Function at 0x447b80
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2d4
mov eax, dword [0x5402b0]
xor eax, ebp
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x550028], eax
je 0x447bb4
mov eax, 0x10dd
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c0985
mov esp, ebp
pop ebp
ret
cmp dword [0x55002c], 0
je 0x447bd5
call fcn.00447ab0
mov eax, dword [0x55002c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c0985
mov esp, ebp
pop ebp
ret
push ebx
push esi
mov esi, dword [0x550038]
push edi
test esi, esi
je 0x447ca0
cmp dword [esi + 4], 0
je 0x447c5c
mov eax, dword [esi + 0x10]
xor ebx, ebx
cmp byte [eax + 0x17], bl
jbe 0x447c34
jmp 0x447c00
mov edi, dword [esi + 0xc]
add edi, ebx
lea edx, [ebp - 0x2d4]
mov ecx, eax
mov dword [ebp - 0x2d4], 0
call fcn.00448100
cmp dword [ebp - 0x2d4], 0
jne 0x447c34
mov ecx, dword [esi + 0x10]
mov ebx, eax
sub ebx, ecx
movzx ecx, byte [ecx + 0x17]
cmp ebx, ecx
jl 0x447c00
mov edx, dword [esi + 0x10]
movzx eax, byte [edx + 0x17]
cmp ebx, eax
je 0x447c52
mov ecx, dword [esi + 8]
mov dword [0x55002c], 0xd
mov dword [0x550030], ecx
mov edx, dword [esi + 8]
mov eax, dword [esi + 0xc]
mov dword [edx], eax
jmp 0x447c96
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
mov ecx, dword [ecx + 0x1c]
lea edx, [eax + 5]
mov byte [eax], 0xe9
sub ecx, edx
inc eax
mov dword [eax], ecx
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + 0x18]
add eax, 4
cmp eax, ecx
jae 0x447c8e
sub ecx, eax
push ecx
push 0xcc
push eax
call fcn.004c5470
add esp, 0xc
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov dword [eax], ecx
mov esi, dword [esi]
test esi, esi
jne 0x447be6
mov ebx, dword [0x550034]
test ebx, ebx
je 0x447d4c
mov edi, dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebx + 4]
lea edx, [ebp - 0x2d0]
push edx
push eax
mov dword [ebp - 0x2d0], 0x10001
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x447d42
mov esi, dword [0x550038]
test esi, esi
je 0x447d42
mov eax, dword [ebp - 0x218]
cmp dword [esi + 4], 0
je 0x447d04
mov ecx, dword [esi + 0x10]
cmp eax, ecx
jb 0x447d3c
lea edx, [ecx + 4]
cmp eax, edx
jae 0x447d3c
sub eax, ecx
mov dword [ebp - 0x218], eax
add eax, dword [esi + 0xc]
jmp 0x447d23
mov ecx, dword [esi + 0xc]
cmp eax, ecx
jb 0x447d3c
mov edx, dword [esi + 0x10]
movzx edx, byte [edx + 0x17]
add edx, ecx
cmp eax, edx
jae 0x447d3c
sub eax, ecx
mov dword [ebp - 0x218], eax
add eax, dword [esi + 0x10]
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x218], eax
lea eax, [ebp - 0x2d0]
push eax
push ecx
call edi
mov eax, dword [ebp - 0x218]
mov esi, dword [esi]
test esi, esi
jne 0x447ce3
mov ebx, dword [ebx]
test ebx, ebx
jne 0x447cb4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, dword [0x550038]
mov edi, eax
test esi, esi
je 0x447dba
mov edi, edi
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
lea edx, [ebp - 0x2d4]
push edx
movzx edx, byte [ecx + 0x17]
push eax
mov eax, dword [esi + 0xc]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [esi + 0x10]
movzx edx, byte [ecx + 0x17]
mov eax, dword [esi + 0xc]
push edx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
cmp dword [esi + 4], 0
je 0x447da9
mov eax, dword [esi + 0x10]
test eax, eax
je 0x447da9
call fcn.00447930
mov dword [esi + 0x10], 0
mov ebx, dword [esi]
push esi
call fcn.004c097a
add esp, 4
mov esi, ebx
test ebx, ebx
jne 0x447d60
mov dword [0x550038], 0
call fcn.004476e0
mov esi, dword [0x550034]
test esi, esi
je 0x447df7
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
lea esp, [esp]
mov ecx, dword [esi + 4]
push ecx
call edi
mov ebx, dword [esi]
push esi
call fcn.004c097a
add esp, 4
mov esi, ebx
test ebx, ebx
jne 0x447de0
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
mov dword [0x550034], eax
mov dword [0x550028], eax
mov eax, dword [0x55002c]
xor ecx, ebp
pop ebx
call fcn.004c0985
mov esp, ebp
pop ebp
ret