Function at 0x458000
Capabilities:
Create process on windows
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bfc75
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x645bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp ecx, 1
jne 0x45839d
push 0
push str.C:WINDOWSdriver.exe
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0x45
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.004561e0
cmp dword [ebp - 0x114], 0xf
lea eax, [ebp - 0x128]
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
cmova eax, dword [ebp - 0x128]
push 0x634b3c
push eax
call edi
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 8
test eax, eax
je 0x4580b1
push eax
call esi
add esp, 4
mov byte [ebp - 0x1bd], 1
jmp 0x4580b8
mov byte [ebp - 0x1bd], 0
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x4580f4
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4580ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4580ea
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x45811a
push 0xa
push 0
push 0
push str.C:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x458daa
push 0x45
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.D:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.004561e0
cmp dword [ebp - 0x114], 0xf
lea eax, [ebp - 0x128]
push 0x634b3c
cmova eax, dword [ebp - 0x128]
push eax
call edi
add esp, 8
test eax, eax
je 0x45817c
push eax
call esi
add esp, 4
mov byte [ebp - 0x1bd], 1
jmp 0x458183
mov byte [ebp - 0x1bd], 0
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x4581bf
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4581b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4581b5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x4581e5
push 0xa
push 0
push 0
push str.D:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x458daa
push 0x45
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.E:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.004561e0
cmp dword [ebp - 0x114], 0xf
lea eax, [ebp - 0x128]
push 0x634b3c
cmova eax, dword [ebp - 0x128]
push eax
call edi
add esp, 8
test eax, eax
je 0x458247
push eax
call esi
add esp, 4
mov byte [ebp - 0x1bd], 1
jmp 0x45824e
mov byte [ebp - 0x1bd], 0
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x45828a
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458280
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x458280
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x4582b0
push 0xa
push 0
push 0
push str.E:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x458daa
push 0x45
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.F:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.004561e0
cmp dword [ebp - 0x114], 0xf
lea eax, [ebp - 0x128]
push 0x634b3c
cmova eax, dword [ebp - 0x128]
push eax
call edi
add esp, 8
test eax, eax
je 0x458312
push eax
call esi
add esp, 4
mov byte [ebp - 0x1bd], 1
jmp 0x458319
mov byte [ebp - 0x1bd], 0
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x458355
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45834b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x45834b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
cmp byte [ebp - 0x1bd], 0
je 0x45837b
push 0xa
push 0
push 0
push str.F:Program_Files__x86_SmartGaGaProjectTitanEngineProjectTitan.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x458daa
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x44dfb0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Please_install_the_emulator_properly_n
mov ecx, eax
call fcn.00460390
jmp 0x458daa
cmp ecx, 2
jne 0x4588a1
push 0x2a
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
push str.SOFTWAREWOW6432NodeTencentMobileGamePC_
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x128], xmm0
call fcn.004561e0
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
movq qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 2
cmp dword [ebp - 0x114], 0xf
lea eax, [ebp - 0x128]
push ecx
cmova eax, dword [ebp - 0x128]
push 0x20019
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x45882d
mov ecx, dword [ebp - 0x118]
mov edi, bind
mov dword [ebp - 0x1b8], eax
mov eax, edi
sub eax, ecx
cmp eax, 2
jb 0x458dc5
cmp dword [ebp - 0x114], 0xf
lea eax, [ebp - 0x128]
push 2
cmova eax, dword [ebp - 0x128]
push 0x634e88
push ecx
push eax
push ecx
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x198]
call fcn.00462410
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x12c]
cmp dword [ebp - 0x184], 0xf
lea eax, [ebp - 0x198]
push ecx
cmova eax, dword [ebp - 0x198]
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x4587e9
push 0xff
push eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x1b8], 0xff
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x110]
push eax
push 0
push 0
push str.InstallPath
push dword [ebp - 0x12c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4587d9
xorps xmm0, xmm0
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x154], eax
movups xmmword [ebp - 0x168], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x458555
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.004561e0
mov byte [ebp - 4], 4
mov eax, edi
mov ecx, dword [ebp - 0x158]
sub eax, ecx
cmp eax, 0x16
jb 0x458dc5
cmp dword [ebp - 0x154], 0xf
lea eax, [ebp - 0x168]
push 0x16
cmova eax, dword [ebp - 0x168]
push 0x634e98
push ecx
push eax
push ecx
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x144]
call fcn.00462410
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x130]
mov eax, edx
mov ecx, dword [ebp - 0x134]
sub eax, ecx
cmp eax, 1
jb 0x4585fa
inc ecx
lea esi, [ebp - 0x144]
cmp edx, 0xf
mov dword [ebp - 0x134], ecx
push ecx
cmova esi, dword [ebp - 0x144]
push esi
lea eax, [esi + 1]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi], 0x22
jmp 0x45860f
sub esp, 0xc
push dword [ebp - 0x1b4]
push ecx
lea ecx, [ebp - 0x144]
call fcn.00460c70
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x1b4], esp
push 5
movups xmmword [ecx], xmm0
push str..exe_
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004561e0
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
xorps xmm0, xmm0
push 4
movups xmmword [ecx], xmm0
push str..exe
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004561e0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 5
call fcn.00457de0
mov ecx, dword [ebp - 0x134]
add esp, 0x30
sub edi, ecx
cmp edi, 8
jb 0x458dc5
cmp dword [ebp - 0x130], 0xf
lea eax, [ebp - 0x144]
push 8
cmova eax, dword [ebp - 0x144]
push str.__vm_100
push ecx
push eax
push ecx
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x180]
call fcn.00462410
push 0
push str.C:WINDOWSdriver.exe
mov byte [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [ebp - 0x16c], 0xf
lea edx, [ebp - 0x180]
xorps xmm0, xmm0
cmova edx, dword [ebp - 0x180]
sub esp, 0x18
mov esi, esp
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4586f8
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.004561e0
call fcn.00457ee0
mov ecx, dword [ebp - 0x16c]
add esp, 0x18
cmp ecx, 0xf
jbe 0x45874c
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458742
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4587c9
push ecx
push edx
call fcn.005bb658
add esp, 8
mov ecx, dword [ebp - 0x130]
cmp ecx, 0xf
jbe 0x458782
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458778
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4587c9
push ecx
push edx
call fcn.005bb658
add esp, 8
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
cmp ecx, 0xf
jbe 0x4587d9
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4587cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4587cf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
push dword [ebp - 0x12c]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
jmp 0x4587ef
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x184]
cmp ecx, 0xf
jbe 0x458850
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458821
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x458821
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
jmp 0x458850
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x44dfb0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Please_install_the_emulator_properly_n
mov ecx, eax
call fcn.00460390
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x1bc]
call esi
lea ecx, [ebp - 0x150]
call fcn.0045c890
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x458daa
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458da0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x458da0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp ecx, 3
jne 0x458daa
push 0x2a
xorps xmm0, xmm0
mov dword [ebp - 0x158], 0
push str.SOFTWAREWOW6432NodeTencentMobileGamePC_
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x154], 0
movups xmmword [ebp - 0x168], xmm0
call fcn.004561e0
mov dword [ebp - 4], 8
xorps xmm0, xmm0
movups xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
movq qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x154], 0xf
lea eax, [ebp - 0x168]
push ecx
cmova eax, dword [ebp - 0x168]
push 0x20019
push 0
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x458d38
mov ecx, dword [ebp - 0x158]
mov edi, bind
mov dword [ebp - 0x12c], eax
mov eax, edi
sub eax, ecx
cmp eax, 2
jb 0x458dca
cmp dword [ebp - 0x154], 0xf
lea eax, [ebp - 0x168]
push 2
cmova eax, dword [ebp - 0x168]
push 0x634e88
push ecx
push eax
push ecx
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x180]
call fcn.00462410
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1b8]
cmp dword [ebp - 0x16c], 0xf
lea eax, [ebp - 0x180]
push ecx
cmova eax, dword [ebp - 0x180]
push eax
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x458cf4
push 0xff
push eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x12c], 0xff
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x110]
push eax
push 0
push 0
push str.InstallPath
push dword [ebp - 0x1b8]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x458ce4
xorps xmm0, xmm0
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x114], eax
movups xmmword [ebp - 0x128], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x458a60
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.004561e0
mov byte [ebp - 4], 0xc
mov eax, edi
mov ecx, dword [ebp - 0x118]
sub eax, ecx
cmp eax, 0x16
jb 0x458dc5
cmp dword [ebp - 0x114], 0xf
lea eax, [ebp - 0x128]
push 0x16
cmova eax, dword [ebp - 0x128]
push 0x634e98
push ecx
push eax
push ecx
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x144]
call fcn.00462410
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x130]
mov eax, edx
mov ecx, dword [ebp - 0x134]
sub eax, ecx
cmp eax, 1
jb 0x458b05
inc ecx
lea esi, [ebp - 0x144]
cmp edx, 0xf
mov dword [ebp - 0x134], ecx
push ecx
cmova esi, dword [ebp - 0x144]
push esi
lea eax, [esi + 1]
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi], 0x22
jmp 0x458b1a
sub esp, 0xc
push dword [ebp - 0x1c4]
push ecx
lea ecx, [ebp - 0x144]
call fcn.00460c70
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x1c4], esp
push 5
movups xmmword [ecx], xmm0
push str..exe_
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004561e0
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
xorps xmm0, xmm0
push 4
movups xmmword [ecx], xmm0
push str..exe
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004561e0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0xd
call fcn.00457de0
mov ecx, dword [ebp - 0x134]
add esp, 0x30
sub edi, ecx
cmp edi, 8
jb 0x458dc5
cmp dword [ebp - 0x130], 0xf
lea eax, [ebp - 0x144]
push 8
cmova eax, dword [ebp - 0x144]
push str.__vm_100
push ecx
push eax
push ecx
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x198]
call fcn.00462410
push 0
push str.C:WINDOWSdriver.exe
mov byte [ebp - 4], 0xf
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [ebp - 0x184], 0xf
lea edx, [ebp - 0x198]
xorps xmm0, xmm0
cmova edx, dword [ebp - 0x198]
sub esp, 0x18
mov esi, esp
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x458c03
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.004561e0
call fcn.00457ee0
mov ecx, dword [ebp - 0x184]
add esp, 0x18
cmp ecx, 0xf
jbe 0x458c57
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458c4d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x458cd4
push ecx
push edx
call fcn.005bb658
add esp, 8
mov ecx, dword [ebp - 0x130]
cmp ecx, 0xf
jbe 0x458c8d
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458c83
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x458cd4
push ecx
push edx
call fcn.005bb658
add esp, 8
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
cmp ecx, 0xf
jbe 0x458ce4
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458cda
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x458cda
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
push dword [ebp - 0x1b8]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
jmp 0x458cfa
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x16c]
cmp ecx, 0xf
jbe 0x458d5b
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458d2c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x458d2c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
jmp 0x458d5b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x44dfb0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, str._n____Please_install_the_emulator_properly_n
mov ecx, eax
call fcn.00460390
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x1b4]
call esi
lea ecx, [ebp - 0x150]
call fcn.0045c890
mov ecx, dword [ebp - 0x154]
cmp ecx, 0xf
jbe 0x458daa
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x458da0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x458da0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005bb658
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bb374
mov esp, ebp
pop ebp
ret
call fcn.0044dda0
call fcn.0044dda0
int3