Function at 0x180040f4b
Capabilities:
Allocate or change rwx memory

Disassembly:
jmp 0x1800b3d10
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x9f8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x1ae
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0xa18]
mov rax, qword [0x18010e1a8]
xor rax, rbp
mov qword [rbp + 0x9a0], rax
lea rcx, [0x180121336]
call fcn.180042508
lea rcx, [0x180111498]
call fcn.180042283
test eax, eax
je 0x1800b3d80
lea rcx, [0x1800f76a8]
call fcn.18004050a
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800b3d57
mov r8b, 1
lea rdx, [0x180111498]
lea rcx, [rbp + 8]
call fcn.180042436
nop
mov qword [rbp + 0x38], 0
lea r8, [rbp + 0x38]
mov edx, dword [rbp + 0x9d0]
lea rcx, [0x180111450]
call fcn.180041b35
movzx eax, al
test eax, eax
jne 0x1800b45af
mov ecx, dword [rbp + 0x9d0]
call sym.QtAccEnabler.dll_IsMatch
test eax, eax
jne 0x1800b3dec
mov qword [rbp + 0x7e8], 0
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x7e8]
jmp 0x1800b4633
mov edx, 8
lea rcx, [rbp + 0x58]
call fcn.180041dba
mov r8d, dword [rbp + 0x9d0]
xor edx, edx
mov ecx, 0xc3a
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.180042026
nop
lea rcx, [rbp + 0x58]
call fcn.180041a7c
test rax, rax
jne 0x1800b3e5f
mov eax, dword [0x18010e194]
add eax, 0x12
lea rcx, str.hProcess
mov qword [rsp + 0x20], rcx
lea r9, str.GetBackendWorkChannel
mov r8d, eax
lea rdx, str.D:code_rdp.all_shadowbot.nativehelperQtAccEnablerQtHelper.cpp
mov ecx, 2
call fcn.180042873
cmp eax, 1
jne 0x1800b3e5f
int3
xor eax, eax
test eax, eax
jne 0x1800b3e1b
lea rcx, [rbp + 0x58]
call fcn.180041a7c
test rax, rax
jne 0x1800b3e9d
mov qword [rbp + 0x808], 0
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x808]
jmp 0x1800b4633
lea rcx, [rbp + 0x58]
call fcn.180041a7c
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.1800420da
test eax, eax
jne 0x1800b455a
mov ecx, dword [rbp + 0x9d0]
call fcn.1800405f0
test eax, eax
je 0x1800b3ed5
mov dword [rbp + 0x994], 0x67
jmp 0x1800b3edf
mov dword [rbp + 0x994], 0x68
mov eax, dword [rbp + 0x994]
mov dword [rbp + 0xa4], eax
call fcn.180040e1a
lea r9, [rbp + 0xc4]
mov r8d, 0xa
mov edx, dword [rbp + 0xa4]
mov rcx, rax
call fcn.180041630
mov qword [rbp + 0xe8], rax
cmp qword [rbp + 0xe8], 0
jne 0x1800b3f52
mov eax, dword [0x18010e194]
add eax, 0x32
lea rcx, str.pcbData
mov qword [rsp + 0x20], rcx
lea r9, str.GetBackendWorkChannel
mov r8d, eax
lea rdx, str.D:code_rdp.all_shadowbot.nativehelperQtAccEnablerQtHelper.cpp
mov ecx, 2
call fcn.180042873
cmp eax, 1
jne 0x1800b3f52
int3
xor eax, eax
test eax, eax
jne 0x1800b3f12
cmp qword [rbp + 0xe8], 0
jne 0x1800b3fa0
xor r8d, r8d
mov edx, 0x10
lea rcx, [0x1800f7700]
call fcn.1800412b1
mov qword [rbp + 0x828], 0
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x828]
jmp 0x1800b4633
mov edx, 8
lea rcx, [rbp + 0x108]
call fcn.180041e23
call fcn.18004227e
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.180042102
nop
lea rcx, [rbp + 0x108]
call fcn.18004186a
mov ecx, dword [rbp + 0xc4]
mov r8, rax
mov edx, ecx
mov rcx, qword [rbp + 0xe8]
call fcn.180041ee6
test eax, eax
je 0x1800b4038
xor r8d, r8d
mov edx, 0x10
lea rcx, [0x1800f7720]
call fcn.1800412b1
mov qword [rbp + 0x848], 0
lea rcx, [rbp + 0x108]
call fcn.1800412cf
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x848]
jmp 0x1800b4633
lea rcx, [rbp + 0x108]
call fcn.18004186a
lea rdx, [rbp + 0x128]
mov rcx, rax
call fcn.1800422fb
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x168], 0
lea rax, [rbp + 0x184]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x168]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rbp + 0x128]
mov rcx, qword [rbp + 0x148]
call fcn.180040cc1
mov dword [rbp + 0x1a4], eax
lea rcx, [rbp + 0x148]
call fcn.180041b0d
cmp dword [rbp + 0x1a4], 0
jne 0x1800b410b
xor r8d, r8d
mov edx, 0x10
lea rcx, [0x1800f7740]
call fcn.1800412b1
mov qword [rbp + 0x868], 0
lea rcx, [rbp + 0x108]
call fcn.1800412cf
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x868]
jmp 0x1800b4633
mov eax, dword [rbp + 0x184]
mov qword [rbp + 0x998], rax
lea rcx, [rbp + 0x58]
call fcn.180041a7c
mov dword [rsp + 0x20], 0x40
mov r9d, 0x1000
mov rcx, qword [rbp + 0x998]
mov r8, rcx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov qword [rbp + 0x1c8], rax
cmp qword [rbp + 0x1c8], 0
jne 0x1800b418c
mov qword [rbp + 0x888], 0
lea rcx, [rbp + 0x108]
call fcn.1800412cf
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x888]
jmp 0x1800b4633
mov eax, dword [rbp + 0x184]
mov qword [rbp + 0x998], rax
lea rcx, [rbp + 0x58]
call fcn.180041a7c
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0x998]
mov r9, rcx
mov r8, qword [rbp + 0x168]
mov rdx, qword [rbp + 0x1c8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1800b4207
mov qword [rbp + 0x8a8], 0
lea rcx, [rbp + 0x108]
call fcn.1800412cf
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x8a8]
jmp 0x1800b4633
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.ucrtbased.dll_free]
mov qword [rbp + 0x168], 0
mov eax, 2
imul rax, rax, 0
mov qword [rbp + 0x8c8], rax
cmp qword [rbp + 0x8c8], 0x208
jae 0x1800b423e
jmp 0x1800b4243
call fcn.180041aa4
xor eax, eax
mov rcx, qword [rbp + 0x8c8]
mov word [rbp + rcx + 0x220], ax
mov r8d, 0x104
lea rdx, [rbp + 0x220]
mov ecx, dword [rbp + 0x9d0]
call fcn.18004236e
lea rcx, [rbp + 0x220]
call fcn.1800401e5
mov dword [rbp + 0x444], eax
cmp dword [rbp + 0x444], 0
je 0x1800b4344
lea rcx, [rbp + 0x58]
call fcn.180041a7c
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0x1e8]
lea r8, str.BaseThreadInitThunk
lea rdx, str.kernel32.dll
mov rcx, rax
call fcn.1800413b0
mov dword [rbp + 0x464], eax
cmp dword [rbp + 0x464], 0
jne 0x1800b42fe
mov eax, dword [0x18010e194]
add eax, 0x72
lea rcx, str.bRestored
mov qword [rsp + 0x20], rcx
lea r9, str.GetBackendWorkChannel
mov r8d, eax
lea rdx, str.D:code_rdp.all_shadowbot.nativehelperQtAccEnablerQtHelper.cpp
mov ecx, 2
call fcn.180042873
cmp eax, 1
jne 0x1800b42fe
int3
xor eax, eax
test eax, eax
jne 0x1800b42bf
cmp dword [rbp + 0x464], 0
jne 0x1800b4344
mov qword [rbp + 0x8e8], 0
lea rcx, [rbp + 0x108]
call fcn.1800412cf
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x8e8]
jmp 0x1800b4633
lea rcx, [rbp + 0x58]
call fcn.180041a7c
lea rcx, [rbp + 0x484]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, qword [rbp + 0x1c8]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1800403ac
mov qword [rbp + 0x4a8], rax
cmp qword [rbp + 0x4a8], 0
jne 0x1800b43c5
mov eax, dword [0x18010e194]
add eax, 0x7b
lea rcx, str.thread
mov qword [rsp + 0x20], rcx
lea r9, str.GetBackendWorkChannel
mov r8d, eax
lea rdx, str.D:code_rdp.all_shadowbot.nativehelperQtAccEnablerQtHelper.cpp
mov ecx, 2
call fcn.180042873
cmp eax, 1
jne 0x1800b43c5
int3
xor eax, eax
test eax, eax
jne 0x1800b4385
cmp qword [rbp + 0x4a8], 0
jne 0x1800b440c
mov qword [rbp + 0x908], 0
lea rcx, [rbp + 0x108]
call fcn.1800412cf
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x908]
jmp 0x1800b4633
mov edx, 0x2710
mov rcx, qword [rbp + 0x4a8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1800b4441
mov r9d, 0x30
lea r8, [0x1800d50b8]
lea rdx, [0x1800f7760]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x4a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x4a8], 0
lea rcx, [rbp + 0x58]
call fcn.180041a7c
mov r9d, 0x8000
xor r8d, r8d
mov rdx, qword [rbp + 0x1c8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov qword [rbp + 0x1c8], 0
cmp dword [rbp + 0x444], 0
je 0x1800b454e
lea rcx, [rbp + 0x58]
call fcn.180041a7c
mov dword [rsp + 0x20], 0
lea r9, [rbp + 0x1e8]
lea r8, str.BaseThreadInitThunk
lea rdx, str.kernel32.dll
mov rcx, rax
call fcn.1800413b0
mov dword [rbp + 0x4c4], eax
cmp dword [rbp + 0x4c4], 0
jne 0x1800b4508
mov eax, dword [0x18010e194]
add eax, 0x8e
lea rcx, str.bRestored
mov qword [rsp + 0x20], rcx
lea r9, str.GetBackendWorkChannel
mov r8d, eax
lea rdx, str.D:code_rdp.all_shadowbot.nativehelperQtAccEnablerQtHelper.cpp
mov ecx, 2
call fcn.180042873
cmp eax, 1
jne 0x1800b4508
int3
xor eax, eax
test eax, eax
jne 0x1800b44c7
cmp dword [rbp + 0x4c4], 0
jne 0x1800b454e
mov qword [rbp + 0x928], 0
lea rcx, [rbp + 0x108]
call fcn.1800412cf
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
nop
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x928]
jmp 0x1800b4633
lea rcx, [rbp + 0x108]
call fcn.1800412cf
lea rcx, [rbp + 0x58]
call fcn.180041a7c
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.1800420da
test eax, eax
je 0x1800b45a6
mov ecx, 1
call fcn.180040172
mov qword [rbp + 0x948], rax
mov rax, qword [rbp + 0x948]
mov qword [rbp + 0x38], rax
lea r8, [rbp + 0x38]
mov edx, dword [rbp + 0x9d0]
lea rcx, [0x180111450]
call fcn.180040681
nop
lea rcx, [rbp + 0x58]
call fcn.180041009
cmp qword [rbp + 0x38], 0
jne 0x1800b45ee
mov eax, dword [0x18010e194]
add eax, 0xa4
lea rcx, str.pBackendWorkChannel
mov qword [rsp + 0x20], rcx
lea r9, str.GetBackendWorkChannel
mov r8d, eax
lea rdx, str.D:code_rdp.all_shadowbot.nativehelperQtAccEnablerQtHelper.cpp
mov ecx, 2
call fcn.180042873
cmp eax, 1
jne 0x1800b45ee
int3
xor eax, eax
test eax, eax
jne 0x1800b45af
cmp qword [rbp + 0x38], 0
jne 0x1800b4618
mov qword [rbp + 0x968], 0
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x968]
jmp 0x1800b4633
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x988], rax
lea rcx, [rbp + 8]
call fcn.180041a40
mov rax, qword [rbp + 0x988]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x1800f5720]
call fcn.180041edc
mov rax, rdi
mov rcx, qword [rbp + 0x9a0]
xor rcx, rbp
call fcn.18004118a
lea rsp, [rbp + 0x9b8]
pop rdi
pop rbp
ret