Function at 0x4042c0
Capabilities:
Allocate or change rwx memory
Create thread
Enumerate processes
Execute shellcode via indirect call
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4077d8
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x378
mov eax, dword [0x40a008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], 0xf63528c8
mov dword [ebp - 0x4c], 0x163e5977
mov dword [ebp - 0x48], 0xc2c199c4
mov dword [ebp - 0x44], 0xb32b6460
mov dword [ebp - 0x40], 0xc4f9b9c4
mov dword [ebp - 0x3c], 0x36c141d4
mov dword [ebp - 0x38], 0x1ea1baab
mov dword [ebp - 0x34], 0xa12f2246
mov dword [ebp - 0x30], 0x6ee1b080
mov dword [ebp - 0x2c], 0x901a7fb9
mov dword [ebp - 0x28], 0xe2716b78
mov dword [ebp - 0x24], 0xac6a9b65
movaps xmm1, xmmword [ebp - 0x50]
mov dword [ebp - 0x300], 0x95594d9f
mov dword [ebp - 0x2fc], 0x385b3418
mov dword [ebp - 0x2f8], 0xa7adc9e4
mov dword [ebp - 0x2f4], 0x934e1701
pxor xmm1, xmmword [ebp - 0x300]
movaps xmmword [ebp - 0x50], xmm1
movaps xmm1, xmmword [ebp - 0x40]
mov dword [ebp - 0x2f0], 0xa18dd7a1
mov dword [ebp - 0x2ec], 0x59b861a6
mov dword [ebp - 0x2e8], 0x7281c8de
mov dword [ebp - 0x2e4], 0xcf4a412f
pxor xmm1, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x40], xmm1
movaps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x2e0], 0x5c1d5f3
mov dword [ebp - 0x2dc], 0x903406dc
mov dword [ebp - 0x2d8], 0xe2716b78
mov dword [ebp - 0x2d4], 0xac6a9b65
pxor xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x30], xmm1
call fcn.00405de0
push 0x406010
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0x2d0]
mov dword [ebp - 0x2d0], 0xf03a24d3
mov dword [ebp - 0x2cc], 0x183e4776
mov dword [ebp - 0x2c8], 0x9dd4ac8f
mov dword [ebp - 0x2c4], 0x934e1721
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x60], 0x95594d9f
mov dword [ebp - 0x5c], 0x385b3418
mov dword [ebp - 0x58], 0xa7adc9e4
mov dword [ebp - 0x54], 0x934e1701
pxor xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x2d0], xmm1
call fcn.00405de0
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0xa
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
mov edx, 0x40c810
mov ecx, esi
call fcn.00406580
add esp, 4
cmp dword [0x40c820], 0
je 0x404480
push 0x40c828
mov edx, 0x40c810
lea ecx, [ebp - 0x38]
call fcn.00403ed0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2d0]
sub esp, 0x14
mov dword [ebp - 0x60], 0x95594d9f
mov edx, esp
mov dword [ebp - 0x5c], 0x385b3418
mov dword [ebp - 0x58], 0xa7adc9e4
lea esi, [ecx + 1]
mov dword [ebp - 0x54], 0x934e1701
movaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0x2d0], 0xfa3a23f6
mov dword [ebp - 0x2cc], 0x5b3e466a
mov dword [ebp - 0x2c8], 0xc6c99690
mov dword [ebp - 0x2c4], 0x934e7675
pxor xmm1, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0x2d0], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404540
sub ecx, esi
lea eax, [ebp - 0x2d0]
push ecx
push eax
mov ecx, edx
call fcn.00405c90
lea ecx, [ebp - 0x2e8]
call fcn.00401e00
add esp, 0x18
lea ecx, [ebp - 0x38]
mov edx, eax
call fcn.00406040
mov edx, dword [ebp - 0x2d4]
mov byte [ebp - 0x2b1], al
cmp edx, 0x10
jb 0x4045b8
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4045a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4045a8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00406c0e
mov al, byte [ebp - 0x2b1]
add esp, 8
test al, al
je 0x4047c2
mov dword [ebp - 0x380], 0xf63a23d6
lea edx, [ebp - 0x380]
mov dword [ebp - 0x37c], 0x5b3e4677
mov dword [ebp - 0x378], 0xc4cce990
mov dword [ebp - 0x374], 0xe73e7262
mov dword [ebp - 0x370], 0xc5adb3c4
mov dword [ebp - 0x36c], 0x79d915c7
mov dword [ebp - 0x368], 0x4f3adad
mov dword [ebp - 0x364], 0xef66334a
mov dword [ebp - 0x360], 0x61a0ba9f
mov dword [ebp - 0x35c], 0xe71474b9
mov dword [ebp - 0x358], 0xc21d0711
mov dword [ebp - 0x354], 0xdf05f706
mov dword [ebp - 0x350], 0x3a9ecaa0
mov dword [ebp - 0x34c], 0xff2c529e
mov dword [ebp - 0x348], 0x8b7b0e7
mov dword [ebp - 0x344], 0x8c2b7620
mov dword [ebp - 0x340], 0x237ad294
mov dword [ebp - 0x33c], 0x14ba2a70
mov dword [ebp - 0x338], 0x154390c
mov dword [ebp - 0x334], 0xbf9517d9
mov dword [ebp - 0x320], 0x95594d9f
mov dword [ebp - 0x31c], 0x385b3418
mov dword [ebp - 0x318], 0xa7adc9e4
mov dword [ebp - 0x314], 0x934e1701
movaps xmm1, xmmword [ebp - 0x320]
pxor xmm1, xmmword [ebp - 0x380]
movaps xmmword [ebp - 0x380], xmm1
mov dword [ebp - 0x310], 0xa18dd7a1
mov dword [ebp - 0x30c], 0x59b861a6
mov dword [ebp - 0x308], 0x7281c8de
mov dword [ebp - 0x304], 0xcf4a412f
movaps xmm1, xmmword [ebp - 0x310]
pxor xmm1, xmmword [ebp - 0x370]
movaps xmmword [ebp - 0x370], xmm1
mov dword [ebp - 0x300], 0x5c1d5f3
mov dword [ebp - 0x2fc], 0x903406dc
mov dword [ebp - 0x2f8], 0xe2716b78
mov dword [ebp - 0x2f4], 0xac6a9b65
movaps xmm1, xmmword [ebp - 0x300]
pxor xmm1, xmmword [ebp - 0x360]
movaps xmmword [ebp - 0x360], xmm1
mov dword [ebp - 0x2f0], 0x5cffeac5
mov dword [ebp - 0x2ec], 0xdf5e37ea
mov dword [ebp - 0x2e8], 0x6dc490d2
mov dword [ebp - 0x2e4], 0xe8451943
movaps xmm1, xmmword [ebp - 0x2f0]
pxor xmm1, xmmword [ebp - 0x350]
movaps xmmword [ebp - 0x350], xmm1
mov dword [ebp - 0x2e0], 0x237afce7
mov dword [ebp - 0x2dc], 0x14ba2a70
mov dword [ebp - 0x2d8], 0x154390c
mov dword [ebp - 0x2d4], 0xbf9517d9
movaps xmm1, xmmword [ebp - 0x2e0]
pxor xmm1, xmmword [ebp - 0x340]
jmp 0x40599c
sub esp, 0x18
mov dword [ebp - 0x60], 0x95594d9f
mov edx, esp
mov dword [ebp - 0x5c], 0x385b3418
mov dword [ebp - 0x58], 0xa7adc9e4
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x54], 0x934e1701
lea esi, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0x2d0], 0xfa3a23f6
mov dword [ebp - 0x2cc], 0x5b3e466a
mov dword [ebp - 0x2c8], 0xc2c69690
mov dword [ebp - 0x2c4], 0x934e1778
pxor xmm1, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0x2d0], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404838
sub ecx, esi
lea eax, [ebp - 0x2d0]
push ecx
push eax
mov ecx, edx
call fcn.00405c90
lea ecx, [ebp - 0x2e8]
call fcn.00401e00
add esp, 0x18
lea ecx, [ebp - 0x38]
mov edx, eax
call fcn.00406040
mov edx, dword [ebp - 0x2d4]
mov byte [ebp - 0x2b1], al
cmp edx, 0x10
jb 0x4048b0
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4048a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4048a0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00406c0e
mov al, byte [ebp - 0x2b1]
add esp, 8
test al, al
je 0x404994
mov dword [ebp - 0x310], 0xf63a23d6
mov dword [ebp - 0x30c], 0x5b3e4677
mov dword [ebp - 0x308], 0xcec1e990
mov dword [ebp - 0x304], 0xe0207262
mov dword [ebp - 0x300], 0xc4e6f7c4
mov dword [ebp - 0x2fc], 0x35984ddf
mov dword [ebp - 0x2f8], 0x17e5a9b1
mov dword [ebp - 0x2f4], 0xa63d615d
mov dword [ebp - 0x2f0], 0x66e1b99f
mov dword [ebp - 0x2ec], 0xf54769b0
mov dword [ebp - 0x2e8], 0x96170a58
mov dword [ebp - 0x2e4], 0x994ae900
mov dword [ebp - 0x2e0], 0x3f9a99e5
mov dword [ebp - 0x2dc], 0xac3a5985
mov dword [ebp - 0x2d8], 0x6dc490fc
mov dword [ebp - 0x2d4], 0xe8451943
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0x370], 0x95594d9f
mov dword [ebp - 0x36c], 0x385b3418
mov dword [ebp - 0x368], 0xa7adc9e4
mov dword [ebp - 0x364], 0x934e1701
pxor xmm1, xmmword [ebp - 0x370]
jmp 0x404eb4
sub esp, 0x18
mov dword [ebp - 0x2d0], 0xfc2d2efe
mov edx, esp
mov dword [ebp - 0x2cc], 0x5d2f556e
mov dword [ebp - 0x2c8], 0xa7adc980
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2c4], 0x934e1701
lea esi, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x60], 0x95594d9f
mov dword [ebp - 0x5c], 0x385b3418
mov dword [ebp - 0x58], 0xa7adc9e4
mov dword [ebp - 0x54], 0x934e1701
pxor xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x2d0], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404a10
sub ecx, esi
lea eax, [ebp - 0x2d0]
push ecx
push eax
mov ecx, edx
call fcn.00405c90
lea ecx, [ebp - 0x2e8]
call fcn.00401e00
add esp, 0x18
lea ecx, [ebp - 0x38]
mov edx, eax
call fcn.00406040
mov edx, dword [ebp - 0x2d4]
mov byte [ebp - 0x2b1], al
cmp edx, 0x10
jb 0x404a88
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404a78
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404a78
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00406c0e
mov al, byte [ebp - 0x2b1]
add esp, 8
test al, al
je 0x404c99
mov dword [ebp - 0x370], 0xc4f9b6d7
lea edx, [ebp - 0x380]
mov dword [ebp - 0x36c], 0x2b984dc2
mov dword [ebp - 0x368], 0x7e0a4bb
mov dword [ebp - 0x364], 0xef222241
mov dword [ebp - 0x360], 0x61a0ba9f
mov dword [ebp - 0x35c], 0xf11474b9
mov dword [ebp - 0x358], 0x90510f16
mov dword [ebp - 0x354], 0xc20fb600
mov dword [ebp - 0x350], 0x7c8d8fb1
mov dword [ebp - 0x34c], 0xba3d5e86
mov dword [ebp - 0x348], 0x4da1e3bc
mov dword [ebp - 0x344], 0xc63c7c28
mov dword [ebp - 0x340], 0x237afce7
mov dword [ebp - 0x33c], 0x14ba2a70
mov dword [ebp - 0x338], 0x154390c
mov dword [ebp - 0x334], 0xbf9517d9
mov dword [ebp - 0x380], 0xf03a24d3
mov dword [ebp - 0x37c], 0x183e4776
mov dword [ebp - 0x378], 0x87d4ac8f
mov dword [ebp - 0x374], 0xfa3a7460
movaps xmm1, xmmword [ebp - 0x380]
mov dword [ebp - 0x320], 0x95594d9f
mov dword [ebp - 0x31c], 0x385b3418
mov dword [ebp - 0x318], 0xa7adc9e4
mov dword [ebp - 0x314], 0x934e1701
pxor xmm1, xmmword [ebp - 0x320]
movaps xmmword [ebp - 0x380], xmm1
mov dword [ebp - 0x310], 0xa18dd7a1
mov dword [ebp - 0x30c], 0x59b861a6
mov dword [ebp - 0x308], 0x7281c8de
mov dword [ebp - 0x304], 0xcf4a412f
movaps xmm1, xmmword [ebp - 0x310]
pxor xmm1, xmmword [ebp - 0x370]
movaps xmmword [ebp - 0x370], xmm1
mov dword [ebp - 0x300], 0x5c1d5f3
mov dword [ebp - 0x2fc], 0x903406dc
mov dword [ebp - 0x2f8], 0xe2716b78
mov dword [ebp - 0x2f4], 0xac6a9b65
movaps xmm1, xmmword [ebp - 0x300]
pxor xmm1, xmmword [ebp - 0x360]
movaps xmmword [ebp - 0x360], xmm1
mov dword [ebp - 0x2f0], 0x5cffeac5
mov dword [ebp - 0x2ec], 0xdf5e37ea
mov dword [ebp - 0x2e8], 0x6dc490d2
mov dword [ebp - 0x2e4], 0xe8451943
movaps xmm1, xmmword [ebp - 0x2f0]
pxor xmm1, xmmword [ebp - 0x350]
movaps xmmword [ebp - 0x350], xmm1
mov dword [ebp - 0x2e0], 0x237afce7
mov dword [ebp - 0x2dc], 0x14ba2a70
mov dword [ebp - 0x2d8], 0x154390c
mov dword [ebp - 0x2d4], 0xbf9517d9
movaps xmm1, xmmword [ebp - 0x2e0]
pxor xmm1, xmmword [ebp - 0x340]
movaps xmmword [ebp - 0x340], xmm1
jmp 0x4052dd
mov dword [ebp - 0x2f0], 0x95594d9f
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x2ec], 0x385b3418
lea esi, [ecx + 1]
mov dword [ebp - 0x2e8], 0xa7adc9e4
sub esp, 0x18
mov dword [ebp - 0x2e4], 0x934e1701
mov edx, esp
mov dword [ebp - 0x2e0], 0xa18dd7a1
mov dword [ebp - 0x2dc], 0x59b861a6
mov dword [ebp - 0x2d8], 0x7281c8de
mov dword [ebp - 0x2d4], 0xcf4a412f
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x70], 0xfc2935fa
mov dword [ebp - 0x6c], 0x673f516a
mov dword [ebp - 0x68], 0xd4cfbc97
mov dword [ebp - 0x64], 0xf1276562
pxor xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x70], xmm1
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x60], 0xa18dd7c4
mov dword [ebp - 0x5c], 0x59b861a6
mov dword [ebp - 0x58], 0x7281c8de
mov dword [ebp - 0x54], 0xcf4a412f
pxor xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x60], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404d60
sub ecx, esi
lea eax, [ebp - 0x70]
push ecx
push eax
mov ecx, edx
call fcn.00405c90
lea ecx, [ebp - 0x2e8]
call fcn.00401e00
add esp, 0x18
lea ecx, [ebp - 0x38]
mov edx, eax
call fcn.00406040
mov edx, dword [ebp - 0x2d4]
mov byte [ebp - 0x2b1], al
cmp edx, 0x10
jb 0x404dd5
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404dc5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404dc5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00406c0e
mov al, byte [ebp - 0x2b1]
add esp, 8
test al, al
je 0x404f80
mov dword [ebp - 0x310], 0xfc2935da
mov dword [ebp - 0x30c], 0x183f516a
mov dword [ebp - 0x308], 0xd4cfbc97
mov dword [ebp - 0x304], 0xf1276562
mov dword [ebp - 0x370], 0x95594d9f
mov dword [ebp - 0x36c], 0x385b3418
mov dword [ebp - 0x368], 0xa7adc9e4
mov dword [ebp - 0x364], 0x934e1701
mov dword [ebp - 0x300], 0xcdadfbc4
mov dword [ebp - 0x2fc], 0x3cdc00c9
mov dword [ebp - 0x2f8], 0x1bf6e8ac
mov dword [ebp - 0x2f4], 0xac6a2d43
mov dword [ebp - 0x2f0], 0x60b2ba9f
mov dword [ebp - 0x2ec], 0xe45267fc
mov dword [ebp - 0x2e8], 0xd751191d
mov dword [ebp - 0x2e4], 0xcf0fe845
mov dword [ebp - 0x2e0], 0x2f9b84aa
mov dword [ebp - 0x2dc], 0xdf5e37c4
mov dword [ebp - 0x2d8], 0x6dc490d2
mov dword [ebp - 0x2d4], 0xe8451943
movaps xmm1, xmmword [ebp - 0x370]
pxor xmm1, xmmword [ebp - 0x310]
movaps xmmword [ebp - 0x310], xmm1
lea edx, [ebp - 0x310]
mov dword [ebp - 0x354], 0xcf4a412f
mov dword [ebp - 0x358], 0x7281c8de
mov dword [ebp - 0x35c], 0x59b861a6
mov dword [ebp - 0x360], 0xa18dd7a1
movaps xmm1, xmmword [ebp - 0x360]
pxor xmm1, xmmword [ebp - 0x300]
movaps xmmword [ebp - 0x300], xmm1
mov dword [ebp - 0x344], 0xac6a9b65
mov dword [ebp - 0x348], 0xe2716b78
mov dword [ebp - 0x34c], 0x903406dc
mov dword [ebp - 0x350], 0x5c1d5f3
movaps xmm1, xmmword [ebp - 0x350]
pxor xmm1, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x2f0], xmm1
mov dword [ebp - 0x334], 0xe8451943
mov dword [ebp - 0x338], 0x6dc490d2
mov dword [ebp - 0x33c], 0xdf5e37ea
mov dword [ebp - 0x340], 0x5cffeac5
movaps xmm1, xmmword [ebp - 0x340]
pxor xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x2e0], xmm1
jmp 0x4059a3
sub esp, 0x18
mov dword [ebp - 0x60], 0x95594d9f
mov edx, esp
mov dword [ebp - 0x5c], 0x385b3418
mov dword [ebp - 0x58], 0xa7adc9e4
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x54], 0x934e1701
lea esi, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0x2d0], 0xfc352ce9
mov dword [ebp - 0x2cc], 0x5d2f557c
mov dword [ebp - 0x2c8], 0xa7adc980
mov dword [ebp - 0x2c4], 0x934e1701
pxor xmm1, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0x2d0], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404ff6
sub ecx, esi
lea eax, [ebp - 0x2d0]
push ecx
push eax
mov ecx, edx
call fcn.00405c90
lea ecx, [ebp - 0x2e8]
call fcn.00401e00
add esp, 0x18
lea ecx, [ebp - 0x38]
mov edx, eax
call fcn.00406040
mov edx, dword [ebp - 0x2d4]
mov byte [ebp - 0x2b1], al
cmp edx, 0x10
jb 0x40506e
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40505e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40505e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00406c0e
mov al, byte [ebp - 0x2b1]
add esp, 8
test al, al
jne 0x40558f
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0x2f0]
mov dword [ebp - 0x2f0], 0xf03a24d3
mov dword [ebp - 0x2ec], 0x183e4776
mov dword [ebp - 0x2e8], 0xcec1a892
mov dword [ebp - 0x2e4], 0xf63a7665
mov dword [ebp - 0x2e0], 0xa18dd7c5
mov dword [ebp - 0x2dc], 0x59b861a6
mov dword [ebp - 0x2d8], 0x7281c8de
mov dword [ebp - 0x2d4], 0xcf4a412f
mov dword [ebp - 0x70], 0x95594d9f
mov dword [ebp - 0x6c], 0x385b3418
mov dword [ebp - 0x68], 0xa7adc9e4
mov dword [ebp - 0x64], 0x934e1701
movaps xmm1, xmmword [ebp - 0x70]
pxor xmm1, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x2f0], xmm1
mov dword [ebp - 0x60], 0xa18dd7a1
mov dword [ebp - 0x5c], 0x59b861a6
mov dword [ebp - 0x58], 0x7281c8de
mov dword [ebp - 0x54], 0xcf4a412f
movaps xmm1, xmmword [ebp - 0x60]
pxor xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x2e0], xmm1
call fcn.00405de0
push 0x406010
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov edi, eax
cmp edi, 0xffffffff
jne 0x40515d
mov esi, 1
jmp 0x4059c8
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], 0x22c
push eax
xor esi, esi
push edi
mov dword [ebp - 0x384], esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x4051c3
push str.csgo.exe
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x4051ab
lea eax, [ebp - 0x2b0]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x405181
jmp 0x4051c3
push dword [ebp - 0x2a8]
push 0
push 0x2a
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x384], eax
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jne 0x4052fa
mov dword [ebp - 0x300], 0xf0342cd8
lea edx, [ebp - 0x300]
mov dword [ebp - 0x2fc], 0x4c345a38
mov dword [ebp - 0x2f8], 0xd2c2afc4
mov dword [ebp - 0x2f4], 0xb360736f
mov dword [ebp - 0x2f0], 0x81e3a2d3
mov dword [ebp - 0x2ec], 0x3cd500c1
mov dword [ebp - 0x2e8], 0x16efa9fe
mov dword [ebp - 0x2e4], 0xa32f330f
mov dword [ebp - 0x2e0], 0x66afa092
mov dword [ebp - 0x2dc], 0xff5826b4
mov dword [ebp - 0x2d8], 0x90140f19
mov dword [ebp - 0x2d4], 0xac6a9b4b
movaps xmm1, xmmword [ebp - 0x300]
mov dword [ebp - 0x80], 0x95594d9f
mov dword [ebp - 0x7c], 0x385b3418
mov dword [ebp - 0x78], 0xa7adc9e4
mov dword [ebp - 0x74], 0x934e1701
pxor xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x300], xmm1
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x70], 0xa18dd7a1
mov dword [ebp - 0x6c], 0x59b861a6
mov dword [ebp - 0x68], 0x7281c8de
mov dword [ebp - 0x64], 0xcf4a412f
pxor xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x2f0], xmm1
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x60], 0x5c1d5f3
mov dword [ebp - 0x5c], 0x903406dc
mov dword [ebp - 0x58], 0xe2716b78
mov dword [ebp - 0x54], 0xac6a9b65
pxor xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x2e0], xmm1
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00405de0
push 0x406010
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
jmp 0x4059c6
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0x2f0]
mov dword [ebp - 0x70], 0x95594d9f
mov dword [ebp - 0x6c], 0x385b3418
mov dword [ebp - 0x68], 0xa7adc9e4
mov dword [ebp - 0x64], 0x934e1701
mov dword [ebp - 0x60], 0xa18dd7a1
mov dword [ebp - 0x5c], 0x59b861a6
mov dword [ebp - 0x58], 0x7281c8de
mov dword [ebp - 0x54], 0xcf4a412f
mov dword [ebp - 0x2f0], 0xf0342cd8
mov dword [ebp - 0x2ec], 0x4d345238
mov dword [ebp - 0x2e8], 0x8781ad8a
mov dword [ebp - 0x2e4], 0xe36e7276
mov dword [ebp - 0x2e0], 0xc0fdb2d3
mov dword [ebp - 0x2dc], 0x309804d4
mov dword [ebp - 0x2d8], 0x11e4a2b0
mov dword [ebp - 0x2d4], 0xcf4a6f5b
movaps xmm1, xmmword [ebp - 0x2f0]
pxor xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x2f0], xmm1
movaps xmm1, xmmword [ebp - 0x2e0]
pxor xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x2e0], xmm1
call fcn.00405de0
push 0x406010
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edi, dword [0x40a054]
push 0x40
push 0x3000
mov dword [ebp - 0x388], edi
push dword [edi + 0x40a068]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
push 0
push dword [edi + 0x40a06c]
mov dword [ebp - 0x324], eax
push 0x40a018
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x388]
xor ecx, ecx
xor edi, edi
cmp cx, word [eax + 0x40a01e]
jae 0x40545e
lea esi, [eax + 0x40a124]
nop dword [eax]
mov eax, dword [esi]
push 0
push dword [esi - 4]
add eax, 0x40a018
push eax
mov eax, dword [esi - 8]
add eax, dword [ebp - 0x324]
push eax
push dword [ebp - 0x384]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x388]
lea esi, [esi + 0x28]
inc edi
movzx eax, word [eax + 0x40a01e]
cmp edi, eax
jl 0x405420
mov esi, dword [ebp - 0x384]
push 0x20
push 0x3000
push 0x1000
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
mov eax, dword [ebp - 0x324]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.RtlZeroMemory
push str.ntdll
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call esi
push 0
push 0x10
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x60]
push eax
push edi
push dword [ebp - 0x384]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
mov eax, fcn.004020c0
lea esi, [edi + 0x10]
sub eax, 0x401f70
push eax
push 0x401f70
push esi
push dword [ebp - 0x384]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0xffffffffffffffff
push 0
push 0
push edi
push esi
mov esi, dword [ebp - 0x384]
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x8000
push 0
push edi
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x40
mov dword [ebp - 0x2d0], 0xf03323d6
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x2cc], 0x5c3e407b
mov dword [ebp - 0x2c8], 0xa7adc9e4
mov dword [ebp - 0x2c4], 0x934e1701
movaps xmm1, xmmword [ebp - 0x2d0]
push 0
push eax
mov dword [ebp - 0x2e0], 0x95594d9f
mov dword [ebp - 0x2dc], 0x385b3418
mov dword [ebp - 0x2d8], 0xa7adc9e4
mov dword [ebp - 0x2d4], 0x934e1701
pxor xmm1, xmmword [ebp - 0x2e0]
push 0
movaps xmmword [ebp - 0x2d0], xmm1
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, 1
jmp 0x4059c8
mov dword [ebp - 0x2e0], 0x95594d9f
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2dc], 0x385b3418
lea esi, [ecx + 1]
mov dword [ebp - 0x2d8], 0xa7adc9e4
sub esp, 0x18
mov dword [ebp - 0x2d4], 0x934e1701
mov edx, esp
mov dword [ebp - 0x2d0], 0xf82a24f2
mov dword [ebp - 0x2cc], 0x50384079
mov dword [ebp - 0x2c8], 0xcedaa1bb
mov dword [ebp - 0x2c4], 0x934e1765
movaps xmm1, xmmword [ebp - 0x2d0]
pxor xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x2d0], xmm1
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405614
sub ecx, esi
lea eax, [ebp - 0x2d0]
push ecx
push eax
mov ecx, edx
call fcn.00405c90
lea ecx, [ebp - 0x2e8]
call fcn.00401e00
add esp, 0x18
lea ecx, [ebp - 0x38]
mov edx, eax
call fcn.00406040
mov edx, dword [ebp - 0x2d4]
mov byte [ebp - 0x2b1], al
cmp edx, 0x10
jb 0x40568c
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40567c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40567c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00406c0e
mov al, byte [ebp - 0x2b1]
add esp, 8
mov dword [ebp - 0x2dc], 0xdf5e37ea
mov dword [ebp - 0x338], 0x6dc490d2
mov dword [ebp - 0x2d8], 0x6dc490d2
mov dword [ebp - 0x334], 0xe8451943
mov dword [ebp - 0x2d4], 0xe8451943
test al, al
je 0x405837
mov dword [ebp - 0x310], 0xf82a24d2
lea edx, [ebp - 0x310]
mov dword [ebp - 0x30c], 0x50384079
mov dword [ebp - 0x308], 0xcedaa1c4
mov dword [ebp - 0x304], 0xff6e3b65
mov dword [ebp - 0x300], 0xc4e9b6ce
mov dword [ebp - 0x2fc], 0x30cf41d4
mov dword [ebp - 0x2f8], 0x11a1a4b2
mov dword [ebp - 0x2f4], 0xaa392e43
mov dword [ebp - 0x2f0], 0x71a7b4d3
mov dword [ebp - 0x2ec], 0xa51474b9
mov dword [ebp - 0x2e8], 0x81141858
mov dword [ebp - 0x2e4], 0xdf0ef50a
mov dword [ebp - 0x2e0], 0x5cffeaeb
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0x370], 0x95594d9f
mov dword [ebp - 0x36c], 0x385b3418
mov dword [ebp - 0x368], 0xa7adc9e4
mov dword [ebp - 0x364], 0x934e1701
pxor xmm1, xmmword [ebp - 0x370]
movaps xmmword [ebp - 0x310], xmm1
movaps xmm1, xmmword [ebp - 0x300]
mov dword [ebp - 0x360], 0xa18dd7a1
mov dword [ebp - 0x35c], 0x59b861a6
mov dword [ebp - 0x358], 0x7281c8de
mov dword [ebp - 0x354], 0xcf4a412f
pxor xmm1, xmmword [ebp - 0x360]
movaps xmmword [ebp - 0x300], xmm1
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x350], 0x5c1d5f3
mov dword [ebp - 0x34c], 0x903406dc
mov dword [ebp - 0x348], 0xe2716b78
mov dword [ebp - 0x344], 0xac6a9b65
pxor xmm1, xmmword [ebp - 0x350]
movaps xmmword [ebp - 0x2f0], xmm1
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x340], 0x5cffeac5
mov dword [ebp - 0x33c], 0xdf5e37ea
pxor xmm1, xmmword [ebp - 0x340]
movaps xmmword [ebp - 0x2e0], xmm1
jmp 0x4059a3
mov dword [ebp - 0x370], 0xfa3a23d6
lea edx, [ebp - 0x370]
mov dword [ebp - 0x36c], 0x5b3e466a
mov dword [ebp - 0x368], 0xc2dfe990
mov dword [ebp - 0x364], 0xfd216772
mov dword [ebp - 0x360], 0x81a1b2d2
mov dword [ebp - 0x35c], 0x3dd90eca
mov dword [ebp - 0x358], 0x5a1babb
mov dword [ebp - 0x354], 0xef262d46
mov dword [ebp - 0x350], 0x76aeb990
mov dword [ebp - 0x34c], 0xf65526b9
mov dword [ebp - 0x348], 0xc2030e0c
mov dword [ebp - 0x344], 0xc919bb50
mov dword [ebp - 0x340], 0x389185a6
mov dword [ebp - 0x33c], 0xdf5e1999
movaps xmm1, xmmword [ebp - 0x370]
mov dword [ebp - 0x310], 0x95594d9f
mov dword [ebp - 0x30c], 0x385b3418
mov dword [ebp - 0x308], 0xa7adc9e4
mov dword [ebp - 0x304], 0x934e1701
pxor xmm1, xmmword [ebp - 0x310]
movaps xmmword [ebp - 0x370], xmm1
movaps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0x300], 0xa18dd7a1
mov dword [ebp - 0x2fc], 0x59b861a6
mov dword [ebp - 0x2f8], 0x7281c8de
mov dword [ebp - 0x2f4], 0xcf4a412f
pxor xmm1, xmmword [ebp - 0x300]
movaps xmmword [ebp - 0x360], xmm1
movaps xmm1, xmmword [ebp - 0x350]
mov dword [ebp - 0x2f0], 0x5c1d5f3
mov dword [ebp - 0x2ec], 0x903406dc
mov dword [ebp - 0x2e8], 0xe2716b78
mov dword [ebp - 0x2e4], 0xac6a9b65
pxor xmm1, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x350], xmm1
movaps xmm1, xmmword [ebp - 0x340]
mov dword [ebp - 0x2e0], 0x5cffeac5
pxor xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x340], xmm1
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00405de0
push 0x406010
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
mov edx, dword [ebp - 0x24]
cmp edx, 0x10
jb 0x4059fe
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4059f4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4059f4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00406c0e
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040677c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret