Function at 0x14004132c
Capabilities:
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0xa0
lea rax, [rsp + 0xa8]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14003441c
nop
call fcn.14003efcc
mov dword [rsp + 0x2c], 0xd
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x48], rax
lea r8, [rsp + 0x2c]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x22]
call fcn.14003014c
lea rax, [rsp + 0x20]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x3c]
lea rcx, [rsp + 0x20]
call fcn.140034a74
mov rdx, rax
lea rcx, [rsp + 0x23]
call fcn.1400301a0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x60], rax
call fcn.14003b0d8
lea rdx, [0x14004a378]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140156758], rax
cmp qword [0x140156758], 0
jne 0x1400413f0
mov dword [rsp + 0x28], 1
jmp 0x1400413f8
mov dword [rsp + 0x28], 0
cmp dword [rsp + 0x28], 0
jne 0x140041401
jmp 0x140041462
cmp qword [0x140156758], 0
jne 0x140041462
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x140041423
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov r9d, 0x20
lea r8, str.F3_To_Exit
lea rdx, str.Waiting_For_Fortnite...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140156758], rax
jmp 0x140041401
lea rax, [rsp + 0x80]
mov qword [rsp + 0x50], rax
lea rdx, [0x14004a3c0]
mov rcx, qword [rsp + 0x50]
call fcn.140033dc8
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x58]
call fcn.14003d890
mov dword [0x14015673c], eax
lea rcx, str.C:__Program_Files__Epic_Games__Fortnite__FortniteGame__Binaries__Win64__FortniteClient_Win64_Shipping.exe
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x1401566f8], rax
cmp qword [0x1401566f8], 0
jne 0x1400414cc
xor r9d, r9d
lea r8, str.Loader.exe
lea rdx, str.Fortnite_must_be_in_your_C_Drive.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor edx, edx
mov rcx, qword [0x140156ed0]
call fcn.14003ae58
movzx eax, al
test eax, eax
je 0x14004150d
mov edx, dword [0x14015673c]
mov rcx, qword [0x140156ed0]
call fcn.140034e28
lea rdx, str.FortniteClient_Win64_Shipping.exe
mov rcx, qword [0x140156ed0]
call fcn.14003ac10
mov qword [0x140156750], rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140156760], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140156764], eax
lea rax, [rsp + 0x21]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x21]
call fcn.140034b68
mov rdx, rax
lea rcx, [rsp + 0x24]
call fcn.1400301a0
lea rcx, str.color_0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [0x140156750]
lea rcx, str.INJECTED_ENJOY__MAKE_SURE_TO_VOUCH____nForntite_Base_Adress:__p__nDiscord_Server____https:__discord.gg_61_________n_Virtual_
call fcn.1400415dc
lea rcx, [0x14004a580]
call fcn.1400415dc
mov dword [rsp + 0x30], 0x140
mov dword [rsp + 0x34], 0x1e
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x25]
call fcn.1400300fc
call fcn.14003c5e8
call fcn.140040fb8
call fcn.14003bf00
call fcn.140034eac
mov dword [rsp + 0x38], 0
lea rcx, [rsp + 0x68]
call fcn.1400347c4
mov eax, dword [rsp + 0x38]
add rsp, 0xa0
pop rdi
ret