Function at 0x140057700
Capabilities:
Create thread
Encode data using xor
Execute command
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x14007a040]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor ebx, ebx
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14005e9f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movups xmm3, xmmword [str.YZDCYUiTPHJV__1c8e]
movups xmmword [rbp - 0x19], xmm3
movsd xmm0, qword [0x14006b3c0]
movsd qword [rbp - 9], xmm0
movzx eax, word [0x14006b3c8]
mov word [rbp - 1], ax
movzx eax, byte [0x14006b3ca]
mov byte [rbp + 1], al
mov r8d, ebx
cmp dword [0x14007a010], 2
jl 0x1400579dc
movdqa xmm5, xmmword [0x14006cc30]
movdqa xmm6, xmmword [str.5555]
movdqa xmm7, xmmword [0x14006c5c0]
movdqa xmm2, xmmword [0x14006c4a0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movdqa xmm4, xmmword [0x14006c580]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd eax, xmm3
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp - 0x19], xmm2
movdqa xmm2, xmmword [0x14006c4c0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd xmm0, dword [rbp - 0x15]
xorps xmm2, xmm0
movd dword [rbp - 0x15], xmm2
movdqa xmm3, xmmword [0x14006c4f0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm7
movd xmm0, dword [rbp - 0x11]
xorps xmm3, xmm0
movd dword [rbp - 0x11], xmm3
movdqa xmm2, xmmword [0x14006c510]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd xmm0, dword [rbp - 0xd]
xorps xmm2, xmm0
movd dword [rbp - 0xd], xmm2
movdqa xmm3, xmmword [0x14006c520]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm5
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm7
movd xmm0, dword [rbp - 9]
xorps xmm3, xmm0
movd dword [rbp - 9], xmm3
movdqa xmm2, xmmword [0x14006c530]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movd xmm0, dword [rbp - 5]
xorps xmm2, xmm0
movd dword [rbp - 5], xmm2
mov r8d, 0x18
mov eax, r8d
lea r9, [rbp - 0x19]
add r9, rax
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x1400579f0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rbx
mov qword [rbp + 0x1f], rbx
lea rax, [rbp - 0x19]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x140057a40
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.14001fc80
nop
lea rcx, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova rcx, qword [rbp + 7]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.1400571e0
call sym.usermode.exe_interception_create_context
mov qword [0x1400a5170], rax
mov r8d, 0x1000
lea rdx, [sym.usermode.exe_interception_is_mouse]
mov rcx, rax
call sym.usermode.exe_interception_set_filter
mov edx, 0xffffffff
mov rcx, qword [0x1400a5170]
call sym.usermode.exe_interception_wait_with_timeout
mov dword [0x1400a5104], eax
mov edx, 0xffffffff
mov rcx, qword [0x1400a5170]
call sym.usermode.exe_interception_wait_with_timeout
mov dword [0x1400a5104], eax
mov r9d, 1
lea r8, [0x1400a5140]
mov edx, eax
mov rcx, qword [0x1400a5170]
call sym.usermode.exe_interception_receive
test eax, eax
jle 0x140057b38
nop
mov edx, dword [0x1400a5104]
lea eax, [rdx - 0xb]
mov rcx, qword [0x1400a5170]
cmp eax, 9
jbe 0x140057b26
mov edx, 0xffffffff
call sym.usermode.exe_interception_wait_with_timeout
mov dword [0x1400a5104], eax
mov r9d, 1
lea r8, [0x1400a5140]
mov edx, eax
mov rcx, qword [0x1400a5170]
call sym.usermode.exe_interception_receive
test eax, eax
jg 0x140057ae0
jmp 0x140057b38
mov r9d, 1
lea r8, [0x1400a5140]
call sym.usermode.exe_interception_send
mov ecx, 1
call fcn.14005ed24
mov qword [rbp - 0x29], rax
lea rcx, [rbp - 0x31]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005d0f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x39], rax
test rax, rax
je 0x140057e1b
cmp dword [rbp - 0x31], 0
je 0x140057e0f
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x29], xmm0
lea rcx, [rbp - 0x29]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140057e0f
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x39], xmm0
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14006bf8c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14004d2a0
call fcn.14004d750
mov ecx, 0x190
test al, al
je 0x140057bd4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140057bfe
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14006bf8c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.Driver_not_found
call fcn.140005d50
lea rcx, [0x14006bf8c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Please_open_Fortnite
call fcn.140005d50
nop word [rax + rax]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140057c20
mov byte [0x1400a5cb8], 0
lea rcx, str.FortniteClient_Win64_Shipping.exe
call fcn.14004d1e0
mov dword [0x1400a5cc8], eax
mov qword [rbp - 0x29], rbx
mov dword [rbp - 0x35], ebx
mov dword [rbp - 0x39], eax
lea rax, [rbp - 0x29]
mov qword [rbp - 0x31], rax
mov dword [rsp + 0x48], 0x10
lea rax, [rbp - 0x39]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x10
lea rax, [rbp - 0x39]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x222654
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400a5cb0]
call fcn.14005ea30
mov rdx, qword [rbp - 0x29]
mov qword [0x1400a5cc0], rdx
lea rcx, str.Base:_0x_p_n
call fcn.140005d50
mov eax, dword [0x1400a5cc8]
mov dword [rbp - 0x29], eax
mov dword [rsp + 0x48], 4
lea rax, [rbp - 0x29]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 4
lea rax, [rbp - 0x29]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x2224d0
lea rax, [rbp - 0x19]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x1400a5cb0]
call fcn.14005ea30
lea rcx, [0x14006bf8c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rbp - 0x29], 0xa8
mov byte [rbp - 0x28], 0x80
mov byte [rbp - 0x27], 0x8f
mov byte [rbp - 0x26], 0x95
mov byte [rbp - 0x25], 0xd6
mov byte [rbp - 0x24], 0xb8
mov byte [rbp - 0x23], 0x8b
mov byte [rbp - 0x22], 0x9d
mov byte [rbp - 0x21], 0xd6
mov byte [rbp - 0x20], 0xff
movzx eax, byte [rbp - 0x29]
movabs r10, 0x98d940816ad419ee
mov r9, r10
lea rax, [rbp - 0x29]
sub r9, rax
mov r11d, 0xf
lea r8, [rbp - 0x29]
add r8, rbx
mov rcx, rbx
and ecx, r11d
cmp rcx, r11
cmovae rcx, r11
shl cl, 2
mov rdx, r10
shr rdx, cl
and dl, r11b
lea eax, [r9 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x29], dl
inc rbx
cmp rbx, 0xa
jb 0x140057d60
lea rcx, [rbp - 0x29]
call fcn.140005d50
call fcn.1400573b0
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x140057de6
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057de1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057de1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005ed1c
xor eax, eax
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14005ea60
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x10]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x31], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3