Function at 0x528780
Capabilities:
Execute anti-debugging instructions
Get thread local storage value

Disassembly:
sub esp, 0xc
push ebx
push ebp
mov ebp, dword [esp + 0x18]
push esi
push edi
inc dword [ebp + 0x94]
add ebp, 0x164
mov edi, dword [ebp + 4]
sub edi, 1
js 0x52881c
nop
mov eax, dword [ebp]
cmp dword [eax + edi*4], 0
je 0x528817
push dword [0x884c50]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov esi, dword [ebx + 4]
cmp esi, dword [ebx + 0xc]
jae 0x5287d8
mov dword [esi], str.TtislActCb
rdtsc
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x10]
lea eax, [esi + 0xc]
mov dword [esi + 4], ecx
mov dword [ebx + 4], eax
mov eax, dword [ebp]
push dword [esp + 0x24]
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
call dword [eax + 4]
push dword [0x884c50]
mov eax, dword [sym.imp.KERNEL32.dll_TlsGetValue]
call eax
mov ebx, eax
mov esi, dword [ebx + 4]
cmp esi, dword [ebx + 0xc]
jae 0x528817
mov dword [esi], 0x77f5ec
rdtsc
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x14]
lea eax, [esi + 0xc]
mov dword [esi + 4], ecx
mov dword [ebx + 4], eax
sub edi, 1
jns 0x5287a0
push ebp
call fcn.005291f0
mov eax, dword [esp + 0x28]
xor ebp, ebp
add esp, 4
mov dword [esp + 0x10], ebp
cmp dword [eax + 0x50], ebp
jle 0x528944
nop dword [eax + eax]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + ebp*4]
mov esi, dword [eax + 0x214]
test esi, esi
je 0x528932
movzx ebx, word [esi + 4]
sub ebx, 1
js 0x5288ed
mov eax, dword [esi]
cmp dword [eax + ebx*4], 0
je 0x5288e0
push dword [0x884c50]
mov eax, dword [sym.imp.KERNEL32.dll_TlsGetValue]
call eax
mov ebp, eax
mov edi, dword [ebp + 4]
cmp edi, dword [ebp + 0xc]
jae 0x528899
mov dword [edi], str.TtentActCb
rdtsc
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x14]
lea eax, [edi + 0xc]
mov dword [edi + 4], ecx
mov dword [ebp + 4], eax
mov eax, dword [esi]
mov ebp, dword [esp + 0x10]
mov ecx, dword [eax + ebx*4]
mov eax, dword [esp + 0x24]
mov edx, dword [ecx]
mov eax, dword [eax + 0x4c]
push dword [eax + ebp*4]
call dword [edx + 8]
push dword [0x884c50]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebp, eax
mov edi, dword [ebp + 4]
cmp edi, dword [ebp + 0xc]
jae 0x5288e0
mov dword [edi], 0x77f5ec
rdtsc
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
lea eax, [edi + 0xc]
mov dword [edi + 4], ecx
mov dword [ebp + 4], eax
sub ebx, 1
jns 0x528861
mov ebp, dword [esp + 0x10]
movzx edi, word [esi + 4]
sub edi, 1
js 0x528932
mov ebp, 0xffff
nop dword [eax + eax]
mov eax, dword [esi]
cmp dword [eax + edi*4], 0
jne 0x528929
add word [esi + 4], bp
mov eax, edi
movzx ecx, word [esi + 4]
cmp edi, ecx
jge 0x528929
mov ecx, dword [esi]
lea edx, [ecx + eax*4]
inc eax
mov ecx, dword [edx + 4]
mov dword [edx], ecx
movzx ecx, word [esi + 4]
cmp eax, ecx
jl 0x528916
sub edi, 1
jns 0x528900
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
inc ebp
mov dword [esp + 0x10], ebp
cmp ebp, dword [eax + 0x50]
jl 0x528840
mov ebx, dword [esp + 0x20]
add dword [ebx + 0x94], 0xffffffff
jne 0x52898a
cmp byte [ebx + 0x9c], 0
jne 0x52898a
cmp dword [ebx + 0x8c], 0
je 0x52896a
mov ecx, ebx
call fcn.00510540
cmp dword [ebx + 0xa4], 1
jne 0x52898a
cmp dword [ebx + 0x90], 0
je 0x52898a
pop edi
pop esi
pop ebp
mov ecx, ebx
pop ebx
add esp, 0xc
jmp fcn.00510560
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret