Function at 0x14003b544
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
sub rsp, 0x1b8
call fcn.14001e818
call fcn.14001f1a8
call fcn.14000d678
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14003b59c
movzx eax, byte [0x14004f228]
test eax, eax
jne 0x14003b57f
mov dword [rsp + 0x40], 1
jmp 0x14003b587
mov dword [rsp + 0x40], 0
mov al, byte [rsp + 0x40]
mov byte [0x14004f228], al
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 4
mov eax, eax
mov ecx, dword [0x140076ae8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x140076a68], eax
jle 0x14003b5ff
lea rcx, [0x140076a68]
call fcn.14003ed3c
cmp dword [0x140076a68], 0xffffffff
jne 0x14003b5ff
movss xmm2, dword [0x140042c30]
movss xmm1, dword [0x140048bd0]
lea rcx, [0x140076a60]
call fcn.14002ffac
nop
lea rcx, [0x140076a68]
call fcn.14003ecd0
mov rcx, qword [0x1400769f0]
call fcn.14000e0ac
movss xmm2, dword [0x140048bdc]
movss xmm1, dword [0x140048be0]
lea rcx, [rsp + 0x48]
call fcn.14002ffac
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.14000fc64
movzx eax, byte [0x14004f228]
test eax, eax
je 0x14003be85
mov r8d, 0x3b
xor edx, edx
lea rcx, [0x140046a37]
call fcn.140003488
call fcn.14002818c
call fcn.14002818c
movss xmm2, dword [0x140042c20]
movss xmm1, dword [0x140048bb0]
lea rcx, [rsp + 0xf0]
call fcn.14002ffac
mov rcx, rax
call fcn.14000f9a8
lea rcx, str.___________________________________OrangeWare_Legit__Last_Update_Jun__2_2024
call fcn.1400281cc
call fcn.1400279b4
movss xmm2, dword [0x140042c1c]
movss xmm1, dword [0x1400469d8]
lea rcx, [rsp + 0x50]
call fcn.14002ffac
lea rcx, [rsp + 0x50]
call fcn.14000f9a8
movss xmm2, dword [0x1400469d8]
movss xmm1, dword [0x1400469d8]
lea rcx, [rsp + 0xf8]
call fcn.14002ffac
mov rdx, rax
lea rcx, [0x140047324]
call fcn.140023060
movzx eax, al
test eax, eax
je 0x14003b6f3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
movss xmm2, dword [0x140048bbc]
movss xmm1, dword [0x140048bb4]
lea rcx, [rsp + 0x58]
call fcn.14002ffac
lea rcx, [rsp + 0x58]
call fcn.14000f9a8
movss xmm2, dword [0x1400469dc]
movss xmm1, dword [0x140042c2c]
lea rcx, [rsp + 0x60]
call fcn.14002ffac
lea rdx, [rsp + 0x60]
lea rcx, [0x140047328]
call fcn.140023060
movzx eax, al
test eax, eax
je 0x14003b753
mov dword [0x140076a5c], 1
movss xmm2, dword [0x140048bbc]
movss xmm1, dword [0x140048bc4]
lea rcx, [rsp + 0x68]
call fcn.14002ffac
lea rcx, [rsp + 0x68]
call fcn.14000f9a8
movss xmm2, dword [0x1400469dc]
movss xmm1, dword [0x140042c2c]
lea rcx, [rsp + 0x70]
call fcn.14002ffac
lea rdx, [rsp + 0x70]
lea rcx, str.Visuals
call fcn.140023060
movzx eax, al
test eax, eax
je 0x14003b7b3
mov dword [0x140076a5c], 2
movss xmm2, dword [0x140048bbc]
movss xmm1, dword [0x140048bd4]
lea rcx, [rsp + 0x78]
call fcn.14002ffac
lea rcx, [rsp + 0x78]
call fcn.14000f9a8
movss xmm2, dword [0x1400469dc]
movss xmm1, dword [0x140042c2c]
lea rcx, [rsp + 0x80]
call fcn.14002ffac
lea rdx, [rsp + 0x80]
lea rcx, str.Misc
call fcn.140023060
movzx eax, al
test eax, eax
je 0x14003b819
mov dword [0x140076a5c], 3
cmp dword [0x140076a5c], 0
jne 0x14003ba7f
lea rcx, str.______OrangeWare_Legit_2.0
call fcn.1400281cc
call fcn.14002818c
call fcn.14002818c
lea rcx, str.________Update_News___Last_Update_02.06.24
call fcn.1400281cc
call fcn.14002818c
lea rcx, str.______Updated_to_Newest_Fortnite_Patch_
call fcn.1400281cc
lea rcx, str.______Added_Loading_trough_Bytes_
call fcn.1400281cc
call fcn.14002818c
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
xor r8d, r8d
mov edx, 0xff
lea rcx, [rsp + 0x160]
call fcn.14002ff18
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x110]
mov rcx, qword [rsp + 0x88]
call fcn.140030d58
lea rdx, str.______NOT_WORKING_ON_EAC
lea rcx, [rsp + 0x110]
call fcn.1400281f4
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
mov r8d, 0xa2
mov edx, 0xff
lea rcx, [rsp + 0x170]
call fcn.14002ff18
mov qword [rsp + 0x90], rax
lea rdx, [rsp + 0x120]
mov rcx, qword [rsp + 0x90]
call fcn.140030d58
lea rdx, str.______Currently_Semi_Undected_On_BE
lea rcx, [rsp + 0x120]
call fcn.1400281f4
call fcn.14002818c
cmp qword [0x1400767a8], 0
jne 0x14003b988
mov rax, qword [0x140076790]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
mov r8d, 0xff
xor edx, edx
lea rcx, [rsp + 0x180]
call fcn.14002ff18
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x130]
mov rcx, qword [rsp + 0x98]
call fcn.140030d58
mov r8, qword [rsp + 0xa0]
lea rdx, str.Fortnites_Id_Base_Is_:___p
lea rcx, [rsp + 0x130]
call fcn.1400281f4
jmp 0x14003b9f0
mov rax, qword [0x140076790]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
xor r8d, r8d
mov edx, 0xff
lea rcx, [rsp + 0x190]
call fcn.14002ff18
mov qword [rsp + 0xa8], rax
lea rdx, [rsp + 0x140]
mov rcx, qword [rsp + 0xa8]
call fcn.140030d58
mov r8, qword [rsp + 0xb0]
lea rdx, str._Fortnites_Id_Base_Is:__p
lea rcx, [rsp + 0x140]
call fcn.1400281f4
call fcn.14002818c
call fcn.14002818c
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
xor r8d, r8d
mov edx, 0xff
lea rcx, [rsp + 0x1a0]
call fcn.14002ff18
mov qword [rsp + 0xb8], rax
lea rdx, [rsp + 0x150]
mov rcx, qword [rsp + 0xb8]
call fcn.140030d58
lea rdx, str.OrangeWare_Discord
lea rcx, [rsp + 0x150]
call fcn.1400281f4
movss xmm1, dword [0x140042c58]
xorps xmm0, xmm0
call fcn.14000f4a8
xor ecx, ecx
call fcn.14000a130
movzx eax, al
test eax, eax
je 0x14003ba7f
call fcn.140005dec
lea rcx, [0x140047498]
call fcn.1400281cc
call fcn.140007f88
cmp dword [0x140076a5c], 1
jne 0x14003bb63
call fcn.14002818c
call fcn.14002818c
lea rdx, [0x14004f229]
lea rcx, str.Aimbot
call fcn.140023758
lea rdx, [0x140076854]
lea rcx, str.Visible_Check
call fcn.140023758
lea rcx, str.Aimbot_Smoothness:
call fcn.1400281cc
movss xmm0, dword [0x140042bfc]
movss dword [rsp + 0x28], xmm0
lea rax, [0x1400474dc]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140042c14]
movss xmm2, dword [0x140042c04]
lea rdx, [0x14004f22c]
lea rcx, str.Smoothness
call fcn.140027c58
call fcn.14002818c
lea rcx, str.Aim_Key:
call fcn.1400281cc
mov r8d, dword [0x140076954]
lea rdx, [0x1400316b4]
mov ecx, dword [0x14007683c]
call fcn.140035f8c
lea rcx, str.Aim_Bone:
call fcn.1400281cc
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, str.Head
lea rdx, [0x140075e44]
lea rcx, str.Aim_Bones
call fcn.140023f90
cmp dword [0x140076a5c], 2
jne 0x14003bbc2
call fcn.14002818c
call fcn.14002818c
lea rdx, [0x1400767a5]
lea rcx, str.Corner_Box
call fcn.140023758
lea rdx, [0x1400767a6]
lea rcx, str.Snaplines
call fcn.140023758
lea rdx, [0x140076855]
lea rcx, str.Skeleton
call fcn.140023758
lea rdx, [0x140076856]
lea rcx, str.Distance
call fcn.140023758
cmp dword [0x140076a5c], 3
jne 0x14003be80
call fcn.14002818c
call fcn.14002818c
lea rdx, [0x1400767a4]
lea rcx, str.FovCircle
call fcn.140023758
movss xmm0, dword [0x140042bfc]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140048bdc]
movss xmm2, dword [0x140048bb8]
lea rdx, [0x14004f230]
lea rcx, str.FOV_Value
call fcn.140027c58
call fcn.14002818c
lea rdx, [0x140076857]
lea rcx, str.Crosshair
call fcn.140023758
call fcn.14002818c
call fcn.14002818c
lea rcx, str.Visible_Distance_:
call fcn.1400281cc
lea rax, [0x1400475b8]
mov qword [rsp + 0x20], rax
mov r9d, 0xbb8
mov r8d, 0x4b0
lea rdx, [0x140075e48]
lea rcx, str.Visdistance
call fcn.140027ca0
call fcn.14002818c
call fcn.14002818c
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x100]
call fcn.14002ffac
mov rdx, rax
lea rcx, str.Show_Console
call fcn.140023060
movzx eax, al
test eax, eax
je 0x14003bcc9
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x108]
call fcn.14002ffac
mov rdx, rax
lea rcx, str.Hide_Console
call fcn.140023060
movzx eax, al
test eax, eax
je 0x14003bd03
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
movss xmm1, dword [0x140042c58]
xorps xmm0, xmm0
call fcn.14000f4a8
lea rdx, [0x140076858]
lea rcx, str.RAGE_CONFIG
call fcn.140023758
movzx eax, al
test eax, eax
je 0x14003bd82
movzx eax, byte [0x140076858]
test eax, eax
je 0x14003bd82
mov byte [0x1400767a4], 1
movss xmm0, dword [0x140042c04]
movss dword [0x14004f22c], xmm0
movss xmm0, dword [0x140048bd8]
movss dword [0x14004f230], xmm0
mov byte [0x140076857], 1
mov byte [0x1400767a5], 1
mov byte [0x1400767a6], 1
mov byte [0x140076855], 1
mov byte [0x140076856], 1
movss xmm1, dword [0x140042c58]
xorps xmm0, xmm0
call fcn.14000f4a8
lea rdx, [0x140076859]
lea rcx, str.LEGIT_CONFIG
call fcn.140023758
movzx eax, al
test eax, eax
je 0x14003be01
movzx eax, byte [0x140076859]
test eax, eax
je 0x14003be01
mov byte [0x1400767a4], 1
movss xmm0, dword [0x140042c10]
movss dword [0x14004f22c], xmm0
movss xmm0, dword [0x140042c30]
movss dword [0x14004f230], xmm0
mov byte [0x140076857], 1
mov byte [0x1400767a5], 1
mov byte [0x1400767a6], 0
mov byte [0x140076855], 0
mov byte [0x140076856], 1
movss xmm1, dword [0x140042c58]
xorps xmm0, xmm0
call fcn.14000f4a8
lea rdx, [0x14007685a]
lea rcx, str.Standard
call fcn.140023758
movzx eax, al
test eax, eax
je 0x14003be80
movzx eax, byte [0x14007685a]
test eax, eax
je 0x14003be80
mov byte [0x1400767a4], 0
movss xmm0, dword [0x140042c04]
movss dword [0x14004f22c], xmm0
movss xmm0, dword [0x140048bcc]
movss dword [0x14004f230], xmm0
mov byte [0x140076857], 0
mov byte [0x1400767a5], 0
mov byte [0x1400767a6], 0
mov byte [0x140076855], 0
mov byte [0x140076856], 0
call fcn.140007428
call fcn.140032714
call fcn.1400079e0
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xc0], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x140076a30]
call qword [rsp + 0xc0]
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xc8], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x140076a30]
call qword [rsp + 0xc8]
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xd0], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x140076a30]
call qword [rsp + 0xd0]
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0xd8], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x140042bfc]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140076a30]
call qword [rsp + 0xd8]
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rcx, qword [0x140076a30]
call qword [rax + 0x148]
test eax, eax
jl 0x14003bfb0
call fcn.14000e3b4
call fcn.140008dec
mov rcx, rax
call fcn.14001e830
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rcx, qword [0x140076a30]
call qword [rax + 0x150]
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140076a30]
call qword [rsp + 0xe0]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x88760868
jne 0x14003c049
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rcx, qword [0x140076a30]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003c049
call fcn.14001e7a0
mov rax, qword [0x140076a30]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0xe8], rax
lea rdx, [0x140076900]
mov rcx, qword [0x140076a30]
call qword [rsp + 0xe8]
call fcn.14001e638
add rsp, 0x1b8
ret