Function at 0x140001f40
Capabilities:
Acquire debug privileges
Extract resource via kernel32 functions
Set console window title

Disassembly:
push rbx
push rsi
push rdi
push r15
sub rsp, 0x78
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x60], rax
xor ebx, ebx
xor eax, eax
mov r15d, ebx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x54], rax
mov dword [rsp + 0x5c], eax
mov qword [rsp + 0x48], rbx
call qword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x140001fc6
lea ecx, [rbx + 1]
call fcn.140004288
mov r8, rax
lea rdx, [0x140021694]
lea rcx, [0x140021698]
call fcn.140004138
lea rcx, str.Vape_Launcher
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ecx, 0xfffffff5
lea edi, [rbx + 7]
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call fcn.140001c90
mov rsi, rax
test rax, rax
jne 0x140002018
lea rcx, str.____Failed_to_find_Vape_jar_n_...__n
call fcn.1400015a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14000200d
mov qword [rsp + 0x30], rbx
mov r9d, 0x400
mov dword [rsp + 0x28], ebx
mov r8d, eax
xor edx, edx
mov qword [rsp + 0x20], rbx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r15d, 1
jmp 0x140002301
mov rax, qword [rax + 8]
cmp rax, 1
jbe 0x140002039
lea rcx, str.____Multiple_jar_files_found__place_only_the_Vape_jar_in_the_same_directory_as_the_launcher_...__n
call fcn.1400015a0
mov r15d, 1
jmp 0x140002294
test rax, rax
jne 0x140002055
lea rcx, str.____No_jar_files_found__place_the_Vape_jar_in_the_same_directory_as_the_launcher_...__n
call fcn.1400015a0
mov r15d, 1
jmp 0x140002294
mov qword [rsp + 0xa8], r12
lea r8, [0x140021508]
mov edx, 0x65
mov qword [rsp + 0xb0], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x140002244
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140002244
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r12, rax
test rax, rax
je 0x140002244
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r13d, eax
test eax, eax
je 0x140002244
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0x70], r14
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x40]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140002140
lea r8, [rsp + 0x54]
mov dword [rsp + 0x50], 1
lea rdx, str.SeDebugPrivilege
mov dword [rsp + 0x5c], 2
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x140002135
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsi]
or rdi, 0xffffffffffffffff
mov rbp, qword [rax]
nop word [rax + rax]
inc rdi
cmp word [rbp + rdi*2], bx
jne 0x140002150
lea rcx, str.javaw.exe
call fcn.140001670
mov r14, rax
test rax, rax
je 0x1400021ba
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov rdx, rdi
mov rcx, rbp
call fcn.140001d30
mov rdx, qword [r14]
mov qword [rsp + 0x48], rax
test rdx, rdx
je 0x1400021a4
mov r9d, 0x8000
xor r8d, r8d
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r14
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, str.java.exe
call fcn.140001670
mov r14, rax
test rax, rax
je 0x14000221f
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov rdx, rdi
mov rcx, rbp
call fcn.140001d30
mov rdi, qword [rsp + 0x48]
mov rdx, qword [r14]
add rdi, rax
test rdx, rdx
je 0x140002207
mov r9d, 0x8000
xor r8d, r8d
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, r14
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x140002224
mov rdi, qword [rsp + 0x48]
mov r14, qword [rsp + 0x70]
mov rbp, qword [rsp + 0xa0]
test rdi, rdi
jne 0x140002284
lea rcx, str.____Did_not_inject_into_anything._Are_you_running_Minecraft__n
call fcn.1400015a0
jmp 0x140002284
lea rcx, str.____Failed_to_load_extract_DLL:_n_...__n
call fcn.1400015a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14000227e
mov qword [rsp + 0x30], rbx
mov r9d, 0x400
mov dword [rsp + 0x28], ebx
mov r8d, eax
xor edx, edx
mov qword [rsp + 0x20], rbx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r15d, 1
mov r12, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xb0]
cmp qword [rsi], rbx
je 0x1400022eb
cmp qword [rsi + 8], rbx
jbe 0x1400022d0
mov rdi, rbx
mov rax, qword [rsi]
mov rdx, qword [rdi + rax]
test rdx, rdx
je 0x1400022c1
mov r9d, 0x8000
xor r8d, r8d
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
inc ebx
add rdi, 8
movsxd rax, ebx
cmp rax, qword [rsi + 8]
jb 0x1400022a2
mov rdx, qword [rsi]
test rdx, rdx
je 0x1400022eb
mov r9d, 0x8000
xor r8d, r8d
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rsi
or rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, str.Press_ANY_key_to_exit..._n
call fcn.1400015a0
call fcn.140004828
mov eax, r15d
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140002340
add rsp, 0x78
pop r15
pop rdi
pop rsi
pop rbx
ret