Function at 0x140002860
Capabilities:
Create thread
Encode data using xor
Execute command

Disassembly:
push rbx
sub rsp, 0x50
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r9d, 2
mov r8b, 0xc6
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xor ebx, ebx
lea r8, [0x1400026d0]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n___
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002fd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, str.arcticmenu.xyz
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140003000]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x1400055b8]
call fcn.140002dc0
mov rcx, rax
lea rdx, str.feds.lol_rxin__feds.lol_jayzvtx__feds.lol_framz
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002f90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002fd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, str.arcticmenu.xyz
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140003000]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x1400055b8]
call fcn.140002dc0
mov rcx, rax
lea rdx, str.Please_open_fortnite...
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002f90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [0x140008868], rbx
jne 0x1400029ca
nop dword [rax]
nop word [rax + rax]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov ecx, 0xe8
mov qword [0x140008868], rax
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140008868], rbx
je 0x1400029a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___
movaps xmmword [rsp + 0x40], xmm6
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002fd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, str.arcticmenu.xyz
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140003000]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x1400055b8]
call fcn.140002dc0
mov rcx, rax
lea rdx, str.Press_any_key_to_start_injection_process.__Lobby_
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002f90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.pause__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002fd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, str.arcticmenu.xyz
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140003000]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x1400055b8]
call fcn.140002dc0
mov rcx, rax
lea rdx, str.Injecting...
call fcn.140002dc0
mov rcx, rax
lea rdx, [0x140002f90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp word [0x1400081a0], bx
lea r10, str.mWH_QQ__j_H
mov r9d, dword [0x140008088]
je 0x140002c40
mov ecx, ebx
cmp r9d, 2
jl 0x140002c01
movdqa xmm5, xmmword [0x140005790]
mov rdx, r10
movdqa xmm4, xmmword [0x1400057e0]
movdqa xmm6, xmmword [0x1400057b0]
movaps xmmword [rsp + 0x30], xmm7
movdqa xmm7, xmmword [0x1400057c0]
nop dword [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 0x10]
paddd xmm2, xmm5
add ecx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rdx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rdx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rdx - 8], xmm3
cmp ecx, 0x10
jl 0x140002b10
movaps xmm7, xmmword [rsp + 0x30]
cmp ecx, 0x11
jge 0x140002c40
movsxd rax, ecx
lea r8, [r10 + rax*2]
nop dword [rax + rax]
mov eax, 0x94f2095
lea r8, [r8 + 2]
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x37
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x38
xor word [r8 - 2], ax
cmp ecx, 0x11
jl 0x140002c10
cmp byte [0x1400081b4], bl
lea rcx, str.MWH_QIV.__4D
je 0x140002d9e
cmp r9d, 2
jl 0x140002d5e
movdqa xmm2, xmmword [0x140005790]
mov ebx, 8
movdqa xmm4, xmmword [0x1400057e0]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x1400057a0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400057b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [str.MWH_QIV.__4D]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400057d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400057f0]
xorps xmm2, xmm0
punpckldq xmm1, xmm3
movd dword [str.MWH_QIV.__4D], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400057b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [0x1400081ac]
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400057d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400057f0]
xorps xmm2, xmm0
movd dword [0x1400081ac], xmm2
movsxd r9, ebx
add r9, rcx
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
lea r9, [r9 + 1]
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x37
movzx eax, bl
inc ebx
sub al, r8b
add al, 0x38
xor byte [r9 - 1], al
cmp ebx, 0xd
jl 0x140002d70
mov rdx, r10
call fcn.140001d50
movaps xmm6, xmmword [rsp + 0x40]
xor eax, eax
add rsp, 0x50
pop rbx
ret