Function at 0x1400b89b0
Capabilities:
Encode data using xor
Execute command
Set console window title

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov edx, 0x96
mov ecx, 0x27d
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, 0xbe
mov ecx, 0x380
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str.Fortnite_Cleaner__09_01_2022
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xor ebx, ebx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8d, 0x23
lea rdx, str._n_n____Welcome_to_Fortnite_Cleaner_n_n
lea rcx, [rbp - 0x20]
call fcn.1400baa10
nop
mov edx, 4
mov rcx, qword [0x1400c49c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, ebx
mov rsi, qword [rbp - 0x10]
test rsi, rsi
je 0x1400b8a7f
mov r14, qword [rbp - 8]
mov r15, qword [rbp - 0x20]
nop word [rax + rax]
lea rdx, [rbp - 0x20]
cmp r14, 0xf
cmova rdx, r15
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400b9fc0
mov ecx, 0xc
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, rsi
jne 0x1400b8a50
lea rcx, [rbp - 0x20]
call fcn.1400b9ad0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xf
mov rcx, qword [0x1400c49c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400be608]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400ba190
mov edx, 0xd
mov rcx, qword [0x1400c49c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.____
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400ba190
mov edx, 0xf
mov rcx, qword [0x1400c49c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400be610]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400ba190
lea rdx, str.Loading..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400ba190
mov rcx, rax
lea rdx, [0x1400ba370]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0xf
mov rcx, qword [0x1400c49c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, 0x10
mov eax, edi
mov dword [rbp - 0x20], eax
movdqa xmm0, xmmword [0x1400bf660]
movdqu xmmword [rbp - 0x1c], xmm0
mov byte [rbp - 0xc], 0xa1
xor ecx, ecx
mov word [rbp - 0xb], cx
mov byte [rbp - 9], cl
mov edx, ebx
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
lea eax, [rdx - 0x6f]
xor byte [rcx], al
inc edx
mov eax, dword [rbp - 0x20]
cmp edx, eax
jb 0x1400b8b60
mov byte [rbp + rax - 0x1c], 0
mov dword [rbp - 0x40], 0x13
movdqa xmm0, xmmword [0x1400bf370]
movdqu xmmword [rbp - 0x3c], xmm0
mov dword [rbp - 0x2c], 0xa49c82cf
mov edx, ebx
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x3c]
add rcx, rax
lea eax, [rdx - 0x6f]
xor byte [rcx], al
inc edx
mov eax, dword [rbp - 0x40]
cmp edx, eax
jb 0x1400b8ba0
mov byte [rbp + rax - 0x3c], 0
mov r9d, 4
lea r8, [rbp - 0x1c]
lea rdx, [rbp - 0x3c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
sub eax, 6
je 0x1400b8bde
cmp eax, 1
je 0x1400b8be3
jmp 0x1400b8bee
call fcn.140020fe0
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400c49c0], 1
jne 0x1400b8c11
lea rcx, [0x1400bec94]
call fcn.140001030
lea rdx, str.Cleaned_succesfully___n
call fcn.1400012d0
jmp 0x1400b8c1d
lea rdx, str.Not_cleaned__
call fcn.140001380
mov eax, edi
mov dword [rbp - 0x20], eax
movdqa xmm0, xmmword [0x1400bf660]
movdqu xmmword [rbp - 0x1c], xmm0
mov byte [rbp - 0xc], 0xa1
xor ecx, ecx
mov word [rbp - 0xb], cx
mov byte [rbp - 9], cl
mov edx, ebx
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
lea eax, [rdx - 0x6f]
xor byte [rcx], al
inc edx
mov eax, dword [rbp - 0x20]
cmp edx, eax
jb 0x1400b8c40
mov byte [rbp + rax - 0x1c], 0
mov eax, 0x18
mov dword [rbp - 0x40], eax
movdqa xmm0, xmmword [0x1400bf590]
movdqu xmmword [rbp - 0x3c], xmm0
mov dword [rbp - 0x2c], 0xc983c7c6
mov dword [rbp - 0x28], 0x9787c5c4
mov byte [rbp - 0x24], 0xa9
xor ecx, ecx
mov word [rbp - 0x23], cx
mov byte [rbp - 0x21], cl
mov edx, ebx
test eax, eax
je 0x1400b8ca9
mov eax, edx
lea rcx, [rbp - 0x3c]
add rcx, rax
lea eax, [rdx - 0x6f]
xor byte [rcx], al
inc edx
mov eax, dword [rbp - 0x40]
cmp edx, eax
jb 0x1400b8c92
mov byte [rbp + rax - 0x3c], 0
mov r9d, 4
lea r8, [rbp - 0x1c]
lea rdx, [rbp - 0x3c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
sub eax, 6
je 0x1400b8cd0
cmp eax, 1
je 0x1400b8cf6
jmp 0x1400b8d01
mov ecx, 1
call fcn.1400bba20
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.14001ff40
mov byte [0x1400c49c1], 1
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400c49c1], 1
jne 0x1400b8d24
lea rcx, [0x1400bec94]
call fcn.140001030
lea rdx, str.Mac_spoof___n
call fcn.1400012d0
jmp 0x1400b8d30
lea rdx, str.Mac_not_spoof__
call fcn.140001380
mov dword [rbp - 0x20], edi
movdqa xmm0, xmmword [0x1400bf660]
movdqu xmmword [rbp - 0x1c], xmm0
mov byte [rbp - 0xc], 0xa1
xor eax, eax
mov word [rbp - 0xb], ax
mov byte [rbp - 9], al
mov edx, ebx
nop
mov eax, edx
lea rcx, [rbp - 0x1c]
add rcx, rax
lea eax, [rdx - 0x6f]
xor byte [rcx], al
inc edx
mov edi, dword [rbp - 0x20]
cmp edx, edi
jb 0x1400b8d50
mov byte [rbp + rdi - 0x1c], 0
mov dword [rbp - 0x40], 0x13
movdqa xmm0, xmmword [0x1400bf3e0]
movdqu xmmword [rbp - 0x3c], xmm0
mov dword [rbp - 0x2c], 0xa49c82ca
mov edx, ebx
nop dword [rax]
mov eax, edx
lea rcx, [rbp - 0x3c]
add rcx, rax
lea eax, [rdx - 0x6f]
xor byte [rcx], al
inc edx
mov eax, dword [rbp - 0x40]
cmp edx, eax
jb 0x1400b8d90
mov byte [rbp + rax - 0x3c], 0
mov r9d, 4
lea r8, [rbp - 0x1c]
lea rdx, [rbp - 0x3c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
sub eax, 6
je 0x1400b8dce
cmp eax, 1
je 0x1400b8dd3
jmp 0x1400b8dde
call fcn.1400b6e00
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 0x20], 3
mov dword [rbp + 0x24], 0x94e0fef2
nop dword [rax]
mov eax, ebx
lea rdx, [rbp + 0x24]
add rdx, rax
lea eax, [rbx - 0x6f]
xor byte [rdx], al
inc ebx
mov eax, dword [rbp + 0x20]
cmp ebx, eax
jb 0x1400b8df0
mov byte [rbp + rax + 0x24], 0
lea rcx, [rbp + 0x24]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400bec94]
call fcn.140001030
lea rdx, str.Thanks__
call fcn.1400012d0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret