Function at 0x18000b0e0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
xor r15d, r15d
movaps xmmword [rsp + 0x3f0], xmm6
lea rax, [0x18000c000]
mov qword [rbp + 0x180], r15
mov edx, 0x7f00
mov qword [rbp + 0x178], rax
xor ecx, ecx
mov qword [rbp + 0x188], r15
mov qword [rbp + 0x170], 0x50
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x190], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
xorps xmm0, xmm0
lea rbx, str.CEF_OSC_WIDGET
mov edx, 0x7f00
mov qword [rbp + 0x198], rax
xor ecx, ecx
movdqa xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rbx
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x170]
mov qword [rbp + 0x1b8], rax
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
mov qword [0x18043f908], rax
lea edx, [r15 + 0xa]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x18043f908]
lea rdx, [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
movss xmm6, dword [0x180062b38]
mov rdx, rbx
movd xmm0, dword [0x18043f72c]
movd xmm1, dword [rsp + 0x74]
mov rax, qword [rbp + 0x188]
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
cvtdq2ps xmm1, xmm1
addss xmm0, xmm6
subss xmm1, xmm6
cvttss2si r10d, xmm0
movd xmm0, dword [0x18043f728]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x38], r10d
cvttss2si r8d, xmm1
addss xmm0, xmm6
cvttss2si r9d, xmm0
movd xmm0, dword [rsp + 0x70]
mov dword [rsp + 0x30], r9d
mov r9d, 0x90000000
mov dword [rsp + 0x28], r8d
lea r8, str.NVIDIA_GeForce_Overlay_DT
cvtdq2ps xmm0, xmm0
subss xmm0, xmm6
cvttss2si ecx, xmm0
mov dword [rsp + 0x20], ecx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
movd xmm0, dword [rsp + 0x70]
mov r8, rax
movd xmm1, dword [rsp + 0x74]
cvtdq2ps xmm0, xmm0
mov qword [0x18043f4c0], rax
cvtdq2ps xmm1, xmm1
subss xmm0, xmm6
subss xmm1, xmm6
cvttss2si ecx, xmm0
movd xmm0, dword [0x18043f728]
mov dword [rbp - 0x30], ecx
cvttss2si ecx, xmm1
mov dword [rbp - 0x2c], ecx
movd xmm1, dword [0x18043f72c]
lea rdx, [rbp - 0x30]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
addss xmm0, xmm6
addss xmm1, xmm6
cvttss2si ecx, xmm0
cvttss2si eax, xmm1
mov dword [rbp - 0x28], ecx
mov rcx, r8
mov dword [rbp - 0x24], eax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x18043f4c0]
lea edx, [r15 - 0x14]
mov r8d, 0x80020
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rax, qword [0x18043f4c0]
lea rbx, [0x18043fa48]
mov qword [rsp + 0x58], rbx
lea rdi, [0x18043fa40]
mov qword [rbp - 0x50], rax
lea rsi, [0x18043fa50]
mov r14d, 1
mov qword [rbp - 0x6c], r15
lea rax, [rbp + 0x330]
mov qword [rbp - 0x58], 2
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r14d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x338]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x40], 2
mov qword [rbp - 0x80], r15
mov dword [rbp - 0x70], 0x1c
mov dword [rbp - 0x78], 0x3c
mov dword [rbp - 0x74], r14d
mov dword [rbp - 0x5c], 0x20
mov qword [rbp - 0x64], r14
mov qword [rbp - 0x48], r14
mov dword [rbp + 0x338], 0xb000
mov dword [rbp + 0x33c], 0xa000
call sub.d3d11.dll_D3D11CreateDeviceAndSwapChain
cmp eax, 0x887a0004
jne 0x18000b402
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x330]
mov qword [rsp + 0x50], rax
lea edx, [r15 + 5]
mov qword [rsp + 0x48], rdi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x338]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call sub.d3d11.dll_D3D11CreateDeviceAndSwapChain
test eax, eax
je 0x18000b427
call fcn.1800051f0
mov rdx, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x1b0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, r14d
jmp 0x18000bdb3
mov rcx, qword [0x18043fa50]
lea r9, [rbp + 0x340]
lea r8, [0x1800c2098]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [0x18043fa40]
lea r9, [0x18043fa58]
mov rdx, qword [rbp + 0x340]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x340]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x18043f4c0]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x18043f4c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.2
mov qword [rsp + 0x28], 0x14
mov edx, 0x37b8
mov r9d, 8
mov qword [rsp + 0x20], 0x10
mov r8d, 0x434
call fcn.18001a0f0
xor ecx, ecx
call fcn.180019c30
call fcn.18001cd30
xor ecx, ecx
mov rdi, rax
call fcn.18003b5e0
mov rcx, qword [0x18043f4c0]
call fcn.1800439c0
mov rdx, qword [0x18043fa48]
mov rcx, qword [0x18043fa40]
call fcn.180011080
lea rcx, [rbp + 0x1d0]
call fcn.18002ee90
mov byte [rbp + 0x1f0], r15b
mov byte [rbp + 0x1dc], r15b
mov dword [rbp + 0x1e8], 5
mov dword [rbp + 0x1ec], 5
mov dword [rbp + 0x220], 0x3f99999a
mov qword [rbp - 0x20], 0xffffffffffffffff
mov qword [rbp - 0x18], 0xffffffffffffffff
mov qword [rbp - 0x10], 0xffffffffffffffff
mov qword [rbp - 8], 0xffffffffffffffff
mov dword [rbp], 0xffffffff
mov qword [rbp + 4], 0xfffffffffffffffd
mov dword [rbp + 0xc], 0xffffffff
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 0xffffffffffffffff
mov qword [rbp + 0x20], 0xffffffffffffffff
mov qword [rbp + 0x28], 0xffffffffffffffff
mov qword [rbp + 0x30], 0xffffffffffffffff
mov dword [rbp + 0x38], 0xffffffff
mov qword [rbp + 0x3c], 0xfffffffffffffffd
mov dword [rbp + 0x44], 0xffffffff
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x50], 0xffffffffffffffff
mov qword [rbp + 0x58], 0xffffffffffffffff
mov qword [rbp + 0x60], 0xffffffffffffffff
mov qword [rbp + 0x68], 0xffffffffffffffff
mov dword [rbp + 0x70], 0xffffffff
mov qword [rbp + 0x74], 0xfffffffffffffffd
mov dword [rbp + 0x7c], 0xffffffff
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], 0xffffffffffffffff
mov qword [rbp + 0x90], 0xffffffffffffffff
mov qword [rbp + 0x98], 0xffffffffffffffff
mov qword [rbp + 0xa0], 0xffffffffffffffff
mov dword [rbp + 0xa8], 0xffffffff
mov qword [rbp + 0xac], 0xfffffffffffffffd
mov dword [rbp + 0xb4], 0xffffffff
mov qword [rbp + 0xb8], r15
mov qword [rbp + 0xc0], 0xffffffffffffffff
mov qword [rbp + 0xc8], 0xffffffffffffffff
mov qword [rbp + 0xd0], 0xffffffffffffffff
movss xmm6, dword [0x1800c2334]
lea rax, [0x1800c2000]
mov qword [rbp + 0x208], rax
lea r9, [rbp + 0x1d0]
mov qword [rbp + 0xd8], 0xffffffffffffffff
lea rdx, str.C:WindowsSystem32_fortnite.otf
mov dword [rbp + 0xe0], 0xffffffff
movaps xmm2, xmm6
mov qword [rbp + 0xe4], 0xfffffffffffffffd
mov dword [rbp + 0xec], 0xffffffff
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0xf8], 0xffffffffffffffff
mov qword [rbp + 0x100], 0xffffffffffffffff
mov qword [rbp + 0x108], 0xffffffffffffffff
mov qword [rbp + 0x110], 0xffffffffffffffff
mov dword [rbp + 0x118], 0xffffffff
mov qword [rbp + 0x11c], 0xfffffffffffffffd
mov dword [rbp + 0x124], 0xffffffff
mov qword [rbp + 0x128], r15
mov qword [rbp + 0x130], 0xffffffffffffffff
mov qword [rbp + 0x138], 0xffffffffffffffff
mov qword [rbp + 0x140], 0xffffffffffffffff
mov qword [rbp + 0x148], 0xffffffffffffffff
mov dword [rbp + 0x150], 0xffffffff
mov qword [rbp + 0x154], 0xfffffffffffffffd
mov dword [rbp + 0x15c], 0xffffffff
mov qword [rbp + 0x160], r15
mov rcx, qword [rdi + 0x50]
mov qword [rsp + 0x20], rax
call fcn.18002fd00
mov qword [0x18043f538], rax
call fcn.18001cd30
mov rbx, qword [rax + 0x50]
mov rcx, rbx
call fcn.180035c60
mov qword [rsp + 0x28], rax
lea rdx, [0x1800d40a0]
movaps xmm3, xmm6
mov qword [rsp + 0x20], r15
mov r8d, 0x1f84c
mov rcx, rbx
call fcn.1800302c0
lea rcx, [rbp + 0x260]
call fcn.18002ee90
lea rax, [0x1800c2018]
mov byte [rbp + 0x2a8], r14b
mov qword [rsp + 0x28], rax
lea rdx, [0x180088580]
lea rax, [rbp + 0x260]
mov byte [rbp + 0x280], r14b
mov rcx, qword [rdi + 0x50]
movaps xmm3, xmm6
mov r8d, 0x3934b
mov qword [rsp + 0x20], rax
call fcn.18002ffe0
mov rcx, qword [rdi + 0x50]
lea rax, [0x1800c2020]
mov qword [rsp + 0x28], rax
lea rdx, [0x180062b70]
lea rax, [rbp + 0x260]
movaps xmm3, xmm6
mov r8d, 0x25a08
mov qword [rsp + 0x20], rax
call fcn.18002ffe0
mov qword [0x18043f910], rax
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.180035c50
movss xmm3, dword [0x1800c2340]
lea rdx, [0x180402050]
mov qword [rsp + 0x28], rax
mov r8d, 0x1329c
mov rcx, rbx
mov qword [rsp + 0x20], r15
call fcn.1800302c0
mov qword [0x18043f540], rax
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.180035c50
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
movss xmm3, dword [0x1800c2338]
lea rdx, [0x180402050]
mov r8d, 0x1329c
mov rcx, rbx
call fcn.1800302c0
mov qword [0x18043f548], rax
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.180035c50
movss xmm3, dword [0x1800c2344]
lea rdx, [0x1804152f0]
mov qword [rsp + 0x28], rax
mov r8d, 0x133ac
mov rcx, rbx
mov qword [rsp + 0x20], r15
call fcn.1800302c0
mov qword [0x18043f550], rax
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.180035c50
movss xmm3, dword [0x1800c233c]
lea rdx, [0x1804286a0]
mov qword [rsp + 0x28], rax
mov r8d, 0x133ec
mov rcx, rbx
mov qword [rsp + 0x20], r15
call fcn.1800302c0
cmp qword [0x18043f4f0], r15
mov qword [0x18043f558], rax
jne 0x18000b942
mov rcx, qword [0x18043fa40]
lea rax, [0x18043f4f0]
mov qword [rsp + 0x30], r15
lea r9, [rbp - 0x20]
mov qword [rsp + 0x28], rax
lea rdx, [0x1803ff500]
mov r8d, 0x1cf
mov qword [rsp + 0x20], r15
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x18043f4f8], r15
jne 0x18000b97e
mov rcx, qword [0x18043fa40]
lea rax, [0x18043f4f8]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x18]
mov qword [rsp + 0x28], rax
lea rdx, [0x1803ff6d0]
mov r8d, 0x1da
mov qword [rsp + 0x20], r15
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x18043f500], r15
jne 0x18000b9ba
mov rcx, qword [0x18043fa40]
lea rax, [0x18043f500]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x50]
mov qword [rsp + 0x28], rax
lea rdx, [0x1803ff8b0]
mov r8d, 0x207
mov qword [rsp + 0x20], r15
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x18043f508], r15
jne 0x18000b9f9
mov rcx, qword [0x18043fa40]
lea rax, [0x18043f508]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x88]
mov qword [rsp + 0x28], rax
lea rdx, [0x1803ffac0]
mov r8d, 0x19a
mov qword [rsp + 0x20], r15
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x18043f510], r15
jne 0x18000ba38
mov rcx, qword [0x18043fa40]
lea rax, [0x18043f510]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0xc0]
mov qword [rsp + 0x28], rax
lea rdx, [0x1803ffc60]
mov r8d, 0x185
mov qword [rsp + 0x20], r15
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x18043f518], r15
jne 0x18000ba77
mov rcx, qword [0x18043fa40]
lea rax, [0x18043f518]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0xf8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1803ffdf0]
mov r8d, 0xd0
mov qword [rsp + 0x20], r15
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x18043f520], r15
jne 0x18000bab6
mov rcx, qword [0x18043fa40]
lea rax, [0x18043f520]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x130]
mov qword [rsp + 0x28], rax
lea rdx, [0x1803ffec0]
mov r8d, 0x207
mov qword [rsp + 0x20], r15
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
movss xmm6, dword [0x180062b2c]
xor bl, bl
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, [rbp - 0x80]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x18000bb22
nop dword [rax + rax]
lea rcx, [rbp - 0x80]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x80]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp - 0x78], 0x12
lea rcx, [rbp - 0x80]
movzx ebx, bl
cmove ebx, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x18000bae0
test bl, bl
jne 0x18000bd7a
call fcn.1800112e0
call fcn.180043b40
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, qword [0x18043f908]
cmp rax, rsi
jne 0x18000bb7b
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, qword [0x18043f4c0]
xor r9d, r9d
mov dword [rsp + 0x30], 3
mov rdx, rax
mov dword [rsp + 0x28], r15d
xor r8d, r8d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rsi, qword [0x18043f908]
movaps xmm0, xmmword [rsp + 0x70]
mov rdi, qword [0x18043f4c0]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, rdi
jne 0x18000bbca
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov dword [rsp + 0x30], 3
xor r9d, r9d
mov rdx, rax
mov dword [rsp + 0x28], r15d
xor r8d, r8d
mov dword [rsp + 0x20], r15d
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
xorps xmm0, xmm0
lea rdx, [rsp + 0x60]
mov rcx, rsi
movups xmmword [rsp + 0x60], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rsp + 0x68]
mov edx, 0xfffffff0
sub eax, dword [rsp + 0x60]
mov rcx, rsi
mov dword [0x18043f728], eax
mov eax, dword [rsp + 0x6c]
sub eax, dword [rsp + 0x64]
mov dword [0x18043f72c], eax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov ecx, dword [rsp + 0x64]
bt eax, 0x17
mov eax, dword [0x18043f72c]
jae 0x18000bc2a
add ecx, 0x20
sub eax, 0x27
mov dword [rsp + 0x64], ecx
mov dword [0x18043f72c], eax
movd xmm1, dword [0x18043f728]
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], r14d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm1, xmm6
addss xmm0, xmm6
cvttss2si r9d, xmm1
movd xmm1, dword [rsp + 0x60]
cvttss2si eax, xmm0
movd xmm0, ecx
mov rcx, rdi
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x20], eax
cvtdq2ps xmm1, xmm1
subss xmm0, xmm6
subss xmm1, xmm6
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14b, al
je 0x18000bccf
cmp byte [0x18043e7b0], r15b
mov edx, 0xffffffec
mov rcx, rdi
sete al
mov byte [0x18043e7b0], al
test al, al
je 0x18000bcc3
mov r8d, 0xa0
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x18000bccf
mov r8d, 0x800a0
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x18043f4c0]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x18043f4c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.18000a090
mov eax, dword [0x18043f72c]
mov dword [0x18043f4cc], eax
mov eax, dword [0x18043f728]
mov dword [0x18043f4c8], eax
call fcn.180025890
mov rcx, qword [0x18043fa48]
lea r8, [0x18043fa58]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x1c0], xmm0
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x18043fa48]
lea r8, [rbp + 0x1c0]
mov rdx, qword [0x18043fa58]
mov rax, qword [rcx]
call qword [rax + 0x190]
call fcn.18001c960
mov rcx, rax
call fcn.180011320
mov rcx, qword [0x18043fa50]
xor r8d, r8d
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x18000bac0
call fcn.180011f40
call fcn.180043e30
xor ecx, ecx
call fcn.18001a8a0
call fcn.1800051f0
mov rcx, qword [0x18043f4c0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x1b0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov rbx, qword [rsp + 0x448]
movaps xmm6, xmmword [rsp + 0x3f0]
add rsp, 0x400
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret