Function at 0x10021920
Capabilities:
Create thread
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10028df8
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x1003300c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 8
mov dword [ebp - 0x14], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
push 2
push 8
push esi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
mov ebx, dword [sym.imp.ADVAPI32.dll_SetSecurityInfo]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x10021980
call edi
jmp 0x10021990
push 0
push esi
push 0
push 0
push 4
push 6
push dword [ebp - 0x14]
call ebx
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 8
mov dword [ebp - 0x14], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
push 2
push 8
push esi
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
test eax, eax
jne 0x100219c3
call edi
jmp 0x100219d3
push 0
push esi
push 0
push 0
push 4
push 6
push dword [ebp - 0x14]
call ebx
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov esi, 0x14
mov dword [ebp - 4], 0
mov ebx, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea edi, [esi + 0x2a]
call ebx
cdq
idiv edi
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
mov dl, byte [edx + str.1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov byte [ebp - 0x14], dl
cmp ecx, edi
jae 0x10021a36
lea eax, [ecx + 1]
cmp edi, 0x10
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x10021a49
push dword [ebp - 0x14]
mov byte [ebp - 0x64], 0
push dword [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.10023080
mov edi, 0x3e
sub esi, 1
jne 0x10021a04
push 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x60], 0x30
mov dword [ebp - 0x50], 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0x7f00
push 0
mov dword [ebp - 0x40], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [ebp - 0x44], eax
call esi
push 0x7f00
push 0
mov dword [ebp - 0x48], eax
call esi
cmp dword [ebp - 0x18], 0x10
mov esi, dword [sym.imp.USER32.dll_RegisterClassExA]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x58], 0x100218b0
mov dword [ebp - 0x5c], 3
call esi
test ax, ax
jne 0x10021b0d
sub esp, 0x18
mov eax, esp
push esi
push 0xc0
push str.c:users_bankdownloadsphoenixnrz_externalphoenixnrz_externaloverlay.cpp
push str.ASSERT_at_file__s__line__d:__s_n
push eax
call fcn.10024fa0
add esp, 0x14
call fcn.10024ef0
add esp, 0x18
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [0x1022f130]
test eax, eax
je 0x10021bdb
push 0x1022f0ec
push eax
mov dword [0x1022f138], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [0x1022f0f4]
lea esi, [ebp - 0x2c]
sub eax, dword [0x1022f0ec]
lea edx, [ebp - 0x2c]
push 0
push 0
push 0
movd xmm1, eax
mov eax, dword [0x1022f0f8]
sub eax, dword [0x1022f0f0]
cmp dword [ebp - 0x18], 0x10
push 0
cmovae esi, dword [ebp - 0x2c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cmovae edx, dword [ebp - 0x2c]
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movss dword [0x1022f120], xmm1
push eax
cvttss2si eax, xmm1
movss dword [0x1022f124], xmm0
push eax
push 1
push 1
push 0x80000000
push esi
push edx
push 0x80028
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 2
push 0
push 0
push eax
mov dword [0x1022f1a8], eax
call esi
push 2
push 0xff
push 0
push dword [0x1022f1a8]
call esi
push 0x1022f100
push dword [0x1022f1a8]
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push dword [0x1022f138]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov esi, dword [0x1022f1a8]
push 0x1022f0dc
push 0x20
call dword [sym.imp.d3d9.dll_Direct3DCreate9Ex]
test eax, eax
jns 0x10021bfa
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm0, xmm0
mov dword [0x1022f170], 0
movlpd qword [0x1022f148], xmm0
movlpd qword [0x1022f168], xmm0
movss xmm0, dword [0x1022f120]
mov dword [0x1022f15c], 1
mov dword [0x1022f154], 1
mov dword [0x1022f158], esi
mov dword [0x1022f150], 0
mov dword [0x1022f144], 0x15
call fcn.10027820
movss xmm0, dword [0x1022f124]
mov dword [0x1022f13c], eax
call fcn.10027820
push 0x1022f12c
push 0
push 0x1022f13c
push 0x40
mov dword [0x1022f140], eax
mov eax, dword [0x1022f0dc]
push esi
push 1
mov dword [0x1022f160], 1
mov dword [0x1022f164], 0x50
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x50]
test eax, eax
jns 0x10021cbe
sub esp, 0x18
mov ecx, esp
push str.CreateDeviceEx
call fcn.10022600
call fcn.10024ef0
add esp, 0x18
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0
push 0
push 0
push 0x10021d70
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 5
push dword [0x1022f1a8]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov dword [ebp - 0x30], 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x30]
push eax
push 0x1002a390
push 1
push 0
push 0x1002a3a0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x10021d24
mov eax, dword [ebp - 0x30]
push dword [0x1022f1a8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_DispatchMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
nop dword [eax]
push 1
push 0
push 0
push dword [0x1022f1a8]
push 0x1022f174
call ebx
test eax, eax
je 0x10021d40
push 0x1022f174
call esi
push 0x1022f174
call edi
jmp 0x10021d40