Function at 0x4031b0
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413030
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x4370a0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], str.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
mov dword [ebp - 4], 0
push str.START
mov ecx, dword [ebp - 0x18]
call fcn.00402a40
mov ecx, dword [ebp - 0x18]
call fcn.00402b30
cmp dword [0x439210], 0
je 0x4032a8
push str.LEIDO
mov ecx, dword [ebp - 0x18]
call fcn.00402a40
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [0x439210]
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.00402c70
mov byte [ebp - 0x11], al
movzx edx, byte [ebp - 0x11]
test edx, edx
je 0x403292
push str.SUMBITINMEMORY
mov ecx, dword [ebp - 0x18]
call fcn.00402a40
mov dword [ebp - 0x1c], 0
mov eax, dword [0x439228]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x40327f
push str.NORUN
mov ecx, dword [ebp - 0x18]
call fcn.00402a40
mov eax, 0x12c
jmp 0x4032e4
push 0x422b3c
mov ecx, dword [ebp - 0x18]
call fcn.00402a40
xor eax, eax
jmp 0x4032e4
push str.NOTSUMBITMEMORY
mov ecx, dword [ebp - 0x18]
call fcn.00402a40
mov eax, 0xc8
jmp 0x4032e4
push str.NOTREAD
mov ecx, dword [ebp - 0x18]
call fcn.00402a40
mov eax, 0x64
jmp 0x4032e4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4