Function at 0x401e20
Capabilities:
Create process on windows
Create process suspended
Create thread
Inject dll
Inject thread
Resume thread
Terminate process
Use process replacement

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x398
mov eax, dword [0x409040]
xor eax, esp
mov dword [esp + 0x394], eax
push esi
push edi
mov edi, dword [ebp + 0x10]
lea eax, [esp + 0x98]
push 0xb0
push 0
push eax
mov dword [esp + 0x20], edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x190]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
mov dword [esp + 0x40], 0
lea ecx, [esp + 0x190]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x44], 0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401e91
sub ecx, edx
lea eax, [esp + 0x190]
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.00404630
sub esp, 0xc
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x24]
push str..log
call fcn.00403cd0
add esp, 4
lea ecx, [esp + 0xa4]
push eax
call fcn.00402e40
mov ecx, dword [esp + 0x2c]
cmp ecx, 7
jbe 0x401f0f
mov edx, dword [esp + 0x18]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401f05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401f54
push ecx
push edx
call fcn.00404c3c
add esp, 8
mov ecx, dword [esp + 0x44]
xor eax, eax
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 7
mov word [esp + 0x18], ax
cmp ecx, 7
jbe 0x401f64
mov edx, dword [esp + 0x30]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401f5a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401f5a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404c3c
add esp, 8
cmp dword [esp + 0xe8], 0
jne 0x401f95
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, str.Failed_to_open_log_file.
call fcn.00404130
push 0x404360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
mov esi, 1
jmp 0x40245e
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
lea eax, [esp + 0x9c]
add ecx, edx
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::rdbuf_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t____]
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
lea eax, [esp + 0x9c]
add ecx, edx
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::rdbuf_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Starting_at
call fcn.00404130
lea ecx, [esp + 0x18]
mov esi, eax
call fcn.00401b40
cmp dword [eax + 0x14], 7
mov ecx, dword [eax + 0x10]
jbe 0x401ff1
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, esi
call fcn.00404940
add esp, 4
mov ecx, eax
push 0x404360
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
mov ecx, dword [esp + 0x2c]
cmp ecx, 7
jbe 0x402049
mov edx, dword [esp + 0x18]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40203f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40203f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404c3c
add esp, 8
lea ecx, [esp + 0x68]
call fcn.00401780
cmp dword [esp + 0x78], 0
jne 0x402063
mov edx, str.SCCT_Versus.ex_not_found._Make_sure_the_application_is_placed_in_the_root_or__System_folder_of_your_game
jmp 0x40214f
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Found_executable_at
call fcn.00404130
cmp dword [esp + 0x7c], 7
lea edx, [esp + 0x68]
push dword [esp + 0x78]
cmova edx, dword [esp + 0x6c]
mov ecx, eax
call fcn.00404940
add esp, 4
mov ecx, eax
push 0x404360
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 0x404360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 0x40
lea eax, [esp + 0x150]
mov dword [esp + 0x14c], 0x44
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push edi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, eax
test edi, edi
jne 0x4020e3
xor esi, esi
jmp 0x402111
mov ecx, 2
mov eax, edi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.00404c4a
add esp, 4
mov esi, eax
push edi
push esi
push 0xffffffffffffffff
push dword [esp + 0x20]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp dword [esp + 0x7c], 7
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x14c]
push ecx
push 0
push 0
push 4
push 0
push 0
push 0
lea eax, [esp + 0x88]
cmova eax, dword [esp + 0x88]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x40217d
mov edx, str.Failed_to_start_process.
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.00404130
push 0x404360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
mov esi, 1
jmp 0x402409
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Suspended_process_created_successfully.
call fcn.00404130
push 0x404360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push str.Reloaded.Core.dll
push ecx
lea ecx, [esp + 0x20]
call fcn.00401220
add esp, 4
lea ecx, [esp + 0x84]
mov edx, eax
call fcn.00403cd0
mov ecx, dword [esp + 0x30]
add esp, 4
cmp ecx, 7
jbe 0x4021fb
mov edx, dword [esp + 0x18]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4021f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4021f1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404c3c
add esp, 8
mov eax, dword [esp + 0x90]
mov esi, dword [esp + 0x54]
push 4
push 0x3000
lea eax, [eax*2 + 2]
push eax
push 0
push esi
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, eax
test edi, edi
je 0x402371
cmp dword [esp + 0x94], 7
lea ecx, [esp + 0x80]
push 0
push dword [esp + 0x18]
cmova ecx, dword [esp + 0x88]
push ecx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x402362
push 0x4062ac
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x402362
push str.LoadLibraryW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push edi
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [esp + 0x14], eax
test eax, eax
je 0x402362
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [esp + 0x64]
mov dword [esp + 0x64], 0
push eax
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x402371
cmp dword [esp + 0x64], 0
je 0x402371
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Code_injected_successfully.
call fcn.00404130
push 0x404360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push dword [esp + 0x58]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Process_resumed.
call fcn.00404130
push 0x404360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push dword [esp + 0x58]
call esi
push dword [esp + 0x54]
call esi
lea ecx, [esp + 0x9c]
call fcn.00403b40
test eax, eax
jne 0x40235e
push eax
mov eax, dword [esp + 0x9c]
lea ecx, [esp + 0x9c]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool_]
xor esi, esi
jmp 0x4023ab
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, str.Failed_to_inject_DLL._Terminating_SCCT_Versus.exe
call fcn.00404130
push 0x404360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 1
push dword [esp + 0x58]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
mov esi, 1
mov ecx, dword [esp + 0x94]
cmp ecx, 7
jbe 0x4023e9
mov edx, dword [esp + 0x80]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4023df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402437
push ecx
push edx
call fcn.00404c3c
add esp, 8
xor eax, eax
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 7
mov word [esp + 0x80], ax
mov ecx, dword [esp + 0x7c]
cmp ecx, 7
jbe 0x402447
mov edx, dword [esp + 0x68]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40243d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40243d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404c3c
add esp, 8
xor eax, eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 7
mov word [esp + 0x68], ax
lea ecx, [esp + 0x98]
call fcn.00402490
mov ecx, dword [esp + 0x39c]
mov eax, esi
pop edi
pop esi
xor ecx, esp
call fcn.00404bf9
mov esp, ebp
pop ebp
ret 0x10