Function at 0x571f7c
Capabilities:
Suspend thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe74
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], ecx
mov esi, edx
mov ebx, eax
lea eax, [ebp - 0x15c]
mov edx, dword [0x4e773c]
call fcn.0040923c
xor eax, eax
push ebp
push 0x572309
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00572dd4
xor edx, edx
push ebp
push 0x5722c7
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [ebp - 0x160], esi
mov esi, ebx
test esi, esi
jne 0x571ffd
mov esi, dword [0x595c70]
mov esi, dword [esi]
cmp dword [ebp - 0x160], 0
jne 0x572025
push esi
push 0
push 0x4a
call dword [0x69c6f8]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jne 0x572025
call fcn.004488fc
call sub.kernel32.dll_GetCurrentThreadId_1
cmp esi, eax
jne 0x572042
mov ecx, 0x1c8
mov edx, 0x572324
mov eax, 0x572370
call fcn.00407a60
mov eax, dword [ebp - 0x160]
push eax
call sub.kernel32.dll_SuspendThread
xor edx, edx
push ebp
push 0x5722ad
push dword fs:[edx]
mov dword fs:[edx], esp
lea edx, [ebp - 0x164]
mov eax, 0xcc
call fcn.00413200
mov ebx, eax
xor edx, edx
push ebp
push 0x57228c
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, ebx
xor ecx, ecx
mov edx, 4
call fcn.004052b4
mov dword [ebx], 0x10003
push ebx
mov eax, dword [ebp - 0x160]
push eax
call sub.kernel32.dll_GetThreadContext
test eax, eax
je 0x572273
cmp dword [ebx + 0xb8], 0
je 0x572273
cmp dword [ebx + 0xc4], 0
je 0x572273
mov eax, dword [0x5956c0]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x595af4]
xor edx, edx
mov dword [eax], edx
call fcn.004d0214
lea ecx, [ebp - 0x174]
mov dl, 0x9c
call fcn.005086ec
mov ecx, dword [ebp - 0x174]
mov dl, 1
mov eax, dword [0x4ea34c]
call fcn.00446ddc
mov dword [ebp - 0x168], eax
xor edx, edx
push ebp
push 0x57226c
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x15c]
push eax
mov eax, dword [ebx + 0xb8]
mov ecx, ebx
mov edx, dword [ebp - 0x168]
call fcn.004e80a8
mov dword [ebp - 0x150], esi
push 0
push 0
call fcn.0057491c
lea edx, [ebp - 0x15c]
mov cl, 1
call fcn.00577cd8
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x57224b
mov eax, dword [ebp - 0x16c]
call fcn.0052d9c4
mov dl, 1
call fcn.00506fc8
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx eax, byte [0x572394]
push eax
push 0
push 1
push 1
push 0
push 0x80000000
push 0
push 0
mov eax, dword [0x59585c]
mov eax, dword [eax]
xor ecx, ecx
mov dl, 1
call dword [eax + 0x1c]
mov dword [ebp - 0x170], eax
xor edx, edx
push ebp
push 0x572229
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebx + 0xb8]
push eax
movzx eax, byte [0x572398]
push eax
push 1
push 0
push 0x80000000
push ebx
mov ecx, esi
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x170]
call fcn.0051e1fc
mov eax, dword [ebp - 0x16c]
call fcn.0052d9c4
push eax
push 1
push 0
call fcn.0057491c
mov eax, dword [eax]
mov ecx, dword [ebp - 0x170]
mov edx, esi
call fcn.00579c7c
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x16c]
call fcn.0052dcf8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x572230
mov eax, dword [ebp - 0x170]
xor edx, edx
mov dword [ebp - 0x170], edx
call fcn.004060e0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x572273
mov eax, dword [ebp - 0x168]
xor edx, edx
mov dword [ebp - 0x168], edx
call fcn.004060e0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x572293
mov eax, dword [ebp - 0x164]
call fcn.0040494c
ret