Function at 0x18004ac20
Capabilities:
Download url
Enumerate gui resources
Execute command
Get session user name
Receive data

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r13
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
lea rdx, [rbp + 0x268]
mov dword [rbp + 0x268], 0x101
lea rcx, [rbp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor esi, esi
mov edx, 0x80
mov qword [rbp + 0x48], rsi
call fcn.18004d570
movaps xmm0, xmmword [str.https:__discord.com_api_webhooks_1149999360025833534_KDTaJcKvc220YsjuSiRlO4yz6oxY_vnIIEsI06unYJY5kD_WYe4M1wbcg14EPbIVF8OW]
mov r13, rax
mov qword [rbp + 0x40], rax
mov rdi, 0xffffffffffffffff
mov qword [rbp + 0x50], 0x79
movups xmmword [rax], xmm0
mov qword [rbp + 0x58], 0x7f
movaps xmm1, xmmword [0x18019d700]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x18019d710]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x18019d720]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x18019d730]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x18019d740]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x18019d750]
movups xmmword [rax + 0x60], xmm0
movsd xmm0, qword [0x18019d760]
movsd qword [rax + 0x70], xmm0
xorps xmm0, xmm0
movzx eax, byte [0x18019d768]
mov byte [r13 + 0x78], al
lea rax, [rbp + 0xe0]
mov byte [r13 + 0x79], sil
movups xmmword [rbp + 0x20], xmm0
nop dword [rax]
inc rdi
cmp byte [rax + rdi], sil
jne 0x18004ad00
movabs r15, 0x7fffffffffffffff
cmp rdi, r15
ja 0x18004bf4a
mov qword [rsp + 0x328], rbx
mov eax, 0x16
mov qword [rsp + 0x318], r14
cmp rdi, 0x10
jae 0x18004ad70
mov r8, rdi
mov qword [rbp + 0x30], rdi
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0x38], 0xf
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi + 0x20], sil
mov rbx, qword [rbp + 0x20]
mov r14, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x30]
mov qword [rbp + 0x90], rbx
jmp 0x18004adbd
mov r14, rdi
or r14, 0xf
cmp r14, r15
jbe 0x18004ad81
mov r14, r15
jmp 0x18004ad88
cmp r14, rax
cmovb r14, rax
lea rdx, [r14 + 1]
call fcn.18004d570
mov r8, rdi
mov qword [rbp + 0x90], rax
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0x20], rax
mov rcx, rax
mov qword [rbp + 0x30], rdi
mov rbx, rax
mov qword [rbp + 0x38], r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], sil
mov edx, 0x20
mov qword [rbp - 0x18], rsi
call fcn.18004d570
movups xmm1, xmmword [str.https:__myexternalip.com_raw]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
movdqa xmm0, xmmword [0x18019fc80]
movdqu xmmword [rbp - 0x10], xmm0
movups xmmword [rax], xmm1
movsd xmm0, qword [0x18019d780]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x18019d788]
mov dword [rax + 0x18], ecx
lea rcx, [rbp + 0xb8]
mov byte [rax + 0x1c], sil
call fcn.18004a6b0
mov rax, r15
sub rax, rdi
mov qword [rbp + 0x270], rax
cmp rax, 0x76
jb 0x18004bf50
mov qword [rsp + 0x320], r12
lea r15, [rdi + 0x76]
cmp r14, 0x10
lea r12, [rbp + 0x20]
xorps xmm0, xmm0
lea rsi, [rbp]
cmovae r12, rbx
xorps xmm1, xmm1
mov ebx, 0xf
movabs rcx, 0x8000000000000000
movups xmmword [rbp], xmm0
movdqu xmmword [rbp + 0x10], xmm1
cmp r15, rbx
jbe 0x18004aee0
mov rbx, r15
movabs rax, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rax
jbe 0x18004aea2
mov rbx, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.1800fb934
test rax, rax
je 0x18004b449
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18004aedc
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18004aecb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004bf3e
jmp 0x18004ae83
test rcx, rcx
je 0x18004aeda
call fcn.1800fb934
mov rsi, rax
jmp 0x18004aedc
xor esi, esi
mov qword [rbp], rsi
movaps xmm0, xmmword [str.curl___data__usernameNeverBlast.cc_LOG___Successcontent___Inject_type:_:green_circle:Success__:man_standing:User__]
lea rcx, [rsi + 0x76]
mov qword [rbp + 0x10], r15
mov r8, rdi
mov qword [rbp + 0x18], rbx
mov rdx, r12
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x18019d7d0]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x18019d7e0]
movups xmmword [rsi + 0x20], xmm0
movaps xmm1, xmmword [0x18019d7f0]
movups xmmword [rsi + 0x30], xmm1
movaps xmm0, xmmword [0x18019d800]
movups xmmword [rsi + 0x40], xmm0
movaps xmm1, xmmword [0x18019d810]
movups xmmword [rsi + 0x50], xmm1
movaps xmm0, xmmword [0x18019d820]
movups xmmword [rsi + 0x60], xmm0
mov eax, dword [0x18019d830]
mov dword [rsi + 0x70], eax
movzx eax, word [0x18019d834]
mov word [rsi + 0x74], ax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 0x15
jb 0x18004afa7
cmp rdx, 0x10
lea rax, [rcx + 0x15]
lea rbx, [rbp]
mov qword [rbp + 0x10], rax
cmovae rbx, qword [rbp]
lea rdx, str.__:man_detective:IP:
add rbx, rcx
mov r8d, 0x15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp]
mov byte [rbx + 0x15], 0
jmp 0x18004afc5
lea r9, str.__:man_detective:IP:
mov qword [rsp + 0x20], 0x15
mov edx, 0x15
lea rcx, [rbp]
call fcn.18004eb10
mov r15, qword [rbp + 0xc8]
lea r9, [rbp + 0xb8]
xor r12d, r12d
xorps xmm0, xmm0
cmp qword [rbp + 0xd0], 0x10
movups xmmword [rbp - 0x40], xmm0
cmovae r9, qword [rbp + 0xb8]
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rcx, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x30]
mov rax, rcx
sub rax, rsi
cmp r15, rax
ja 0x18004b058
cmp rcx, 0x10
lea rax, [rsi + r15]
lea rbx, [rbp - 0x40]
mov qword [rbp - 0x30], rax
cmovae rbx, qword [rbp - 0x40]
mov r8, r15
mov rdx, r9
lea rcx, [rbx + rsi]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rsi]
mov byte [rax + r15], r12b
lea rax, [rbp - 0x40]
jmp 0x18004b070
mov rdx, r15
mov qword [rsp + 0x20], r15
lea rcx, [rbp - 0x40]
call fcn.18004eb10
mov r15, qword [rbp + 0xc8]
mov qword [rbp - 0x50], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0xc
jb 0x18004b0e8
cmp rdx, 0x10
lea rax, [rcx + 0xc]
lea rbx, [rbp - 0x60]
mov qword [rbp - 0x50], rax
cmovae rbx, qword [rbp - 0x60]
lea rdx, str.avatar_url
add rbx, rcx
mov r8d, 0xc
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp - 0x60]
mov byte [rbx + 0xc], r12b
jmp 0x18004b106
lea r9, str.avatar_url
mov qword [rsp + 0x20], 0xc
mov edx, 0xc
lea rcx, [rbp - 0x60]
call fcn.18004eb10
mov qword [rsp + 0x70], r12
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x78], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov r8d, 0x2022
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
cmp qword [rsp + 0x78], 0x10
mov rax, qword [rsp + 0x70]
cmovae rcx, qword [rsp + 0x60]
mov byte [rcx + rax], r12b
movups xmm1, xmmword [rsp + 0x70]
mov qword [rsp + 0x70], r12
movups xmm0, xmmword [rsp + 0x60]
mov qword [rsp + 0x78], 0xf
movq rcx, xmm1
mov byte [rsp + 0x60], r12b
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 8
movq rdx, xmm1
mov rax, rdx
sub rax, rcx
movups xmmword [rbp - 0x20], xmm0
cmp rax, 2
jb 0x18004b1bd
lea rax, [rcx + 2]
cmp rdx, 0x10
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
cmovae rax, qword [rbp - 0x20]
mov word [rax + rcx], r8w
mov byte [rax + rcx + 2], r12b
lea rax, [rbp - 0x20]
jmp 0x18004b1db
lea r9, [0x18019d790]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x20]
call fcn.18004eb10
mov qword [rbp - 0x70], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 0x79
jb 0x18004b24d
mov r8, qword [rbp + 0x50]
lea rax, [rcx + 0x79]
cmp rdx, 0x10
mov qword [rbp - 0x70], rax
lea rbx, [rbp - 0x80]
mov rdx, r13
cmovae rbx, qword [rbp - 0x80]
add rbx, rcx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp - 0x80]
mov byte [rbx + 0x79], r12b
jmp 0x18004b266
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp - 0x80]
mov r9, r13
mov qword [rsp + 0x20], rdx
call fcn.18004eb10
mov r13, qword [rbp + 0x40]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x98], xmm0
movdqu xmmword [rbp + 0xa8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004b2da
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b2d5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b449
call fcn.1800fbcf0
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], r12b
cmp rdx, 0x10
jb 0x18004b325
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b320
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b449
call fcn.1800fbcf0
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], r12b
cmp rdx, 0x10
jb 0x18004b372
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b36d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b449
call fcn.1800fbcf0
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], r12b
cmp rdx, 0x10
jb 0x18004b3c0
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b3bb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b449
call fcn.1800fbcf0
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r12b
cmp rdx, 0x10
jb 0x18004b407
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b402
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b449
call fcn.1800fbcf0
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r12b
cmp rdx, 0x10
jb 0x18004b455
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b450
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004b450
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800fbcf0
cmp qword [rbp + 0x270], 0x78
jb 0x18004bf38
cmp r14, 0x10
lea rax, [rbp + 0x20]
lea r12, [rdi + 0x78]
mov ebx, 0xf
cmovae rax, qword [rbp + 0x90]
lea rsi, [rbp]
mov qword [rbp + 0x270], rax
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp], xmm0
movdqu xmmword [rbp + 0x10], xmm1
cmp r12, rbx
jbe 0x18004b531
mov rbx, r12
movabs rcx, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rcx
jbe 0x18004b4ec
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.1800fb934
test rax, rax
je 0x18004ba8a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rax, qword [rbp + 0x270]
jmp 0x18004b52d
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18004b515
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004bf44
jmp 0x18004b4c6
test rcx, rcx
je 0x18004b52b
call fcn.1800fb934
mov rsi, rax
mov rax, qword [rbp + 0x270]
jmp 0x18004b52d
xor esi, esi
mov qword [rbp], rsi
movaps xmm0, xmmword [str.curl___data__usernameNeverBlast.cc_LOG____Failedcontent___Inject_type:_:warning:Version_Failed__:man_standing:User__]
lea rcx, [rsi + 0x78]
mov qword [rbp + 0x10], r12
mov r8, rdi
mov qword [rbp + 0x18], rbx
mov rdx, rax
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x18019d850]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x18019d860]
movups xmmword [rsi + 0x20], xmm0
movaps xmm1, xmmword [0x18019d870]
movups xmmword [rsi + 0x30], xmm1
movaps xmm0, xmmword [0x18019d880]
movups xmmword [rsi + 0x40], xmm0
movaps xmm1, xmmword [0x18019d890]
movups xmmword [rsi + 0x50], xmm1
movaps xmm0, xmmword [0x18019d8a0]
movups xmmword [rsi + 0x60], xmm0
movsd xmm0, qword [0x18019d8b0]
movsd qword [rsi + 0x70], xmm0
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r12], 0
mov r9, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x10]
mov rax, r9
sub rax, rcx
cmp rax, 0x15
jb 0x18004b5f1
lea rax, [rcx + 0x15]
cmp r9, 0x10
lea rbx, [rbp]
mov qword [rbp + 0x10], rax
cmovae rbx, qword [rbp]
lea rdx, str.__:man_detective:IP:
add rbx, rcx
mov r8d, 0x15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp]
mov byte [rbx + 0x15], 0
jmp 0x18004b60f
lea r9, str.__:man_detective:IP:
mov qword [rsp + 0x20], 0x15
mov edx, 0x15
lea rcx, [rbp]
call fcn.18004eb10
mov r12, qword [rbp + 0xd0]
lea r9, [rbp + 0xb8]
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
cmp r12, 0x10
mov qword [rbp - 0x68], rbx
movups xmm0, xmmword [rax]
cmovae r9, qword [rbp + 0xb8]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rcx, qword [rbp - 0x68]
mov rdi, qword [rbp - 0x70]
mov rax, rcx
sub rax, rdi
cmp r15, rax
ja 0x18004b69e
cmp rcx, 0x10
lea rax, [rdi + r15]
lea rbx, [rbp - 0x80]
mov qword [rbp - 0x70], rax
cmovae rbx, qword [rbp - 0x80]
mov r8, r15
mov rdx, r9
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + r15]
xor ebx, ebx
mov byte [rax + rdi], 0
lea rax, [rbp - 0x80]
jmp 0x18004b6b6
mov rdx, r15
mov qword [rsp + 0x20], r15
lea rcx, [rbp - 0x80]
call fcn.18004eb10
mov r12, qword [rbp + 0xd0]
mov qword [rbp - 0x50], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0xc
jb 0x18004b730
cmp rdx, 0x10
lea rax, [rcx + 0xc]
lea rbx, [rbp - 0x60]
mov qword [rbp - 0x50], rax
cmovae rbx, qword [rbp - 0x60]
lea rdx, str.avatar_url
add rbx, rcx
mov r8d, 0xc
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xc], 0
lea rax, [rbp - 0x60]
xor ebx, ebx
jmp 0x18004b74e
lea r9, str.avatar_url
mov qword [rsp + 0x20], 0xc
mov edx, 0xc
lea rcx, [rbp - 0x60]
call fcn.18004eb10
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x78], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
cmp qword [rsp + 0x78], 0x10
mov rax, qword [rsp + 0x70]
cmovae rcx, qword [rsp + 0x60]
mov byte [rcx + rax], 0
movups xmm1, xmmword [rsp + 0x70]
mov qword [rsp + 0x70], rbx
movups xmm0, xmmword [rsp + 0x60]
mov qword [rsp + 0x78], 0xf
movq rcx, xmm1
mov byte [rsp + 0x60], 0
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 8
movq rdx, xmm1
mov rax, rdx
sub rax, rcx
movups xmmword [rbp - 0x20], xmm0
cmp rax, 2
jb 0x18004b803
lea rax, [rcx + 2]
cmp rdx, 0x10
mov qword [rbp - 0x10], rax
mov edx, 0x2022
lea rax, [rbp - 0x20]
cmovae rax, qword [rbp - 0x20]
mov word [rax + rcx], dx
mov byte [rax + rcx + 2], 0
lea rax, [rbp - 0x20]
jmp 0x18004b821
lea r9, [0x18019d790]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x20]
call fcn.18004eb10
mov r15, qword [rbp + 0x58]
lea r9, [rbp + 0x40]
mov rsi, qword [rbp + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
cmp r15, 0x10
mov qword [rbp - 0x28], rbx
movups xmm0, xmmword [rax]
cmovae r9, r13
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rcx, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x30]
mov rax, rcx
sub rax, rdi
cmp rsi, rax
ja 0x18004b8a9
cmp rcx, 0x10
lea rax, [rdi + rsi]
lea rbx, [rbp - 0x40]
mov qword [rbp - 0x30], rax
cmovae rbx, qword [rbp - 0x40]
mov r8, rsi
mov rdx, r9
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
xor ebx, ebx
mov byte [rax + rsi], 0
lea rax, [rbp - 0x40]
jmp 0x18004b8c2
mov rdx, rsi
mov qword [rsp + 0x20], rsi
lea rcx, [rbp - 0x40]
call fcn.18004eb10
mov r13, qword [rbp + 0x40]
mov r15, qword [rbp + 0x58]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x28]
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm1
cmp rdx, 0x10
jb 0x18004b91b
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b916
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004ba8a
call fcn.1800fbcf0
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x18004b966
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b961
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004ba8a
call fcn.1800fbcf0
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x18004b9b3
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b9ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004ba8a
call fcn.1800fbcf0
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x18004ba01
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b9fc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004ba8a
call fcn.1800fbcf0
mov rdx, qword [rbp - 0x68]
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x18004ba48
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ba43
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004ba8a
call fcn.1800fbcf0
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x18004ba96
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004ba91
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004ba91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800fbcf0
cmp qword [rbp + 0xb0], 0x10
lea rcx, [rbp + 0x98]
movaps xmmword [rsp + 0x300], xmm6
cmovae rcx, qword [rbp + 0x98]
movaps xmmword [rsp + 0x2f0], xmm7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm7, xmmword [0x1801a0390]
mov edx, 0x20
movaps xmm6, xmmword [0x1801a0290]
mov qword [rbp - 0x18], rbx
call fcn.18004d570
movups xmm1, xmmword [str.Loaded__have_a_nice_day_]
lea r9, [rsp + 0x60]
mov qword [rbp - 0x20], rax
movdqa xmm0, xmmword [0x18019fc70]
lea r8, [rbp - 0x80]
movups xmmword [rax], xmm1
lea rdx, [rbp - 0x20]
mov word [rbp + 0x4e], 0
movdqu xmmword [rbp - 0x10], xmm0
lea rcx, [rbp + 0x40]
movsd xmm0, qword [0x18019d8d0]
movsd qword [rax + 0x10], xmm0
movdqa xmm0, xmmword [0x18019fc30]
mov byte [rax + 0x18], 0
mov eax, dword [0x18019d8e8]
movdqu xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x48], eax
movsd xmm0, qword [str.Initialization]
movzx eax, word [0x18019d8ec]
movsd qword [rbp + 0x40], xmm0
mov word [rbp + 0x4c], ax
movdqa xmmword [rsp + 0x60], xmm7
movdqa xmmword [rbp - 0x80], xmm6
call fcn.180023460
lea rcx, str.GameAssembly.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rcx, str.UnityPlayer.dll
mov qword [0x18020f450], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call fcn.180010720
call fcn.1800110c0
call fcn.1800126f0
call fcn.18000cec0
call fcn.180013530
call fcn.180014280
mov rax, qword [0x18020f440]
movaps xmm7, xmmword [rsp + 0x2f0]
movaps xmm6, xmmword [rsp + 0x300]
test rax, rax
jne 0x18004bbe0
nop dword [rax + rax]
lea rdx, [0x18020f440]
lea rcx, [0x18004a660]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [0x18020f440]
test rax, rax
je 0x18004bbc0
mov qword [rbp + 0x70], rax
xor r9d, r9d
lea rax, [rbp - 0x80]
mov qword [rbp + 0x278], rbx
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea edx, [r9 + 1]
lea rax, [rbp + 0x278]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x40]
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x270]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x270], 0xb000
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rbx
mov dword [rbp + 0x60], ebx
mov qword [rbp + 0x68], 1
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x50], 0x1c
mov dword [rbp + 0x64], 0x20
mov dword [rbp + 0x5c], 1
mov qword [rbp + 0x78], 1
mov dword [rbp + 0x58], ebx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jns 0x18004bcb9
mov r9d, 0x10
lea r8, str.Failure
lea rdx, str.Failed_to_create_D3D11_device_and_swap_chain
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x18004bd71
mov rax, qword [rbp + 0x278]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x40]
mov qword [0x18020f650], rax
mov rax, qword [rcx + 0x68]
mov rcx, qword [rbp - 0x80]
mov qword [0x18020f678], rax
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x278]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x18020f440]
lea r8, [0x180049bf0]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18020f600], rax
call fcn.180090290
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.1800907c0
lea rdx, [0x180049dc0]
lea rcx, [0x18020f650]
call fcn.18008fac0
call fcn.180090310
call fcn.180090290
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.1800907c0
lea rdx, [0x180049d10]
lea rcx, [0x18020f678]
call fcn.18008fac0
call fcn.180090310
cmp byte [0x18020f40c], 0
jne 0x18004bd8c
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x18020f40c], 1
call fcn.18003b4b0
xorps xmm0, xmm0
lea rdx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
call fcn.180006280
call fcn.180004e10
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Neverblast.cccircuit.bundle
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1113540900199616512_1149774418051076116_circuit.bundle
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Neverblast.cc_rust.assets
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1113540900199616512_1149774420307619920_rust.assets
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x18004be25
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004be20
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bef6
call fcn.1800fbcf0
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x18004be66
mov rcx, qword [rbp + 0x98]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004be61
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bef6
call fcn.1800fbcf0
movdqa xmm0, xmmword [0x18019fb90]
mov byte [rbp + 0x98], 0
movdqu xmmword [rbp + 0xa8], xmm0
cmp r12, 0x10
jb 0x18004be94
mov rdx, qword [rbp + 0xb8]
lea r8, [r12 + 1]
call fcn.18004d5d0
cmp r14, 0x10
jb 0x18004becb
mov rcx, qword [rbp + 0x90]
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bec6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bef6
call fcn.1800fbcf0
cmp r15, 0x10
jb 0x18004bf05
lea rdx, [r15 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x18004befd
mov r13, qword [r13 - 8]
add rdx, 0x27
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004befd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.1800fbcf0
mov rcx, qword [rbp + 0x260]
call fcn.18004cc70
mov r12, qword [rsp + 0x320]
mov rbx, qword [rsp + 0x328]
mov r14, qword [rsp + 0x318]
add rsp, 0x330
pop r15
pop r13
pop rdi
pop rsi
pop rbp
ret
call fcn.18000bbc0
int3
call fcn.180003f60
int3
call fcn.180003f60
int3
call fcn.18000bbc0
int3
call fcn.18000bbc0
int3