Function at 0x14005f8d0
Capabilities:
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400b94c0]
xor rax, rsp
mov qword [rbp + 0x158], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov dword [rbp + 0x150], 0
lea rdx, [rbp + 0x150]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp + 0x150]
or edx, 4
mov dword [rbp + 0x150], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rcx, str.Aura_FN__by_sohomxz
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xa0]
call fcn.140037870
mov rcx, rax
call fcn.14004e820
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400156e0
mov rdx, rax
mov cl, 1
call fcn.14005eef0
movzx ebx, byte [rbp]
movzx edi, byte [rbp]
movzx esi, byte [rbp]
movzx r14d, byte [rbp]
movzx r15d, byte [rbp]
movzx r12d, byte [rbp]
movzx r13d, byte [rbp]
nop word [rax + rax]
xor r9d, r9d
xor r8d, r8d
movzx edx, bl
lea rcx, [rbp + 0x40]
call fcn.140037e20
mov rcx, rax
call fcn.14004e820
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.1400156e0
mov rdx, rax
xor ecx, ecx
call fcn.14005eef0
lea rdx, [rbp + 0x154]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x154]
xor r9d, r9d
xor r8d, r8d
cmp eax, 1
jne 0x14005fb8b
movzx edx, byte [rbp]
lea rcx, [rbp + 0xc0]
call fcn.140037400
mov rcx, rax
call fcn.14004e7d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xd0]
call fcn.140037590
mov rcx, rax
call fcn.14004e7d0
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.1400384e0
mov rcx, rax
call fcn.14004e820
mov r9d, 0x40
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0x258
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xe0]
call fcn.140037400
mov rcx, rax
call fcn.14004e7d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140038ee0
mov rcx, rax
call fcn.14004e9a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140039290
mov rcx, rax
call fcn.14004e9a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140039480
mov rcx, rax
call fcn.14004e820
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xf0]
call fcn.1400372c0
mov rcx, rax
call fcn.14004e7d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x100]
call fcn.140037380
mov rcx, rax
call fcn.14004e7d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x110]
call fcn.140037400
jmp 0x14005fd29
cmp eax, 2
jne 0x14005fcca
movzx edx, dil
lea rcx, [rbp + 0x120]
call fcn.140037590
mov rcx, rax
call fcn.14004e7d0
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, sil
lea rcx, [rbp + 0x40]
call fcn.1400374c0
mov rcx, rax
call fcn.14004e8c0
mov r9d, 0x40
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xc8
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
xor r9d, r9d
xor r8d, r8d
movzx edx, r14b
lea rcx, [rbp + 0x130]
call fcn.140037400
mov rcx, rax
call fcn.14004e7d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x1400bfc78]
call fcn.140001b10
test al, al
je 0x14005fe41
lea rdx, str.FortniteClient_Win64_Shipping.exe
mov rcx, qword [0x1400bfc78]
call fcn.140001a50
mov dword [0x1400b9c60], eax
test eax, eax
je 0x14005fdeb
mov rcx, qword [0x1400bfc78]
call fcn.140001950
mov qword [0x1400b9c68], rax
test rax, rax
je 0x14005fd95
mov rcx, qword [0x1400bfc78]
call fcn.1400019d0
test al, al
je 0x14005fd3f
call fcn.1400018a0
call fcn.140057450
mov edx, 0x64
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, [rbp]
lea rcx, [rbp + 0x30]
call fcn.140037bd0
nop
mov rcx, rax
call fcn.14004f1d0
nop
lea rcx, [rbp + 0x30]
call fcn.140046b60
call fcn.14004e1a0
call fcn.14004f210
call fcn.140058fc0
jmp 0x14005f9b0
movzx edx, r15b
lea rcx, [rbp + 0x140]
call fcn.140037720
mov rcx, rax
call fcn.14004e7d0
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, r12b
lea rcx, [rbp + 0x40]
call fcn.140037bf0
mov rcx, rax
call fcn.14004e8c0
mov r9d, 0x10
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor r9d, r9d
xor r8d, r8d
movzx edx, r13b
lea rcx, [rbp + 0x10]
call fcn.140037400
mov rcx, rax
call fcn.14004e7d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14005f9b0
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037720
mov rcx, rax
call fcn.14004e7d0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037a80
mov rcx, rax
call fcn.14004e8c0
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037720
mov rcx, rax
call fcn.14004e7d0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037950
mov rcx, rax
call fcn.14004e8c0
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037720
mov rcx, rax
call fcn.14004e7d0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037760
mov rcx, rax
call fcn.14004e820
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037720
mov rcx, rax
call fcn.14004e7d0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037650
mov rcx, rax
call fcn.14004e8c0
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3