Function at 0x1400a57f0
Capabilities:
Create thread
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x140160040]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor esi, esi
lea rdx, str.Welcome_to_cyas_Fortnite_DMA___discord.gg_3ZRfmN2uDf
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037c30
lea rdx, [0x140037e00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.start_https:__discord.gg_3ZRfmN2uDf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x80
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
test eax, eax
jne 0x1400a586a
call qword [sym.imp.KERNEL32.dll_GetLastError]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rbx, rax
lea r8, [rbp + 0x37]
lea rdx, [rbp + 0x3f]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
test eax, eax
je 0x1400a5895
mov rdx, qword [rbp + 0x37]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rsi
mov qword [rbp + 0x1f], rsi
mov r8d, 0x21
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 7]
call fcn.1400224d0
lea rdx, [rbp + 7]
call fcn.1400474f0
test al, al
jne 0x1400a5931
lea rdx, str.____Failed_to_initilize_DMA
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037c30
lea rdx, [0x140037e00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Press_ENTER_to_exit...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037c30
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
xor eax, eax
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.140116ee0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov rcx, qword [0x1401d6e30]
call fcn.140046120
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test al, al
jne 0x1400a5951
lea rdx, str.____Failed_to_initialize_keyboard_hotkeys_through_kernel.
jmp 0x1400a58d5
lea rdx, str.___Initializing_core...
call fcn.140037c30
lea rdx, [0x140037e00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 7]
call fcn.1400a4650
lea rcx, [rbp + 7]
call fcn.140022fc0
call fcn.14002ff10
lea rdi, [0x1401d66e0]
mov rcx, rdi
call fcn.1400440a0
movzx ebx, al
mov ecx, sendto
call fcn.140116f00
mov qword [rax], rdi
lea rcx, [0x140044010]
mov qword [rax + 8], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140024270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x1400a5e11
cmp dword [rbp + 0xf], 0
je 0x1400a5e05
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a5e05
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
test bl, bl
jne 0x1400a5a1d
lea rdx, str.____Failed_to_initialize_addresses__maybe_game_updated_
jmp 0x1400a58ce
mov ecx, sendto
call fcn.140116f00
lea rcx, [0x1401d5580]
mov qword [rax], rcx
lea rcx, [0x140044d40]
mov qword [rax + 8], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140024270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x1400a5df6
cmp dword [rbp + 0xf], 0
je 0x1400a5dea
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp - 9], xmm0
lea rcx, [rbp - 9]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a5dea
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
mov ecx, sendto
call fcn.140116f00
lea rbx, [0x1401d5460]
mov qword [rax], rbx
lea rcx, [0x14004b1d0]
mov qword [rax + 8], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp - 1]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140024270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 9], rax
test rax, rax
je 0x1400a5ddb
mov ecx, sendto
call fcn.140116f00
mov qword [rax], rbx
lea rcx, [0x14004b290]
mov qword [rax + 8], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140024270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x1400a5dcc
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
cmp dword [rbp - 1], 0
je 0x1400a5dc0
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a5dc0
xorps xmm0, xmm0
movdqa xmmword [rbp - 9], xmm0
cmp dword [rbp + 0xf], eax
je 0x1400a5dc0
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a5dc0
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
cmp dword [rbp - 1], eax
je 0x1400a5ba9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov edx, 0xffffffff
mov r8d, 0x533
mov rcx, qword [0x1401d6e48]
call qword [sym.imp.VMM.dll_VMMDLL_Scatter_Initialize]
mov rbx, rax
test rax, rax
jne 0x1400a5bd5
lea rcx, str.____Failed_to_create_scatter_handle_n
call fcn.140045fa0
mov qword [0x1401d5450], rbx
mov ecx, sendto
call fcn.140116f00
lea rcx, [0x1401d53d0]
mov qword [rax], rcx
lea rcx, [0x140023980]
mov qword [rax + 8], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp - 1]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140024270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 9], rax
test rax, rax
je 0x1400a5db1
cmp dword [rbp - 1], 0
je 0x1400a5da5
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a5da5
xorps xmm0, xmm0
movdqa xmmword [rbp - 9], xmm0
mov ecx, sendto
call fcn.140116f00
lea rcx, [0x1401d6868]
mov qword [rax], rcx
lea rcx, [0x1400504d0]
mov qword [rax + 8], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp - 1]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140024270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 9], rax
test rax, rax
je 0x1400a5d96
cmp dword [rbp - 1], 0
je 0x1400a5d8a
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a5d8a
xorps xmm0, xmm0
movdqa xmmword [rbp - 9], xmm0
mov ecx, sendto
call fcn.140116f00
lea rcx, [0x1401d6864]
mov qword [rax], rcx
lea rcx, [0x140053b20]
mov qword [rax + 8], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp - 1]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140024270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 9], rax
test rax, rax
je 0x1400a5d7b
cmp dword [rbp - 1], 0
je 0x1400a5d6f
movaps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp + 7], xmm0
lea rcx, [rbp + 7]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a5d6f
lea rdx, str.___Ready_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037c30
lea rdx, [0x140037e00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400acf70
jmp 0x1400a58ea
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 1], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 1], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 1], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 1], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3