Function at 0x1400114f6
Capabilities:
Create directory
Delete file
Execute command
Set console window title

Disassembly:
jmp 0x14001a3e0
push rbp
push rdi
sub rsp, 0x188
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x2a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002a018]
xor rax, rbp
mov qword [rbp + 0x158], rax
lea rcx, [0x1400310fb]
call fcn.140011730
call fcn.14001171c
lea rcx, str.Neuro_Loader
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor edx, edx
lea rcx, str.C:Windows_bcastdvr
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, str.C:Windows_bcastdvrdll.dll
call qword [sym.imp.ucrtbased.dll_remove]
lea rdx, str.Rust
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x14001a472
mov rax, qword [rbp + 8]
mov qword [0x14002a448], rax
jmp 0x14001a4e7
lea rcx, str.mode_con_cols63_lines15
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.RustClient.exe_not_init_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110d2
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x64
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.Loader_will_Closed_in_5_seconds
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110d2
lea rdx, [0x14001104b]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x14001a653
lea rdx, [0x14002a458]
mov rcx, qword [0x14002a448]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x14002a458]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14002a440], rax
lea r8, str.dll.dll
mov edx, dword [0x14002a458]
lea rcx, [0x14002a440]
call fcn.140011771
mov dword [0x14002a450], eax
cmp dword [0x14002a458], 1
jbe 0x14001a5b5
lea rdx, str.https:__raw.githubusercontent.com_dis3j_wagnerhook_main_a.txt
lea rcx, [rbp + 0x28]
call fcn.140011325
nop
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x68]
call fcn.1400115e1
nop
lea rdx, [rbp + 0x68]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001168b
lea rdx, [0x1400264bc]
mov rcx, rax
call fcn.1400110d2
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14001123f
mov ecx, 0x82
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011541
nop
lea rcx, [rbp + 0x68]
call fcn.140011154
nop
lea rcx, [rbp + 0x28]
call fcn.140011154
jmp 0x14001a64d
xor eax, eax
cmp eax, 1
je 0x14001a62d
lea rdx, str.Rust
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x14002a448], rax
lea rdx, [0x14002a458]
mov rcx, qword [0x14002a448]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x14002a458]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14002a440], rax
lea r8, str.dll.dll
mov edx, dword [0x14002a458]
lea rcx, [0x14002a440]
call fcn.140011771
mov dword [0x14002a450], eax
cmp dword [0x14002a458], 1
jbe 0x14001a62b
jmp 0x14001a62d
jmp 0x14001a5b5
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14001123f
mov ecx, 0x82
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011541
jmp 0x14001a651
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140025ae0]
call fcn.140011604
mov rax, rdi
mov rcx, qword [rbp + 0x158]
xor rcx, rbp
call fcn.14001137f
lea rsp, [rbp + 0x168]
pop rdi
pop rbp
ret