activated__shop_items_will_cost_negative_money__which_mean_you_will_gain_money_when_buying_from_shops._n_nThe_input_value_is_the_multiplier_of_the_items_cost__the_higher_the_multiplier__the_more_money_you_will_get._nCtrlNum_6___Money_Multiplier_Only_affects_money_from_enemies_and_treasure_chests._nCtrlNum_7___Loots_Multiplier_Only_affects_items_from_enemies_and_treasure_chests._nCtrlNum_8___Max_Extraordinary_Gear_Drop_Rate_When_activated__if_an_enemy_or_treasure_chest_has_possible_extraordinary_gears_to_drop__it_will_always_drop_extraordinary_gears._n_nNote_one_enemy_or_treasure_chest_will_only_drop_one_item___Max_Legendary_Gear_Drop_Rate__has_higher_priority_than__Max_Extraordinary_Gear_Drop_Rate_._You_may_activate_both_options_for_the_best_result._nCtrlNum_9___Max_Legendary_Gear_Drop_Rate_When_activated__if_an_enemy_or_treasure_chest_has_possible_legendary_gears_to_drop__it_will_always_drop_legendary_gears._n_nNote_one_enemy_or_treasure_chest_will_only_drop_one_item___Max_Legendary_Gear_Drop_Rate__has_higher_priority_than__Max_Extraordinary_Gear_Drop_Rate_._You_may_activate_both_options_for_the_best_result._n_nAltNum_1___Infinite_Broom_Boost_nAltNum_2___Infinite_Potion_Effect_Duration_nAltNum_3___Items_Wont_Decrease_Works_for_most_items__including_potions__resources__etc._nAltNum_4___Instant_Grow_Plants_Activate_before_planting_seeds._nAltNum_5___Instant_Brew_Potions_Activate_before_brewing_potions._nAltNum_6___No_Brew_Potion_Requirements_nAltNum_7___Ignore_Conjuration_Requirements_When_activated__you_can_craft_items_using_the_conjuring_spell_even_if_you_dont_have_enough_resources._If_you_do_have_resources__they_will_be_used._nAltNum_8___Unlock_All_Fast_Travel_Locations_When_activated__you_can_fast_travel_to_any_fast_travel_locations__even_if_theyre_still_locked._n_nIf_you_fast_traveled_to_a_locked_location__it_will_then_be_unlocked._nAltNum_9___Edit_Max_Gear_Slot_Count_If_the_input_value_is_less_than_the_games_default_max_gear_slot_count__this_option_will_have_no_effect._n_nNote__too_many_gear_slots_may_cause_the_game_to_crash._nAltNum_0___Edit_Talent_Points_Takes_effect_when_you_open_the_talents_menu_or_when_you_spend_talent_points._nAltNum____Teleport_To_Waypoint_Note__you_will_fall_from_the_sky_after_teleporting__enable__Infinite_Health__option_to_avoid_fall_damage._n_nNote__this_option_doesnt_work_in_flying_mode._n
call fcn.140002310
mov rcx, rbx
call fcn.14000ee10
mov rcx, rbx
call fcn.14000f110
lea r14, [0x140081860]
mov esi, dword [0x1400812dc]
test esi, esi
je 0x14000fe72
mov edi, dword [0x1400812d8]
test edi, edi
je 0x14000fe72
mov rcx, r14
call fcn.1400366c4
test eax, eax
jne 0x1400101ea
mov eax, dword [0x1400818ac]
cmp eax, 0x7fffffff
je 0x1400101f5
mov dword [rbp - 0x49], 9
mov dword [rbp - 0x59], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x59]
mov r8d, 4
lea rdx, [rbp - 0x49]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp - 0x59], esi
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp - 0x59], edi
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call fcn.1400366cc
mov rcx, rbx
call fcn.140010270
lea rdi, [rbx + 0x520]
mov r8, rdi
lea rdx, str.Cover
mov ecx, 0x75
call fcn.140012be0
mov rax, qword [rdi + 8]
cmp rax, qword [rdi]
je 0x14000ff46
mov rcx, r14
call fcn.1400366c4
test eax, eax
jne 0x1400101ea
mov eax, dword [0x1400818ac]
cmp eax, 0x7fffffff
je 0x1400101f5
mov dword [rbp - 0x59], 3
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rdi + 8]
sub rax, qword [rdi]
mov dword [rbp - 0x59], eax
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rdi]
mov qword [rbp - 0x59], rax
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 8
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call fcn.1400366cc
mov rcx, r14
call fcn.1400366c4
test eax, eax
jne 0x1400101ea
mov eax, dword [0x1400818ac]
cmp eax, 0x7fffffff
je 0x1400101f5
mov dword [rbp - 0x59], 5
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rax, [0x14000eb10]
mov qword [rbp - 0x59], rax
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 8
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call fcn.1400366cc
lea r8, [rbx + 0x420]
lea rdx, [rbx + 0x400]
call fcn.14002b4d0
mov qword [rbp + 7], r14
mov rcx, r14
call fcn.1400366c4
test eax, eax
jne 0x1400101ea
mov eax, dword [0x1400818ac]
cmp eax, 0x7fffffff
je 0x1400101f5
mov dword [rbp - 0x59], 4
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x49]
mov r8d, 4
lea rdx, [rbp - 0x59]
mov rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbx + 0x400]
lea rcx, [rbp - 0x19]
call fcn.1400124c0
mov rdx, rax
mov rcx, rbx
call fcn.14000bcc0
lea rdx, [rbx + 0x420]
lea rcx, [rbp - 0x19]
call fcn.1400124c0
mov rdx, rax
mov rcx, rbx
call fcn.14000bcc0
nop
mov rcx, r14
call fcn.1400366cc
mov ecx, 8
call fcn.140036ef4
mov qword [rax], rbx
mov qword [rbp + 7], rax
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140012b30]
xor edx, edx
xor ecx, ecx
call fcn.1400423b8
mov qword [rbp - 0x49], rax
test rax, rax
je 0x140010253
cmp dword [rbp - 0x41], 0
je 0x140010248
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call fcn.140036624
test eax, eax
jne 0x140010248
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x49], xmm0
lea ecx, [rax + 8]
call fcn.140036ef4
mov qword [rax], rbx
mov qword [rbp + 7], rax
lea rcx, [rbp - 0x41]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140012b60]
xor edx, edx
xor ecx, ecx
call fcn.1400423b8
mov qword [rbp - 0x49], rax
test rax, rax
je 0x140010239
cmp dword [rbp - 0x41], 0
je 0x14001022e
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call fcn.140036624
test eax, eax
jne 0x14001022e
lea ecx, [rax + 8]
call fcn.140036ef4
mov qword [rax], rbx
mov qword [rbp + 7], rax
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400129b0]
xor edx, edx
xor ecx, ecx
call fcn.1400423b8
mov qword [rbp - 0x39], rax
test rax, rax
je 0x14001021f
cmp dword [rbp - 0x31], 0
je 0x140010214
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call fcn.140036624
test eax, eax
jne 0x140010214
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x39], xmm0
cmp byte [rbx + 0x460], al
jne 0x1400101bc
nop
mov rcx, rbx
call fcn.14000e940
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [rbx + 0x460], 0
je 0x1400101a0
cmp dword [rbp - 0x31], 0
jne 0x14001020e
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140036ea0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 5
call fcn.140036588
int3
dec eax
mov dword [0x1400818ac], eax
mov ecx, 6
call fcn.140036588
nop
call fcn.14003ddbc
nop
call fcn.14004150c
nop
mov ecx, 1
call fcn.140036588
nop
mov dword [rbp - 0x31], r12d
mov ecx, 6
call fcn.140036588
nop
mov ecx, 1
call fcn.140036588
nop
mov dword [rbp - 0x41], r12d
mov ecx, 6
call fcn.140036588
nop
mov ecx, 1
call fcn.140036588
nop
mov dword [rbp - 0x41], r12d
mov ecx, 6
call fcn.140036588
int3