Function at 0x14015f3ac
Capabilities:
Enumerate gui resources
Hide graphical window

Disassembly:
jmp 0x14033f560
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0x16a8
call fcn.14015b4b4
sub rsp, rax
lea rbp, [rsp + 0x70]
lea rdi, [rsp + 0x70]
mov ecx, 0x40e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x16c8]
mov rax, qword [0x140534080]
xor rax, rbp
mov qword [rbp + 0x1628], rax
lea rcx, [0x14056742a]
call fcn.140161373
lea rcx, [0x14053dad0]
call fcn.14015eb87
lea rcx, [0x14053dd60]
call fcn.14015f546
lea rcx, [0x14053da80]
call fcn.14015e5b5
lea rcx, [0x14053dd70]
call fcn.14015b653
lea rcx, [0x14053da78]
call fcn.14015e704
lea rcx, [0x14053da90]
call fcn.140161c6a
call fcn.14015d5d9
call fcn.14016105d
xor edx, edx
lea rcx, [0x14015a1f9]
call qword [sym.imp.USER32.dll_EnumWindows]
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x14033f634
mov dword [0], 0xdead
call fcn.14015c639
test eax, eax
je 0x14033f648
mov dword [0], 0xdead
call fcn.14015b162
test eax, eax
je 0x14033f65c
mov dword [0], 0xdead
call fcn.140161ec7
test eax, eax
je 0x14033f670
mov dword [0], 0xdead
call fcn.14015ca2b
test eax, eax
je 0x14033f684
mov dword [0], 0xdead
call fcn.14015ac5d
test eax, eax
je 0x14033f698
mov dword [0], 0xdead
call fcn.14015acad
test eax, eax
je 0x14033f6ac
mov dword [0], 0xdead
call fcn.14015e65f
test eax, eax
je 0x14033f6c0
mov dword [0], 0xdead
call fcn.14015c3eb
test eax, eax
je 0x14033f6d4
mov dword [0], 0xdead
call fcn.14015ca2b
test eax, eax
je 0x14033f6e8
mov dword [0], 0xdead
call fcn.14015c5a8
test eax, eax
je 0x14033f6fc
mov dword [0], 0xdead
call fcn.14015e2d6
test eax, eax
je 0x14033f710
mov dword [0], 0xdead
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x14033f725
mov dword [0], 0xdead
xor edx, edx
lea rcx, [0x14015a1f9]
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, [0x14015db5b]
lea rcx, [rbp + 0xa78]
call fcn.14015d3db
mov rcx, rax
call fcn.140161a30
lea rcx, [rbp + 0xa78]
call fcn.14015d471
lea rdx, [0x1401609b4]
lea rcx, [rbp + 0xaa8]
call fcn.14015d3db
mov rcx, rax
call fcn.140161a30
lea rcx, [rbp + 0xaa8]
call fcn.14015d471
lea rdx, [0x14015bfea]
lea rcx, [rbp + 0xad8]
call fcn.14015d3db
mov rcx, rax
call fcn.140161a30
lea rcx, [rbp + 0xad8]
call fcn.14015d471
xor edx, edx
lea rcx, [0x14015a1f9]
call qword [sym.imp.USER32.dll_EnumWindows]
mov ecx, dword [0x14053d738]
call fcn.14015f523
movzx eax, al
test eax, eax
je 0x14033f81b
mov dword [rbp + 0xb24], 0
lea rdx, [rbp + 0xb24]
lea rcx, [rbp + 0xb04]
call fcn.14015f75d
mov dword [rbp + 0xb64], 0
lea rdx, [rbp + 0xb64]
lea rcx, [rbp + 0xb44]
call fcn.14015b563
lea rcx, [rbp + 0xb84]
call fcn.14015ff41
mov dword [0], 0xdead
lea rdx, [rbp + 0xba4]
lea rcx, [rbp + 8]
call fcn.1402af9d0
movzx eax, byte [0x14053d749]
test eax, eax
je 0x14033f887
mov dword [rbp + 0xbe4], 0
lea rdx, [rbp + 0xbe4]
lea rcx, [rbp + 0xbc4]
call fcn.14015f75d
mov dword [rbp + 0xc24], 0
lea rdx, [rbp + 0xc24]
lea rcx, [rbp + 0xc04]
call fcn.14015b563
lea rcx, [rbp + 0xc44]
call fcn.14015ff41
mov dword [0], 0xdead
xor edx, edx
lea rcx, [0x14015a1f9]
call qword [sym.imp.USER32.dll_EnumWindows]
call fcn.140161521
movzx eax, al
test eax, eax
je 0x14033f8f3
mov dword [rbp + 0xc84], 0
lea rdx, [rbp + 0xc84]
lea rcx, [rbp + 0xc64]
call fcn.14015f75d
mov dword [rbp + 0xcc4], 0
lea rdx, [rbp + 0xcc4]
lea rcx, [rbp + 0xca4]
call fcn.14015b563
lea rcx, [rbp + 0xce4]
call fcn.14015ff41
mov dword [0], 0xdead
lea rdx, [0x14015db5b]
lea rcx, [rbp + 0xd08]
call fcn.14015d3db
mov rcx, rax
call fcn.140161a30
lea rcx, [rbp + 0xd08]
call fcn.14015d471
lea rdx, [rbp + 0xd54]
lea rcx, [rbp + 0xd34]
call fcn.1402f1300
mov rcx, rax
call fcn.14015befa
xor edx, edx
mov rcx, rax
call fcn.1401618eb
movzx eax, al
test eax, eax
je 0x14033f997
mov dword [rbp + 0xd94], 0
lea rdx, [rbp + 0xd94]
lea rcx, [rbp + 0xd74]
call fcn.14015f75d
mov dword [rbp + 0xdd4], 0
lea rdx, [rbp + 0xdd4]
lea rcx, [rbp + 0xdb4]
call fcn.14015b563
lea rcx, [rbp + 0xdf4]
call fcn.14015ff41
mov dword [0], 0xdead
xor edx, edx
lea rcx, [0x14015a1f9]
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rbp + 0x40], 0x50
mov dword [rbp + 0x44], 0x40
lea rax, [0x14015e1be]
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x50], 0
mov dword [rbp + 0x54], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov rax, qword [str.Atomic_Loader]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], 0
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], 0
mov rax, qword [rbp + 0x58]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0x80000000
mov r8, qword [str.Atomic_Loader]
mov rdx, qword [rbp + 0x80]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x14053d6e0], rax
mov rcx, qword [0x14053d6e0]
call fcn.14015d741
movzx eax, al
test eax, eax
jne 0x14033faca
call fcn.14016075c
mov rdx, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [rbp + 0xe14], 1
lea rcx, [rbp + 8]
call fcn.14015d471
mov eax, dword [rbp + 0xe14]
jmp 0x14034044d
xor edx, edx
mov rcx, qword [0x14053d6e0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14053d6e0]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.14015d41c
mov dword [rbp + 0xe54], 0
lea rdx, [rbp + 0xec0]
lea rcx, [rbp + 0xe94]
call fcn.1402f1fb0
mov rcx, rax
call fcn.140161229
mov qword [rbp + 0xe78], rax
lea r8, [rbp + 0xe54]
lea rdx, [rbp + 0xe78]
lea rcx, [rbp + 0xe34]
call fcn.14015dacf
mov dword [rbp + 0xf64], 0
lea rdx, [rbp + 0xfd0]
lea rcx, [rbp + 0xfa4]
call fcn.1402f2ee0
mov rcx, rax
call fcn.14015e164
mov qword [rbp + 0xf88], rax
lea r8, [rbp + 0xf64]
lea rdx, [rbp + 0xf88]
lea rcx, [rbp + 0xf44]
call fcn.14015dacf
mov dword [rbp + 0x1074], 0
lea rdx, [rbp + 0x10e0]
lea rcx, [rbp + 0x10b4]
call fcn.1402f3cd0
mov rcx, rax
call fcn.140160919
mov qword [rbp + 0x1098], rax
lea r8, [rbp + 0x1074]
lea rdx, [rbp + 0x1098]
lea rcx, [rbp + 0x1054]
call fcn.14015dacf
mov dword [rbp + 0x1184], 0
lea rdx, [rbp + 0x11f0]
lea rcx, [rbp + 0x11c4]
call fcn.1402f4970
mov rcx, rax
call fcn.14015b1da
mov qword [rbp + 0x11a8], rax
lea r8, [rbp + 0x1184]
lea rdx, [rbp + 0x11a8]
lea rcx, [rbp + 0x1164]
call fcn.14015dacf
xor ecx, ecx
call fcn.140161094
call fcn.14015f87f
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0xa8]
mov qword [rax + 0x18], 0
mov rax, qword [rbp + 0xa8]
mov eax, dword [rax]
bts eax, 0xa
mov rcx, qword [rbp + 0xa8]
mov dword [rcx], eax
call fcn.140160586
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xa8]
mov eax, dword [rax]
and eax, 0x400
test eax, eax
je 0x14033fc89
mov rax, qword [rbp + 0xc8]
xorps xmm0, xmm0
movss dword [rax + 0xc], xmm0
mov eax, reloc.WS2_32.dll_recv
imul rax, rax, 2
mov rcx, qword [rbp + 0xc8]
movss xmm0, dword [0x14043e368]
movss dword [rcx + rax + 0xd0], xmm0
mov rcx, qword [0x14053d6e0]
call fcn.14015bfef
mov rcx, qword [0x14053d6e8]
call fcn.14015acd5
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0xa0]
mov qword [rbp + 0x1618], rax
lea rdx, [rbp + 0x1298]
lea rcx, [rbp + 0x1274]
call fcn.1402f55b0
mov rcx, rax
call fcn.14015ab04
mov qword [rbp + 0x1620], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14045324c]
mov rdx, qword [rbp + 0x1620]
mov rcx, qword [rbp + 0x1618]
call fcn.140161896
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0xa0]
mov qword [rbp + 0x1618], rax
lea rdx, [rbp + 0x12f8]
lea rcx, [rbp + 0x12d4]
call fcn.1402f6180
mov rcx, rax
call fcn.14015ab04
mov qword [rbp + 0x1620], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14043e3d4]
mov rdx, qword [rbp + 0x1620]
mov rcx, qword [rbp + 0x1618]
call fcn.140161896
mov qword [rbp + 0x108], rax
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0xa0]
mov qword [rbp + 0x1618], rax
lea rdx, [rbp + 0x1358]
lea rcx, [rbp + 0x1334]
call fcn.1402f6a30
mov rcx, rax
call fcn.14015ab04
mov qword [rbp + 0x1620], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x1404cfa6c]
mov rdx, qword [rbp + 0x1620]
mov rcx, qword [rbp + 0x1618]
call fcn.140161896
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0xa0]
mov qword [rbp + 0x1618], rax
lea rdx, [rbp + 0x13b8]
lea rcx, [rbp + 0x1394]
call fcn.1402ec810
mov rcx, rax
call fcn.14015ab04
mov qword [rbp + 0x1620], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x14043e3cc]
mov rdx, qword [rbp + 0x1620]
mov rcx, qword [rbp + 0x1618]
call fcn.140161896
mov qword [rbp + 0x148], rax
lea rcx, [rbp + 0x170]
call fcn.1401618b4
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0xa0]
mov qword [rbp + 0x1618], rax
lea rdx, [rbp + 0x1418]
lea rcx, [rbp + 0x13f4]
call fcn.1402ecb20
mov rcx, rax
call fcn.14015ab04
mov qword [rbp + 0x1620], rax
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x170]
movss xmm2, dword [0x14043e3d4]
mov rdx, qword [rbp + 0x1620]
mov rcx, qword [rbp + 0x1618]
call fcn.140161896
mov qword [rbp + 0x218], rax
movss xmm0, dword [0x14043e3cc]
movss dword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1b8], 1
mov rax, qword [rbp + 0xa8]
mov rax, qword [rax + 0xa0]
mov qword [rbp + 0x1618], rax
lea rax, [0x1404b10a4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x170]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14043e3cc]
mov r8d, 0x3934b
lea rdx, [0x140473710]
mov rcx, qword [rbp + 0x1618]
call fcn.14015ef88
mov qword [rbp + 0x238], rax
mov dword [rbp + 0x254], 0
mov dword [rbp + 0x274], 0
mov qword [rbp + 0x298], 0
lea rdx, [rbp + 0x1478]
lea rcx, [rbp + 0x1454]
call fcn.1402ece30
mov rcx, rax
call fcn.14015d9b7
lea r9, [rbp + 0x274]
lea r8, [rbp + 0x254]
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.14015fa5f
mov byte [rbp + 0x2b4], al
movzx eax, byte [rbp + 0x2b4]
test eax, eax
jne 0x14033ffa2
mov eax, dword [0x140533ef4]
add eax, 0xab
mov r8d, eax
lea rdx, str.C:UsersAdminDownloadsimpact_loader__1_impact_loadermain.cpp
lea rcx, [0x14043b298]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
xor eax, eax
mov dword [rbp + 0x2d4], 0
mov dword [rbp + 0x2f4], 0
mov qword [rbp + 0x318], 0
lea rdx, [rbp + 0x14e8]
lea rcx, [rbp + 0x14c4]
call fcn.1402ed130
mov rcx, rax
call fcn.140161eae
lea r9, [rbp + 0x2f4]
lea r8, [rbp + 0x2d4]
lea rdx, [rbp + 0x318]
mov rcx, rax
call fcn.14015fa5f
mov byte [rbp + 0x334], al
movzx eax, byte [rbp + 0x334]
test eax, eax
jne 0x14034002e
mov eax, dword [0x140533ef4]
add eax, 0xb1
mov r8d, eax
lea rdx, str.C:UsersAdminDownloadsimpact_loader__1_impact_loadermain.cpp
lea rcx, str.ret2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
xor eax, eax
mov dword [rbp + 0x354], 0
mov dword [rbp + 0x374], 0
mov qword [rbp + 0x398], 0
lea rdx, [rbp + 0x1558]
lea rcx, [rbp + 0x1534]
call fcn.1402ed3d0
mov rcx, rax
call fcn.14015a541
lea r9, [rbp + 0x374]
lea r8, [rbp + 0x354]
lea rdx, [rbp + 0x398]
mov rcx, rax
call fcn.14015fa5f
mov byte [rbp + 0x3b4], al
movzx eax, byte [rbp + 0x3b4]
test eax, eax
jne 0x1403400ba
mov eax, dword [0x140533ef4]
add eax, 0xb7
mov r8d, eax
lea rdx, str.C:UsersAdminDownloadsimpact_loader__1_impact_loadermain.cpp
lea rcx, str.ret3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
xor eax, eax
mov dword [rbp + 0x3d4], 0
mov dword [rbp + 0x3f4], 0
mov qword [rbp + 0x418], 0
lea rdx, [rbp + 0x15b8]
lea rcx, [rbp + 0x1594]
call fcn.1402ed670
mov rcx, rax
call fcn.1401606df
lea r9, [rbp + 0x3f4]
lea r8, [rbp + 0x3d4]
lea rdx, [rbp + 0x418]
mov rcx, rax
call fcn.14015fa5f
mov byte [rbp + 0x434], al
movzx eax, byte [rbp + 0x434]
test eax, eax
jne 0x140340146
mov eax, dword [0x140533ef4]
add eax, 0xbd
mov r8d, eax
lea rdx, str.C:UsersAdminDownloadsimpact_loader__1_impact_loadermain.cpp
lea rcx, str.ret4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
xor eax, eax
call fcn.140160bb2
mov r8d, Ordinal_50
xor edx, edx
lea rcx, [0x14053da20]
call fcn.14015f758
cmp dword [0x14053da28], 0x12
je 0x1403403af
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x14053da20]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1403401a9
lea rcx, [0x14053da20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x14053da20]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14034015f
call fcn.14015d098
call fcn.14015eb00
call fcn.14015f50f
cmp dword [0x14053de38], 0
jne 0x1403401dc
mov rcx, qword [0x14053d6e8]
call fcn.140161184
mov dword [0x14053de38], 1
jmp 0x140340261
mov rax, qword [rbp + 0x418]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x398]
mov qword [rsp + 0x58], rax
mov rax, qword [rbp + 0x318]
mov qword [rsp + 0x50], rax
mov eax, dword [rbp + 0x2f4]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp + 0x2d4]
mov dword [rsp + 0x40], eax
mov rax, qword [rbp + 0x298]
mov qword [rsp + 0x38], rax
mov eax, dword [rbp + 0x274]
mov dword [rsp + 0x30], eax
mov eax, dword [rbp + 0x254]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x128]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0xe8]
mov r8, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x108]
mov rcx, qword [rbp + 0x218]
call fcn.14015d3a4
call fcn.14015be0f
mov rax, qword [0x14053d6e8]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rbp + 0x1618], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x14043e368]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 3
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14053d6e8]
call qword [rbp + 0x1618]
mov rax, qword [0x14053d6e8]
mov rax, qword [rax]
mov rcx, qword [0x14053d6e8]
call qword [rax + 0x148]
test eax, eax
jl 0x1403402f8
call fcn.140160f72
call fcn.1401608d3
mov rcx, rax
call fcn.140160a63
mov rax, qword [0x14053d6e8]
mov rax, qword [rax]
mov rcx, qword [0x14053d6e8]
call qword [rax + 0x150]
mov rax, qword [rbp + 0xa8]
mov eax, dword [rax]
and eax, 0x400
test eax, eax
je 0x140340318
call fcn.14015a54b
xor edx, edx
xor ecx, ecx
call fcn.140161490
mov rax, qword [0x14053d6e8]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rbp + 0x1618], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14053d6e8]
call qword [rbp + 0x1618]
mov dword [rbp + 0x454], eax
cmp dword [rbp + 0x454], 0x88760868
jne 0x140340380
mov rax, qword [0x14053d6e8]
mov rax, qword [rax]
mov rcx, qword [0x14053d6e8]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140340380
call fcn.14015a37f
movzx eax, byte [0x14053e000]
test eax, eax
jne 0x140340395
mov dword [0x14053da28], 0x12
movzx eax, byte [0x14053e001]
test eax, eax
je 0x1403403aa
mov dword [0x14053da28], 5
jmp 0x14034015f
call fcn.14015ed62
call fcn.14015b423
xor ecx, ecx
call fcn.14015ecf9
cmp qword [0x14053d9d8], 0
je 0x1403403f5
mov rax, qword [0x14053d9d8]
mov rax, qword [rax]
mov rcx, qword [0x14053d9d8]
call qword [rax + 0x150]
mov rax, qword [0x14053d9d8]
mov rax, qword [rax]
mov rcx, qword [0x14053d9d8]
call qword [rax + reloc.WS2_32.dll_recv]
cmp qword [0x14053d9d0], 0
je 0x140340413
mov rax, qword [0x14053d9d0]
mov rax, qword [rax]
mov rcx, qword [0x14053d9d0]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14053d9c0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x14053d988]
mov rcx, qword [0x14053d9b0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [rbp + 0x1604], 0
lea rcx, [rbp + 8]
call fcn.14015d471
mov eax, dword [rbp + 0x1604]
mov rdi, rax
lea rcx, [rbp - 0x70]
lea rdx, reloc.WS2_32.dll_ntohs
call fcn.140160054
mov rax, rdi
mov rcx, qword [rbp + 0x1628]
xor rcx, rbp
call fcn.14015d7aa
lea rsp, [rbp + 0x1638]
pop rdi
pop rbp
ret