Function at 0x4024b0
Capabilities:
Create service
Persist via windows service
Set console window title
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x38
mov eax, dword [0x430014]
xor eax, esp
mov dword [esp + 0x34], eax
push esi
push edi
push str.C:__Windows__SysWOW64__drivers.dll
call fcn.0040915e
add esp, 4
push str.C:__Windows__SysWOW64__driver.dll
call fcn.0040915e
add esp, 4
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push 0x42d6ac
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 4
mov esi, eax
call fcn.00404e0c
add esp, 4
push 0
push eax
push 0x3048
push 0x430a68
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
push 0
push 0
push 0
push 0
push 0
push str.C:__Windows__Temp__KAOXD.sys
push 2
push 2
push 1
push 0xf01ff
push 0x42d708
mov edi, eax
push 0x42d708
push edi
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push eax
call esi
push edi
call esi
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push str.C:__Windows__SysWOW64__driver.dll
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 4
mov esi, eax
call fcn.00404e0c
add esp, 4
push 0
push eax
push 0x231200
push 0x433ab0
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 2
push 0x42d6ac
call edi
push 2
push str.C:__Windows__SysWOW64__driver.dll
call edi
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push str.C:__Windows__SysWOW64__drivers.dll
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 4
mov esi, eax
call fcn.00404e0c
add esp, 4
push 0
push eax
push 0x231200
push 0x433ab0
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 2
push 0x42d6ac
call edi
push 2
push str.C:__Windows__SysWOW64__drivers.dll
call edi
xor esi, esi
xorps xmm0, xmm0
movaps xmmword [esp + 0x20], xmm0
lea edi, [esi + 0x64]
call fcn.0040a2fa
cdq
idiv edi
lea eax, [esp + 0x20]
mov cl, byte [edx + str.zxcvbnmasdfghjkl123456789]
add byte [eax + esi], cl
inc esi
cmp esi, 0xf
jne 0x402636
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
push str.Sun_Oct__8_11:02:32_2023
push str._n_s__n_n
call fcn.004020e0
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
add esp, 8
xor edx, edx
xor ecx, ecx
add edx, 0x64
add ecx, 0x43
mov dword [esp + 0x14], edx
mov eax, 0x10624dd3
imul ecx
mov eax, 0x10624dd3
mov dword [esp + 0x1c], ecx
sar edx, 6
mov edi, edx
shr edi, 0x1f
add edi, edx
imul dword [esp + 0x14]
push 2
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
push 0xfffffffffffffff5
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call esi
push 0x42d674
push 0x42d65c
call fcn.00401170
add esp, 8
test edi, edi
jle 0x4026ea
mov esi, edi
nop
push 0x23
push 0x42d660
call fcn.00401170
add esp, 8
sub esi, 1
jne 0x4026d0
mov esi, dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, 0x44
push 0x5d
sub eax, edi
push eax
push str.__c
call fcn.00401170
add esp, 0xc
push dword [esp + 0x18]
push str.__3d___r
call fcn.00401170
add esp, 8
push 8
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call esi
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
cmp ecx, 0x105b8
jl 0x402674
push 0x42d67c
call fcn.00401170
add esp, 4
push str.______Jerr_store_n
call fcn.004020e0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
push 0x1f4
call esi
push str.______Load_Pro_n
call fcn.004020e0
add esp, 4
push 0x1f4
call esi
push str.______Pro_Ready_Inject_n
call fcn.004020e0
add esp, 4
push 0x7d0
call esi
push str.______Enter_game_Pro_is_inject_to_n
call fcn.004020e0
add esp, 4
push 0x3e8
call esi
mov esi, dword [sym.imp.KERNEL32.dll_Beep]
push 0x3e8
push 0x352
call esi
cmp dword [0x665f74], 0
jne 0x4027bf
call fcn.00402110
mov dword [0x665f74], eax
test eax, eax
je 0x4027b1
push 0x1f4
push 0x1f4
call esi
cmp dword [0x665f78], 0
jne 0x4027f6
call fcn.00402110
mov dword [0x665f78], eax
cmp eax, dword [0x665f74]
jne 0x4027f2
mov dword [0x665f78], 0
jmp 0x4027d4
test eax, eax
je 0x4027d4
call fcn.004023f0
call fcn.00402330
push str.C:__Windows__SysWOW64__drivers.dll
call fcn.0040915e
add esp, 4
push str.C:__Windows__SysWOW64__driver.dll
call fcn.0040915e
mov ecx, dword [esp + 0x40]
add esp, 4
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.00404df9
mov esp, ebp
pop ebp
ret