Function at 0x59e5a0
Capabilities:
Suspend thread

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5d75db
push eax
mov dword fs:[0], esp
sub esp, 0x16c
push ebx
push ebp
push esi
push edi
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
push 0x40
call dword [sym.imp.USER32.dll_MessageBeep]
push 0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0xe17630
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
mov eax, dword [0xe17754]
mov esi, dword [eax + 4]
test esi, esi
je 0x59e619
mov ebx, dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x59e610
cmp ecx, edi
je 0x59e610
mov eax, dword [eax + 8]
push eax
call ebx
mov eax, esi
mov esi, dword [esi + 4]
test esi, esi
jne 0x59e5fc
push 0xe17630
mov dword [esp + 0x188], 0xffffffff
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18c]
lea edx, [esp + 0x1c]
mov ecx, dword [eax]
mov esi, dword [eax + 4]
push edx
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x1c], ecx
and ecx, 0xffffffe0
mov dword [esp + 0x14], ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edi, 0x3e8
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x26]
mov edx, dword [esp + 0x24]
and eax, 0xffff
and ecx, 0xffff
push eax
mov eax, dword [esp + 0x26]
push ecx
mov ecx, dword [esp + 0x26]
and edx, 0xffff
push edx
mov edx, dword [esp + 0x28]
and eax, 0xffff
and ecx, 0xffff
push eax
push ecx
mov ecx, dword [0xe1788c]
and edx, 0xffff
push edx
mov eax, ecx
xor edx, edx
div edi
mov eax, 0x10624dd3
push edx
mul ecx
shr edx, 6
push edx
push 0xe17648
push str._s_debug_report____build__d._04d_date__04d__02d__02d_time__02d:_02d:_02d_n_______________________________________________________________n
push str.DebugInfo.txt
call fcn.004160d0
mov eax, dword [esi + 0xb0]
push eax
push str.EAX___08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov ecx, dword [esi + 0xb0]
mov ebp, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
add esp, 0x38
sub ecx, 0x80
push 0x100
push ecx
call ebp
test eax, eax
jne 0x59e772
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59e733
mov edx, dword [esi + 0xb0]
mov ecx, dword [esi + 0x98]
lea eax, [edx + edi - 0x80]
push eax
push ecx
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov edx, dword [esi + 0xb0]
xor eax, eax
mov al, byte [edx + edi - 0x80]
push eax
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59e769
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59e708
mov ecx, dword [esi + 0xa4]
push ecx
push str.EBX___08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov edx, dword [esi + 0xa4]
add esp, 0xc
sub edx, 0x80
push 0x100
push edx
call ebp
test eax, eax
jne 0x59e80f
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59e7d0
mov eax, dword [esi + 0xa4]
mov edx, dword [esi + 0x98]
lea ecx, [eax + edi - 0x80]
push ecx
push edx
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov eax, dword [esi + 0xa4]
xor ecx, ecx
mov cl, byte [eax + edi - 0x80]
push ecx
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59e806
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59e7a5
mov edx, dword [esi + 0xac]
push edx
push str.ECX___08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov eax, dword [esi + 0xac]
add esp, 0xc
sub eax, 0x80
push 0x100
push eax
call ebp
test eax, eax
jne 0x59e8ab
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59e86c
mov ecx, dword [esi + 0xac]
mov eax, dword [esi + 0x98]
lea edx, [ecx + edi - 0x80]
push edx
push eax
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov ecx, dword [esi + 0xac]
xor edx, edx
mov dl, byte [ecx + edi - 0x80]
push edx
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59e8a2
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59e841
mov eax, dword [esi + 0xa8]
push eax
push str.EDX___08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov ecx, dword [esi + 0xa8]
add esp, 0xc
sub ecx, 0x80
push 0x100
push ecx
call ebp
test eax, eax
jne 0x59e948
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59e909
mov edx, dword [esi + 0xa8]
mov ecx, dword [esi + 0x98]
lea eax, [edx + edi - 0x80]
push eax
push ecx
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov edx, dword [esi + 0xa8]
xor eax, eax
mov al, byte [edx + edi - 0x80]
push eax
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59e93f
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59e8de
mov ecx, dword [esi + 0xb4]
push ecx
push str.EBP___08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov edx, dword [esi + 0xb4]
add esp, 0xc
sub edx, 0x80
push 0x100
push edx
call ebp
test eax, eax
jne 0x59e9e5
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59e9a6
mov eax, dword [esi + 0xb4]
mov edx, dword [esi + 0x98]
lea ecx, [eax + edi - 0x80]
push ecx
push edx
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov eax, dword [esi + 0xb4]
xor ecx, ecx
mov cl, byte [eax + edi - 0x80]
push ecx
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59e9dc
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59e97b
mov edx, dword [esi + 0xa0]
mov eax, dword [esi + 0x98]
push edx
push eax
push str.DS:ESI___04x:_08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov ecx, dword [esi + 0xa0]
add esp, 0x10
sub ecx, 0x80
push 0x100
push ecx
call ebp
test eax, eax
jne 0x59ea89
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59ea4a
mov edx, dword [esi + 0xa0]
mov ecx, dword [esi + 0x98]
lea eax, [edx + edi - 0x80]
push eax
push ecx
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov edx, dword [esi + 0xa0]
xor eax, eax
mov al, byte [edx + edi - 0x80]
push eax
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59ea80
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59ea1f
mov ecx, dword [esi + 0x9c]
mov edx, dword [esi + 0x94]
push ecx
push edx
push str.ES:EDI___04x:_08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov eax, dword [esi + 0x9c]
add esp, 0x10
sub eax, 0x80
push 0x100
push eax
call ebp
test eax, eax
jne 0x59eb2c
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59eaed
mov ecx, dword [esi + 0x9c]
mov eax, dword [esi + 0x94]
lea edx, [ecx + edi - 0x80]
push edx
push eax
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov ecx, dword [esi + 0x9c]
xor edx, edx
mov dl, byte [ecx + edi - 0x80]
push edx
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59eb23
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59eac2
mov eax, dword [esi + 0xc4]
mov ecx, dword [esi + 0xc8]
push eax
push ecx
push str.SS:ESP___04x:_08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov edx, dword [esi + 0xc4]
add esp, 0x10
sub edx, 0x80
push 0x100
push edx
call ebp
test eax, eax
jne 0x59ebd0
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59eb91
mov eax, dword [esi + 0xc4]
mov edx, dword [esi + 0xc8]
lea ecx, [edi + eax - 0x80]
push ecx
push edx
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov eax, dword [esi + 0xc4]
xor ecx, ecx
mov cl, byte [edi + eax - 0x80]
push ecx
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59ebc7
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59eb66
mov edx, dword [esi + 0xb8]
mov eax, dword [esi + 0xbc]
push edx
push eax
push str.CS:EIP___04x:_08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov ecx, dword [esi + 0xb8]
add esp, 0x10
sub ecx, 0x80
push 0x100
push ecx
call ebp
test eax, eax
jne 0x59ec74
xor edi, edi
mov ebx, edi
and ebx, 0xf
jne 0x59ec35
mov edx, dword [esi + 0xb8]
mov ecx, dword [esi + 0xbc]
lea eax, [edx + edi - 0x80]
push eax
push ecx
push str._04x:_08lx
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0x10
mov edx, dword [esi + 0xb8]
xor eax, eax
mov al, byte [edx + edi - 0x80]
push eax
push str.__02x
push str.DebugInfo.txt
call fcn.004160d0
add esp, 0xc
cmp ebx, 0xf
jne 0x59ec6b
push 0x5e094c
push str.DebugInfo.txt
call fcn.004160d0
add esp, 8
inc edi
cmp edi, 0x100
jl 0x59ec0a
mov ecx, dword [esi + 0x90]
push ecx
push str.FS___04x_n
push str.DebugInfo.txt
call fcn.004160d0
mov edx, dword [esi + 0x8c]
push edx
push str.GS___04x_n
push str.DebugInfo.txt
call fcn.004160d0
mov eax, dword [esi + 0xc0]
push eax
push str.EFLAGS___08lx_n
push str.DebugInfo.txt
call fcn.004160d0
mov ecx, 0x44
xor eax, eax
mov edi, 0xe17760
add esp, 0x24
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x10]
mov eax, 0x80
cmp ecx, eax
jbe 0x59ecdc
sub ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x59ece4
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebp, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
push 0x100
push 0xe17760
push ecx
push edx
call ebp
test eax, eax
jne 0x59ed3e
mov ebx, dword [esp + 0x10]
xor esi, esi
sub ebx, 0xe17760
mov ecx, dword [esp + 0x14]
lea edi, [esi + 0xe17760]
push 0
push 0x20
lea eax, [edi + ebx]
push edi
push eax
push ecx
call ebp
test eax, eax
jne 0x59ed33
mov ecx, 8
rep stosd dword es:[edi], eax
add esi, 0x20
cmp esi, 0x100
jl 0x59ed12
mov eax, dword [esp + 0x10]
mov edx, 0xe17760
sub edx, eax
push eax
push edx
push 0x100
push 0xe17760
lea ecx, [esp + 0x3c]
call fcn.005a1230
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x2c]
mov dword [0xe17870], eax
mov eax, dword [esp + 0x170]
test eax, eax
mov dword [esp + 0x184], 2
mov dword [esp + 0x3c], ecx
je 0x59ed95
push eax
push 0xe174d0
call fcn.0059ee90
add esp, 8
jmp 0x59edbb
push 0xe17510
push 0x110
push 0xe17760
call fcn.0059ee20
push 0xe17760
push 0xe174d0
call fcn.0059f610
add esp, 0x14
mov esi, dword [esp + 0x18c]
mov dword [esp + 0x150], 0x59e570
push esi
call fcn.0059f860
push 0xe174d0
call fcn.0059f5e0
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_UnhandledExceptionFilter]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x184], 0xffffffff
call fcn.005a1330
mov ecx, dword [esp + 0x17c]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x178
ret 4