Function at 0x140035690
Capabilities:
Contain obfuscated stackstrings
Execute command
Get session user name
Move file
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov rax, qword [0x14004e028]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rsi, rax
movdqa xmm0, xmmword [0x140045550]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x1006c70
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b900
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x140045540]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x1006c70
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b900
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x140045420]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x6f716d
mov byte [rsp + 0x44], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b8c0
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x140045560]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x736f277f
mov word [rsp + 0x44], 0x69
mov byte [rsp + 0x46], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b880
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x1400456a0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], 0x6d
mov byte [rsp + 0x42], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b840
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x98958b88
mov dword [rsp + 0x34], 0xd1909291
mov dword [rsp + 0x38], 0x677965
mov byte [rsp + 0x3c], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b800
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x8a9b9d91
mov dword [rsp + 0x34], 0x9a8698d2
mov word [rsp + 0x38], 0x100
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b7c0
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x8a9b9d91
mov dword [rsp + 0x34], 0x9ad0c9ca
mov dword [rsp + 0x38], 0x1006478
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b750
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x9e8890af
mov dword [rsp + 0x34], 0x8d9f958f
mov dword [rsp + 0x38], 0x7b672f6b
mov word [rsp + 0x3c], 0x61
mov byte [rsp + 0x3e], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003bab0
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x9f9e90be
mov dword [rsp + 0x34], 0xd18c9890
mov dword [rsp + 0x38], 0x677965
mov byte [rsp + 0x3c], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b800
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x94949ca0
mov dword [rsp + 0x34], 0xd1cacb8f
mov dword [rsp + 0x38], 0x677965
mov byte [rsp + 0x3c], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b800
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x140045580]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], 0x100
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b710
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x1400455d0]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1400453f0]
movdqu xmmword [rsp + 0x40], xmm1
mov dword [rsp + 0x50], 0x7278392a
mov dword [rsp + 0x54], 0x7a303468
mov dword [rsp + 0x58], 0x1004458
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b6a0
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x8ebe8ab3
mov dword [rsp + 0x34], 0x8d9b8d91
mov dword [rsp + 0x38], 0x667a642e
mov word [rsp + 0x3c], 0x100
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b660
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
mov dword [rsp + 0x30], 0x9fcecf80
mov dword [rsp + 0x34], 0x9ad09a9e
mov dword [rsp + 0x38], 0x1006478
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b750
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x1400456a0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], 0x6d
mov byte [rsp + 0x42], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b840
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
jne 0x140035cf1
movdqa xmm0, xmmword [0x140045640]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], 0x100
lea rcx, [rsp + 0x30]
call fcn.14003b6e0
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140035cf1
mov dword [rsp + 0x30], 0x94979cb5
mov dword [rsp + 0x34], 0xa9de848e
mov dword [rsp + 0x38], 0x66756469
mov word [rsp + 0x3c], 0x76
mov byte [rsp + 0x3e], 1
lea rcx, [rsp + 0x30]
call fcn.14003ba80
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140035cf1
mov dword [rsp + 0x30], 0x98958ba8
mov dword [rsp + 0x34], 0xdf8d8e99
mov dword [rsp + 0x38], 0x7771684c
mov word [rsp + 0x3c], 0x100
lea rcx, [rsp + 0x30]
call fcn.14003b630
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140035cf1
mov dword [rsp + 0x30], 0x8ebe8ab3
mov dword [rsp + 0x34], 0x8d9b8d91
mov word [rsp + 0x38], 0x100
lea rcx, [rsp + 0x30]
call fcn.14003b790
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140035cf1
mov dword [rsp + 0x30], 0xabaeadb0
mov dword [rsp + 0x34], 0x9d9bb9dc
mov dword [rsp + 0x38], 0x66656675
mov word [rsp + 0x3c], 0x76
mov byte [rsp + 0x3e], 1
lea rcx, [rsp + 0x30]
call fcn.14003ba80
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140035cf1
mov dword [rsp + 0x30], 0x829695b7
mov dword [rsp + 0x34], 0x999fb8
mov byte [rsp + 0x38], 1
lea rcx, [rsp + 0x30]
call fcn.14003b600
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140035cf6
call fcn.140032dd0
lea rdx, [0x140032440]
lea rcx, [rsp + 0x30]
call fcn.14003d1d0
nop
lea rcx, [rsp + 0x30]
call fcn.140030e10
nop
cmp dword [rsp + 0x38], 0
je 0x140035d21
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x1400326e0]
lea rcx, [rsp + 0x30]
call fcn.14003d1d0
nop
lea rcx, [rsp + 0x30]
call fcn.140030e10
nop
cmp dword [rsp + 0x38], 0
je 0x140035d4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x1400328c0]
lea rcx, [rsp + 0x30]
call fcn.14003d1d0
nop
lea rcx, [rsp + 0x30]
call fcn.140030e10
nop
cmp dword [rsp + 0x38], 0
je 0x140035d77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x140032140]
lea rcx, [rsp + 0x30]
call fcn.14003d1d0
nop
lea rcx, [rsp + 0x30]
call fcn.140030e10
nop
cmp dword [rsp + 0x38], 0
je 0x140035da2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x140032e20]
lea rcx, [rsp + 0x30]
call fcn.14003d240
nop
lea rcx, [rsp + 0x30]
call fcn.140030e10
nop
cmp dword [rsp + 0x38], 0
je 0x140035dcd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov edx, 0xf
lea rcx, [rsp + 0x30]
call fcn.140035360
nop
mov rcx, rax
call fcn.14003c460
mov rbx, rax
mov r8d, 0x104
lea rdx, [rbp - 0x70]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.14003c1c0
lea rcx, [rsp + 0x60]
call fcn.14003c460
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
lea rcx, [rsp + 0x60]
call fcn.14003c160
nop
lea rcx, [rsp + 0x30]
call fcn.14003c160
mov edx, 0x1e
lea rcx, [rsp + 0x60]
call fcn.140035360
mov rcx, rax
call fcn.14003c460
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rsp + 0x60]
call fcn.14003c160
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rdi, rax
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x30]
call fcn.14003d2c0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x28]
call fcn.14003d2d0
mov qword [rsp + 0x30], rdi
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x28]
call fcn.14003c720
mov edx, 0xb
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rsp + 0x20], 0x101
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
je 0x140035f1a
lea rdx, str._PlanetFN_Loading_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003c750
mov rcx, rax
lea rdx, str.Hello
call fcn.14003c750
mov rcx, rax
lea rdx, [rbp + 0xa0]
call fcn.14003c750
mov rcx, rax
lea rdx, [0x1400409f0]
call fcn.14003c750
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str._OnyxNova_Loading_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003c750
mov rcx, rax
lea rdx, str.Loading_Drivers..._n
call fcn.14003c750
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str._OnyxNova_Loading_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003c750
mov rcx, rax
lea rdx, str.Waiting_For_Drivers...
call fcn.14003c750
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x140045630]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400455b0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400454d0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140045350]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140045650]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140045450]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [str.9__.s_]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1400453b0]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x140045720]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1400456f0]
movdqa xmmword [rbp + 0x20], xmm1
mov word [rbp + 0x30], 0xa9
mov byte [rbp + 0x32], 1
lea rcx, [rbp - 0x70]
call fcn.14003b5d0
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140045630]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400455b0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400454d0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [str.MGX]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140045690]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140045460]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [str..__u___]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [str.HP7_]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x140045700]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140045320]
movdqa xmmword [rbp + 0x20], xmm1
mov byte [rbp + 0x30], 1
lea rcx, [rbp - 0x70]
call fcn.14003b5a0
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140045630]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400455b0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400454d0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [str.MGX]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140045690]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140045460]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [str..__u___]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [str.HP7_]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x140045730]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140045330]
movdqa xmmword [rbp + 0x20], xmm1
mov byte [rbp + 0x30], 1
lea rcx, [rbp - 0x70]
call fcn.14003b5a0
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rbp - 0x80], 0x89959b
mov byte [rbp - 0x7c], 1
lea rcx, [rbp - 0x80]
call fcn.14003b570
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140045680]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x666f7d7b
mov dword [rsp + 0x44], 0x523f3f
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x30]
call fcn.14003b540
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140045570]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400455a0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x140045660]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140045510]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140045410]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [str._8]
movdqa xmmword [rbp - 0x20], xmm1
mov dword [rbp - 0x10], 0x22326161
mov dword [rbp - 0xc], 0x2c673c38
mov dword [rbp - 8], 0x104c0519
mov dword [rbp - 4], 0x100161d
lea rcx, [rbp - 0x70]
call fcn.14003b510
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400352b0
mov edx, 0x1f4
lea ecx, [rdx + 0x3c]
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str._OnyxNova_Loaded_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003c750
mov rcx, rax
lea rdx, str.Driver_Loaded__n
call fcn.14003c750
lea rdx, str._OnyxNova_Loading_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003c750
mov rcx, rax
lea rdx, str.Waiting_For_FortniteClient_Win64_Shipping.exe..._n_n
call fcn.14003c750
mov rcx, qword [0x14004f408]
test rcx, rcx
jne 0x1400362d4
nop word [rax + rax]
lea rdx, str.Fortnite
lea rcx, [rsp + 0x30]
call fcn.14003b4a0
lea rcx, [rsp + 0x30]
call fcn.14003b470
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x14004f408], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x14004f408]
test rcx, rcx
je 0x140036290
lea rdx, [0x14004f3c8]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor edx, edx
mov rcx, qword [0x14004f458]
call fcn.1400315e0
test al, al
je 0x140036315
mov rcx, qword [0x14004f458]
mov eax, dword [0x14004f3c8]
mov dword [rcx], eax
lea rdx, str.FortniteClient_Win64_Shipping.exe
call fcn.140031c60
mov qword [0x14004f400], rax
mov edx, 0x3e8
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Beep]
movdqa xmm0, xmmword [0x1400454f0]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x140045520]
movdqu xmmword [rsp + 0x40], xmm1
mov dword [rsp + 0x50], 0x637f375b
mov word [rsp + 0x54], 0x79
mov byte [rsp + 0x56], 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b430
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
je 0x1400363a3
lea rdx, str._OnyxNova_Loaded_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003c750
mov rcx, rax
lea rdx, str.Loaded_With_Easy_Anti_Cheat__n_n
call fcn.14003c750
movdqa xmm0, xmmword [0x1400454f0]
movdqu xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x140045500]
movdqu xmmword [rsp + 0x40], xmm1
mov dword [rsp + 0x50], 0x7e627c36
mov word [rsp + 0x54], 0x100
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14003b3f0
nop
lea rcx, [rsp + 0x60]
call fcn.140034e60
mov rbx, rax
lea rcx, [rsp + 0x60]
call fcn.14003c160
test rbx, rbx
je 0x14003641c
lea rdx, str._OnyxNova_Loaded_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003c750
mov rcx, rax
lea rdx, str.Loaded_With_Battle_Eye__n_n
call fcn.14003c750
mov rdx, qword [0x14004f400]
lea rcx, str._OnyxNova_Loaded__Fortnites_Id_Base_Is:__p
call fcn.140030bd0
call fcn.140036570
call fcn.140036700
call fcn.14003af20
call fcn.14003b3a0
xor eax, eax
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.14003d6d0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret