Function at 0x14004b720
Capabilities:
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x90
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x140074040]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004b766
cmp byte [0x1400740c1], 0
sete byte [0x1400740c1]
movss xmm1, dword [0x14006a660]
mov ebx, 2
mov ecx, ebx
call fcn.14001fc80
lea rsi, [0x140000000]
cmp byte [0x1400740c1], 0
je 0x14004bb82
mov rax, qword [0x140075260]
mov dword [rax + 0x1af4], 0x441b0000
mov dword [rax + 0x1af8], 0x43af0000
mov dword [rax + 0x1acc], 1
xor edx, edx
mov r8d, 0x2a
lea rcx, str.Fortnite
call fcn.14001c970
mov dword [rbp + 7], 0x43440000
mov dword [rbp + 0xb], 0x41a00000
lea rdx, [rbp + 7]
lea rcx, str.Aimbot
call fcn.140036f10
test al, al
je 0x14004b7f3
mov dword [0x140075270], 0
movss xmm6, dword [0x14006a724]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140020520
mov dword [rbp + 7], 0x43440000
mov dword [rbp + 0xb], 0x41a00000
lea rdx, [rbp + 7]
lea rcx, str.Visuals
call fcn.140036f10
test al, al
je 0x14004b832
mov dword [0x140075270], 1
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140020520
mov dword [rbp + 7], 0x43440000
mov dword [rbp + 0xb], 0x41a00000
lea rdx, [rbp + 7]
lea rcx, str.Misc
call fcn.140036f10
test al, al
je 0x14004b867
mov dword [0x140075270], ebx
jmp 0x14004b86d
mov ebx, dword [0x140075270]
test ebx, ebx
je 0x14004b99f
sub ebx, 1
je 0x14004b8ec
cmp ebx, 1
jne 0x14004bb7d
mov dword [rbp + 7], 0x42f00000
mov dword [rbp + 0xb], 0x41a00000
lea rdx, [rbp + 7]
lea rcx, str.Unload
call fcn.140036f10
test al, al
je 0x14004b8ae
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [0x1400746b0]
lea rcx, str.Watermark
call fcn.140037c40
lea rdx, [0x1400759d6]
lea rcx, str.No_Recoil
call fcn.140037c40
lea rdx, [0x1400759d4]
lea rcx, str.Instant_Revive
call fcn.140037c40
jmp 0x14004bb7d
lea rdx, [0x1400759d3]
lea rcx, [0x1400696ac]
call fcn.140037c40
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140020520
lea rdx, [0x1400759d7]
lea rcx, str.Fill_box
call fcn.140037c40
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140020520
lea rdx, [0x1400759ca]
lea rcx, str.Corner_box
call fcn.140037c40
lea rdx, [0x1400759d1]
lea rcx, str.Line
call fcn.140037c40
lea rdx, [0x1400759d5]
lea rcx, str.Username
call fcn.140037c40
lea rdx, [0x1400759cd]
lea rcx, str.Platform
call fcn.140037c40
lea rdx, [0x1400759cc]
lea rcx, str.Rank
call fcn.140037c40
lea rdx, [0x1400759cb]
lea rcx, str.Distance
call fcn.140037c40
jmp 0x14004bb7d
lea rdx, [0x1400759d2]
lea rcx, str.Memory_aimbot
call fcn.140037c40
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140020520
mov ebx, dword [0x140075418]
movsxd rax, dword [reloc.XINPUT1_4.dll_Ordinal_2]
xor edx, edx
cmp eax, 0x7b
ja 0x14004b9d9
mov rdx, qword [rsi + rax*8 + 0x74210]
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
movdqa xmm1, xmmword [0x14006a7a0]
movdqu xmmword [rbp + 0x27], xmm1
mov byte [rbp + 0x17], 0
test rdx, rdx
jne 0x14004ba05
mov r8d, 0xe
lea rdx, str.Select_a_key..
jmp 0x14004ba1a
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14004ba10
lea rcx, [rbp + 0x17]
call fcn.1400476f0
cmp ebx, 1
jne 0x14004ba3e
mov r8d, 3
lea rdx, [0x140058be0]
lea rcx, [rbp + 0x17]
call fcn.1400476f0
mov dword [rbp + 7], 0x42fa0000
mov dword [rbp + 0xb], 0x41900000
lea rcx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rcx, qword [rbp + 0x17]
lea rdx, [rbp + 7]
call fcn.140036f10
test al, al
je 0x14004ba8d
test ebx, ebx
jne 0x14004ba8d
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14004b0a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x14004bacb
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004bac6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004bac6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140055000
lea rdx, [0x1400759cf]
lea rcx, str.Controller_support
call fcn.140037c40
lea rdx, [0x1400759d0]
lea rcx, str.Show_Fov
call fcn.140037c40
lea rdx, [0x1400759d8]
lea rcx, str.Show_Filled_Fov
call fcn.140037c40
mov dword [rbp + 0xf], 0x3e8
mov dword [rbp + 7], 1
lea rax, str.Fov:__.2f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 7]
lea r8, [0x1400746b4]
lea rcx, str.FOV_Size
call fcn.1400391f0
mov dword [rbp + 7], 0x46
mov dword [rbp + 0xf], 1
lea rax, str.Smoothness:__.2f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 7]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xf]
lea r8, [0x1400746bc]
lea rcx, str.Smoothness
call fcn.1400391f0
call fcn.140038d00
call fcn.14001f810
mov rcx, qword [0x140075260]
movsxd rax, dword [rcx + 0x1a88]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1a90]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea rax, [rax + rax*2]
mov r9d, dword [rsi + rax*4 + 0x58d18]
cmp dword [rsi + rax*4 + 0x58d10], 4
jne 0x14004bbf0
mov eax, dword [rsi + rax*4 + 0x58d14]
cmp eax, 1
jne 0x14004bbd1
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1550], eax
jmp 0x14004bbf0
cmp eax, 2
jne 0x14004bbf0
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1550], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x1554], eax
dec dword [rcx + 0x1a88]
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140054bb0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret