Function at 0x100252f0
Capabilities:
Create thread
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002c64d
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x1003600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 8
mov dword [ebp - 0x14], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
push 2
push 8
push esi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
mov ebx, dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x10025350
call edi
jmp 0x10025360
push 0
push esi
push 0
push 0
push 4
push 6
push dword [ebp - 0x14]
call ebx
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 8
mov dword [ebp - 0x14], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
push 2
push 8
push esi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x10025393
call edi
jmp 0x100253a3
push 0
push esi
push 0
push 0
push 4
push 6
push dword [ebp - 0x14]
call ebx
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov dword [ebp - 0x2c], 0
add esp, 4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov esi, 0x14
mov dword [ebp - 4], 0
mov ebx, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea edi, [esi + 0x2a]
nop dword [eax + eax]
call ebx
cdq
idiv edi
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
mov dl, byte [edx + str.1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov byte [ebp - 0x14], dl
cmp ecx, edi
jae 0x10025412
lea eax, [ecx + 1]
cmp edi, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x10025425
push dword [ebp - 0x14]
mov byte [ebp - 0x64], 0
push dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.10026c20
mov edi, 0x3e
sub esi, 1
jne 0x100253e0
push 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x60], 0x30
mov dword [ebp - 0x50], 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0x7f00
push 0
mov dword [ebp - 0x40], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [ebp - 0x44], eax
call esi
push 0x7f00
push 0
mov dword [ebp - 0x48], eax
call esi
cmp dword [ebp - 0x18], 0x10
mov esi, dword [sym.imp.USER32.dll_RegisterClassExA]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x58], 0x10025280
mov dword [ebp - 0x5c], 3
call esi
test ax, ax
jne 0x100254e9
sub esp, 0x18
mov eax, esp
push esi
push 0xc0
push str.D:22_10_2023OVERLAY_WARZ_ALL___CopyOVERLAY_WARZ_ALLPhoenixnrZ_ExternalOverlay.cpp
push str.ASSERT_at_file__s__line__d:__s_n
push eax
call fcn.100291f0
add esp, 0x14
call fcn.10029140
add esp, 0x18
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [0x10232128]
test eax, eax
je 0x100255b7
push 0x102320e4
push eax
mov dword [0x10232130], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [0x102320ec]
lea esi, [ebp - 0x2c]
sub eax, dword [0x102320e4]
lea edx, [ebp - 0x2c]
push 0
push 0
push 0
movd xmm1, eax
mov eax, dword [0x102320f0]
sub eax, dword [0x102320e8]
cmp dword [ebp - 0x18], 0x10
push 0
cmovae esi, dword [ebp - 0x2c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cmovae edx, dword [ebp - 0x2c]
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movss dword [0x10232118], xmm1
push eax
cvttss2si eax, xmm1
movss dword [0x1023211c], xmm0
push eax
push 1
push 1
push 0x80000000
push esi
push edx
push 0x80028
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 2
push 0
push 0
push eax
mov dword [0x1023219c], eax
call esi
push 2
push 0xff
push 0
push dword [0x1023219c]
call esi
push 0x102320f8
push dword [0x1023219c]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push dword [0x10232130]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov esi, dword [0x1023219c]
push 0x102320d4
push 0x20
call dword [sym.imp.d3d9.dll_Direct3DCreate9Ex]
test eax, eax
jns 0x100255d6
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm0, xmm0
mov dword [0x10232168], 0
movlpd qword [0x10232140], xmm0
movlpd qword [0x10232160], xmm0
movss xmm0, dword [0x10232118]
mov dword [0x10232154], 1
mov dword [0x1023214c], 1
mov dword [0x10232150], esi
mov dword [0x10232148], 0
mov dword [0x1023213c], 0x15
call fcn.1002ba10
movss xmm0, dword [0x1023211c]
mov dword [0x10232134], eax
call fcn.1002ba10
push 0x10232124
push 0
push 0x10232134
push 0x40
mov dword [0x10232138], eax
mov eax, dword [0x102320d4]
push esi
push 1
mov dword [0x10232158], 1
mov dword [0x1023215c], 0x50
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x50]
test eax, eax
jns 0x1002569a
sub esp, 0x18
mov ecx, esp
push str.CreateDeviceEx
call fcn.10026030
call fcn.10029140
add esp, 0x18
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0
push 0
push 0
push 0x10025740
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 5
push dword [0x1023219c]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov dword [ebp - 0x30], 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x30]
push eax
push 0x1002d3b0
push 1
push 0
push 0x1002d3c0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x10025700
mov eax, dword [ebp - 0x30]
push dword [0x1023219c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_DispatchMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
push 1
push 0
push 0
push dword [0x1023219c]
push 0x1023216c
call ebx
test eax, eax
je 0x10025718
push 0x1023216c
call esi
push 0x1023216c
call edi
jmp 0x10025718