Function at 0x14001151e
Capabilities:
Create directory
Delete file
Download url
Execute command
Receive data
Set console window title

Disassembly:
jmp 0x140018b00
push rbp
push rdi
sub rsp, 0x9f8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x1b2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002a040]
xor rax, rbp
mov qword [rbp + 0x9b8], rax
lea rcx, [0x1400300f8]
call fcn.14001174e
xor edx, edx
lea rcx, str.C:ProgramDataEW
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:ProgramDataEW1_16_5
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [0x140024b90]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.____________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.__________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.______________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140024d60]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140024dd0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140024f20]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rcx, [rbp + 8]
call fcn.14001173a
nop
lea rcx, [rbp + 0x48]
call fcn.14001173a
nop
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea rdx, [0x140024f70]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [rbp + 8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14001102d
lea rdx, [0x140024f80]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [rbp + 0x48]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14001102d
lea rdx, str.crack
lea rcx, [rbp + 0x48]
call fcn.1400111fe
movzx eax, al
test eax, eax
je 0x140018e16
mov edx, 0x44
lea rcx, [rbp + 0x698]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x6c8]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x6f8]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024f98]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x728]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024fb8]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140018e55
mov edx, 1
lea rcx, [rbp + 0x758]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.levin
lea rcx, [rbp + 8]
call fcn.1400111fe
movzx eax, al
test eax, eax
jne 0x140018e83
lea rdx, str.crack
lea rcx, [rbp + 0x48]
call fcn.1400111fe
movzx eax, al
test eax, eax
je 0x140018e85
jmp 0x140018e55
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140024b90]
call qword [sym.imp.ucrtbased.dll_system]
lea rax, str.C:_ProgramData_EW_1_16_5_assets
mov qword [rbp + 0x88], rax
lea rax, str.C:_ProgramData_EW_1_16_5_natives
mov qword [rbp + 0xa8], rax
lea rax, str.C:_ProgramData_EW_1_16_5_client.jar
mov qword [rbp + 0xc8], rax
lea rax, str.C:_ProgramData_EW_jdk_18.0.2.1
mov qword [rbp + 0xe8], rax
lea rax, str.C:_ProgramData_EW_1_16_5_client.bat
mov qword [rbp + 0x108], rax
lea rdx, [rbp + 0x128]
mov rcx, qword [rbp + 0x88]
call fcn.1400198e0
test eax, eax
jne 0x140018f0f
lea rdx, [0x140024ad5]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
jmp 0x140018f7d
lea rdx, [0x1400250b8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, str.C:ProgramDataEW1_16_5_assets.rar
lea rcx, [rbp + 0x178]
call fcn.14001133e
lea rcx, [rbp + 0x178]
call fcn.1400110c3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.https:__getfile.dokpub.com_yandex_get_https:__disk.yandex.ru_d_aGTXL0Ebe5RuMA
xor ecx, ecx
call fcn.1400111bd
mov dword [rbp + 0x1b4], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataEW1_16_5_assets.rar_C:ProgramDataEW1_16_5
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x178]
call fcn.140011163
lea rdx, [rbp + 0x128]
mov rcx, qword [rbp + 0x88]
call fcn.1400198e0
test eax, eax
jne 0x140018fac
lea rdx, [0x140024ad5]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
jmp 0x140019092
mov edx, 1
lea rcx, [rbp + 0x788]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140024b90]
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 1
lea rcx, [rbp + 0x7b8]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x1400251e8]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataEW1_16_5_natives.rar
lea rcx, [rbp + 0x1d8]
call fcn.14001133e
lea rcx, [rbp + 0x1d8]
call fcn.1400110c3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.https:__getfile.dokpub.com_yandex_get_https:__disk.yandex.ru_d_tI4NszQXdgHy7g
xor ecx, ecx
call fcn.1400111bd
mov dword [rbp + 0x214], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataEW1_16_5_natives.rar_C:ProgramDataEW1_16_5
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x1d8]
call fcn.140011163
lea rdx, [rbp + 0x128]
mov rcx, qword [rbp + 0xc8]
call fcn.1400198e0
test eax, eax
jne 0x1400190c1
lea rdx, [0x140024ad5]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
jmp 0x1400191a7
mov edx, 1
lea rcx, [rbp + 0x7e8]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140024b90]
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 1
lea rcx, [rbp + 0x818]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140025318]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataEW1_16_5minecraft.rar
lea rcx, [rbp + 0x238]
call fcn.14001133e
lea rcx, [rbp + 0x238]
call fcn.1400110c3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.https:__getfile.dokpub.com_yandex_get_https:__disk.yandex.ru_d_Y8EhBQqHftSQBg
xor ecx, ecx
call fcn.1400111bd
mov dword [rbp + 0x274], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataEW1_16_5minecraft.rar_C:ProgramDataEW1_16_5
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x238]
call fcn.140011163
lea rdx, [rbp + 0x128]
mov rcx, qword [rbp + 0x108]
call fcn.1400198e0
test eax, eax
jne 0x1400191d6
lea rdx, [0x140024ad5]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
jmp 0x1400192bc
mov edx, 1
lea rcx, [rbp + 0x848]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140024b90]
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 1
lea rcx, [rbp + 0x878]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140025448]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataEW1_16_5debag.rar
lea rcx, [rbp + 0x298]
call fcn.14001133e
lea rcx, [rbp + 0x298]
call fcn.1400110c3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.https:__getfile.dokpub.com_yandex_get_https:__disk.yandex.ru_d_VbSjGn2hiocuLg
xor ecx, ecx
call fcn.1400111bd
mov dword [rbp + 0x2d4], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataEW1_16_5debag.rar_C:ProgramDataEW1_16_5
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x298]
call fcn.140011163
lea rcx, [0x140024b90]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, [rbp + 0x128]
mov rcx, qword [rbp + 0xe8]
call fcn.1400198e0
test eax, eax
jne 0x1400192f8
lea rdx, [0x140024ad5]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
jmp 0x1400193de
mov edx, 1
lea rcx, [rbp + 0x8a8]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140024b90]
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 1
lea rcx, [rbp + 0x8d8]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140025598]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataEWjava.rar
lea rcx, [rbp + 0x2f8]
call fcn.14001133e
lea rcx, [rbp + 0x2f8]
call fcn.1400110c3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.https:__getfile.dokpub.com_yandex_get_https:__disk.yandex.ru_d_1VlTPH0zcaHDyQ
xor ecx, ecx
call fcn.1400111bd
mov dword [rbp + 0x334], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataEWjava.rar_C:ProgramDataEW
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x2f8]
call fcn.140011163
lea rcx, str.C:ProgramDataEWjava.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataEW1_16_5debag.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataEW1_16_5_assets.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataEW1_16_5minecraft.rar
call qword [sym.imp.ucrtbased.dll_remove]
mov edx, 1
lea rcx, [rbp + 0x908]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x1400256a0]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x938]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x358]
call fcn.14001173a
nop
lea rdx, [0x140025710]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110e6
lea rdx, [rbp + 0x358]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14001102d
lea rdx, [0x14002571c]
lea rcx, [rbp + 0x358]
call fcn.1400111fe
movzx eax, al
test eax, eax
je 0x1400194fc
lea rcx, str.start_C:ProgramDataEW1_16_5Cleaner.bat
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.start_C:ProgramDataEW1_16_5Wifi.bat
call qword [sym.imp.ucrtbased.dll_system]
jmp 0x1400195ac
mov edx, 1
lea rcx, [rbp + 0x968]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140025788]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x998]
call fcn.1400111c7
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400112cb
lea rdx, [0x140024ad5]
mov rcx, rax
call fcn.1400110e6
lea rdx, [0x140011050]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.start_C:ProgramDataEW1_16_5client.bat
call qword [sym.imp.ucrtbased.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.taskkill__IM_conhost.exe__F
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.taskkill__IM_conhost.exe__F
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, [0x14002571c]
lea rcx, [rbp + 0x358]
call fcn.1400111fe
movzx eax, al
test eax, eax
je 0x1400195c8
jmp 0x1400195ac
lea rcx, [rbp + 0x358]
call fcn.140011163
nop
lea rcx, [rbp + 0x48]
call fcn.140011163
nop
lea rcx, [rbp + 8]
call fcn.140011163
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x30]
lea rdx, [0x1400243c0]
call fcn.140011613
mov eax, edi
mov rcx, qword [rbp + 0x9b8]
xor rcx, rbp
call fcn.14001138e
lea rsp, [rbp + 0x9c8]
pop rdi
pop rbp
ret