Function at 0x1400497fc
Capabilities:
Create thread
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
sub rsp, 0x248
mov rax, qword [0x140099500]
xor rax, rsp
mov qword [rsp + 0x238], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0xa0], rax
call fcn.14003fcbc
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140040954]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, str.Thavipahs_Vanta_Remake
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x140052728]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x38], rax
lea rdx, str._n_Welcome_To_Thavipahs_Vanta_Remake_
lea rcx, [rsp + 0xe0]
call fcn.140035d28
mov dword [rsp + 0x100], 0xa
lea rdx, [rsp + 0xe0]
mov rcx, qword [rsp + 0x38]
call fcn.140036eb8
nop
lea rcx, [rsp + 0xe0]
call fcn.140036e38
nop
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140052758]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0xc0]
call fcn.140035d80
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x40], rax
lea rdx, str._n_Please_Enter_Key:
lea rcx, [rsp + 0x108]
call fcn.140035d28
mov dword [rsp + 0x128], 0xa
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x40]
call fcn.140036eb8
nop
lea rcx, [rsp + 0x108]
call fcn.140036e38
nop
lea rdx, [rsp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140030b6c
nop
lea rcx, [rsp + 0xc0]
call fcn.1400432c0
movzx eax, al
test eax, eax
jne 0x140049aa2
lea rcx, [0x140052778]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140052780]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x48], rax
lea rdx, str._n_Invalid_license_key.
lea rcx, [rsp + 0x130]
call fcn.140035d28
mov dword [rsp + 0x150], 0xa
lea rdx, [rsp + 0x130]
mov rcx, qword [rsp + 0x48]
call fcn.140036eb8
nop
lea rcx, [rsp + 0x130]
call fcn.140036e38
nop
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x50], rax
lea rdx, str._n_Join_discord.gg_thavipah_To_Get_The_KEY_
lea rcx, [rsp + 0x158]
call fcn.140035d28
mov dword [rsp + 0x178], 0xa
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x50]
call fcn.140036eb8
nop
lea rcx, [rsp + 0x158]
call fcn.140036e38
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x58], rax
lea rdx, str._n_Exiting...
lea rcx, [rsp + 0x180]
call fcn.140035d28
mov dword [rsp + 0x1a0], 0xa
lea rdx, [rsp + 0x180]
mov rcx, qword [rsp + 0x58]
call fcn.140036eb8
nop
lea rcx, [rsp + 0x180]
call fcn.140036e38
nop
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov dword [rsp + 0x30], 0
lea rcx, [rsp + 0xc0]
call fcn.1400369bc
mov eax, dword [rsp + 0x30]
jmp 0x140049e8b
lea rcx, str.color_6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400527e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_Loading_Drivers..._n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140031208
lea rcx, [0x140052808]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [0x140052810]
mov qword [rsp + 0x60], rax
lea rax, [0x140052838]
mov qword [rsp + 0x68], rax
lea rax, str.C:_fortnite.otf
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x1f8]
call fcn.140035d28
nop
mov r8d, 0x2000
lea rdx, [0x140094ce0]
lea rcx, [rsp + 0x1f8]
call fcn.140038094
nop
lea rcx, [rsp + 0x1f8]
call fcn.1400369bc
nop
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x218]
call fcn.140035d28
nop
mov r8d, 0x23600
lea rdx, [0x1400716e0]
lea rcx, [rsp + 0x218]
call fcn.140038094
nop
lea rcx, [rsp + 0x218]
call fcn.1400369bc
nop
lea rcx, str.C:WindowsSystem32Medal.exe_C:WindowsSystem32NtStatistics.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32NtStatistics.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:WindowsSystem32Medal.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140052900]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_A
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x70], rax
lea rdx, str._n_Succesfully_Loaded_Drivers_
lea rcx, [rsp + 0x1a8]
call fcn.140035d28
mov dword [rsp + 0x1c8], 0xa
lea rdx, [rsp + 0x1a8]
mov rcx, qword [rsp + 0x70]
call fcn.140036eb8
nop
lea rcx, [rsp + 0x1a8]
call fcn.140036e38
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140052930]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_B
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x78], rax
lea rdx, str._n_Please_Start_Fortnite...
lea rcx, [rsp + 0x1d0]
call fcn.140035d28
mov dword [rsp + 0x1f0], 0xa
lea rdx, [rsp + 0x1d0]
mov rcx, qword [rsp + 0x78]
call fcn.140036eb8
nop
lea rcx, [rsp + 0x1d0]
call fcn.140036e38
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400450f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
cmp qword [0x140099d48], 0
jne 0x140049cec
lea rdx, str.Fortnite
lea rcx, [rsp + 0xb0]
call fcn.140035794
lea rcx, [rsp + 0xb0]
call fcn.1400444a4
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140099d48], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x140049ca1
lea rax, [0x140045280]
test rax, rax
jne 0x140049d18
lea rcx, str._n__X__Failed_to_Initialize_Libraries._n
call fcn.140049ea4
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rax, [0x14004535c]
test rax, rax
jne 0x140049d44
lea rcx, str._n__X__Failed_to_Initialize_Secondary_Libraries._n
call fcn.140049ea4
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rsp + 0x80], rax
xor edx, edx
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
lea rcx, [0x140099d30]
call fcn.140045a7c
movzx eax, al
test eax, eax
jne 0x140049da6
lea rcx, [0x1400529cc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_Failed_to_Load_Driver__please_make_sure_you_ran_as_admin_and_have_your_anti_virus_off.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140031208
nop
jmp 0x140049d63
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [0x140099d30]
call fcn.140044b30
mov dword [0x140099d30], eax
lea rcx, [0x140099d30]
call fcn.140044ae4
mov qword [0x140099d38], rax
mov rax, qword [0x140099d38]
mov qword [0x140099d40], rax
lea rcx, [0x140052a64]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_Successfully_Loaded_Thavipahs_Vanta_Remake.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140031208
lea rdx, str._n_n_Base_Addy:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140031208
mov qword [rsp + 0x90], rax
mov rax, qword [0x140099d40]
mov qword [rsp + 0x88], rax
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov qword [rsp + 0x98], rax
lea rdx, [0x140033048]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14004859c
call fcn.140048728
call fcn.140048fe8
call fcn.140049390
nop
mov dword [rsp + 0x34], 0
lea rcx, [rsp + 0xc0]
call fcn.1400369bc
mov eax, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x238]
xor rcx, rsp
call fcn.14004a4c0
add rsp, 0x248
ret