Function at 0x300fbea5
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 8]
push esi
push 0x300fa911
mov dword [0x3027446c], eax
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call fcn.300fb924
xor esi, esi
cmp eax, esi
mov dword [ebp + 8], eax
jne 0x300fc0ee
lea eax, [ebp - 0x1c]
push eax
call fcn.300f0111
test al, al
jne 0x300fbeff
push esi
push 0x326b6562
call fcn.3010aa60
mov dword [ebp + 8], 0xb
jmp 0x300fc0ee
call fcn.300fa80c
cmp eax, 1
mov dword [ebp - 4], eax
jne 0x300fbf24
call fcn.300eefe1
cmp eax, 2
je 0x300fbf24
push esi
push 0x3671786d
call fcn.3010aa60
mov dword [ebp - 4], esi
mov eax, dword [ebp - 4]
sub eax, esi
push edi
mov edi, 0xfa6
je 0x300fbf45
dec eax
je 0x300fbf41
push esi
push 0x33766462
call fcn.3010aa60
jmp 0x300fbf4c
push 1
jmp 0x300fbf46
push esi
push edi
call fcn.3010bae9
push dword [ebp - 4]
call fcn.300fff3f
test al, al
je 0x300fbf78
cmp dword [0x30276470], 1
jne 0x300fbf78
push esi
push 0x33687831
call fcn.3010aa60
mov dword [ebp + 8], 0xb
jmp 0x300fc0ed
push ebx
call fcn.300ff6cb
mov ebx, eax
sub eax, esi
je 0x300fbfa9
dec eax
je 0x300fbfa5
dec eax
je 0x300fbf97
push esi
push 0x33766463
call fcn.3010aa60
jmp 0x300fbfb4
push 2
push 0xfa8
call fcn.3010bae9
jmp 0x300fbfc5
push 1
jmp 0x300fbf99
push esi
push 0xfa8
call fcn.3010bae9
cmp ebx, esi
jne 0x300fbfc5
cmp dword [0x30276470], 1
je 0x300fc0ec
mov eax, dword [ebp - 4]
sub eax, esi
je 0x300fbfe0
dec eax
je 0x300fbfdc
push esi
push 0x33766464
call fcn.3010aa60
jmp 0x300fbfe7
push 1
jmp 0x300fbfe1
push esi
push edi
call fcn.3010bae9
mov eax, dword [ebp - 4]
sub eax, esi
push esi
je 0x300fc07c
dec eax
je 0x300fc018
dec eax
je 0x300fc008
push 0x326b6563
call fcn.3010aa60
jmp 0x300fc0ec
push esi
push 0x1f6
call fcn.300fabbd
push 2
pop edi
jmp 0x300fc048
push esi
push 0x1f7
call fcn.300fabbd
xor eax, eax
cmp dword [0x30276470], 1
setne al
add eax, 3
mov edi, eax
call fcn.300fbe9a
test al, al
jne 0x300fc048
push esi
push 0x387a3834
call fcn.3010aa60
mov eax, dword [0x30276478]
cmp eax, esi
je 0x300fc060
cmp dword [0x30276470], 1
jne 0x300fc060
push eax
call fcn.300faa4a
lea eax, [ebp - 0x1c]
push eax
push edi
push dword [ebp + 0x14]
call fcn.300f9e3b
mov edi, eax
cmp edi, esi
jne 0x300fc0a6
mov dword [ebp + 8], 8
jmp 0x300fc0ec
push esi
push 0x1f5
call fcn.300fabbd
xor eax, eax
cmp dword [0x30276470], 1
setne al
mov edi, eax
call fcn.300fbe8f
test al, al
jne 0x300fc048
push esi
push 0x33766465
jmp 0x300fc043
push esi
call fcn.300fdbda
cmp edi, 3
jne 0x300fc0ec
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push esi
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, esi
jne 0x300fc0cd
push esi
push 0x326b6566
jmp 0x300fc0e0
push 0xc
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x300fc0ec
push esi
push 0x326b6567
call fcn.3010aa60
mov dword [ebp + 8], 0xe
pop ebx
pop edi
call fcn.300f02a6
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push esi
push esi
push 0x3e7
call fcn.300fabbd
push dword [ebp + 8]
push 0x1980
call fcn.3010bae9
call fcn.300fab55
cmp dword [ebp + 8], esi
pop esi
je 0x300fc124
mov eax, dword [ebp + 8]
leave
ret 0x10