Function at 0x522699
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x5e56f0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xa
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 9
ja case.0x52240f.3
mov edx, dword [ebp - 0x14]
jmp dword [edx*4 + 0x52276c]
push 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x2a0]
add ecx, 1
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x2a0], ecx
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x2a0], 3
jle 0x522496
mov ecx, dword [ebp - 0x10]
add ecx, 0x264
call fcn.004e9c60
push eax
call fcn.004e6050
add esp, 4
mov dword [ebp - 8], 0
push 1
lea ecx, [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0x27c
call fcn.004e9c60
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x24c
call fcn.004e9c60
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00535010
mov dword [ebp - 0x24], eax
jmp case.0x52240f.3
mov ecx, dword [ebp - 0x10]
add ecx, 0x264
call fcn.004e9c60
push eax
call fcn.004e5d40
add esp, 4
test eax, eax
je 0x5224c7
push 0
push 0x7d0
push 0xa
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542650
jmp 0x5224fd
mov dword [ebp - 0xc], 0
push 1
lea edx, [ebp - 0xc]
push edx
mov ecx, dword [ebp - 0x10]
add ecx, 0x27c
call fcn.004e9c60
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x24c
call fcn.004e9c60
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00535010
mov dword [ebp - 0x1c], eax
jmp case.0x52240f.3
push 0xb
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
jmp case.0x52240f.3
mov eax, dword [0x5e7bc4]
add eax, 1
mov dword [0x5e7bc4], eax
cmp dword [0x5e7bc4], 3
jl 0x522541
mov dword [0x5e7bc4], 0
push 0x11
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
jmp case.0x52240f.3
call fcn.004e7a60
movzx ecx, al
test ecx, ecx
je 0x5225b7
mov ecx, dword [ebp - 0x10]
call fcn.00525b40
mov dword [0x5e7bc8], 0
push 0x10
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
push 0
push 0
push 0x4d0
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.005420b0
push 0
push 0xea60
push 0x13
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542650
push 0
push 0x7530
push 0xc
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542650
mov ecx, dword [ebp - 0x10]
call fcn.005358a0
jmp 0x5225e6
mov edx, dword [0x5e7bc8]
add edx, 1
mov dword [0x5e7bc8], edx
cmp dword [0x5e7bc8], 0x14
jle 0x5225e6
mov dword [0x5e7bc8], 0
push 0x10
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
jmp case.0x52240f.3
push 0xc
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
mov eax, dword [ebp - 0x10]
movzx ecx, byte [eax + 0x2a6]
test ecx, ecx
jne 0x522624
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x2a6], 1
push 0
push 0
push 0x530
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.005420b0
push 0
push 0
push 0x4cf
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.005420b0
mov eax, dword [ebp - 0x10]
movzx ecx, byte [eax + 0x2a7]
test ecx, ecx
jne 0x52265a
push 0
push 0
push 0x532
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.005420b0
push 0
push 0
push 0x533
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.005420b0
jmp case.0x52240f.3
push 0xe
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
push 0
push 0
push 0x4ce
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.005420b0
jmp case.0x52240f.3
push 0xf
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.hours_later__run_update
call fcn.004e8f80
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x10]
call fcn.00527af0
push 0
push 0
mov edx, dword [ebp - 0x10]
push edx
push 0x52c820
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.0x52240f.3
push 0x12
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
mov ecx, dword [ebp - 0x10]
call fcn.00525b40
jmp case.0x52240f.3
push 0x581308
call fcn.004e5d40
add esp, 4
test eax, eax
je 0x52272a
mov dword [0x5e7bcc], 0
push 0x13
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
jmp case.0x52240f.3
mov ecx, dword [0x5e7bcc]
add ecx, 1
mov dword [0x5e7bcc], ecx
cmp dword [0x5e7bcc], 0x14
jle case.0x52240f.3
mov dword [0x5e7bcc], 0
push 0x13
mov ecx, dword [ebp - 0x10]
add ecx, 4
call fcn.00542090
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054caf9
mov esp, ebp
pop ebp
ret 0x10