Function at 0x14003e920
Capabilities:
Create process on windows
Create process suspended
Execute command
Set console window title

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0x2a0
mov rax, qword [0x140050b00]
xor rax, rsp
mov qword [rsp + 0x290], rax
lea rax, [rsp + 0x2a8]
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.140032dd8
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x80], rax
call fcn.140038830
lea rcx, str.color_0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Steam
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov dx, 4
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140038c28
mov ecx, 0x68
call fcn.14003f690
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x14003e9d6
mov rdi, qword [rsp + 0x60]
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x70], rax
jmp 0x14003e9df
mov qword [rsp + 0x70], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x90], rax
mov ecx, 0x18
call fcn.14003f690
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
je 0x14003ea1d
mov rdi, qword [rsp + 0x68]
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x78], rax
jmp 0x14003ea26
mov qword [rsp + 0x78], 0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.C:Program_Files__x86_Steam_steam.exe
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
lea rdx, str.__Welcome_To_Vole_2024_Loader___Downloading_stuff_wait..._n
lea rcx, [rsp + 0x130]
call fcn.140032884
nop
mov edx, 0x1e
lea rcx, [rsp + 0x130]
call fcn.14003e744
nop
lea rcx, [rsp + 0x130]
call fcn.140033350
lea rdx, str.__If_u_want_to_spoof_type__Spoof_SPOOF__n
lea rcx, [rsp + 0x150]
call fcn.140032884
nop
mov edx, 0xa
lea rcx, [rsp + 0x150]
call fcn.14003e744
nop
lea rcx, [rsp + 0x150]
call fcn.140033350
lea rdx, str.__If_u_want_to_Load_Driver_type__Load_LOAD__n____
lea rcx, [rsp + 0x170]
call fcn.140032884
nop
mov edx, 0xa
lea rcx, [rsp + 0x170]
call fcn.14003e744
nop
lea rcx, [rsp + 0x170]
call fcn.140033350
lea rcx, [rsp + 0x110]
call fcn.1400328dc
nop
lea rdx, [rsp + 0x110]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14002fc20
lea rdx, str.Spoof
lea rcx, [rsp + 0x110]
call fcn.14003066c
movzx eax, al
test eax, eax
jne 0x14003eb7f
lea rdx, str.SPOOF
lea rcx, [rsp + 0x110]
call fcn.14003066c
movzx eax, al
test eax, eax
je 0x14003ecaf
lea rcx, [0x140047290]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Spoofing_Serials_Wait...
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.14003a634
lea rdx, str.___Spoofing_Serials_Wait..._n
lea rcx, [rsp + 0x190]
call fcn.140032884
nop
mov edx, 0x1e
lea rcx, [rsp + 0x190]
call fcn.14003e744
nop
lea rcx, [rsp + 0x190]
call fcn.140033350
mov dword [rsp + 0x54], 0xbb8
lea rdx, [rsp + 0x54]
lea rcx, [rsp + 0x98]
call fcn.14002fa40
mov rcx, rax
call fcn.140031ea8
call fcn.1400386d4
call fcn.140034380
lea rcx, [0x1400472d8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003a614
lea rdx, [0x1400472e0]
lea rcx, [rsp + 0x1b0]
call fcn.140032884
nop
mov edx, 0xa
lea rcx, [rsp + 0x1b0]
call fcn.14003e744
nop
lea rcx, [rsp + 0x1b0]
call fcn.140033350
lea rdx, [0x1400472f0]
lea rcx, [rsp + 0x1d0]
call fcn.140032884
nop
mov edx, 0xa
lea rcx, [rsp + 0x1d0]
call fcn.14003e744
nop
lea rcx, [rsp + 0x1d0]
call fcn.140033350
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x50]
call fcn.140033d98
mov rcx, rax
call fcn.1400338ac
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0xf0]
call fcn.1400328dc
nop
lea rdx, [rsp + 0xf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14002fc20
lea rdx, str.Load
lea rcx, [rsp + 0xf0]
call fcn.14003066c
movzx eax, al
test eax, eax
jne 0x14003ed0b
lea rdx, str.LOAD
lea rcx, [rsp + 0xf0]
call fcn.14003066c
movzx eax, al
test eax, eax
je 0x14003ee3b
lea rcx, [0x140047318]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Loading_Driver_Wait...
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.14003805c
lea rdx, str.___Loading_Driver_Wait..._n
lea rcx, [rsp + 0x1f0]
call fcn.140032884
nop
mov edx, 0x1e
lea rcx, [rsp + 0x1f0]
call fcn.14003e744
nop
lea rcx, [rsp + 0x1f0]
call fcn.140033350
mov dword [rsp + 0x58], 0xbb8
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0xa0]
call fcn.14002fa40
mov rcx, rax
call fcn.140031ea8
call fcn.1400386d4
call fcn.140039a64
lea rcx, [0x140047354]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003a614
lea rdx, str.___Done_n
lea rcx, [rsp + 0x210]
call fcn.140032884
nop
mov edx, 0xa
lea rcx, [rsp + 0x210]
call fcn.14003e744
nop
lea rcx, [rsp + 0x210]
call fcn.140033350
lea rdx, str.___Reopen_Loader___n
lea rcx, [rsp + 0x230]
call fcn.140032884
nop
mov edx, 0xa
lea rcx, [rsp + 0x230]
call fcn.14003e744
nop
lea rcx, [rsp + 0x230]
call fcn.140033350
lea rax, [rsp + 0x51]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x51]
call fcn.140033e1c
mov rcx, rax
call fcn.1400338ac
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.____Waiting_For_Fortnite___Drivers_already_loaded..._n
lea rcx, [rsp + 0x250]
call fcn.140032884
nop
mov edx, 0x1e
lea rcx, [rsp + 0x250]
call fcn.14003e744
nop
lea rcx, [rsp + 0x250]
call fcn.140033350
lea rdx, [0x1400473b8]
lea rcx, [0x140051328]
call fcn.14003809c
mov qword [rsp + 0xa8], rax
lea rcx, [0x1400473e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [0x140051120], 0
jne 0x14003ef09
lea rax, [rsp + 0x2a8]
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.140032dd8
nop
lea rdx, str.Fortnite
lea rcx, [rsp + 0xe0]
call fcn.140032648
lea rcx, [rsp + 0xe0]
call fcn.14003be2c
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140051120], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0xb0]
call fcn.140033464
jmp 0x14003ee98
lea rcx, str.color_0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.____Found_Fortnite___Injecting_n
call fcn.14003eff4
lea rdx, [0x140047430]
lea rcx, [0x140051328]
call fcn.1400385a4
mov dword [0x140051338], eax
lea rcx, [0x140051328]
call fcn.14003c280
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [0x140051328]
call fcn.14003809c
mov qword [0x140051118], rax
lea rcx, str.____Hooked._Dont_Close_This_Window._n
call fcn.14003eff4
mov rdx, qword [0x140051118]
lea rcx, str.____Adress_____p__n
call fcn.14003eff4
mov edx, 0x1f4
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140039e28
call fcn.140038970
call fcn.1400396d8
call fcn.140034744
mov dword [rsp + 0x5c], 0
lea rcx, [rsp + 0xf0]
call fcn.140033350
nop
lea rcx, [rsp + 0x110]
call fcn.140033350
nop
lea rcx, [rsp + 0xc8]
call fcn.140033464
mov eax, dword [rsp + 0x5c]
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.14003f610
add rsp, 0x2a0
pop rdi
ret