Function at 0x140001e20
Capabilities:
Execute command
Get common file path
Set current directory
Write and execute a file
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov r14, rcx
xor r12d, r12d
xor r9d, r9d
lea r8d, [r12 + 0x23]
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
lea rax, [rbp + 0x10]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140001e90
movabs r15, 0x7fffffffffffffff
cmp rbx, r15
ja 0x140002870
movabs rax, 0x8000000000000000
mov ecx, 0x16
mov qword [rbp - 0x80], 0xf
cmp rbx, 0xf
ja 0x140001ee9
mov qword [rsp + 0x78], rbx
mov r8, rbx
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x68]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x68], r12b
jmp 0x140001f71
mov rdi, rbx
or rdi, 0xf
cmp rdi, r15
jbe 0x140001f1b
mov rdi, r15
add rax, 0x27
mov rcx, rax
call fcn.140003770
test rax, rax
je 0x140002810
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140001f50
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140001f3e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002852
jmp 0x140001efc
test rcx, rcx
je 0x140001f4d
call fcn.140003770
mov rsi, rax
jmp 0x140001f50
mov rsi, r12
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], rdi
mov r8, rbx
lea rdx, [rbp + 0x10]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], r12b
mov r8d, 0x10
lea rdx, str.droid_files_adb
lea rcx, [rsp + 0x68]
call fcn.140002e20
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov r8d, 1
lea rdx, [0x14000546c]
lea rcx, [rsp + 0x68]
call fcn.140002e20
mov r13, qword [rsp + 0x78]
mov rax, r15
sub rax, r13
cmp rax, 0x16
jb 0x140002876
lea r15, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova r15, qword [rsp + 0x68]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
lea rsi, [r13 + 0x16]
mov ebx, 0xf
lea rdi, [rbp - 0x10]
cmp rsi, rbx
jbe 0x140002084
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140002045
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003770
test rax, rax
je 0x1400027d0
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002080
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000206e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002858
jmp 0x140002026
test rcx, rcx
je 0x14000207d
call fcn.140003770
mov rdi, rax
jmp 0x140002080
mov rdi, r12
mov qword [rbp - 0x10], rdi
mov qword [rbp], rsi
mov qword [rbp + 8], rbx
mov r8, r13
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.reset_guest_global.bat]
movups xmmword [rdi + r13], xmm0
mov eax, dword [0x140005540]
mov dword [rdi + r13 + 0x10], eax
movzx eax, word [0x140005544]
mov word [rdi + r13 + 0x14], ax
mov byte [rdi + rsi], 0
mov r13, qword [rsp + 0x78]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 0x16
jb 0x14000287c
lea r15, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova r15, qword [rsp + 0x68]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
lea rsi, [r13 + 0x16]
mov ebx, 0xf
lea rdi, [rbp - 0x30]
cmp rsi, rbx
jbe 0x14000218d
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000214e
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003770
test rax, rax
je 0x140002791
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002189
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140002177
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000285e
jmp 0x14000212f
test rcx, rcx
je 0x140002186
call fcn.140003770
mov rdi, rax
jmp 0x140002189
mov rdi, r12
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rbx
mov r8, r13
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.reset_guest_taiwan.bat]
movups xmmword [rdi + r13], xmm0
mov eax, dword [0x140005558]
mov dword [rdi + r13 + 0x10], eax
movzx eax, word [0x14000555c]
mov word [rdi + r13 + 0x14], ax
mov byte [rdi + rsi], 0
mov r13, qword [rsp + 0x78]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 0x13
jb 0x140002882
lea r15, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova r15, qword [rsp + 0x68]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea rsi, [r13 + 0x13]
mov ebx, 0xf
lea rdi, [rbp - 0x50]
cmp rsi, rbx
jbe 0x140002296
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140002257
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003770
test rax, rax
je 0x140002752
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002292
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140002280
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002864
jmp 0x140002238
test rcx, rcx
je 0x14000228f
call fcn.140003770
mov rdi, rax
jmp 0x140002292
mov rdi, r12
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rbx
mov r8, r13
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.reset_guest_vng.bat]
movups xmmword [rdi + r13], xmm0
movzx eax, word [0x140005570]
mov word [rdi + r13 + 0x10], ax
movzx eax, byte [0x140005572]
mov byte [rdi + r13 + 0x12], al
mov byte [rdi + rsi], 0
mov r13, qword [rsp + 0x78]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 0x15
jb 0x14000284c
lea r15, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova r15, qword [rsp + 0x68]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
lea rsi, [r13 + 0x15]
mov ebx, 0xf
lea rdi, [rbp - 0x70]
cmp rsi, rbx
jbe 0x1400023a0
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140002361
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003770
test rax, rax
je 0x140002713
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000239c
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000238a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000286a
jmp 0x140002342
test rcx, rcx
je 0x140002399
call fcn.140003770
mov rdi, rax
jmp 0x14000239c
mov rdi, r12
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rbx
mov r8, r13
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.reset_guest_korea.bat]
movups xmmword [rdi + r13], xmm0
mov eax, dword [0x140005588]
mov dword [rdi + r13 + 0x10], eax
movzx eax, byte [0x14000558c]
mov byte [rdi + r13 + 0x14], al
mov byte [rdi + rsi], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
mov rdi, r12
mov esi, r12d
mov rbx, qword [r14 + 0x10]
mov rcx, r14
mov r15, qword [r14 + 0x18]
cmp r15, 0xf
jbe 0x140002412
mov rcx, qword [r14]
cmp rbx, 0xe
jne 0x140002487
mov r8, rbx
lea rdx, str.com.tencent.ig
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140002487
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova r9, qword [rbp - 0x10]
mov rbx, qword [rbp]
lea rcx, [rsp + 0x48]
cmp rbx, 0xf
ja 0x14000246e
mov qword [rsp + 0x58], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x48], sil
lea rdi, str.echo_off_r_nSetLocal_EnableExtensions_EnableDelayedExpansion_r_nadb_kill_server_r_nadb_start_server_r_ngoto_RoutineX_r_n:resume1_r_nadb_push__TEMP_device_id.xml__data_data_com.tencent.ig_shared_prefs_r_nadb_push__TEMP_device_id.xml__data_data_com.tencent.ig_1_shared_prefs_r_n::Handle_AndroidID_here__Change_r_necho__Your_Old_Device_ID_:__r_nadb_shell_settings_get_secure_android_id_r_nset__IDD__r_nfor__L___i_in__1_1_16__do_call_:Pseudo_r_nadb_shell_settings_put_secure_android_id__IDD__r_nadb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_IDD__r_n_r_nadb_shell_setprop_ro.mac_address__IDD__r_nadb_shell_setprop_ro.product.device__IDD__r_nadb_shell_setprop_ro.product.brand__IDD__r_nadb_shell_setprop_ro.product.model__IDD__r_nadb_shell_setprop_ro.product.name__IDD__r_nadb_shell_setprop_ro.product.manufacturer__IDD__r_nadb_shell_setprop_ro.android_id__IDD__r_nadb_shell_setprop_net.hostname__IDD__r_nadb_shell_setprop_gaid__IDD__r_nadb_shell_setprop_android.device.id__IDD__r_nadb_shell_setprop_ro.serialno__IDD__r_nadb_shell_setprop_ro.runtime.firstboot__IDD__r_n_r_necho__Your_New_Device_ID_:__r_necho__IDD__r_ngoto_EmptyRecords_r_n:resume2_r_necho_Done_r_ntimeout__t_3_r_ngoto_:eof_r_n:EmptyRecords_r_necho_Cleaning_ID_related_files_please_wait_2_minutes_r_nadb_kill_server___nul_2_1_r_nadb_start_server___nul_2_1_r_nadb_remount___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_files_itop_login.txt___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_shared_prefs_itop.xml___nul_2_1_r_nadb_shell_rm__rf__storage_emulated_0_com.activision.callofduty.shooter___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_rawdata___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_
mov esi, 0x3b6f
jmp 0x1400025f2
mov rdx, rbx
call fcn.140003290
lea rdi, str.echo_off_r_nSetLocal_EnableExtensions_EnableDelayedExpansion_r_nadb_kill_server_r_nadb_start_server_r_ngoto_RoutineX_r_n:resume1_r_nadb_push__TEMP_device_id.xml__data_data_com.tencent.ig_shared_prefs_r_nadb_push__TEMP_device_id.xml__data_data_com.tencent.ig_1_shared_prefs_r_n::Handle_AndroidID_here__Change_r_necho__Your_Old_Device_ID_:__r_nadb_shell_settings_get_secure_android_id_r_nset__IDD__r_nfor__L___i_in__1_1_16__do_call_:Pseudo_r_nadb_shell_settings_put_secure_android_id__IDD__r_nadb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_IDD__r_n_r_nadb_shell_setprop_ro.mac_address__IDD__r_nadb_shell_setprop_ro.product.device__IDD__r_nadb_shell_setprop_ro.product.brand__IDD__r_nadb_shell_setprop_ro.product.model__IDD__r_nadb_shell_setprop_ro.product.name__IDD__r_nadb_shell_setprop_ro.product.manufacturer__IDD__r_nadb_shell_setprop_ro.android_id__IDD__r_nadb_shell_setprop_net.hostname__IDD__r_nadb_shell_setprop_gaid__IDD__r_nadb_shell_setprop_android.device.id__IDD__r_nadb_shell_setprop_ro.serialno__IDD__r_nadb_shell_setprop_ro.runtime.firstboot__IDD__r_n_r_necho__Your_New_Device_ID_:__r_necho__IDD__r_ngoto_EmptyRecords_r_n:resume2_r_necho_Done_r_ntimeout__t_3_r_ngoto_:eof_r_n:EmptyRecords_r_necho_Cleaning_ID_related_files_please_wait_2_minutes_r_nadb_kill_server___nul_2_1_r_nadb_start_server___nul_2_1_r_nadb_remount___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_files_itop_login.txt___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_shared_prefs_itop.xml___nul_2_1_r_nadb_shell_rm__rf__storage_emulated_0_com.activision.callofduty.shooter___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_rawdata___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.tencent.ig_1_
mov esi, 0x3b6f
jmp 0x1400025f2
mov rcx, r14
cmp r15, 0xf
jbe 0x140002493
mov rcx, qword [r14]
cmp rbx, 0xf
jne 0x140002507
mov r8, rbx
lea rdx, str.com.rekoo.pubgm
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140002507
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], rbx
cmova r9, qword [rbp - 0x30]
mov rbx, qword [rbp - 0x20]
lea rcx, [rsp + 0x48]
cmp rbx, 0xf
ja 0x1400024ee
mov qword [rsp + 0x58], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x48], sil
lea rdi, str.echo_off_r_nSetLocal_EnableExtensions_EnableDelayedExpansion_r_nadb_kill_server_r_nadb_start_server_r_ngoto_RoutineX_r_n:resume1_r_nadb_push__TEMP_device_id.xml__data_data_com.rekoo.pubgm_shared_prefs_r_nadb_push__TEMP_device_id.xml__data_data_com.rekoo.pubgm_1_shared_prefs_r_n::Handle_AndroidID_here__Change_r_necho__Your_Old_Device_ID_:__r_nadb_shell_settings_get_secure_android_id_r_nset__IDD__r_nfor__L___i_in__1_1_16__do_call_:Pseudo_r_nadb_shell_settings_put_secure_android_id__IDD__r_nadb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_IDD__r_n_r_nadb_shell_setprop_ro.mac_address__IDD__r_nadb_shell_setprop_ro.product.device__IDD__r_nadb_shell_setprop_ro.product.brand__IDD__r_nadb_shell_setprop_ro.product.model__IDD__r_nadb_shell_setprop_ro.product.name__IDD__r_nadb_shell_setprop_ro.product.manufacturer__IDD__r_nadb_shell_setprop_ro.android_id__IDD__r_nadb_shell_setprop_net.hostname__IDD__r_nadb_shell_setprop_gaid__IDD__r_nadb_shell_setprop_android.device.id__IDD__r_nadb_shell_setprop_ro.serialno__IDD__r_nadb_shell_setprop_ro.runtime.firstboot__IDD__r_n_r_necho__Your_New_Device_ID_:__r_necho__IDD__r_ngoto_EmptyRecords_r_n:resume2_r_necho_Done_r_ntimeout__t_3_r_ngoto_:eof_r_n:EmptyRecords_r_necho_Cleaning_ID_related_files_please_wait_2_minutes_r_nadb_kill_server___nul_2_1_r_nadb_start_server___nul_2_1_r_nadb_remount___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_files_itop_login.txt___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_shared_prefs_itop.xml___nul_2_1_r_nadb_shell_rm__rf__storage_emulated_0_com.activision.callofduty.shooter___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_rawdata___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_dat
mov esi, 0x3bdc
jmp 0x1400025f2
mov rdx, rbx
call fcn.140003290
lea rdi, str.echo_off_r_nSetLocal_EnableExtensions_EnableDelayedExpansion_r_nadb_kill_server_r_nadb_start_server_r_ngoto_RoutineX_r_n:resume1_r_nadb_push__TEMP_device_id.xml__data_data_com.rekoo.pubgm_shared_prefs_r_nadb_push__TEMP_device_id.xml__data_data_com.rekoo.pubgm_1_shared_prefs_r_n::Handle_AndroidID_here__Change_r_necho__Your_Old_Device_ID_:__r_nadb_shell_settings_get_secure_android_id_r_nset__IDD__r_nfor__L___i_in__1_1_16__do_call_:Pseudo_r_nadb_shell_settings_put_secure_android_id__IDD__r_nadb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_IDD__r_n_r_nadb_shell_setprop_ro.mac_address__IDD__r_nadb_shell_setprop_ro.product.device__IDD__r_nadb_shell_setprop_ro.product.brand__IDD__r_nadb_shell_setprop_ro.product.model__IDD__r_nadb_shell_setprop_ro.product.name__IDD__r_nadb_shell_setprop_ro.product.manufacturer__IDD__r_nadb_shell_setprop_ro.android_id__IDD__r_nadb_shell_setprop_net.hostname__IDD__r_nadb_shell_setprop_gaid__IDD__r_nadb_shell_setprop_android.device.id__IDD__r_nadb_shell_setprop_ro.serialno__IDD__r_nadb_shell_setprop_ro.runtime.firstboot__IDD__r_n_r_necho__Your_New_Device_ID_:__r_necho__IDD__r_ngoto_EmptyRecords_r_n:resume2_r_necho_Done_r_ntimeout__t_3_r_ngoto_:eof_r_n:EmptyRecords_r_necho_Cleaning_ID_related_files_please_wait_2_minutes_r_nadb_kill_server___nul_2_1_r_nadb_start_server___nul_2_1_r_nadb_remount___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_files_itop_login.txt___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_shared_prefs_itop.xml___nul_2_1_r_nadb_shell_rm__rf__storage_emulated_0_com.activision.callofduty.shooter___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.rekoo.pubgm_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_rawdata___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_dat
mov esi, 0x3bdc
jmp 0x1400025f2
mov rcx, r14
cmp r15, 0xf
jbe 0x140002513
mov rcx, qword [r14]
cmp rbx, 0x12
jne 0x140002585
mov r8, rbx
lea rdx, str.com.vng.pubgmobile
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140002585
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r9, qword [rbp - 0x50]
mov rbx, qword [rbp - 0x40]
lea rcx, [rsp + 0x48]
cmp rbx, 0xf
ja 0x14000256f
mov qword [rsp + 0x58], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x48], sil
lea rdi, str.echo_off_r_nSetLocal_EnableExtensions_EnableDelayedExpansion_r_nadb_kill_server_r_nadb_start_server_r_ngoto_RoutineX_r_n:resume1_r_nadb_push__TEMP_device_id.xml__data_data_com.vng.pubgmobile_shared_prefs_r_nadb_push__TEMP_device_id.xml__data_data_com.vng.pubgmobile_1_shared_prefs_r_n::Handle_AndroidID_here__Change_r_necho__Your_Old_Device_ID_:__r_nadb_shell_settings_get_secure_android_id_r_nset__IDD__r_nfor__L___i_in__1_1_16__do_call_:Pseudo_r_nadb_shell_settings_put_secure_android_id__IDD__r_nadb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_IDD__r_n_r_nadb_shell_setprop_ro.mac_address__IDD__r_nadb_shell_setprop_ro.product.device__IDD__r_nadb_shell_setprop_ro.product.brand__IDD__r_nadb_shell_setprop_ro.product.model__IDD__r_nadb_shell_setprop_ro.product.name__IDD__r_nadb_shell_setprop_ro.product.manufacturer__IDD__r_nadb_shell_setprop_ro.android_id__IDD__r_nadb_shell_setprop_net.hostname__IDD__r_nadb_shell_setprop_gaid__IDD__r_nadb_shell_setprop_android.device.id__IDD__r_nadb_shell_setprop_ro.serialno__IDD__r_nadb_shell_setprop_ro.runtime.firstboot__IDD__r_n_r_necho__Your_New_Device_ID_:__r_necho__IDD__r_ngoto_EmptyRecords_r_n:resume2_r_necho_Done_r_ntimeout__t_3_r_ngoto_:eof_r_n:EmptyRecords_r_necho_Cleaning_ID_related_files_please_wait_2_minutes_r_nadb_kill_server___nul_2_1_r_nadb_start_server___nul_2_1_r_nadb_remount___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_files_itop_login.txt___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_shared_prefs_itop.xml___nul_2_1_r_nadb_shell_rm__rf__storage_emulated_0_com.activision.callofduty.shooter___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_r
mov esi, 0x3d23
jmp 0x1400025f2
mov rdx, rbx
call fcn.140003290
lea rdi, str.echo_off_r_nSetLocal_EnableExtensions_EnableDelayedExpansion_r_nadb_kill_server_r_nadb_start_server_r_ngoto_RoutineX_r_n:resume1_r_nadb_push__TEMP_device_id.xml__data_data_com.vng.pubgmobile_shared_prefs_r_nadb_push__TEMP_device_id.xml__data_data_com.vng.pubgmobile_1_shared_prefs_r_n::Handle_AndroidID_here__Change_r_necho__Your_Old_Device_ID_:__r_nadb_shell_settings_get_secure_android_id_r_nset__IDD__r_nfor__L___i_in__1_1_16__do_call_:Pseudo_r_nadb_shell_settings_put_secure_android_id__IDD__r_nadb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_IDD__r_n_r_nadb_shell_setprop_ro.mac_address__IDD__r_nadb_shell_setprop_ro.product.device__IDD__r_nadb_shell_setprop_ro.product.brand__IDD__r_nadb_shell_setprop_ro.product.model__IDD__r_nadb_shell_setprop_ro.product.name__IDD__r_nadb_shell_setprop_ro.product.manufacturer__IDD__r_nadb_shell_setprop_ro.android_id__IDD__r_nadb_shell_setprop_net.hostname__IDD__r_nadb_shell_setprop_gaid__IDD__r_nadb_shell_setprop_android.device.id__IDD__r_nadb_shell_setprop_ro.serialno__IDD__r_nadb_shell_setprop_ro.runtime.firstboot__IDD__r_n_r_necho__Your_New_Device_ID_:__r_necho__IDD__r_ngoto_EmptyRecords_r_n:resume2_r_necho_Done_r_ntimeout__t_3_r_ngoto_:eof_r_n:EmptyRecords_r_necho_Cleaning_ID_related_files_please_wait_2_minutes_r_nadb_kill_server___nul_2_1_r_nadb_start_server___nul_2_1_r_nadb_remount___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_files_itop_login.txt___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_shared_prefs_itop.xml___nul_2_1_r_nadb_shell_rm__rf__storage_emulated_0_com.activision.callofduty.shooter___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.vng.pubgmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_r
mov esi, 0x3d23
jmp 0x1400025f2
cmp r15, 0xf
jbe 0x14000258e
mov r14, qword [r14]
cmp rbx, 0x11
jne 0x1400025f2
mov r8, rbx
lea rdx, str.com.pubg.krmobile
mov rcx, r14
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400025f2
lea r9, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r9, qword [rbp - 0x70]
mov rbx, qword [rbp - 0x60]
lea rcx, [rsp + 0x48]
cmp rbx, 0xf
ja 0x1400025de
mov qword [rsp + 0x58], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x48], sil
jmp 0x1400025e6
mov rdx, rbx
call fcn.140003290
lea rdi, str.echo_off_r_nSetLocal_EnableExtensions_EnableDelayedExpansion_r_nadb_kill_server_r_nadb_start_server_r_ngoto_RoutineX_r_n:resume1_r_nadb_push__TEMP_device_id.xml__data_data_com.pubg.krmobile_shared_prefs_r_nadb_push__TEMP_device_id.xml__data_data_com.pubg.krmobile_1_shared_prefs_r_n::Handle_AndroidID_here__Change_r_necho__Your_Old_Device_ID_:__r_nadb_shell_settings_get_secure_android_id_r_nset__IDD__r_nfor__L___i_in__1_1_16__do_call_:Pseudo_r_nadb_shell_settings_put_secure_android_id__IDD__r_nadb_shell_content_insert___uri_content:__settings_secure___bind_name:s:android_id___bind_value:s:_IDD__r_n_r_nadb_shell_setprop_ro.mac_address__IDD__r_nadb_shell_setprop_ro.product.device__IDD__r_nadb_shell_setprop_ro.product.brand__IDD__r_nadb_shell_setprop_ro.product.model__IDD__r_nadb_shell_setprop_ro.product.name__IDD__r_nadb_shell_setprop_ro.product.manufacturer__IDD__r_nadb_shell_setprop_ro.android_id__IDD__r_nadb_shell_setprop_net.hostname__IDD__r_nadb_shell_setprop_gaid__IDD__r_nadb_shell_setprop_android.device.id__IDD__r_nadb_shell_setprop_ro.serialno__IDD__r_nadb_shell_setprop_ro.runtime.firstboot__IDD__r_n_r_necho__Your_New_Device_ID_:__r_necho__IDD__r_ngoto_EmptyRecords_r_n:resume2_r_necho_Done_r_ntimeout__t_3_r_ngoto_:eof_r_n:EmptyRecords_r_necho_Cleaning_ID_related_files_please_wait_2_minutes_r_nadb_kill_server___nul_2_1_r_nadb_start_server___nul_2_1_r_nadb_remount___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_files_itop_login.txt___nul_2_1_r_nadb_shell_rm__rf__data_data_com.activision.callofduty.shooter_shared_prefs_itop.xml___nul_2_1_r_nadb_shell_rm__rf__storage_emulated_0_com.activision.callofduty.shooter___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_Logs___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_UpdateInfo___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_TableDatas___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_conversation.ini___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_GameErrorNoRecords___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_StatEventReportedFlag___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_ImageDownload___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_1_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_MMKV___nul_2_1_r_nadb_shell_rm__rf__sdcard_Android_data_com.pubg.krmobile_files_UE4Game_ShadowTrackerExtra_ShadowTrackerExtra_Saved_rawdata___nul_2_1_r
mov esi, 0x3cb6
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__unlink]
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rcx, qword [rsp + 0x48]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140002651
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140002676
mov dword [rbp - 0x78], r12d
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x78]
mov r8d, esi
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rcx, qword [rsp + 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1400026ce
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400037ac
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140002720
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000271a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000271a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400037ac
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14000275f
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002759
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002759
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400037ac
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14000279e
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002798
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002798
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400037ac
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x1400027dd
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400027d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400037ac
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x14000281c
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002817
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002817
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400037ac
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140003750
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011a0
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.1400011a0
nop
call fcn.1400011a0
nop
call fcn.1400011a0
nop
call fcn.1400011a0
int3