Function at 0x404bf0
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x413d00
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x48a198]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x24], str.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
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x28], str.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
mov eax, dword [0x48b2e8]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xffffffff
jne 0x404c73
push str.NORUN
mov ecx, dword [ebp - 0x14]
call fcn.004063c0
mov eax, 0x12c
jmp 0x404cc0
push 0x41ff2c
mov ecx, dword [ebp - 0x14]
call fcn.004063c0
xor eax, eax
jmp 0x404cc0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret