Function at 0x140085ae0
Capabilities:
Access peb ldr_data
Check http status code
Create thread
Encode data using xor
Execute command
Get number of processors
Hash data using fnv
Hide graphical window
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x140162800]
xor rax, rsp
mov qword [rbp + 0x270], rax
xor edi, edi
mov dword [rsp + 0x48], edi
mov ecx, 8
call fcn.1400873f0
test rax, rax
je 0x140085b39
lea rcx, [0x14007ad20]
mov qword [rax], rcx
jmp 0x140085b3c
mov rax, rdi
mov qword [rbp + 0xb0], rax
mov dword [rsp + 0x48], 1
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14003ad80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x1400871f0
mov qword [rbp + 0xb0], rdi
cmp dword [rbp + 0x88], 0
je 0x1400871df
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0xb0], xmm0
lea rcx, [rbp + 0xb0]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x1400871df
xorps xmm0, xmm0
movaps xmmword [rbp + 0x80], xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov ecx, 3
call sub.libcurl.dll_curl_global_init
call sub.libcurl.dll_curl_easy_init
mov r14, rax
test rax, rax
je 0x1400871a8
mov byte [rbp + 0xb0], 0xe3
mov byte [rbp + 0xb1], 0xee
mov byte [rbp + 0xb2], 0xea
mov byte [rbp + 0xb3], 0xef
mov byte [rbp + 0xb4], 0xf4
mov byte [rbp + 0xb5], 0xa3
mov byte [rbp + 0xb6], 0xc3
mov byte [rbp + 0xb7], 0x86
movzx eax, byte [rbp + 0xb0]
mov r9, rdi
movabs r11, 0x531d153299eabc88
mov r10, r11
lea rax, [rbp + 0xb0]
sub r10, rax
mov esi, reloc.WS2_32.dll_ntohs
lea r8, [rbp + 0xb0]
add r8, r9
mov rcx, r9
and ecx, esi
cmp rcx, rsi
cmovae rcx, rsi
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, sil
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 + 0xb0], dl
inc r9
cmp r9, 8
jb 0x140085c41
lea rcx, [rbp + 0xb0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140097da8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037330
lea rcx, str.Ascent_Services
call fcn.140073070
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rdi
mov qword [rbp + 0x130], rsi
mov byte [rbp + 0x118], 0
lea rax, [0x140097740]
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x48], 3
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x160]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea r15, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x160], r15
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x15c], edx
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x170], rax
mov byte [rbp + 0x1ec], 0
mov byte [rbp + 0x1e1], 0
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x1f0], rdi
mov rax, qword [0x1401668e0]
mov qword [rbp + 0x1e4], rax
mov qword [rbp + 0x1d8], rdi
mov r9d, 0x40
mov r8d, 1
lea rdx, [0x140097d78]
lea rcx, [rbp + 0x170]
call fcn.140075180
test rax, rax
jne 0x140085dd6
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x160]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x160]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx ebx, al
mov rcx, qword [rbp + 0x160]
movsxd rdx, dword [rcx + 4]
mov qword [rbp + rdx + 0x160], r15
mov rcx, qword [rbp + 0x160]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0xb0]
mov dword [rbp + rdx + 0x15c], r8d
lea rcx, [rbp + 0x170]
call fcn.140047bf0
lea rcx, [rbp + 0x178]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
test bl, bl
je 0x140085f53
lea rcx, str.License_key_found
call fcn.140073070
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x160]
call fcn.1400887f2
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, [0x140097d78]
lea rcx, [rbp + 0x160]
call fcn.140044690
nop
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x160]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x160]
call fcn.14003fb30
lea rcx, [rbp + 0x170]
call fcn.140064f90
test rax, rax
jne 0x140085f00
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x160]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x160], r15
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x15c], edx
lea rcx, [rbp + 0x170]
call fcn.140047bf0
lea rcx, [rbp + 0x178]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x140085f85
lea rcx, str.License_key_not_found
call fcn.140073070
lea rdx, str.Enter_your_license_key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037330
lea rdx, [rbp + 0x118]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140036c70
mov rcx, qword [0x140166618]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, rcx
mov rdx, qword [rbp + 0x128]
cmp rax, rdx
jb 0x140087201
lea r9, [0x140166608]
cmp qword [0x140166620], 0xf
cmova r9, qword [0x140166608]
lea rax, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rax, qword [rbp + 0x118]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [0x140166608]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x138]
call fcn.140044cb0
nop
lea rcx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rcx, qword [rbp + 0x138]
call fcn.140073070
lea r8, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova r8, qword [rbp + 0x138]
mov edx, 0x2712
mov rcx, r14
call sub.libcurl.dll_curl_easy_setopt
xor r8d, r8d
mov edx, 0x40
mov rcx, r14
call sub.libcurl.dll_curl_easy_setopt
xor r8d, r8d
mov edx, 0x51
mov rcx, r14
call sub.libcurl.dll_curl_easy_setopt
lea r8, [0x14005bd10]
mov edx, 0x4e2b
mov rcx, r14
call sub.libcurl.dll_curl_easy_setopt
lea r8, [0x140162308]
mov edx, 0x2711
mov rcx, r14
call sub.libcurl.dll_curl_easy_setopt
lea rcx, str.Sending_request_to_server
call fcn.140073070
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rax
mov r13, qword [0x1401665f0]
mov rax, rbx
sub rax, r13
cmp rax, 0x15
jb 0x140087207
lea r12, [0x1401665e0]
cmp qword [0x1401665f8], 0xf
cmova r12, qword [0x1401665e0]
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r15, [r13 + 0x15]
mov rbx, rsi
lea rsi, [rsp + 0x50]
cmp r15, rbx
jbe 0x140086182
mov rbx, r15
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14008613c
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400873f0
test rax, rax
je 0x14008616e
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14008617d
mov eax, reloc.WS2_32.dll_shutdown
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140086156
mov rsi, rdi
jmp 0x14008617d
cmp rcx, 0x1000
jb 0x140086175
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400871ea
jmp 0x140086121
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400873f0
mov rsi, rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rbx
movups xmm0, xmmword [str.Authorization:_Basic]
movups xmmword [rsi], xmm0
mov ecx, dword [0x140097e50]
mov dword [rsi + 0x10], ecx
movzx eax, byte [0x140097e54]
mov byte [rsi + 0x14], al
lea rcx, [rsi + 0x15]
mov r8, r13
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov r15d, reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x48], r15d
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rdi
mov ecx, 0x20
call fcn.1400873f0
mov rbx, rax
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], rax
lea rcx, [rax + 0x20]
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
mov qword [rbp + 0xb0], rax
lea rsi, [rsp + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rbx
lea rax, [rbp + 0x100]
mov qword [rbp + 0x90], rax
nop dword [rax]
mov rdx, rsi
mov rcx, rbx
call fcn.1400051a0
add rbx, 0x20
mov qword [rbp + 0x88], rbx
add rsi, 0x20
lea rax, [rsp + 0x70]
cmp rsi, rax
jne 0x140086240
mov qword [rbp + 0x80], rbx
lea r8, [rbp + 0x100]
mov rdx, rbx
mov rcx, rbx
call fcn.140038040
mov qword [rbp + 0x108], rbx
mov qword [rbp + 0xb0], rdi
lea r9, [fcn.1400053b0]
mov edx, 0x20
mov r8d, 1
lea rcx, [rsp + 0x50]
call fcn.1400878b0
mov r8, qword [rbp + 0x100]
mov edx, 0x2727
mov rcx, r14
call sub.libcurl.dll_curl_easy_setopt
lea rcx, str.Setting_headers
call fcn.140073070
mov rcx, r14
call sub.libcurl.dll_curl_easy_perform
mov ebx, eax
lea rcx, str.Request_sent
call fcn.140073070
test ebx, ebx
jne 0x14008720d
lea r8, [rbp + 0xb0]
mov edx, 0x200002
mov rcx, r14
call sub.libcurl.dll_curl_easy_getinfo
mov eax, dword [rbp + 0xb0]
cmp eax, 0xc8
jne 0x140087163
lea rcx, str.License_key_is_valid
call fcn.140073070
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x160]
call fcn.1400887f2
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [0x140097d78]
lea rcx, [rbp + 0x160]
call fcn.140044900
nop
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rdx, qword [rbp + 0x118]
mov r8, qword [rbp + 0x128]
lea rcx, [rbp + 0x160]
call fcn.14003a6e0
lea rcx, [rbp + 0x168]
call fcn.140064f90
test rax, rax
jne 0x1400863b0
mov rax, qword [rbp + 0x160]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x160]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, str.C:mvvad.sys
lea rcx, [rsp + 0x70]
call fcn.140044690
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
movzx ebx, al
mov rcx, qword [rsp + 0x70]
movsxd rdx, dword [rcx + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rdx + 0x70], rax
mov rcx, qword [rsp + 0x70]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0xb0]
mov dword [rsp + rdx + 0x6c], r8d
lea rcx, [rbp - 0x80]
call fcn.140047bf0
lea rcx, [rbp - 0x78]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
test bl, bl
je 0x1400865be
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, [0x140097ed0]
lea rcx, [rsp + 0x70]
call fcn.140044690
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
movzx ebx, al
lea rcx, [rsp + 0x70]
call fcn.140058c70
test bl, bl
jne 0x140087252
mov byte [rbp + 0x80], setsockopt
mov byte [rbp + 0x81], setsockopt
mov byte [rbp + 0x82], ntohs
mov byte [rbp + 0x83], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x84], 0x54
mov byte [rbp + 0x85], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x86], 2
mov byte [rbp + 0x87], bl
mov byte [rbp + 0x88], 0xee
mov byte [rbp + 0x89], 0xe9
mov byte [rbp + 0x8a], 0xa5
mov byte [rbp + 0x8b], 0xf5
mov byte [rbp + 0x8c], 0xfc
mov byte [rbp + 0x8d], 0xf6
mov byte [rbp + 0x8e], 0xaa
mov byte [rbp + 0x8f], 0xc8
mov byte [rbp + 0x90], 0xba
mov byte [rbp + 0x91], 0xd2
mov byte [rbp + 0x92], 0xe1
mov byte [rbp + 0x93], 0xf0
mov byte [rbp + 0x94], 0xf2
mov byte [rbp + 0x95], 0xe9
mov byte [rbp + 0x96], 0xe0
mov byte [rbp + 0x97], 0xa8
mov byte [rbp + 0x98], 0xec
mov byte [rbp + 0x99], 0xe4
mov byte [rbp + 0x9a], 0xe8
mov byte [rbp + 0x9b], 0x96
movzx eax, byte [rbp + 0x80]
mov r9, rdi
movabs r11, 0xcc0159cf9a58d678
mov r10, r11
lea rax, [rbp + 0x80]
sub r10, rax
nop word [rax + rax]
lea r8, [rbp + 0x80]
add r8, r9
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, 0xf
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 + 0x80], dl
inc r9
cmp r9, 0x1c
jb 0x140086570
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rbp + 0xc0], 0xf3
mov byte [rbp + 0xc1], 0xe0
mov byte [rbp + 0xc2], 0xab
mov byte [rbp + 0xc3], 0xef
mov byte [rbp + 0xc4], 0xf7
mov byte [rbp + 0xc5], 0xee
mov byte [rbp + 0xc6], 0xfc
mov byte [rbp + 0xc7], 0xea
mov byte [rbp + 0xc8], 0xfd
mov byte [rbp + 0xc9], 0xb3
mov byte [rbp + 0xca], 0xdf
mov byte [rbp + 0xcb], 0xf7
mov byte [rbp + 0xcc], 0xf2
mov byte [rbp + 0xcd], 0xe6
mov byte [rbp + 0xce], 0xfb
mov byte [rbp + 0xcf], 0xe7
mov byte [rbp + 0xd0], 0xc4
mov byte [rbp + 0xd1], 0xfb
mov byte [rbp + 0xd2], 0xfe
mov byte [rbp + 0xd3], 0xdb
mov byte [rbp + 0xd4], 0xfa
mov byte [rbp + 0xd5], 0xfa
mov byte [rbp + 0xd6], 0xd9
mov byte [rbp + 0xd7], 0x8e
mov byte [rbp + 0xd8], 0xca
mov byte [rbp + 0xd9], 0xca
mov byte [rbp + 0xda], 0xc2
mov byte [rbp + 0xdb], 0xff
mov byte [rbp + 0xdc], 0xc2
mov byte [rbp + 0xdd], 0xd1
mov byte [rbp + 0xde], 0xc6
mov byte [rbp + 0xdf], 0x98
mov byte [rbp + 0xe0], 0xe3
mov byte [rbp + 0xe1], 0x99
mov byte [rbp + 0xe2], 0xf7
mov byte [rbp + 0xe3], 0xc1
mov byte [rbp + 0xe4], 0xd3
mov byte [rbp + 0xe5], 0xdd
mov byte [rbp + 0xe6], 0xdc
mov byte [rbp + 0xe7], 0xda
mov byte [rbp + 0xe8], 0x96
mov byte [rbp + 0xe9], 0xc0
mov byte [rbp + 0xea], 0xc5
mov byte [rbp + 0xeb], 0xcc
mov byte [rbp + 0xec], 0x93
mov byte [rbp + 0xed], 0xc1
mov byte [rbp + 0xee], 0xc7
mov byte [rbp + 0xef], 0xc5
mov byte [rbp + 0xf0], 0xd5
mov byte [rbp + 0xf1], 0x8e
mov byte [rbp + 0xf2], 0xd0
mov byte [rbp + 0xf3], 0xd9
mov byte [rbp + 0xf4], 0xc7
mov byte [rbp + 0xf5], 0xd5
mov byte [rbp + 0xf6], 0xa8
mov byte [rbp + 0xf7], 0xa2
mov byte [rbp + 0xf8], 0xc8
movzx eax, byte [rbp + 0xc0]
mov r9, rdi
movabs r11, 0xc625a80afd4b178a
mov r10, r11
lea rax, [rbp + 0xc0]
sub r10, rax
nop
lea r8, [rbp + 0xc0]
add r8, r9
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, 0xf
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 + 0xc0], dl
inc r9
cmp r9, 0x39
jb 0x140086770
lea rcx, [rbp + 0xc0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rbp + 0x80], 0xb3
mov byte [rbp + 0x81], 0xa0
mov byte [rbp + 0x82], 0xf1
mov byte [rbp + 0x83], 0xad
mov byte [rbp + 0x84], 0xa4
mov byte [rbp + 0x85], 0xbc
mov byte [rbp + 0x86], 0xac
mov byte [rbp + 0x87], 0xab
mov byte [rbp + 0x88], 0xf9
mov byte [rbp + 0x89], 0x9e
mov byte [rbp + 0x8a], 0xb0
mov byte [rbp + 0x8b], 0xbd
mov byte [rbp + 0x8c], 0xa0
mov byte [rbp + 0x8d], 0xbb
mov byte [rbp + 0x8e], 0xad
mov byte [rbp + 0x8f], 0x8b
mov byte [rbp + 0x90], 0xb8
mov byte [rbp + 0x91], 0xb6
mov byte [rbp + 0x92], 0xa6
mov byte [rbp + 0x93], 0x81
mov byte [rbp + 0x94], 0x81
mov byte [rbp + 0x95], 0x99
mov byte [rbp + 0x96], 0xee
movzx eax, byte [rbp + 0x80]
mov r9, rdi
movabs r11, 0x235950afaae2f1ce
mov r10, r11
lea rax, [rbp + 0x80]
sub r10, rax
lea r8, [rbp + 0x80]
add r8, r9
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, 0xf
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 + 0x80], dl
inc r9
cmp r9, 0x17
jb 0x140086880
lea rcx, [rbp + 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.SC_Driver_loaded
call fcn.140073070
mov eax, dword [str.U_K9U_K9U_K9Ascent_Services_n]
mov dword [rsp + 0x48], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140086976
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140086976
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140086971
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140086950
cmp r8d, 0x491e0a9c
je 0x14008697b
test r9d, r9d
jne 0x140086930
mov rax, qword [rax]
jmp 0x140086900
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
mov r14d, dword [0x140162868]
cmp r14d, 2
jl 0x140086a19
movdqa xmm3, xmmword [0x140094850]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400992e0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400992e0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1400992a0]
psubd xmm3, xmm0
andps xmm3, xmmword [0x1400992b0]
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x1400992c0]
movd xmm0, dword [rsp + 0x48]
xorps xmm3, xmm0
movd dword [rsp + 0x48], xmm3
jmp 0x140086a63
lea r9, [rsp + 0x48]
mov r8d, edi
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140086a30
lea rcx, [rsp + 0x48]
call r11
call fcn.140004130
lea rcx, str.Driver_initialized
call fcn.140073070
lea rdx, str.Load_driver__Once_per_boot_n__y_n_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037330
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r15
mov byte [rbp + 0xc0], 0
lea rdx, [rbp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140036c70
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rcx, qword [rbp + 0xc0]
mov r8, qword [rbp + 0xd0]
cmp r8, 1
jne 0x140086b06
lea rdx, [0x140097d14]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140086b06
call fcn.140072590
lea rcx, str.Driver_loaded
call fcn.140073070
call fcn.140083d00
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..VMDriver
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x140166520], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14008726c
cmp qword [0x140166540], 0
jne 0x140086b8b
nop word [rax + rax]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140166540], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140166540], 0
je 0x140086b60
lea rcx, str.FortniteClient_Win64_Shipping.exe
call fcn.14006b270
mov dword [0x140166528], eax
mov qword [rbp + 0x80], 1
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], rdi
cdqe
mov qword [rbp + 0x88], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x30
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x30
lea r8, [rbp + 0x80]
mov edx, 0x225620
mov rcx, qword [0x140166520]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0xa8]
mov qword [0x140166518], rax
test rax, rax
je 0x14008725f
mov eax, dword [0x140097da0]
mov dword [rsp + 0x48], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140086cb6
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140086cb6
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140086cb1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140086c90
cmp r8d, 0x491e0a9c
je 0x140086cbb
test r9d, r9d
jne 0x140086c70
mov rax, qword [rax]
jmp 0x140086c40
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
cmp r14d, 2
jl 0x140086d52
movdqa xmm3, xmmword [0x140094850]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400992e0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400992e0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1400992a0]
psubd xmm3, xmm0
andps xmm3, xmmword [0x1400992b0]
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x1400992c0]
movd xmm0, dword [rsp + 0x48]
xorps xmm3, xmm0
movd dword [rsp + 0x48], xmm3
jmp 0x140086d93
lea r9, [rsp + 0x48]
mov r8d, edi
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140086d60
lea rcx, [rsp + 0x48]
call r11
lea rdx, str._i__Please_wait..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037330
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rdx, qword [0x1401666a0]
mov dword [rdx + 0xc], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x1401666a0]
mov dword [rcx + 0x10], eax
mov rcx, qword [0x140166570]
test rcx, rcx
jne 0x140086e04
call fcn.14005ad40
mov qword [0x140166570], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140166570]
test rcx, rcx
je 0x140086de1
movdqa xmm0, xmmword [0x140099270]
movdqu xmmword [rbp + 0x80], xmm0
lea rdx, [rbp + 0x80]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xor edx, edx
mov rcx, qword [0x140166570]
call qword [sym.imp.USER32.dll_SetMenu]
mov edx, 0xfffffff0
mov r8d, 0x10000000
mov rcx, qword [0x140166570]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 0xffffffec
mov r8d, 0x80020
mov rcx, qword [0x140166570]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 5
mov rcx, qword [0x140166570]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140166570]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 0xffffffec
mov rcx, qword [0x140166570]
call qword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x80020
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x140166570]
call qword [sym.imp.USER32.dll_SetWindowLongA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.140036290
nop
mov rcx, rax
call fcn.140067580
nop
cmp dword [rbp + 0x88], 0
je 0x140086eea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.140036440
nop
mov rcx, rax
call fcn.140067580
nop
cmp dword [rbp + 0x88], 0
je 0x140086f15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.140036320
nop
mov rcx, rax
call fcn.140067580
nop
cmp dword [rbp + 0x88], 0
je 0x140086f40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rcx, qword [0x140166718]
call fcn.140059d00
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.1400363b0
nop
mov rcx, rax
call fcn.140067580
nop
cmp dword [rbp + 0x88], 0
je 0x140086f77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov eax, dword [0x140097da4]
mov dword [rsp + 0x48], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140087016
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140087016
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140087011
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140086ff0
cmp r8d, 0x491e0a9c
je 0x14008701b
test r9d, r9d
jne 0x140086fd0
mov rax, qword [rax]
jmp 0x140086fa0
mov ecx, dword [rsi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov r9d, dword [rcx + rdx*4]
add r9, r10
cmp r14d, 2
jl 0x1400870b2
movdqa xmm3, xmmword [0x140094850]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400992e0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400992e0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1400992a0]
psubd xmm3, xmm0
andps xmm3, xmmword [0x1400992b0]
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x1400992c0]
movd xmm0, dword [rsp + 0x48]
xorps xmm3, xmm0
movd dword [rsp + 0x48], xmm3
jmp 0x1400870ef
lea r8, [rsp + 0x48]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, dil
sub al, cl
add al, 0x36
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 4
jl 0x1400870c0
lea rcx, [rsp + 0x48]
call r9
lea rdx, str._i__Cheat_loaded._Have_fun__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037330
lea rdx, str._i__Open_https:__ascent_menu.pages.dev_in_your_browser_to_configure_the_cheat_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037330
call fcn.14005b4f0
lea rcx, str.FortniteClient_Win64_Shipping.exe
call fcn.14006b270
test eax, eax
je 0x14008715a
mov qword [rsp + 0x48], 0x3e8
nop dword [rax + rax]
lea rcx, [rsp + 0x48]
call fcn.140042790
lea rcx, str.FortniteClient_Win64_Shipping.exe
call fcn.14006b270
test eax, eax
jne 0x140087140
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
cmp eax, 0xca
je 0x140087285
cmp eax, 0x194
je 0x140087297
mov rcx, r14
call sub.libcurl.dll_curl_easy_cleanup
nop
lea rcx, [rbp + 0x100]
call fcn.14005ff00
nop
lea rcx, [rbp + 0x138]
call fcn.1400053b0
nop
lea rcx, [rbp + 0x118]
call fcn.1400053b0
call sub.libcurl.dll_curl_global_cleanup
xor eax, eax
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.1400873d0
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.1400054b0
nop
mov dword [rbp + 0x88], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.1400054d0
nop
call fcn.1400054d0
nop
lea rcx, str.Request_failed
call fcn.140073070
mov ecx, ebx
call sub.libcurl.dll_curl_easy_strerror
mov rbx, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rbx
lea rdx, str.curl_easy_perform___failed:__s_n
mov rcx, rax
call fcn.140085a90
call fcn.1400724d0
lea rcx, [0x14008fefc]
call fcn.140069e00
nop
lea rcx, [0x14008ff0c]
call fcn.140069e00
nop
lea rcx, [0x14008ff10]
call fcn.140069e00
int3
lea rcx, str.Driver_not_found
call fcn.140073070
lea rcx, [0x14008ff08]
call fcn.140069e00
nop
call fcn.1400724d0
lea rcx, [0x14008ff00]
call fcn.140069e00
int3
call fcn.1400724d0
lea rcx, [0x14008ff04]
call fcn.140069e00
int3