Function at 0x140001310
Capabilities:
Delete file
Download url
Receive data
Set console window title
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xf0
mov rax, qword [0x140006008]
xor rax, rsp
mov qword [rbp + 0x4f], rax
lea rcx, str.SGPU_Visible_Check_Init___ch3chou_2008
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rdx, str.Waiting_for_get_your_ui_path...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001860
mov rcx, rax
lea rdx, [0x140001a30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SOFTWAREWOW6432NodeTencentMobileGamePCUI
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea rcx, [rbp - 0x11]
call fcn.1400017d0
nop
lea rdx, [0x1400044b0]
lea rcx, [rbp - 0x31]
call fcn.140001680
nop
lea rdx, str.InstallPath
lea rcx, [rbp - 0x59]
call fcn.140001680
nop
lea r9, [rbp - 0x31]
lea r8, [rbp - 0x11]
lea rdx, [rbp - 0x59]
mov rcx, qword [rbp - 0x39]
call fcn.1400011c0
nop
lea rcx, [rbp - 0x59]
call fcn.140001610
nop
lea rcx, [rbp - 0x31]
call fcn.140001610
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x11]
call fcn.1400015d0
mov r8, rax
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x11]
call fcn.1400015f0
mov r8, qword [r8]
mov rdx, qword [rax]
lea rcx, [rbp - 0x31]
call fcn.140001a70
nop
lea r8, str.d3d9.dll
lea rdx, [rbp - 0x31]
lea rcx, [rbp + 0xf]
call fcn.140001bb0
nop
lea r8, str.LibVIS.so
lea rdx, [rbp - 0x31]
lea rcx, [rbp + 0x2f]
call fcn.140001bb0
nop
lea rdx, str.Get_ui_path_success_fully
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001860
mov rcx, rax
lea rdx, [0x140001a30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0xf]
call fcn.1400017f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x2f]
call fcn.1400017f0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, str.Dowloading_needed_file...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001860
mov rcx, rax
lea rdx, [0x140001a30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xf]
call fcn.1400017f0
mov r8, rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1125823618975289416_1155158220898324541_d3d9.dll
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, [rbp + 0x2f]
call fcn.1400017f0
mov r8, rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1125823618975289416_1155504085013901322_LibVIS.so
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.File_installed_success_:__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001860
mov rcx, rax
lea rdx, str._d3d9.dll__:
call fcn.140001860
mov rcx, rax
lea rdx, [rbp + 0xf]
call fcn.140001d10
mov rcx, rax
call fcn.140001d30
mov rcx, rax
lea rdx, str._LibVIS.so__:
call fcn.140001860
mov rcx, rax
lea rdx, [rbp + 0x2f]
call fcn.140001d10
mov rcx, rax
lea rdx, [0x140001a30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Please_use_AndroidEmulatorEx_to_make_it_work
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001860
mov rcx, rax
lea rdx, [0x140001a30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Application_exit_after_5_seconds
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001860
mov rcx, rax
lea rdx, [0x140001a30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3