Function at 0x401d30
Capabilities:
Create process on windows
Create process suspended
Create thread
Inject dll
Inject thread
Resume thread
Terminate process
Use process replacement

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x398
mov eax, dword [0x409040]
xor eax, esp
mov dword [esp + 0x394], eax
push esi
push edi
push 0xb0
lea eax, [esp + 0x9c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x190]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
mov dword [esp + 0x40], 0
lea ecx, [esp + 0x190]
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x44], 0
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401da0
sub ecx, edx
lea eax, [esp + 0x190]
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.00404060
sub esp, 0xc
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x24]
push str..log
call fcn.00403a00
add esp, 4
lea ecx, [esp + 0xa4]
push eax
call fcn.00402d00
mov ecx, dword [esp + 0x2c]
cmp ecx, 7
jbe 0x401e1e
mov edx, dword [esp + 0x18]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401e14
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x401e63
push ecx
push edx
call fcn.00404907
add esp, 8
mov ecx, dword [esp + 0x44]
xor eax, eax
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 7
mov word [esp + 0x18], ax
cmp ecx, 7
jbe 0x401e73
mov edx, dword [esp + 0x30]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401e69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401e69
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404907
add esp, 8
cmp dword [esp + 0xe8], 0
jne 0x401ea8
push 0x403f30
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, str.Failed_to_open_log_file.
call fcn.00403d00
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
mov esi, 1
jmp 0x402336
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea eax, [esp + 0x9c]
push eax
mov eax, dword [edx]
mov ecx, dword [eax + 4]
add ecx, edx
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::rdbuf_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t____]
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea eax, [esp + 0x9c]
push eax
mov eax, dword [edx]
mov ecx, dword [eax + 4]
add ecx, edx
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::rdbuf_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t____]
lea ecx, [esp + 0x18]
call fcn.00401a40
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Starting_at
mov esi, eax
call fcn.00403d00
cmp dword [esi + 0x14], 7
mov edx, esi
jbe 0x401f03
mov edx, dword [esi]
push dword [esi + 0x10]
mov ecx, eax
call fcn.00404610
add esp, 4
mov ecx, eax
push 0x403f30
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
mov ecx, dword [esp + 0x2c]
cmp ecx, 7
jbe 0x401f5b
mov edx, dword [esp + 0x18]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401f51
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401f51
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404907
add esp, 8
lea ecx, [esp + 0x68]
call fcn.00401770
cmp dword [esp + 0x78], 0
jne 0x401f75
mov edx, str.SCCT_Versus.exe_not_found._Make_sure_the_application_is_placed_in_the_root_or__System_folder_of_your_game
jmp 0x402013
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Found_executable_at
call fcn.00403d00
cmp dword [esp + 0x7c], 7
lea edx, [esp + 0x68]
push dword [esp + 0x78]
cmova edx, dword [esp + 0x6c]
mov ecx, eax
call fcn.00404610
add esp, 4
mov ecx, eax
push 0x403f30
push 0x403f30
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 0x40
lea eax, [esp + 0x150]
mov dword [esp + 0x14c], 0x44
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [esp + 0x54]
cmp dword [esp + 0x7c], 7
lea eax, [esp + 0x68]
cmova eax, dword [esp + 0x68]
push ecx
lea ecx, [esp + 0x14c]
push ecx
push 0
push 0
push 4
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x402045
mov edx, str.Failed_to_start_process.
push 0x403f30
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.00403d00
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
mov esi, 1
jmp 0x4022e1
push 0x403f30
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Suspended_process_created_successfully.
call fcn.00403d00
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push str.SCCT_Extension.dll
push ecx
lea ecx, [esp + 0x20]
call fcn.00401220
add esp, 4
lea ecx, [esp + 0x84]
mov edx, eax
call fcn.00403a00
mov ecx, dword [esp + 0x30]
add esp, 4
cmp ecx, 7
jbe 0x4020c7
mov edx, dword [esp + 0x18]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4020bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4020bd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404907
add esp, 8
mov eax, dword [esp + 0x90]
mov esi, dword [esp + 0x54]
push 4
push 0x3000
lea eax, [eax*2 + 2]
push eax
push 0
push esi
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, eax
test edi, edi
je 0x402245
cmp dword [esp + 0x94], 7
lea eax, [esp + 0x80]
push 0
push dword [esp + 0x18]
cmova eax, dword [esp + 0x88]
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x402236
push 0x4062a4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x402236
push str.LoadLibraryW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push edi
push eax
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [esp + 0x14], eax
test eax, eax
je 0x402236
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [esp + 0x64]
mov dword [esp + 0x64], 0
push eax
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x402245
cmp dword [esp + 0x64], 0
je 0x402245
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push 0x403f30
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Code_injected_successfully.
call fcn.00403d00
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push dword [esp + 0x58]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 0x403f30
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Process_resumed.
call fcn.00403d00
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push dword [esp + 0x58]
call esi
push dword [esp + 0x54]
call esi
lea ecx, [esp + 0x9c]
call fcn.00403970
test eax, eax
jne 0x402232
push eax
mov eax, dword [esp + 0x9c]
lea ecx, [esp + 0x9c]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool_]
xor esi, esi
jmp 0x402283
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x403f30
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
mov edx, str.Failed_to_inject_DLL._Terminating_SCCT_Versus.exe
call fcn.00403d00
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
push 1
push dword [esp + 0x58]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call dword [sym.imp.MSVCP140.dll_public:_int___thiscall_std::basic_istream_char__struct_std::char_traits_char__::get_void_]
mov esi, 1
mov ecx, dword [esp + 0x94]
cmp ecx, 7
jbe 0x4022c1
mov edx, dword [esp + 0x80]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4022b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40230f
push ecx
push edx
call fcn.00404907
add esp, 8
xor eax, eax
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 7
mov word [esp + 0x80], ax
mov ecx, dword [esp + 0x7c]
cmp ecx, 7
jbe 0x40231f
mov edx, dword [esp + 0x68]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402315
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402315
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404907
add esp, 8
xor eax, eax
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 7
mov word [esp + 0x68], ax
lea ecx, [esp + 0x98]
call fcn.00402360
mov ecx, dword [esp + 0x39c]
mov eax, esi
pop edi
pop esi
xor ecx, esp
call fcn.004048c9
mov esp, ebp
pop ebp
ret 0x10