Function at 0x140021c20
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x1400b7c40]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov ebx, recv
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Waiting_for_the_Fortnite_process_to_be_opened...
lea rcx, [0x140106ea0]
call fcn.140014590
mov rcx, rax
call fcn.140014800
mov rcx, qword [0x140108418]
test rcx, rcx
jne 0x140021ccd
nop dword [rax + rax]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140108418], rax
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140108418]
test rcx, rcx
je 0x140021ca0
lea rdx, [0x140108660]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
jne 0x140021d37
lea rdx, str.Failed_to_get_Fortnite_process...
lea rcx, [0x140106ea0]
call fcn.140014590
mov rcx, rax
call fcn.140014800
lea rcx, str.pause
call fcn.140030ab8
xor eax, eax
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.140062540
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, [rbp + 0x1c0]
mov rcx, qword [0x140108418]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x140021d85
mov eax, dword [rbp + 0x1c8]
sub eax, dword [rbp + 0x1c0]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x140108400], xmm0
mov eax, dword [rbp + 0x1cc]
sub eax, dword [rbp + 0x1c4]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x1401083e8], xmm0
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r15 + 3]
lea rcx, str..PhysicalDrive0
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
mov qword [0x140108438], rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400220f6
xor edx, edx
mov r8d, 0x240
lea rcx, [rsp + 0x58]
call fcn.140064be0
mov ecx, dword [0x140108660]
mov dword [rsp + 0x54], ecx
mov dword [rsp + 0x50], r15d
mov dword [rbp + 0x1a0], r15d
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x248
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x248
lea r8, [rsp + 0x50]
mov edx, 0x220da4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x190]
mov qword [0x1401083e0], rax
mov ecx, 0x100000
call fcn.140062808
mov r14, rax
xor edx, edx
mov r8d, 0x100000
mov rcx, rax
call fcn.140064be0
mov esi, r15d
lea r12, [0x1400a4a70]
mov rbx, r14
sub rbx, r12
mov edi, r15d
movabs r13, 0x400000000000
nop word [rax + rax]
mov rdx, qword [0x1401083e0]
add rdx, rdi
mov r8d, 0x100000
mov rcx, r14
call fcn.14001ee30
mov r9, r15
nop dword [rax + rax]
lea r8, str.xxx____xxxxxxx
mov rdx, r12
mov al, 0x78
nop dword [rax]
cmp al, 0x78
jne 0x140021ec5
lea rcx, [rbx + rdx]
movzx eax, byte [rdx]
cmp byte [rcx + r9], al
jne 0x140021f7f
inc r8
inc rdx
movzx eax, byte [r8]
test al, al
jne 0x140021eb0
shl rsi, 0x14
add rsi, r9
add rsi, qword [0x1401083e0]
mov dword [rbp + 0x1a0], r15d
xor edx, edx
mov r8d, 0x22c
lea rcx, [rsp + 0x6c]
call fcn.140064be0
mov eax, dword [0x140108660]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x50], 2
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x58], rax
lea rax, [rsi + 3]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], 4
mov dword [rbp + 0x1a4], r15d
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x1a4]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x248
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x248
lea r8, [rsp + 0x50]
mov edx, 0x220da4
mov rcx, qword [0x140108438]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov eax, dword [rbp + 0x1a0]
test eax, eax
jne 0x140021fa7
mov rbx, r15
jmp 0x140021fae
inc r9
cmp r9, 0x100000
jb 0x140021ea0
inc rsi
add rdi, 0x100000
cmp rdi, r13
jb 0x140021e80
mov rbx, r15
jmp 0x140021fae
lea rbx, [rax + 7]
add rbx, rsi
mov edx, 0x100000
mov rcx, r14
call fcn.140062a94
sub rbx, qword [0x1401083e0]
mov qword [0x1400b7e70], rbx
xorps xmm0, xmm0
lea rax, [0x140020ad0]
mov qword [rsp + 0x40], rax
movdqu xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], r15
mov ecx, 8
call fcn.140062808
mov qword [rbp + 0x1a8], rax
lea rdi, [rax + 8]
mov qword [rbp + 0x1b8], rdi
mov rcx, qword [rsp + 0x40]
mov qword [rax], rcx
mov qword [rbp + 0x1b0], rdi
mov rbx, qword [rbp + 0x1a8]
cmp rbx, rdi
je 0x140022051
nop
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8, qword [rbx]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x140022048
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 8
cmp rbx, rdi
jne 0x140022020
mov r8d, 7
lea rdx, str.Courier
lea rcx, [0x140102968]
call fcn.140013ac0
lea rax, [0x1400213e0]
mov qword [0x140108690], rax
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
mov r9, qword [0x140108418]
lea r8, [0x14002d940]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, str.pause
call fcn.140030ab8
nop
mov rcx, qword [rbp + 0x1a8]
test rcx, rcx
je 0x140021d05
mov rdx, qword [rbp + 0x1b8]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400220e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400220f0
call fcn.140062a94
jmp 0x140021d05
call fcn.14002de94
int3
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Failure
lea rdx, str.Failed_to_get_proper_handle_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.14002dc54
int3