Function at 0x14005f9d0
Capabilities:
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x160
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14010c540]
xor rax, rsp
mov qword [rbp + 0x118], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov dword [rbp + 0x110], 0
lea rdx, [rbp + 0x110]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp + 0x110]
or edx, 4
mov dword [rbp + 0x110], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rcx, str.Storm_Private
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xa0]
call fcn.140037810
mov rcx, rax
call fcn.14004e9d0
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140015690
mov rdx, rax
mov cl, 1
call fcn.14005eff0
movzx ebx, byte [rbp]
movzx edi, byte [rbp]
movzx esi, byte [rbp]
movzx r14d, byte [rbp]
movzx r15d, byte [rbp]
movzx r12d, byte [rbp]
movzx r13d, byte [rbp]
nop word [rax + rax]
xor r9d, r9d
xor r8d, r8d
movzx edx, bl
lea rcx, [rbp + 0x40]
call fcn.140037c80
mov rcx, rax
call fcn.14004e9d0
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140015690
mov rdx, rax
xor ecx, ecx
call fcn.14005eff0
lea rdx, [rbp + 0x114]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x114]
xor r9d, r9d
xor r8d, r8d
cmp eax, 1
jne 0x14005fbc5
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140038060
mov rcx, rax
call fcn.14004eb50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140038410
mov rcx, rax
call fcn.14004eb50
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140038840
mov rcx, rax
call fcn.14004e9d0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xc0]
call fcn.140038c00
mov rcx, rax
call fcn.14004e980
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xd0]
call fcn.140038f20
mov rcx, rax
call fcn.14004e980
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
jmp 0x14005fab0
cmp eax, 2
jne 0x14005fd04
movzx edx, dil
lea rcx, [rbp + 0xe0]
call fcn.1400393f0
mov rcx, rax
call fcn.14004e980
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, sil
lea rcx, [rbp + 0x40]
call fcn.140039260
mov rcx, rax
call fcn.14004ea70
mov r9d, 0x40
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
xor r9d, r9d
xor r8d, r8d
movzx edx, r14b
lea rcx, [rbp + 0xf0]
call fcn.1400372f0
mov rcx, rax
call fcn.14004e980
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x140112ce0]
call fcn.140001af0
test al, al
je 0x14005fe7b
lea rdx, str.FortniteClient_Win64_Shipping.exe
mov rcx, qword [0x140112ce0]
call fcn.140001a30
mov dword [0x14010cce0], eax
test eax, eax
je 0x14005fe25
mov rcx, qword [0x140112ce0]
call fcn.140001930
mov qword [0x14010cce8], rax
test rax, rax
je 0x14005fdcf
mov rcx, qword [0x140112ce0]
call fcn.1400019b0
test al, al
je 0x14005fd79
call fcn.140001880
call fcn.140057560
mov edx, 0x64
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, [rbp]
lea rcx, [rbp + 0x30]
call fcn.1400377c0
nop
mov rcx, rax
call fcn.14004f380
nop
lea rcx, [rbp + 0x30]
call fcn.140046a30
call fcn.14004e080
call fcn.14004f3c0
call fcn.1400590d0
jmp 0x14005fab0
movzx edx, r15b
lea rcx, [rbp + 0x100]
call fcn.140037440
mov rcx, rax
call fcn.14004e980
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, r12b
lea rcx, [rbp + 0x40]
call fcn.1400378f0
mov rcx, rax
call fcn.14004ea70
mov r9d, reloc.WS2_32.dll_recv
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor r9d, r9d
xor r8d, r8d
movzx edx, r13b
lea rcx, [rbp + 0x10]
call fcn.1400372f0
mov rcx, rax
call fcn.14004e980
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14005fab0
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037440
mov rcx, rax
call fcn.14004e980
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037670
mov rcx, rax
call fcn.14004ea70
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037440
mov rcx, rax
call fcn.14004e980
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037560
mov rcx, rax
call fcn.14004ea70
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037440
mov rcx, rax
call fcn.14004e980
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037480
mov rcx, rax
call fcn.14004e9d0
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.140037440
mov rcx, rax
call fcn.14004e980
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037370
mov rcx, rax
call fcn.14004ea70
mov r9d, reloc.WS2_32.dll_recv
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3