Function at 0x140001f90
Capabilities:
Execute command
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
mov rax, qword [0x140007040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
lea rcx, str.taskkill__IM_EpicGamesLauncher.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_FortniteClient_Win64_Shipping_BE.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_FortniteClient_Win64_Shipping.exe__F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__IM_x64dbg.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140004640]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
mov ecx, 0x30
call fcn.140002f20
mov rcx, rax
mov qword [rbp + 7], rax
movdqa xmm0, xmmword [0x140004c10]
movdqu xmmword [rbp + 0x17], xmm0
movups xmm1, xmmword [str.NeonWare_Free_Perm__.gg_cGBeGjef6B]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x140004658]
movups xmmword [rax + 0x10], xmm0
movzx eax, word [0x140004668]
mov word [rcx + 0x20], ax
movzx eax, byte [0x14000466a]
mov byte [rcx + 0x22], al
mov byte [rcx + 0x23], 0
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov edi, 2
mov r9d, edi
mov r8b, 0xd2
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f], xmm0
mov ecx, 0x160
call fcn.140002f20
mov rbx, rax
mov qword [rbp + 0x2f], rax
mov qword [rbp + 0x3f], 0x15a
mov qword [rbp + 0x47], 0x15f
mov rcx, rax
lea rdx, str._n_________________________________________________________________n____________________________________n__________________________________________________n_.________________________________________n_____________________________________n_____________________________________________n
mov eax, edi
nop dword [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub rax, 1
jne 0x1400020e0
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
mov rax, qword [rdx + 0x50]
mov qword [rcx + 0x50], rax
movzx eax, word [rdx + 0x58]
mov word [rcx + 0x58], ax
mov byte [rbx + 0x15a], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xor eax, eax
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], rax
mov ecx, 0x160
call fcn.140002f20
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x19], 0x15a
mov qword [rbp - 0x11], 0x15f
mov rdx, rbx
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub rdi, 1
jne 0x1400021a1
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
mov rcx, qword [rdx + 0x50]
mov qword [rax + 0x50], rcx
movzx ecx, word [rdx + 0x58]
mov word [rax + 0x58], cx
movzx ecx, byte [rdx + 0x5a]
mov byte [rax + 0x5a], cl
lea rax, [rbp - 0x29]
mov qword [rbp - 9], rax
lea rdx, str.e_0_35m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002af0
lea rdx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0xf
cmova rdx, qword [rbp - 0x29]
mov r8, qword [rbp - 0x19]
mov rcx, rax
call fcn.140002d30
lea rdx, str.e_0m
mov rcx, rax
call fcn.140002af0
mov rcx, rax
lea rdx, [0x140002ab0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x1400022c3
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003108
lea rdx, str.__________________e_1_35m_e_0me_1_35m_e_0m_UNDETECTED______________________e_1_35m_e_0me_1_35m_e_0m_Made_by_Stewie_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002af0
lea rdx, str.e_1_35m________________________________________________________________________________________________________________________e_0m_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002af0
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov ecx, 0x20
call fcn.140002f20
mov qword [rbp - 0x29], rax
movdqa xmm0, xmmword [0x140004bf0]
movdqu xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [str.e_1_35m___e_0m_Perm_Spoof]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x1400048e8]
movsd qword [rax + 0x10], xmm0
movzx ecx, byte [0x1400048f0]
mov byte [rax + 0x18], cl
mov byte [rax + 0x19], 0
lea rcx, [rbp - 0x29]
call fcn.140001260
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140002375
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002370
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027fe
call fcn.140003108
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov ecx, 0x30
call fcn.140002f20
mov qword [rbp - 0x29], rax
movdqa xmm0, xmmword [0x140004c20]
movdqu xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [str.e_1_35m___e_0m_Clean_Fortnite_Ban_Traces]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x140004908]
movups xmmword [rax + 0x10], xmm0
movsd xmm0, qword [0x140004918]
movsd qword [rax + 0x20], xmm0
mov byte [rax + 0x28], 0
lea rcx, [rbp - 0x29]
call fcn.140001260
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140002402
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027fe
call fcn.140003108
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov ecx, 0x20
call fcn.140002f20
mov qword [rbp - 0x29], rax
movdqa xmm0, xmmword [0x140004c00]
movdqu xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [str.e_1_35m___e_0m_Check_Serials]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140004938]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140004940]
mov dword [rax + 0x18], ecx
mov byte [rax + 0x1c], 0
lea rcx, [rbp - 0x29]
call fcn.140001260
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x14000248d
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002488
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027fe
call fcn.140003108
lea rdx, str.____n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002af0
lea rdx, str.e_1_35mOptione_0m__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002af0
lea rdx, [rbp - 1]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp - 1]
sub ecx, 1
je 0x1400026b4
sub ecx, 1
je 0x1400025e0
cmp ecx, 1
je 0x14000250b
lea rdx, str.Invalid_choice.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002af0
mov rcx, rax
lea rdx, [0x140002ab0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call main
jmp 0x140002810
lea rcx, [0x140004640]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov ecx, 0x40
call fcn.140002f20
mov rcx, rax
mov qword [rbp - 0x29], rax
movdqa xmm0, xmmword [0x140004c50]
movdqu xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [str.e_1_35m__e_0m_Checking_Serials..._e_1_35m__CHECK_SERIALS__e_n]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x140004a58]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [0x140004a68]
movups xmmword [rax + 0x20], xmm1
movsd xmm0, qword [0x140004a78]
movsd qword [rax + 0x30], xmm0
mov eax, dword [0x140004a80]
mov dword [rcx + 0x38], eax
movzx eax, byte [0x140004a84]
mov byte [rcx + 0x3c], al
mov byte [rcx + 0x3d], 0
lea rcx, [rbp - 0x29]
call fcn.140001260
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x1400025c6
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027fe
call fcn.140003108
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140001850
call main
jmp 0x140002810
lea rcx, [0x140004640]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov ecx, 0x50
call fcn.140002f20
mov rcx, rax
mov qword [rbp - 0x29], rax
movdqa xmm0, xmmword [0x140004c70]
movdqu xmmword [rbp - 0x19], xmm0
movaps xmm1, xmmword [str.e_1_35m__e_0m_Cleaning_Started_e_1_35m__CLEAN_FORTNITE_BAN_TRACES__e_n]
movups xmmword [rax], xmm1
movaps xmm0, xmmword [0x140004a10]
movups xmmword [rax + 0x10], xmm0
movaps xmm1, xmmword [0x140004a20]
movups xmmword [rax + 0x20], xmm1
movaps xmm0, xmmword [0x140004a30]
movups xmmword [rax + 0x30], xmm0
mov eax, dword [0x140004a40]
mov dword [rcx + 0x40], eax
movzx eax, word [0x140004a44]
mov word [rcx + 0x44], ax
mov byte [rcx + 0x46], 0
lea rcx, [rbp - 0x29]
call fcn.140001260
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x14000269a
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002695
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027fe
call fcn.140003108
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140001440
call main
jmp 0x140002810
lea rcx, [0x140004640]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov ecx, 0x40
call fcn.140002f20
mov rcx, rax
mov qword [rbp - 0x29], rax
movdqa xmm0, xmmword [0x140004c40]
movdqu xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [str.e_1_35m__e_0m_Virtualization_Started_e_1_35m__RANDOM__e_n]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x140004978]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [0x140004988]
movups xmmword [rax + 0x20], xmm1
movsd xmm0, qword [0x140004998]
movsd qword [rax + 0x30], xmm0
movzx eax, byte [0x1400049a0]
mov byte [rcx + 0x38], al
mov byte [rcx + 0x39], 0
lea rcx, [rbp - 0x29]
call fcn.140001260
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140002766
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002761
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027fe
call fcn.140003108
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov ecx, 0x50
call fcn.140002f20
mov qword [rbp - 0x29], rax
movdqa xmm0, xmmword [0x140004c60]
movdqu xmmword [rbp - 0x19], xmm0
movaps xmm1, xmmword [str.e_1_35m__e_0m_Please_be_patient__this_can_take_a_while_e_1_35m_n]
movups xmmword [rax], xmm1
movaps xmm0, xmmword [0x1400049c0]
movups xmmword [rax + 0x10], xmm0
movaps xmm1, xmmword [0x1400049d0]
movups xmmword [rax + 0x20], xmm1
movaps xmm0, xmmword [0x1400049e0]
movups xmmword [rax + 0x30], xmm0
mov byte [rax + 0x40], 0
lea rcx, [rbp - 0x29]
call fcn.140001260
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x14000280a
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002805
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002805
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003108
call fcn.140001c60
nop
mov edx, 0x160
mov rcx, rbx
call fcn.140003108
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14000285c
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002857
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002857
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003108
xor eax, eax
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140002f00
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret