Function at 0x1400435dc
Capabilities:
Create thread
Execute command
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
sub rsp, 0x108
mov rax, qword [0x140069c00]
xor rax, rsp
mov qword [rsp + 0xf8], rax
lea rax, [rsp + 0x108]
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400358cc
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x38], rax
call fcn.14003ab70
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14003b98c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov dx, 3
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.PRIVATE
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x14005d4f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003df64
movzx eax, al
test eax, eax
jne 0x140043699
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
jmp 0x1400436ae
lea rcx, [0x14006ab78]
call fcn.14003e040
movzx eax, al
test eax, eax
jne 0x1400436ae
jmp 0x140043699
lea rcx, [0x14005d500]
call fcn.1400438f0
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x40], rax
lea rdx, str.Press___WINZ___To_Load_The_Cheat_n
lea rcx, [rsp + 0x80]
call fcn.140035274
mov dword [rsp + 0xa0], 0xa
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x40]
call fcn.140035e10
nop
lea rcx, [rsp + 0x80]
call fcn.140035dc0
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x14004372f
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
jne 0x14004373c
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140043705
mov edx, 0x12c
mov ecx, 0x145
call qword [sym.imp.KERNEL32.dll_Beep]
cmp qword [0x14006ab20], 0
jne 0x140043790
lea rdx, str.Fortnite
lea rcx, [rsp + 0x70]
call fcn.140034cf0
lea rcx, [rsp + 0x70]
call fcn.14003dcf4
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x14006ab20], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14004374c
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [0x14006ab78]
call fcn.14003dea0
mov dword [0x14006ab78], eax
lea rcx, [0x14006ab78]
call fcn.14003de54
mov qword [0x14006ab80], rax
mov rax, qword [0x14006ab80]
mov qword [0x14006ab18], rax
lea rcx, [0x14005d56c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14005d570]
call fcn.1400438f0
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x48], rax
lea rdx, str.__PRIVATE______Starting_Overlay..__n_n
lea rcx, [rsp + 0xa8]
call fcn.140035274
mov dword [rsp + 0xc8], 0xa
lea rdx, [rsp + 0xa8]
mov rcx, qword [rsp + 0x48]
call fcn.140035e10
nop
lea rcx, [rsp + 0xa8]
call fcn.140035dc0
mov edx, 0x1f4
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140041b74
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.e_33m___e_0m
call fcn.1400438f0
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x50], rax
lea rdx, str.__PRIVATE______Closing_windows_now...__n
lea rcx, [rsp + 0xd0]
call fcn.140035274
mov dword [rsp + 0xf0], 0xa
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0x50]
call fcn.140035e10
nop
lea rcx, [rsp + 0xd0]
call fcn.140035dc0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140041d2c
call fcn.140043074
call fcn.140043414
mov dword [rsp + 0x30], 0
lea rcx, [rsp + 0x58]
call fcn.140035cc4
mov eax, dword [rsp + 0x30]
mov rcx, qword [rsp + 0xf8]
xor rcx, rsp
call fcn.140053bb0
add rsp, 0x108
ret