Function at 0x41d26c
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x7c
nop
mov esi, 0x446060
lea edi, [ebp - 0x4a]
lea ebx, [ebp - 0x4a]
mov ecx, 0x2d
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446398]
test al, al
jne 0x41d2c7
mov dword [esp], 0x446398
call fcn.004420b0
test eax, eax
je 0x41d2c7
mov dword [esp], ebx
mov ecx, 0x448240
call fcn.0042f1b8
push eax
mov dword [esp], 0x442a1c
call fcn.00401400
mov dword [esp], 0x446398
call fcn.00442180
mov ecx, 0x448240
call fcn.0042f178
mov dword [esp + 0xc], 0x42
mov dword [esp + 8], 0x3511
mov dword [esp + 4], 0xd0
mov dword [esp], 0x448240
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x4462f8]
test al, al
jne 0x41d33c
mov dword [esp], 0x4462f8
call fcn.004420b0
test eax, eax
je 0x41d33c
mov dword [esp], ebx
mov ecx, 0x447e20
call fcn.0042f160
push eax
mov dword [esp], 0x442a20
call fcn.00401400
mov dword [esp], 0x4462f8
call fcn.00442180
mov ecx, 0x447e20
call fcn.0042f120
mov dword [esp], 0x447e20
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x41d363
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446350]
test al, al
jne 0x41d3b0
mov dword [esp], 0x446350
call fcn.004420b0
test eax, eax
je 0x41d3b0
mov dword [esp], ebx
mov ecx, 0x448060
call fcn.0042f224
push eax
mov dword [esp], 0x442a24
call fcn.00401400
mov dword [esp], 0x446350
call fcn.00442180
mov ecx, 0x448060
xor edi, edi
call fcn.0042f1e4
mov dword [esp + 0xc], 0x104
mov dword [esp + 8], 0x6b26
mov dword [esp + 4], 0xd2
mov dword [esp], 0x448060
call fcn.0042c220
lea eax, [ebp + 0x14]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 4
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x5c], eax
add eax, 8
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
sub esp, 0x14
nop
mov esi, 0x446060
lea edi, [ebp - 0x4a]
lea ebx, [ebp - 0x4a]
mov ecx, 0x2d
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446358]
test al, al
jne 0x41d469
mov dword [esp], 0x446358
call fcn.004420b0
test eax, eax
je 0x41d469
mov dword [esp], ebx
mov ecx, 0x4480a0
call fcn.0042f1b8
push esi
mov dword [esp], 0x442a28
call fcn.00401400
mov dword [esp], 0x446358
call fcn.00442180
mov ecx, 0x4480a0
call fcn.0042f178
mov dword [esp + 0xc], 0x44
mov dword [esp + 8], 0x37bf
mov dword [esp + 4], 0xd4
mov dword [esp], 0x4480a0
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446360]
test al, al
jne 0x41d4de
mov dword [esp], 0x446360
call fcn.004420b0
test eax, eax
je 0x41d4de
mov dword [esp], ebx
mov ecx, 0x4480e0
call fcn.0042f160
push ecx
mov dword [esp], 0x442a2c
call fcn.00401400
mov dword [esp], 0x446360
call fcn.00442180
mov ecx, 0x4480e0
call fcn.0042f120
mov dword [esp], 0x4480e0
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x41d505
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446368]
test al, al
jne 0x41d552
mov dword [esp], 0x446368
call fcn.004420b0
test eax, eax
je 0x41d552
mov dword [esp], ebx
mov ecx, 0x448100
call fcn.0042f224
push edx
mov dword [esp], 0x442a30
call fcn.00401400
mov dword [esp], 0x446368
call fcn.00442180
mov ecx, 0x448100
call fcn.0042f1e4
mov dword [esp + 0xc], 0x10c
mov dword [esp + 8], 0x708a
mov dword [esp + 4], 0xd6
mov dword [esp], 0x448100
call fcn.0042c220
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
add eax, dword [ebp + 0x14]
mov dword [edx + 0xb0], eax
nop
mov esi, 0x446060
mov ecx, 0x2d
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446370]
test al, al
jne 0x41d5e0
mov dword [esp], 0x446370
call fcn.004420b0
test eax, eax
je 0x41d5e0
mov dword [esp], ebx
mov ecx, 0x448140
call fcn.0042f1b8
push eax
mov dword [esp], 0x442a34
call fcn.00401400
mov dword [esp], 0x446370
call fcn.00442180
mov ecx, 0x448140
call fcn.0042f178
mov dword [esp + 0xc], 0x46
mov dword [esp + 8], 0x3a7d
mov dword [esp + 4], 0xd8
mov dword [esp], 0x448140
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446378]
test al, al
jne 0x41d655
mov dword [esp], 0x446378
call fcn.004420b0
test eax, eax
je 0x41d655
mov dword [esp], ebx
mov ecx, 0x448180
call fcn.0042f160
push eax
mov dword [esp], 0x442a38
call fcn.00401400
mov dword [esp], 0x446378
call fcn.00442180
mov ecx, 0x448180
call fcn.0042f120
mov dword [esp], 0x448180
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x41d67c
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446380]
test al, al
jne 0x41d6c9
mov dword [esp], 0x446380
call fcn.004420b0
test eax, eax
je 0x41d6c9
mov dword [esp], ebx
mov ecx, 0x4481a0
call fcn.0042f224
push eax
mov dword [esp], 0x442a3c
call fcn.00401400
mov dword [esp], 0x446380
call fcn.00442180
mov ecx, 0x4481a0
call fcn.0042f1e4
mov dword [esp + 0xc], 0x114
mov dword [esp + 8], 0x760e
mov dword [esp + 4], 0xda
mov dword [esp], 0x4481a0
call fcn.0042c220
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
push eax
push eax
nop
mov esi, 0x446060
mov ecx, 0x2d
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446388]
test al, al
jne 0x41d75d
mov dword [esp], 0x446388
call fcn.004420b0
test eax, eax
je 0x41d75d
mov dword [esp], ebx
mov ecx, 0x4481e0
call fcn.0042f1b8
push eax
mov dword [esp], 0x442a40
call fcn.00401400
mov dword [esp], 0x446388
call fcn.00442180
mov ecx, 0x4481e0
call fcn.0042f178
mov dword [esp + 0xc], 0x48
mov dword [esp + 8], 0x3d4b
mov dword [esp + 4], 0xdc
mov dword [esp], 0x4481e0
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446390]
test al, al
jne 0x41d7d2
mov dword [esp], 0x446390
call fcn.004420b0
test eax, eax
je 0x41d7d2
mov dword [esp], ebx
mov ecx, 0x448220
call fcn.0042f160
push edi
mov dword [esp], 0x442a44
call fcn.00401400
mov dword [esp], 0x446390
call fcn.00442180
mov ecx, 0x448220
call fcn.0042f120
mov dword [esp], 0x448220
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x41d7f9
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446300]
test al, al
jne 0x41d846
mov dword [esp], 0x446300
call fcn.004420b0
test eax, eax
je 0x41d846
mov dword [esp], ebx
mov ecx, 0x447e40
call fcn.0042f224
push esi
mov dword [esp], 0x442a48
call fcn.00401400
mov dword [esp], 0x446300
call fcn.00442180
mov ecx, 0x447e40
call fcn.0042f1e4
mov dword [esp + 0xc], 0x11c
mov dword [esp + 8], 0x7bb2
mov dword [esp + 4], 0xde
mov dword [esp], 0x447e40
call fcn.0042c220
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ecx
nop
mov esi, 0x446060
mov ecx, 0x2d
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446308]
test al, al
jne 0x41d8d2
mov dword [esp], 0x446308
call fcn.004420b0
test eax, eax
je 0x41d8d2
mov dword [esp], ebx
mov ecx, 0x447e80
call fcn.0042f1b8
push edx
mov dword [esp], 0x442a4c
call fcn.00401400
mov dword [esp], 0x446308
call fcn.00442180
mov ecx, 0x447e80
call fcn.0042f178
mov dword [esp + 0xc], 0x4a
mov dword [esp + 8], 0x4029
mov dword [esp + 4], 0xe0
mov dword [esp], 0x447e80
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446310]
test al, al
jne 0x41d947
mov dword [esp], 0x446310
call fcn.004420b0
test eax, eax
je 0x41d947
mov dword [esp], ebx
mov ecx, 0x447ec0
call fcn.0042f160
push eax
mov dword [esp], 0x442a50
call fcn.00401400
mov dword [esp], 0x446310
call fcn.00442180
mov ecx, 0x447ec0
call fcn.0042f120
mov dword [esp], 0x447ec0
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x41d96e
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446318]
test al, al
jne 0x41d9bb
mov dword [esp], 0x446318
call fcn.004420b0
test eax, eax
je 0x41d9bb
mov dword [esp], ebx
mov ecx, 0x447ee0
call fcn.0042f224
push eax
mov dword [esp], 0x442a54
call fcn.00401400
mov dword [esp], 0x446318
call fcn.00442180
mov ecx, 0x447ee0
call fcn.0042f1e4
mov dword [esp + 0xc], 0x124
mov dword [esp + 8], 0x8176
mov dword [esp + 4], 0xe2
mov dword [esp], 0x447ee0
call fcn.0042c220
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], eax
call eax
push eax
nop
mov esi, 0x446060
mov ecx, 0x2d
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446320]
test al, al
jne 0x41da4b
mov dword [esp], 0x446320
call fcn.004420b0
test eax, eax
je 0x41da4b
mov dword [esp], ebx
mov ecx, 0x447f20
call fcn.0042f1b8
push eax
mov dword [esp], 0x442a58
call fcn.00401400
mov dword [esp], 0x446320
call fcn.00442180
mov ecx, 0x447f20
call fcn.0042f178
mov dword [esp + 0xc], 0x4c
mov dword [esp + 8], 0x4317
mov dword [esp + 4], 0xe4
mov dword [esp], 0x447f20
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446328]
test al, al
jne 0x41dac0
mov dword [esp], 0x446328
call fcn.004420b0
test eax, eax
je 0x41dac0
mov dword [esp], ebx
mov ecx, 0x447f60
call fcn.0042f160
push eax
mov dword [esp], 0x442a5c
call fcn.00401400
mov dword [esp], 0x446328
call fcn.00442180
mov ecx, 0x447f60
call fcn.0042f120
mov dword [esp], 0x447f60
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x41dae7
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446330]
test al, al
jne 0x41db34
mov dword [esp], 0x446330
call fcn.004420b0
test eax, eax
je 0x41db34
mov dword [esp], ebx
mov ecx, 0x447f80
call fcn.0042f224
push edi
mov dword [esp], 0x442a60
call fcn.00401400
mov dword [esp], 0x446330
call fcn.00442180
mov ecx, 0x447f80
call fcn.0042f1e4
mov dword [esp + 0xc], 0x12c
mov dword [esp + 8], 0x875a
mov dword [esp + 4], 0xe6
mov dword [esp], 0x447f80
call fcn.0042c220
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [ebp - 0x5c]
call eax
push esi
nop
mov esi, 0x446060
mov ecx, 0x2d
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446338]
test al, al
jne 0x41dbbe
mov dword [esp], 0x446338
call fcn.004420b0
test eax, eax
je 0x41dbbe
mov dword [esp], ebx
mov ecx, 0x447fc0
call fcn.0042f1b8
push ecx
mov dword [esp], 0x442a68
call fcn.00401400
mov dword [esp], 0x446338
call fcn.00442180
mov ecx, 0x447fc0
call fcn.0042f178
mov dword [esp + 0xc], 0x4e
mov dword [esp + 8], 0x4615
mov dword [esp + 4], 0xe8
mov dword [esp], 0x447fc0
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446340]
test al, al
jne 0x41dc33
mov dword [esp], 0x446340
call fcn.004420b0
test eax, eax
je 0x41dc33
mov dword [esp], ebx
mov ecx, 0x448000
call fcn.0042f160
push edx
mov dword [esp], 0x442a6c
call fcn.00401400
mov dword [esp], 0x446340
call fcn.00442180
mov ecx, 0x448000
call fcn.0042f120
mov dword [esp], 0x448000
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x41dc5a
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446348]
test al, al
jne 0x41dca7
mov dword [esp], 0x446348
call fcn.004420b0
test eax, eax
je 0x41dca7
mov dword [esp], ebx
mov ecx, 0x448020
call fcn.0042f224
push eax
mov dword [esp], 0x442a70
call fcn.00401400
mov dword [esp], 0x446348
call fcn.00442180
mov ecx, 0x448020
call fcn.0042f1e4
mov dword [esp + 0xc], 0x134
mov dword [esp + 8], 0x8d5e
mov dword [esp + 4], 0xea
mov dword [esp], 0x448020
call fcn.0042c220
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret