Function at 0x140018bb8
Capabilities:
Create directory
Delete file
Move file
Set console window title
Terminate process

Disassembly:
jmp 0x140040050
push rbp
push rdi
sub rsp, 0x3c8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x8a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14005d018]
xor rax, rbp
mov qword [rbp + 0x390], rax
lea rcx, [0x14006610e]
call fcn.1400191a8
mov edx, 0xf
lea rcx, [rbp + 0x268]
call fcn.140018938
mov qword [rbp + 0x368], rax
mov rax, qword [rbp + 0x368]
mov qword [rbp + 0x370], rax
lea r8, str..exe
mov rdx, qword [rbp + 0x370]
lea rcx, [rbp + 8]
call fcn.14001901d
nop
lea rcx, [rbp + 0x268]
call fcn.140018307
lea rcx, [rbp + 8]
call fcn.140018145
mov qword [rbp + 0x368], rax
lea rcx, [rbp + 0x2a8]
call fcn.14001850f
mov qword [rbp + 0x370], rax
mov rcx, qword [rbp + 0x370]
call fcn.140018145
mov qword [rbp + 0x378], rax
mov rdx, qword [rbp + 0x368]
mov rcx, qword [rbp + 0x378]
call qword [sym.imp.ucrtbased.dll_rename]
lea rcx, [rbp + 0x2a8]
call fcn.140018307
lea rcx, str.Satanic_Injector
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor edx, edx
lea rcx, str.C:Windows_bcastdvr
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, str.C:Windows_bcastdvrdll.dll
call qword [sym.imp.ucrtbased.dll_remove]
lea rdx, str.Rust
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
je 0x14004017d
mov rax, qword [rbp + 0x48]
mov qword [0x14005d448], rax
jmp 0x140040185
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
lea rdx, [0x14005d458]
mov rcx, qword [0x14005d448]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x14005d458]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14005d440], rax
lea r8, str.dll.dll
mov edx, dword [0x14005d458]
lea rcx, [0x14005d440]
call fcn.14001925c
mov dword [0x14005d450], eax
cmp dword [0x14005d458], 1
jbe 0x1400402bb
lea rdx, str.https:__raw.githubusercontent.com_dis3j_wagnerhook_main_a.txt
lea rcx, [rbp + 0x68]
call fcn.14001879e
nop
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0xa8]
call fcn.140018e3d
nop
lea rax, [rbp + 0x2e8]
mov qword [rbp + 0x328], rax
lea rdx, [rbp + 0xa8]
mov rcx, qword [rbp + 0x328]
call fcn.1400181e0
mov qword [rbp + 0x368], rax
mov rdx, qword [rbp + 0x368]
lea rcx, [rbp + 0x348]
call fcn.140018edd
mov qword [rbp + 0x370], rax
mov rax, qword [rbp + 0x370]
mov qword [rbp + 0x378], rax
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x380], rax
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x388], rax
mov rdx, qword [rbp + 0x380]
mov rcx, qword [rbp + 0x388]
call fcn.140018af5
lea rdx, [0x14005164c]
mov rcx, rax
call fcn.140018195
nop
lea rcx, [rbp + 0x348]
call fcn.140019081
call fcn.14001855f
nop
lea rcx, [rbp + 0xa8]
call fcn.140018307
nop
lea rcx, [rbp + 0x68]
call fcn.140018307
jmp 0x140040339
xor eax, eax
cmp eax, 1
je 0x140040333
lea rdx, str.Rust
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x14005d448], rax
lea rdx, [0x14005d458]
mov rcx, qword [0x14005d448]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x14005d458]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14005d440], rax
lea r8, str.dll.dll
mov edx, dword [0x14005d458]
lea rcx, [0x14005d440]
call fcn.14001925c
mov dword [0x14005d450], eax
cmp dword [0x14005d458], 1
jbe 0x140040331
jmp 0x140040333
jmp 0x1400402bb
call fcn.14001855f
nop
lea rcx, [rbp + 8]
call fcn.140018307
jmp 0x140040346
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14004fee0]
call fcn.140018e8d
mov rax, rdi
mov rcx, qword [rbp + 0x390]
xor rcx, rbp
call fcn.14001882a
lea rsp, [rbp + 0x3a8]
pop rdi
pop rbp
ret