Function at 0x1400455a0
Capabilities:
Create thread
Encode data using xor
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x140074ef8]
xor rax, rsp
mov qword [rbp + 0x220], rax
lea rcx, [0x14006b6b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movzx eax, word [0x14006b698]
lea rcx, [rbp + 0x1f0]
mov word [rbp + 0x1f0], ax
movzx eax, byte [0x14006b69a]
xor byte [rbp + 0x1f1], 0x38
xor al, 0x39
mov byte [rbp + 0x1f2], al
mov byte [rbp + 0x1f0], 0x66
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor edi, edi
mov dword [rbp + 0x1f0], 0x213d33
mov ecx, edi
mov byte [rbp + 0x1f4], 1
nop word [rax + rax]
lea eax, [rcx + 0x50]
xor byte [rbp + rcx + 0x1f0], al
inc rcx
cmp rcx, 3
jb 0x140045630
lea rcx, [rbp + 0x1f0]
mov byte [rbp + 0x1f4], dil
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.__BIGGEST_PASTE___I_THINK_ITS_SKY_CHEAT_BUT_NOT_SURE____
call fcn.140038d50
mov rcx, rax
lea rdx, str.Waiting_For_FortniteClient_Win64_Shipping.exe..._n_n
call fcn.140038d50
mov rcx, qword [0x140075508]
test rcx, rcx
jne 0x14004570d
xor eax, eax
mov dword [rbp + 0x1f8], 0x30312d07
mov byte [rbp + 0x202], al
mov dword [rbp + 0x1fc], 0x2d332f2b
mov word [rbp + 0x200], 0x6a69
nop word [rax + rax]
movsxd rcx, eax
lea rdx, [rbp + 0x1f8]
add rdx, rcx
lea ecx, [rax + 0x41]
inc eax
xor byte [rdx], cl
cmp eax, 0xa
jb 0x1400456c0
lea rdx, [rbp + 0x1f8]
mov byte [rbp + 0x202], dil
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov ecx, 0x64
mov qword [0x140075508], rax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140075508]
test rcx, rcx
je 0x140045690
lea rdx, [0x140075510]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov rcx, qword [0x140075638]
xor edx, edx
call fcn.1400427b0
mov esi, 5
test al, al
je 0x1400457e0
mov rbx, qword [0x140075638]
mov eax, dword [0x140075510]
mov dword [rbx], eax
mov eax, dword [0x140075510]
cmp dword [rbx + 0x20], edi
je 0x140045780
mov dword [rsp + 0x70], eax
lea r8, [rsp + 0x70]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x60], rdi
lea edx, [rsi + 1]
mov qword [rsp + 0x78], rax
mov rcx, rbx
call fcn.140043320
mov rdx, qword [rsp + 0x60]
mov qword [0x140075500], rdx
jmp 0x1400457e7
mov dword [rbp - 0x30], eax
lea r8, str.FortniteClient_Win64_Shipping.exe
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0x1f8], rdi
mov qword [rbp + 0x1d8], rax
lea rcx, [rbp - 0x2c]
lea rax, [rbp + 0x1f0]
mov dword [rbp + 0x1f0], edi
mov edx, 0xff
mov qword [rbp + 0x1e0], rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea r8, [rbp - 0x30]
mov edx, esi
mov rcx, rbx
call fcn.140043320
mov rdx, qword [rbp + 0x1f8]
mov qword [0x140075500], rdx
jmp 0x1400457e7
mov rdx, qword [0x140075500]
lea rcx, str.__BIGGEST_PASTE___Fortnites_Id_Base_Is:__p
call fcn.140045be0
lea rcx, [0x140048a38]
call fcn.140045be0
cmp byte [0x14006b6b7], dil
movups xmm0, xmmword [0x14006b6a0]
movups xmmword [rbp + 0x208], xmm0
movsd xmm0, qword [0x14006b6b0]
movsd qword [rbp + 0x218], xmm0
je 0x140045a04
cmp dword [0x140074f10], 2
jl 0x1400459c0
movdqa xmm0, xmmword [str.7777777777777777]
lea rcx, [rbp + 0x20c]
movdqa xmm5, xmmword [0x14004c650]
mov eax, 0x1f
movdqa xmm4, xmmword [0x14006bfe0]
mov edx, edi
movaps xmmword [rsp + 0x350], xmm6
movaps xmmword [rsp + 0x340], xmm7
movdqa xmm7, xmmword [str.3333]
movaps xmmword [rsp + 0x330], xmm8
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, dword [rsp + 0x70]
movd xmm8, eax
movd xmm6, esi
nop dword [rax]
nop word [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x14006bf30]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14006bf30]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x18
jl 0x1400458a0
movaps xmm8, xmmword [rsp + 0x330]
movaps xmm7, xmmword [rsp + 0x340]
movaps xmm6, xmmword [rsp + 0x350]
jmp 0x140045a04
lea r9, [rbp + 0x208]
mov r8d, edi
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x37
xor byte [r9 - 1], al
cmp r8d, 0x18
jl 0x1400459d0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x208]
call fcn.140038d50
xor r9d, r9d
mov qword [rsp + 0x28], rdi
lea r8, [0x1400433d0]
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xorps xmm0, xmm0
mov qword [rbp - 0x80], 0x50
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm0
lea rax, [0x1400437e0]
movdqu xmmword [rbp - 0x60], xmm1
lea rbx, str.Windows18
movdqu xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x40], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rcx, qword [0x140075508]
test rcx, rcx
je 0x140045bd4
lea rdx, [0x1400755a0]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, qword [0x140075508]
lea rdx, [rbp + 0x1f8]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [0x1400755a8]
lea r8, str.Windows189
mov eax, dword [rbp + 0x1f8]
mov r9d, 0x90000000
mov qword [rsp + 0x58], rdi
mov rdx, rbx
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov dword [0x1400755a0], eax
mov eax, dword [rbp + 0x1fc]
mov dword [0x1400755a4], eax
mov eax, dword [0x1400755ac]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [0x140075514], ecx
xor ecx, ecx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
mov dword [0x140075518], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rcx, rax
mov qword [0x140075758], rax
lea rdx, [0x14004cc30]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140075758]
mov edx, 0xffffffec
mov r8d, 0x800a0
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140075758]
mov edx, esi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140075758]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140044c50
call fcn.1400452c0
mov rcx, qword [0x140075768]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140075760]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140075600]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140075758]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
lea rcx, str.fgers
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.140046190
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3