Function at 0x140001380
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [0x140003358]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, [0x140003368]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x140003378]
mov rcx, rdi
mov qword [0x14024a820], rax
call rax
lea rdx, [0x140003388]
mov qword [0x14024a858], rax
mov rcx, rdi
call qword [0x14024a820]
lea rcx, str.user32.dll
mov qword [0x14024a828], rax
call rax
lea rdx, [0x1400033a8]
mov rcx, rax
mov rbx, rax
call qword [0x14024a820]
lea rdx, str.SetConsoleTitleA
mov rcx, rdi
mov qword [0x14024a830], rax
call qword [0x14024a820]
lea rdx, [0x1400033d0]
mov rcx, rdi
mov qword [0x14024a838], rax
call qword [0x14024a820]
lea rdx, [0x1400033e0]
mov rcx, rdi
mov qword [0x14024a840], rax
call qword [0x14024a820]
lea rdx, [0x140003400]
mov rcx, rdi
mov qword [0x14024a848], rax
call qword [0x14024a820]
lea rdx, str.OpenProcess
mov rcx, rdi
mov qword [0x14024a850], rax
call qword [0x14024a820]
lea rdx, [0x140003424]
mov rcx, rdi
mov qword [0x14024a890], rax
call qword [0x14024a820]
lea rdx, str.VirtualAllocEx
mov rcx, rdi
mov qword [0x14024a898], rax
call qword [0x14024a820]
lea rdx, str.WriteProcessMemory
mov rcx, rdi
mov qword [0x14024a8b8], rax
call qword [0x14024a820]
lea rdx, str.CreateRemoteThread
mov rcx, rdi
mov qword [0x14024a8c0], rax
call qword [0x14024a820]
lea rdx, str.GetWindowThreadProcessId
mov rcx, rbx
mov qword [0x14024a8c8], rax
call qword [0x14024a820]
lea rdx, [0x140003490]
mov rcx, rdi
mov qword [0x14024a8d0], rax
call qword [0x14024a820]
lea rdx, [0x1400034a8]
mov rcx, rdi
mov qword [0x14024a8d8], rax
call qword [0x14024a820]
lea rdx, [0x1400034b8]
mov rcx, rdi
mov qword [0x14024a870], rax
call qword [0x14024a820]
lea rcx, [0x1400034c8]
mov qword [0x14024a860], rax
call qword [0x14024a838]
mov ecx, 0xfffffff5
call qword [0x14024a840]
mov qword [0x14024a8f0], rax
xor ebx, ebx
nop dword [rax + rax]
lea rdx, str.Garrys_Mod__x64_
xor ecx, ecx
call qword [0x14024a830]
test rax, rax
jne 0x140001610
lea rdx, str.Garrys_Mod
xor ecx, ecx
call qword [0x14024a830]
mov rcx, qword [0x14024a8e8]
cmp rcx, rax
jne 0x1400015f0
lea rdx, str.Garrys_Mod
xor ecx, ecx
call qword [0x14024a830]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Game_not_found__running.._n
mov qword [0x14024a8e8], rax
call fcn.140001660
xor r9d, r9d
mov dword [rsp + 0x28], ebx
lea r8, str.steam:__rungameid_4000
mov qword [rsp + 0x20], rbx
lea rdx, [0x140003558]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x14024a8e8]
test rcx, rcx
je 0x140001560
mov ecx, 0x3e8
call qword [0x14024a898]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Injecting.._n
call fcn.140001660
lea rdx, str.Garrys_Mod__x64_
xor ecx, ecx
call qword [0x14024a830]
mov qword [0x14024a8e8], rax
call fcn.140001140
mov ecx, 0x3e8
call qword [0x14024a898]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3