Function at 0x140011488
Capabilities:
Create directory
Delete file
Set console window title

Disassembly:
jmp 0x140018330
push rbp
push rdi
sub rsp, 0x188
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x2a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140028018]
xor rax, rbp
mov qword [rbp + 0x158], rax
lea rcx, [0x14002e0fa]
call fcn.14001168b
lea rcx, str.Neuro_Loader
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor edx, edx
lea rcx, str.C:Windows_bcastdvr
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, str.C:Windows_bcastdvrdll.dll
call qword [sym.imp.ucrtbased.dll_remove]
lea rdx, str.Rust
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x1400183bd
mov rax, qword [rbp + 8]
mov qword [0x140028448], rax
jmp 0x140018425
lea rdx, str.RustClient.exe_not_init_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110c3
lea rdx, [0x140011046]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x64
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.Loader_will_Closed_in_5_seconds
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110c3
lea rdx, [0x140011046]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x140018571
lea rdx, [0x140028458]
mov rcx, qword [0x140028448]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x140028458]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140028440], rax
lea r8, str.dll.dll
mov edx, dword [0x140028458]
lea rcx, [0x140028440]
call fcn.1400116cc
mov dword [0x140028450], eax
cmp dword [0x140028458], 1
jbe 0x1400184e3
lea rdx, str.https:__raw.githubusercontent.com_dis3j_wagnerhook_main_a.txt
lea rcx, [rbp + 0x28]
call fcn.1400112e4
nop
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x68]
call fcn.14001155a
nop
lea rdx, [rbp + 0x68]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400115fa
lea rdx, [0x140023ad8]
mov rcx, rax
call fcn.1400110c3
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011217
nop
lea rcx, [rbp + 0x68]
call fcn.140011140
nop
lea rcx, [rbp + 0x28]
call fcn.140011140
jmp 0x14001856b
xor eax, eax
cmp eax, 1
je 0x14001855b
lea rdx, str.Rust
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140028448], rax
lea rdx, [0x140028458]
mov rcx, qword [0x140028448]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x140028458]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140028440], rax
lea r8, str.dll.dll
mov edx, dword [0x140028458]
lea rcx, [0x140028440]
call fcn.1400116cc
mov dword [0x140028450], eax
cmp dword [0x140028458], 1
jbe 0x140018559
jmp 0x14001855b
jmp 0x1400184e3
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140011217
jmp 0x14001856f
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x1400234a0]
call fcn.14001157d
mov rax, rdi
mov rcx, qword [rbp + 0x158]
xor rcx, rbp
call fcn.140011339
lea rsp, [rbp + 0x168]
pop rdi
pop rbp
ret