Function at 0x401050
Capabilities:
Create thread
Execute command
Inject thread
Set console window title
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x340
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x33c], eax
push esi
push edi
push str.EZ_RATOS_RATOS_RATOS
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
push 0x401560
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.EZinjector_RATO_n_nVisit_RATOS___RATOS_n__RATO_FOR_INJECT_RATO_n_n
call fcn.00401340
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.Counter_Strike:_Global_Offensive___Direct3D_9
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
push 0x4053c0
push eax
mov dword [0x4053c8], eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [0x4053c0]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push dword [0x4053c0]
mov dword [0x4053c4], eax
push 8
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov edi, dword [sym.imp.KERNEL32.dll_Module32Next]
mov esi, eax
mov dword [esp + 8], 0x224
nop dword [eax]
mov ecx, str.client.dll
lea edx, [esp + 0x28]
nop dword [eax]
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x401120
test al, al
je 0x40111c
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x401120
add edx, 2
add ecx, 2
test al, al
jne 0x401100
xor eax, eax
jmp 0x401125
sbb eax, eax
or eax, 1
test eax, eax
je 0x40113e
lea eax, [esp + 8]
push eax
push esi
call edi
test eax, eax
jne 0x4010f0
mov eax, dword [esp + 0x230]
jmp 0x401149
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
push 0x401560
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Enter_dll_name:
mov dword [0x4053cc], eax
call fcn.00401340
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x4053d0
push 0x403298
call fcn.00401010
push 0x4031c4
push 0x4053d0
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 0x10
test eax, eax
je 0x4012e5
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
push str.NtOpenFile
push str.ntdll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4011ec
mov ecx, dword [eax]
mov dword [esp + 0x230], ecx
mov cl, byte [eax + 4]
push 0
push 5
mov byte [esp + 0x23c], cl
lea ecx, [esp + 0x238]
push ecx
push eax
push dword [0x4053c4]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x4011fc
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Unable_to_bypass._n
call fcn.00401340
mov esi, dword [0x4053c0]
test esi, esi
jne 0x40123c
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.ERROR:_Cant_found_csgo.exe._Run_game_first_and_try_again_n
call fcn.00401340
push 0x401560
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Injection_failed__try_run_as_Administrator._n_n
call fcn.00401340
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
jmp 0x40130d
push 0
lea eax, [esp + 0x23c]
push eax
push 0x104
push 0x4053d0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
push esi
push 0
push 0x43a
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 4
push 0x3000
push 0x104
mov edi, eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
push 0
mov esi, eax
lea eax, [esp + 0x23c]
push 0x104
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0
push esi
push dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x401560
push ecx
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Injection_successful__You_can_close_this_window._n_n
call fcn.00401340
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Cannot_find_:
call fcn.00401340
mov edx, 0x4053d0
mov ecx, eax
call fcn.00401340
mov edx, 0x403308
mov ecx, eax
call fcn.00401340
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [esp + 0x348]
add esp, 4
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.0040164a
mov esp, ebp
pop ebp
ret