Function at 0x14004418c
Capabilities:
Create thread
Execute command
Set console window title

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0xe0
mov rax, qword [0x140056880]
xor rax, rsp
mov qword [rsp + 0xd8], rax
lea rcx, str.CHEETO_FREE
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x14004cf14]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x50], rax
call fcn.14003b428
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14003c2a4]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov edx, 0x1e
lea rcx, [rsp + 0xb8]
call fcn.140041330
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x48]
call fcn.14003e66c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rsp + 0xb8]
call fcn.140035e30
nop
mov dx, 3
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop
lea rax, [rsp + 0x31]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3c]
lea rcx, [rsp + 0x31]
call fcn.1400369a4
mov rcx, rax
call fcn.140036358
mov rcx, rax
call fcn.14003b62c
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x58], rax
lea rdx, str._En_attente_de_Fortnite..._n_n
lea rcx, [rsp + 0x90]
call fcn.140035124
mov dword [rsp + 0xb0], 0xa
lea rdx, [rsp + 0x90]
mov rcx, qword [rsp + 0x58]
call fcn.1400362a8
nop
lea rcx, [rsp + 0x90]
call fcn.1400361dc
nop
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140040f08]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [rsp + 0x30], 0
cmp qword [0x140056fc8], 0
jne 0x14004438e
lea rdx, str.Fortnite
lea rcx, [rsp + 0x80]
call fcn.140034e38
lea rcx, [rsp + 0x80]
call fcn.14004008c
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140056fc8], rax
cmp qword [0x140056fc8], 0
jne 0x14004437d
movzx eax, byte [rsp + 0x30]
test eax, eax
jne 0x14004437d
lea rax, [rsp + 0x32]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3d]
lea rcx, [rsp + 0x32]
call fcn.140036c54
mov rcx, rax
call fcn.140036358
mov rcx, rax
call fcn.14003b62c
nop
mov byte [rsp + 0x30], 1
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x1400442f3
call fcn.140040838
movzx eax, al
test eax, eax
jne 0x1400443c8
lea rdx, str._n_Driver_non_lancer___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140030c98
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14004cf60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
jmp 0x14004438e
lea rcx, str.FortniteClient_Win64_Shipping.exe
call fcn.140040920
nop
lea rax, [rsp + 0x33]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x33]
call fcn.140036e58
mov rcx, rax
call fcn.140036378
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rax, [rsp + 0x34]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3e]
lea rcx, [rsp + 0x34]
call fcn.140037030
mov rcx, rax
call fcn.140036358
mov rcx, rax
call fcn.14003b6a4
nop
call fcn.140040898
mov qword [0x140057008], rax
call fcn.1400407b8
mov qword [0x140057010], rax
mov dword [rsp + 0x38], 0
jmp 0x140044464
mov eax, dword [rsp + 0x38]
inc eax
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0x19
jge 0x1400444b7
imul eax, dword [rsp + 0x38], 0x1000
cdqe
mov rcx, qword [0x140057008]
lea rax, [rcx + rax + 0x250]
mov rcx, rax
call fcn.140032ab4
cmp eax, 0x260e020b
jne 0x1400444b5
mov eax, dword [rsp + 0x38]
inc eax
imul eax, eax, 0x1000
cdqe
mov rcx, qword [0x140057008]
add rcx, rax
mov rax, rcx
mov qword [0x140056e50], rax
jmp 0x14004445a
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.______Adress___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140030c98
mov qword [rsp + 0x68], rax
mov rax, qword [0x140057008]
mov qword [rsp + 0x60], rax
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov qword [rsp + 0x70], rax
lea rdx, [0x140032984]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._n______Ne_pas_fermer_cette_fenetre__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140030c98
mov qword [rsp + 0x78], rax
lea rdx, [0x140032984]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140043830
call fcn.1400439bc
call fcn.140043bd4
call fcn.140043f7c
xor eax, eax
mov rcx, qword [rsp + 0xd8]
xor rcx, rsp
call fcn.140044ba0
add rsp, 0xe0
pop rdi
ret