Function at 0x10021750
Capabilities:
Create thread
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10028de8
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x1003200c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 8
mov dword [ebp - 0x14], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
push 2
push 8
push esi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
mov ebx, dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x100217b0
call edi
jmp 0x100217c0
push 0
push esi
push 0
push 0
push 4
push 6
push dword [ebp - 0x14]
call ebx
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 8
mov dword [ebp - 0x14], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
push 2
push 8
push esi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x100217f3
call edi
jmp 0x10021803
push 0
push esi
push 0
push 0
push 4
push 6
push dword [ebp - 0x14]
call ebx
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov esi, 0x14
mov dword [ebp - 4], 0
mov ebx, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea edi, [esi + 0x2a]
call ebx
cdq
idiv edi
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
mov dl, byte [edx + str.1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov byte [ebp - 0x14], dl
cmp ecx, edi
jae 0x10021866
lea eax, [ecx + 1]
cmp edi, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x10021879
push dword [ebp - 0x14]
mov byte [ebp - 0x64], 0
push dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.10022f80
mov edi, 0x3e
sub esi, 1
jne 0x10021834
push 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x60], 0x30
mov dword [ebp - 0x50], 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0x7f00
push 0
mov dword [ebp - 0x40], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [ebp - 0x44], eax
call esi
push 0x7f00
push 0
mov dword [ebp - 0x48], eax
call esi
cmp dword [ebp - 0x18], 0x10
mov esi, dword [sym.imp.USER32.dll_RegisterClassExA]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x58], 0x100216e0
mov dword [ebp - 0x5c], 3
call esi
test ax, ax
jne 0x1002193d
sub esp, 0x18
mov eax, esp
push esi
push 0xc0
push str.c:err0r32k_newsphoenixnrz_externaloverlay.cpp
push str.ASSERT_at_file__s__line__d:__s_n
push eax
call fcn.10024e80
add esp, 0x14
call fcn.10024dd0
add esp, 0x18
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [0x1022e130]
test eax, eax
je 0x10021a0b
push 0x1022e0ec
push eax
mov dword [0x1022e138], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [0x1022e0f4]
lea esi, [ebp - 0x2c]
sub eax, dword [0x1022e0ec]
lea edx, [ebp - 0x2c]
push 0
push 0
push 0
movd xmm1, eax
mov eax, dword [0x1022e0f8]
sub eax, dword [0x1022e0f0]
cmp dword [ebp - 0x18], 0x10
push 0
cmovae esi, dword [ebp - 0x2c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cmovae edx, dword [ebp - 0x2c]
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movss dword [0x1022e120], xmm1
push eax
cvttss2si eax, xmm1
movss dword [0x1022e124], xmm0
push eax
push 1
push 1
push 0x80000000
push esi
push edx
push 0x80028
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 2
push 0
push 0
push eax
mov dword [0x1022e1a8], eax
call esi
push 2
push 0xff
push 0
push dword [0x1022e1a8]
call esi
push 0x1022e100
push dword [0x1022e1a8]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push dword [0x1022e138]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov esi, dword [0x1022e1a8]
push 0x1022e0dc
push 0x20
call dword [sym.imp.d3d9.dll_Direct3DCreate9Ex]
test eax, eax
jns 0x10021a2a
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm0, xmm0
mov dword [0x1022e170], 0
movlpd qword [0x1022e148], xmm0
movlpd qword [0x1022e168], xmm0
movss xmm0, dword [0x1022e120]
mov dword [0x1022e15c], 1
mov dword [0x1022e154], 1
mov dword [0x1022e158], esi
mov dword [0x1022e150], 0
mov dword [0x1022e144], 0x15
call fcn.100277e0
movss xmm0, dword [0x1022e124]
mov dword [0x1022e13c], eax
call fcn.100277e0
push 0x1022e12c
push 0
push 0x1022e13c
push 0x40
mov dword [0x1022e140], eax
mov eax, dword [0x1022e0dc]
push esi
push 1
mov dword [0x1022e160], 1
mov dword [0x1022e164], 0x50
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x50]
test eax, eax
jns 0x10021aee
sub esp, 0x18
mov ecx, esp
push str.CreateDeviceEx
call fcn.10022500
call fcn.10024dd0
add esp, 0x18
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0
push 0
push 0
push 0x10021ba0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 5
push dword [0x1022e1a8]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov dword [ebp - 0x30], 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x30]
push eax
push 0x1002a390
push 1
push 0
push 0x1002a3a0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x10021b54
mov eax, dword [ebp - 0x30]
push dword [0x1022e1a8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_DispatchMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
nop dword [eax]
push 1
push 0
push 0
push dword [0x1022e1a8]
push 0x1022e174
call ebx
test eax, eax
je 0x10021b70
push 0x1022e174
call esi
push 0x1022e174
call edi
jmp 0x10021b70