Function at 0x14005f6b0
Capabilities:
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400b94c0]
xor rax, rsp
mov qword [rbp + 0x158], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov dword [rbp + 0x150], 0
lea rdx, [rbp + 0x150]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp + 0x150]
or edx, 4
mov dword [rbp + 0x150], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rcx, str.spooky_free
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xa0]
call fcn.1400377f0
mov rcx, rax
call fcn.14004e6f0
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400156b0
mov rdx, rax
mov cl, 1
call fcn.14005ecd0
movzx ebx, byte [rbp]
movzx edi, byte [rbp]
movzx esi, byte [rbp]
movzx r14d, byte [rbp]
movzx r15d, byte [rbp]
movzx r12d, byte [rbp]
movzx r13d, byte [rbp]
nop word [rax + rax]
xor r9d, r9d
xor r8d, r8d
movzx edx, bl
lea rcx, [rbp + 0x40]
call fcn.140037da0
mov rcx, rax
call fcn.14004e6f0
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.1400156b0
mov rdx, rax
xor ecx, ecx
call fcn.14005ecd0
lea rdx, [rbp + 0x154]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x154]
xor r9d, r9d
xor r8d, r8d
cmp eax, 1
jne 0x14005f96b
movzx edx, byte [rbp]
lea rcx, [rbp + 0xc0]
call fcn.140037380
mov rcx, rax
call fcn.14004e6a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xd0]
call fcn.140037510
mov rcx, rax
call fcn.14004e6a0
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140038460
mov rcx, rax
call fcn.14004e6f0
mov r9d, 0x40
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0x258
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xe0]
call fcn.140037380
mov rcx, rax
call fcn.14004e6a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140038e60
mov rcx, rax
call fcn.14004e870
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.1400391b0
mov rcx, rax
call fcn.14004e870
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.1400393a0
mov rcx, rax
call fcn.14004e6f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0xf0]
call fcn.140037240
mov rcx, rax
call fcn.14004e6a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x100]
call fcn.140037300
mov rcx, rax
call fcn.14004e6a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x110]
call fcn.140037380
jmp 0x14005fb09
cmp eax, 2
jne 0x14005faaa
movzx edx, dil
lea rcx, [rbp + 0x120]
call fcn.140037510
mov rcx, rax
call fcn.14004e6a0
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, sil
lea rcx, [rbp + 0x40]
call fcn.140037440
mov rcx, rax
call fcn.14004e790
mov r9d, 0x40
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xc8
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
xor r9d, r9d
xor r8d, r8d
movzx edx, r14b
lea rcx, [rbp + 0x130]
call fcn.140037380
mov rcx, rax
call fcn.14004e6a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x1400bfc78]
call fcn.140001b10
test al, al
je 0x14005fc21
lea rdx, str.FortniteClient_Win64_Shipping.exe
mov rcx, qword [0x1400bfc78]
call fcn.140001a50
mov dword [0x1400b9c60], eax
test eax, eax
je 0x14005fbcb
mov rcx, qword [0x1400bfc78]
call fcn.140001950
mov qword [0x1400b9c68], rax
test rax, rax
je 0x14005fb75
mov rcx, qword [0x1400bfc78]
call fcn.1400019d0
test al, al
je 0x14005fb1f
call fcn.1400018a0
call fcn.140057240
mov edx, 0x64
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, [rbp]
lea rcx, [rbp + 0x30]
call fcn.140037b50
nop
mov rcx, rax
call fcn.14004f070
nop
lea rcx, [rbp + 0x30]
call fcn.140046a70
call fcn.14004e0c0
call fcn.14004f0b0
call fcn.140058db0
jmp 0x14005f790
movzx edx, r15b
lea rcx, [rbp + 0x140]
call fcn.1400376a0
mov rcx, rax
call fcn.14004e6a0
mov qword [rbp + 8], rax
xor r9d, r9d
xor r8d, r8d
movzx edx, r12b
lea rcx, [rbp + 0x40]
call fcn.140037b70
mov rcx, rax
call fcn.14004e790
mov r9d, 0x10
mov r8, qword [rbp + 8]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor r9d, r9d
xor r8d, r8d
movzx edx, r13b
lea rcx, [rbp + 0x10]
call fcn.140037380
mov rcx, rax
call fcn.14004e6a0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14005f790
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.1400376a0
mov rcx, rax
call fcn.14004e6a0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.140037a00
mov rcx, rax
call fcn.14004e790
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.1400376a0
mov rcx, rax
call fcn.14004e6a0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.1400378d0
mov rcx, rax
call fcn.14004e790
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.1400376a0
mov rcx, rax
call fcn.14004e6a0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.1400376e0
mov rcx, rax
call fcn.14004e6f0
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x10]
call fcn.1400376a0
mov rcx, rax
call fcn.14004e6a0
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
movzx edx, byte [rbp]
lea rcx, [rbp + 0x40]
call fcn.1400375d0
mov rcx, rax
call fcn.14004e790
mov r9d, 0x10
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3