Function at 0x140011217
Capabilities:
Download url
Execute command
Receive data

Disassembly:
jmp 0x140017d70
push rbp
push rdi
sub rsp, 0x208
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x46
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140028018]
xor rax, rbp
mov qword [rbp + 0x1c0], rax
lea rcx, [0x14002e0fa]
call fcn.14001168b
call fcn.1400114ce
lea rdx, str.https:__raw.githubusercontent.com_dis3j_wagnerhook_main_last.upd.txt
lea rcx, [rbp + 8]
call fcn.1400112e4
nop
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x48]
call fcn.14001155a
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x208
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.https:__github.com_dis3j_wagnerhook_releases_download_Release_cheat.dll
lea rcx, [rbp + 0x88]
call fcn.1400112e4
nop
lea rdx, str.C:Windows_bcastdvrdll.dll
lea rcx, [rbp + 0xc8]
call fcn.1400112e4
nop
lea rcx, [rbp + 0xc8]
call fcn.1400110a0
mov qword [rbp + 0x1b8], rax
lea rcx, [rbp + 0x88]
call fcn.1400110a0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rbp + 0x1b8]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call fcn.14001118b
lea rdx, str.New_DLL_succesfully_downloaded
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110c3
lea rdx, [0x140011046]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xc8]
call fcn.1400110a0
mov r8, rax
mov edx, dword [0x140028458]
lea rcx, [0x140028440]
call fcn.14001154b
lea rdx, str.Inject_successfully_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110c3
lea rdx, str.Last_update
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110c3
lea rdx, [rbp + 0x48]
mov rcx, rax
call fcn.1400115fa
lea rdx, [0x140023ad8]
mov rcx, rax
call fcn.1400110c3
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Loader_will_Closed_in_5_seconds
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110c3
lea rdx, [0x140011046]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.exit
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [rbp + 0xc8]
call fcn.140011140
nop
lea rcx, [rbp + 0x88]
call fcn.140011140
nop
lea rcx, [rbp + 0x48]
call fcn.140011140
nop
lea rcx, [rbp + 8]
call fcn.140011140
lea rcx, [rbp - 0x30]
lea rdx, [0x1400233a0]
call fcn.14001157d
mov rcx, qword [rbp + 0x1c0]
xor rcx, rbp
call fcn.140011339
lea rsp, [rbp + 0x1d8]
pop rdi
pop rbp
ret