Function at 0x632620
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x64b567
mov eax, dword fs:[0]
push eax
sub esp, 0x134
mov eax, dword [0x7030b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x104], ecx
movzx eax, byte [0x716d58]
test eax, eax
je 0x632664
jmp 0x632b0d
mov byte [0x716d58], 1
call fcn.0044f2c1
movzx ecx, al
test ecx, ecx
je 0x63268d
push eax
pop edx
pop edi
pop edi
push ebp
pop ecx
push ecx
push edi
push esp
push edi
push esi
push ebp
pop esi
pop ecx
pop esp
push esi
pop esp
push ecx
push esp
push eax
pop ecx
pop ecx
call fcn.0044f390
movzx edx, al
test edx, edx
je 0x6326b5
pop ebx
push ecx
pop edx
push ebp
push edx
pop edi
pop edi
pop esp
push ebp
pop esi
pop edx
pop ebp
pop esi
pop edx
push edi
pop ebp
push ebp
push edi
push ebp
pop edx
push ebp
push esi
pop esi
pop esi
pop ebp
push edx
push ebp
pop esp
call fcn.0044f2c1
movzx eax, al
test eax, eax
je 0x6326d8
pop esi
push ebp
pop edx
pop edx
push ebp
push edi
pop eax
push ebp
pop edx
pop ecx
pop esp
push esp
pop edi
push esp
pop edx
push ebp
push esi
push edi
push edi
pop ebx
pop ebp
pop ebx
push esp
mov ecx, dword [ebp - 0x104]
add ecx, 0x44
call fcn.00425050
movzx ecx, al
test ecx, ecx
je 0x632743
lea ecx, [ebp - 0x105]
call fcn.0043e510
mov dword [ebp - 4], 0
lea edx, [ebp - 0x58]
push edx
lea ecx, [ebp - 0x105]
call fcn.004510da
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x104]
add ecx, 0x44
call fcn.00426000
lea ecx, [ebp - 0x58]
call fcn.0041d7b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x105]
call fcn.00443260
mov ecx, dword [ebp - 0x104]
add ecx, 0x8c
call fcn.00425050
movzx ecx, al
test ecx, ecx
je 0x6327b4
push 0x6dd460
lea ecx, [ebp - 0x28]
call fcn.0041d600
mov dword [ebp - 4], 1
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x70]
push eax
call fcn.00450b2c
add esp, 8
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
push ecx
mov ecx, dword [ebp - 0x104]
add ecx, 0x8c
call fcn.00426000
lea ecx, [ebp - 0x70]
call fcn.0041d7b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.0041d5b0
call fcn.0044f4e9
movzx edx, al
test edx, edx
je 0x6327df
push edi
push eax
push esp
pop edx
pop edx
pop edx
pop ebp
push ebp
pop ebp
push edx
pop ecx
push esp
push ebp
push ebp
push esi
pop esi
push ebx
push eax
pop ecx
pop esi
pop edx
push ebx
pop esp
pop esi
pop ebp
push ebp
pop esp
push ecx
pop edx
pop ebp
pop edi
call fcn.0044f4a4
movzx eax, al
test eax, eax
je 0x632806
push ebx
pop ecx
push edi
pop ebx
push esi
pop ebx
pop ecx
push ecx
pop esi
pop edi
pop ecx
pop edx
push ebx
push esp
pop esi
pop esp
pop edx
push esp
pop ecx
pop edx
push ecx
push edi
push ecx
pop edx
push esi
pop esi
pop ebp
mov ecx, dword [ebp - 0x104]
add ecx, 0xa4
call fcn.00425050
movzx ecx, al
test ecx, ecx
je 0x63287d
push 0x6dd470
lea ecx, [ebp - 0x40]
call fcn.0041d600
mov dword [ebp - 4], 2
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.00450b2c
add esp, 8
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x114]
push ecx
mov ecx, dword [ebp - 0x104]
add ecx, 0xa4
call fcn.00426000
lea ecx, [ebp - 0x88]
call fcn.0041d7b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.0041d5b0
call fcn.0044f168
movzx edx, al
test edx, edx
je 0x63289a
push ebx
push edx
pop edi
pop esp
push esp
pop eax
push edx
pop edi
pop ebp
push esi
push edi
push edi
push edi
push ebp
pop esi
pop ebp
pop esi
call fcn.0044f642
movzx eax, al
test eax, eax
je 0x6328c3
push edx
pop esi
push esp
pop ebx
pop eax
push edi
push ebp
push eax
pop ebx
pop esp
push edi
push esp
pop edx
pop edx
push edi
push edx
push esi
pop ecx
pop eax
pop ebx
pop eax
push esp
pop edi
push ecx
pop esp
pop ebp
pop esp
pop ebp
push esi
call fcn.0044f6cc
movzx ecx, al
test ecx, ecx
je 0x6328e0
pop edi
pop esi
push edx
push esp
pop eax
push esp
pop edx
push ebp
push edx
push edx
push edx
push edi
pop ebp
push esp
pop eax
pop esi
pop esp
mov ecx, dword [ebp - 0x104]
add ecx, 0xd4
call fcn.00425050
movzx edx, al
test edx, edx
je 0x632957
lea ecx, [ebp - 0x140]
call fcn.00454a81
mov dword [ebp - 4], 3
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x140]
call fcn.00459018
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x118]
push ecx
mov ecx, dword [ebp - 0x104]
add ecx, 0xd4
call fcn.00426000
lea ecx, [ebp - 0xa0]
call fcn.0041d7b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.00443260
mov ecx, dword [ebp - 0x104]
add ecx, 0x5c
call fcn.00425050
movzx edx, al
test edx, edx
je 0x6329e6
lea eax, [ebp - 0xd0]
push eax
call fcn.0041f750
mov ecx, eax
call fcn.00446e43
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0x120]
push edx
lea eax, [ebp - 0xb8]
push eax
call fcn.00450b2c
add esp, 8
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
push ecx
mov ecx, dword [ebp - 0x104]
add ecx, 0x5c
call fcn.00426000
lea ecx, [ebp - 0xb8]
call fcn.0041d7b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.0041d5b0
mov ecx, dword [ebp - 0x104]
add ecx, 0x74
call fcn.00425050
movzx edx, al
test edx, edx
je 0x632a75
lea eax, [ebp - 0x100]
push eax
call fcn.0041f750
mov ecx, eax
call fcn.00446e63
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x12c]
push edx
lea eax, [ebp - 0xe8]
push eax
call fcn.00450b2c
add esp, 8
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x130]
push ecx
mov ecx, dword [ebp - 0x104]
add ecx, 0x74
call fcn.00426000
lea ecx, [ebp - 0xe8]
call fcn.0041d7b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x100]
call fcn.0041d5b0
cmp dword [ebp + 8], 0
je 0x632aac
mov edx, dword [ebp - 0x104]
mov byte [edx], 1
lea eax, [ebp - 0x134]
push eax
push 0
mov ecx, dword [ebp - 0x104]
push ecx
push 0x6324f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [ebp - 0x104]
mov dword [edx + 8], eax
call fcn.0044f5fd
movzx eax, al
test eax, eax
je 0x632ad2
push edi
pop esp
push esp
pop edi
push esi
pop edx
push ecx
pop edx
push esi
pop edx
push esi
push eax
push esp
pop ebx
pop ebp
push ebx
pop ebx
push edx
push esp
pop ebp
push ebp
push edi
push ebp
pop esi
push ebx
pop ebx
call fcn.0044f4e9
movzx ecx, al
test ecx, ecx
je 0x632aef
pop ebp
push esi
pop eax
pop esp
push ecx
pop ebp
push ebx
pop ebp
pop ecx
pop edi
push edi
pop ecx
push ecx
pop eax
pop ebx
push esp
pop edx
call fcn.0044f1f2
movzx edx, al
test edx, edx
je 0x632b0d
pop ecx
push esp
pop ebp
push esi
pop esp
pop eax
pop edi
push ebp
push esp
pop edi
push ecx
pop ecx
push edx
push ecx
pop ecx
push eax
push esp
push ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004421e5
mov esp, ebp
pop ebp
ret 4