Function at 0x464c40
Capabilities:
Delete file
Execute command
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cb8dc
mov eax, dword fs:[0]
push eax
sub esp, 0x208
mov eax, dword [0x654c00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 1
push 0x45fe20
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
jne 0x464c9e
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c56ce
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov esi, eax
lea eax, [ebp - 0x60]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 1
push 0x1f4
push 0x3e8
push dword [ebp - 0x60]
push dword [ebp - 0x5c]
push esi
call dword [sym.imp.USER32.dll_MoveWindow]
mov ecx, 0x68db28
call fcn.0045a140
call fcn.0045f0c0
test al, al
jne 0x464ce5
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm0, xmm0
lea ecx, [ebp - 0x2c]
push 0x68dc0c
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.00454160
mov dword [ebp - 4], 0
lea eax, [ebp - 0x2c]
mov esi, dword [ebp - 0x18]
cmp esi, 0xf
mov edi, dword [ebp - 0x2c]
push 8
push str.BABA_VIP
push dword [ebp - 0x1c]
cmova eax, edi
push eax
call fcn.004572e0
add esp, 0x10
test al, al
je 0x464d35
mov ecx, str.1142801968130170880
jmp 0x464dcf
push 8
push str.HELL_VIP
push dword [ebp - 0x1c]
cmp esi, 0xf
lea eax, [ebp - 0x2c]
cmova eax, edi
push eax
call fcn.004572e0
add esp, 0x10
test al, al
je 0x464d5c
mov ecx, str.1243905483572777061
jmp 0x464dcf
push 0xc
push str.Skeleton_vip
push dword [ebp - 0x1c]
cmp esi, 0xf
lea eax, [ebp - 0x2c]
cmova eax, edi
push eax
call fcn.004572e0
add esp, 0x10
test al, al
je 0x464d83
mov ecx, str.1246938549052379186
jmp 0x464dcf
push 8
push str.PANDA_BP
push dword [ebp - 0x1c]
cmp esi, 0xf
lea eax, [ebp - 0x2c]
cmova eax, edi
push eax
call fcn.004572e0
add esp, 0x10
test al, al
je 0x464daa
mov ecx, str.1247652267176366191
jmp 0x464dcf
push 9
push str.DEFAULTER
push dword [ebp - 0x1c]
cmp esi, 0xf
lea eax, [ebp - 0x2c]
cmova eax, edi
push eax
call fcn.004572e0
add esp, 0x10
test al, al
je 0x464ddd
mov ecx, str.1215016893992144936
sub esp, 8
lea edx, [ebp - 0x48]
call fcn.00448920
add esp, 8
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
call fcn.00455150
push 0x45fc10
lea ecx, [ebp - 0x50]
call fcn.00469440
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x465d68
push eax
push dword [ebp - 0x50]
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
jne 0x465d68
xorps xmm0, xmm0
lea ecx, [ebp - 0x80]
push 0x4633a0
movlpd qword [ebp - 0x50], xmm0
call fcn.00469440
push 0x463cd0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 2
call fcn.00469440
push 0x463310
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 3
call fcn.00469440
push 0xb8
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 4
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push str.settings.txt
lea ecx, [ebp - 0x210]
call fcn.00454b50
mov byte [ebp - 4], 5
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d4c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___Do_you_want_to_use_the_last_settings_:_1__
mov ecx, eax
call fcn.004559f0
push 0x45d3d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, str._YES_
mov ecx, eax
mov edx, esi
call fcn.004559f0
push 0x45d4c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___2__
mov ecx, eax
call fcn.004559f0
push 0x45d3a0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edi, str._NO_
mov ecx, eax
mov edx, edi
call fcn.004559f0
push 0x45d370
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d430
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____:
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x211]
call fcn.004694e0
cmp byte [ebp - 0x211], 0x31
jne 0x4651ef
cmp dword [ebp - 0x1b4], 0
je 0x4651ef
push 0x65c8b0
lea ecx, [ebp - 0x210]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
push 0x65c8b4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
push 0x65c8b8
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
push 0x65c8c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
lea ecx, [ebp - 0x200]
call fcn.00454a90
test eax, eax
jne 0x464fb5
mov eax, dword [ebp - 0x210]
lea ecx, [ebp - 0x210]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____GameV:
call fcn.004559f0
mov ecx, dword [0x65c8b0]
mov edi, eax
dec ecx
cmp ecx, 3
ja case.default.0x464fd3
jmp dword [ecx*4 + 0x465d70]
push 8
push str._GLOBAL_
jmp 0x465005
push 9
push str._VIETNAM_
jmp 0x465005
push 8
push str._TAIWAN_
jmp 0x465005
push 7
push str._KOREA_
jmp 0x465005
push 7
push str.UNKNOWN
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x2c], xmm0
call fcn.00456320
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 6
mov ecx, edi
cmp dword [ebp - 0x18], 0xf
push dword [ebp - 0x1c]
cmovbe edx, eax
call fcn.0046d380
add esp, 4
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00455150
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____Reset_Guest:
call fcn.004559f0
cmp dword [0x65c8b4], 1
mov edi, eax
mov eax, str._NO_
mov dword [ebp - 0x1c], 0
mov edx, esi
mov dword [ebp - 0x18], 0
cmovne edx, eax
xorps xmm0, xmm0
mov ecx, edx
movups xmmword [ebp - 0x2c], xmm0
lea eax, [ecx + 1]
mov dword [ebp - 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465098
sub ecx, dword [ebp - 0x30]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00456320
mov byte [ebp - 4], 7
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0xf
mov ecx, edi
push dword [ebp - 0x1c]
cmova edx, dword [ebp - 0x2c]
call fcn.0046d380
add esp, 4
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00455150
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____Internal_Hex:
call fcn.004559f0
cmp dword [0x65c8b8], 1
mov edi, eax
mov eax, str._NO_
mov dword [ebp - 0x1c], 0
mov edx, esi
mov dword [ebp - 0x18], 0
cmovne edx, eax
xorps xmm0, xmm0
mov ecx, edx
movups xmmword [ebp - 0x2c], xmm0
lea eax, [ecx + 1]
mov dword [ebp - 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x465120
sub ecx, dword [ebp - 0x30]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00456320
mov byte [ebp - 4], 8
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0xf
mov ecx, edi
push dword [ebp - 0x1c]
cmova edx, dword [ebp - 0x2c]
call fcn.0046d380
add esp, 4
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00455150
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.____Ipad_View:
call fcn.004559f0
cmp dword [0x65c8c0], 1
mov edi, eax
mov eax, str._NO_
mov dword [ebp - 0x1c], 0
cmovne esi, eax
mov dword [ebp - 0x18], 0
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4651a3
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x2c]
call fcn.00456320
mov byte [ebp - 4], 9
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0xf
mov ecx, edi
push dword [ebp - 0x1c]
cmova edx, dword [ebp - 0x2c]
call fcn.0046d380
add esp, 4
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00455150
jmp 0x465582
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d4c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___Select_Game__:
mov ecx, eax
call fcn.004559f0
push 0x45d460
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.1____GLOBAL_
mov ecx, eax
call fcn.004559f0
push 0x45d460
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.2____VIETNAM_
mov ecx, eax
call fcn.004559f0
push 0x45d460
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.3____TAIWAN_
mov ecx, eax
call fcn.004559f0
push 0x45d460
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.4____KOREA_
mov ecx, eax
call fcn.004559f0
push 0x45d370
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x468e10
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d430
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____:
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0x65c8b0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d4c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___Reset_Guest__:_1__
mov ecx, eax
call fcn.004559f0
push 0x45d3d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, esi
mov ecx, eax
call fcn.004559f0
push 0x45d4c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___2__
mov ecx, eax
call fcn.004559f0
push 0x45d3a0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, edi
mov ecx, eax
call fcn.004559f0
push 0x45d370
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d430
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____:
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0x65c8b4
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d4c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___Internal_Hex_:_1__
mov ecx, eax
call fcn.004559f0
push 0x45d3d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, esi
mov ecx, eax
call fcn.004559f0
push 0x45d4c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___2__
mov ecx, eax
call fcn.004559f0
push 0x45d3a0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, edi
mov ecx, eax
call fcn.004559f0
push 0x45d370
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d430
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____:
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0x65c8b8
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d4c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___Ipad_View__:_1__
mov ecx, eax
call fcn.004559f0
push 0x45d3d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, esi
mov ecx, eax
call fcn.004559f0
push 0x45d4c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.___2__
mov ecx, eax
call fcn.004559f0
push 0x45d3a0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, edi
mov ecx, eax
call fcn.004559f0
push 0x45d370
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x643624
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d430
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____:
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0x65c8c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
mov eax, dword [0x65c8c0]
mov edi, dword [0x65c8b4]
mov esi, dword [0x65c8b0]
mov dword [ebp - 0x14], eax
mov eax, dword [0x65c8b8]
push 0xb0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x158]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0x158]
push 2
push str.settings.txt
call fcn.00465ea0
push esi
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0xa
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov edx, 0x640dc4
mov ecx, eax
call fcn.004559f0
push edi
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov edx, 0x640dc4
mov ecx, eax
call fcn.004559f0
push dword [ebp - 0x30]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov edx, 0x640dc4
mov ecx, eax
call fcn.004559f0
push dword [ebp - 0x14]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
lea ecx, [ebp - 0x154]
call fcn.00454a90
test eax, eax
jne 0x465573
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x158]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 5
call fcn.0045d6e0
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.adb_kill_server
call edi
sub esp, 0x14
xorps xmm0, xmm0
mov ecx, esp
push 0x22
movups xmmword [ecx], xmm0
push str.taskkill__F__IM_AndroidProcess.exe
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00456320
call fcn.00451a30
mov ecx, esp
xorps xmm0, xmm0
push 0x20
push str.taskkill__F__IM_ProjectTitan.exe
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00456320
call fcn.00451a30
mov ecx, esp
xorps xmm0, xmm0
push 0x23
push str.taskkill__F__im_AndroidEmulator.exe
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00456320
call fcn.00451a30
mov ecx, esp
xorps xmm0, xmm0
push 0x25
push str.taskkill__F__im_AndroidEmulatorEn.exe
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00456320
call fcn.00451a30
mov ecx, esp
xorps xmm0, xmm0
push 0x25
push str.taskkill__F__im_AndroidEmulatorEx.exe
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00456320
call fcn.00451a30
mov ecx, esp
xorps xmm0, xmm0
push 0x1c
push str.taskkill__F__im_Gameloop.exe
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00456320
call fcn.00451a30
add esp, 0x18
lea ecx, [ebp - 0xa8]
call fcn.00463140
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
push str.emulator
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
call fcn.00456320
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00454160
mov byte [ebp - 4], 0xd
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
push eax
call fcn.00454160
mov byte [ebp - 4], 0xc
call fcn.00463290
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0x30
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp eax, 0xffffffff
je 0x465715
push 0x45d490
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____Emulator_is_already_Running
mov ecx, eax
call fcn.004559f0
jmp 0x4658a0
push 0x45d460
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____Driver_Service_Started
mov ecx, eax
call fcn.004559f0
push 0x32
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0x32
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0x32
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0x1f4
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d4c0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Starting_Emulator
mov ecx, eax
call fcn.004559f0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x17
movups xmmword [ecx], xmm0
push str.netsh_advfirewall_reset
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00456320
call fcn.00451a30
add esp, 0x18
call fcn.004601f0
nop
call fcn.00462f00
test eax, eax
je 0x46585c
cmp eax, 1
je 0x46585c
push str.adb_kill_server
call edi
add esp, 4
lea ecx, [ebp - 0x78]
call fcn.00463140
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x48]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
push str.emulator
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x34], 0
call fcn.00456320
sub esp, 0x18
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x78]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00454160
sub esp, 0x18
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
push eax
call fcn.00454160
mov byte [ebp - 4], 0xf
call fcn.00463290
add esp, 0x30
cmp eax, 0xffffffff
jne 0x465868
lea ecx, [ebp - 0x48]
call fcn.00455150
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xc
call fcn.00455150
push 0xbb8
call esi
jmp 0x4657c0
push 0x2710
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d460
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Emulator_is_Ready
mov ecx, eax
call fcn.004559f0
lea ecx, [ebp - 0x48]
call fcn.00455150
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xc
call fcn.00455150
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d490
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Preparing_Files
mov ecx, eax
call fcn.004559f0
push 0x1e
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0xdac
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0xdac
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x641af8
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d460
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Launching_Game
mov ecx, eax
call fcn.004559f0
push 0x32
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0x32
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0x32
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x641af8
call fcn.004559f0
mov ecx, dword [0x65c8b0]
mov edx, 1
call fcn.00462280
call fcn.0045f000
mov dword [ebp - 0x14], eax
test eax, eax
je 0x465979
cmp eax, 1
jne 0x465982
push 0x3e8
call esi
jmp 0x465968
mov edi, dword [sym.imp.KERNEL32.dll_OpenProcess]
push eax
push 0
push 0x1fffff
call edi
push 0x1388
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d490
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Game_Found_PID_:
mov ecx, eax
call fcn.004559f0
push 0x45d460
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [ebp - 0x14]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
push 0x1f4
call esi
push 0x1f4
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0x1f4
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
push 0x1f4
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63fb04
call fcn.004559f0
call fcn.0045f000
push eax
push 0
push 0x1fffff
call edi
push 0
push 4
lea ecx, [ebp - 0x14]
push ecx
push 0xe0c36e8
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [ebp - 0x14]
call fcn.0045f000
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push 4
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [edi + 0x3826c34]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d460
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, eax
test edi, edi
je 0x465ca2
mov edx, str._n______________________________________________________________________
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d460
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n______________________Bypass_Enjected_Done_Enjoy_______________________n
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d460
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._______________________________________________________________________n
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x45d400
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str.____Press
mov ecx, eax
call fcn.004559f0
push 0x45d430
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, 0x6439d8
mov ecx, eax
call fcn.004559f0
push 0x45d400
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._for_Safe_Exit_n
mov ecx, eax
call fcn.004559f0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x211]
call fcn.004694e0
mov al, byte [ebp - 0x211]
cmp al, 0x31
je 0x465b4d
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x211]
call fcn.004694e0
mov al, byte [ebp - 0x211]
cmp al, 0x31
jne 0x465b32
sub esp, 0x18
mov ecx, esp
push str.sc_stop_driver
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.sc_delete_driver
call fcn.00454120
call fcn.00451a30
push str.C:hookdrv.sys
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, str.F:Program_FilesTxGameAssistantAOW_Rootfs_10000
call fcn.0045fc40
mov ecx, str.F:Program_FilesTxGameAssistantAOW_Rootfs_10000.ini
call fcn.0045fc40
mov ecx, str.F:Program_FilesTxGameAssistantAOW_Rootfs_100030.ini
call fcn.0045fc40
mov ecx, str.F:Program_FilesTxGameAssistantAOW_Rootfs_100030
call fcn.0045fc40
mov ecx, str.C:Program_FilesTxGameAssistantAOW_Rootfs_10000
call fcn.0045fc40
mov ecx, str.C:Program_FilesTxGameAssistantAOW_Rootfs_10000.ini
call fcn.0045fc40
mov ecx, str.C:Program_FilesTxGameAssistantAOW_Rootfs_100030.ini
call fcn.0045fc40
mov ecx, str.C:Program_FilesTxGameAssistantAOW_Rootfs_100030
call fcn.0045fc40
mov ecx, str.D:Program_FilesTxGameAssistantAOW_Rootfs_10000
call fcn.0045fc40
mov ecx, str.D:Program_FilesTxGameAssistantAOW_Rootfs_10000.ini
call fcn.0045fc40
mov ecx, str.D:Program_FilesTxGameAssistantAOW_Rootfs_100030.ini
call fcn.0045fc40
mov ecx, str.D:Program_FilesTxGameAssistantAOW_Rootfs_100030
call fcn.0045fc40
mov ecx, str.E:Program_FilesTxGameAssistantAOW_Rootfs_10000
call fcn.0045fc40
mov ecx, str.E:Program_FilesTxGameAssistantAOW_Rootfs_10000.ini
call fcn.0045fc40
mov ecx, str.E:Program_FilesTxGameAssistantAOW_Rootfs_100030.ini
call fcn.0045fc40
mov ecx, str.E:Program_FilesTxGameAssistantAOW_Rootfs_100030
call fcn.0045fc40
add esp, 4
mov ecx, esp
push str.taskkill__F__IM_AndroidProcess.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__IM_ProjectTitan.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_AndroidEmulator.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_AndroidEmulatorEn.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_AndroidEmulatorEx.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_Gameloop.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_new.exe
call fcn.00454120
call fcn.00451a30
add esp, 0x18
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov edx, str._n____Emulator_Bypass_Failed_____n
call fcn.004559f0
push 0xfa0
call esi
sub esp, 0x18
mov ecx, esp
push str.sc_stop_driver
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.sc_delete_driver
call fcn.00454120
call fcn.00451a30
push str.C:hookdrv.sys
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
mov ecx, esp
push str.taskkill__F__IM_AndroidProcess.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__IM_ProjectTitan.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_AndroidEmulator.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_AndroidEmulatorEn.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_AndroidEmulatorEx.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_Gameloop.exe
call fcn.00454120
call fcn.00451a30
mov ecx, esp
push str.taskkill__F__im_new.exe
call fcn.00454120
call fcn.00451a30
add esp, 0x18
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
fimul dword [edi + 0x46]
add bl, ah
dec edi
inc esi
add ah, ch
dec edi
inc esi
add ch, dh
dec edi
inc esi
add byte [ebp - 0x75], dl
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c93a0
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x654c00]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edx, dword [esi]
test edx, edx
je 0x465dfa
mov eax, dword [esi + 8]
sub eax, edx
sar eax, 2
lea ecx, [eax*4]
mov dword [ebp - 4], 0
cmp ecx, 0x1000
jb 0x465ddc
mov edi, dword [edx - 4]
add ecx, 0x23
sub edx, edi
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x465e0b
mov edx, edi
push ecx
push edx
call fcn.005c59b2
mov dword [esi], 0
add esp, 8
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3