Function at 0x4035a0
Capabilities:
Create thread
Enumerate processes
Inject thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41f497
mov eax, dword fs:[0]
push eax
sub esp, 0x398
mov eax, dword [0x42b040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [ebp + 8], 1
lea eax, [ebp - 0x268]
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x264]
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x26c]
mov dword [ebp - 4], 0
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x278], eax
jne 0x403688
lea ecx, [ebp - 0x2b0]
call fcn.00405630
add esp, 4
mov byte [ebp - 4], 1
lea edx, [ebp - 0x2b0]
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x270], 1
call fcn.004031b0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x3a4]
push eax
mov dword [ebp - 0x270], 3
call fcn.00403f50
lea ecx, [ebp - 0x3a4]
mov eax, 0x207
jmp 0x4036e6
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x298]
lea edx, [edx + 4]
call fcn.00405720
add esp, 4
mov dword [ebp - 4], 4
lea edx, [ebp - 0x298]
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x270], 8
call fcn.004031b0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x38c]
push eax
mov dword [ebp - 0x270], 0x18
call fcn.00403f50
lea ecx, [ebp - 0x38c]
mov eax, 0x2038
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x24], xmm0
mov dword [ebp - 4], 6
xor edx, edx
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], dx
test al, 0x20
je 0x403764
mov ecx, dword [ebp - 0x378]
and eax, 0xffffffdf
mov dword [ebp - 0x270], eax
cmp ecx, 7
jbe 0x403764
mov edx, dword [ebp - 0x38c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403754
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403cdb
push ecx
push edx
call fcn.00407d76
mov eax, dword [ebp - 0x270]
add esp, 8
mov byte [ebp - 4], 7
test al, 0x10
je 0x4037d8
mov ecx, dword [ebp - 0x2b8]
and eax, 0xffffffef
mov dword [ebp - 0x270], eax
cmp ecx, 7
jbe 0x4037bb
mov edx, dword [ebp - 0x2cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4037ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403cdb
push ecx
push edx
call fcn.00407d76
mov eax, dword [ebp - 0x270]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2b8], 7
mov word [ebp - 0x2cc], cx
mov byte [ebp - 4], 8
test al, 8
je 0x40384c
mov ecx, dword [ebp - 0x284]
and eax, 0xfffffff7
mov dword [ebp - 0x270], eax
cmp ecx, 7
jbe 0x40382f
mov edx, dword [ebp - 0x298]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40381f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403cdb
push ecx
push edx
call fcn.00407d76
mov eax, dword [ebp - 0x270]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 7
mov word [ebp - 0x298], cx
mov byte [ebp - 4], 9
test al, 4
je 0x4038a3
mov ecx, dword [ebp - 0x390]
and eax, 0xfffffffb
mov dword [ebp - 0x270], eax
cmp ecx, 7
jbe 0x4038a3
mov edx, dword [ebp - 0x3a4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403893
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403cdb
push ecx
push edx
call fcn.00407d76
mov eax, dword [ebp - 0x270]
add esp, 8
mov byte [ebp - 4], 0xa
test al, 2
je 0x403917
mov ecx, dword [ebp - 0x2d0]
and eax, 0xfffffffd
mov dword [ebp - 0x270], eax
cmp ecx, 7
jbe 0x4038fa
mov edx, dword [ebp - 0x2e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4038ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403cdb
push ecx
push edx
call fcn.00407d76
mov eax, dword [ebp - 0x270]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d0], 7
mov word [ebp - 0x2e4], cx
mov byte [ebp - 4], 0xb
test al, 1
je 0x40397c
mov ecx, dword [ebp - 0x29c]
cmp ecx, 7
jbe 0x40395f
mov edx, dword [ebp - 0x2b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403955
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403cdb
push ecx
push edx
call fcn.00407d76
add esp, 8
xor eax, eax
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x403ce7
push 0x228
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x260], 0x22c
push 0
push eax
call fcn.00409910
add esp, 0xc
lea eax, [ebp - 0x260]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x403ce0
nop word [eax + eax]
mov ecx, str.csgo.exe
lea eax, [ebp - 0x23c]
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x403a06
test dx, dx
je 0x403a02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x403a06
add eax, 4
add ecx, 4
test dx, dx
jne 0x4039e0
xor eax, eax
jmp 0x403a0b
sbb eax, eax
or eax, 1
test eax, eax
je 0x403a27
lea eax, [ebp - 0x260]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x403ce0
jmp 0x4039d0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x258]
test esi, esi
je 0x403ce7
push esi
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x264], eax
test eax, eax
je 0x403d08
push ecx
mov edx, esi
lea ecx, [ebp - 0x274]
call fcn.00403240
mov edi, dword [ebp - 0x274]
add esp, 4
test edi, edi
je 0x403d29
mov ecx, dword [ebp - 0x264]
mov edx, edi
push str.39_05_________0F_8F
push dword [ebp - 0x270]
call fcn.00403350
mov esi, eax
add esp, 8
test esi, esi
je 0x403d4a
push 0
push 4
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
add esi, 2
push esi
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x403d6b
mov ecx, dword [ebp - 0x264]
mov edx, edi
push str.A1_________81_EC_________53_56_57
push dword [ebp - 0x270]
call fcn.00403350
add esp, 8
test eax, eax
je 0x403d8c
push 0
push 4
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push ecx
inc eax
push eax
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x403dad
inc dword [ebp - 0x1c]
lea eax, [ebp - 0x1c]
push 0
push 4
push eax
push esi
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x403dce
mov eax, dword [ebp - 0x24]
push 4
push 0x3000
add eax, eax
push eax
push 0
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edx, eax
mov dword [ebp - 0x268], edx
test edx, edx
je 0x403def
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 7
push 0
lea ecx, [eax + eax]
push ecx
lea eax, [ebp - 0x34]
cmova eax, dword [ebp - 0x34]
push eax
push edx
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x403e10
push 0
push 0
push dword [ebp - 0x268]
push dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0
push 0
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x26c], eax
test eax, eax
je 0x403e31
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0
push 4
lea eax, [ebp - 0x18]
push eax
push esi
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x403e52
call fcn.00404360
push eax
call fcn.00404600
mov eax, dword [ebp - 0x268]
add esp, 4
test eax, eax
je 0x403c00
push 0x8000
push 0
push eax
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x403c11
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x264]
test eax, eax
je 0x403c22
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x274], 0x1f4
mov dword [ebp - 0x270], 0
call fcn.00404640
mov ecx, dword [ebp - 0x20]
cmp ecx, 7
jbe 0x403c7b
mov edx, dword [ebp - 0x34]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403c71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403e73
push ecx
push edx
call fcn.00407d76
add esp, 8
xor eax, eax
jmp 0x403cbf
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00407d2e
mov esp, ebp
pop ebp
ret
call fcn.0040d485
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.The_target_process_isnt_open_
lea ecx, [ebp - 0x374]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x374]
push eax
call fcn.00409305
push str.Failed_to_open_a_handle_to_the_target_process_
lea ecx, [ebp - 0x2f0]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x2f0]
push eax
call fcn.00409305
push str.Failed_to_get_csgo_module_data_
lea ecx, [ebp - 0x2fc]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x2fc]
push eax
call fcn.00409305
push str.Failed_to_find_the_address_of_the_current_trust_index_
lea ecx, [ebp - 0x308]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x308]
push eax
call fcn.00409305
push str.Failed_to_read_the_value_of_the_current_trust_index_
lea ecx, [ebp - 0x314]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x314]
push eax
call fcn.00409305
push str.Failed_to_find_the_address_of_the_highest_trust_index_
lea ecx, [ebp - 0x320]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x320]
push eax
call fcn.00409305
push str.Failed_to_read_the_value_of_the_highest_trust_index_
lea ecx, [ebp - 0x32c]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x32c]
push eax
call fcn.00409305
push str.Failed_to_modify_the_value_of_the_current_trust_index_
lea ecx, [ebp - 0x338]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x338]
push eax
call fcn.00409305
push str.Failed_to_allocate_memory_for_file_path_in_the_target_process_
lea ecx, [ebp - 0x344]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x344]
push eax
call fcn.00409305
push str.Failed_to_write_file_path_into_the_target_process_
lea ecx, [ebp - 0x350]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x350]
push eax
call fcn.00409305
push str.Failed_to_create_a_remote_thread_in_the_target_process_
lea ecx, [ebp - 0x35c]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x35c]
push eax
call fcn.00409305
push str.Failed_to_restore_the_value_of_the_current_trust_index_
lea ecx, [ebp - 0x368]
call fcn.00401390
push 0x4295a4
lea eax, [ebp - 0x368]
push eax
call fcn.00409305
call fcn.0040d485
int3