Function at 0x45f2b0
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x92c
mov eax, dword [0x4e4150]
xor eax, ebp
mov dword [ebp - 0xac], eax
push edi
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov ecx, 0xb3
xor eax, eax
lea edi, [ebp - 0x380]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x380], 0x10007
lea ecx, [ebp - 0x380]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push str._r_nRegisters:_r_n
mov eax, dword [ebp + 8]
push eax
call fcn.0045e040
add esp, 8
mov ecx, dword [ebp - 0x2c0]
push ecx
mov edx, dword [ebp - 0x2c8]
push edx
mov eax, dword [ebp - 0x2c4]
push eax
mov ecx, dword [ebp - 0x2d0]
push ecx
push str.EAX_08x_CS_04x_EIP_08x_EFLGS_08x_r_n
mov edx, dword [ebp + 8]
push edx
call fcn.0045e040
add esp, 0x18
mov eax, dword [ebp - 0x2cc]
push eax
mov ecx, dword [ebp - 0x2bc]
push ecx
mov edx, dword [ebp - 0x2b8]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
push str.EBX_08x_SS_04x_ESP_08x_EBP_08x_r_n
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045e040
add esp, 0x18
mov edx, dword [ebp - 0x2f0]
push edx
mov eax, dword [ebp - 0x2e0]
push eax
mov ecx, dword [ebp - 0x2e8]
push ecx
mov edx, dword [ebp - 0x2d4]
push edx
push str.ECX_08x_DS_04x_ESI_08x_FS_04x_r_n
mov eax, dword [ebp + 8]
push eax
call fcn.0045e040
add esp, 0x18
mov ecx, dword [ebp - 0x2f4]
push ecx
mov edx, dword [ebp - 0x2e4]
push edx
mov eax, dword [ebp - 0x2ec]
push eax
mov ecx, dword [ebp - 0x2d8]
push ecx
push str.EDX_08x_ES_04x_EDI_08x_GS_04x_r_n
mov edx, dword [ebp + 8]
push edx
call fcn.0045e040
add esp, 0x18
push str._r_nStack_dump:_r_n
mov eax, dword [ebp + 8]
push eax
call fcn.0045e040
add esp, 8
mov ecx, dword [ebp - 0x2bc]
and ecx, 0xffffffe0
mov dword [0x4e92bc], ecx
mov dword [0x4e92b8], 0x80000000
mov edx, dword [0x4e92bc]
add edx, 0xa0
push edx
mov eax, dword [0x4e92bc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045e5e0
add esp, 0xc
push str._r_nCall_Stack:_r_n
mov edx, dword [ebp + 8]
push edx
call fcn.0045e040
add esp, 8
mov ecx, 0x29
xor eax, eax
lea edi, [ebp - 0xa8]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa0], 3
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x7c], 3
mov edx, dword [ebp - 0x2cc]
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x88], 3
mov eax, 1
test eax, eax
je 0x45f699
push 0
mov ecx, dword [0x4c19d4]
push ecx
mov edx, dword [0x4c19c0]
push edx
push 0
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
push 0x14c
call dword [0x4c19bc]
test eax, eax
jne 0x45f4b4
jmp 0x45f699
cmp dword [ebp - 0x90], 0
jne 0x45f4c2
jmp 0x45f699
mov eax, dword [ebp - 0x90]
add eax, 0xc
push eax
mov ecx, dword [ebp - 0x90]
sub ecx, 0x10
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0045e5e0
add esp, 0xc
mov eax, dword [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x90]
push ecx
push str._r_n_08x___08x
mov edx, dword [ebp + 8]
push edx
call fcn.0045e040
add esp, 0x10
lea eax, [ebp - 0x5e0]
mov dword [ebp - 0x7e4], eax
mov ecx, dword [ebp - 0x7e4]
mov dword [ecx], 0x258
mov edx, dword [ebp - 0x7e4]
mov dword [edx + 0x50], 0x200
mov byte [ebp - 0x7e0], 0
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0x388]
push ecx
mov edx, dword [ebp - 0xa8]
xor eax, eax
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [0x4c19b8]
test eax, eax
je 0x45f61a
mov ecx, dword [ebp - 0x384]
push ecx
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x7e4]
add eax, 0x54
push eax
push str._s__x_r_n
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045e040
add esp, 0x14
push 0
push 0x200
lea edx, [ebp - 0x7e0]
push edx
mov eax, dword [ebp - 0x7e4]
add eax, 0x54
push eax
call dword [0x4c19b4]
mov dword [ebp - 0x804], 0
mov dword [ebp - 0x800], 0x18
lea ecx, [ebp - 0x800]
push ecx
lea edx, [ebp - 0x804]
push edx
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [0x4c19b0]
test eax, eax
je 0x45f61a
lea edx, [ebp - 0x7e0]
push edx
mov eax, dword [ebp - 0x7f8]
push eax
mov ecx, dword [ebp - 0x7f4]
push ecx
push str._s__d__s_r_n
mov edx, dword [ebp + 8]
push edx
call fcn.0045e040
add esp, 0x14
jmp 0x45f673
mov byte [ebp - 0x910], 0
push 0x1c
lea eax, [ebp - 0x92c]
push eax
mov ecx, dword [ebp - 0xa8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
test eax, eax
je 0x45f654
push 0x104
lea edx, [ebp - 0x910]
push edx
mov eax, dword [ebp - 0x928]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x7e0]
push ecx
lea edx, [ebp - 0x910]
push edx
push str._s__s_r_n
mov eax, dword [ebp + 8]
push eax
call fcn.0045e040
add esp, 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
push str.Params:____08x__08x__08x__08x_r_n
mov edx, dword [ebp + 8]
push edx
call fcn.0045e040
add esp, 0x18
jmp 0x45f468
push 0x4cb5dc
mov eax, dword [ebp + 8]
push eax
call fcn.0045e040
add esp, 8
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
pop edi
mov ecx, dword [ebp - 0xac]
xor ecx, ebp
call fcn.0047f5bc
mov esp, ebp
pop ebp
ret