Function at 0x1400117b2
Capabilities:
Check internet connectivity via wininet
Create directory
Create http request
Delete file
Download url
Execute command
Read data from internet
Receive data
Self delete
Set console window title
Set registry value
Terminate process

Disassembly:
jmp 0x140023450
push rbp
push rsi
push rdi
mov eax, 0x4110
call fcn.140011203
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0xeb8
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140042040]
xor rax, rbp
mov qword [rbp + 0x40d8], rax
mov dword [rbp + 0x3ed4], 0
lea rcx, [0x14004b109]
call fcn.140011b4f
lea rcx, str.Version_7.6__Recode
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
xor r8d, r8d
mov edx, 1
lea rcx, str.https:__www.google.ru_
call qword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
je 0x1400234e3
mov byte [rbp + 0x4044], 1
jmp 0x1400234ea
mov byte [rbp + 0x4044], 0
movzx eax, byte [rbp + 0x4044]
mov byte [rbp + 4], al
movzx eax, byte [rbp + 4]
test eax, eax
je 0x140023501
jmp 0x1400237b1
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2638]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2668]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140039b08]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140039218]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
nop
xor eax, eax
jmp 0x140028082
lea rdx, [0x140039b50]
lea rcx, [rbp + 0x28]
call fcn.140011500
nop
lea rax, [rbp + 0x26b8]
mov qword [rbp + 0x26f8], rax
lea rdx, str.https:__text_host.ru_raw_whitelist_loader
mov rcx, qword [rbp + 0x26f8]
call fcn.140011500
mov qword [rbp + 0x4048], rax
mov rdx, qword [rbp + 0x4048]
lea rcx, [rbp + 0x2718]
call fcn.1400116e0
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
lea rcx, [rbp + 0x28]
call fcn.140011663
mov byte [rbp + 0x2694], al
lea rcx, [rbp + 0x2718]
call fcn.140011212
movzx eax, byte [rbp + 0x2694]
test eax, eax
je 0x140023afc
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2758]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2788]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140039b90]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140039218]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
nop
mov dword [rbp + 0x27b4], 0
lea rcx, [rbp + 0x28]
call fcn.140011212
mov eax, dword [rbp + 0x27b4]
jmp 0x140028082
xor edx, edx
lea rcx, str.C:ProgramDataGoogle
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:ProgramDataGooglelaunch
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:ProgramDataGooglelaunchlogs
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:Minecraftgamelogs
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.levin
lea rcx, [rbp + 0x70]
call fcn.140011500
nop
lea rdx, str.crack
lea rcx, [rbp + 0x98]
call fcn.140011500
nop
lea rdx, [0x140039c54]
lea rcx, [rbp + 0xd8]
call fcn.140011500
nop
lea rdx, str.frazeeem
lea rcx, [rbp + 0x120]
call fcn.140011500
nop
lea rdx, str.abama1023
lea rcx, [rbp + 0x148]
call fcn.140011500
nop
lea rdx, [0x140039c78]
lea rcx, [rbp + 0x188]
call fcn.140011500
nop
lea rdx, str.Gamez999
lea rcx, [rbp + 0x1d0]
call fcn.140011500
nop
lea rdx, str.Gamez999
lea rcx, [rbp + 0x1f8]
call fcn.140011500
nop
lea rdx, [0x140039c9c]
lea rcx, [rbp + 0x238]
call fcn.140011500
nop
lea rdx, str.Kerkis
lea rcx, [rbp + 0x280]
call fcn.140011500
nop
lea rdx, str.308813
lea rcx, [rbp + 0x2a8]
call fcn.140011500
nop
lea rdx, [0x140039cd0]
lea rcx, [rbp + 0x2e8]
call fcn.140011500
nop
lea rdx, str.Baltica9
lea rcx, [rbp + 0x330]
call fcn.140011500
nop
lea rdx, str.romanson1987
lea rcx, [rbp + 0x358]
call fcn.140011500
nop
lea rdx, [0x140039cd8]
lea rcx, [rbp + 0x398]
call fcn.140011500
nop
lea rdx, str.ArtemTargedhudov
lea rcx, [rbp + 0x3e0]
call fcn.140011500
nop
lea rdx, str.Targedhudov
lea rcx, [rbp + 0x408]
call fcn.140011500
nop
lea rdx, [0x140039ce0]
lea rcx, [rbp + 0x448]
call fcn.140011500
nop
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea rcx, [rbp + 0x488]
call fcn.140011b36
nop
lea rcx, [rbp + 0x4c8]
call fcn.140011b36
nop
lea rdx, [0x140038d85]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038d85]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140039ce8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [rbp + 0x488]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011041
lea rdx, [0x140039cf8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
call qword [sym.imp.ucrtbased.dll__getch]
mov byte [rbp + 0x504], al
movsx eax, byte [rbp + 0x504]
cmp eax, 0xd
je 0x140023f62
movsx eax, byte [rbp + 0x504]
cmp eax, 8
jne 0x140023f3c
lea rcx, [rbp + 0x4c8]
call fcn.1400112ad
movzx eax, al
test eax, eax
jne 0x140023f3a
lea rdx, [0x140039d08]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rcx, [rbp + 0x4c8]
call fcn.140011997
dec rax
mov rdx, rax
lea rcx, [rbp + 0x4c8]
call fcn.140011acd
jmp 0x140023f5d
mov dl, 0x2a
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011875
movzx edx, byte [rbp + 0x504]
lea rcx, [rbp + 0x4c8]
call fcn.1400115f5
jmp 0x140023ed2
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x488]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x140024014
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x4c8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x140024014
lea rax, [rbp + 0x27f8]
mov qword [rbp + 0x2838], rax
lea rdx, str.https:__text_host.ru_raw_account1sub
mov rcx, qword [rbp + 0x2838]
call fcn.140011500
mov qword [rbp + 0x4048], rax
mov rdx, qword [rbp + 0x4048]
lea rcx, [rbp + 0x2858]
call fcn.1400116e0
mov qword [rbp + 0x4050], rax
mov rax, qword [rbp + 0x4050]
mov qword [rbp + 0x4058], rax
mov eax, dword [rbp + 0x3ed4]
or eax, 1
mov dword [rbp + 0x3ed4], eax
mov rdx, qword [rbp + 0x4058]
lea rcx, [rbp + 0xd8]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024397
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x488]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400240c9
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x4c8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400240c9
lea rax, [rbp + 0x2898]
mov qword [rbp + 0x28d8], rax
lea rdx, str.https:__text_host.ru_raw_account4sub
mov rcx, qword [rbp + 0x28d8]
call fcn.140011500
mov qword [rbp + 0x4060], rax
mov rdx, qword [rbp + 0x4060]
lea rcx, [rbp + 0x28f8]
call fcn.1400116e0
mov qword [rbp + 0x4068], rax
mov rax, qword [rbp + 0x4068]
mov qword [rbp + 0x4070], rax
mov eax, dword [rbp + 0x3ed4]
or eax, 2
mov dword [rbp + 0x3ed4], eax
mov rdx, qword [rbp + 0x4070]
lea rcx, [rbp + 0x188]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024397
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x488]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002417e
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x4c8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002417e
lea rax, [rbp + 0x2938]
mov qword [rbp + 0x2978], rax
lea rdx, str.https:__text_host.ru_raw_account5sub
mov rcx, qword [rbp + 0x2978]
call fcn.140011500
mov qword [rbp + 0x4078], rax
mov rdx, qword [rbp + 0x4078]
lea rcx, [rbp + 0x2998]
call fcn.1400116e0
mov qword [rbp + 0x4080], rax
mov rax, qword [rbp + 0x4080]
mov qword [rbp + 0x4088], rax
mov eax, dword [rbp + 0x3ed4]
or eax, 4
mov dword [rbp + 0x3ed4], eax
mov rdx, qword [rbp + 0x4088]
lea rcx, [rbp + 0x238]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024397
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x488]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x140024233
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x4c8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x140024233
lea rax, [rbp + 0x29d8]
mov qword [rbp + 0x2a18], rax
lea rdx, str.https:__text_host.ru_raw_account6sub
mov rcx, qword [rbp + 0x2a18]
call fcn.140011500
mov qword [rbp + 0x4090], rax
mov rdx, qword [rbp + 0x4090]
lea rcx, [rbp + 0x2a38]
call fcn.1400116e0
mov qword [rbp + 0x4098], rax
mov rax, qword [rbp + 0x4098]
mov qword [rbp + 0x40a0], rax
mov eax, dword [rbp + 0x3ed4]
or eax, 8
mov dword [rbp + 0x3ed4], eax
mov rdx, qword [rbp + 0x40a0]
lea rcx, [rbp + 0x2e8]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024397
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x488]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400242e8
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x4c8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400242e8
lea rax, [rbp + 0x2a78]
mov qword [rbp + 0x2ab8], rax
lea rdx, str.https:__text_host.ru_raw_account7sub
mov rcx, qword [rbp + 0x2ab8]
call fcn.140011500
mov qword [rbp + 0x40a8], rax
mov rdx, qword [rbp + 0x40a8]
lea rcx, [rbp + 0x2ad8]
call fcn.1400116e0
mov qword [rbp + 0x40b0], rax
mov rax, qword [rbp + 0x40b0]
mov qword [rbp + 0x40b8], rax
mov eax, dword [rbp + 0x3ed4]
or eax, 0x10
mov dword [rbp + 0x3ed4], eax
mov rdx, qword [rbp + 0x40b8]
lea rcx, [rbp + 0x398]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024397
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x488]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002438b
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x4c8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002438b
lea rax, [rbp + 0x2b18]
mov qword [rbp + 0x2b58], rax
lea rdx, str.https:__text_host.ru_raw_account8_6
mov rcx, qword [rbp + 0x2b58]
call fcn.140011500
mov qword [rbp + 0x40c0], rax
mov rdx, qword [rbp + 0x40c0]
lea rcx, [rbp + 0x2b78]
call fcn.1400116e0
mov qword [rbp + 0x40c8], rax
mov eax, dword [rbp + 0x3ed4]
or eax, 0x20
mov dword [rbp + 0x3ed4], eax
mov rdx, qword [rbp + 0x40c8]
lea rcx, [rbp + 0x448]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024397
mov dword [rbp + 0x40d0], 1
jmp 0x1400243a1
mov dword [rbp + 0x40d0], 0
movzx eax, byte [rbp + 0x40d0]
mov byte [rbp + 0x27d4], al
mov eax, dword [rbp + 0x3ed4]
and eax, 0x20
test eax, eax
je 0x1400243cf
and dword [rbp + 0x3ed4], 0xffffffdf
lea rcx, [rbp + 0x2b78]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3ed4]
and eax, 0x10
test eax, eax
je 0x1400243f0
and dword [rbp + 0x3ed4], 0xffffffef
lea rcx, [rbp + 0x2ad8]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3ed4]
and eax, 8
test eax, eax
je 0x140024411
and dword [rbp + 0x3ed4], 0xfffffff7
lea rcx, [rbp + 0x2a38]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3ed4]
and eax, 4
test eax, eax
je 0x140024432
and dword [rbp + 0x3ed4], 0xfffffffb
lea rcx, [rbp + 0x2998]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3ed4]
and eax, 2
test eax, eax
je 0x140024453
and dword [rbp + 0x3ed4], 0xfffffffd
lea rcx, [rbp + 0x28f8]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3ed4]
and eax, 1
test eax, eax
je 0x140024473
and dword [rbp + 0x3ed4], 0xfffffffe
lea rcx, [rbp + 0x2858]
call fcn.140011212
movzx eax, byte [rbp + 0x27d4]
test eax, eax
je 0x14002449d
lea rcx, str.C:ProgramDataGooglelaunchCrypt.jar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
call fcn.1400119ec
mov edx, 0x20
lea rcx, [rbp + 0x528]
call fcn.140011127
lea rcx, [rbp + 0x2bb4]
call fcn.14001122b
mov qword [rbp + 0x4048], rax
lea rdx, str.6CBF41EA_0319_11EF_868C_806E6F6E6963
lea rcx, [rbp + 0x3f00]
call fcn.140011500
nop
lea rdx, str.ABC88967_30FB_11ED_960D_806E6F6E6963
lea rcx, [rbp + 0x3f28]
call fcn.140011500
nop
lea rdx, str.82063719_AFC2_11EE_97F1_806E6F6E6963
lea rcx, [rbp + 0x3f50]
call fcn.140011500
nop
lea rdx, str.F1325E90_3688_11EE_B202_806E6F6E6963
lea rcx, [rbp + 0x3f78]
call fcn.140011500
nop
lea rdx, str.0B26676E_F2B5_11EE_AC40_806E6F6E6963
lea rcx, [rbp + 0x3fa0]
call fcn.140011500
nop
lea rdx, str.A4F1EA40_ED8D_11E9_BB3D_806E6F6E6963
lea rcx, [rbp + 0x3fc8]
call fcn.140011500
nop
lea rdx, str.B7B4B381_8E93_11EC_924D_806E6F6E6963
lea rcx, [rbp + 0x3ff0]
call fcn.140011500
nop
lea rdx, str.ECB65B7E_759E_11ED_A51B_806E6F6E6963
lea rcx, [rbp + 0x4018]
call fcn.140011500
nop
lea rax, [rbp + 0x4040]
mov r8, rax
lea rdx, [rbp + 0x3f00]
lea rcx, [rbp + 0x2bd8]
call fcn.140011ad7
lea rcx, [rbp + 0x2c08]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x3eb0]
lea rcx, [rbp + 0x2c08]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rbp + 0x4048]
lea rdx, [rbp + 0x3eb0]
lea rcx, [rbp + 0x528]
call fcn.140011848
nop
lea r9, [fcn.140011212]
mov r8d, 8
mov edx, 0x28
lea rcx, [rbp + 0x3f00]
call fcn.1400112e9
lea rcx, [rbp + 0x568]
call fcn.1400117d5
nop
mov byte [rbp + 0x5a4], 0
lea rax, [rbp + 0x528]
mov qword [rbp + 0x5c8], rax
mov rcx, qword [rbp + 0x5c8]
call fcn.140011343
mov qword [rbp + 0x5e8], rax
mov rcx, qword [rbp + 0x5c8]
call fcn.140011334
mov qword [rbp + 0x608], rax
jmp 0x140024642
mov rax, qword [rbp + 0x5e8]
add rax, 0x28
mov qword [rbp + 0x5e8], rax
mov rax, qword [rbp + 0x608]
cmp qword [rbp + 0x5e8], rax
je 0x140024685
mov rax, qword [rbp + 0x5e8]
mov qword [rbp + 0x628], rax
mov rdx, qword [rbp + 0x628]
lea rcx, [rbp + 0x568]
call fcn.1400112f3
movzx eax, al
test eax, eax
je 0x140024683
mov byte [rbp + 0x5a4], 1
jmp 0x140024685
jmp 0x140024630
movzx eax, byte [rbp + 0x5a4]
test eax, eax
je 0x140024692
jmp 0x140024697
call fcn.140011370
lea rax, [rbp + 0x2c38]
mov qword [rbp + 0x2c78], rax
lea rdx, str.https:__text_host.ru_raw_version_34
mov rcx, qword [rbp + 0x2c78]
call fcn.140011500
mov qword [rbp + 0x4048], rax
mov rdx, qword [rbp + 0x4048]
lea rcx, [rbp + 0x648]
call fcn.1400116e0
nop
lea rax, [rbp + 0x2c98]
mov qword [rbp + 0x2cd8], rax
lea rdx, str.https:__text_host.ru_raw_nextupdate_sled_obnova
mov rcx, qword [rbp + 0x2cd8]
call fcn.140011500
mov qword [rbp + 0x4048], rax
mov rdx, qword [rbp + 0x4048]
lea rcx, [rbp + 0x688]
call fcn.1400116e0
nop
lea rdx, str.protector.dll
lea rcx, [rbp + 0x6c8]
call fcn.140011500
nop
mov edx, 0x110
lea rcx, [rbp + 0x710]
call fcn.1400117c1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, str.protector.dll
lea rcx, [rbp + 0x710]
call fcn.140011a5f
nop
lea rcx, [rbp + 0x838]
call fcn.140011b36
nop
lea rdx, [rbp + 0x838]
lea rcx, [rbp + 0x710]
call fcn.14001164f
lea rcx, [rbp + 0x710]
call fcn.14001164a
lea rcx, [rbp + 0x6c8]
call fcn.1400118cf
movzx eax, al
test eax, eax
jne 0x140024800
mov edx, 0x108
lea rcx, [rbp + 0x880]
call fcn.140011474
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [rbp + 0x6c8]
lea rcx, [rbp + 0x880]
call fcn.140011b8b
nop
lea rdx, [rbp + 0x648]
lea rcx, [rbp + 0x880]
call fcn.140011a0a
lea rcx, [rbp + 0x880]
call fcn.1400115c8
nop
lea rcx, [rbp + 0x880]
call fcn.1400112d5
lea rdx, [rbp + 0x688]
lea rcx, [rbp + 0x838]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024eab
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x2cf8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2d28]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2d58]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x2dc8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
mov qword [rbp + 0x4058], rax
lea r8, [rbp + 0x688]
lea rdx, [0x14003a010]
lea rcx, [rbp + 0x2d88]
call fcn.14001107d
mov qword [rbp + 0x4060], rax
mov rax, qword [rbp + 0x4060]
mov qword [rbp + 0x4068], rax
mov rax, qword [rbp + 0x4068]
mov qword [rbp + 0x4070], rax
mov rdx, qword [rbp + 0x4070]
mov rcx, qword [rbp + 0x4058]
call fcn.140011a0a
mov qword [rbp + 0x4078], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4078]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2d88]
call fcn.140011212
lea rcx, str.C:ProgramDataGooglelaunchCrypt.jar
call qword [sym.imp.ucrtbased.dll_remove]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.My_Agent
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rbp + 0x9a8], rax
cmp qword [rbp + 0x9a8], 0
jne 0x140024d15
lea rdx, [0x14003a070]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x2df4], 1
lea rcx, [rbp + 0x838]
call fcn.140011212
nop
lea rcx, [rbp + 0x710]
call fcn.1400111c7
nop
lea rcx, [rbp + 0x6c8]
call fcn.140011212
nop
lea rcx, [rbp + 0x688]
call fcn.140011212
nop
lea rcx, [rbp + 0x648]
call fcn.140011212
nop
lea rcx, [rbp + 0x568]
call fcn.140011212
nop
lea rcx, [rbp + 0x528]
call fcn.140011ad2
nop
lea rcx, [rbp + 0x4c8]
call fcn.140011212
nop
lea rcx, [rbp + 0x488]
call fcn.140011212
nop
lea rcx, [rbp + 0x448]
call fcn.140011212
nop
lea rcx, [rbp + 0x3e0]
call fcn.14001b020
nop
lea rcx, [rbp + 0x398]
call fcn.140011212
nop
lea rcx, [rbp + 0x330]
call fcn.14001b020
nop
lea rcx, [rbp + 0x2e8]
call fcn.140011212
nop
lea rcx, [rbp + 0x280]
call fcn.14001b020
nop
lea rcx, [rbp + 0x238]
call fcn.140011212
nop
lea rcx, [rbp + 0x1d0]
call fcn.14001b020
nop
lea rcx, [rbp + 0x188]
call fcn.140011212
nop
lea rcx, [rbp + 0x120]
call fcn.14001b020
nop
lea rcx, [rbp + 0xd8]
call fcn.140011212
nop
lea rcx, [rbp + 0x70]
call fcn.14001b020
nop
lea rcx, [rbp + 0x28]
call fcn.140011212
mov eax, dword [rbp + 0x2df4]
jmp 0x140028088
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x84000000
xor r9d, r9d
xor r8d, r8d
lea rdx, str.http:__mc.swinghvh.ru_Crypt.rar
mov rcx, qword [rbp + 0x9a8]
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov qword [rbp + 0x9c8], rax
cmp qword [rbp + 0x9c8], 0
jne 0x140024d8c
lea rdx, [0x14003a0d0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x9a8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, 0x108
lea rcx, [rbp + 0x9f0]
call fcn.140011474
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x20
lea rdx, str.C:ProgramDataGooglelaunchCrypt.rar
lea rcx, [rbp + 0x9f0]
call fcn.14001145b
nop
lea r9, [rbp + 0x1b34]
mov r8d, 0x1000
lea rdx, [rbp + 0xb20]
mov rcx, qword [rbp + 0x9c8]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140024e12
cmp dword [rbp + 0x1b34], 0
jbe 0x140024e12
mov eax, dword [rbp + 0x1b34]
mov r8d, eax
lea rdx, [rbp + 0xb20]
lea rcx, [rbp + 0x9f0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
jmp 0x140024dc5
lea rcx, [rbp + 0x9f0]
call fcn.1400115c8
mov rcx, qword [rbp + 0x9c8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp + 0x9a8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunchCrypt.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x108
lea rcx, [rbp + 0x1b60]
call fcn.140011474
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [rbp + 0x6c8]
lea rcx, [rbp + 0x1b60]
call fcn.140011b8b
nop
lea rdx, [rbp + 0x688]
lea rcx, [rbp + 0x1b60]
call fcn.140011a0a
nop
lea rcx, [rbp + 0x1b60]
call fcn.1400112d5
nop
lea rcx, [rbp + 0x9f0]
call fcn.1400112d5
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rax, str.C:_ProgramData_Google_launch_assets
mov qword [rbp + 0x1c88], rax
lea rax, str.C:_ProgramData_Google_launch_natives
mov qword [rbp + 0x1ca8], rax
lea rax, str.C:_ProgramData_Google_launch_Crypt.jar
mov qword [rbp + 0x1cc8], rax
lea rax, str.C:_ProgramData_Google_jdk
mov qword [rbp + 0x1ce8], rax
lea rax, str.C:_ProgramData_Google_launch_Crypt.bat
mov qword [rbp + 0x1d08], rax
lea rdx, [rbp + 0x1d28]
mov rcx, qword [rbp + 0x1c88]
call fcn.140029b70
test eax, eax
jne 0x140024f2d
lea rdx, [0x140038d85]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x1400251d1
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2e18]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2e48]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035fa8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, str.C:ProgramDataGooglelaunch_assets.rar
lea rcx, [rbp + 0x1d78]
call fcn.140011500
lea rcx, [rbp + 0x1d78]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_assets.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0x1db4], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunch_assets.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x1d78]
call fcn.140011212
lea rdx, [rbp + 0x1d28]
mov rcx, qword [rbp + 0x1ca8]
call fcn.140029b70
test eax, eax
jne 0x140025200
lea rdx, [0x140038d85]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x140025564
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x2e78]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2ea8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x2ed8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x2f08]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003a268]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglelaunch_natives.rar
lea rcx, [rbp + 0x1dd8]
call fcn.140011500
lea rcx, [rbp + 0x1dd8]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_natives.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0x1e14], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunch_natives.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x1dd8]
call fcn.140011212
lea rdx, [0x140039d38]
lea rcx, [rbp + 0x1e38]
call fcn.140011500
nop
lea rax, [rbp + 0x2f58]
mov qword [rbp + 0x2f98], rax
lea rdx, str.https:__text_host.ru_raw_jar_51091
mov rcx, qword [rbp + 0x2f98]
call fcn.140011500
mov qword [rbp + 0x4048], rax
mov rdx, qword [rbp + 0x4048]
lea rcx, [rbp + 0x2fb8]
call fcn.1400116e0
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
lea rcx, [rbp + 0x1e38]
call fcn.140011663
mov byte [rbp + 0x2f34], al
lea rcx, [rbp + 0x2fb8]
call fcn.140011212
movzx eax, byte [rbp + 0x2f34]
test eax, eax
je 0x140025608
xor r9d, r9d
lea r8, str.Update
lea rdx, [0x14003a680]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.1400116a9
lea rdx, [rbp + 0x1d28]
mov rcx, qword [rbp + 0x1cc8]
call fcn.140029b70
test eax, eax
jne 0x140025637
lea rdx, [0x140038d85]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x14002599b
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x2ff8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3028]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3058]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3088]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003a3d0]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglelaunchCrypt.rar
lea rcx, [rbp + 0x1e78]
call fcn.140011500
lea rcx, [rbp + 0x1e78]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_Crypt.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0x1eb4], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunchCrypt.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x1e78]
call fcn.140011212
lea rdx, [rbp + 0x1d28]
mov rcx, qword [rbp + 0x1d08]
call fcn.140029b70
test eax, eax
jne 0x1400259ca
lea rdx, [0x140038d85]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x140025d2e
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x30b8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x30e8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3118]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3148]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003a3f0]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglelaunchdebag.rar
lea rcx, [rbp + 0x1ed8]
call fcn.140011500
lea rcx, [rbp + 0x1ed8]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_debag.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0x1f14], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunchdebag.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x1ed8]
call fcn.140011212
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, [rbp + 0x1d28]
mov rcx, qword [rbp + 0x1ce8]
call fcn.140029b70
test eax, eax
jne 0x140025d6a
lea rdx, [0x140038d85]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x1400260ce
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3178]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x31a8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x31d8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3208]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003a468]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglejdk.rar
lea rcx, [rbp + 0x1f38]
call fcn.140011500
lea rcx, [rbp + 0x1f38]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_jdk.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0x1f74], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglejdk.rar_C:ProgramDataGoogle
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x1f38]
call fcn.140011212
lea rcx, str.C:ProgramDataGooglejdk.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataGooglelaunchdebag.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataGooglelaunch_assets.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataGooglelaunch_natives.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataGooglelaunchCrypt.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, [0x140039274]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140038f60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400390b0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
mov qword [rbp + 0x4048], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4048]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3238]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3268]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3298]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003a900]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x32c8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1f98]
call fcn.1400117d5
nop
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3338]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
mov qword [rbp + 0x4058], rax
lea r8, [rbp + 0x1f98]
lea rdx, [0x14003a570]
lea rcx, [rbp + 0x32f8]
call fcn.14001107d
mov qword [rbp + 0x4060], rax
mov rax, qword [rbp + 0x4060]
mov qword [rbp + 0x4068], rax
mov rax, qword [rbp + 0x4068]
mov qword [rbp + 0x4070], rax
mov rdx, qword [rbp + 0x4070]
mov rcx, qword [rbp + 0x4058]
call fcn.140011a0a
mov qword [rbp + 0x4078], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4078]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x32f8]
call fcn.140011212
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3368]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3398]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1fd8]
call fcn.140011b36
nop
lea rdx, [0x14003a638]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [rbp + 0x1fd8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011041
lea rdx, [0x140039c54]
lea rcx, [rbp + 0x1fd8]
call fcn.140011307
movzx eax, al
test eax, eax
je 0x140027eed
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x33c8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x1400360a0]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x33f8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3428]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellMuiCache___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellBagMRU___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellBags___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsShellBagMRU___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsShellBags___f
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3458]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3488]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.color_4
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x34b8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003a6f8]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x34e8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3518]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.del_C:WindowsPrefetch__F__Q
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.del_C:WindowsTemp__F__Q
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.del_C:Users_USERNAME_AppDataLocalTemp__F__Q
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerRunMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3548]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3578]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.color_2
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x35a8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003a850]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x35d8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3608]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32FirstFolder___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedPidlMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedPidlMRULegacy___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerFeatureUsageAppSwitched___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFeatureUsage___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerRunMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRU___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRU___f
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3638]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3668]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.color_2
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3698]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140036120]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x36c8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x36f8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist_
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3728]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3758]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3788]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x1400363e0]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x37b8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x37e8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession_ManagerAppCompatCache___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSession_ManagerAppCompatCache___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFeatureUsage___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerRunMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32___va__f
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3818]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3848]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3878]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x1400372c8]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x38a8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x38d8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_LOCAL_MACHINESOFTWAREMicrosoftRADARHeapLeakDetectionDiagnosedApplications___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_LOCAL_MACHINESOFTWAREMicrosoftRADARHeapLeakDetectionDiagnosedApplications_
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3908]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3938]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3968]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140036460]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3998]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x39c8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_USERSS_1_5_21_2602321470_2002389895_1872647306_1001SoftwareMicrosoftWindowsCurrentVersionSearchRecentApps___f__p
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_USERSS_1_5_21_2602321470_2002389895_1872647306_1001SoftwareMicrosoftWindowsCurrentVersionSearchRecentApps___p
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x39f8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3a28]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3a58]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003ac08]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3a88]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3ab8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_USERSSoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantStore___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_USERSSoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___va__f
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3ae8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3b18]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3b48]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003ac28]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3b78]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3ba8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_USERSSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_USERSSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2_
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3bd8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3c08]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3c38]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x1400372f0]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3c68]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3c98]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:WindowsTemp
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataLocalTemp
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataRoamingMicrosoftWindowsRecent
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataRoamingMicrosoftWindowsRecentCustomDestinations
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations
call qword [sym.imp.ucrtbased.dll_remove]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3cc8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3cf8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3d28]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003b250]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3d58]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3d88]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.DEL__f__q__systemroot__appcompatPrograms.txt
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot__appcompatPrograms.xml
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot__appcompatProgramsInstall.txt
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot__appcompatProgramsInstall.xml
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.C:WindowsPrefetch
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.DEL_C:Userslevin1337AppDataLocalTemp___p
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot_Minidump.
call qword [sym.imp.ucrtbased.dll_system]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3db8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3de8]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 1
lea rcx, [rbp + 0x3e18]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x14003b9d8]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3e48]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x4048], rax
mov edx, 0x44
lea rcx, [rbp + 0x3e78]
call fcn.1400112a3
mov qword [rbp + 0x4050], rax
mov rdx, qword [rbp + 0x4050]
mov rcx, qword [rbp + 0x4048]
call fcn.140011447
lea rdx, [0x140038d85]
mov rcx, rax
call fcn.14001115e
mov qword [rbp + 0x4058], rax
lea rdx, [0x14001106e]
mov rcx, qword [rbp + 0x4058]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.DEL__f__q_C:WindowsSystem32_sru
call qword [sym.imp.ucrtbased.dll_system]
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
nop
jmp 0x140027f28
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rbp + 0x2018], rax
xor edx, edx
mov rcx, qword [rbp + 0x2018]
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14001133e
lea rcx, str.cd_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.C:ProgramDataGooglejdk_binjava.exe__noverify__Xmx3025M__Djava.library.path._natives_.__cp_C:ProgramDataGooglelaunchCrypt.jar_net.minecraft.client.main.Main_854___height_480___version_Optifine_1.16.5___gameDir_C:ProgramDataGooglelaunch____assetIndex_1.16___uuid_N_A___accessToken_0___userType_mojang
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, [0x140039c54]
lea rcx, [rbp + 0x1fd8]
call fcn.140011307
movzx eax, al
test eax, eax
je 0x140027f44
jmp 0x140027f28
lea rcx, [rbp + 0x1fd8]
call fcn.140011212
nop
lea rcx, [rbp + 0x1f98]
call fcn.140011212
nop
lea rcx, [rbp + 0x1e38]
call fcn.140011212
nop
lea rcx, [rbp + 0x838]
call fcn.140011212
nop
lea rcx, [rbp + 0x710]
call fcn.1400111c7
nop
lea rcx, [rbp + 0x6c8]
call fcn.140011212
nop
lea rcx, [rbp + 0x688]
call fcn.140011212
nop
lea rcx, [rbp + 0x648]
call fcn.140011212
nop
lea rcx, [rbp + 0x568]
call fcn.140011212
nop
lea rcx, [rbp + 0x528]
call fcn.140011ad2
nop
lea rcx, [rbp + 0x4c8]
call fcn.140011212
nop
lea rcx, [rbp + 0x488]
call fcn.140011212
nop
lea rcx, [rbp + 0x448]
call fcn.140011212
nop
lea rcx, [rbp + 0x3e0]
call fcn.14001b020
nop
lea rcx, [rbp + 0x398]
call fcn.140011212
nop
lea rcx, [rbp + 0x330]
call fcn.14001b020
nop
lea rcx, [rbp + 0x2e8]
call fcn.140011212
nop
lea rcx, [rbp + 0x280]
call fcn.14001b020
nop
lea rcx, [rbp + 0x238]
call fcn.140011212
nop
lea rcx, [rbp + 0x1d0]
call fcn.14001b020
nop
lea rcx, [rbp + 0x188]
call fcn.140011212
nop
lea rcx, [rbp + 0x120]
call fcn.14001b020
nop
lea rcx, [rbp + 0xd8]
call fcn.140011212
nop
lea rcx, [rbp + 0x70]
call fcn.14001b020
nop
lea rcx, [rbp + 0x28]
call fcn.140011212
jmp 0x140028086
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140037280]
call fcn.140011938
mov rax, rdi
mov rcx, qword [rbp + 0x40d8]
xor rcx, rbp
call fcn.140011564
lea rsp, [rbp + 0x40e0]
pop rdi
pop rsi
pop rbp
ret