Function at 0x140004710
Capabilities:
Execute command
Get common file path
Self delete
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x448]
sub rsp, 0x520
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14001d040]
xor rax, rsp
mov qword [rbp + 0x3f0], rax
xor r13d, r13d
mov dword [rsp + 0x50], r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x158], r13
mov r8d, 4
lea rdx, str.V1.5
lea rcx, [rbp + 0x140]
call fcn.14000e670
nop
call fcn.140001d70
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
mov r8d, 0x43
lea rdx, str.https:__raw.githubusercontent.com_Jaxploit_Injecotr_main_Check.json
lea rcx, [rbp + 0x188]
call fcn.14000e670
nop
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x1a8]
call fcn.140003e90
nop
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x160]
call fcn.140003890
nop
movdqa xmm7, xmmword [0x140015fb0]
cmp byte [rbp + 0x161], r13b
je 0x140005a19
lea rcx, str.DEL_C:WindowsSystem32jdbsjwmskfna.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL_C:WindowsSystem32db1scya5.dat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x1d0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
lea rax, [rbp + 0x1d0]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140004846
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp - 0x20]
call fcn.14000e670
nop
mov r8d, 6
lea rdx, [0x1400144c0]
lea rcx, [rbp - 0x20]
call fcn.14000cdf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400048f1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp - 0x10], xmm7
mov byte [rbp - 0x20], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], r13
mov r8d, 6
lea rdx, [0x1400144c0]
lea rcx, [rbp + 0xc0]
call fcn.14000e670
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
lea rax, [rbp + 0x1d0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140004945
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp - 0x40]
call fcn.14000e670
nop
lea r9, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova r9, qword [rbp + 0xc0]
mov r14, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
sub rax, r14
mov rdi, qword [rbp + 0xd0]
cmp rdi, rax
ja 0x1400049c3
lea rax, [rdi + r14]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x40]
lea rcx, [rbx + r14]
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + r14]
mov byte [rax + rdi], 0
lea rax, [rbp - 0x40]
jmp 0x1400049d4
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x40]
call fcn.14000ec20
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140004a3f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004a3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp - 0x30], xmm7
mov byte [rbp - 0x40], 0
mov r14, qword [rbp + 0x30]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0xd
jb 0x140005d29
lea r12, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r12, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
lea r15, [r14 + 0xd]
mov ebx, 0xf
lea rdi, [rbp]
movabs rax, 0x8000000000000000
mov edx, 0x16
cmp r15, rbx
jbe 0x140004b12
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140004ad2
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.140010550
test rax, rax
je 0x140004aff
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140004b0e
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140004ae7
mov rdi, r13
jmp 0x140004b0e
cmp rcx, 0x1000
jb 0x140004b06
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005d1d
jmp 0x140004ab7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010550
mov rdi, rax
mov qword [rbp], rdi
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], rbx
movsd xmm0, qword [str.rmdir__S__Q__]
movsd qword [rdi], xmm0
mov ecx, dword [0x1400144d0]
mov dword [rdi + 8], ecx
movzx eax, byte [0x1400144d4]
mov byte [rdi + 0xc], al
lea rcx, [rdi + 0xd]
mov r8, r14
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r15], 0
mov r8d, 1
lea rdx, [0x1400141d0]
lea rcx, [rbp]
call fcn.14000cdf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140004bda
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004bd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp + 0x10], xmm7
mov byte [rbp], 0
lea rax, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova rax, qword [rbp + 0x120]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x130]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.140001ff0
nop
lea rcx, [rsp + 0x78]
call fcn.140002fa0
movzx ebx, al
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140004c7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004c79
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
test bl, bl
je 0x140004c9f
lea rcx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rcx, qword [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], r13
mov r8d, 0x24
lea rdx, str.C:WindowsSystem32jdbsjwmskfna.exe
lea rcx, [rbp + 0xa0]
call fcn.14000e670
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], r13
mov r8d, 0x20
lea rdx, str.C:WindowsSystem32db1scya5.dat
lea rcx, [rbp + 0x80]
call fcn.14000e670
nop
lea rax, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rax, qword [rbp + 0xa0]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0xb0]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.140001ff0
nop
mov edi, 0x3fc1
mov dword [rsp + 0x50], edi
lea rcx, [rsp + 0x78]
call fcn.140002fa0
test al, al
jne 0x140004e1e
lea rax, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rax, qword [rbp + 0x80]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x90]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rbp + 0x40]
call fcn.140001ff0
nop
mov edi, 0xc03fc3
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x40]
call fcn.140002fa0
test al, al
jne 0x140004e1e
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rax, qword [rbp + 0x20]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rbp - 0x20]
call fcn.140001ff0
nop
mov edi, 0x3c03fc7
mov dword [rsp + 0x50], edi
lea rcx, [rbp - 0x20]
call fcn.140002fa0
test al, al
jne 0x140004e1e
mov bl, 1
jmp 0x140004e20
xor bl, bl
movdqa xmm6, xmmword [0x140015fa0]
test dil, 4
je 0x140004e7e
and edi, 0xfffffffb
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140004e74
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004e6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp - 0x10], xmm6
mov word [rbp - 0x20], r13w
test dil, 2
je 0x140004edc
and edi, 0xfffffffd
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x140004ed2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ec5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004ec5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqa xmm6, xmmword [0x140015fa0]
movdqu xmmword [rbp + 0x50], xmm6
mov word [rbp + 0x40], r13w
test dil, 1
je 0x140004f29
and edi, 0xfffffffe
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140004f29
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004f24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
test bl, bl
je 0x140004f3b
call fcn.1400040f0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.DEL_C:WindowsSystem32jdbsjwmskfna.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.DEL_C:WindowsSystem32db1scya5.dat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x2e0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea rax, [rbp + 0x2e0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140004f82
lea rdx, [rbp + 0x2e0]
lea rcx, [rsp + 0x58]
call fcn.14000e670
nop
mov r8d, 6
lea rdx, [0x1400144c0]
lea rcx, [rsp + 0x58]
call fcn.14000cdf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 0xe
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140005026
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005021
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005021
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rsp + 0x68], xmm7
mov byte [rsp + 0x58], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
mov r8d, 6
lea rdx, [0x1400144c0]
lea rcx, [rbp - 0x20]
call fcn.14000e670
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea rax, [rbp + 0x2e0]
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x140005070
mov r8, rsi
lea rdx, [rbp + 0x2e0]
lea rcx, [rsp + 0x30]
call fcn.14000e670
nop
lea r9, [rbp - 0x20]
mov r12, qword [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova r9, r12
mov r14, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
sub rax, r14
mov rsi, qword [rbp - 0x10]
cmp rsi, rax
ja 0x1400050ef
lea rax, [r14 + rsi]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x30]
lea rcx, [rbx + r14]
mov r8, rsi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + rbx]
mov byte [rax + r14], 0
lea rax, [rsp + 0x30]
jmp 0x140005105
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.14000ec20
mov r12, qword [rbp - 0x20]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 0xf
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140005176
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005171
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005171
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rsp + 0x40], xmm7
mov byte [rsp + 0x30], 0
mov r15, qword [rbp - 0x30]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0xd
jb 0x140005d17
lea r13, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r13, qword [rbp - 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea r14, [r15 + 0xd]
mov ebx, 0xf
lea rsi, [rsp + 0x58]
cmp r14, rbx
jbe 0x14000524f
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140005209
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140010550
test rax, rax
je 0x14000523b
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000524a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005223
xor esi, esi
jmp 0x14000524a
cmp rcx, 0x1000
jb 0x140005242
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005d23
jmp 0x1400051ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010550
mov rsi, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], rbx
movsd xmm0, qword [str.rmdir__S__Q__]
movsd qword [rsi], xmm0
mov ecx, dword [0x1400144d0]
mov dword [rsi + 8], ecx
movzx eax, byte [0x1400144d4]
mov byte [rsi + 0xc], al
lea rcx, [rsi + 0xd]
mov r8, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r14], 0
bts edi, 0x10
mov r8d, 1
lea rdx, [0x1400141d0]
lea rcx, [rsp + 0x58]
call fcn.14000cdf0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
bts edi, 0x11
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140005327
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005322
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005322
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rsp + 0x68], xmm7
mov byte [rsp + 0x58], 0
lea rax, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rax, qword [rbp + 0x40]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.140001ff0
or edi, 0xc0000
lea rcx, [rsp + 0x78]
call fcn.140002fa0
movzx ebx, al
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x1400053c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400053c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400053c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
test bl, bl
je 0x1400053e7
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rcx, qword [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
mov r8d, 0x24
lea rdx, str.C:WindowsSystem32jdbsjwmskfna.exe
lea rcx, [rbp]
call fcn.14000e670
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r13
mov r8d, 0x20
lea rdx, str.C:WindowsSystem32db1scya5.dat
lea rcx, [rbp + 0x60]
call fcn.14000e670
nop
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rbp - 0x68]
call fcn.140001ff0
or edi, 0x300000
or edi, 8
mov dword [rsp + 0x50], edi
lea rcx, [rbp - 0x68]
call fcn.140002fa0
test al, al
jne 0x140005541
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rax, qword [rbp + 0x60]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x78]
call fcn.140001ff0
or edi, 0xc000000
or edi, 0x10
mov dword [rsp + 0x50], edi
lea rcx, [rsp + 0x78]
call fcn.140002fa0
test al, al
jne 0x140005541
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova rax, qword [rbp - 0x40]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x38], rax
call fcn.14000fca0
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x58]
call fcn.140001ff0
or edi, 0x30000000
or edi, 0x20
mov dword [rsp + 0x50], edi
lea rcx, [rsp + 0x58]
call fcn.140002fa0
test al, al
jne 0x140005541
mov bl, 1
jmp 0x140005543
xor bl, bl
test dil, 0x20
je 0x1400055a7
and edi, 0xffffffdf
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x140005591
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000558c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000558c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqa xmm0, xmmword [0x140015fa0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r13w
jmp 0x1400055af
movdqa xmm0, xmmword [0x140015fa0]
test dil, 0x10
je 0x14000560f
and edi, 0xffffffef
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140005604
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400055f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqa xmm0, xmmword [0x140015fa0]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r13w
test dil, 8
je 0x140005658
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x140005658
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005653
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005653
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
test bl, bl
je 0x14000566a
call fcn.1400040f0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.shutdown__r__t_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400056b6
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400056b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140005704
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400056ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140005758
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005753
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005753
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp + 0xf0], xmm7
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400057a5
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400057a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400057a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rax, qword [rbp - 8]
cmp rax, 0xf
jbe 0x1400057f5
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x1400057ec
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400057ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140010a98
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140005834
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000582e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000582e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x140005878
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005873
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005873
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], 0xf
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x1400058d5
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400058d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], 0xf
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140005932
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000592d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000592d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp + 0x110], xmm7
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000597f
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000597a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000597a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rax, qword [rbp + 0xd8]
cmp rax, 0xf
jbe 0x1400059d5
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400059cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x140005a19
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
cmp byte [rbp + 0x160], 0
jne 0x140005a91
call fcn.140003370
call fcn.140003400
call fcn.1400033a0
lea rdx, [0x140013a34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
call fcn.1400033d0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Spectra_is_currently_offline
lea rcx, [rbp - 0x68]
call fcn.14000c6d0
mov dword [rbp - 0x48], 0x19
lea rdx, [rbp - 0x68]
mov rcx, rbx
call fcn.140003800
nop
lea rcx, [rbp - 0x68]
call fcn.140005d30
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [rbp + 0x168]
mov rdi, qword [rbp + 0x168]
mov rsi, qword [rbp + 0x180]
cmp rsi, 0xf
cmova rdx, rdi
lea rcx, [rbp + 0x140]
mov rbx, qword [rbp + 0x140]
mov r14, qword [rbp + 0x158]
cmp r14, 0xf
cmova rcx, rbx
mov r8, qword [rbp + 0x150]
cmp r8, qword [rbp + 0x178]
jne 0x140005c59
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140005c59
cmp rsi, 0xf
jbe 0x140005b26
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140005b1e
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005b1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140010a98
mov qword [rbp + 0x178], r13
mov qword [rbp + 0x180], 0xf
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x140005b83
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005b7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp + 0x1b8], xmm7
mov byte [rbp + 0x1a8], 0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x140005bd6
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005bd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005bd1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010a98
movdqu xmmword [rbp + 0x198], xmm7
mov byte [rbp + 0x188], 0
cmp r14, 0xf
jbe 0x140005c1f
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140005c17
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005c17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.140010a98
mov rcx, qword [rbp + 0x3f0]
xor rcx, rsp
call fcn.140010290
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140003370
nop
call fcn.140003400
call fcn.1400033a0
lea rdx, [0x140013a34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000d100
call fcn.1400033d0
lea r8, [rbp + 0x140]
lea rdx, str.Spectra_is_not_up_to_date__Local_version:
lea rcx, [rbp + 0xc0]
call fcn.14000d9a0
nop
lea r8, str.__Latest_version:
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14000d700
nop
lea r8, [rbp + 0x168]
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.14000db00
nop
lea r8, str.__Check_discord_for_newer_download
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000d700
nop
lea rcx, [rbp - 0x68]
call fcn.140005d30
nop
lea rcx, [rsp + 0x78]
call fcn.140005d30
nop
lea rcx, [rbp + 0xc0]
call fcn.140005d30
lea rcx, [rbp - 0x20]
call fcn.140004070
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140001250
nop
call fcn.1400011b0
nop
call fcn.1400011b0
nop
call fcn.140001250
int3