Function at 0x140015280
Capabilities:
Create process on windows
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x380
mov rax, qword [0x140078010]
xor rax, rsp
mov qword [rsp + 0x370], rax
call fcn.140014630
movabs rbx, 0x7fffffffffffffff
nop dword [rax]
nop word [rax + rax]
lea rdx, str.Which_game_do_you_want_to_open__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140017530
lea rdx, str.1_:_Street_Fighter_6_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140017530
lea rdx, str.2_:_Guilty_Gear_Strive_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140017530
lea rdx, str.3_:_Albion_Online_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140017530
lea rdx, str.Insert_number:__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140017530
lea rdx, [rsp + 0x120]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__::operator___int____ptr64____ptr64]
mov rdx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
mov rax, qword [rdx]
movsxd rcx, dword [rax + 4]
add rcx, rdx
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
test al, al
jne 0x140016401
mov ecx, dword [rsp + 0x120]
lea eax, [rcx - 1]
cmp eax, 2
ja 0x140016401
cmp ecx, 1
jne 0x1400158c4
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x110], 7
xor edi, edi
mov qword [rsp + 0x108], 7
vmovsd xmm0, qword [str.1364780]
vmovsd qword [rsp + 0xf8], xmm0
mov eax, dword [0x140068b58]
mov dword [rsp + 0x100], eax
movzx eax, word [0x140068b5c]
mov word [rsp + 0x104], ax
mov word [rsp + 0x106], di
lea r8, [rsp + 0xf8]
lea rcx, [rsp + 0xd8]
call fcn.140017890
nop
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rdx, str.Waiting_for_Street_Fighter_6_to_open...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov esi, edi
test rbx, rbx
jne 0x1400154bc
cmp esi, 0x78
jge 0x1400154bc
lea rdx, str.Waiting_for_Street_Fighter_6_to_open...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
inc esi
test rax, rax
jne 0x1400154bc
cmp esi, 2
jne 0x140015421
lea r8, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae r8, qword [rsp + 0xd8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140015421
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14001552d
mov dword [rsp + 0x130], 0x238
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140015524
lea rdx, str.StreetFighter6.exe
lea rcx, [rsp + 0x15c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x14001551c
lea rdx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x1400154ec
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140015594
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Street_Fighter_6_is_not_running._Trying_to_start_it...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae r8, qword [rsp + 0xd8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140015607
mov dword [rsp + 0x130], 0x238
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400155fe
nop dword [rax + rax]
lea rdx, str.StreetFighter6.exe
lea rcx, [rsp + 0x15c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x140015634
lea rdx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400155d0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Waiting_for_Street_Fighter_6_to_start...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
jmp 0x14001558e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Street_Fighter_6_is_now_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Street_Fighter_6_is_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x1400156bb
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8d, 9
lea rdx, str.steam.exe
lea rcx, [rsp + 0x50]
call fcn.140012a50
lea rdx, [rsp + 0x50]
lea rcx, [0x1400f9470]
call fcn.1400139f0
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140015743
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x118], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x80], rax
lea rax, [0x140006e50]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0xb8], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x78], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8d, 7
lea rdx, str.SDL_app
lea rcx, [rsp + 0x50]
call fcn.140012a50
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 5
lea rdx, str.Steam
lea rcx, [rsp + 0x30]
call fcn.140012a50
nop
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call fcn.14005ba70
nop
jmp 0x14001580b
mov rdx, qword [rsp + 0xf0]
cmp rdx, 8
jb 0x140015856
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015851
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015851
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005d670
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], 7
mov word [rsp + 0xd8], di
mov rdx, qword [rsp + 0x110]
cmp rdx, 8
jb 0x140015e1a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015e15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp ecx, 2
jne 0x140015eb3
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x110], 7
xor edi, edi
mov qword [rsp + 0x108], 7
vmovsd xmm0, qword [str.1384160]
vmovsd qword [rsp + 0xf8], xmm0
mov eax, dword [0x140068c98]
mov dword [rsp + 0x100], eax
movzx eax, word [0x140068c9c]
mov word [rsp + 0x104], ax
mov word [rsp + 0x106], di
lea r8, [rsp + 0xf8]
lea rcx, [rsp + 0xd8]
call fcn.140017890
nop
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rdx, str.Waiting_for_Guilty_Gear_Strive_to_open...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov esi, edi
test rbx, rbx
jne 0x140015a1b
nop
cmp esi, 0x78
jge 0x140015a1b
lea rdx, str.Waiting_for_Guilty_Gear_Strive_to_open...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
inc esi
test rax, rax
jne 0x140015a1b
cmp esi, 2
jne 0x140015980
lea r8, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae r8, qword [rsp + 0xd8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140015980
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140015a8c
mov dword [rsp + 0x130], 0x238
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140015a83
lea rdx, str.GGST_Win64_Shipping.exe
lea rcx, [rsp + 0x15c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x140015a7b
lea rdx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x140015a4b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140015af3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Guilty_Gear_Strive_is_not_running._Trying_to_start_it...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae r8, qword [rsp + 0xd8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140015b67
mov dword [rsp + 0x130], 0x238
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140015b5e
nop word [rax + rax]
lea rdx, str.GGST_Win64_Shipping.exe
lea rcx, [rsp + 0x15c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x140015b94
lea rdx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140015b30
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Waiting_for_Guilty_Gear_Strive_to_start...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
jmp 0x140015aed
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Guilty_Gear_Strive_is_now_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Guilty_Gear_Strive_is_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140015c1b
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 9
lea rdx, str.steam.exe
lea rcx, [rsp + 0x30]
call fcn.140012a50
lea rdx, [rsp + 0x30]
lea rcx, [0x1400f9470]
call fcn.1400139f0
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140015ca3
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x70], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x80], rax
lea rax, [0x140008820]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0xb8], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x78], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 7
lea rdx, str.SDL_app
lea rcx, [rsp + 0x30]
call fcn.140012a50
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8d, 5
lea rdx, str.Steam
lea rcx, [rsp + 0x50]
call fcn.140012a50
nop
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
call fcn.14005ba70
nop
jmp 0x140015d68
mov rdx, qword [rsp + 0xf0]
cmp rdx, 8
jb 0x140015db3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015dae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015dae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005d670
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], 7
mov word [rsp + 0xd8], di
mov rdx, qword [rsp + 0x110]
cmp rdx, 8
jb 0x140015e1a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015e15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005d670
mov r8d, dword [0x1400f9480]
xor edx, edx
mov ecx, 0x100400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140015e81
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rsp + 0x118]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rsp + 0x118], 0
jne 0x140015e78
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov rcx, qword [rsp + 0x370]
xor rcx, rsp
call fcn.14005d2e0
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
cmp ecx, 3
jne 0x140015e1a
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x110], 7
xor edi, edi
mov qword [rsp + 0x108], 6
vmovsd xmm0, qword [str.761890]
vmovsd qword [rsp + 0xf8], xmm0
mov eax, dword [0x140068d90]
mov dword [rsp + 0x100], eax
mov word [rsp + 0x104], di
lea r8, [rsp + 0xf8]
lea rcx, [rsp + 0xd8]
call fcn.140017890
nop
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
lea rdx, str.Waiting_for_Albion_Online_to_open...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov esi, edi
test rbx, rbx
jne 0x140015ffb
nop
cmp esi, 0x78
jge 0x140015ffb
lea rdx, str.Waiting_for_Albion_Online_to_open...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
inc esi
test rax, rax
jne 0x140015ffb
cmp esi, 2
jne 0x140015f60
lea r8, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae r8, qword [rsp + 0xd8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140015f60
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14001606c
mov dword [rsp + 0x130], 0x238
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140016063
lea rdx, str.Albion_Online.exe
lea rcx, [rsp + 0x15c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x14001605b
lea rdx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x14001602b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400160d3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Albion_Online_is_not_running._Trying_to_start_it...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 8
cmovae r8, qword [rsp + 0xd8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140016147
mov dword [rsp + 0x130], 0x238
lea rdx, [rsp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14001613e
nop word [rax + rax]
lea rdx, str.Albion_Online.exe
lea rcx, [rsp + 0x15c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x140016174
lea rdx, [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140016110
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Waiting_for_Albion_Online_to_start...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
jmp 0x1400160cd
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Albion_Online_is_now_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Albion_Online_is_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cc90
lea rdx, [0x14000ce60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x1400161fb
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 9
lea rdx, str.steam.exe
lea rcx, [rsp + 0x30]
call fcn.140012a50
lea rdx, [rsp + 0x30]
lea rcx, [0x1400f9470]
call fcn.1400139f0
lea rdx, [0x140068b88]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x140016283
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x70], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x80], rax
lea rax, [0x14000b130]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0xb8], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x78], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rdi
mov r8d, 7
lea rdx, str.SDL_app
lea rcx, [rsp + 0x30]
call fcn.140012a50
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8d, 5
lea rdx, str.Steam
lea rcx, [rsp + 0x50]
call fcn.140012a50
nop
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
call fcn.14005ba70
nop
jmp 0x140016348
mov rdx, qword [rsp + 0xf0]
cmp rdx, 8
jb 0x140016393
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001638e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001638e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005d670
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xf0], 7
mov word [rsp + 0xd8], di
mov rdx, qword [rsp + 0x110]
cmp rdx, 8
jb 0x140015e1a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140015e15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.Invalid_input._Please_enter_1_or_2._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140017530
mov rdx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
mov rax, qword [rdx]
movsxd rcx, dword [rax + 4]
add rcx, rdx
xor r8d, r8d
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::clear_int__bool____ptr64]
mov r8d, 0xa
mov rdx, rbx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__::ignore_long_long___int64___unsigned_short_int____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400152c0