.text:00401AF3 push ecx ; lpNumberOfBytesWritten
.text:00401AF4 push 24h ; nSize
.text:00401AF6 push offset fns ; lpBuffer
.text:00401AFB push edx ; lpBaseAddress
.text:00401AFC push ebx ; hProcess
.text:00401AFD call ds:WriteProcessMemory
.text:00401B03 mov eax, [esi+0A0h]
.text:00401B09 pop ebp
.text:00401B0A mov g_child_4050ED, eax
.text:00401B0F mov ecx, [esi+9Ch]
.text:00401B15 pop edi
.text:00401B16 pop esi
.text:00401B17 mov g_child_40407A, ecx