Function at 0x407610
Capabilities:
Check if file exists
Copy file
Get common file path
Get file attributes
Move file
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x439df0
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xb38
push esi
push edi
mov edi, dword [ebx + 8]
push edi
push str.InjectW_called_with_pData___p_n
push 0
call fcn.0040e7c0
add esp, 0xc
lea eax, [ebp - 0x478]
push 0x418
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
push dword [0x459e38]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x407689
mov eax, 0x42
jmp 0x407730
test edi, edi
jne 0x407745
push 0x410
lea eax, [ebp - 0x474]
mov dword [ebp - 0x64], 0x7e
push edi
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call edi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
lea esi, [ebp - 0x478]
mov edi, esp
mov ecx, 0x106
rep movsd dword es:[edi], dword [esi]
push 1
push 0xffffffffffffffff
xor edx, edx
xor ecx, ecx
call fcn.004071b0
add esp, 0x420
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
push dword [0x459e38]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [0x459958]
mov esi, dword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [ebp - 0x1c], esi
call esi
push dword [0x459954]
call esi
mov ecx, dword [0x459ea8]
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
test ecx, ecx
je 0x408765
cmp byte [0x459eac], 0
je 0x407793
cmp byte [ecx + 0x6c], 0
jne 0x408765
lea eax, [ebp - 0x28]
push eax
call fcn.00405e30
test eax, eax
je 0x4077c1
mov edx, dword [ebx + 8]
lea esi, [ebp - 0x478]
sub esp, 0x418
mov ecx, 0x106
mov edi, esp
rep movsd dword es:[edi], dword [esi]
push 0x37
push 0xffffffffffffffff
jmp 0x407723
mov ecx, dword [0x459ea8]
test ecx, ecx
je 0x408765
cmp byte [0x459eac], 0
je 0x4077e2
cmp byte [ecx + 0x6c], 0
jne 0x408765
mov eax, dword [ecx]
mov edx, dword [eax + 8]
movzx eax, byte [0x459eac]
push eax
call edx
mov eax, dword [eax]
test eax, eax
jne 0x407730
cmp dword [edi + 0x61c], 3
jne 0x4078ae
call fcn.00404200
test al, al
jne 0x4078ae
push 0x410
lea eax, [ebp - 0x474]
mov dword [ebp - 0x64], 0x9c
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call edi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebx + 8]
lea esi, [ebp - 0x478]
sub esp, 0x40c
mov ecx, 0x106
mov edi, esp
rep movsd dword es:[edi], dword [esi]
push 0x3b
push 0xffffffffffffffff
jmp 0x407723
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x407965
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x410
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push 0
push eax
mov dword [ebp - 0x64], 0xb0
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call edi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
lea esi, [ebp - 0x478]
mov edi, esp
mov ecx, 0x106
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 8]
mov edx, ecx
push 5
push 0xffffffffffffffff
jmp 0x407725
cmp dword [edi + 0x618], 0
jne 0x407a0d
push 0x410
lea eax, [ebp - 0x474]
mov dword [ebp - 0x64], 0xb9
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call edi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
lea esi, [ebp - 0x478]
mov edi, esp
mov ecx, 0x106
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 8]
mov edx, ecx
push 6
push 0xffffffffffffffff
jmp 0x407725
test byte [edi + 0x624], 0x20
je 0x407ccd
mov ecx, 0x104
mov eax, edi
cmp word [eax], 0
je 0x407a2f
add eax, 2
sub ecx, 1
jne 0x407a21
xor eax, eax
mov esi, 0x80070057
test ecx, ecx
mov edx, ecx
cmovne esi, eax
mov eax, 0x104
sub eax, ecx
neg edx
sbb edx, edx
and edx, eax
test ecx, ecx
je 0x407d56
test edx, edx
je 0x407d56
lea esi, [edi + edx*2]
nop dword [eax]
sub esi, 2
cmp word [esi - 2], 0x5c
jne 0x407a60
push 0x208
lea eax, [ebp - 0x738]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x738]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x407b41
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x410
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push 0
push eax
mov dword [ebp - 0x64], 0xd6
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call edi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
lea esi, [ebp - 0x478]
mov edi, esp
mov ecx, 0x106
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 8]
mov edx, ecx
push 0xb
push 0xffffffffffffffff
jmp 0x407725
mov ecx, 0x104
lea eax, [ebp - 0x738]
nop dword [eax]
cmp word [eax], 0
je 0x407b5e
add eax, 2
sub ecx, 1
jne 0x407b50
mov eax, 0x104
mov edx, ecx
sub eax, ecx
neg edx
sbb edx, edx
and edx, eax
mov eax, 0x80070057
mov dword [ebp - 0x14], edx
xor edx, edx
test ecx, ecx
cmovne eax, edx
je 0x407bd3
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x738]
mov edx, 0x104
lea ecx, [ecx + eax*2]
sub edx, eax
je 0x407bbc
mov eax, 0x7ffffffe
sub esi, ecx
nop word [eax + eax]
test eax, eax
je 0x407bb9
movzx edi, word [ecx + esi]
test di, di
je 0x407bb9
mov word [ecx], di
dec eax
add ecx, 2
sub edx, 1
jne 0x407ba0
mov edi, dword [ebx + 8]
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
test edx, edx
mov word [eax], cx
mov eax, 0x8007007a
cmovne eax, ecx
test eax, eax
jns 0x407be9
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x64], 0xe0
jmp 0x407d63
push 0
lea eax, [ebp - 0x738]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x407c94
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x410
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push 0
push eax
mov dword [ebp - 0x64], 0xe9
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call edi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
mov edi, esp
push 0xc
jmp 0x407dde
lea eax, [ebp - 0x738]
mov edx, 0x410
push eax
mov ecx, edi
call fcn.00407150
test eax, eax
jns 0x407cbd
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x64], 0xf3
jmp 0x407d63
push edi
push str.Path_of_dll_copy:__ls_n
push 0
call fcn.0040e7c0
add esp, 0xc
test byte [edi + 0x624], 0x10
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
mov dword [ebp - 0x14], esi
je 0x4080c5
mov eax, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xorps xmm0, xmm0
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x38], 0
movq qword [ebp - 0x40], xmm0
mov word [ebp - 0x34], 0
call eax
mov esi, eax
xorps xmm0, xmm0
add esi, dword [edi + 0x624]
lea eax, [ebp - 0x28]
push eax
movq qword [ebp - 0x28], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
add esi, dword [ebp - 0x28]
push esi
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
add esp, 4
xor esi, esi
call edi
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x407df7
call edi
cdq
mov ecx, 0xa
idiv ecx
add edx, 0x30
jmp 0x407e18
mov dword [ebp - 0x478], esi
mov dword [ebp - 0x64], 0xc8
push 0x410
lea eax, [ebp - 0x474]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.VCRUNTIME140.dll_wcsrchr]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call edi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call edi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
mov edi, esp
push 4
mov ecx, 0x106
lea esi, [ebp - 0x478]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 8]
mov edx, ecx
push 0xffffffffffffffff
jmp 0x407725
cmp edx, 1
jne 0x407e0b
call edi
cdq
mov ecx, 0x1a
idiv ecx
add edx, 0x41
jmp 0x407e18
call edi
cdq
mov ecx, 0x1a
idiv ecx
add edx, 0x61
movzx eax, dx
mov word [ebp + esi*2 - 0x50], ax
inc esi
cmp esi, 0xa
jne 0x407d32
xor eax, eax
mov dword [ebp - 0x3c], 0x64002e
push 0x208
push eax
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x738]
push eax
mov dword [ebp - 0x38], 0x6c006c
call sub.VCRUNTIME140.dll_memset
mov edi, dword [ebx + 8]
lea ecx, [ebp - 0x738]
mov esi, edi
mov eax, ecx
add esp, 0xc
mov edx, 0x104
sub esi, eax
nop word [eax + eax]
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x407e8e
movzx eax, word [ecx + esi]
test ax, ax
je 0x407e8e
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x407e70
test edx, edx
lea eax, [ecx - 2]
cmovne eax, ecx
xor ecx, ecx
test edx, edx
mov word [eax], cx
mov eax, 0x8007007a
cmovne eax, ecx
jne 0x407eb9
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x64], 0x125
jmp 0x407d63
mov esi, dword [ebp - 0x14]
push 0x5c
push edi
call esi
mov ecx, eax
add esp, 8
test ecx, ecx
jne 0x407f58
push 0x410
push eax
lea eax, [ebp - 0x474]
mov dword [ebp - 0x64], 0x12f
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
mov edi, dword [ebp - 0x14]
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push dword [0x459e38]
call dword [ebp - 0x1c]
mov eax, 0x30
jmp 0x407730
add ecx, 2
lea edx, [ebp - 0x50]
mov eax, ecx
sub eax, edi
push edx
sar eax, 1
mov edx, 0x410
sub edx, eax
call fcn.00407150
test eax, eax
jns 0x40800a
push 0x410
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push 0
push eax
mov dword [ebp - 0x64], 0x141
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
mov edi, dword [ebp - 0x14]
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push dword [0x459e38]
call dword [ebp - 0x1c]
mov eax, 4
jmp 0x407730
lea eax, [ebp - 0x738]
push edi
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrename]
add esp, 8
test eax, eax
je 0x4080b5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push 0x410
push 0
mov eax, dword [eax]
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push eax
mov dword [ebp - 0x64], 0x14d
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
mov edi, dword [ebp - 0x14]
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
mov edi, esp
push 0xd
jmp 0x407dde
push edi
push str.Path_of_renamed_dll:__ls_n
push 0
call fcn.0040e7c0
add esp, 0xc
test byte [edi + 0x624], 0x40
je 0x4080f1
mov esi, dword [edi + 0x62c]
mov dword [ebp - 0x1c], esi
test esi, esi
jne 0x4081ae
lea edx, [ebp - 0x478]
mov ecx, edi
call fcn.00408770
jmp 0x407730
push dword [edi + 0x618]
xor eax, eax
cmp dword [edi + 0x620], eax
push 0
sete al
lea eax, [eax*2 + 0x1438]
push eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x1c], eax
test esi, esi
jne 0x4081ae
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x410
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push esi
push eax
mov dword [ebp - 0x64], 0x172
call sub.VCRUNTIME140.dll_memset
mov edi, dword [ebp - 0x14]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
mov edi, esp
push 7
jmp 0x407dde
lea eax, [ebp - 0x54]
mov dword [ebp - 0x54], 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetHandleInformation]
test eax, eax
je 0x4086d5
push 0x410
lea eax, [ebp - 0xb48]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x58], 0x208
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0xb48]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
test eax, eax
jne 0x408291
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x410
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push 0
push eax
mov dword [ebp - 0x64], 0x18a
call sub.VCRUNTIME140.dll_memset
mov edi, dword [ebp - 0x14]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
mov edi, esp
push 9
jmp 0x407dde
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0xb48]
push 0x5c
push eax
call esi
mov edx, eax
add esp, 8
test edx, edx
jne 0x40832f
push 0x410
push eax
lea eax, [ebp - 0x474]
mov dword [ebp - 0x64], 0x194
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
mov edi, dword [ebp - 0x14]
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
mov edi, esp
push 0x38
jmp 0x407dde
add edx, 2
je 0x408664
mov eax, 0x104
mov ecx, edx
nop
cmp word [ecx], 0
je 0x40834e
add ecx, 2
sub eax, 1
jne 0x408340
test eax, eax
mov dword [ebp - 0x18], 0
mov ecx, 0x80070057
cmovne ecx, dword [ebp - 0x18]
je 0x408669
mov ecx, 0x104
sub ecx, eax
add ecx, ecx
neg eax
sbb eax, eax
test ecx, eax
jne 0x40838d
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x64], 0x1aa
jmp 0x408676
push edx
lea ecx, [edi + 0x410]
mov edx, 0x208
call fcn.00407150
test eax, eax
jns 0x4083b4
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x64], 0x1b4
jmp 0x408676
lea eax, [edi + 0x410]
push eax
push str.Target_process_name___ls_n
push 0
call fcn.0040e7c0
add esp, 4
lea ecx, [ebp - 0x530]
push 0x24
push edi
call fcn.0040c7f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x530]
mov eax, dword [ebp - 0x530]
mov eax, dword [eax + 4]
cmp dword [ebp + eax - 0x524], 0
je 0x408402
mov esi, 0x20000001
jmp 0x4085ba
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____thiscall_std::basic_istream_char__struct_std::char_traits_char__::tellg_void_]
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
adc eax, dword [ebp - 0x44]
test eax, eax
jg 0x408430
jl 0x408426
cmp ecx, 0x1000
jae 0x408430
mov esi, 0x20000002
jmp 0x4085b4
push 0x443530
push 0x1000
call fcn.00438d21
mov esi, eax
add esp, 8
mov dword [ebp - 0x18], esi
test esi, esi
je 0x4085af
push 0x1000
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x530]
push 0
push 0
push 0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int_]
push 0
push 0x1000
push esi
lea ecx, [ebp - 0x530]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
lea ecx, [ebp - 0x520]
call fcn.0040cdb0
test eax, eax
jne 0x4084ad
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x530]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
movzx eax, word [esi]
mov ecx, 0x5a4d
cmp ax, cx
je 0x4084cd
push esi
call fcn.00438d2a
add esp, 4
mov esi, 0x20000003
jmp 0x4085b4
mov ecx, dword [esi + 0x3c]
cmp ecx, 0x1000
jg 0x4084ba
mov eax, dword [ebp - 0x18]
mov esi, dword [esi + ecx]
push eax
movzx edx, word [eax + ecx + 4]
movzx ecx, word [eax + ecx + 0x16]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x24], ecx
call fcn.00438d2a
add esp, 4
cmp esi, 0x4550
jne 0x4084c3
mov eax, 0x14c
cmp word [ebp - 0x18], ax
jne 0x4084c3
test dword [ebp - 0x24], 0x2000
je 0x4084c3
lea ecx, [ebp - 0x530]
mov dword [ebp - 4], 0xffffffff
call fcn.00409940
push edi
push str.File_validated_and_prepared_for_injection:_n__ls_n
push 0
call fcn.0040e7c0
mov esi, dword [ebp - 0x1c]
lea eax, [ebp - 0x478]
add esp, 0xc
mov dword [ebp - 0x2c], 0
mov edx, esi
mov ecx, edi
push eax
push dword [edi + 0x628]
lea eax, [ebp - 0x2c]
push eax
push dword [edi + 0x624]
push dword [edi + 0x620]
push dword [edi + 0x61c]
call fcn.00406680
add esp, 0x18
mov dword [ebp - 0x24], eax
test byte [edi + 0x624], 0x40
jne 0x408584
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
lea esi, [ebp - 0x478]
mov dword [edi + 0x630], ecx
sub esp, 0x418
mov edi, esp
mov ecx, 0x106
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 8]
mov edx, ecx
push eax
push 1
jmp 0x407725
mov esi, 0x20000004
lea ecx, [ebp - 0x530]
mov dword [ebp - 4], 0xffffffff
call fcn.00409940
push 0x410
lea eax, [ebp - 0x474]
mov dword [ebp - 0x478], esi
push 0
push eax
mov dword [ebp - 0x64], 0x1d1
call sub.VCRUNTIME140.dll_memset
mov edi, dword [ebp - 0x14]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
lea esi, [ebp - 0x478]
mov edi, esp
mov ecx, 0x106
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 8]
mov edx, ecx
push 0xa
push 1
jmp 0x407725
mov ecx, 0x80070057
mov dword [ebp - 0x478], ecx
mov dword [ebp - 0x64], 0x1a1
push 0x410
lea eax, [ebp - 0x474]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
mov edi, dword [ebp - 0x14]
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
jmp 0x407dc0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x410
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x474]
push 0
push eax
mov dword [ebp - 0x64], 0x17d
call sub.VCRUNTIME140.dll_memset
mov edi, dword [ebp - 0x14]
add esp, 0xc
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 8
add eax, 2
push eax
call esi
add eax, eax
push eax
push 0x5c
push str.D:Univsersity_Study_ProjectsESP_tiatnHack_InjectorGH_Injector_LibraryInjection.cpp
call edi
add esp, 8
add eax, 2
push eax
lea eax, [ebp - 0x474]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x448cb8
call esi
add eax, eax
push eax
lea eax, [ebp - 0x26c]
push 0x448cb8
push eax
call sub.VCRUNTIME140.dll_memcpy
sub esp, 0x40c
mov edi, esp
push 8
jmp 0x407dde
mov ecx, 4
call fcn.00406660
int3