Function at 0x52ec64
Capabilities:
Suspend thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe74
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], ecx
mov esi, edx
mov ebx, eax
lea eax, [ebp - 0x15c]
mov edx, dword [0x472b38]
call fcn.00405c60
xor eax, eax
push ebp
push 0x52efe1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0052f954
xor eax, eax
push ebp
push 0x52ef9f
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x160], esi
mov esi, ebx
test esi, esi
jne 0x52ece5
mov esi, dword [0x57b4a0]
mov esi, dword [esi]
cmp dword [ebp - 0x160], 0
jne 0x52ed0d
push esi
push 0
push 0x4a
call dword [0x680bbc]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jne 0x52ed0d
call fcn.0042dff0
call sub.kernel32.dll_GetCurrentThreadId_1
cmp esi, eax
jne 0x52ed2a
mov ecx, 0x1c8
mov edx, 0x52eff8
mov eax, 0x52f020
call fcn.00404f58
mov eax, dword [ebp - 0x160]
push eax
call sub.kernel32.dll_SuspendThread
xor eax, eax
push ebp
push 0x52ef85
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x164]
mov eax, 0xcc
call fcn.0040f8b0
mov ebx, eax
xor eax, eax
push ebp
push 0x52ef64
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
xor ecx, ecx
mov edx, 4
call fcn.004038b8
mov dword [ebx], 0x10003
push ebx
mov eax, dword [ebp - 0x160]
push eax
call sub.kernel32.dll_GetThreadContext
test eax, eax
je 0x52ef4b
cmp dword [ebx + 0xb8], 0
je 0x52ef4b
cmp dword [ebx + 0xc4], 0
je 0x52ef4b
mov eax, dword [0x57ad78]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x57b2b0]
xor edx, edx
mov dword [eax], edx
call fcn.00470a10
lea ecx, [ebp - 0x174]
mov dl, 0x9c
call fcn.004899d8
mov ecx, dword [ebp - 0x174]
mov dl, 1
mov eax, dword [0x473acc]
call fcn.0042c718
mov dword [ebp - 0x168], eax
xor eax, eax
push ebp
push 0x52ef44
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x15c]
push eax
mov eax, dword [ebx + 0xb8]
mov ecx, ebx
mov edx, dword [ebp - 0x168]
call fcn.00472d2c
mov dword [ebp - 0x150], esi
push 0
push 0
call fcn.00528f8c
lea edx, [ebp - 0x15c]
mov cl, 1
call fcn.0052b330
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x52ef2b
mov eax, dword [ebp - 0x16c]
call fcn.004bb180
mov dl, 1
call fcn.004889f0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx eax, byte [0x52f034]
push eax
push 0
push 1
push 1
push 0
push 0x80000000
push 0
push 0
mov eax, dword [0x57af8c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call dword [eax + 0x1c]
mov dword [ebp - 0x170], eax
xor eax, eax
push ebp
push 0x52ef09
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx + 0xb8]
push eax
movzx eax, byte [0x52f038]
push eax
push 1
push 0
push 0x80000000
push ebx
mov ecx, esi
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x170]
call fcn.004af1e8
mov eax, dword [ebp - 0x16c]
call fcn.004bb180
push eax
push 1
push 0
call fcn.00528f8c
mov eax, dword [eax]
mov ecx, dword [ebp - 0x170]
mov edx, esi
call fcn.0052d060
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x16c]
call fcn.004bb3c4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x52ef10
lea eax, [ebp - 0x170]
call fcn.0040f894
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x52ef4b
lea eax, [ebp - 0x168]
call fcn.0040f894
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x52ef6b
mov eax, dword [ebp - 0x164]
call fcn.004030b8
ret