Function at 0x632382f0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x218
mov eax, dword [0x63256ab4]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x218], ecx
mov dword [ebp - 0x214], 1
mov ecx, dword [ebp - 0x218]
call fcn.63238250
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jne 0x63238438
push str.InitMgrDll
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 4], eax
push str.SetProtectName
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 8], eax
push str.SetAllowName
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 0xc], eax
push str.ClearProtectName
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 0x10], eax
push str.ClearAllowName
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 0x14], eax
push str.ApplyPolicyExe
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 0x1c], eax
push str.PauseSecurity
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 0x18], eax
push str.StartSecurity
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 0x20], eax
push str.EndSecurity
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x218]
mov dword [edx + 0x24], eax
jmp 0x6323844c
mov dword [ebp - 0x214], 0
jmp 0x63238530
mov eax, dword [ebp - 0x218]
cmp dword [eax + 4], 0
je 0x632384c4
mov ecx, dword [ebp - 0x218]
cmp dword [ecx + 8], 0
je 0x632384c4
mov edx, dword [ebp - 0x218]
cmp dword [edx + 0xc], 0
je 0x632384c4
mov eax, dword [ebp - 0x218]
cmp dword [eax + 0x1c], 0
je 0x632384c4
mov ecx, dword [ebp - 0x218]
cmp dword [ecx + 0x10], 0
je 0x632384c4
mov edx, dword [ebp - 0x218]
cmp dword [edx + 0x14], 0
je 0x632384c4
mov eax, dword [ebp - 0x218]
cmp dword [eax + 0x18], 0
je 0x632384c4
mov ecx, dword [ebp - 0x218]
cmp dword [ecx + 0x20], 0
je 0x632384c4
mov edx, dword [ebp - 0x218]
cmp dword [edx + 0x24], 0
je 0x632384c4
mov eax, dword [ebp - 0x218]
cmp dword [eax + 4], 0
jne 0x632384d2
mov dword [ebp - 0x214], 0
jmp 0x63238530
push 0x104
lea ecx, [ebp - 0x210]
push ecx
push 0x104
push 0x6325ce48
push 1
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0x210]
push edx
push 0x6324bc90
lea eax, [ebp - 0x210]
push eax
call fcn.63202820
add esp, 0xc
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp - 0x218]
mov eax, dword [edx + 4]
call eax
add esp, 4
test eax, eax
je 0x63238530
mov dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.6320fb73
mov esp, ebp
pop ebp
ret