Function at 0x401000
Capabilities:
Check if file exists
Execute command
Get file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
mov eax, dword [0x405004]
xor eax, esp
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, dword [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x40106f
mov edx, str.__FAILED___O_arquivo_DLL_n
push 0x4013f0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.004011d0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 8]
xor ecx, esp
call fcn.004014da
mov esp, ebp
pop ebp
ret
push str.Point_Blank
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
jne 0x401087
mov edx, str.__FAILED___Nao_foi_possivel_localizar_a_janela_de_destino.
jmp 0x40102e
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, eax
test edi, edi
jne 0x4010a8
mov edx, str.__FAILED___N
jmp 0x40102e
push 1
push 0
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
test esi, esi
jne 0x4010c3
mov edx, str.__FAILED___The_DLL_could_not_be_found.
jmp 0x40102e
push str.NextHook
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x4010dd
mov edx, str.__FAILED___The_function_was_not_found.
jmp 0x40102e
push edi
push esi
push eax
push 3
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
mov ebx, eax
test ebx, ebx
jne 0x4010f8
mov edx, str.__FAILED___Couldnt_set_the_hook_with_SetWindowsHookEx.
jmp 0x40102e
push 0
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_PostThreadMessageW]
push 0x4013f0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.__OK___AGuarde_PBBR.
call fcn.004011d0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x4013f0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._______qualquer_teclas__fecha_o_jogo_.
call fcn.004011d0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.pause___nul
call esi
add esp, 4
push ebx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
push 0x4013f0
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test eax, eax
jne 0x40118f
mov edx, str.__FAILED___jogo_fechado_com_sucesso.
call fcn.004011d0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause
call esi
jmp 0x401055
mov edx, str._INJECTED_._qualquer_tecla_pra_sair.
call fcn.004011d0
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause___nul
call esi
mov ecx, dword [esp + 0x18]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004014da
mov esp, ebp
pop ebp
ret