Function at 0x1400015e2
Capabilities:
Execute command
Self delete

Disassembly:
push rbp
push rdi
push rsi
push rbx
mov eax, 0x3028
call fcn.140002ea0
sub rsp, rax
lea rbp, [rsp + 0x80]
call dbg.__main
mov qword [rbp + 0x2ba0], 0
mov qword [rbp + 0x2ba8], 0
lea rdx, [rbp + 0x2bb0]
mov eax, 0
mov ecx, 0x7e
mov rdi, rdx
rep stosq qword [rdi], rax
mov qword [rbp + 0x27a0], 0
mov qword [rbp + 0x27a8], 0
lea rdx, [rbp + 0x27b0]
mov eax, 0
mov ecx, 0x7e
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, str.Do_you_want_to_install_the_mods__nY___Yes____APPDATA_____.minecraft___nN___No_n
lea rcx, [0x14001b04d]
call dbg.printf
lea rax, [rbp + 0x27a0]
mov rdx, rax
lea rcx, [0x14001b04d]
call dbg.scanf
movzx eax, byte [rbp + 0x27a0]
cmp al, 0x59
je 0x140001699
movzx eax, byte [rbp + 0x27a0]
cmp al, 0x79
jne 0x1400016eb
movzx eax, byte [rbp + 0x27a1]
test al, al
jne 0x1400016eb
lea rax, [rbp + 0x2ba0]
mov rcx, rax
call sym.strlen
mov rdx, rax
lea rax, [rbp + 0x2ba0]
add rax, rdx
movabs rbx, 0x4154414450504125
movabs rsi, 0x63656e696d2e5c25
mov qword [rax], rbx
mov qword [rax + 8], rsi
mov dword [rax + 0x10], 0x74666172
mov byte [rax + 0x14], 0
jmp 0x14000177c
movzx eax, byte [rbp + 0x27a0]
cmp al, 0x61
jne 0x140001772
movzx eax, byte [rbp + 0x27a1]
cmp al, 0x64
jne 0x140001772
movzx eax, byte [rbp + 0x27a2]
cmp al, 0x76
jne 0x140001772
movzx eax, byte [rbp + 0x27a3]
cmp al, 0x61
jne 0x140001772
movzx eax, byte [rbp + 0x27a4]
cmp al, 0x6e
jne 0x140001772
movzx eax, byte [rbp + 0x27a5]
cmp al, 0x63
jne 0x140001772
movzx eax, byte [rbp + 0x27a6]
cmp al, 0x65
jne 0x140001772
movzx eax, byte [rbp + 0x27a7]
cmp al, 0x64
jne 0x140001772
movzx eax, byte [rbp + 0x27a8]
test al, al
jne 0x140001772
lea rcx, str.Enter_a_directory:_n
call dbg.printf
lea rax, [rbp + 0x2ba0]
mov rdx, rax
lea rcx, [0x14001b04d]
call dbg.scanf
jmp 0x14000177c
mov eax, 0
jmp 0x140001eec
movabs rax, 0x6d5c25504d455425
movabs rdx, 0x72635f6c75707369
mov qword [rbp + 0x23a0], rax
mov qword [rbp + 0x23a8], rdx
movabs rax, 0x7275735f65746165
movabs rdx, 0x6f6d5c6c61766976
mov qword [rbp + 0x23b0], rax
mov qword [rbp + 0x23b8], rdx
movabs rax, 0x6f6c6e776f645f64
movabs rdx, 0x7461622e72656461
mov qword [rbp + 0x23c0], rax
mov qword [rbp + 0x23c8], rdx
mov qword [rbp + 0x23d0], 0
mov qword [rbp + 0x23d8], 0
lea rdx, [rbp + 0x23e0]
mov eax, 0
mov ecx, 0x78
mov rdi, rdx
rep stosq qword [rdi], rax
lea rcx, str.mkdir__TEMP_mispul_create_survival
call sym.system
movabs rax, 0x207269646b6d
mov edx, 0
mov qword [rbp + 0x1fa0], rax
mov qword [rbp + 0x1fa8], rdx
lea rdx, [rbp + 0x1fb0]
mov eax, 0
mov ecx, 0x7e
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x2ba0]
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call sym.strlen
mov rdx, rax
lea rax, [rbp + 0x1fa0]
add rax, rdx
mov dword [rax], 0x646f6d5c
mov word [rax + 4], 0x73
lea rax, [rbp + 0x1fa0]
mov rcx, rax
call sym.system
movabs rax, 0x206463206f686365
mov edx, 0
mov qword [rbp + 0x1ba0], rax
mov qword [rbp + 0x1ba8], rdx
lea rdx, [rbp + 0x1bb0]
mov eax, 0
mov ecx, 0x7e
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x2ba0]
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call sym.strlen
mov rdx, rax
lea rax, [rbp + 0x1ba0]
add rax, rdx
movabs rbx, 0x3e3e2073646f6d5c
mov qword [rax], rbx
mov word [rax + 8], 0x20
lea rdx, [rbp + 0x23a0]
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x1ba0]
mov rcx, rax
call sym.system
movabs rbx, 0x6c6564206f686365
movabs rsi, 0x3e3e202a20712f20
mov qword [rbp + 0x17a0], rbx
mov qword [rbp + 0x17a8], rsi
mov qword [rbp + 0x17b0], 0x20
mov qword [rbp + 0x17b8], 0
lea rdx, [rbp + 0x17c0]
mov eax, 0
mov ecx, 0x7c
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x23a0]
lea rax, [rbp + 0x17a0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x17a0]
mov rcx, rax
call sym.system
movabs rax, 0x206463206f686365
movabs rdx, 0x6d5c25504d455425
mov qword [rbp + 0x13a0], rax
mov qword [rbp + 0x13a8], rdx
movabs rax, 0x72635f6c75707369
movabs rdx, 0x7275735f65746165
mov qword [rbp + 0x13b0], rax
mov qword [rbp + 0x13b8], rdx
movabs rax, 0x3e3e206c61766976
mov edx, 0x20
mov qword [rbp + 0x13c0], rax
mov qword [rbp + 0x13c8], rdx
lea rdx, [rbp + 0x13d0]
mov eax, 0
mov ecx, 0x7a
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x23a0]
lea rax, [rbp + 0x13a0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x13a0]
mov rcx, rax
call sym.system
movabs rax, 0x776f70206f686365
movabs rdx, 0x206c6c6568737265
mov qword [rbp + 0xfa0], rax
mov qword [rbp + 0xfa8], rdx
movabs rax, 0x646e616d6d6f432d
movabs rdx, 0x766e497b20262220
mov qword [rbp + 0xfb0], rax
mov qword [rbp + 0xfb8], rdx
movabs rax, 0x526265572d656b6f
movabs rdx, 0x2d20747365757165
mov qword [rbp + 0xfc0], rax
mov qword [rbp + 0xfc8], rdx
movabs rax, 0x7468225c20697255
movabs rdx, 0x77772f2f3a737074
mov qword [rbp + 0xfd0], rax
mov qword [rbp + 0xfd8], rdx
movabs rax, 0x6f62706f72642e77
movabs rdx, 0x63732f6d6f632e78
mov qword [rbp + 0xfe0], rax
mov qword [rbp + 0xfe8], rdx
movabs rax, 0x6631682f69662f6c
movabs rdx, 0x75637477746b7632
mov qword [rbp + 0xff0], rax
mov qword [rbp + 0xff8], rdx
movabs rax, 0x3177723966697939
movabs rdx, 0x2e73646f6d2f346f
mov qword [rbp + 0x1000], rax
mov qword [rbp + 0x1008], rdx
movabs rax, 0x656b6c723f70697a
movabs rdx, 0x7231663470663d79
mov qword [rbp + 0x1010], rax
mov qword [rbp + 0x1018], rdx
movabs rax, 0x7a75396b65347834
movabs rdx, 0x387a323172766369
mov qword [rbp + 0x1020], rax
mov qword [rbp + 0x1028], rdx
movabs rax, 0x6c64222622786a61
movabs rdx, 0x754f2d20225c313d
mov qword [rbp + 0x1030], rax
mov qword [rbp + 0x1038], rdx
movabs rax, 0x225c20656c694674
movabs rdx, 0x70697a2e73646f6d
mov qword [rbp + 0x1040], rax
mov qword [rbp + 0x1048], rdx
movabs rax, 0x203e3e20227d225c
mov edx, 0
mov qword [rbp + 0x1050], rax
mov qword [rbp + 0x1058], rdx
lea rdx, [rbp + 0x1060]
mov eax, 0
mov ecx, 0x68
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x23a0]
lea rax, [rbp + 0xfa0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0xfa0]
mov rcx, rax
call sym.system
movabs rax, 0x726174206f686365
movabs rdx, 0x646f6d2066782d20
mov qword [rbp + 0xba0], rax
mov qword [rbp + 0xba8], rdx
movabs rax, 0x3e3e2070697a2e73
mov edx, 0x20
mov qword [rbp + 0xbb0], rax
mov qword [rbp + 0xbb8], rdx
lea rdx, [rbp + 0xbc0]
mov eax, 0
mov ecx, 0x7c
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x23a0]
lea rax, [rbp + 0xba0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0xba0]
mov rcx, rax
call sym.system
movabs rax, 0x706f63206f686365
movabs rdx, 0x72616a2e2a222079
mov qword [rbp + 0x7a0], rax
mov qword [rbp + 0x7a8], rdx
mov qword [rbp + 0x7b0], 0x222022
mov qword [rbp + 0x7b8], 0
lea rdx, [rbp + 0x7c0]
mov eax, 0
mov ecx, 0x7c
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x2ba0]
lea rax, [rbp + 0x7a0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x7a0]
mov rcx, rax
call sym.strlen
mov rdx, rax
lea rax, [rbp + 0x7a0]
add rax, rdx
movabs rdi, 0x3e202273646f6d5c
mov qword [rax], rdi
mov word [rax + 8], 0x203e
mov byte [rax + 0xa], 0
lea rdx, [rbp + 0x23a0]
lea rax, [rbp + 0x7a0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x7a0]
mov rcx, rax
call sym.system
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x3a8], rsi
mov qword [rbp + 0x3b0], 0x20
mov qword [rbp + 0x3b8], 0
lea rdx, [rbp + 0x3c0]
mov eax, 0
mov ecx, 0x7c
mov rdi, rdx
rep stosq qword [rdi], rax
lea rdx, [rbp + 0x23a0]
lea rax, [rbp + 0x3a0]
mov rcx, rax
call sym.strcat
lea rax, [rbp + 0x3a0]
mov rcx, rax
call sym.system
lea rax, [rbp + 0x23a0]
mov rcx, rax
call sym.system
lea rcx, [0x14001b08c]
call dbg.printf
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x58], 0
lea rdx, [rbp - 0x50]
mov eax, 0
mov ecx, 0x7e
mov rdi, rdx
rep stosq qword [rdi], rax
lea rcx, str.Do_you_have_java_installed__nY___Yes_nN___No_n
call dbg.printf
lea rax, [rbp - 0x60]
mov rdx, rax
lea rcx, [0x14001b04d]
call dbg.scanf
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.strlen
cmp rax, 1
jbe 0x140001e2c
mov eax, 0
jmp 0x140001eec
movzx eax, byte [rbp - 0x60]
cmp al, 0x59
je 0x140001e3c
movzx eax, byte [rbp - 0x60]
cmp al, 0x79
jne 0x140001e4a
lea rcx, [0x14001b0bc]
call dbg.printf
jmp 0x140001e87
movzx eax, byte [rbp - 0x60]
cmp al, 0x4e
je 0x140001e5a
movzx eax, byte [rbp - 0x60]
cmp al, 0x6e
jne 0x140001e80
lea rcx, str.powershell__Command___Invoke_WebRequest__Uri__https:__www.dropbox.com_scl_fi_0d6yljk1l9tlw29l13aiv_jdk_17_windows_x64_bin.exe_rlkeyrsag7q0wcpyoqbfuwerv4en4s__dl1___OutFile___TEMP_mispul_create_survivaljdk_17_windows_x64_bin.exe__
call sym.system
lea rcx, str._TEMP_mispul_create_survivaljdk_17_windows_x64_bin.exe
call sym.system
lea rcx, str.del__q__TEMP_mispul_create_survival
call sym.system
jmp 0x140001e87
mov eax, 0
jmp 0x140001eec
lea rcx, [0x14001b08c]
call dbg.printf
lea rcx, str.Installing_forge...
call dbg.printf
lea rcx, str.echo_cd__TEMP_mispul_create_survival_____TEMP_mispul_create_survival_forge_downloader.bat
call sym.system
lea rcx, str.echo_powershell__Command___Invoke_WebRequest__Uri__https:__www.dropbox.com_scl_fi_457u3io80ww453kfp5m0w_forge_1.19.2_43.3.2_installer.jar_rlkeyh8177jq7cklxgtg08fb7nanbo__dl1___OutFile__forge_1.19.2_43.3.2_installer.jar_______TEMP_mispul_create_survival_forge_downloader.bat
call sym.system
lea rcx, str.echo_java__jar_forge_1.19.2_43.3.2_installer.jar_____TEMP_mispul_create_survival_forge_downloader.bat
call sym.system
lea rcx, str._TEMP_mispul_create_survival_forge_downloader.bat
call sym.system
lea rcx, str.del__q__TEMP_mispul_create_survival
call sym.system
lea rcx, str.rmdir__TEMP_mispul_create_survival
call sym.system
mov eax, 0
add rsp, 0x3028
pop rbx
pop rsi
pop rdi
pop rbp
ret