Function at 0x421b40
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Hijack thread execution
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43afb0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x398
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], edx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x18], edi
call fcn.0041cc70
push edi
lea ecx, [ebp - 0xd0]
mov dword [ebp - 4], 0
call fcn.0041ce00
test al, al
jne 0x421c23
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], 0
push ebx
mov dword [esi + 0x414], 0xc
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov esi, 0x10200001
jmp 0x4226f7
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xd0]
nop dword [eax + eax]
test eax, eax
je 0x421c93
cmp dword [eax + 0x38], 0xf
mov esi, dword [eax + 0x34]
je 0x421c93
lea ecx, [ebp - 0xd0]
call fcn.0041d120
test al, al
jne 0x421c87
lea ecx, [ebp - 0xd0]
call fcn.0041cfd0
test al, al
jne 0x421c70
cmp esi, 2
jne 0x421c87
mov eax, dword [ebp - 0xc8]
test eax, eax
jne 0x421c7e
xor esi, esi
jmp 0x421c81
mov esi, dword [eax + 0x24]
call ebx
cmp esi, eax
jne 0x421cca
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xd0]
cmp dword [ebp - 0xcc], 0
je 0x422668
mov eax, dword [edx + 4]
dec eax
cmp ecx, eax
je 0x422668
inc ecx
mov eax, ecx
mov dword [ebp - 0xbc], ecx
shl eax, 6
add eax, 0xb8
add eax, edx
mov dword [ebp - 0xc8], eax
jmp 0x421c40
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x422668
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x24], eax
test eax, eax
je 0x422668
push eax
push 0
push 0x1a
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov ebx, eax
mov dword [ebp - 0x14], ebx
test ebx, ebx
jne 0x421d94
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0x35
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov esi, 0x10200003
jmp 0x4226f7
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
cmp eax, 0xffffffff
jne 0x421e47
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0x3e
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 0x10200004
jmp 0x4226fa
push 0x2c8
lea eax, [ebp - 0x39c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x3a0], 0x10001
lea eax, [ebp - 0x3a0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
jne 0x421f27
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0x4e
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 0x10200005
jmp 0x4226fa
push 0x40
push 0x3000
push 0x100
push 0
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
jne 0x421fec
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0x5b
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 0x10200006
jmp 0x4226fa
mov eax, dword [ebp - 0x2e8]
lea ecx, [esi + 0x18]
mov dword [ebp - 0x5a], eax
push ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x10]
push str.pRoutine___p_n
push 3
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xc704ec83
mov word [ebp - 0x5c], 0x2404
mov dword [ebp - 0x56], 0x53525150
mov word [ebp - 0x52], 0xbb9c
mov dword [ebp - 0x4c], 0xff0103c6
mov dword [ebp - 0x48], 0x53ff0c73
mov dword [ebp - 0x44], 0x4438910
mov dword [ebp - 0x40], 0x18a164
mov dword [ebp - 0x3c], 0x408b0000
mov dword [ebp - 0x38], 0x8438934
mov dword [ebp - 0x34], 0x203c7
mov dword [ebp - 0x30], 0x5b9d0000
mov dword [ebp - 0x2c], 0xc358595a
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x2e8], ecx
mov dword [ebp - 0x68], eax
call fcn.0040e7c0
push esi
push str.pArg_______p_n
push 3
call fcn.0040e7c0
add esp, 0x18
lea eax, [ebp - 0x78]
push 0
push 0x50
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x422177
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0xe4
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov esi, 0x10200007
jmp 0x4226fa
lea eax, [ebp - 0x3a0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
test eax, eax
jne 0x42224a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0xf1
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov esi, 0x10200008
jmp 0x4226fa
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x422331
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0x104
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x2e8], eax
lea eax, [ebp - 0x3a0]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_SetThreadContext]
push esi
call eax
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov esi, 0x10200009
jmp 0x4226fa
push 0
push 0
push 0
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
call edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], edx
call edi
sub eax, dword [ebp - 0x24]
sbb edx, dword [ebp - 0x10]
test edx, edx
ja 0x422401
jb 0x4223a2
cmp eax, dword [ebp + 0x10]
jae 0x422401
push 0xa
push dword [0x459958]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0
mov edi, eax
lea eax, [ebp - 0x94]
push 0x18
push eax
push esi
push dword [ebp - 0x18]
mov dword [ebp - 0x20], edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x422512
cmp dword [ebp - 0x94], 2
je 0x42263e
test edi, edi
je 0x422512
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
sub eax, dword [ebp - 0x24]
sbb edx, dword [ebp - 0x10]
test edx, edx
jb 0x4223a2
ja 0x422401
cmp eax, dword [ebp + 0x10]
jb 0x4223a2
cmp dword [ebp - 0x94], 2
je 0x42263e
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], 0
push ebx
mov dword [esi + 0x414], 0x15a
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x20], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
add esp, 0xc
cmp dword [ebp - 0x94], 0
jne 0x42262d
mov eax, dword [sym.imp.KERNEL32.dll_SuspendThread]
push esi
call eax
cmp eax, 0xffffffff
je 0x42262d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2e8], eax
lea eax, [ebp - 0x3a0]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_SetThreadContext]
push esi
call eax
test eax, eax
je 0x42262d
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
push esi
call edi
cmp eax, 0xffffffff
je 0x42262d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov esi, 0x1020000b
jmp 0x4226fa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], eax
push ebx
mov dword [esi + 0x414], 0x131
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x10], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp - 0x7c], 0
je 0x422607
cmp dword [ebp - 0x94], 0
jne 0x422607
mov esi, dword [ebp - 0x14]
mov eax, dword [sym.imp.KERNEL32.dll_SuspendThread]
push esi
call eax
cmp eax, 0xffffffff
je 0x422607
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2e8], eax
lea eax, [ebp - 0x3a0]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_SetThreadContext]
push esi
call eax
test eax, eax
je 0x422607
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
push esi
call edi
cmp eax, 0xffffffff
je 0x422607
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
cmp dword [ebp - 0x20], 0
jne 0x422623
push dword [0x459954]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov esi, 0x10000004
jmp 0x4226fa
mov esi, 0x1020000c
jmp 0x4226fa
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 0x1020000a
jmp 0x4226fa
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push esi
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ecx, dword [ebp + 0xc]
xor esi, esi
mov eax, dword [ebp - 0x90]
mov dword [ecx], eax
jmp 0x4226fa
mov esi, dword [ebp + 0x14]
push 0x208
push 0
lea ebx, [esi + 4]
mov dword [esi], 0
push ebx
mov dword [esi + 0x414], 0x29
call sub.VCRUNTIME140.dll_memset
push 0x208
lea eax, [esi + 0x20c]
push 0
push eax
mov dword [ebp - 0x20], eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0x20
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryThread_Hijacking.cpp
call esi
add esp, 8
add eax, 2
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.SR_HijackThread
call edi
add eax, eax
push eax
push str.SR_HijackThread
push dword [ebp - 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov esi, 0x10200002
add esp, 0xc
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x42270b
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0xcc]
test eax, eax
je 0x42271e
push eax
call fcn.00438d2a
add esp, 4
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret