Function at 0x14003d3d0
Capabilities:
Create process on windows
Create process suspended
Create thread
Inject thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x8e0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x140053040]
xor rax, rsp
mov qword [rsp + 0x888], rax
mov esi, r9d
mov rbx, rcx
xor r12d, r12d
mov r13d, r12d
mov dword [rsp + 0x70], r12d
mov r14d, 4
xor edx, edx
lea ecx, [rdx + 0xa]
call fcn.140030d20
test eax, eax
je 0x14003d4ad
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r14 + rcx]
cmp dword [0x140053a24], eax
jle 0x14003d486
lea rcx, [0x140053a24]
call fcn.1400421c0
cmp dword [0x140053a24], 0xffffffff
jne 0x14003d486
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x140053a10], rax
lea rcx, [0x140053a24]
call fcn.140042154
lea rdx, str.SetThreadDpiAwarenessContext
mov rcx, qword [0x140053a10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003d4ad
mov rcx, 0xfffffffffffffffc
call rax
jmp 0x14003d533
mov edx, 3
lea ecx, [rdx + 3]
call fcn.140030d20
test eax, eax
je 0x14003d52d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r14 + rcx]
cmp dword [0x140053a20], eax
jle 0x14003d50b
lea rcx, [0x140053a20]
call fcn.1400421c0
cmp dword [0x140053a20], 0xffffffff
jne 0x14003d50b
lea rcx, str.shcore.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x140053a18], rax
lea rcx, [0x140053a20]
call fcn.140042154
lea rdx, str.SetProcessDpiAwareness
mov rcx, qword [0x140053a18]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003d52d
mov ecx, 2
call rax
jmp 0x14003d533
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov dword [rsp + 0x340], 0x50
mov dword [rsp + 0x344], 0x40
lea rax, [0x14003d230]
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], r12
mov qword [rsp + 0x358], rbx
mov qword [rsp + 0x360], r12
mov edx, 0x7f00
mov rcx, rbx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rsp + 0x368], rax
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rsp + 0x370], rax
mov qword [rsp + 0x378], r12
lea rax, str.class001
mov qword [rsp + 0x380], rax
mov qword [rsp + 0x388], r12
lea rcx, [rsp + 0x340]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [r14 + rdi]
cmp dword [0x140053a34], eax
jle 0x14003d614
lea rcx, [0x140053a34]
call fcn.1400421c0
cmp dword [0x140053a34], 0xffffffff
jne 0x14003d614
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, 0x12c
cdq
sub eax, edx
sar eax, 1
mov dword [0x140053a30], eax
lea rcx, [0x140053a34]
call fcn.140042154
mov eax, dword [r14 + rdi]
cmp dword [0x140053a2c], eax
jle 0x14003d65c
lea rcx, [0x140053a2c]
call fcn.1400421c0
cmp dword [0x140053a2c], 0xffffffff
jne 0x14003d65c
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, 0xbe
cdq
sub eax, edx
sar eax, 1
mov dword [0x140053a28], eax
lea rcx, [0x140053a2c]
call fcn.140042154
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 0xbe
mov dword [rsp + 0x30], 0x12c
mov eax, dword [0x140053a28]
mov dword [rsp + 0x28], eax
mov eax, dword [0x140053a30]
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
xor r8d, r8d
mov rdx, qword [rsp + 0x380]
lea ecx, [r8 + 0x20]
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r14, rax
mov qword [rsp + 0x120], rax
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x1400539a8], rax
test rax, rax
je 0x14003fc30
mov qword [0x1400539b0], r12
mov qword [0x1400539bc], r12
mov dword [0x1400539c4], r12d
mov qword [0x1400539cc], r12
mov dword [0x1400539d4], r12d
mov qword [0x1400539e4], r12
mov dword [0x1400539d8], 1
mov dword [0x1400539c8], 1
mov dword [0x1400539b8], r12d
mov dword [0x1400539dc], 1
mov dword [0x1400539e0], 0x50
mov dword [0x1400539ec], 1
mov rax, qword [rax]
lea rdx, [0x1400539f0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x1400539b0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, r14
xor edx, edx
lea r8d, [rdx + 1]
call qword [rax + 0x80]
test eax, eax
js 0x14003fc29
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, esi
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rbx, qword [0x140053970]
mov ecx, 0x6270
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r8, qword [0x140053970]
test r8, r8
je 0x14003d815
mov r10d, dword [r8 + 0x3f68]
movsx rax, word [r8 + 0x60e0]
lea rdx, [r8 + 0x60e4]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x14003d80a
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60e0], cx
movsx rax, cx
lea rdx, [r8 + 0x60e4]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r12d
inc word [rdx + 4]
inc dword [r8 + 0x60d8]
mov qword [rsp + 0x68], r9
lea rax, [rsp + 0x61]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x78], r9
test r9, r9
je 0x14003d83d
xor edx, edx
mov rcx, r9
call fcn.140001450
jmp 0x14003d840
mov rax, r12
mov qword [0x140053970], rax
call fcn.140005a00
test rbx, rbx
je 0x14003d85a
mov qword [0x140053970], rbx
jmp 0x14003d861
mov rbx, qword [0x140053970]
mov qword [rbx + 0x20], r12
xor ecx, ecx
call fcn.140024f60
mov rcx, r14
call fcn.14002ed00
mov rsi, qword [0x1400539f0]
mov rdi, qword [0x140053970]
mov ecx, 0x28
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, rax
mov r9, qword [0x140053970]
test r9, r9
je 0x14003d8fc
mov r10d, dword [r9 + 0x3f68]
movsx rdx, word [r9 + 0x60e0]
lea rax, [r9 + 0x60e4]
lea rax, [rax + rdx*8]
cmp dword [rax], r10d
je 0x14003d8f1
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x60e0], cx
movsx rax, cx
lea rax, [rax*8 + 0x60e4]
add rax, r9
mov dword [rax], r10d
mov dword [rax + 4], r12d
inc word [rax + 4]
inc dword [r9 + 0x60d8]
test r8, r8
je 0x14003d922
mov qword [r8], r12
mov qword [r8 + 8], r12
mov qword [r8 + 0x10], r12
mov qword [r8 + 0x18], r12
mov dword [r8 + 0x20], 0x1388
mov dword [r8 + 0x24], 0x2710
jmp 0x14003d925
mov r8, r12
mov qword [rdi + 0x98], r8
lea rax, str.imgui_impl_dx9
mov qword [rdi + 0x88], rax
or dword [rdi + 0xc], 8
mov qword [r8], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 8]
mov rdi, qword [rbx + 0x38]
mov qword [rsp + 0x88], r12
lea r8, [rsp + 0x88]
lea rsi, str.C:WindowsFonts_segoeui.ttf
mov rcx, rsi
call fcn.140003720
mov rbx, rax
movss xmm10, dword [0x14004badc]
test rax, rax
je 0x14003dbb3
xorps xmm1, xmm1
movups xmmword [rsp + 0x1c0], xmm1
movups xmmword [rsp + 0x1d0], xmm1
movaps xmmword [rsp + 0x1e0], xmm1
movaps xmmword [rsp + 0x1f0], xmm1
movups xmmword [rsp + 0x200], xmm1
movups xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm1
movaps xmmword [rsp + 0x230], xmm1
movaps xmmword [rsp + 0x240], xmm1
mov byte [rsp + 0x1cc], 1
mov dword [rsp + 0x1d8], 2
mov dword [rsp + 0x1dc], 1
mov dword [rsp + 0x204], 0x7f7fffff
mov dword [rsp + 0x210], 0x3f800000
mov dword [rsp + 0x214], 0x3f800000
mov eax, 0xffff
mov word [rsp + 0x218], ax
movaps xmm3, xmmword [rsp + 0x1c0]
movaps xmmword [rsp + 0x580], xmm3
movaps xmm4, xmmword [rsp + 0x1d0]
movaps xmmword [rsp + 0x590], xmm4
movaps xmmword [rsp + 0x5a0], xmm1
xorps xmm5, xmm5
movaps xmmword [rsp + 0x5b0], xmm5
movaps xmm6, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0x5c0], xmm6
movaps xmm2, xmmword [rsp + 0x210]
movaps xmmword [rsp + 0x5d0], xmm2
xorps xmm7, xmm7
movaps xmmword [rsp + 0x5e0], xmm7
xorps xmm8, xmm8
movaps xmmword [rsp + 0x5f0], xmm8
xorps xmm9, xmm9
movaps xmmword [rsp + 0x600], xmm9
movdqa xmm0, xmm2
psrldq xmm0, 0xa
movd eax, xmm0
test al, al
jne 0x14003db38
lea r9, [0x14004b794]
nop dword [rax]
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x14003dac7
cmp al, 0x5c
je 0x14003dac7
mov r9, rcx
cmp rcx, rsi
ja 0x14003dab0
movsd xmm0, qword [0x14004baf8]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, 0x28
lea rcx, [rsp + 0x5da]
call fcn.1400032a0
movaps xmm9, xmmword [rsp + 0x600]
movaps xmm8, xmmword [rsp + 0x5f0]
movaps xmm7, xmmword [rsp + 0x5e0]
movaps xmm2, xmmword [rsp + 0x5d0]
movaps xmm6, xmmword [rsp + 0x5c0]
movaps xmm5, xmmword [rsp + 0x5b0]
movaps xmm1, xmmword [rsp + 0x5a0]
movaps xmm4, xmmword [rsp + 0x590]
movaps xmm3, xmmword [rsp + 0x580]
movaps xmmword [rsp + 0x270], xmm3
movaps xmmword [rsp + 0x280], xmm4
movaps xmmword [rsp + 0x290], xmm1
movaps xmmword [rsp + 0x2a0], xmm5
movaps xmmword [rsp + 0x2b0], xmm6
movaps xmmword [rsp + 0x2c0], xmm2
movaps xmmword [rsp + 0x2d0], xmm7
movaps xmmword [rsp + 0x2e0], xmm8
movaps xmmword [rsp + 0x2f0], xmm9
mov qword [rsp + 0x270], rbx
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x278], eax
mov dword [rsp + 0x284], 0x41900000
lea rdx, [rsp + 0x270]
mov rcx, rdi
call fcn.140029760
xorps xmm0, xmm0
movups xmmword [rsp + 0x740], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x750], xmm1
movups xmmword [rsp + 0x760], xmm1
movups xmmword [rsp + 0x428], xmm0
mov qword [rsp + 0x438], r12
mov qword [rsp + 0x440], r12
xor r8d, r8d
lea rdx, [0x140045857]
lea rcx, [rsp + 0x428]
call fcn.140040ca0
nop
mov byte [rsp + 0x3e8], 1
xor sil, sil
mov byte [rsp + 0x60], sil
lea r14, [0x14004b7c0]
lea rdi, [0x14003d2e0]
lea rbx, str.Select_fortnite_build_8.51
cmp byte [rsp + 0x3e8], 0
je 0x14003f90e
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x610]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003dcb8
nop word [rax + rax]
lea rcx, [rsp + 0x610]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x610]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rsp + 0x618], 0x12
jne 0x14003dc96
cmp byte [rsp + 0x3e8], 0
sete byte [rsp + 0x3e8]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x610]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14003dc60
cmp byte [rsp + 0x3e8], 0
je 0x14003f90e
mov ecx, dword [0x1400539a0]
test ecx, ecx
je 0x14003dcf9
mov eax, dword [0x1400539a4]
test eax, eax
je 0x14003dcf9
mov dword [0x1400539b0], ecx
mov dword [0x1400539b4], eax
mov dword [0x1400539a4], r12d
mov dword [0x1400539a0], r12d
call fcn.14003d160
mov rax, qword [0x140053970]
test rax, rax
je 0x14003dd0e
mov rcx, qword [rax + 0x98]
jmp 0x14003dd11
mov rcx, r12
cmp qword [rcx + 0x18], 0
jne 0x14003dd34
test rax, rax
je 0x14003dd34
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14003dd34
cmp qword [rcx], 0
je 0x14003dd34
call fcn.14002e9c0
call fcn.14002f710
call fcn.1400083e0
mov rax, qword [0x140053970]
mov qword [rax + 0x4a28], 0
mov qword [rax + 0x4a30], 0
mov dword [rax + 0x4a1c], 1
or dword [rax + 0x4a18], 3
mov dword [rax + 0x4a38], 0x43960000
mov dword [rax + 0x4a3c], 0x433e0000
mov dword [rax + 0x4a20], 1
mov r8d, 0x26
lea rdx, [rsp + 0x3e8]
lea rcx, str.janlauncher
call fcn.14000dac0
mov dword [rsp + 0x90], 0x438e8000
mov dword [rsp + 0x94], 0x42200000
lea rdx, [rsp + 0x90]
lea rcx, str.set_fortnite_directory
call fcn.140033140
test al, al
je 0x14003e740
mov qword [rsp + 0x390], r12
mov qword [rsp + 0x398], r12
mov qword [rsp + 0x3a0], r12
mov qword [rsp + 0x3b0], 0x41
mov qword [rsp + 0x3c8], r12
mov qword [rsp + 0x3a8], rbx
mov qword [rsp + 0x3b8], rdi
mov qword [rsp + 0x3c0], r14
lea rcx, [rsp + 0x390]
call qword [sym.imp.SHELL32.dll_SHBrowseForFolderA]
mov rbx, rax
test rax, rax
je 0x14003de84
lea rdx, [rsp + 0x770]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
mov qword [rsp + 0x320], r12
lea rcx, [rsp + 0x320]
call qword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
js 0x14003de7a
mov rcx, qword [rsp + 0x320]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + 0x28]
mov rcx, qword [rsp + 0x320]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea r9, [rsp + 0x770]
jmp 0x14003de8b
lea r9, [0x140045857]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [r9 + rdi], 0
jne 0x14003de92
mov rax, qword [rsp + 0x440]
cmp rdi, rax
ja 0x14003deda
lea rbx, [rsp + 0x428]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x428]
mov qword [rsp + 0x438], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x14003deea
mov rdx, rdi
lea rcx, [rsp + 0x428]
call fcn.140041510
lea rcx, [rsp + 0x428]
cmp qword [rsp + 0x440], 0xf
cmova rcx, qword [rsp + 0x428]
mov r8, qword [rsp + 0x438]
test r8, r8
jne 0x14003df21
lea rdx, [0x140045857]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14003df23
mov al, 1
test al, al
je 0x14003e727
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x4a0], xmm0
mov qword [rsp + 0x4b0], rax
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x198], r12
lea r8d, [rax + 0xc]
lea rdx, str.FortniteGame
lea rcx, [rsp + 0x180]
call fcn.140040ca0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], r12
mov r8d, 6
lea rdx, str.Engine
lea rcx, [rsp + 0x1a0]
call fcn.140040ca0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x4a0], xmm0
mov qword [rsp + 0x4b0], r12
mov ecx, 0x40
call fcn.140042478
mov rbx, rax
mov qword [rsp + 0x4a0], rax
mov qword [rsp + 0x4a8], rax
lea rcx, [rax + 0x40]
mov qword [rsp + 0x4b0], rcx
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x250], rax
lea rdi, [rsp + 0x180]
xorps xmm0, xmm0
movups xmmword [rsp + 0x530], xmm0
mov qword [rsp + 0x530], rbx
mov qword [rsp + 0x538], rbx
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x540], rax
nop word [rax + rax]
mov rdx, rdi
mov rcx, rbx
call fcn.14003fed0
add rbx, 0x20
mov qword [rsp + 0x538], rbx
add rdi, 0x20
lea rax, [rsp + 0x1c0]
cmp rdi, rax
jne 0x14003e030
mov rdx, rbx
mov rcx, rbx
call fcn.140040e30
mov qword [rsp + 0x4a8], rbx
lea r9, [fcn.14003fe30]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rsp + 0x180]
call fcn.1400424b4
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x410], xmm1
mov qword [rsp + 0x420], r12
mov rdi, qword [rsp + 0x438]
lea rbx, [rsp + 0x428]
cmp qword [rsp + 0x440], 0xf
cmova rbx, qword [rsp + 0x428]
call fcn.140042e90
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rdi
lea r8, [rsp + 0x150]
mov edx, eax
lea rcx, [rsp + 0x128]
call fcn.14003ba00
or r13d, 0x1800
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x450], xmm0
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x450]
call fcn.1400404c0
test eax, eax
jne 0x14003fcbe
mov rdx, qword [rsp + 0x140]
cmp rdx, 7
jbe 0x14003e165
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e160
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e160
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
xorps xmm0, xmm0
movups xmmword [rsp + 0x4c0], xmm0
mov r15, qword [rsp + 0x458]
test r15, r15
je 0x14003e18a
lock inc dword [r15 + 8]
mov r15, qword [rsp + 0x458]
movaps xmm0, xmmword [rsp + 0x450]
movdqa xmmword [rsp + 0x4c0], xmm0
test r15, r15
je 0x14003e1ad
lock inc dword [r15 + 8]
mov r15, qword [rsp + 0x458]
xorps xmm0, xmm0
movups xmmword [rsp + 0x568], xmm0
mov qword [rsp + 0x568], r12
mov qword [rsp + 0x570], r12
test r15, r15
je 0x14003e217
mov eax, 0xffffffff
lock xadd dword [r15 + 8], eax
cmp eax, 1
jne 0x14003e20f
mov rbx, qword [rsp + 0x458]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14003e20f
mov r15, qword [rsp + 0x458]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 8]
jmp 0x14003e217
mov r15, qword [rsp + 0x458]
nop word [rax + rax]
mov r14, qword [rsp + 0x4c0]
test r14, r14
je 0x14003e52f
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x14003e240
mov rcx, qword [r14 + 0x20]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rsp + 0x640]
call fcn.1400431a4
mov edx, eax
test eax, eax
jne 0x14003e298
mov ecx, dword [rsp + 0x650]
bt ecx, 0xa
jae 0x14003e28d
mov eax, dword [rsp + 0x654]
cmp eax, 0xa000000c
jne 0x14003e27f
lea ecx, [rdx + 4]
jmp 0x14003e2b4
cmp eax, 0xa0000003
jne 0x14003e28d
mov ecx, 0xa
jmp 0x14003e2b4
and ecx, 0x10
or ecx, 0x20
shr ecx, 4
jmp 0x14003e2b4
sub eax, 2
je 0x14003e2af
sub eax, 1
je 0x14003e2af
sub eax, 0x32
je 0x14003e2af
cmp eax, 0x46
mov ecx, r12d
jne 0x14003e2b4
mov ecx, 1
test edx, edx
je 0x14003e2c6
lea eax, [rcx - 1]
test eax, 0xfffffff7
jne 0x14003fcd5
cmp ecx, 3
jne 0x14003e515
lea rcx, [r14 + 0x20]
cmp qword [r14 + 0x38], 7
jbe 0x14003e2de
mov rcx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x30]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.14003bb70
cmp rax, r11
je 0x14003e32e
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14003e305
cmp cx, 0x2f
jne 0x14003e30e
add rax, 2
cmp rax, r11
jne 0x14003e2f6
cmp rax, r11
je 0x14003e32e
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14003e32e
cmp cx, 0x2f
je 0x14003e32e
mov r10, rdx
cmp rax, rdx
jne 0x14003e313
mov qword [rsp + 0x160], r10
sub r11, r10
sar r11, 1
mov qword [rsp + 0x168], r11
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x100]
call fcn.1400416d0
nop
lea rax, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rax, qword [rsp + 0x100]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x178], rax
call fcn.140042e90
movaps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x260], xmm0
lea r8, [rsp + 0x260]
mov edx, eax
lea rcx, [rsp + 0x548]
call fcn.140040200
or r13d, 0xf
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x14003e408
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e403
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e403
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
mov qword [rsp + 0x110], r12
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], r12w
mov rbx, qword [rsp + 0x4a0]
mov rdi, qword [rsp + 0x4a8]
cmp rbx, rdi
je 0x14003e4cf
mov rsi, qword [rsp + 0x558]
lea rdx, [rsp + 0x548]
cmp qword [rsp + 0x560], 0xf
cmova rdx, qword [rsp + 0x548]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14003e471
mov rcx, qword [rbx]
cmp r8, rsi
jne 0x14003e4c2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003e4c2
cmp rbx, rdi
je 0x14003e4cf
lea r8, [r14 + 0x20]
mov rax, qword [rsp + 0x418]
cmp rax, qword [rsp + 0x420]
je 0x14003e4b0
mov rdx, r8
mov rcx, rax
call fcn.14003c000
add qword [rsp + 0x418], 0x20
jmp 0x14003e4cf
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.140041980
jmp 0x14003e4cf
add rbx, 0x20
cmp rbx, rdi
jne 0x14003e446
mov rdx, qword [rsp + 0x560]
cmp rdx, 0xf
jbe 0x14003e515
inc rdx
mov rcx, qword [rsp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e510
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e510
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
lea rcx, [rsp + 0x4c0]
call fcn.14003ccf0
test eax, eax
jne 0x14003fce5
jmp 0x14003e220
mov rcx, qword [rsp + 0x4c8]
test rcx, rcx
je 0x14003e580
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14003e578
mov rbx, qword [rsp + 0x4c8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14003e578
mov rcx, qword [rsp + 0x4c8]
mov rax, qword [rcx]
call qword [rax + 8]
mov r15, qword [rsp + 0x458]
test r15, r15
je 0x14003e5c2
mov eax, 0xffffffff
lock xadd dword [r15 + 8], eax
cmp eax, 1
jne 0x14003e5c2
mov rbx, qword [rsp + 0x458]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14003e5c2
mov rcx, qword [rsp + 0x458]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rsp + 0x410]
mov rdx, qword [rsp + 0x418]
cmp rcx, rdx
jne 0x14003e607
xor r9d, r9d
lea r8, str.janlauncher
lea rdx, str.invalid_path
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rsp + 0x410]
movzx esi, byte [rsp + 0x60]
jmp 0x14003e60f
mov sil, 1
mov byte [rsp + 0x60], sil
test rcx, rcx
je 0x14003e66a
call fcn.140040da0
mov rdx, qword [rsp + 0x420]
mov rcx, qword [rsp + 0x410]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e651
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003e6ce
call fcn.14004214c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x410], xmm0
mov qword [rsp + 0x420], r12
lea rcx, [rsp + 0x4a0]
call fcn.14003fff0
jmp 0x14003e740
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor r9d, r9d
lea r8, str.janlauncher
lea rdx, str.invalid_path
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x10
lea r8, [rsp + 0x740]
xor edx, edx
lea rcx, str.username
call fcn.140036aa0
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rsp + 0x750]
xor edx, edx
lea rcx, str.password
call fcn.140036aa0
test sil, sil
je 0x14003f7fb
mov dword [rsp + 0x68], 0x438e8000
mov dword [rsp + 0x6c], 0x42480000
lea rdx, [rsp + 0x68]
lea rcx, str.LAUNCH
call fcn.140033140
test al, al
je 0x14003f7fb
mov rsi, qword [rsp + 0x438]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 0x1c
jb 0x14003fced
lea r15, [rsp + 0x428]
cmp qword [rsp + 0x440], 0xf
cmova r15, qword [rsp + 0x428]
xorps xmm0, xmm0
movups xmmword [rsp + 0x3f0], xmm0
mov qword [rsp + 0x400], r12
mov qword [rsp + 0x408], r12
lea r14, [rsi + 0x1c]
mov ebx, 0xf
lea rdi, [rsp + 0x3f0]
cmp r14, rbx
jbe 0x14003e8e3
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x14003e8a0
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140042478
test rax, rax
je 0x14003f7ea
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003e8db
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003e8c9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003fcf3
jmp 0x14003e881
test rcx, rcx
je 0x14003e8d8
call fcn.140042478
mov rdi, rax
jmp 0x14003e8db
mov rdi, r12
mov qword [rsp + 0x3f0], rdi
mov qword [rsp + 0x400], r14
mov qword [rsp + 0x408], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FortniteGameBinariesWin64]
movups xmmword [rdi + rsi], xmm0
movsd xmm0, qword [0x14004b818]
movsd qword [rdi + rsi + 0x10], xmm0
mov eax, dword [0x14004b820]
mov dword [rdi + rsi + 0x18], eax
mov byte [rdi + r14], 0
bts r13d, 8
mov dword [rsp + 0x70], r13d
mov rsi, qword [rsp + 0x400]
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, rsi
cmp rax, 0x15
jb 0x14003fcf9
lea r15, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 0xf
cmova r15, qword [rsp + 0x3f0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x460], xmm0
mov qword [rsp + 0x470], r12
mov qword [rsp + 0x478], r12
lea r14, [rsi + 0x15]
mov ebx, 0xf
lea rdi, [rsp + 0x460]
cmp r14, rbx
jbe 0x14003ea1f
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
jbe 0x14003e9dc
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140042478
test rax, rax
je 0x14003f788
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003ea17
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003ea05
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003fcff
jmp 0x14003e9bd
test rcx, rcx
je 0x14003ea14
call fcn.140042478
mov rdi, rax
jmp 0x14003ea17
mov rdi, r12
mov qword [rsp + 0x460], rdi
mov qword [rsp + 0x470], r14
mov qword [rsp + 0x478], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FortniteLauncher.exe]
movups xmmword [rdi + rsi], xmm0
mov eax, dword [0x14004b838]
mov dword [rdi + rsi + 0x10], eax
movzx eax, byte [0x14004b83c]
mov byte [rdi + rsi + 0x14], al
mov byte [rdi + r14], 0
mov r14, qword [rsp + 0x400]
mov rax, r13
sub rax, r14
cmp rax, 0x22
jb 0x14003fd05
lea r15, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 0xf
cmova r15, qword [rsp + 0x3f0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x4f0], xmm0
mov qword [rsp + 0x500], r12
mov qword [rsp + 0x508], r12
lea rsi, [r14 + 0x22]
mov ebx, 0xf
lea rdi, [rsp + 0x4f0]
cmp rsi, rbx
jbe 0x14003eb44
mov rbx, rsi
or rbx, 0xf
cmp rbx, r13
jbe 0x14003eb01
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140042478
test rax, rax
je 0x14003f73e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003eb3c
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003eb2a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003fd0b
jmp 0x14003eae2
test rcx, rcx
je 0x14003eb39
call fcn.140042478
mov rdi, rax
jmp 0x14003eb3c
mov rdi, r12
mov qword [rsp + 0x4f0], rdi
mov qword [rsp + 0x500], rsi
mov qword [rsp + 0x508], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.FortniteClient_Win64_Shipping.exe]
movups xmmword [rdi + r14], xmm0
movups xmm1, xmmword [0x14004b850]
movups xmmword [rdi + r14 + 0x10], xmm1
movzx eax, word [0x14004b860]
mov word [rdi + r14 + 0x20], ax
mov byte [rdi + rsi], 0
mov dword [rsp + 0x660], 0x68
xorps xmm0, xmm0
movups xmmword [rsp + 0x668], xmm0
movups xmmword [rsp + 0x678], xmm0
movups xmmword [rsp + 0x688], xmm0
movups xmmword [rsp + 0x698], xmm0
movups xmmword [rsp + 0x6a8], xmm0
movups xmmword [rsp + 0x6b8], xmm0
lea rax, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 0xf
cmova rax, qword [rsp + 0x3f0]
lea rcx, [rsp + 0x460]
cmp qword [rsp + 0x478], 0xf
cmova rcx, qword [rsp + 0x460]
lea rdx, [rsp + 0x3d0]
mov qword [rsp + 0x48], rdx
lea rdx, [rsp + 0x660]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rsp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x3d8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x510], xmm0
mov qword [rsp + 0x520], r12
mov qword [rsp + 0x528], r12
lea rax, [rsp + 0x740]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14003ec83
lea rdx, [rsp + 0x740]
lea rcx, [rsp + 0x510]
call fcn.140040ca0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x4d0], xmm0
mov qword [rsp + 0x4e0], r12
mov qword [rsp + 0x4e8], r12
lea rax, [rsp + 0x750]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14003ecd0
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0x4d0]
call fcn.140040ca0
nop
mov rax, r13
mov r13, qword [rsp + 0x500]
sub rax, r13
cmp rax, 1
jb 0x14003fd11
lea r12, [rsp + 0x4f0]
mov rbx, qword [rsp + 0x4f0]
mov r14, qword [rsp + 0x508]
cmp r14, 0xf
cmova r12, rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
xor eax, eax
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rax
lea r15, [r13 + 1]
mov edi, 0xf
lea rsi, [rsp + 0xe0]
cmp r15, rdi
jbe 0x14003ede3
mov rdi, r15
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x14003eda5
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140042478
test rax, rax
je 0x14003f03c
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14003eddb
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14003edce
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003fd17
jmp 0x14003ed86
test rcx, rcx
je 0x14003edd8
call fcn.140042478
mov rsi, rax
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xf0], r15
mov qword [rsp + 0xf8], rdi
mov byte [rsi], 0x22
lea rcx, [rsi + 1]
mov r8, r13
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov r8d, 0xa6
lea rdx, str.___epicappFortnite__epicenvProd__epiclocaleen_us__epicportal__nobe__fromfleac__fltokenhchc0906bb1bg83c3934fa31__skippatchcheck__noeac_AUTH_LOGIN__AUTH_PASSWORD
lea rcx, [rsp + 0xe0]
call fcn.1400400d0
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
xor r12d, r12d
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xb8], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xb0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rsp + 0x4d0]
cmp qword [rsp + 0x4e8], 0xf
cmova rdx, qword [rsp + 0x4d0]
mov r8, qword [rsp + 0x4e0]
lea rcx, [rsp + 0xa0]
call fcn.1400400d0
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xd0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea r8d, [r12 + 0x10]
lea rdx, str.__AUTH_TYPEepic
lea rcx, [rsp + 0xc0]
call fcn.1400400d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x480], xmm0
mov qword [rsp + 0x490], r12
mov qword [rsp + 0x498], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x480], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x490], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov r13d, dword [rsp + 0x70]
or r13d, 0x6f0
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0xf
jbe 0x14003ef84
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ef7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ef7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], 0xf
mov byte [rsp + 0xc0], 0
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x14003efe6
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003efe1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003efe1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xb8], 0xf
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0xf
jbe 0x14003f048
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f043
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f043
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
mov dword [rsp + 0x6d0], 0x68
xorps xmm0, xmm0
movups xmmword [rsp + 0x6d8], xmm0
movups xmmword [rsp + 0x6e8], xmm0
movups xmmword [rsp + 0x6f8], xmm0
movups xmmword [rsp + 0x708], xmm0
movups xmmword [rsp + 0x718], xmm0
movups xmmword [rsp + 0x728], xmm0
lea rax, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 0xf
cmova rax, qword [rsp + 0x3f0]
lea rdx, [rsp + 0x480]
cmp qword [rsp + 0x498], 0xf
cmova rdx, qword [rsp + 0x480]
lea rcx, [rsp + 0x328]
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0x6d0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x1000
lea r8d, [rdx + 0x50]
mov rcx, qword [rsp + 0x328]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov rcx, qword [rsp + 0x328]
test rax, rax
jne 0x14003f36a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x498]
cmp rdx, 0xf
jbe 0x14003f183
inc rdx
mov rcx, qword [rsp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f17e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f65d
call fcn.14004214c
mov qword [rsp + 0x490], r12
mov qword [rsp + 0x498], 0xf
mov byte [rsp + 0x480], 0
mov rdx, qword [rsp + 0x4e8]
cmp rdx, 0xf
jbe 0x14003f1e3
inc rdx
mov rcx, qword [rsp + 0x4d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f1dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f6bf
call fcn.14004214c
nop
mov rdx, qword [rsp + 0x528]
cmp rdx, 0xf
jbe 0x14003f227
inc rdx
mov rcx, qword [rsp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f221
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f706
call fcn.14004214c
nop
cmp r14, 0xf
jbe 0x14003f25f
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003f256
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f73e
mov rcx, rbx
call fcn.14004214c
nop
mov rdx, qword [rsp + 0x478]
cmp rdx, 0xf
jbe 0x14003f2a2
inc rdx
mov rcx, qword [rsp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f29d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f788
call fcn.14004214c
mov qword [rsp + 0x470], r12
mov qword [rsp + 0x478], 0xf
mov byte [rsp + 0x460], 0
mov rdx, qword [rsp + 0x408]
cmp rdx, 0xf
jbe 0x14003f301
inc rdx
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f2fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f7ea
call fcn.14004214c
mov qword [rsp + 0x400], r12
mov qword [rsp + 0x408], 0xf
mov byte [rsp + 0x3f0], 0
mov rdx, qword [rsp + 0x440]
cmp rdx, 0xf
jbe 0x14003f360
inc rdx
mov rcx, qword [rsp + 0x428]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f35b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f5f2
call fcn.14004214c
mov eax, 1
jmp 0x14003fc78
mov qword [rsp + 0x20], r12
mov r9d, 0x50
mov r8, rdi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rdi
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x328]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
jne 0x14003f5f9
mov rcx, qword [rsp + 0x328]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x498]
cmp rdx, 0xf
jbe 0x14003f412
inc rdx
mov rcx, qword [rsp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f40d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f65d
call fcn.14004214c
mov qword [rsp + 0x490], r12
mov qword [rsp + 0x498], 0xf
mov byte [rsp + 0x480], 0
mov rdx, qword [rsp + 0x4e8]
cmp rdx, 0xf
jbe 0x14003f472
inc rdx
mov rcx, qword [rsp + 0x4d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f46c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f6bf
call fcn.14004214c
nop
mov rdx, qword [rsp + 0x528]
cmp rdx, 0xf
jbe 0x14003f4b6
inc rdx
mov rcx, qword [rsp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f4b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f706
call fcn.14004214c
nop
cmp r14, 0xf
jbe 0x14003f4ee
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003f4e5
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f73e
mov rcx, rbx
call fcn.14004214c
nop
mov rdx, qword [rsp + 0x478]
cmp rdx, 0xf
jbe 0x14003f531
inc rdx
mov rcx, qword [rsp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f52c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f788
call fcn.14004214c
mov qword [rsp + 0x470], r12
mov qword [rsp + 0x478], 0xf
mov byte [rsp + 0x460], 0
mov rdx, qword [rsp + 0x408]
cmp rdx, 0xf
jbe 0x14003f590
inc rdx
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f58b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f7ea
call fcn.14004214c
mov qword [rsp + 0x400], r12
mov qword [rsp + 0x408], 0xf
mov byte [rsp + 0x3f0], 0
mov rdx, qword [rsp + 0x440]
cmp rdx, 0xf
jbe 0x14003f360
inc rdx
mov rcx, qword [rsp + 0x428]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f35b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f35b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x328]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x330]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x498]
cmp rdx, 0xf
jbe 0x14003f669
inc rdx
mov rcx, qword [rsp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f664
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f664
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
mov qword [rsp + 0x490], r12
mov qword [rsp + 0x498], 0xf
mov byte [rsp + 0x480], 0
mov rdx, qword [rsp + 0x4e8]
cmp rdx, 0xf
jbe 0x14003f6cc
inc rdx
mov rcx, qword [rsp + 0x4d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f6c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f6c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
nop
mov rdx, qword [rsp + 0x528]
cmp rdx, 0xf
jbe 0x14003f713
inc rdx
mov rcx, qword [rsp + 0x510]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f70d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f70d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
nop
cmp r14, 0xf
jbe 0x14003f74e
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003f745
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f745
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14004214c
nop
mov rdx, qword [rsp + 0x478]
cmp rdx, 0xf
jbe 0x14003f794
inc rdx
mov rcx, qword [rsp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f78f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f78f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
mov qword [rsp + 0x470], r12
mov qword [rsp + 0x478], 0xf
mov byte [rsp + 0x460], 0
mov rdx, qword [rsp + 0x408]
cmp rdx, 0xf
jbe 0x14003f7f6
inc rdx
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f7f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f7f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004214c
movzx esi, byte [rsp + 0x60]
call fcn.14000fff0
call fcn.140009f20
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r12d
movss dword [rsp + 0x28], xmm10
mov dword [rsp + 0x20], r12d
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003f8c4
call fcn.14000a2d0
mov rax, qword [0x140053970]
mov rcx, qword [rax + 0x4b28]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r12
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14002e400
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003dc11
mov rcx, qword [0x1400539f0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003dc11
call fcn.14003d160
jmp 0x14003dc11
mov r8, qword [0x140053970]
test r8, r8
je 0x14003f923
mov rsi, qword [r8 + 0x98]
jmp 0x14003f926
mov rsi, r12
lea rdi, [r8 + 8]
test r8, r8
je 0x14003f997
mov rbx, qword [r8 + 0x98]
test rbx, rbx
je 0x14003f997
cmp qword [rbx], 0
je 0x14003f997
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003f95b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 8], r12
mov r8, qword [0x140053970]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14003f975
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], r12
mov r8, qword [0x140053970]
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14003f997
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x18], r12
mov r8, qword [0x140053970]
mov rax, qword [r8 + 0x38]
mov qword [rax + 8], r12
mov rcx, qword [rsi]
test rcx, rcx
je 0x14003f9ac
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r8, qword [0x140053970]
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x90], r12
and dword [rdi + 4], 0xfffffff7
test r8, r8
je 0x14003fa26
mov r9d, dword [r8 + 0x3f68]
movsx rdx, word [r8 + 0x60e0]
lea rcx, [rdx*8 + 0x60e4]
add rcx, r8
cmp dword [rcx], r9d
je 0x14003fa1b
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60e0], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60e4]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60dc]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140053970]
test r8, r8
je 0x14003fa44
mov rdi, qword [r8 + 0x90]
jmp 0x14003fa47
mov rdi, r12
lea rbx, [r8 + 8]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x14003fa61
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140053970]
mov qword [rbx + 0x78], r12
mov qword [rbx + 0x88], r12
and dword [rbx + 4], 0xfffffff8
test r8, r8
je 0x14003fad8
mov r9d, dword [r8 + 0x3f68]
movsx rdx, word [r8 + 0x60e0]
lea rcx, [rdx*8 + 0x60e4]
add rcx, r8
cmp dword [rcx], r9d
je 0x14003facd
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60e0], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60e4]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60dc]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140053970]
mov qword [0x140053970], rbx
call fcn.140005f10
mov qword [0x140053970], r12
test rbx, rbx
je 0x14003fb85
mov rcx, rbx
call fcn.14001d340
mov r8, qword [0x140053970]
test r8, r8
je 0x14003fb7c
mov r9d, dword [r8 + 0x3f68]
movsx r10, word [r8 + 0x60e0]
lea rdx, [r8 + 0x60e4]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14003fb71
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60e0], cx
movsx rax, cx
lea rdx, [r8 + 0x60e4]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x60dc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400539f0]
test rcx, rcx
je 0x14003fb9e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400539f0], r12
mov rcx, qword [0x1400539a8]
test rcx, rcx
je 0x14003fbb7
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400539a8], r12
mov rcx, qword [rsp + 0x120]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x358]
mov rcx, qword [rsp + 0x380]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
mov rdx, qword [rsp + 0x440]
cmp rdx, 0xf
jbe 0x14003f360
inc rdx
mov rcx, qword [rsp + 0x428]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f35b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f35b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x1400539a8]
mov rdx, qword [0x1400539f0]
test rdx, rdx
je 0x14003fc53
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x1400539f0], r12
mov rcx, qword [0x1400539a8]
test rcx, rcx
je 0x14003fc65
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400539a8], r12
mov rdx, rbx
mov rcx, qword [rsp + 0x380]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
mov rcx, qword [rsp + 0x888]
xor rcx, rsp
call fcn.140041fb0
lea r11, [rsp + 0x8e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea r8, [rsp + 0x128]
mov edx, eax
lea rcx, str.recursive_directory_iterator::recursive_directory_iterator
call fcn.14003c950
nop
lea r8, [r14 + 0x20]
lea rcx, str.status
call fcn.14003c950
mov edx, eax
call fcn.14003c860
nop
call fcn.14003b2d0
int3
call fcn.14003b230
nop
call fcn.14003b2d0
int3
call fcn.14003b230
nop
call fcn.14003b2d0
int3
call fcn.14003b230
nop
call fcn.14003b2d0
int3
call fcn.14003b230
int3