Function at 0x4011f0
Capabilities:
Enumerate process modules
Enumerate processes
Execute command

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x684
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x680], eax
push ebx
push esi
push edi
xor edi, edi
mov dword [esp + 0x674], 0
push edi
push 2
mov dword [esp + 0x674], 0
mov dword [esp + 0x678], edi
mov byte [esp + 0x67c], 0
mov dword [esp + 0x680], edi
mov dword [esp + 0x18], 0x22c
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
lea eax, [esp + 0x10]
push eax
push ebx
mov dword [esp + 0x670], ebx
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x40165b
mov esi, dword [sym.imp.KERNEL32.dll_Process32NextW]
lea eax, [esp + 0x10]
push eax
push ebx
call esi
cmp eax, 1
jne 0x4012d0
nop dword [eax]
mov ecx, str.GeometryDash.exe
lea eax, [esp + 0x34]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4012b6
test dx, dx
je 0x4012b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4012b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x401290
xor eax, eax
jmp 0x4012bb
sbb eax, eax
or eax, 1
test eax, eax
je 0x401431
lea eax, [esp + 0x10]
push eax
push ebx
call esi
cmp eax, 1
je 0x401280
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x678]
push edi
push eax
push str.FAILED_TO_GET_INFO__base:__X__hProc:__X_n
call fcn.00401170
add esp, 0xc
push ebx
call esi
cmp byte [esp + 0x674], 0
je 0x40165b
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isdigit]
or esi, 0xffffffff
test esi, esi
js 0x401313
cmp esi, 0x1f
jle 0x401512
push 0x4033a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0x1f
push str.Input_q_to_exit_nSelect_a_stat_to_modify__1____d_:_n
call fcn.00401170
add esp, 8
mov ebx, 1
mov esi, 0x4034e0
nop word [eax + eax]
push dword [esi]
push ebx
push str.__2i____25s
call fcn.00401170
add esp, 0xc
test bl, 1
jne 0x401362
push 0x4033e4
call fcn.00401170
add esp, 4
add esi, 4
inc ebx
cmp esi, 0x403558
jle 0x401340
push str._nInput:
call fcn.00401170
add esp, 4
push 0
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
lea eax, [esp + 0x680]
push 0x10
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
mov al, byte [esp + 0x688]
add esp, 0xc
test al, al
je 0x401303
cmp al, 0xa
je 0x401303
mov cl, al
or cl, 0x20
cmp cl, 0x71
jne 0x4013cb
mov ecx, dword [esp + 0x67d]
test cl, cl
je 0x401416
cmp cl, 0xa
je 0x401416
lea esi, [esp + 0x67c]
cmp al, 0xa
je 0x4013ef
movsx eax, al
push eax
call edi
add esp, 4
test eax, eax
je 0x401303
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x4013d2
lea eax, [esp + 0x67c]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov esi, eax
add esp, 4
lea ecx, [esi - 1]
cmp ecx, 0x1e
ja 0x401303
test esi, esi
jne 0x401308
push str.Exiting..._n
call fcn.00401170
mov edi, dword [esp + 0x674]
add esp, 4
xor esi, esi
jmp 0x40167b
push dword [esp + 0x18]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push dword [esp + 0x18]
mov edi, eax
push 8
mov dword [esp + 0x678], edi
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
mov dword [esp + 0x240], 0x428
lea eax, [esp + 0x240]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x4014e5
mov ebx, dword [sym.imp.KERNEL32.dll_Module32NextW]
nop dword [eax]
mov ecx, str.GeometryDash.exe
lea eax, [esp + 0x260]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4014b6
test dx, dx
je 0x4014b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4014b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x401490
xor eax, eax
jmp 0x4014bb
sbb eax, eax
or eax, 1
test eax, eax
je 0x4014d0
lea eax, [esp + 0x240]
push eax
push esi
call ebx
test eax, eax
jne 0x401480
jmp 0x4014de
mov eax, dword [esp + 0x254]
mov dword [esp + 0x678], eax
mov ebx, dword [esp + 0x668]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
mov eax, dword [esp + 0x678]
test eax, eax
je 0x4012dd
test edi, edi
je 0x4012dd
mov byte [esp + 0x674], 1
jmp 0x4012ec
push dword [esi*4 + 0x4034dc]
push str._nInput_value_to_set_for_stat__s__nValue:
call fcn.00401170
lea eax, [esp + 0x670]
push eax
push 0x40342c
call fcn.004011b0
push dword [esp + 0x678]
push dword [esi*4 + 0x4034dc]
push str._nSetting__s_value_to__d__n
call fcn.00401170
mov eax, dword [esp + 0x694]
lea ebx, [esi + 0xa]
add esp, 0x1c
lea ecx, [esp + 0x66c]
cmp esi, 0x1e
cmovl ebx, esi
add eax, 0x4e82f0
push eax
call fcn.00401110
mov esi, eax
lea ecx, [esi + 0x164]
push ecx
lea ecx, [esp + 0x670]
call fcn.00401090
lea ecx, [esi + 0x16c]
mov dword [esp + 0xc], eax
push ecx
lea ecx, [esp + 0x670]
call fcn.00401090
push ebx
mov edx, eax
lea ecx, [esp + 0x670]
call section..text
add esp, 4
test eax, eax
je 0x401639
push eax
lea ecx, [esp + 0x670]
call fcn.00401110
mov edx, dword [esp + 0xc]
lea ecx, [esp + 0x66c]
push ebx
mov esi, eax
call section..text
add esp, 4
test eax, eax
je 0x401617
mov ecx, dword [esp + 0x668]
add ecx, esi
push ecx
push eax
lea ecx, [esp + 0x674]
call fcn.004016a0
push str.Finished__n_n
call fcn.00401170
mov eax, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push str.pause
call eax
add esp, 4
jmp 0x401303
push str.Failed_to_get_the_stat_value_address_for_the_specified_stat_type__n
call fcn.00401170
mov eax, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push str.pause
call eax
mov edi, dword [esp + 0x674]
jmp 0x401673
push str.Failed_to_get_the_delta_address_for_the_specified_stat_type__n
call fcn.00401170
mov eax, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push str.pause
call eax
mov edi, dword [esp + 0x674]
jmp 0x401673
push str.Failed_to_find_game_process__n
call fcn.00401170
add esp, 4
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov esi, 1
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x68c]
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004016c1
mov esp, ebp
pop ebp
ret