Function at 0x472150
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x64ffac
mov eax, dword fs:[0]
push eax
sub esp, 0xa70
mov eax, dword [0x6dc0b8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0xa50], ebx
cmp dword [ebx + 0xf4], 0
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0xa48], eax
je 0x4725ef
lea ecx, [ebp - 0xa44]
call fcn.00472650
mov dword [ebp - 4], 0
push 0x68
mov byte [ebp - 0x18], 0
call fcn.005e74a6
add esp, 4
test eax, eax
jne 0x4721d4
push 0x6d8324
lea eax, [ebp - 0xa49]
push eax
call fcn.005e0fac
mov dword [ebp - 0xa54], eax
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00472780
mov esi, eax
mov byte [ebp - 4], 0
mov dword [ebp - 0x20], esi
test esi, esi
je 0x4721f8
mov ecx, dword [esi]
push esi
call dword [ecx + 4]
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x472205
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x24], esi
lea ecx, [ecx + 0x20]
call fcn.0049b800
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xa1c]
mov edx, 0x1774
mov dword [eax + 0x5c], ecx
lea ecx, [ebp - 0xa60]
call fcn.0046b000
push 0x6acfa4
lea ecx, [ebp - 0xa6c]
mov byte [ebp - 4], 2
call fcn.0049f410
mov byte [ebp - 4], 3
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x472257
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x41c], eax
lea ecx, [ebp - 0x418]
lea eax, [ebp - 0xa6c]
push eax
call fcn.0049f5a0
push 0x20
lea edx, [ebp - 0xa60]
lea ecx, [ebp - 0xa78]
call fcn.0041a7a0
add esp, 4
push eax
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 4
call fcn.0049f5a0
mov byte [ebp - 4], 3
push dword [ebp - 0xa78]
call fcn.00545b61
add esp, 4
cmp dword [ebx + 0xd4], 0
je 0x4722db
mov ecx, dword [ebx + 0xd4]
mov eax, dword [ebx + 0xd0]
mov edx, dword [eax + ecx*4 - 4]
mov eax, dword [ebp - 0x20]
mov cl, byte [edx + 0x7c]
mov byte [eax + 0x44], cl
lea eax, [edx + 0x80]
mov ecx, dword [ebp - 0x20]
push eax
lea ecx, [ecx + 0x38]
call fcn.0049f5a0
mov esi, dword [ebx + 0xf4]
test esi, esi
je 0x4722eb
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xa44]
test ecx, ecx
je 0x4722fb
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
push dword [ebp - 0xa48]
lea ecx, [ebp - 0xa40]
mov dword [ebp - 0xa44], esi
call fcn.0049f5a0
mov esi, dword [edi + 4]
lea ecx, [ebp - 0xa34]
call fcn.004066d0
xor ebx, ebx
mov dword [ebp - 0xa30], ebx
cmp esi, dword [ebp - 0xa2c]
jbe 0x472377
push dword [ebp - 0xa34]
call fcn.00545b61
xor ecx, ecx
mov dword [ebp - 0xa34], ebx
add esp, 4
mov dword [ebp - 0xa2c], ebx
mov eax, esi
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00545b74
mov ebx, dword [ebp - 0xa30]
add esp, 4
mov dword [ebp - 0xa34], eax
mov dword [ebp - 0xa2c], esi
xor esi, esi
cmp dword [edi + 4], esi
jbe 0x47239c
nop
mov eax, dword [edi]
lea ecx, [ebp - 0xa34]
push dword [eax + esi*4]
call fcn.0041a310
inc esi
cmp esi, dword [edi + 4]
jb 0x472380
mov ebx, dword [ebp - 0xa30]
xor edx, edx
mov dword [ebp - 0xa24], edx
cmp ebx, dword [ebp - 0xa20]
jbe 0x472401
push dword [ebp - 0xa28]
call fcn.00545b61
xor ecx, ecx
mov dword [ebp - 0xa28], 0
add esp, 4
mov dword [ebp - 0xa20], 0
mov eax, ebx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00545b74
mov edx, dword [ebp - 0xa24]
add esp, 4
mov dword [ebp - 0xa20], ebx
mov ebx, dword [ebp - 0xa30]
mov dword [ebp - 0xa28], eax
xor esi, esi
test ebx, ebx
je 0x47243a
nop word [eax + eax]
mov eax, dword [ebp - 0xa34]
mov eax, dword [eax + esi*4]
inc esi
mov ecx, dword [eax]
mov eax, dword [ebp - 0xa28]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0xa24]
inc edx
mov dword [ebp - 0xa24], edx
cmp esi, dword [ebp - 0xa30]
jb 0x472410
mov dword [ebp - 0xa48], 0
lea eax, [ebp - 0xa54]
mov byte [ebp - 4], 5
push eax
push 0
lea eax, [ebp - 0xa44]
push eax
push 0x472130
push 0
push 0
call fcn.005e7638
mov esi, eax
add esp, 0x18
mov dword [ebp - 0xa48], esi
test esi, esi
jne 0x472511
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
mov edi, 1
cmovne edi, eax
test edi, edi
je 0x472511
push dword [ebp - 0xa6c]
call fcn.00545b61
add esp, 4
push dword [ebp - 0xa60]
call fcn.00545b61
add esp, 4
mov dword [ebp - 4], 6
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x4724c1
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
lea ecx, [ebp - 0xa1c]
call fcn.0048f230
push dword [ebp - 0xa28]
call fcn.00545b61
add esp, 4
lea ecx, [ebp - 0xa34]
call fcn.00406650
push dword [ebp - 0xa40]
call fcn.00545b61
add esp, 4
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0xa44]
test eax, eax
je 0x47250a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x472628
mov edi, dword [ebp - 0xa50]
push dword [edi + 4]
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne 0x472527
mov eax, dword [edi + 0x38]
push eax
lea eax, [ebp - 0xa48]
push eax
lea eax, [ebp - 0xa60]
push eax
lea ecx, [ebp - 0xa1c]
call fcn.00490f90
mov ebx, dword [ebp - 0x1c]
test esi, esi
je 0x472559
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x472559
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0xa6c]
call fcn.00545b61
add esp, 4
push dword [ebp - 0xa60]
call fcn.00545b61
add esp, 4
mov dword [ebp - 4], 8
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x472589
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
lea ecx, [ebp - 0xa1c]
call fcn.0048f230
push dword [ebp - 0xa28]
call fcn.00545b61
add esp, 4
lea ecx, [ebp - 0xa34]
call fcn.00406650
push dword [ebp - 0xa40]
call fcn.00545b61
add esp, 4
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0xa44]
test ecx, ecx
je 0x4725d2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 4], 0xffffffff
cmp ebx, 0x80004002
je 0x4725ef
mov ecx, dword [edi + 0x3c]
push 1
mov edx, dword [ecx]
call dword [edx + 0x24]
mov eax, ebx
jmp 0x472628
mov edx, 0x1778
lea ecx, [ebp - 0xa78]
call fcn.0046b000
mov dword [ebp - 4], 0xa
xor edx, edx
mov esi, dword [ebp - 0xa78]
mov ecx, esi
push 0
call fcn.0042f0f0
add esp, 4
push esi
call fcn.00545b61
add esp, 4
mov eax, 0x80004004
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00545b50
mov esp, ebp
pop ebp
ret 0x14