Function at 0x140011cd0
Capabilities:
Create thread
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140105080]
xor rax, rsp
mov qword [rbp + 0x2f], rax
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14001277c
mov ecx, dword [0x14010c9e0]
xor r15d, r15d
lea rsi, [0x14010dd08]
lea r14, [0x14010dc10]
xorps xmm6, xmm6
test ecx, ecx
je 0x140011d43
sub ecx, 1
je 0x14001219a
cmp ecx, 1
je 0x14001246d
jmp 0x14001277c
movss xmm0, dword [0x14010c6d0]
movss xmm1, dword [0x14010c6d4]
mov rcx, qword [0x14010da00]
mov eax, dword [rcx + 0x1dc0]
or eax, 1
mov dword [rcx + 0x1dc0], eax
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm6
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movss xmm0, dword [0x14010c6d8]
movss xmm1, dword [0x14010c6dc]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc8], 1
or eax, 0x42
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1e20], 0x3f800000
mov r8d, Ordinal_301
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str._Loader_
call fcn.14001fe40
call fcn.14005cf10
test al, al
je 0x140012109
lea rcx, str.Login
call fcn.14005ee30
test al, al
je 0x140011eeb
lea rcx, str.Login_using_username_and_password.
call fcn.140053160
mov rax, qword [0x14010da00]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], r15b
jne 0x140011e3f
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
mov qword [rbp - 0x39], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010c6e1]
xor edx, edx
lea rcx, str.Username
call fcn.1400589f0
mov qword [rbp - 0x39], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010c7e0]
xor edx, edx
lea rcx, str.Password
call fcn.1400589f0
mov qword [rbp - 0x39], r15
lea rdx, [rbp - 0x39]
lea rcx, str.Login
call fcn.140053a80
test al, al
je 0x140011ee6
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x140011270]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14005ef50
lea rcx, str.Register
call fcn.14005ee30
test al, al
je 0x140012017
lea rcx, str.Register_using_username__password_and_key.
call fcn.140053160
mov rax, qword [0x14010da00]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], r15b
jne 0x140011f34
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
mov qword [rbp - 0x39], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010c6e1]
xor edx, edx
lea rcx, str.Username
call fcn.1400589f0
mov qword [rbp - 0x39], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010c7e0]
xor edx, edx
lea rcx, str.Password
call fcn.1400589f0
mov qword [rbp - 0x39], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010c8df]
xor edx, edx
lea rcx, [0x1400e7994]
call fcn.1400589f0
mov qword [rbp - 0x39], r15
lea rdx, [rbp - 0x39]
lea rcx, str.Register
call fcn.140053a80
test al, al
je 0x140012012
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x140011510]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14005ef50
lea rcx, str.Upgrade
call fcn.14005ee30
test al, al
je 0x140012109
lea rcx, str.Upgrade_your_account_using_key.
call fcn.140053160
mov rax, qword [0x14010da00]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], r15b
jne 0x140012060
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
mov qword [rbp - 0x39], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010c6e1]
xor edx, edx
lea rcx, str.Username
call fcn.1400589f0
mov qword [rbp - 0x39], r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010c8df]
xor edx, edx
lea rcx, [0x1400e7994]
call fcn.1400589f0
mov qword [rbp - 0x39], r15
lea rdx, [rbp - 0x39]
lea rcx, str.Upgrade
call fcn.140053a80
test al, al
je 0x140012104
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x1400117c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14005ef50
call fcn.14005d3a0
mov rcx, qword [0x14010da00]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, dword [0x1400f16dc]
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], r15b
jne 0x14001217d
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
mov rcx, rsi
cmp qword [0x14010dd20], 0xf
cmova rcx, qword [0x14010dd08]
call fcn.140053160
call fcn.1400230f0
movss xmm1, dword [0x14010c6d4]
mov rcx, qword [0x14010da00]
movss xmm0, dword [0x14010c6d0]
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm6
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
mov dword [rcx + 0x1de4], 0x43fa0000
mov dword [rcx + 0x1de8], 0x43960000
mov dword [rcx + 0x1dc8], 1
or dword [rcx + 0x1dc0], 0x43
mov dword [rcx + 0x1e20], 0x3f800000
mov r8d, Ordinal_301
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str._Loader_
call fcn.14001fe40
lea rcx, str.User_Data
call fcn.140053160
mov rax, qword [0x14010da00]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], r15b
jne 0x140012258
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
mov rdx, r14
cmp qword [0x14010dc28], 0xf
cmova rdx, qword [0x14010dc10]
lea rcx, str.Welcome__s
call fcn.140053160
lea rdx, [0x14010ca28]
cmp qword [0x14010ca40], 0xf
cmova rdx, qword [0x14010ca28]
lea rcx, str.Subscription_Expiry_:__s
call fcn.140053160
mov rax, qword [0x14010da00]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], r15b
jne 0x1400122c3
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
lea rdx, [0x14010ca48]
cmp qword [0x14010ca60], 0xf
cmova rdx, qword [0x14010ca48]
lea rcx, [rbp + 0xf]
call fcn.14000aa00
nop
lea rbx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0xf
cmova rbx, qword [rbp + 0xf]
mov rax, qword [rbp + 0x1f]
cmp rax, 3
jb 0x14001237a
lea rdi, [rax + rbx]
lea r8, [rdi - 2]
sub r8, rbx
mov edx, 0x61
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14001237a
nop dword [rax]
cmp word [rax], 0x6c61
jne 0x14001232d
cmp byte [rax + 2], 0x6c
je 0x14001234b
inc rax
lea r8, [rdi - 2]
sub r8, rax
mov edx, 0x61
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140012320
jmp 0x14001237a
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x14001237a
mov qword [rbp - 0x39], 0
lea rdx, [rbp - 0x39]
lea rcx, str.Fortnite_Public
call fcn.140053a80
test al, al
je 0x14001237a
mov dword [0x14010c9e0], 2
mov qword [rbp - 0x39], 0
lea rdx, [rbp - 0x39]
lea rcx, str.Exit
call fcn.140053a80
test al, al
je 0x1400123a2
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x14010da00]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, dword [0x1400f16dc]
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140012411
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
mov rcx, rsi
cmp qword [0x14010dd20], 0xf
cmova rcx, qword [0x14010dd08]
call fcn.140053160
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 0xf
jbe 0x140012468
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012463
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012463
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c9560
call fcn.1400230f0
movss xmm1, dword [0x14010c6d4]
mov r9, qword [0x14010da00]
movss xmm0, dword [0x14010c6d0]
unpcklps xmm0, xmm1
movsd qword [r9 + 0x1dd4], xmm0
movaps xmm1, xmm6
unpcklps xmm1, xmm6
movsd qword [r9 + 0x1ddc], xmm1
mov dword [r9 + 0x1dc4], 2
mov byte [r9 + 0x1dfc], 1
mov dword [r9 + 0x1de4], 0x43fa0000
mov dword [r9 + 0x1de8], 0x43960000
mov dword [r9 + 0x1dc8], 1
or dword [r9 + 0x1dc0], 0x43
mov dword [r9 + 0x1e20], 0x3f800000
mov r8d, Ordinal_301
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str._Loader_
call fcn.14001fe40
lea rcx, str.Public
call fcn.140053160
mov rax, qword [0x14010da00]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140012534
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
cmp qword [0x14010dc28], 0xf
cmova r14, qword [0x14010dc10]
mov rdx, r14
lea rcx, str.Welcome__s
call fcn.140053160
mov qword [rbp - 0x39], 0
lea rdx, [rbp - 0x39]
lea rcx, str.Fortnite_Public
call fcn.140053a80
test al, al
je 0x1400126ca
mov rbx, qword [0x1400e6c50]
lea rdx, str..TrustAsia
lea rcx, [rbp - 0x11]
call fcn.14000a830
lea rcx, [rbp - 0x11]
cmp qword [rbp + 7], 7
cmova rcx, qword [rbp - 0x11]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
mov r8d, 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbx], rax
dec rax
mov rdx, qword [rbp + 7]
cmp rax, 0xfffffffffffffffd
ja 0x14001260f
cmp rdx, 7
jbe 0x1400127af
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400127aa
jmp 0x140012642
cmp rdx, 7
jbe 0x14001264e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012649
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012649
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c9560
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Loading_Driver...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140005790
mov qword [0x14010d9f0], rax
cmp rax, 0xffffffffffffffff
jne 0x14001269a
xor r9d, r9d
lea r8, str.ERROR
lea rdx, str.ERR:_10_n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000dab0
mov rcx, qword [0x14010d9f0]
call fcn.140006cc0
xor r9d, r9d
xor r8d, r8d
lea rdx, str.Loaded__Restart_loader.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x14010c9e0], 1
mov qword [rbp - 0x39], 0
lea rdx, [rbp - 0x39]
lea rcx, str.Back
call fcn.140053a80
test al, al
je 0x1400126f0
mov dword [0x14010c9e0], 1
mov rcx, qword [0x14010da00]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, dword [0x1400f16dc]
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rcx + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x14001275f
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400552c0
cmp qword [0x14010dd20], 0xf
cmova rsi, qword [0x14010dd08]
mov rcx, rsi
call fcn.140053160
call fcn.1400230f0
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400c9540
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400c9560
lea rcx, [rbp - 0x11]
call fcn.1400127f0
lea rdx, str.486937
lea rcx, [rbp - 0x31]
call fcn.14000aa00
mov r8, rax
lea rdx, [rbp - 0x11]
lea rcx, [0x14010dad0]
call fcn.14006e5f0
lea rcx, [rbp - 0x11]
call fcn.140012800
mov rcx, rax
call fcn.140011a60
int3