Function at 0x14001123f
Capabilities:
Download url
Execute command
Receive data

Disassembly:
jmp 0x140019290
push rbp
push rdi
sub rsp, 0x208
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x46
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002a018]
xor rax, rbp
mov qword [rbp + 0x1c0], rax
lea rcx, [0x1400310fb]
call fcn.140011730
call fcn.14001171c
lea rcx, str.mode_con_cols63_lines15
call qword [sym.imp.ucrtbased.dll_system]
call fcn.140011541
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.https:__raw.githubusercontent.com_dis3j_wagnerhook_main_last.upd.txt
lea rcx, [rbp + 8]
call fcn.140011325
nop
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x48]
call fcn.1400115e1
nop
mov ecx, 0x208
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.https:__github.com_dis3j_wagnerhook_releases_download_Release_lite.dll
lea rcx, [rbp + 0x88]
call fcn.140011325
nop
lea rdx, str.C:Windows_bcastdvrdll.dll
lea rcx, [rbp + 0xc8]
call fcn.140011325
nop
lea rcx, [rbp + 0xc8]
call fcn.1400110af
mov qword [rbp + 0x1b8], rax
lea rcx, [rbp + 0x88]
call fcn.1400110af
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rbp + 0x1b8]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call fcn.1400111a9
lea rdx, str.New_DLL_succesfully_downloaded
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110d2
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xc8]
call fcn.1400110af
mov r8, rax
mov edx, dword [0x14002a458]
lea rcx, [0x14002a440]
call fcn.1400115d2
lea rdx, str.Inject_successfully_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110d2
lea rdx, str.Last_update
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110d2
lea rdx, [rbp + 0x48]
mov rcx, rax
call fcn.14001168b
lea rdx, [0x1400264bc]
mov rcx, rax
call fcn.1400110d2
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Loader_will_Closed_in_5_seconds
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110d2
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.exit
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [rbp + 0xc8]
call fcn.140011154
nop
lea rcx, [rbp + 0x88]
call fcn.140011154
nop
lea rcx, [rbp + 0x48]
call fcn.140011154
nop
lea rcx, [rbp + 8]
call fcn.140011154
lea rcx, [rbp - 0x30]
lea rdx, [0x1400259e0]
call fcn.140011604
mov rcx, qword [rbp + 0x1c0]
xor rcx, rbp
call fcn.14001137f
lea rsp, [rbp + 0x1d8]
pop rdi
pop rbp
ret