Function at 0x434bb0
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push ebx
push esi
mov esi, dword [ebp + 0xc]
xor eax, eax
push ebp
push 0x434f67
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
mov eax, esi
add eax, 0xffffff00
cmp eax, 0x1c
ja case.default.0x434bdc
jmp dword [eax*4 + 0x434be3]
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0x14]
call fcn.00433de0
mov ebx, eax
jmp 0x434f4c
call fcn.0042cc38
jmp 0x434f4c
mov eax, dword [0x43b8f0]
mov eax, dword [eax]
push eax
call sub.KERNEL32.DLL_SuspendThread
jmp 0x434f4c
mov eax, dword [0x43b8f0]
mov eax, dword [eax]
push eax
call sub.KERNEL32.DLL_ResumeThread
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00433f4c
mov ebx, eax
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
call fcn.0042b3ac
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00433fec
mov ebx, eax
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00434090
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0x14]
call fcn.00434104
mov ebx, eax
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
call fcn.00434298
mov ebx, eax
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0x14]
call fcn.004342cc
mov ebx, eax
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
mov edx, dword [ebp + 0x14]
call fcn.00434304
mov ebx, eax
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
call fcn.0042cbf4
mov ebx, eax
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
call fcn.0042cc10
mov ebx, eax
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00434458
mov ebx, eax
jmp 0x434f4c
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00434584
mov ebx, eax
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00434704
mov ebx, eax
jmp 0x434f4c
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.004348b0
mov ebx, eax
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00434958
mov ebx, eax
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.004349f0
mov ebx, eax
jmp 0x434f4c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
call fcn.00434ae0
mov ebx, eax
jmp 0x434f4c
mov eax, dword [ebp + 0x10]
call fcn.0042c48c
mov ebx, eax
jmp 0x434f4c
mov eax, dword [ebp + 0x10]
call fcn.0042c494
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x14]
call fcn.00403768
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 8]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 8]
pop edx
call fcn.00429224
jmp 0x434f4c
cmp dword [ebp + 0x10], 0
jne 0x434e94
push 0
push 0x20
push 0x20
push 1
push 0x434f78
mov eax, dword [0x43b96c]
mov eax, dword [eax]
push eax
call sub.user32.dll_LoadImageA
mov ebx, eax
jmp 0x434f4c
push 0
push 0x10
push 0x10
push 1
push 0x434f78
mov eax, dword [0x43b96c]
mov eax, dword [eax]
push eax
call sub.user32.dll_LoadImageA
mov ebx, eax
jmp 0x434f4c
mov eax, dword [0x43b9d8]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
call fcn.0042b8c0
mov ebx, eax
xor bl, 1
and ebx, 0x7f
jmp 0x434f4c
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
call fcn.00434a5c
mov ebx, eax
jmp 0x434f4c
lea eax, [ebp - 4]
mov edx, dword [ebp + 0x10]
call fcn.00403768
mov eax, dword [ebp - 4]
call fcn.0042d0ec
mov ebx, eax
jmp 0x434f4c
call fcn.0042d11c
mov ebx, eax
jmp 0x434f4c
mov eax, dword [0x43b8f8]
mov eax, dword [eax]
mov edx, dword [ebp + 8]
call fcn.00435970
test eax, eax
je 0x434f4c
lea ecx, [ebp - 4]
mov eax, dword [0x43b93c]
mov eax, dword [eax]
mov edx, esi
call fcn.004359dc
cmp dword [ebp - 4], 0
je 0x434f4c
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x18]
neg eax
sbb eax, eax
neg eax
push eax
mov eax, dword [0x43b8f8]
mov eax, dword [eax]
mov ecx, esi
mov edx, dword [ebp + 8]
call fcn.004358dc
mov ebx, eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x434f6e
lea eax, [ebp - 8]
mov edx, 2
call fcn.004035d8
ret