Function at 0x140001000
Capabilities:
Capture screenshot
Create thread
Generate random numbers via winapi
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r9d, 0x40034
lea r8, str.Hydrogen___Version_0.3.25
lea rdx, str.___Hydrogen_is_still_in_development____nExecute_it_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x140001046
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov qword [rsp + 0x170], rbx
mov qword [rbp + 0x24], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x6c], xmm0
mov qword [rsp + 0x178], rsi
lea rax, [0x1400020a0]
mov qword [rbp - 0x68], rax
lea rax, [0x1400020f0]
movups xmmword [rbp - 0x5c], xmm0
mov qword [rbp - 0x58], rax
lea rax, [0x140002130]
movups xmmword [rbp - 0x4c], xmm0
mov qword [rbp - 0x48], rax
lea rax, [0x140002180]
movups xmmword [rbp - 0x3c], xmm0
mov qword [rbp - 0x38], rax
lea rax, [0x1400021c0]
movups xmmword [rbp - 0x2c], xmm0
mov qword [rbp - 0x28], rax
lea rax, [0x140002200]
movups xmmword [rbp - 0x1c], xmm0
mov qword [rbp - 0x18], rax
lea rax, [0x140002240]
movups xmmword [rbp - 0xc], xmm0
mov qword [rbp - 8], rax
lea rax, [0x140002290]
movups xmmword [rbp + 4], xmm0
mov qword [rbp + 8], rax
lea rax, [0x1400022e0]
movups xmmword [rbp + 0x14], xmm0
mov qword [rsp + 0x180], rdi
mov qword [rbp + 0x18], rax
lea rax, [0x140002380]
mov qword [rsp + 0x158], r12
mov qword [rbp + 0x28], rax
mov qword [rsp + 0x150], r13
mov dword [rbp - 0x70], 0x1f40
mov dword [rbp - 0x6c], 0x13880
mov dword [rbp - 0x60], 0x1f40
mov dword [rbp - 0x5c], 0x13880
mov dword [rbp - 0x50], 0x1f40
mov dword [rbp - 0x4c], 0x13880
mov dword [rbp - 0x40], 0x1f40
mov dword [rbp - 0x3c], 0x13880
mov dword [rbp - 0x30], 0x1f40
mov dword [rbp - 0x2c], 0x13880
mov dword [rbp - 0x20], 0x1f40
mov dword [rbp - 0x1c], 0x13880
mov dword [rbp - 0x10], 0x1f40
mov dword [rbp - 0xc], 0x13880
mov dword [rbp], 0x1f40
mov dword [rbp + 4], 0x13880
mov dword [rbp + 0x10], 0x1f40
mov dword [rbp + 0x14], 0x13880
mov dword [rbp + 0x20], 0x1f40
mov dword [rbp + 0x24], 0x13880
rdtsc
shl rdx, 0x20
lea rcx, [0x14001a800]
or rax, rdx
mov dword [0x14001fc38], eax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.SetProcessDPIAware
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400011cb
call rax
mov qword [rsp + 0x148], r14
mov rcx, rbx
mov qword [rsp + 0x140], r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor ebx, ebx
lea r8, [0x140005930]
mov qword [rsp + 0x28], rbx
mov r9d, 0x3e8
xor edx, edx
mov dword [rsp + 0x20], ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea r9, [rbp - 0x70]
mov qword [rsp + 0x28], rbx
lea r8, [0x140001f20]
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x14001fc3c]
mov esi, ebx
lea r13d, [rax + 0xa]
cmp eax, r13d
jae 0x140001348
nop dword [rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
xorps xmm0, xmm0
lea r9, [rsp + 0x68]
lea r8, [0x1400059c0]
xor edx, edx
xor ecx, ecx
mov rdi, rax
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov r12, qword [rsp + 0x68]
lea r9, [rbp - 0x80]
xorps xmm0, xmm0
lea r8, [0x1400059c0]
mov r14, r12
xor edx, edx
xor ecx, ecx
shr r14, 0x20
movups xmmword [rbp - 0x80], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov rbx, qword [rbp - 0x78]
mov rax, qword [rbp - 0x80]
mov r15d, ebx
sub r15d, eax
shr rbx, 0x20
shr rax, 0x20
sub ebx, eax
mov eax, esi
cdq
sub eax, edx
sar eax, 1
and eax, 0x800000ff
jge 0x1400012c0
dec eax
or eax, 0xffffff00
inc eax
movzx r9d, al
mov eax, esi
and eax, 0x800000ff
jge 0x1400012d6
dec eax
or eax, 0xffffff00
inc eax
movzx ecx, al
mov eax, r9d
shl eax, 8
or ecx, eax
shl r9d, 0x10
or ecx, r9d
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SelectObject]
mov r9d, r15d
mov dword [rsp + 0x28], 0x5a0049
mov r8d, r14d
mov dword [rsp + 0x20], ebx
mov edx, r12d
mov rcx, rdi
call qword [sym.imp.GDI32.dll_PatBlt]
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
inc esi
cmp dword [0x14001fc3c], r13d
jb 0x140001240
xor ebx, ebx
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
lea ecx, [rax + 0xa]
mov dword [rsp + 0x78], ecx
cmp eax, ecx
jae 0x1400014d2
mov r13d, ebx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
xorps xmm0, xmm0
lea r9, [rsp + 0x68]
lea r8, [0x1400059c0]
xor edx, edx
xor ecx, ecx
mov rdi, rax
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov rbx, qword [rsp + 0x68]
lea r9, [rbp - 0x80]
xorps xmm0, xmm0
lea r8, [0x1400059c0]
mov r15, rbx
xor edx, edx
xor ecx, ecx
shr r15, 0x20
movups xmmword [rbp - 0x80], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov rsi, qword [rbp - 0x78]
mov r8d, r15d
mov rax, qword [rbp - 0x80]
mov r12d, esi
sub r12d, eax
shr rsi, 0x20
shr rax, 0x20
mov r9d, r12d
sub esi, eax
mov dword [rsp + 0x40], 0x1100a6
mov eax, r13d
cdq
idiv esi
mov eax, r13d
lea ecx, [r15 + rdx]
cdq
mov dword [rsp + 0x38], ecx
mov rcx, rdi
idiv r12d
add edx, ebx
mov dword [rsp + 0x30], edx
mov edx, ebx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_BitBlt]
call fcn.140007c28
and eax, 0x800000ff
jge 0x14000142e
dec eax
or eax, 0xffffff00
inc eax
movzx r14d, al
shl r14d, 8
call fcn.140007c28
and eax, 0x800000ff
jge 0x14000144b
dec eax
or eax, 0xffffff00
inc eax
movzx ebx, al
shl ebx, 0x10
or ebx, r14d
call fcn.140007c28
and eax, 0x800000ff
jge 0x140001469
dec eax
or eax, 0xffffff00
inc eax
movzx ecx, al
or ecx, ebx
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [rsp + 0x68]
mov r9d, r12d
mov r8d, r15d
mov dword [rsp + 0x28], 0x5a0049
mov rcx, rdi
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_PatBlt]
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [rsp + 0x78]
add r13d, 0xa
cmp dword [0x14001fc3c], eax
jb 0x140001373
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
xor edi, edi
lea esi, [rax + 0xa]
cmp eax, esi
jae 0x140001527
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rdx, rax
mov ecx, edi
mov rbx, rax
call fcn.1400023e0
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
inc edi
cmp dword [0x14001fc3c], esi
jb 0x1400014f4
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
xor ecx, ecx
mov dword [rsp + 0x78], ecx
lea ecx, [rax + 0xa]
mov dword [rbp - 0x80], ecx
cmp eax, ecx
jae 0x1400016d7
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
xorps xmm0, xmm0
lea r9, [rsp + 0x68]
lea r8, [0x1400059c0]
xor edx, edx
xor ecx, ecx
mov r13, rax
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov r12, qword [rsp + 0x68]
lea r9, [rsp + 0x68]
xorps xmm0, xmm0
lea r8, [0x1400059c0]
mov r15, r12
xor edx, edx
xor ecx, ecx
shr r15, 0x20
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov rsi, qword [rsp + 0x70]
mov rcx, r13
mov rax, qword [rsp + 0x68]
mov r14d, esi
sub r14d, eax
shr rsi, 0x20
shr rax, 0x20
sub esi, eax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r8d, esi
mov edx, r14d
mov rcx, r13
mov rdi, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rdx, rax
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov dword [rsp + 0x40], 0xcc0020
xor eax, eax
mov dword [rsp + 0x38], eax
mov r9d, r14d
mov dword [rsp + 0x30], eax
xor r8d, r8d
mov qword [rsp + 0x28], r13
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_BitBlt]
mov r9d, dword [rsp + 0x78]
mov eax, 0x51eb851f
imul r9d
mov ecx, r12d
mov dword [rsp + 0x60], 0x800000
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0x51eb851f
imul r8d, edx, 0x19
imul r9d
sub r8d, r9d
sar edx, 6
add r8d, r15d
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0xc8
lea edx, [r9 + 0xa]
mov r9d, r14d
sub ecx, eax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x50], eax
add edx, ecx
mov dword [rsp + 0x48], esi
mov rcx, r13
mov dword [rsp + 0x40], r14d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], esi
call qword [sym.imp.MSIMG32.dll_AlphaBlend]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, r13
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, r13
call qword [sym.imp.GDI32.dll_DeleteObject]
inc dword [rsp + 0x78]
mov eax, dword [rbp - 0x80]
cmp dword [0x14001fc3c], eax
jb 0x140001554
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
lea r12d, [rax + 0xa]
cmp eax, r12d
jae 0x140001884
xor r14d, r14d
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
xorps xmm0, xmm0
lea r9, [rsp + 0x68]
lea r8, [0x1400059c0]
xor edx, edx
xor ecx, ecx
mov rsi, rax
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
xorps xmm0, xmm0
lea r9, [rsp + 0x68]
lea r8, [0x1400059c0]
xor edx, edx
xor ecx, ecx
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov rbx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
mov edi, ebx
mov rcx, qword [0x14001fc40]
sub edi, eax
shr rax, 0x20
shr rbx, 0x20
sub ebx, eax
test rcx, rcx
jne 0x140001798
lea r9d, [rcx + 1]
mov dword [rsp + 0x20], 0xf0000040
lea rcx, [0x14001fc40]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x140001c93
mov rcx, qword [0x14001fc40]
lea r8, [rbp - 0x80]
mov edx, 4
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
mov eax, dword [rbp - 0x80]
mov rcx, qword [0x14001fc40]
btr eax, 0x1f
cdq
idiv edi
mov r15d, edx
test rcx, rcx
jne 0x1400017ed
lea r9d, [rcx + 1]
mov dword [rsp + 0x20], 0xf0000040
lea rcx, [0x14001fc40]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x140001c9f
mov rcx, qword [0x14001fc40]
lea r8, [rsp + 0x78]
mov edx, 4
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
mov eax, dword [rsp + 0x78]
btr eax, 0x1f
mov dword [rsp + 0x40], 0xcc0020
cdq
idiv ebx
mov r11d, edx
mov eax, edx
cdq
idiv ebx
mov eax, r14d
mov r10d, edx
cdq
sub eax, edx
mov dword [rsp + 0x38], r10d
sar eax, 1
add eax, r15d
cdq
idiv edi
mov eax, r14d
mov r8d, edx
cdq
idiv ebx
mov dword [rsp + 0x30], r8d
mov eax, r14d
mov ecx, edx
mov qword [rsp + 0x28], rsi
cdq
mov dword [rsp + 0x20], ecx
idiv edi
mov r8d, r11d
mov rcx, rsi
mov r9d, edx
mov edx, r15d
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rsi
call qword [sym.imp.GDI32.dll_DeleteObject]
add r14d, 3
cmp dword [0x14001fc3c], r12d
jb 0x140001700
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
xor r14d, r14d
mov r12d, r14d
lea r13d, [rax + 0xa]
cmp eax, r13d
jae 0x140001a03
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
xorps xmm0, xmm0
lea r9, [rsp + 0x68]
lea r8, [0x1400059c0]
xor edx, edx
xor ecx, ecx
mov r15, rax
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
xorps xmm0, xmm0
lea r9, [rsp + 0x68]
lea r8, [0x1400059c0]
xor edx, edx
xor ecx, ecx
movups xmmword [rsp + 0x68], xmm0
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov rsi, qword [rsp + 0x70]
mov rcx, r15
mov rax, qword [rsp + 0x68]
mov r14d, esi
sub r14d, eax
shr rsi, 0x20
shr rax, 0x20
sub esi, eax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r8d, esi
mov edx, r14d
mov rcx, r15
mov rdi, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rdx, rax
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov dword [rsp + 0x40], 0xcc0020
xor eax, eax
mov dword [rsp + 0x38], eax
mov r9d, r14d
mov dword [rsp + 0x30], eax
xor r8d, r8d
mov qword [rsp + 0x28], r15
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_BitBlt]
mov eax, r14d
mov dword [rsp + 0x60], 0x800000
cdq
mov rcx, r15
sub eax, edx
sar eax, 1
mov dword [rbp - 0x80], eax
mov eax, esi
cdq
sub eax, edx
mov edx, 0xa
sar eax, 1
mov dword [rbp - 0x7c], eax
mov r8, qword [rbp - 0x80]
call fcn.140001cb0
mov eax, dword [rsp + 0x60]
mov r9d, r14d
mov dword [rsp + 0x50], eax
mov r8d, r12d
mov dword [rsp + 0x48], esi
xor eax, eax
mov dword [rsp + 0x40], r14d
xor edx, edx
mov dword [rsp + 0x38], eax
mov rcx, r15
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], esi
call qword [sym.imp.MSIMG32.dll_AlphaBlend]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rdx, r15
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, r15
call qword [sym.imp.GDI32.dll_DeleteObject]
inc r12d
cmp dword [0x14001fc3c], r13d
jb 0x1400018b0
xor r14d, r14d
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
mov edi, r14d
lea esi, [rax + 0xa]
cmp eax, esi
jae 0x140001a59
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rdx, rax
mov ecx, edi
mov rbx, rax
call fcn.140002620
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
inc edi
cmp dword [0x14001fc3c], esi
jb 0x140001a26
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
mov edi, r14d
lea esi, [rax + 0xa]
cmp eax, esi
jae 0x140001ab3
nop dword [rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rdx, rax
mov ecx, edi
mov rbx, rax
call fcn.140002ad0
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
inc edi
cmp dword [0x14001fc3c], esi
jb 0x140001a80
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [0x14001fc3c]
mov edi, r14d
lea esi, [rax + 0xa]
cmp eax, esi
jae 0x140001b09
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rdx, rax
mov ecx, edi
mov rbx, rax
call fcn.140002f90
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
inc edi
cmp dword [0x14001fc3c], esi
jb 0x140001ad6
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_RedrawWindow]
lea rcx, [0x140003440]
call fcn.140003220
lea rcx, [0x140003680]
call fcn.140003220
lea rcx, [0x140003780]
call fcn.140003220
lea rcx, [0x140003c00]
call fcn.140003220
lea rcx, [0x140003f30]
call fcn.140003220
lea rcx, [0x1400041d0]
call fcn.140003220
lea rcx, [0x140004220]
call fcn.140003220
lea rcx, [0x1400042d0]
call fcn.140003220
lea rcx, [0x140004370]
call fcn.140003220
lea rcx, [0x140004470]
call fcn.140003220
lea rcx, [0x1400045e0]
call fcn.140003220
lea rcx, [0x140004640]
call fcn.140003220
lea rcx, [0x140004ca0]
call fcn.140003220
lea rcx, [0x140004ee0]
call fcn.140003220
lea rcx, [0x1400051c0]
call fcn.140003220
lea rcx, [0x1400053c0]
call fcn.140003220
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140005670]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r9d, 0x3e8
mov qword [rsp + 0x28], r14
lea r8, [0x140005860]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140005820]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14, qword [rsp + 0x148]
xor eax, eax
mov r15, qword [rsp + 0x140]
mov r12, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x180]
mov rsi, qword [rsp + 0x178]
mov rbx, qword [rsp + 0x170]
mov r13, qword [rsp + 0x150]
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1400059f0
add rsp, 0x160
pop rbp
ret
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]