Function at 0x30034815
Capabilities:
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x30022344]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x228], eax
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x24c], ebx
lea edi, [ebp - 0x248]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x21c
stosd dword es:[edi], eax
lea eax, [ebp - 0x220]
push ebx
push eax
mov dword [ebp - 0x224], ebx
call fcn.3006a130
add esp, 0xc
cmp dword [0x300cc88c], 5
mov dword [ebp - 0x22c], ebx
je 0x3003487a
mov dword [0x3008c778], ebx
xor eax, eax
lea edi, [ebp - 0x238]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.3002face
mov edi, dword [ebp - 0x228]
lea eax, [edi + 0x44]
push eax
lea eax, [edi + 0x40]
push eax
call fcn.3002faa0
cmp dword [0x300cc88c], 5
mov dword [0x300d2760], ebx
mov dword [0x300d2764], ebx
je 0x300348c6
mov dword [0x300d2780], ebx
lea eax, [esi + 0x1144]
mov dword [0x300d2788], eax
lea eax, [esi + 0x1160]
mov dword [0x300d278c], eax
lea eax, [esi + 0x116c]
mov dword [0x300d2790], eax
lea eax, [ebp - 0x238]
mov dword [0x300d2794], eax
mov eax, dword [esi + 0x111c]
mov dword [0x300d2798], eax
mov dword [0x300d279c], ebx
mov eax, dword [esi + 0x1110]
mov dword [0x300d27a8], eax
mov eax, dword [esi + 0x1138]
mov dword [0x300d27ac], eax
mov eax, dword [esi + 0x113c]
mov dword [0x300d27b0], eax
lea eax, [esi + 0x1120]
mov dword [0x300d27b4], edi
mov dword [0x300d27b8], eax
mov ecx, dword [esi + 0x1180]
mov dword [eax + 0x14], ecx
mov dword [0x300d27bc], ebx
test dword [esi + 0x1140], 0x10000000
mov dword [ebp - 0x23c], eax
je 0x30034a12
cmp dword [0x300cc88c], ebx
jne 0x300349c7
call fcn.3002fa82
test eax, eax
je 0x300349b4
test byte [0x300c0cc0], 0x20
jne 0x300349b4
push 0x300cadf8
push 0x104
push 0x300cae08
call fcn.3004273c
test byte [0x300c0ccc], 0x20
mov eax, 0x30004a00
jne 0x3003499b
mov eax, 0x300049e8
push 0xffffffffffffffff
push 0xffffffffffffffff
mov dword [esi + 0x113c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
jmp 0x300349c7
call fcn.3003dc3a
test eax, eax
je 0x300349c7
push 0x300017b8
call fcn.3003dcd4
lea eax, [ebp - 0x224]
push eax
call fcn.3002d8a4
push 1
lea eax, [ebp - 0x224]
push eax
call fcn.3002ec58
test eax, eax
je 0x30034a01
lea eax, [ebp - 0x224]
push eax
push esi
push edi
call fcn.3002f637
test eax, eax
je 0x30034a01
mov dword [0x300d2754], 1
lea eax, [ebp - 0x224]
push eax
call fcn.3002e9bb
jmp 0x30034c1e
call fcn.300321a9
test eax, eax
je 0x30034ab8
mov eax, dword [esi + 0x1104]
cmp eax, ebx
je 0x30034aa8
cmp word [eax], bx
je 0x30034aa8
mov dword [0x300bdf68], eax
mov dword [0x300d27bc], 1
cmp dword [esi + 0x111c], ebx
push ebx
je 0x30034a50
call fcn.30034278
jmp 0x30034c1e
push 0x3003b900
push dword [0x300cc544]
push 0x67
push dword [0x3008c480]
call fcn.3003535c
mov eax, dword [0x300d2780]
cmp eax, ebx
je 0x30034c1e
push 0x4e20
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x30034a91
push dword [0x300d2780]
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push dword [0x300d2780]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x300d2780], ebx
jmp 0x30034c1e
push ebx
push 0x30303030
call fcn.300436bb
jmp 0x30034c1e
push 0x1000
push ebx
push 0x300bea68
mov dword [0x300bdfbc], ebx
mov dword [0x300bdfe0], ebx
mov dword [0x300bdfe4], ebx
mov dword [0x300bdfe8], ebx
mov dword [0x300bdfec], ebx
mov dword [0x300bdff0], ebx
mov byte [0x300be918], bl
mov dword [0x300bea1c], ebx
mov dword [0x300bea2c], ebx
mov dword [0x300bea30], ebx
mov dword [0x300bea64], ebx
call fcn.3006a130
push 0x800
push ebx
push 0x300bfa70
mov dword [0x300bfa68], ebx
mov dword [0x300bfa6c], ebx
call fcn.3006a130
mov edi, 0x104
push edi
push ebx
push 0x300c0270
call fcn.3006a130
push 0x800
push ebx
push 0x300c0374
call fcn.3006a130
push edi
push ebx
push 0x300c0b74
call fcn.3006a130
add esp, 0x3c
lea eax, [esi + 0x800]
push edi
mov dword [0x300be010], eax
push 0x300be014
lea eax, [esi + 0x1000]
push eax
mov dword [0x300c0c78], ebx
mov dword [0x300c0c80], ebx
mov dword [0x300be00c], esi
call fcn.3005b52e
cmp dword [0x300cc88c], 5
mov eax, dword [esi + 0x1108]
mov dword [0x300bea34], eax
mov eax, dword [esi + 0x110c]
mov dword [0x300bea38], eax
mov eax, dword [esi + 0x1114]
mov dword [0x300c0c84], eax
jne 0x30034bb9
mov eax, dword [0x300d27a0]
mov dword [0x300d2764], eax
cmp dword [esi + 0x111c], ebx
push ebx
je 0x30034bc9
call fcn.30034122
jmp 0x30034c18
push 0x3003b900
push dword [0x300cc544]
push 0x67
push dword [0x3008c480]
call fcn.3003535c
mov eax, dword [0x300d2780]
cmp eax, ebx
je 0x30034c18
push 0x4e20
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x30034c06
push dword [0x300d2780]
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push dword [0x300d2780]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x300d2780], ebx
mov edi, dword [ebp - 0x228]
xor eax, eax
inc eax
cmp dword [ebp - 0x230], ebx
je 0x30034c34
mov dword [esi + 0x1118], eax
mov dword [0x300d2754], eax
mov ecx, dword [esi + 0x1110]
cmp ecx, ebx
je 0x30034c59
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x248], eax
push 0x10
lea eax, [ebp - 0x24c]
push eax
push ecx
call fcn.3004188c
call fcn.300322cf
push ebx
push ebx
call dword [0x300bdcf0]
test eax, eax
jl 0x30034c74
mov dword [ebp - 0x22c], 1
cmp dword [0x300cc88c], 5
je 0x30034c89
cmp dword [esi + 0x111c], ebx
jne 0x30034c89
xor eax, eax
jmp 0x30034c8c
xor eax, eax
inc eax
push eax
push ebx
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x23c]
call fcn.30039b23
cmp dword [ebp - 0x22c], ebx
je 0x30034cae
call dword [0x300bdcec]
mov eax, dword [edi + 0x20]
cmp eax, ebx
je 0x30034cbb
push eax
call fcn.30043266
mov eax, dword [edi]
cmp eax, ebx
je 0x30034cc7
push eax
call fcn.30043266
mov eax, dword [edi + 4]
cmp eax, ebx
je 0x30034cd4
push eax
call fcn.30043266
mov eax, dword [edi + 8]
cmp eax, ebx
je 0x30034ce1
push eax
call fcn.30043266
mov eax, dword [edi + 0xc]
cmp eax, ebx
je 0x30034cee
push eax
call fcn.30043266
mov eax, dword [edi + 0x10]
cmp eax, ebx
je 0x30034cfb
push eax
call fcn.30043266
mov edi, dword [edi + 0x38]
cmp edi, ebx
je 0x30034d08
push edi
call fcn.30043266
mov eax, dword [ebp - 0x234]
cmp eax, dword [0x3008c5b4]
je 0x30034d20
cmp eax, ebx
je 0x30034d20
push eax
call fcn.30043266
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.30069876
leave
ret 8