Function at 0x1400a7a20
Capabilities:
Delete file
Execute command
Terminate process

Disassembly:
push rdi
sub rsp, 0x80
mov rax, qword [0x1404a2f00]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rcx, qword [0x1404a3ed0]
call fcn.14009e5c0
lea rcx, [0x140173f1c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rcx, qword [0x1404a3ed0]
call fcn.1400a0320
movzx eax, al
test eax, eax
jne 0x1400a7a8e
lea rdx, str._n_Access_denied_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400872e0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
jmp 0x1400a7aad
lea rdx, str._n_Access_Granted_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400872e0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [0x140173f4c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_Welcome_to_Cube_Private
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400872e0
mov r9d, 0x24
lea r8, str.Cube
lea rdx, str.Load_Driver__CLOSE_FORTNITE_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 6
jne 0x1400a7b16
call fcn.140093d60
lea rcx, [0x140173fc0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140173ff0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
jmp 0x1400a7b31
lea rcx, str.C:WindowsSystem32Kdmapper.exe___NUL_2_1
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:WindowsSystem32Driver.sys___NUL_2_1
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
mov r9d, 0x40
lea r8, [0x140174080]
lea rdx, str.Open_Fortnite_then_press_OK_in_lobby
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.14009fcf0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
cmp qword [0x1404a3c78], 0
jne 0x1400a7ba3
lea rdx, str.Fortnite
lea rcx, [rsp + 0x68]
call fcn.14008be60
lea rcx, [rsp + 0x68]
call fcn.14009f1c0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1404a3c78], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x1400a7b5e
lea rcx, str.FortniteClient_Win64_Shipping.exe
call fcn.14009fdf0
mov dword [0x1404a3bd8], eax
call fcn.14009fd50
mov qword [0x1404a3bc8], rax
call fcn.1400902e0
nop
lea rax, [rsp + 0x20]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140086d80
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x30]
call fcn.14009f670
nop
lea rcx, [rsp + 0x48]
call fcn.14008ed80
nop
mov rdx, qword [0x1404a3bc8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
nop
lea rax, [rsp + 0x21]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x58]
call fcn.140086db0
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
call fcn.14009f670
nop
lea rcx, [rsp + 0x58]
call fcn.14008ed80
nop
mov rcx, qword [0x1404a3dd0]
call fcn.140094ae0
lea rdx, str._n_Debug_Stuff:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400872e0
lea rdx, [0x140174158]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400872e0
nop
jmp 0x1400a7c9d
xor eax, eax
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14014ba80
add rsp, 0x80
pop rdi
ret