Function at 0x1400149e0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x90
mov rsi, qword [0x1400d95a0]
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
movups xmmword [rbp + 0xf], xmm0
movups xmmword [rbp + 0x1f], xmm0
lea r14, [rbp + 0x5f]
movabs r12, 0xff00ff00ff00ff00
xor r15d, r15d
nop word [rax + rax]
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r14
mov rbx, qword [r14]
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x19], rax
mov qword [r14], r15
mov rcx, qword [0x1400d9608]
call qword [0x1400d9058]
nop
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r14
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x19], rax
mov qword [r14], r15
mov edx, 5
mov rcx, qword [0x1400d9608]
call qword [0x1400d91b0]
nop
mov qword [r14], rbx
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x1400d9608]
lea rcx, [rbp - 1]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140014ab8
lea rcx, [rbp - 1]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 1]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov rdi, qword [0x1400d9270]
mov rax, qword [0x1400d9608]
mov qword [rdi + 0xd8], rax
mov dword [rdi + 0x18], 0x3c888889
lea rcx, [rbp + 0x67]
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [rbp + 0x67]
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0xe04], xmm0
movd xmm0, dword [rbp + 0x6b]
cvtdq2ps xmm0, xmm0
movss dword [rdi + 0xe08], xmm0
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r14
mov rbx, qword [r14]
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x19], rax
mov qword [r14], r15
mov rax, qword [0x1400d9068]
mov ecx, 1
call rax
nop
mov qword [r14], rbx
test ax, ax
je 0x140014b49
mov byte [rdi + 0xe0c], 1
mov byte [rdi + 0x3740], 1
mov eax, dword [rdi + 0xe08]
mov dword [rdi + 0x36f0], eax
jmp 0x140014b50
mov byte [rdi + 0xe0c], 0
mov rcx, qword [0x1400d95a8]
xor r8d, r8d
mov rax, qword [rcx]
cmp byte [0x1400a34c6], r8b
je 0x140014b6d
mov edx, 1
jmp 0x140014b6f
xor edx, edx
call qword [rax + 0x40]
mov rax, qword [0x1400d9270]
test rax, rax
je 0x140014b87
mov rcx, qword [rax + 0xa8]
jmp 0x140014b8a
mov rcx, r15
cmp qword [rcx + 0x48], 0
jne 0x140014b96
call fcn.14004f2e0
call fcn.1400500b0
call fcn.140025b10
mov rcx, qword [0x1400d92b8]
call fcn.14000e260
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r14
mov rbx, qword [r14]
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x19], rax
mov qword [r14], r15
mov rax, qword [0x1400d9068]
mov ecx, 0x2d
call rax
nop
test al, 1
je 0x140014be5
cmp byte [0x1400d55a8], 0
sete byte [0x1400d55a8]
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r14
mov rax, rbx
xor rax, r12
mov qword [rbp - 0x19], rax
mov qword [r14], r15
mov rax, qword [0x1400d9068]
mov ecx, 0x78
call rax
nop
mov qword [r14], rbx
test ax, ax
jne 0x140014e0e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r14
mov rbx, qword [r14]
mov rcx, rbx
xor rcx, r12
mov qword [rbp - 0x19], rcx
mov qword [r14], r15
mov r8, qword [0x1400d9250]
lea rdx, str.Fortnite
lea rcx, str.UnrealWindow
call r8
nop
mov qword [r14], rbx
cmp byte [0x1400d55a8], 0
je 0x140014c68
cmp rdi, rax
jne 0x140014c68
mov rcx, rsi
call fcn.140014e40
call fcn.140027aa0
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov rcx, qword [0x1400d95e8]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1400d94d0]
mov edx, 1
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [0x1400d95e8]
mov rax, qword [rcx]
lea r8, [rbp - 0x29]
mov rdx, qword [0x1400d94d0]
call qword [rax + 0x190]
mov rax, qword [0x1400d9270]
mov rcx, qword [rax + 0x48c0]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r15
cmp byte [rax], cl
cmovne rcx, rax
call fcn.14004e8b0
cmp dword [rbp + 7], 0x12
jne 0x140014a30
mov rdi, qword [0x1400d9270]
test rdi, rdi
je 0x140014cf0
mov rbx, qword [rdi + 0xa8]
jmp 0x140014cf3
mov rbx, r15
call fcn.14004f7c0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140014d07
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
test rcx, rcx
je 0x140014d15
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140014d24
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x98], r15
mov qword [rdi + 0xa8], r15
mov rax, qword [0x1400d9270]
test rax, rax
je 0x140014d44
dec dword [rax + 0xfc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1400d9270]
test rax, rax
je 0x140014d62
mov rbx, qword [rax + 0xa0]
jmp 0x140014d65
mov rbx, r15
lea rdi, [rax + 8]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x140014d7f
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1400d9270]
mov qword [rdi + 0x88], r15
mov qword [rdi + 0x98], r15
test rax, rax
je 0x140014d98
dec dword [rax + 0xfc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1400d9270]
mov qword [0x1400d9270], rbx
call fcn.140023b90
mov qword [0x1400d9270], r15
test rbx, rbx
je 0x140014de3
mov rcx, rbx
call fcn.140039af0
mov rax, qword [0x1400d9270]
test rax, rax
je 0x140014dda
dec dword [rax + 0xfc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400d9608]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov al, 1
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov rcx, qword [0x1400d9608]
call qword [sym.imp.USER32.dll_DestroyWindow]
lea rcx, [0x140008900]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3