Function at 0x140036ff0
Capabilities:
Create thread
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rdi, rcx
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
lea r8d, [r14 + 0x16]
lea rdx, str.FLiNGTrainerNamedPipe_
lea rcx, [rbp - 0x20]
call fcn.140004f80
mov r8d, ebx
lea rdx, [rbp - 0x20]
mov rcx, rdi
call fcn.140030a20
test al, al
je 0x140037532
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
lea r8d, [r14 + 0x26]
lea rdx, [0x1400c7010]
lea rcx, [rbp - 0x20]
call fcn.140004f80
lea rdx, [rbp - 0x20]
mov rcx, rdi
call fcn.140035a20
lea rcx, [rdi + 0x458]
cmp qword [rcx + 0x18], 0x6a6
jb 0x1400370b5
mov rbx, qword [rcx]
mov qword [rcx + 0x10], 0x6a6
mov r8d, 0xd4c
lea rdx, [0x1400c7060]
mov rcx, rbx
call fcn.14009d670
mov word [rbx + 0xd4c], r14w
jmp 0x1400370c6
lea r9, [0x1400c7060]
mov edx, 0x6a6
call fcn.140020b10
lea rcx, [rdi + 0x478]
cmp qword [rcx + 0x18], 0x879
jb 0x140037101
mov rbx, qword [rcx]
mov qword [rcx + 0x10], 0x879
mov r8d, 0x10f2
lea rdx, str._n_nNum_1___Infinite_Health_Takes_effect_when_health_value_changes._nNum_2___Infinite_Resolve_Takes_effect_when_resolve_value_changes._nNum_3___Max_Ghost_Stance_Gauge_Takes_effect_when_ghost_stance_gauge_value_changes._nNum_4___Stealth_Mode_Activate_before_you_get_detected_by_enemies._nNum_5___Infinite_Arrows__Half_Bow_Longbow__nNum_6___Infinite_Darts__Blowgun__nNum_7___Infinite_Throwables_nNum_8___Infinite_Incendiary_Oil__Way_Of_The_Flame__nNum_9___Easy_Break_Guard_nNum_0___Super_Damage_One_Hit_Kills_Note__this_option_also_affects_companions__you_may_want_to_disable_this_option_if_you_have_companions._nNum_.___Damage_Multiplier_Note__this_option_also_affects_companions__you_may_want_to_disable_this_option_if_you_have_companions._nNum____Defense_Multiplier_n_nCtrlNum_1___Infinite_Exp__Legend__Takes_effect_when_you_gain_exp__legend_._n_nNote__this_option_works_for_exp_in_story_mode__which_is_called_legend__not_the_exp_in_legends_mode._nCtrlNum_2___Infinite_Skill_Points__Technique_Points__This_option_will_temporarily_change_skill_points__the_effect_is_not_permanent._When_this_option_is_disabled__skill_points_may_get_restored_to_normal_value__if_you_spent_more_skill_points_than_you_should_have__it_will_become_negative_._nCtrlNum_3___Fast_Unlock_Stances_Takes_effect_when_stance_unlock_progress_increases._nCtrlNum_4___Edit_Max_Health_Takes_effect_when_health_value_changes._nCtrlNum_5___Set_Game_Speed_Note__this_option_may_cause_issues_after_certain_cutscenes__you_may_need_to_disable_this_option_and_load_the_last_checkpoint._nCtrlNum_6___Save_Location_nCtrlNum_7___Teleport_To_Saved_Location_Note__this_option_wont_work_when_riding_a_horse._nCtrlNum_8___Teleport_To_Waypoint_Location_Note__this_option_wont_work_when_riding_a_horse._n_nEdit_Resources_n_nAltNum_1___Edit_Supplies_nAltNum_2___Edit_Flowers_nAltNum_3___Edit_Predator_Hides_n_nAltNum_4___Edit_Bamboo_nAltNum_5___Edit_Yew_Wood_nAltNum_6___Edit_Wax_Wood_n_nAltNum_7___Edit_Iron_nAltNum_8___Edit_Steel_nAltNum_9___Edit_Gold_n_nAltNum_0___Edit_Linen_nAltNum_.___Edit_Leather_nAltNum____Edit_Silk_n_nAltNum_____Edit_Ghost_Flowers_Ghost_flower_is_a_currency_resource_in_new_game._n_n
mov rcx, rbx
call fcn.14009d670
mov word [rbx + 0x10f2], r14w
jmp 0x140037112
lea r9, str._n_nNum_1___Infinite_Health_Takes_effect_when_health_value_changes._nNum_2___Infinite_Resolve_Takes_effect_when_resolve_value_changes._nNum_3___Max_Ghost_Stance_Gauge_Takes_effect_when_ghost_stance_gauge_value_changes._nNum_4___Stealth_Mode_Activate_before_you_get_detected_by_enemies._nNum_5___Infinite_Arrows__Half_Bow_Longbow__nNum_6___Infinite_Darts__Blowgun__nNum_7___Infinite_Throwables_nNum_8___Infinite_Incendiary_Oil__Way_Of_The_Flame__nNum_9___Easy_Break_Guard_nNum_0___Super_Damage_One_Hit_Kills_Note__this_option_also_affects_companions__you_may_want_to_disable_this_option_if_you_have_companions._nNum_.___Damage_Multiplier_Note__this_option_also_affects_companions__you_may_want_to_disable_this_option_if_you_have_companions._nNum____Defense_Multiplier_n_nCtrlNum_1___Infinite_Exp__Legend__Takes_effect_when_you_gain_exp__legend_._n_nNote__this_option_works_for_exp_in_story_mode__which_is_called_legend__not_the_exp_in_legends_mode._nCtrlNum_2___Infinite_Skill_Points__Technique_Points__This_option_will_temporarily_change_skill_points__the_effect_is_not_permanent._When_this_option_is_disabled__skill_points_may_get_restored_to_normal_value__if_you_spent_more_skill_points_than_you_should_have__it_will_become_negative_._nCtrlNum_3___Fast_Unlock_Stances_Takes_effect_when_stance_unlock_progress_increases._nCtrlNum_4___Edit_Max_Health_Takes_effect_when_health_value_changes._nCtrlNum_5___Set_Game_Speed_Note__this_option_may_cause_issues_after_certain_cutscenes__you_may_need_to_disable_this_option_and_load_the_last_checkpoint._nCtrlNum_6___Save_Location_nCtrlNum_7___Teleport_To_Saved_Location_Note__this_option_wont_work_when_riding_a_horse._nCtrlNum_8___Teleport_To_Waypoint_Location_Note__this_option_wont_work_when_riding_a_horse._n_nEdit_Resources_n_nAltNum_1___Edit_Supplies_nAltNum_2___Edit_Flowers_nAltNum_3___Edit_Predator_Hides_n_nAltNum_4___Edit_Bamboo_nAltNum_5___Edit_Yew_Wood_nAltNum_6___Edit_Wax_Wood_n_nAltNum_7___Edit_Iron_nAltNum_8___Edit_Steel_nAltNum_9___Edit_Gold_n_nAltNum_0___Edit_Linen_nAltNum_.___Edit_Leather_nAltNum____Edit_Silk_n_nAltNum_____Edit_Ghost_Flowers_Ghost_flower_is_a_currency_resource_in_new_game._n_n
mov edx, 0x879
call fcn.140020b10
mov rcx, rdi
call fcn.1400346b0
mov rcx, rdi
call fcn.1400349a0
lea r15, [0x1400df250]
mov esi, dword [0x1400dec2c]
test esi, esi
je 0x1400371de
mov ebx, dword [0x1400dec28]
test ebx, ebx
je 0x1400371de
mov rcx, r15
call fcn.140074f98
test eax, eax
jne 0x140037546
mov eax, dword [0x1400df29c]
cmp eax, 0x7fffffff
je 0x140037551
mov dword [rbp + 0x40], 9
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp + 0x40], esi
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [rbp + 0x40], ebx
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r15
call fcn.140074fa0
mov rcx, rdi
call fcn.1400375c0
lea rbx, [rdi + 0x578]
mov r8, rbx
lea rdx, str.Cover
mov ecx, 0x75
call fcn.140040d50
mov rax, qword [rbx + 8]
cmp rax, qword [rbx]
je 0x1400372b2
mov rcx, r15
call fcn.140074f98
test eax, eax
jne 0x140037546
mov eax, dword [0x1400df29c]
cmp eax, 0x7fffffff
je 0x140037551
mov dword [rbp + 0x40], 3
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rbx + 8]
sub rax, qword [rbx]
mov dword [rbp + 0x40], eax
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rax, qword [rbx]
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 8
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r15
call fcn.140074fa0
mov rcx, r15
call fcn.140074f98
test eax, eax
jne 0x140037546
mov eax, dword [0x1400df29c]
cmp eax, 0x7fffffff
je 0x140037551
mov dword [rbp + 0x40], 5
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rax, [0x140034390]
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 8
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r15
call fcn.140074fa0
lea r8, [rdi + 0x478]
lea rdx, [rdi + 0x458]
call fcn.14004e490
mov qword [rbp + 0x48], r15
mov rcx, r15
call fcn.140074f98
test eax, eax
jne 0x140037546
mov eax, dword [0x1400df29c]
cmp eax, 0x7fffffff
je 0x140037551
mov dword [rbp + 0x40], 4
mov dword [rbp + 0x38], r14d
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x38]
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rdi + 0x458]
lea rcx, [rbp - 0x20]
call fcn.14001dd70
mov rdx, rax
mov rcx, rdi
call fcn.140030e10
lea rdx, [rdi + 0x478]
lea rcx, [rbp - 0x20]
call fcn.14001dd70
mov rdx, rax
mov rcx, rdi
call fcn.140030e10
nop
mov rcx, r15
call fcn.140074fa0
mov ecx, 8
call fcn.140075f44
mov qword [rax], rdi
mov qword [rbp + 0x38], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14003c330]
xor edx, edx
xor ecx, ecx
call fcn.140088a84
mov qword [rbp - 0x30], rax
test rax, rax
je 0x1400375a9
cmp dword [rbp - 0x28], 0
je 0x14003759e
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.140075280
test eax, eax
jne 0x14003759e
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
lea ecx, [rax + 8]
call fcn.140075f44
mov qword [rax], rdi
mov qword [rbp + 0x38], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14003c360]
xor edx, edx
xor ecx, ecx
call fcn.140088a84
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14003758f
cmp dword [rbp - 0x28], 0
je 0x140037584
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.140075280
test eax, eax
jne 0x140037584
lea ecx, [rax + 8]
call fcn.140075f44
mov qword [rax], rdi
mov qword [rbp + 0x38], rax
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14003c1a0]
xor edx, edx
xor ecx, ecx
call fcn.140088a84
mov qword [rbp - 0x40], rax
test rax, rax
je 0x140037575
cmp dword [rbp - 0x38], 0
je 0x14003756a
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.140075280
test eax, eax
jne 0x14003756a
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
cmp byte [rdi + 0x4b8], al
jne 0x14003752c
nop word [rax + rax]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
call fcn.1400340a0
cmp byte [rdi + 0x4b8], 0
je 0x140037510
cmp dword [rbp - 0x38], 0
jne 0x140037564
mov rbx, qword [rsp + 0xa0]
add rsp, 0x70
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 5
call fcn.140074ee8
int3
dec eax
mov dword [0x1400df29c], eax
mov ecx, 6
call fcn.140074ee8
int3
call fcn.140088920
nop
mov ecx, 1
call fcn.140074ee8
nop
mov dword [rbp - 0x38], r14d
mov ecx, 6
call fcn.140074ee8
nop
mov ecx, 1
call fcn.140074ee8
nop
mov dword [rbp - 0x28], r14d
mov ecx, 6
call fcn.140074ee8
nop
mov ecx, 1
call fcn.140074ee8
nop
mov dword [rbp - 0x28], r14d
mov ecx, 6
call fcn.140074ee8
int3