Function at 0x1400435c0
Capabilities:
Encode data using xor
Encrypt data using speck
Enumerate processes
Execute command
Get disk information
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push r14
sub rsp, 0x2a0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
mov rax, qword [0x1400bfcc0]
xor rax, rsp
mov qword [rsp + 0x240], rax
xor edi, edi
movsd xmm0, qword [str.cGGYSDK9]
movsd qword [rsp + 0xa0], xmm0
movzx eax, byte [0x14009e060]
mov byte [rsp + 0xa0], 0x52
xor byte [rsp + 0xa1], 0x32
xor byte [rsp + 0xa2], 0x33
xor byte [rsp + 0xa3], 0x34
xor byte [rsp + 0xa4], 0x35
xor byte [rsp + 0xa5], 0x36
xor byte [rsp + 0xa6], 0x37
xor byte [rsp + 0xa7], 0x38
xor al, 0x39
mov byte [rsp + 0xa8], al
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movups xmm2, xmmword [0x14009e068]
movups xmmword [rsp + 0x220], xmm2
movsd xmm0, qword [0x14009e078]
movsd qword [rsp + 0x230], xmm0
movzx eax, word [0x14009e080]
mov word [rsp + 0x238], ax
mov ebx, dword [0x1400bfd28]
movdqa xmm6, xmmword [0x14009e3f0]
movdqa xmm8, xmmword [str.9999]
movdqa xmm10, xmmword [0x14009e320]
movdqa xmm7, xmmword [0x14009cc20]
movdqa xmm9, xmmword [0x14009e310]
cmp byte [0x14009e081], dil
je 0x1400439af
mov esi, edi
cmp ebx, 2
jl 0x140043972
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x220], xmm1
movdqa xmm2, xmmword [0x14009e270]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm10
movd xmm0, dword [rsp + 0x224]
xorps xmm2, xmm0
movd dword [rsp + 0x224], xmm2
movdqa xmm3, xmmword [0x14009e290]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm10
movd xmm0, dword [rsp + 0x228]
xorps xmm3, xmm0
movd dword [rsp + 0x228], xmm3
movdqa xmm2, xmmword [0x14009e2b0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm10
movd xmm0, dword [rsp + 0x22c]
xorps xmm2, xmm0
movd dword [rsp + 0x22c], xmm2
movdqa xmm3, xmmword [0x14009e2d0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm10
movd xmm0, dword [rsp + 0x230]
xorps xmm3, xmm0
movd dword [rsp + 0x230], xmm3
movdqa xmm2, xmmword [0x14009e2f0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm10
movd xmm0, dword [rsp + 0x234]
xorps xmm2, xmm0
movd dword [rsp + 0x234], xmm2
mov esi, 0x18
mov eax, esi
lea r8, [rsp + 0x220]
add r8, rax
nop
mov eax, 0x8fb823ef
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, sil
sub al, cl
add al, 0x31
xor byte [r8], al
inc esi
lea r8, [r8 + 1]
cmp esi, 0x1a
jl 0x140043980
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xb0], xmm1
lea rax, [rsp + 0x220]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x1400439d5
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0xa0]
call fcn.1400337e0
nop
lea rcx, [rsp + 0xa0]
call fcn.14006dcb4
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x140043a48
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043a43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043a43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092a20
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
movdqa xmm1, xmmword [0x14009e250]
movdqu xmmword [rsp + 0xd8], xmm1
mov byte [rsp + 0xc8], 0
movsd xmm0, qword [str._PQ_ER]
movsd qword [rsp + 0xa0], xmm0
mov ecx, dword [0x14009e090]
mov dword [rsp + 0xa8], ecx
cmp byte [0x14009e093], 0
je 0x140043c2e
mov esi, edi
cmp ebx, 2
jl 0x140043bec
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm10
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str._PQ_ER]
xorps xmm1, xmm0
movd dword [rsp + 0xa0], xmm1
movdqa xmm2, xmmword [0x14009e270]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0xa4]
xorps xmm2, xmm1
movd dword [rsp + 0xa4], xmm2
movdqa xmm3, xmmword [0x14009e290]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, ecx
xorps xmm3, xmm1
movd dword [rsp + 0xa8], xmm3
jmp 0x140043c2e
lea r8, [rsp + 0xa0]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x1f7047dd
mul esi
mov eax, esi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, sil
sub al, cl
add al, 0x31
xor byte [r8], al
inc esi
lea r8, [r8 + 1]
cmp esi, 0xc
jl 0x140043c00
lea rdx, [rsp + 0xa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140033390
lea rdx, [rsp + 0xc8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140033140
nop
mov dword [rsp + 0xc0], edi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0xc0]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14009e050]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea r10, [rsp + 0x235]
mov esi, dword [rsp + 0xc0]
nop word [rax + rax]
dec r10
mov eax, 0xcccccccd
mul esi
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub sil, cl
add sil, 0x30
mov byte [r10], sil
mov esi, edx
test edx, edx
jne 0x140043ca0
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x235]
mov rdx, r10
lea rcx, [rsp + 0xa0]
call fcn.140033010
nop
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xc8]
call fcn.140062a08
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x140043d50
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043d3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140043d3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092a20
nop dword [rax]
nop word [rax + rax]
movzx eax, word [0x14009e0a4]
mov word [rsp + 0xac], ax
movzx eax, byte [0x14009e0a6]
mov ecx, dword [0x14009e0a0]
movsd xmm0, qword [str.pGGPXCQZ_OYY]
mov byte [rsp + 0xae], al
mov dword [rsp + 0xa8], ecx
movsd qword [rsp + 0xa0], xmm0
mov byte [rsp + 0x40], 0
mov esi, edi
cmp ebx, 2
jl 0x140043ee8
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm10
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.pGGPXCQZ_OYY]
xorps xmm1, xmm0
movd dword [rsp + 0xa0], xmm1
movdqa xmm2, xmmword [0x14009e270]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0xa4]
xorps xmm2, xmm1
movd dword [rsp + 0xa4], xmm2
movdqa xmm3, xmmword [0x14009e290]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, ecx
xorps xmm3, xmm1
movd dword [rsp + 0xa8], xmm3
mov esi, recv
mov eax, esi
lea r8, [rsp + 0xa0]
add r8, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, sil
sub al, cl
add al, 0x31
xor byte [r8], al
inc esi
lea r8, [r8 + 1]
cmp esi, 0xf
jl 0x140043f00
mov r9d, 0x40
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0xa0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [str.R_4]
mov dword [rsp + 0xc0], eax
cmp byte [0x14009e0ab], 0
je 0x14004400e
mov esi, edi
cmp ebx, 2
jl 0x140043fd0
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0xc0], xmm1
jmp 0x14004400e
lea r8, [rsp + 0xc0]
nop dword [rax + rax]
mov eax, 0x1f7047dd
mul esi
mov eax, esi
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, sil
sub al, cl
add al, 0x31
xor byte [r8], al
inc esi
lea r8, [r8 + 1]
cmp esi, 4
jl 0x140043fe0
lea rcx, [rsp + 0xc0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
movups xmm0, xmmword [str.RGAX]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x14009e0e0]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [0x14009e0f0]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [0x14009e100]
movups xmmword [rsp + 0x80], xmm1
movsd xmm0, qword [0x14009e110]
movsd qword [rsp + 0x90], xmm0
mov eax, dword [0x14009e118]
mov dword [rsp + 0x98], eax
movzx eax, byte [0x14009e11c]
mov byte [rsp + 0x9c], al
mov esi, edi
cmp ebx, 2
jl 0x14004418e
movdqa xmmword [rsp + 0x220], xmm10
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x220]
nop dword [rax]
movd xmm2, esi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rsi + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add esi, 8
lea rcx, [rcx + 8]
cmp esi, 0x48
jl 0x1400440a0
cmp esi, 0x4d
jge 0x1400441cf
movsxd rax, esi
lea r8, [rsp + 0x50]
add r8, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, sil
sub al, cl
add al, 0x31
xor byte [r8], al
inc esi
lea r8, [r8 + 1]
cmp esi, 0x4d
jl 0x1400441a0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str.._redshirtfanisbased
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1400c5da8], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400445ad
call fcn.140001390
nop
lea rcx, [0x14009e138]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Waiting_for_game...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140033390
lea rdx, [0x140034ee0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140044271
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140044220
lea rcx, [0x14009e138]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rsi, rax
mov dword [rsp + 0xf0], 0x130
lea rdx, [rsp + 0xf0]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x1400442e1
nop dword [rax]
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rsp + 0x11c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rsi
test eax, eax
je 0x14004447e
lea rdx, [rsp + 0xf0]
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x1400442b0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
mov dword [0x1400c5d84], eax
mov qword [rsp + 0xc0], rdi
mov dword [rsp + 0xa0], 0x9af2b37
mov dword [rsp + 0xa4], eax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0xa0]
mov edx, 0x22d158
mov rcx, qword [0x1400c5da8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rsp + 0xa0], rdi
mov dword [rsp + 0x224], edi
mov eax, dword [0x1400c5d84]
mov dword [rsp + 0x220], eax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0x220]
mov edx, 0x2359e0
mov rcx, qword [0x1400c5da8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ebx, edi
mov r14, qword [rsp + 0xc0]
nop dword [rax + rax]
movsxd rcx, ebx
add rcx, r14
mov qword [0x1400c5d88], rcx
add rcx, 0x1215c178
call fcn.140035210
mov rsi, rax
lea rcx, [rax + 0x30]
call fcn.140035210
test rsi, rsi
je 0x140044400
test rax, rax
je 0x140044400
lea rcx, [rax + 0xc0]
call fcn.140035210
cmp rax, rsi
je 0x140044410
inc edi
add ebx, 0x1000
cmp edi, 0x7fffffff
jl 0x1400443c0
mov dword [rsp + 0xa0], 0x40a00000
mov dword [rsp + 0xa4], 0x64
mov dword [rsp + 0xa8], 0x64
mov r8, qword [0x1400c5e58]
mov rsi, qword [0x1400c5e50]
mov rcx, r8
sub rcx, rsi
movabs r9, 0x2aaaaaaaaaaaaaab
mov rax, r9
imul rcx
mov rdi, rdx
sar rdi, 1
mov rax, rdi
shr rax, 0x3f
add rdi, rax
cmp rdi, 0x30
jbe 0x140044490
lea rax, [rsi + 0x240]
mov qword [0x1400c5e58], rax
jmp 0x140044517
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0xf8]
jmp 0x1400442ec
jae 0x140044517
mov rcx, qword [0x1400c5e60]
sub rcx, rsi
mov rax, r9
imul rcx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 0x30
jae 0x1400444d4
lea r8, [rsp + 0xa0]
mov edx, 0x30
lea rcx, [0x1400c5e50]
call fcn.140034990
jmp 0x140044517
mov eax, 0x30
sub rax, rdi
je 0x140044510
lea rax, [rax + rax*2]
shl rax, 2
movsd xmm0, qword [rsp + 0xa0]
movsd qword [r8], xmm0
mov dword [r8 + 8], 0x64
lea rcx, [rax - 0xc]
shr rcx, 2
lea rdi, [r8 + 0xc]
mov rsi, r8
rep movsd dword [rdi], dword [rsi]
add r8, rax
mov qword [0x1400c5e58], r8
call fcn.14003b3b0
call fcn.14003b800
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0xf
jbe 0x140044568
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044563
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140044563
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140092a20
xor eax, eax
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.1400928c0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r14
ret
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140036540
mov r8, rax
movzx ecx, byte [rax]
test cl, cl
je 0x1400445cb
xor cl, 0x31
mov byte [rax], cl
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x41]
call fcn.140036510
mov r10, rax
cmp byte [rax + 0x15], 0
je 0x14004483e
cmp ebx, 2
jl 0x140044800
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm7, xmm0
andps xmm7, xmm9
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd eax, xmm10
movd xmm0, eax
paddb xmm7, xmm0
movd xmm0, dword [r10]
xorps xmm7, xmm0
movd dword [r10], xmm7
movdqa xmm2, xmmword [0x14009e270]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r10 + 4]
xorps xmm2, xmm0
movd dword [r10 + 4], xmm2
movdqa xmm3, xmmword [0x14009e290]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [r10 + 8]
xorps xmm3, xmm0
movd dword [r10 + 8], xmm3
movdqa xmm2, xmmword [0x14009e2b0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r10 + 0xc]
xorps xmm2, xmm0
movd dword [r10 + 0xc], xmm2
movdqa xmm3, xmmword [0x14009e2d0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [r10 + 0x10]
xorps xmm3, xmm0
movd dword [r10 + 0x10], xmm3
mov edi, shutdown
mov esi, edi
add rsi, r10
nop word [rax + rax]
mov eax, 0x8fb823ef
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, dil
sub al, cl
add al, 0x31
xor byte [rsi], al
inc edi
lea rsi, [rsi + 1]
cmp edi, 0x16
jl 0x140044810
mov r9d, reloc.WS2_32.dll_recv
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3