Function at 0x401650
Capabilities:
Create process on windows
Create thread
Enumerate processes
Execute command
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40355c
mov eax, dword fs:[0]
push eax
sub esp, 0x478
mov eax, dword [0x406040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 4
call fcn.00402736
mov dword [ebp - 0x230], eax
mov dword [eax], 0x401470
lea ecx, [ebp - 0x23c]
mov dword [ebp - 4], 0
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
push ecx
push 0
push eax
push 0x402650
push 0
push 0
call esi
add esp, 0x1c
mov dword [ebp - 0x240], eax
test eax, eax
je 0x401c43
push 4
mov dword [ebp - 4], 1
call fcn.00402736
mov dword [ebp - 0x230], eax
mov dword [eax], 0x401590
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 2
push ecx
push 0
push eax
push 0x402650
push 0
push 0
call esi
add esp, 0x1c
mov dword [ebp - 0x238], eax
test eax, eax
je 0x401c31
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 3
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x401749
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Failed_to_get_temporary_directory_path
call fcn.00401f70
push 0x402190
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, 1
jmp 0x4018b7
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x258]
call fcn.00401cc0
push str.taskhost.exe
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.00401df0
lea ecx, [ebp - 0x258]
call fcn.00401230
xor ebx, ebx
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
mov dword [ebp - 0x484], 0x22c
lea eax, [ebp - 0x484]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x401805
mov edi, dword [sym.imp.KERNEL32.dll_Process32NextW]
nop dword [eax]
mov eax, str.FortniteLauncher.exe
lea ecx, [ebp - 0x460]
nop dword [eax + eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4017e6
test dx, dx
je 0x4017e2
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4017e6
add ecx, 4
add eax, 4
test dx, dx
jne 0x4017c0
xor eax, eax
jmp 0x4017eb
sbb eax, eax
or eax, 1
test eax, eax
je 0x4017ff
lea eax, [ebp - 0x484]
push eax
push esi
call edi
test eax, eax
jne 0x4017b0
jmp 0x401805
mov ebx, dword [ebp - 0x47c]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
test ebx, ebx
je 0x4018ed
push 0xc
push 0xfffffffffffffff5
call edi
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Fortnite_Process_Its_Opened_Please_Close_Fortnite_and_Try_Again.
call fcn.00401f70
push 0x402190
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 7
push 0xfffffffffffffff5
call edi
push eax
call esi
push 0x9c4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x244]
xor esi, esi
cmp ecx, 7
jbe 0x40189e
mov edx, dword [ebp - 0x258]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401894
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401894
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00402766
add esp, 8
xor eax, eax
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
cmp dword [ebp - 0x234], 0
jne 0x4018e7
cmp dword [ebp - 0x23c], 0
jne 0x4018e7
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00402728
mov esp, ebp
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
mov ebx, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
nop dword [eax]
push 0x40450c
call ebx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, str.___Product_:
call fcn.00401f70
push 0xc
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.FORTNITE__2017_
call fcn.00401f70
push 7
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_n___Status_:
call fcn.00401f70
push 2
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Undetected_n_n
call fcn.00401f70
push 7
push 0xfffffffffffffff5
call edi
push eax
call esi
push 5
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___You_Can_Type__About__To_See_Developers_Names.__n
call fcn.00401f70
push 0x402190
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___Also_You_Can_Type__Instagram__To_See_Store_Hack_Team_Instagram.
call fcn.00401f70
push 7
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_n___Enter_License_Key_:
call fcn.00401f70
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x24]
push eax
call fcn.00402420
add esp, 4
lea eax, [ebp - 0x24]
mov ecx, str.UR_XX7RADRKAF2LAWOR2
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4019f7
test dl, dl
je 0x4019f3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4019f7
add eax, 2
add ecx, 2
test dl, dl
jne 0x4019d7
xor eax, eax
jmp 0x4019fc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401a58
push 0x40450c
call ebx
add esp, 4
push 2
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.License_Key_Activated____n_nNow_Enter_Fortnite_And_Press_F2_To_Activate_Mod_Menu_For_Hack
call fcn.00401f70
push 7
push 0xfffffffffffffff5
call edi
push eax
call esi
push 0xc
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._n_nAfter_like_15_minutes_or_30_minutes_the_Hack_Will_Be_Activated___
call fcn.00401f70
push 7
push 0xfffffffffffffff5
call edi
push eax
call esi
push 0x2710
jmp 0x401c1c
mov ecx, str.About
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401a80
test dl, dl
je 0x401a7c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401a80
add eax, 2
add ecx, 2
test dl, dl
jne 0x401a60
xor eax, eax
jmp 0x401a85
sbb eax, eax
or eax, 1
test eax, eax
je 0x401bb1
mov ecx, str.ABOUT
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401ab5
test dl, dl
je 0x401ab1
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401ab5
add eax, 2
add ecx, 2
test dl, dl
jne 0x401a95
xor eax, eax
jmp 0x401aba
sbb eax, eax
or eax, 1
test eax, eax
je 0x401bb1
mov ecx, str.about
lea eax, [ebp - 0x24]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401af0
test dl, dl
je 0x401aec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401af0
add eax, 2
add ecx, 2
test dl, dl
jne 0x401ad0
xor eax, eax
jmp 0x401af5
sbb eax, eax
or eax, 1
test eax, eax
je 0x401bb1
mov ecx, str.instagram
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401b25
test dl, dl
je 0x401b21
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401b25
add eax, 2
add ecx, 2
test dl, dl
jne 0x401b05
xor eax, eax
jmp 0x401b2a
sbb eax, eax
or eax, 1
test eax, eax
je 0x401b95
mov ecx, str.Instagram
lea eax, [ebp - 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401b56
test dl, dl
je 0x401b52
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401b56
add eax, 2
add ecx, 2
test dl, dl
jne 0x401b36
xor eax, eax
jmp 0x401b5b
sbb eax, eax
or eax, 1
test eax, eax
je 0x401b95
push 0x40450c
call ebx
add esp, 4
push 0xc
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Sorry_The_Key_Isnt_Correct____n
call fcn.00401f70
push 7
push 0xfffffffffffffff5
call edi
push eax
call esi
push 0x7d0
jmp 0x401c1c
push 5
push 0
push 0
push str.https:__instagram.com_store7hack
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x1388
jmp 0x401c1c
push 0x40450c
call ebx
add esp, 4
push 0xc
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Store_Hack_Team_Members_Only_2____n_n
call fcn.00401f70
push 5
push 0xfffffffffffffff5
call edi
push eax
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.MnSe_nDiscord_Username:_mnse._
call fcn.00401f70
push 0x402190
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._nL0r_nDiscord_Username:_e7.t
call fcn.00401f70
push 0x402190
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x1194
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x40450c
call ebx
add esp, 4
jmp 0x401900
push 6
mov dword [ebp - 0x234], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x23c], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3