Function at 0x41ae30
Capabilities:
Allocate or change rwx memory
Check os version
Encode data using xor
Execute shellcode via indirect call
Generate random numbers using a mersenne twister

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x1880
call fcn.00439c80
push esi
push edi
xor eax, eax
mov dword [ebp - 8], edx
push 0x208
push eax
mov word [ebp - 0x4e8], ax
mov esi, ecx
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], esi
xorps xmm0, xmm0
mov dword [ebp - 0x4f4], 0
push eax
mov dword [ebp - 0x4ec], 0
movq qword [ebp - 0x4e4], xmm0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x2cc]
xorps xmm0, xmm0
movq qword [ebp - 0x2d4], xmm0
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x4599b8]
add esp, 0xc
mov dword [ebp - 0xa0], eax
mov eax, dword [0x4599b4]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x4599a8]
mov dword [ebp - 0x98], eax
mov eax, dword [0x4599b0]
mov dword [ebp - 0x94], eax
mov eax, dword [0x4599ac]
mov dword [ebp - 0x90], eax
mov eax, dword [0x4599a4]
mov dword [ebp - 0x8c], eax
mov eax, dword [0x45999c]
mov dword [ebp - 0x88], eax
mov eax, dword [0x4599a0]
mov dword [ebp - 0x84], eax
mov eax, dword [0x459998]
mov dword [ebp - 0x80], eax
mov eax, dword [0x459994]
mov dword [ebp - 0x7c], eax
mov eax, dword [0x4599d0]
mov dword [ebp - 0x78], eax
mov eax, dword [0x4599cc]
mov dword [ebp - 0x74], eax
mov eax, dword [0x4599c8]
movups xmm0, xmmword [0x44a0c8]
mov dword [ebp - 0x70], eax
mov eax, dword [0x4599c4]
mov dword [ebp - 0x6c], eax
mov eax, dword [0x459a04]
mov dword [ebp - 0x68], eax
mov eax, dword [0x459a00]
mov dword [ebp - 0x64], eax
mov eax, dword [0x4599f8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x459940]
mov dword [ebp - 0x5c], eax
mov eax, dword [0x4599c0]
mov dword [ebp - 0x58], eax
mov eax, dword [0x4599e4]
mov dword [ebp - 0x54], eax
mov eax, dword [0x4599e0]
mov dword [ebp - 0x50], eax
mov eax, dword [0x4599dc]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x4599d8]
mov dword [ebp - 0x48], eax
mov eax, dword [0x4599d4]
mov dword [ebp - 0x44], eax
mov eax, dword [0x459950]
movups xmmword [ebp - 0xc4], xmm0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov edx, dword [0x459a18]
mov dword [ebp - 0x40], eax
mov eax, dword [0x459990]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x45998c]
mov dword [ebp - 0x38], eax
mov eax, dword [0x459988]
mov dword [ebp - 0x34], eax
mov eax, dword [0x459984]
mov dword [ebp - 0x30], eax
mov eax, dword [0x459980]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x45997c]
mov dword [ebp - 0x28], eax
mov eax, dword [0x459978]
mov dword [ebp - 0x24], eax
mov eax, dword [0x459974]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x4f0], eax
test edx, edx
jne 0x41b067
mov ecx, dword fs:[0x30]
test ecx, ecx
je 0x41b067
mov edx, dword [ecx + 0xa8]
mov edi, dword [ecx + 0xa4]
cmp edx, 0xa
jb 0x41b04f
nop word [eax + eax]
mov eax, 0xcccccccd
mul edx
shr edx, 3
cmp edx, 0xa
jae 0x41b040
lea eax, [edi + edi*4]
lea edx, [edx + eax*2]
movzx eax, word [ecx + 0xac]
mov dword [0x459a18], edx
mov dword [0x459a14], eax
mov eax, dword [0x459a14]
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xb0], eax
test esi, esi
je 0x41bb1f
mov ecx, 0x104
mov eax, esi
cmp word [eax], 0
je 0x41b095
add eax, 2
sub ecx, 1
jne 0x41b087
xor edx, edx
mov edi, 0x80070057
test ecx, ecx
mov eax, edi
cmovne eax, edx
je 0x41bb24
mov eax, 0x104
mov edx, 0x104
sub eax, ecx
add eax, eax
neg ecx
sbb ecx, ecx
and ecx, eax
mov eax, 0x208
mov word [ebp - 0x4e2], ax
lea eax, [ebp - 0x4dc]
mov word [ebp - 0x4e4], cx
sub esi, eax
mov dword [ebp - 0x4e0], eax
mov ecx, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x41b0fe
movzx eax, word [esi + ecx]
test ax, ax
je 0x41b0fe
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x41b0e0
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
test edx, edx
mov word [eax], cx
mov eax, 0x8007007a
cmovne eax, ecx
mov dword [ebp - 0x14], eax
jne 0x41b1ae
mov esi, dword [ebx + 0x18]
push 0x208
push ecx
mov dword [esi], eax
lea eax, [esi + 4]
push eax
mov dword [esi + 0x414], 0x2e
mov dword [ebp - 4], eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 0x14], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call esi
add esp, 8
add eax, 2
push eax
push dword [ebp - 4]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call edi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 0x14]
jmp 0x41bbb0
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
push 0x5c
push dword [ebp - 4]
call esi
mov edx, eax
add esp, 8
test edx, edx
jne 0x41b269
mov esi, dword [ebx + 0x18]
mov eax, dword [ebp - 0x14]
push 0x208
push edx
lea edi, [esi + 4]
mov dword [esi], eax
push edi
mov dword [esi + 0x414], 0x38
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 4], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 4]
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x30
add esp, 0xc
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
add edx, 2
je 0x41ba91
mov eax, 0x104
mov ecx, edx
nop dword [eax]
cmp word [ecx], 0
je 0x41b28e
add ecx, 2
sub eax, 1
jne 0x41b280
xor ecx, ecx
test eax, eax
cmovne edi, ecx
je 0x41ba91
mov ecx, 0x104
sub ecx, eax
add ecx, ecx
neg eax
push edx
sbb eax, eax
and eax, ecx
mov ecx, 0x208
mov word [ebp - 0x2d4], ax
mov edx, ecx
lea eax, [ebp - 0x2cc]
mov word [ebp - 0x2d2], cx
mov ecx, eax
mov dword [ebp - 0x2d0], eax
call fcn.00407150
test eax, eax
jns 0x41b369
mov esi, dword [ebx + 0x18]
push 0x208
push 0
lea edi, [esi + 4]
mov dword [esi], eax
push edi
mov dword [esi + 0x414], 0x54
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 4], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 4]
jmp 0x41bbb0
mov edi, dword [ebx + 0xc]
mov eax, edi
and eax, 0x2200000
cmp eax, 0x2000000
jne 0x41b418
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x4fc], 0xffffffff
mov edx, 1
mov dword [ebp - 0x187c], eax
nop dword [eax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [ebp + edx*4 - 0x187c], eax
inc edx
cmp edx, 0x270
jb 0x41b3a0
lea eax, [ebp - 0x1880]
mov dword [ebp - 0x1880], 0x270
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
call fcn.0041bbd0
mov ecx, 0xf01
mul ecx
cmp eax, ecx
jae 0x41b404
cmp eax, 0xd13
jae 0x41b404
mov edi, ecx
nop
lea ecx, [ebp - 0x10]
call fcn.0041bbd0
mul edi
cmp eax, 0xd13
jb 0x41b3f0
mov edi, dword [ebx + 0xc]
movzx eax, dx
add eax, 0x10f
and eax, 0xfff0
mov word [ebp - 0x4e8], ax
and edi, 0x100000
mov ecx, 0x43fe60
sub ecx, section..mmap_se
mov eax, 0x440170
sub eax, 0x43fe70
mov dword [ebp - 0x14], ecx
neg edi
push 0x40
sbb edi, edi
and edi, eax
lea eax, [ecx + 0x4fc]
push 0x3000
add eax, edi
push eax
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edx, dword [ebp - 0x14]
add edx, 0xf
mov dword [ebp - 0x10], eax
lea ecx, [eax + 0x4eb]
and ecx, 0xfffffff0
add edx, ecx
mov dword [ebp - 4], ecx
and edx, 0xfffffff0
mov dword [ebp - 0xc], edx
test edi, edi
je 0x41b484
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xa8], edi
test eax, eax
jne 0x41b531
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebx + 0x18]
push 0x208
push 0
lea edi, [esi + 4]
mov dword [esi], eax
push edi
mov dword [esi + 0x414], 0x82
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 4], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 4]
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x15
add esp, 0xc
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push eax
push str.pArg_________p_n
push 2
call fcn.0040e7c0
add esp, 0xc
push ecx
push str.pShell_______p_n
push 2
call fcn.0040e7c0
add esp, 0xc
test edi, edi
je 0x41b565
push edx
push str.pVEHShell_____p_n
push 2
call fcn.0040e7c0
add esp, 0xc
push 0
push 0x4dc
lea ecx, [ebp - 0x4f4]
push ecx
push eax
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x41b63d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebx + 0x18]
push 0x208
push 0
lea edi, [esi + 4]
mov dword [esi], eax
push edi
mov dword [esi + 0x414], 0x95
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 4], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 4]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x8000
push 0
push dword [ebp - 0x10]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x10
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
push dword [ebp - 0x14]
push section..mmap_se
push dword [ebp - 4]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x41b6ef
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebx + 0x18]
push 0x208
push 0
lea edi, [esi + 4]
mov dword [esi], eax
push edi
mov dword [esi + 0x414], 0xa2
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 4], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 4]
jmp 0x41b614
test edi, edi
je 0x41b7a7
push 0
push edi
push 0x43fe70
push dword [ebp - 0xc]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x41b7a7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebx + 0x18]
push 0x208
push 0
lea edi, [esi + 4]
mov dword [esi], eax
push edi
mov dword [esi + 0x414], 0xb1
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 0xc], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 0xc]
jmp 0x41b614
mov edx, dword [ebx + 0xc]
lea eax, [ebp - 0x18]
mov ecx, dword [ebx + 0x18]
mov edi, dword [ebp - 0x10]
push ecx
push dword [ebx + 0x14]
mov ecx, edx
mov dword [ebp - 0x18], 0
or ecx, 0x3000
test dl, 8
push eax
cmove ecx, edx
mov edx, dword [ebp - 4]
push ecx
push dword [ebx + 8]
mov ecx, dword [ebp - 8]
push edi
call fcn.0041ef40
add esp, 0x18
mov dword [ebp - 0xc], eax
test eax, eax
je 0x41b820
mov ecx, dword [ebx + 8]
cmp ecx, 3
je 0x41bbbd
cmp ecx, 1
jne 0x41b803
cmp eax, 0x1020000a
je 0x41bbbd
push 0x8000
push 0
push edi
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [ebp - 0xc]
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
push 0x4dc
lea eax, [ebp - 0x4f4]
push eax
push edi
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x41b8ff
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebx + 0x18]
push 0x208
push 0
lea edi, [ecx + 4]
mov dword [ecx], eax
push edi
mov dword [ecx + 0x414], 0xd9
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebx + 0x18]
add esp, 0xc
add eax, 0x20c
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
mov eax, dword [ebx + 0x18]
add eax, 0x20c
push str.MMAP_NATIVE::ManualMap
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebx + 8], 3
je 0x41b8f1
push 0x8000
push 0
push dword [ebp - 0x10]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x1b
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp dword [ebx + 8], 3
je 0x41b916
push 0x8000
push 0
push edi
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
cmp dword [ebp - 0x18], 0
je 0x41b9c4
mov ecx, dword [ebx + 0x18]
mov eax, dword [ebp - 0x4ec]
push 0x208
push 0
lea edi, [ecx + 4]
mov dword [ecx], eax
push edi
mov dword [ecx + 0x414], 0xec
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebx + 0x18]
add esp, 0xc
add eax, 0x20c
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
mov eax, dword [ebx + 0x18]
add eax, 0x20c
push str.MMAP_NATIVE::ManualMap
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x18]
add esp, 0xc
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
jne 0x41ba71
mov eax, dword [ebx + 0x18]
push 0x208
push ecx
lea edi, [eax + 4]
mov dword [eax], ecx
push edi
mov dword [eax + 0x414], 0xf5
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebx + 0x18]
add esp, 0xc
add eax, 0x20c
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
mov eax, dword [ebx + 0x18]
add eax, 0x20c
push str.MMAP_NATIVE::ManualMap
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x20
add esp, 0xc
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebx + 0x10]
push ecx
push str.Imagebase___p_n
push 1
mov dword [eax], ecx
call fcn.0040e7c0
add esp, 0xc
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, dword [ebx + 0x18]
push 0x208
push 0
mov dword [esi], edi
lea edi, [esi + 4]
push edi
mov dword [esi + 0x414], 0x46
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 0xc], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 8
add eax, 2
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call esi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 0xc]
jmp 0x41bbb0
mov eax, 0x80070057
mov esi, dword [ebx + 0x18]
push 0x208
push 0
mov dword [esi], eax
lea eax, [esi + 4]
push eax
mov dword [esi + 0x414], 0x20
mov dword [ebp - 0xc], eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esi + 0x20c]
mov dword [ebp - 4], eax
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryManual_Mapping.cpp
call esi
add esp, 8
add eax, 2
push eax
push dword [ebp - 0xc]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push str.MMAP_NATIVE::ManualMap
call edi
add eax, eax
push eax
push str.MMAP_NATIVE::ManualMap
push dword [ebp - 4]
call sub.VCRUNTIME140.dll_memcpy
mov eax, 4
add esp, 0xc
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret