Function at 0x4024a0
Capabilities:
Enumerate process modules
Enumerate processes
Set console window title

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6cc
mov eax, dword [0x432040]
xor eax, esp
mov dword [esp + 0x6c8], eax
push ebx
push esi
push edi
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov esi, eax
lea eax, [esp + 0x460]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
push 1
push 0x190
push 0x1f4
push dword [esp + 0x470]
push dword [esp + 0x470]
push esi
call dword [sym.imp.USER32.dll_MoveWindow]
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xfffaffff
push eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea eax, [esp + 0x448]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov eax, dword [esp + 0x456]
sub eax, dword [esp + 0x452]
inc eax
mov word [esp + 0xc], ax
mov eax, dword [esp + 0x458]
sub eax, dword [esp + 0x454]
inc eax
mov word [esp + 0xe], ax
push dword [esp + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
mov ebx, dword [sym.imp.KERNEL32.dll_Process32NextW]
push 0x34
lea eax, [esp + 0x6a4]
mov edi, 0x50
push 0
push eax
call fcn.004099d0
add esp, 0xc
xor esi, esi
nop word [eax + eax]
call fcn.0040c75b
cdq
idiv edi
movzx eax, word [edx*2 + str.abcdefghi9182345jklmnopqrstuv211935960473wxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890]
add word [esp + esi*2 + 0x6a0], ax
inc esi
cmp esi, 0x19
jne 0x402580
lea eax, [esp + 0x6a0]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
push 0x228
mov esi, eax
lea eax, [esp + 0x478]
push 0
push eax
call fcn.004099d0
add esp, 0xc
mov dword [esp + 0x470], 0x22c
lea eax, [esp + 0x470]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x402618
nop dword [eax]
lea eax, [esp + 0x494]
push str.Among_Us.exe
push eax
call fcn.00408fa2
add esp, 8
test eax, eax
jne 0x402650
lea eax, [esp + 0x470]
push eax
push esi
call ebx
test eax, eax
jne 0x4025f0
mov edx, str.Game_not_found._n_n
mov ecx, 0x433040
call fcn.00404480
mov edx, str.Waiting_for_Among_Us_n
mov ecx, eax
call fcn.00404480
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x42ee18
call fcn.0040e7b4
add esp, 4
jmp 0x40255f
mov edi, dword [esp + 0x478]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x402618
push edi
push ecx
mov edx, str.Game_found:
mov ecx, 0x433040
call fcn.00404480
add esp, 4
mov ecx, eax
call fcn.00402a10
mov edx, 0x42ed48
mov ecx, eax
call fcn.00404480
push edi
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push edi
mov ebx, eax
mov dword [esp + 0x43c], 0
push 0x18
mov dword [esp + 0x14], ebx
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x40274c
push 0x424
lea eax, [esp + 0x18]
push 0
push eax
call fcn.004099d0
add esp, 0xc
mov dword [esp + 0x10], 0x428
lea eax, [esp + 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x40274c
nop dword [eax + eax]
mov eax, str.GameAssembly.dll
lea ecx, [esp + 0x30]
nop dword [eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x402726
test dx, dx
je 0x402722
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x402726
add ecx, 4
add eax, 4
test dx, dx
jne 0x402700
xor eax, eax
jmp 0x40272b
sbb eax, eax
or eax, 1
test eax, eax
je 0x402741
lea eax, [esp + 0x10]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x4026f0
jmp 0x40274c
mov eax, dword [esp + 0x24]
mov dword [esp + 0x438], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea eax, [esp + 0x43c]
push 0
push 4
push eax
mov eax, dword [esp + 0x444]
add eax, 0x232f9d4
mov dword [esp + 0x448], 0
push eax
push ebx
call edi
push 0
push 4
lea eax, [esp + 0x440]
mov dword [esp + 0x440], 0
push eax
mov eax, dword [esp + 0x448]
add eax, 0x5c
push eax
push ebx
call edi
push 0
push 4
lea eax, [esp + 0x444]
mov dword [esp + 0x444], 0
push eax
push dword [esp + 0x444]
push ebx
call edi
mov esi, dword [esp + 0x43c]
test esi, esi
je 0x4027e7
mov edx, str.Steam_Client_Found_Version_Supported_n_n
mov ecx, 0x433040
call fcn.00404480
mov edx, str.Waiting_For_Match_n_n
jmp 0x4027ec
mov edx, str.Searching_For_Steam_Version:_2024.10.29_n_n
mov ecx, 0x433040
call fcn.00404480
push 0
push 4
lea eax, [esp + 0x440]
mov dword [esp + 0x440], 0
push eax
lea eax, [esi + 0x60]
push eax
push ebx
call edi
mov esi, dword [esp + 0x438]
lea eax, [esp + 0x43c]
push 0
push 4
push eax
lea eax, [esi + 0xc]
mov dword [esp + 0x448], 0
push eax
push ebx
call edi
mov ebx, dword [esp + 0x43c]
test ebx, ebx
je 0x402853
mov edx, str.Match_Found_n_n
mov ecx, 0x433040
call fcn.00404480
push 0
push 4
lea eax, [esp + 0x444]
mov dword [esp + 0x444], 0
push eax
lea eax, [esi + 8]
mov esi, dword [esp + 0x18]
push eax
push esi
call edi
test ebx, ebx
jle 0x4029e5
mov edi, dword [esp + 0x43c]
add edi, 0x10
nop word [eax + eax]
push 0
push 4
lea eax, [esp + 0x440]
mov dword [esp + 0x440], 0
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [esp + 0x438]
lea eax, [esp + 0x444]
push 0
push 4
push eax
lea eax, [esi + 0x28]
mov dword [esp + 0x450], 0
push eax
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x448]
mov dword [esp + 0x448], 0
push eax
lea eax, [esi + 0x10]
mov esi, dword [esp + 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x440]
mov dword [esp + 0x440], 0
push eax
mov eax, dword [esp + 0x44c]
add eax, 0x58
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x448]
mov dword [esp + 0x448], 0
push eax
mov eax, dword [esp + 0x444]
add eax, 0x48
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 4
lea eax, [esp + 0x440]
mov dword [esp + 0x440], 0
push eax
mov eax, dword [esp + 0x44c]
add eax, 0x48
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [esp + 0x438], 1
jne 0x4029d9
mov eax, dword [esp + 0x444]
mov edx, str.System__
mov ecx, 0x433040
lea eax, [eax + eax*2]
lea esi, [eax*8 + 0x433cd8]
call fcn.00404480
cmp dword [esi + 0x14], 0xf
mov edx, esi
jbe 0x4029b0
mov edx, dword [esi]
push dword [esi + 0x10]
mov ecx, eax
call fcn.004056b0
add esp, 4
mov edx, str._Is_Impostor
mov ecx, eax
call fcn.00404480
mov edx, 0x42edf8
mov ecx, eax
call fcn.00404480
mov esi, dword [esp + 0xc]
add edi, 4
sub ebx, 1
jne 0x402890
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.KERNEL32.dll_Process32NextW]
push 0x42ee18
call fcn.0040e7b4
add esp, 4
jmp 0x40255f