Function at 0x140001fc0
Capabilities:
Acquire debug privileges
Extract resource via kernel32 functions
Set console window title

Disassembly:
push rbx
push rsi
push rdi
push r15
sub rsp, 0x78
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x60], rax
xor ebx, ebx
xorps xmm0, xmm0
mov r15d, ebx
mov qword [rsp + 0x40], rbx
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x48], rbx
call qword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x14000203f
lea ecx, [rbx + 1]
call fcn.140006fb8
mov r8, rax
lea rdx, [0x140022a44]
lea rcx, [0x140022a48]
call fcn.140006e68
lea rcx, str.Vape_Launcher
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ecx, 0xfffffff5
lea edi, [rbx + 7]
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x3000
mov r8d, 0x20a
mov rsi, rbx
lea rcx, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
je 0x1400023c6
xor edx, edx
mov r8d, 0x20a
mov rcx, rax
call fcn.140018830
mov r8d, 0x104
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400020b3
mov edx, 0x5c
mov rcx, rdi
call fcn.14000376c
test rax, rax
je 0x1400020b3
mov rcx, rdi
mov word [rax], bx
call fcn.1400019e0
mov rsi, rax
xor r8d, r8d
mov r9d, 0x8000
mov rdx, rdi
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
test rsi, rsi
je 0x1400023c6
mov rax, qword [rsi + 8]
mov qword [rsp + 0x70], r14
cmp rax, 1
jbe 0x1400020f8
lea rcx, str.____Multiple_jar_files_found__place_only_the_Vape_jar_in_the_same_directory_as_the_launcher_...__n
call fcn.140001430
mov r15d, 1
jmp 0x14000234f
test rax, rax
jne 0x140002114
lea rcx, str.____No_jar_files_found__place_the_Vape_jar_in_the_same_directory_as_the_launcher_...__n
call fcn.140001430
mov r15d, 1
jmp 0x14000234f
mov qword [rsp + 0xa8], r12
lea r8, [0x1400228b8]
mov edx, 0x65
mov qword [rsp + 0xb0], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x1400022ff
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400022ff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r12, rax
test rax, rax
je 0x1400022ff
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r13d, eax
test eax, eax
je 0x1400022ff
mov qword [rsp + 0xa0], rbp
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x40]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400021fa
lea r8, [rsp + 0x54]
mov dword [rsp + 0x50], 1
lea rdx, str.SeDebugPrivilege
mov dword [rsp + 0x5c], 2
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x1400021ef
mov rcx, qword [rsp + 0x40]
lea r8, [rsp + 0x50]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsi]
mov rdi, 0xffffffffffffffff
mov rbp, qword [rax]
nop word [rax + rax]
inc rdi
cmp word [rbp + rdi*2], bx
jne 0x140002210
lea rcx, str.javaw.exe
call fcn.1400015a0
mov r14, rax
test rax, rax
je 0x14000227a
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov rdx, rdi
mov rcx, rbp
call fcn.140001db0
mov rdx, qword [r14]
mov qword [rsp + 0x48], rax
test rdx, rdx
je 0x140002264
xor r8d, r8d
mov r9d, 0x8000
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor r8d, r8d
mov r9d, 0x8000
mov rdx, r14
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
lea rcx, str.java.exe
call fcn.1400015a0
mov r14, rax
test rax, rax
je 0x1400022df
mov r9, r13
mov qword [rsp + 0x20], rax
mov r8, r12
mov rdx, rdi
mov rcx, rbp
call fcn.140001db0
mov rdi, qword [rsp + 0x48]
mov rdx, qword [r14]
add rdi, rax
test rdx, rdx
je 0x1400022c7
xor r8d, r8d
mov r9d, 0x8000
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor r8d, r8d
mov r9d, 0x8000
mov rdx, r14
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x1400022e4
mov rdi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0xa0]
test rdi, rdi
jne 0x14000233f
lea rcx, str.____Did_not_inject_into_anything._Are_you_running_Minecraft__n
call fcn.140001430
jmp 0x14000233f
lea rcx, str.____Failed_to_load_extract_DLL:_n_...__n
call fcn.140001430
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140002339
mov qword [rsp + 0x30], rbx
mov r9d, 0x400
mov dword [rsp + 0x28], ebx
mov r8d, eax
xor edx, edx
mov qword [rsp + 0x20], rbx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r15d, 1
mov r12, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xb0]
mov r14, rsi
cmp qword [rsi], rbx
je 0x1400023a9
cmp qword [rsi + 8], rbx
jbe 0x14000238e
mov rdi, rbx
mov rax, qword [rsi]
mov rdx, qword [rdi + rax]
test rdx, rdx
je 0x14000237f
xor r8d, r8d
mov r9d, 0x8000
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
inc ebx
add rdi, 8
movsxd rax, ebx
cmp rax, qword [rsi + 8]
jb 0x140002360
mov rdx, qword [r14]
test rdx, rdx
je 0x1400023a9
xor r8d, r8d
mov r9d, 0x8000
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor r8d, r8d
mov r9d, 0x8000
mov rdx, r14
lea rcx, [r8 - 1]
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r14, qword [rsp + 0x70]
jmp 0x140002406
lea rcx, str.____Failed_to_find_Vape_jar_n_...__n
call fcn.140001430
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x140002400
mov qword [rsp + 0x30], rbx
mov r9d, 0x400
mov dword [rsp + 0x28], ebx
mov r8d, eax
xor edx, edx
mov qword [rsp + 0x20], rbx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
mov r15d, 1
lea rcx, str.Press_ANY_key_to_exit..._n
call fcn.140001430
call fcn.140007558
mov eax, r15d
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140002450
add rsp, 0x78
pop r15
pop rdi
pop rsi
pop rbx
ret