Function at 0x140036e70
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x438
mov rax, qword [0x14010ad38]
xor rax, rsp
mov qword [rsp + 0x428], rax
call fcn.14001d974
call fcn.14001e308
call fcn.14000d34c
movzx eax, byte [0x14010b371]
test eax, eax
je 0x140036fd7
movzx eax, byte [0x14010b384]
test eax, eax
je 0x140036fd7
movss xmm2, dword [0x140042014]
movss xmm1, dword [0x140042018]
lea rcx, [rsp + 0x118]
call fcn.14002ca5c
xor edx, edx
mov rcx, rax
call fcn.14000f2a8
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x120]
call fcn.14002ca5c
mov qword [rsp + 0x48], rax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x128]
call fcn.14002ca5c
mov qword [rsp + 0x50], rax
mov r8, qword [rsp + 0x48]
xor edx, edx
mov rcx, qword [rsp + 0x50]
call fcn.14000f274
movss xmm2, dword [0x140042014]
movss xmm1, dword [0x140042018]
lea rcx, [rsp + 0x130]
call fcn.14002ca5c
mov dword [rsp + 0x20], 0xc0227
movss xmm3, dword [0x140041f48]
mov r8, rax
lea rdx, [0x14010b384]
lea rcx, str.Background
call fcn.1400032f0
call fcn.140009614
mov qword [rsp + 0x60], rax
call fcn.140008fe0
mov rax, qword [rax + 8]
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
call fcn.140025c00
movss xmm0, dword [0x14003cac4]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14003cac4]
movss xmm2, dword [0x14003cac4]
movss xmm1, dword [0x14003cac4]
lea rcx, [rsp + 0x258]
call fcn.14002ca94
mov rdx, rax
mov ecx, 2
call fcn.14000dd4c
mov ecx, 1
call fcn.14000da8c
call fcn.14000754c
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x408], xmm0
movss xmm0, dword [0x140041f54]
movss dword [rsp + 0x40c], xmm0
movss xmm0, dword [0x14003cac0]
movss dword [rsp + 0x410], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x414], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x418], xmm0
movss xmm0, dword [0x140041f54]
movss dword [rsp + 0x41c], xmm0
movss xmm0, dword [0x14003cac0]
movss dword [rsp + 0x420], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x424], xmm0
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x140037099
movzx eax, byte [0x14010b384]
test eax, eax
jne 0x140037087
mov dword [rsp + 0x40], 1
jmp 0x14003708f
mov dword [rsp + 0x40], 0
mov al, byte [rsp + 0x40]
mov byte [0x14010b384], al
movzx eax, byte [0x14010b384]
cmp eax, 1
jne 0x140037b84
movzx eax, byte [0x14010b384]
test eax, eax
je 0x140037b84
mov dword [rsp + 0x20], 0xff
mov r9d, 0x10
mov r8d, 0x10
mov edx, 0x10
lea rcx, [rsp + 0x268]
call fcn.14002c9c8
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x278]
mov rcx, qword [rsp + 0x68]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x158], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 2
movups xmm0, xmmword [rsp + 0x158]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov dword [rsp + 0x20], 0xff
mov r9d, 0x18
mov r8d, 0x18
mov edx, 0x18
lea rcx, [rsp + 0x288]
call fcn.14002c9c8
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x298]
mov rcx, qword [rsp + 0x70]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x168], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 3
movups xmm0, xmmword [rsp + 0x168]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov dword [rsp + 0x20], 0xff
mov r9d, 0xff
mov r8d, 0xff
mov edx, 0xff
lea rcx, [rsp + 0x2a8]
call fcn.14002c9c8
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x2b8]
mov rcx, qword [rsp + 0x78]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x178], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0
movups xmm0, xmmword [rsp + 0x178]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov dword [rsp + 0x20], 0xff
mov r9d, 0xac
mov r8d, 0x61
mov edx, 0x18
lea rcx, [rsp + 0x2c8]
call fcn.14002c9c8
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0x2d8]
mov rcx, qword [rsp + 0x80]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x188], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0x12
movups xmm0, xmmword [rsp + 0x188]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov dword [rsp + 0x20], 0xff
mov r9d, 0xac
mov r8d, 0x61
mov edx, 0x18
lea rcx, [rsp + 0x2e8]
call fcn.14002c9c8
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x2f8]
mov rcx, qword [rsp + 0x88]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x198], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 5
movups xmm0, xmmword [rsp + 0x198]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov dword [rsp + 0x20], 0xff
mov r9d, 0xac
mov r8d, 0x61
mov edx, 0x18
lea rcx, [rsp + 0x308]
call fcn.14002c9c8
mov qword [rsp + 0x90], rax
lea rdx, [rsp + 0x318]
mov rcx, qword [rsp + 0x90]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1a8], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 6
movups xmm0, xmmword [rsp + 0x1a8]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x328]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1b8], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 7
movups xmm0, xmmword [rsp + 0x1b8]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x338]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1c8], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 8
movups xmm0, xmmword [rsp + 0x1c8]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x348]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1d8], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 9
movups xmm0, xmmword [rsp + 0x1d8]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x358]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1e8], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0x15
movups xmm0, xmmword [rsp + 0x1e8]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x368]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x1f8], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0x16
movups xmm0, xmmword [rsp + 0x1f8]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x378]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x208], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0x17
movups xmm0, xmmword [rsp + 0x208]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x388]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x218], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0x18
movups xmm0, xmmword [rsp + 0x218]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x398]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x228], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0xa
movups xmm0, xmmword [rsp + 0x228]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x3a8]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x238], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0xb
movups xmm0, xmmword [rsp + 0x238]
movdqu xmmword [rax + rcx + 0xa0], xmm0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140040afc]
movss xmm2, dword [0x140040afc]
movss xmm1, dword [0x140040afc]
lea rcx, [rsp + 0x3b8]
call fcn.14002ca94
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x248], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0xc
movups xmm0, xmmword [rsp + 0x248]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov dword [rsp + 0x20], 0xff
mov r9d, 0xac
mov r8d, 0x61
mov edx, 0x18
lea rcx, [rsp + 0x3c8]
call fcn.14002c9c8
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x3d8]
mov rcx, qword [rsp + 0x98]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x138], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0x13
movups xmm0, xmmword [rsp + 0x138]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov dword [rsp + 0x20], 0xff
mov r9d, 0xac
mov r8d, 0x61
mov edx, 0x18
lea rcx, [rsp + 0x3e8]
call fcn.14002c9c8
mov qword [rsp + 0xa0], rax
lea rdx, [rsp + 0x3f8]
mov rcx, qword [rsp + 0xa0]
call fcn.14002d0f0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x148], xmm0
call fcn.140009474
mov ecx, 0x10
imul rcx, rcx, 0x14
movups xmm0, xmmword [rsp + 0x148]
movdqu xmmword [rax + rcx + 0xa0], xmm0
mov eax, 0x10
mov eax, eax
mov ecx, dword [0x14010bd90]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x14010bce8], eax
jle 0x140037825
lea rcx, [0x14010bce8]
call fcn.1400392d4
cmp dword [0x14010bce8], 0xffffffff
jne 0x140037825
movss xmm2, dword [0x14003cb38]
movss xmm1, dword [0x140042008]
lea rcx, [0x14010bce0]
call fcn.14002ca5c
nop
lea rcx, [0x14010bce8]
call fcn.140039274
mov rcx, qword [0x14010baa8]
call fcn.14000dc18
movss xmm2, dword [0x140042010]
movss xmm1, dword [0x140042010]
lea rcx, [rsp + 0xa8]
call fcn.14002ca5c
xor edx, edx
lea rcx, [rsp + 0xa8]
call fcn.14000f2a8
mov r8d, 0x2a
xor edx, edx
lea rcx, str.__Huntiez_Fortnite_External
call fcn.140003354
movss xmm2, dword [0x140041fec]
movss xmm1, dword [0x140040b60]
lea rcx, [rsp + 0xb0]
call fcn.14002ca5c
lea rcx, [rsp + 0xb0]
call fcn.14000f0f4
movss xmm2, dword [0x140041fe8]
movss xmm1, dword [0x14003cb24]
lea rcx, [rsp + 0xb8]
call fcn.14002ca5c
lea rcx, [rsp + 0xb8]
call fcn.14000f0f4
movss xmm2, dword [0x140040b6c]
movss xmm1, dword [0x14003cb34]
lea rcx, [rsp + 0xc0]
call fcn.14002ca5c
lea rdx, [rsp + 0xc0]
lea rcx, str.Aimbot
call fcn.140021fc8
movzx eax, al
test eax, eax
je 0x140037907
mov dword [0x14010bcdc], 0
movss xmm2, dword [0x140041fe8]
movss xmm1, dword [0x140041ff8]
lea rcx, [rsp + 0xc8]
call fcn.14002ca5c
lea rcx, [rsp + 0xc8]
call fcn.14000f0f4
movss xmm2, dword [0x140040b6c]
movss xmm1, dword [0x14003cb34]
lea rcx, [rsp + 0xd0]
call fcn.14002ca5c
lea rdx, [rsp + 0xd0]
lea rcx, str.Visuals
call fcn.140021fc8
movzx eax, al
test eax, eax
je 0x140037973
mov dword [0x14010bcdc], 1
movss xmm2, dword [0x140041fe8]
movss xmm1, dword [0x140042008]
lea rcx, [rsp + 0xd8]
call fcn.14002ca5c
lea rcx, [rsp + 0xd8]
call fcn.14000f0f4
movss xmm2, dword [0x140040b6c]
movss xmm1, dword [0x14003cb34]
lea rcx, [rsp + 0xe0]
call fcn.14002ca5c
lea rdx, [rsp + 0xe0]
lea rcx, str.Misc
call fcn.140021fc8
movzx eax, al
test eax, eax
je 0x1400379df
mov dword [0x14010bcdc], 2
cmp dword [0x14010bcdc], 0
jne 0x140037a97
lea rdx, [0x1400566b8]
lea rcx, str.__Visible_Check
call fcn.14002268c
lea rdx, [0x14010b389]
lea rcx, str.__Aimbot
call fcn.14002268c
lea rcx, str.__Aim_Key:
call fcn.1400273a0
movss xmm1, dword [0x14003cb64]
xorps xmm0, xmm0
call fcn.14000ebf0
mov r8d, dword [0x14010ba04]
lea rdx, [0x14002d3d8]
mov ecx, dword [0x14010b30c]
call fcn.1400330a4
lea rdx, [0x14010b37a]
lea rcx, str.__Fov_Circle
call fcn.14002268c
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x28], xmm0
lea rax, [0x140040e78]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003cb44]
movss xmm2, dword [0x14003cb04]
lea rdx, [0x140109524]
lea rcx, str.__FOV_Size
call fcn.140026e50
cmp dword [0x14010bcdc], 1
jne 0x140037b26
lea rdx, [0x14010b38e]
lea rcx, str.__Box
call fcn.14002268c
movss xmm1, dword [0x14003cb64]
xorps xmm0, xmm0
call fcn.14000ebf0
lea rdx, [0x14010b386]
lea rcx, str.__Corner_Box
call fcn.14002268c
lea rdx, [0x14010b375]
lea rcx, str.__3D_Box
call fcn.14002268c
lea rdx, [0x14010b38a]
lea rcx, str.__Skeleton
call fcn.14002268c
lea rdx, [0x14010b39d]
lea rcx, str.__Line_To_Head
call fcn.14002268c
lea rdx, [0x14010b391]
lea rcx, str.__Distance_Check
call fcn.14002268c
cmp dword [0x14010bcdc], 2
jne 0x140037b7f
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x28], xmm0
lea rax, str._.3f
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14003caf0]
movss xmm2, dword [0x14003cad0]
lea rdx, [0x14005827c]
lea rcx, str.__Box_Width_Value
call fcn.140026e50
lea rdx, [0x14010b3a3]
lea rcx, str.__Stream_Proof
call fcn.14002268c
call fcn.14000754c
call fcn.14002dda0
call fcn.140007b0c
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xe8], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x14010bb78]
call qword [rsp + 0xe8]
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xf0], rax
xor r8d, r8d
mov edx, 0x1b
mov rcx, qword [0x14010bb78]
call qword [rsp + 0xf0]
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0xf8], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x14010bb78]
call qword [rsp + 0xf8]
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0x100], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x14003cb04]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14010bb78]
call qword [rsp + pe_nt_image_headers64]
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rcx, qword [0x14010bb78]
call qword [rax + 0x148]
test eax, eax
jl 0x140037caf
call fcn.14000deac
call fcn.140008ec4
mov rcx, rax
call fcn.14001d98c
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rcx, qword [0x14010bb78]
call qword [rax + 0x150]
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14010bb78]
call qword [rsp + 0x108]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x88760868
jne 0x140037d48
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rcx, qword [0x14010bb78]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140037d48
call fcn.14001d8fc
mov rax, qword [0x14010bb78]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x110], rax
lea rdx, [0x14010b490]
mov rcx, qword [0x14010bb78]
call qword [rsp + 0x110]
call fcn.14001d794
mov rcx, qword [rsp + 0x428]
xor rcx, rsp
call fcn.140039470
add rsp, 0x438
ret